This privacy policy explains how personal data is collected and handled when using the Betterscale website (betterscale.ai) and social media profiles. Personal data refers to any information identifying a specific person, such as names or IP addresses.
Contact Details
Data Controller:
N.L. Tech Solutions UG
Rodensteinstr. 54a, 64625 Bensheim, Germany
Email: info@betterscale.ai
Legal Representative: Nolan Lewis
Data Protection Officer:
heyData GmbH
Schützenstraße 5, 10117 Berlin
www.heydata.eu
Email: datenschutz@heydata.eu
Legal Bases for Data Processing
The organization relies on several legal foundations under GDPR Article 6:
- Explicit user consent for certain processing activities
- Contract performance when users purchase products or services
- Legal obligations requiring data retention
- Legitimate business interests, including website technical operation
Data Transfers Outside the EEA
Data transfers to countries outside the European Economic Area use adequacy decisions where available (such as for Great Britain, Canada, and Israel). For U.S. transfers, the EU-U.S. Data Privacy Framework provides protection when service providers certify compliance. Standard contractual clauses secure transfers in other cases, with additional protections often included beyond minimum requirements.
Data Storage and Retention
Personal data is retained only as long as necessary for its intended purpose. Data is deleted when no longer needed, unless legal retention obligations apply. Where deletion conflicts with other lawful purposes, data is blocked from further processing while remaining stored for compliance reasons, such as tax or commercial requirements.
Data Subject Rights
Individuals have the following rights regarding their personal data:
- Access to personal information
- Correction or deletion of inaccurate data
- Restriction of processing activities
- Objection to processing
- Data portability to other services
- Revocation of previously given consent
Complaints about data handling may be filed with supervisory authorities at bfdi.bund.de
Data Provision Requirements
Customers and prospective customers must provide necessary personal information for establishing, executing, and terminating business relationships. Without this data, the organization cannot conclude contracts or provide services. Mandatory fields are clearly marked.
Automated Decision-Making
The organization does not routinely use fully automated decisions to establish business relationships. When such processes occur, affected parties are notified as legally required.
Contact and Inquiries
When users contact the organization via email or phone, provided information is stored to respond to questions. This processing is justified by legitimate business interests under GDPR Article 6(1)(f). Data is deleted when responses are complete, unless legal retention obligations apply.
Competitions
Occasional competitions collect participant data to determine and notify winners, after which information is deleted. Existing customers may receive separate competition offers. Processing is based on legitimate business interests.
Customer Surveys
The organization conducts surveys to understand customer preferences. Collected data is processed under legitimate business interests. Survey information is deleted following results evaluation.
Newsletter Services
For Existing Customers
The organization notifies previous customers about offers via email unless they object. This relies on legitimate business interests. Recipients can unsubscribe through links in messages or by contacting the organization.
For Newsletter Subscribers
Interested parties can subscribe to a free newsletter by selecting designated fields. Subscription requires explicit consent. Recipients can revoke consent anytime via newsletter links or email contact.
The organization measures newsletter opening and click-through rates to understand audience interests, based on recipient consent.
Service Provider
Newsletters are sent using Mailchimp by Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. The provider processes content, usage, and contact data in the United States. Privacy details are available at mailchimp.com/legal/privacy
Website Data Processing
Notice for German Visitors
Website visitors' browsers transmit information stored on devices (cookies) or already present (IP addresses). This occurs under two legal frameworks:
- Information necessary for requested website services relies on Section 25(2) no. 2 of Germany's Telekommunikation-Digitale-Dienste-Datenschutzgesetz (TDDDG)
- Other information collection requires visitor consent under Section 25(1) TDDDG
Subsequent processing complies with GDPR provisions.
Informative Website Use
During basic website browsing without additional information submission, the organization collects data transmitted by browsers to ensure stability and security. This represents a legitimate interest. Collected information includes:
- IP address
- Request date and time
- GMT time zone difference
- Requested page content
- HTTP status codes
- Data transfer amounts
- Referring website
- Browser type and version
- Operating system information
- Browser language and version
Log files containing this data are deleted when no longer necessary, typically within 14 days.
Web Hosting Providers
Vercel Inc. (340 S Lemon Ave Unit 4133, Walnut, CA, USA) hosts the website in the European Union, processing content, usage, and contact data. Further details are available at vercel.com/legal/privacy-policy
Framer B.V. (Rozengracht 207 B, 1016LZ Amsterdam, Netherlands) also hosts the website, processing data in the United States. Privacy information is at framer.com/legal/privacy-statement
Data transfers to Framer are secured by standard contractual clauses under GDPR Article 46(2)(c).
Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA) provides content delivery services, processing data in the United States. Privacy terms are at cloudflare.com/privacypolicy
Cloudflare transfers are protected by EU adequacy decisions under GDPR Article 45(3).
Contact Form
Information submitted through website contact forms is stored to respond to inquiries, justified by legitimate business interests. Data is deleted when responses are complete unless legal obligations require retention.
Job Applications
Applicants submitting vacancy applications provide data processed for employment evaluation. Required information is justified under GDPR Article 88 and German Data Protection Act Section 26(1). Voluntary information relies on applicant consent.
The organization requests that applicants avoid including political opinions, religious beliefs, and sensitive personal information. If provided despite this request, such information is processed based on applicant consent under GDPR Article 9(2)(a).
Applicants may consent to data retention for future opportunities. This processing is based on explicit consent.
Application data is shared with HR personnel, recruiting processors, and involved employees. Following rejection, data is deleted within six months unless applicants consented to future consideration, in which case data is retained for one year.
Appointment Booking
Website visitors can schedule appointments through the site. The organization processes metadata and communication information to provide this user-friendly service, justified by legitimate interests. Third-party tools may be involved.
Service Offerings
The organization processes the following information for service orders:
- First and last name
- Email address
- Company name
This processing enables contract performance. Data is shared with Pipedrive OÜ (Mustamäe tee 3a, 10615 Tallinn, Estonia) as necessary for service delivery, justified by contract requirements.
Payment Processing
Payment processors are independent data controllers. Stripe Payments Europe, Ltd. (Ireland) processes payment information submitted during ordering to fulfill contracts.
Technically Necessary Cookies
Cookies enable website functionality and user-friendly features. Technically necessary cookies are justified by legitimate business interests. Specific uses include:
- Storing search terms
- Maintaining login information
Third-Party Services
Google Tag Manager
Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) operates Google Tag Manager for analytics and advertising. The provider processes usage data in the United States.
Processing is based on explicit user consent, which can be revoked without affecting prior lawful processing. Data is deleted when collection purposes no longer apply. Further information is available at policies.google.com/privacy
Data transfers to the United States are protected by EU adequacy decisions under GDPR Article 45(3).
heyData
heyData GmbH (Schützenstraße 5, 10117 Berlin, Germany) provides a privacy certification seal displayed on the website. The provider processes masked metadata in the EU, preventing visitor identification.
Processing is justified by legitimate interests in demonstrating privacy compliance. Further information is available at heydata.eu/en/privacy-policy
Social Media Presence
The organization maintains profiles on social networks to present services. Network operators regularly process user data for advertising targeting based on online behavior. This includes creating interest profiles used for personalized advertisements across platforms and storing behavioral information in cookies.
Network operators may merge this information with other data, creating comprehensive profiles. Users should consult each platform's data protection policy and adjust advertising settings to limit processing.
If users contact the organization through social profiles, their information is processed to respond to inquiries, justified by legitimate business interests.
Operator: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Privacy policy: facebook.com/policy.php | Ad settings: facebook.com/settings?tab=ads
The organization and Facebook are joint controllers under GDPR Article 26 for visitor profile data. Facebook explains data processing at facebook.com/legal/terms/information_about_page_insights_data. Users can exercise rights against either party, though the organization may forward requests to Facebook. Direct Facebook contact typically provides faster responses.
Operator: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Privacy policy: help.instagram.com/519522125107875
TikTok
Operator: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
Privacy policy: tiktok.com/de/privacy-policy
YouTube
Operator: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Privacy policy: policies.google.com/privacy?hl=de
Operator: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Privacy policy: linkedin.com/legal/privacy-policy | Ad opt-out: linkedin.com/psettings/guest-controls/retargeting-opt-out
Policy Updates
The organization reserves the right to modify this privacy policy with future effect. The current version is always available on the website.
Questions and Contact
Questions or comments about this privacy policy should be directed to: info@betterscale.ai
Betterscale.ai ist eine Marke der N.L. Tech Solutions UG, Rodensteinstr. 54a, 64625 Bensheim, Germany
Kontakt: info@betterscale.ai