Privacy Policy

Legal information and transparency

Last updated: October 2025

1. Controller

Upswing S.L.

Camino Can Baus 2

07110 Bunyola, Spain

Email: reach@theconsumer.ai

Represented by: Fabian Roschig

2. General Information

This privacy policy explains how we process personal data when you visit our website www.musterfirma.de, contact us, or register for our waitlist.

We comply with the EU General Data Protection Regulation (GDPR) and all other relevant data protection laws.

3. Hosting and Technical Infrastructure

Our website is hosted by Webflow, Inc., headquartered in the European Union.

Webflow processes data on our behalf under a Data Processing Agreement (DPA) in compliance with Art. 28 GDPR.

Webflow may log technical data (IP address, browser type, device information) to ensure secure and efficient website delivery.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in website functionality and security).

4. Data Collection and Processing on the Website

a) Server Log Files

When you access our website, we automatically collect and store information transmitted by your browser:

  • IP address (shortened/anonymised where possible)
  • Date and time of access
  • Browser type/version
  • Operating system
  • Referrer URL

This data is required for technical delivery and troubleshooting.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in technical security).

b) Contact Form (Webflow)

If you contact us via our online form, we collect:

  • Name
  • Email address
  • Company
  • Position
  • Message content

We use this data solely to respond to your inquiry.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual communication) or Art. 6(1)(f) GDPR (legitimate interest in customer support).

Your data may be processed in HubSpot (see section 7).

c) Waitlist Registration (Typeform)

If you register for our waitlist via Typeform, we collect:

  • Name
  • Email
  • Company
  • Position
  • Market research preferences

Typeform is operated by Typeform S.L., Barcelona, Spain, which acts as our processor.

The form data is transmitted securely to our HubSpot system for lead management.

Legal basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(b) GDPR (pre-contractual steps).

5. Cookies and Consent Management

We use Cookiebot by Usercentrics A/S to obtain and manage cookie consent in compliance with GDPR.

You can change or withdraw your consent at any time via the cookie banner or your browser settings.

Categories of cookies used:

  • Necessary (essential website functionality)
  • Statistics (Google Analytics 4)
  • Marketing (HubSpot, Typeform analytics)

Legal basis: Art. 6(1)(a) GDPR for non-essential cookies.

6. Analytics and Tracking Tools

a) Google Tag Manager (GTM)

We use Google Tag Manager to manage scripts and analytics tags.

The Tag Manager itself does not collect personal data.

Provider: Google Ireland Limited, Dublin, Ireland.

Legal basis: Art. 6(1)(f) GDPR (efficient management of tracking tools).

b) Google Analytics 4 (GA4)

We use Google Analytics 4 to analyse website traffic.

Google processes this data on servers within the EU (or the US, under Standard Contractual Clauses).

Collected data: IP address (anonymised), browser and device information, usage behaviour, referrer URLs.

Legal basis: Art. 6(1)(a) GDPR (consent).

You can withdraw consent at any time via Cookiebot or by installing the browser add-on:

https://tools.google.com/dlpage/gaoptout

7. Customer Relationship Management (HubSpot)

We use HubSpot Inc., 25 First Street, Cambridge, MA, USA, for contact management and marketing automation.

HubSpot acts as our processor under a DPA and EU Standard Contractual Clauses.

Personal data from forms and interactions (e.g., contact requests, waitlist) are stored in HubSpot to manage communications.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in efficient communication and marketing).

You may object to the use of your data for marketing purposes at any time.

8. Fonts and Design Elements

This website uses Google Fonts, hosted locally through Webflow’s EU servers.

No connection to Google servers is established during loading.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in consistent presentation).

9. Data Retention

We store personal data only as long as necessary to fulfil the purpose of collection or as required by law.

Contact and waitlist data are deleted upon request or when the purpose (e.g., product launch communication) has expired.

10. Your Rights under the GDPR

You have the following rights:

  • Access to your personal data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure (“right to be forgotten”, Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)
  • Withdrawal of consent (Art. 7(3) GDPR)

To exercise your rights, please contact: info@musterfirma.de

If you believe we have processed your data unlawfully, you have the right to lodge a complaint with a data protection authority, e.g.

Bavarian Data Protection Authority (BayLDA) — https://www.lda.bayern.de

11. Data Security

We use SSL/TLS encryption, secure form transmission, and industry-standard protection measures to prevent unauthorised access or disclosure.

12. Updates to this Policy

We may update this Privacy Policy from time to time.

The current version will always be available on our website.

‍