Deutsch ← Back to home

Privacy policy

Convenience translation. Only the German Datenschutzerklärung is legally binding.

Last updated: October 2026

1. Controller and contact

The controller within the meaning of the General Data Protection Regulation (GDPR), other national data protection laws and other data protection provisions is:

scale.
Owner: Paul Gardow
Am Lindenplatz 15
10319 Berlin
Germany

Email: info@scale.gmbh
Phone: +49 151 55649405
Website: https://scale.gmbh/en

We have not appointed a data protection officer, as the legal requirements for doing so are not met. If you have any questions about data protection, please contact us directly at the address above.

2. General information on data processing

We only process personal data to the extent necessary to provide a functioning website, to answer your enquiries and to deliver our services.

Legal bases: Where we ask for consent, Art. 6(1)(a) GDPR is the legal basis. Processing for the performance of a contract or for pre-contractual measures is based on Art. 6(1)(b) GDPR, processing to comply with legal obligations on Art. 6(1)(c) GDPR and processing to protect legitimate interests on Art. 6(1)(f) GDPR. Storing information on your device or accessing it is additionally governed by Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).

Erasure and storage period: Personal data is erased or blocked as soon as the purpose of storage no longer applies. Data is only stored for longer if required by law, in particular due to retention periods under commercial or tax law (up to ten years).

Necessity of providing data: You are neither legally nor contractually obliged to provide personal data. Without certain information, however, we cannot process your enquiry or booking.

Audience measurement only with consent: We only use Google Analytics if you agree in the cookie banner (see section 7). There is no ad tracking, no remarketing and no profiling for advertising purposes.

3. Hosting

This website is hosted by Hostinger International Ltd. (61 Lordou Vironos Street, 6023 Larnaca, Cyprus) and Hostinger operations, UAB (Švitrigailos str. 34, 03230 Vilnius, Lithuania). When you visit our website, the hosting provider processes technically necessary connection data (in particular IP address, time of access, page requested and browser information) in order to deliver the website and ensure secure operation.

We have concluded a data processing agreement with the hosting provider in accordance with Art. 28 GDPR. The legal basis is our legitimate interest in providing our website securely and efficiently (Art. 6(1)(f) GDPR).

4. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website exclusively uses SSL/TLS-encrypted connections. You can recognise an encrypted connection by the address bar of your browser starting with “https://” and by the padlock symbol. When encryption is active, data you send to us cannot be read by third parties.

5. Server log files

The hosting provider automatically collects and stores information in so-called server log files, which your browser transmits automatically. This includes:

This data is not combined with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free presentation, security and optimisation of our website. The data is automatically deleted after 14 days at the latest.

6. Cookies, local storage and consent management

When you first visit our website, a banner asks for your consent to two optional categories:

Necessary functions are always active. Without your consent, no analytics cookies are set and no connection is made to Google or Cal.com. “Accept all” and “Necessary only” are offered as equal choices.

Storing your choice: We store your decision in your browser’s local storage under the entry scale-consent. It only contains your choice per category and the time it was made, is not transmitted to us and is disregarded after twelve months, at which point we ask again. This storage is strictly necessary so that we can respect your decision (Section 25(2) no. 2 TDDDG). The legal basis is our legitimate interest in applying your choice without asking again on every page view (Art. 6(1)(f) GDPR).

Changing or withdrawing consent: You can change or withdraw your choice at any time with effect for the future via the “Cookie settings” link at the bottom of every page. If you withdraw consent for “Statistics”, the Google Analytics cookies in your browser are deleted. If you tick “Remember for future visits” next to the appointment calendar, this counts as consent to the “External content” category and is also stored in the scale-consent entry.

Once the appointment calendar has been loaded, Cal.com may set its own cookies (see section 11).

7. Web analytics with Google Analytics

If you have consented to the “Statistics” category, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). It helps us understand which content is in demand, how visitors find us and where the website can be improved.

Data processed: pages viewed and time spent, interactions such as clicks, scroll depth and downloads, the previously visited page (referrer), approximate location (country and region), device type, operating system, browser, screen resolution and language, as well as a randomly generated identifier that Google uses to recognise returning visits. According to Google, Google Analytics 4 does not store IP addresses; the IP address is only used to determine the approximate location and is then discarded. The data is pseudonymous; we do not combine it with your name or other information about you.

Cookies: Google Analytics sets the cookies _ga (distinguishing visitors) and _ga_YTBK10V677 (session state) with a lifetime of up to two years.

Settings: Google Signals and the use of data for personalised advertising are disabled. No advertising cookies are set (Google Consent Mode with ad storage denied). Event data in Google Analytics is deleted automatically after two months.

Data processing agreement and transfers to third countries: We have concluded a data processing agreement with Google in accordance with Art. 28 GDPR (Google Ads Data Processing Terms). A transfer to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR); the EU Standard Contractual Clauses apply in addition.

Legal basis and withdrawal: The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future via “Cookie settings” at the bottom of every page. Further information can be found in Google’s privacy policy: https://policies.google.com/privacy.

8. Fonts and embedded content

Fonts, images and scripts on this website are loaded directly from our own server. When you visit the website, no connection is made to third-party providers such as Google Fonts, content delivery networks or social media services. The only exceptions apply after your consent: Google Analytics (see section 7) and the Cal.com appointment calendar (see section 11).

9. Contact by email and phone

If you contact us by email or phone, we process the information you provide (in particular your name, contact details and the content of your message) in order to handle your enquiry and answer follow-up questions. For email we use Microsoft 365 (Exchange Online) provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Emails are stored on Microsoft servers. We have concluded a data processing agreement with Microsoft in accordance with Art. 28 GDPR (Microsoft Products and Services Data Protection Addendum). A transfer to the USA cannot be ruled out; Microsoft is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR).

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or pre-contractual measures, otherwise our legitimate interest in handling enquiries (Art. 6(1)(f) GDPR). We delete your enquiry once it has been dealt with, unless statutory retention obligations apply.

10. Project request assistant (“Request a project”)

The project request assistant lets you tell us about your needs in a structured way. We ask for: the services you are interested in, your current situation, timeline, optionally your current website, your name, optionally your company, your email address, optionally your phone number and optionally a message.

Your entries are initially processed only in your browser and are not automatically transmitted to us. When you click “Send request”, your email program opens with a prepared message to info@scale.gmbh. We only receive your details once you send this email yourself; further processing is governed by section 9.

Before sending, you confirm that we may store your details to process your request and contact you about it. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures at your request) or Art. 6(1)(a) GDPR. A hidden field helps protect against automated spam submissions; no additional data about you is collected in the process.

11. Appointment booking (Cal.com)

To book appointments we use the Cal.com service of Cal.com, Inc. (USA), provided via the domain app.cal.com. Personal data may be transferred to the USA in the process. We have concluded a data processing agreement with Cal.com, including the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Embedding only with consent: The calendar is only loaded when you click “Load calendar” or consent to the “External content” category in the cookie banner. Only then is a connection to Cal.com established, during which your IP address in particular is transmitted and Cal.com may set cookies. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw it at any time with effect for the future via “Cookie settings” at the bottom of every page; cookies already set by Cal.com can be deleted in your browser settings. Alternatively, you can open the booking page directly in a new tab on app.cal.com.

Data processing when booking: When you book an appointment, Cal.com processes your entries (in particular name, email address and optionally phone number and message) in order to organise the appointment and send confirmations and reminders (Art. 6(1)(b) GDPR). Further information can be found in Cal.com’s privacy policy: https://cal.com/privacy.

Our website contains simple links to external services, for example to LinkedIn, Cal.com and websites we have built for clients. These are not embedded plugins: data is only transmitted to the respective provider when you click a link. From that point on, the privacy policy of the respective provider applies.

13. Data processing as part of our services

When building and maintaining websites, online shops and business apps, connecting systems and carrying out migrations (for example moving mailboxes, DNS settings or servers), we may gain access to personal data of our clients and their customers.

Processing on behalf of clients: Where we process personal data on behalf of our clients, we conclude a data processing agreement in accordance with Art. 28 GDPR before processing begins. We process the data exclusively on the client’s instructions and only to the extent required for the respective service. Access credentials are stored encrypted and deleted or returned to the client after the project has been completed.

AI-assisted tools: We may use AI-assisted tools as aids during development. We only use providers that contractually guarantee not to use transmitted data to train their models. Client data is not used to train AI models unless this has been expressly agreed in writing.

Technical and organisational measures: We use appropriate measures to ensure the security of the data processed, in particular encryption in transit and at rest, access controls on a need-to-know basis, two-factor authentication and regular security updates.

14. Your rights as a data subject

You have the following rights with regard to your personal data:

To exercise your rights, an informal message to info@scale.gmbh is sufficient.

Automated decision-making: There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

15. Right to object in individual cases

Where we process your personal data on the basis of legitimate interests under Art. 6(1)(f) GDPR, you have the right under Art. 21 GDPR to object to the processing on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Please send your objection to info@scale.gmbh.

16. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The supervisory authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information)
Alt-Moabit 59–61
10555 Berlin, Germany
Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de

17. Updates to this privacy policy

This privacy policy was last updated in October 2026. We update it when legal requirements or our services change, for example when we introduce new services. The version published on this page applies.