Privacy Policy

01Who We Are

Consulting and Connection GmbH operates under the brand name "scalingpartners.io" and is referred to as "scalingpartners.io", "we", "us" or "our" in this Privacy Policy. "You" means the individual visiting our websites or using our services.

We are the controller responsible for the processing of your personal data within the meaning of the EU General Data Protection Regulation (GDPR). Our contact details are listed in section 16.

We understand that your privacy is important to you. This Privacy Policy explains which personal data we collect when you visit our websites, fill out our forms or surveys, book a call, or work with us, how we use it, and which rights you have.

02Information We Collect

Information you provide to us

• Contact details such as your name, email address and phone number
• Business information you share in our application forms and surveys, e.g. company name, website, revenue range, ad spend and goals
• Information you provide when booking or attending a call, and the content of your messages to us
• Billing and payment information if you become a client

Information we collect automatically

• Device and browser information, IP address, referral URL, pages viewed and time of visit
• Campaign parameters (e.g. UTM tags) and information about how you interact with our pages, emails and ads
• Information collected via cookies, pixels and similar technologies (see section 05)

Non-personal information is information that cannot identify you, such as aggregated or anonymised statistics. We may use it without restriction.

03How We Use Your Data

We use your personal data only where we have a legal basis under Art. 6 (1) GDPR:

• To prepare and perform a contract (Art. 6 (1)(b)): to review your application, schedule and hold consultations, provide our services, invoice and support you.
• Based on your consent (Art. 6 (1)(a)): for non-essential cookies and tracking, and for marketing communications where consent is required. You can withdraw your consent at any time with effect for the future.
• To comply with legal obligations (Art. 6 (1)(c)): e.g. statutory retention obligations under tax and commercial law.
• Based on our legitimate interests (Art. 6 (1)(f)): to operate and secure our websites, measure and improve our pages and advertising, contact business prospects who have reached out to us, and establish, exercise or defend legal claims.

We do not intentionally collect special categories of personal data (Art. 9 GDPR, e.g. health data). Please do not send us such data. We do not use automated decision-making, including profiling, that produces legal effects concerning you.

04Our Data Protection Principles

In line with Art. 5 GDPR, we make sure that personal data is:

• Processed lawfully, fairly and in a transparent manner
• Collected for specified, explicit and legitimate purposes only
• Adequate, relevant and limited to what is necessary
• Accurate and, where necessary, kept up to date
• Kept no longer than necessary for the purposes for which it was collected
• Protected by appropriate technical and organisational measures

05Cookies & Similar Technologies

We use cookies and similar technologies such as pixels and web beacons. A cookie is a small text file stored on your device. Technically necessary cookies are used to operate our websites (Section 25 (2) TDDDG, Art. 6 (1)(f) GDPR). Analytics and marketing cookies and pixels are only used with your consent (Section 25 (1) TDDDG, Art. 6 (1)(a) GDPR), which you can give or withdraw via our cookie settings.

We may also use web beacons in emails to understand whether messages were opened or clicked, so we can improve our communication.

You can also block or delete cookies in your browser settings. If you decline cookies, some features of our websites may not work fully.

06Third-Party Services We Use

We work with carefully selected service providers who process data on our behalf under data processing agreements (Art. 28 GDPR):

• HighLevel / LeadConnector (HighLevel Inc., USA): hosting of our funnel pages, forms, surveys, calendar booking, CRM and email/SMS communication.
• Wistia (Wistia Inc., USA): hosting and playback of our videos. When you play a video, Wistia processes usage data such as your IP address and viewing behaviour.
• Meta Pixel & Conversions API (Meta Platforms Ireland Ltd.): measuring the effectiveness of our Facebook and Instagram ads and showing relevant ads. Used only with your consent. Meta and we may be joint controllers for parts of this processing (Art. 26 GDPR).
• Google Fonts (Google Ireland Ltd.): display of fonts. Your browser connects to Google servers, which transmits your IP address.

Please refer to the respective providers' privacy policies for further information about how they process data.

07Sharing of Personal Information

We do not sell or rent your personal data. We only share it:

• with service providers that help us run our business (see section 06), who may only use it to provide their services to us
• with payment providers, banks and our tax advisors where required to process payments and meet legal obligations
• with authorities or courts where we are legally required to, or where necessary to protect our rights or the safety of others
• in connection with a merger, acquisition or sale of all or part of our business

08International Data Transfers

Some of our service providers are located in, or access data from, countries outside the European Economic Area (EEA), in particular the USA. In these cases we ensure an adequate level of data protection, e.g. through the provider's certification under the EU-U.S. Data Privacy Framework or through the EU Standard Contractual Clauses (Art. 46 GDPR).

09Communications

If you submit a form, apply or book a call, we may contact you by email, phone or SMS regarding your request and our services. You can unsubscribe from marketing emails at any time via the link in each email or by contacting us. Please note that email communication cannot be guaranteed to be fully secure against unauthorised interception.

10Data Retention

We keep personal data only as long as necessary for the purposes described in this policy. Data from enquiries and applications that do not lead to a collaboration is generally deleted within 24 months after our last contact, unless you have consented to longer storage. Client data is kept for the duration of our collaboration and then deleted, unless statutory retention obligations apply (e.g. up to 10 years for accounting records under German commercial and tax law).

11Data Security

We use appropriate technical and organisational measures to protect your personal data against loss, misuse, alteration and unauthorised access. These include encrypted connections (SSL/TLS), access restricted to authorised personnel and service providers who are bound to confidentiality, data minimisation and the secure deletion of data that is no longer needed. Despite these precautions, no transmission or storage method is completely secure, and we cannot guarantee absolute security.

12Your Rights

Under the GDPR you have the right to:

• Access the personal data we hold about you (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure of your data (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interests, and at any time to processing for direct marketing (Art. 21)
• Withdraw your consent at any time with effect for the future (Art. 7 (3))
• Lodge a complaint with a data protection supervisory authority (Art. 77). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

To exercise your rights, simply contact us using the details in section 16. We may need to verify your identity before responding.

13Third-Party Links & Advertising

Our websites may contain links to other websites, and we advertise on third-party platforms such as Facebook and Instagram. We are not responsible for the privacy practices or content of these third parties. If you interact with them, their own privacy policies apply.

14Children's Privacy

Our services are directed exclusively at businesses and are not intended for children. We do not knowingly collect personal data from anyone under the age of 16. If you believe we have collected such data, please contact us and we will delete it.

15Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. The current version is always available on this page, and the date at the top shows when it was last updated. For material changes, we will provide a notice on our website or contact you by email where appropriate.

16Contact

If you have any questions about this Privacy Policy or our data practices, or want to exercise your rights, please contact us: