Privacy notice

Data Protection, Responsibility, and Scope

We respect the privacy of our customers and other interested parties and comply with applicable laws to protect your privacy. These laws include, in particular:

This privacy notice applies to:

The following categories of data subjects are covered by this data protection notice:

The party responsible for processing your personal data under this Privacy Notice is:

Upstrive gmbH
Techno Z Urstein
Ûrstein S 15
5412 Puch bei Hallein
Austria
info@upstrive.de

In the following, we explain:

Purposes for which personal data is processed

Website hosting

To make our website accessible to you and ensure its secure and reliable operation, we rely on website hosting services. This involves storing website content, managing technical infrastructure, and processing certain personal data that is automatically transmitted when you visit our website. The processing of this data is necessary to maintain the functionality, security, and performance of our website, as well as to detect and prevent misuse or technical issues.

Categories of personal data that are processed:

Legal basis for processing:

Involved data processors:

Additional information:

Use of a Content Delivery Network (CDN) for optimizing the speed of content delivery

To ensure that our website loads quickly and reliably for all users, we use a Content Delivery Network (CDN). A CDN is a network of servers distributed across different locations that helps deliver website content efficiently by storing copies of our website closer to where users are located. This improves website performance, reduces loading times, and enhances the overall user experience.

Categories of personal data that are processed:

Legal basis for processing:

Involved data processors:

Additional information:

Facebook-Fanpage

The collection and processing of personal data using Meta services is carried out under contractually agreed joint responsibility with Meta Platforms Ireland Limited.

We operate a Facebook Fanpage to provide information about our company, interact with users, respond to inquiries, and promote our products and services. Through the Fanpage, we aim to foster communication and engagement with interested parties, customers, and the general public. The operation of the Fanpage enables us to share updates, receive feedback, and build a community around our offerings, while also allowing users to contact us directly via Facebook’s messaging and comment functions. The collection and processing of personal data is carried out under contractually agreed joint responsibility with Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland.

Categories of personal data that are processed:

Legal basis for processing:

Involved data processors:

Additional information:

Establish contact via email

We process your personal data when you contact us via e-mail in order to respond to your inquiries, provide you with requested information, or otherwise communicate with you. This enables us to address your questions, support requests, or other concerns efficiently and effectively.

Categories of personal data that are processed:

Legal basis for processing:

Involved data processors:

Additional information:

Operating a consent management system

To ensure compliance with data protection laws and to respect your privacy preferences, we operate a consent management system on our website. This system enables you to make informed choices about the collection and use of your personal data, records your consent decisions, and ensures that your preferences are honored throughout your use of our website.

Categories of personal data that are processed:

Legal basis for processing:

Analysis of the behavior of website visitors

The collection and processing of personal data using Meta services is carried out under contractually agreed joint responsibility with Meta Platforms Ireland Limited.

We analyze how users interact with our website to better understand usage patterns, identify areas for improvement, and enhance the overall user experience. This helps us ensure that our website functions effectively, is easy to use, and meets the needs of our visitors.
We may use technologies in the form of code snippets to monitor and optimize advertising campaigns and attract new customers.
The following technologies are in use:

Categories of personal data that are processed:

Legal basis for processing:

Involved data processors:

Additional information:

Providing a newsletter

We offer the option to register for our newsletter so that we can regularly send you news about us and our services.

Categories of personal data that are processed:

Legal basis for processing:

Involved data processors:

Providing a contact form

To enable users to get in touch with us, we provide a contact form on our website/application. The information submitted via this form is used solely to process and respond to your inquiry, request, or feedback. This helps us address your questions, provide support, or fulfill your requests efficiently and securely.

Categories of personal data that are processed:

Legal basis for processing:

Involved data processors:

Additional information:

Offering live chat or chatbot features

To provide users with real-time support and assistance, we offer live chat and/or chatbot features on our platform. These features enable users to communicate directly with our support team or receive automated responses to their inquiries. The processing of personal data is necessary to facilitate these interactions, ensure effective communication, and improve the quality of our support services.

Categories of personal data that are processed:

Legal basis for processing:

Additional information:

Spam- and bot protection

To ensure the security and integrity of our website and its services, we process personal data to detect, prevent, and mitigate spam, automated abuse, and malicious bot activities. This helps protect our users, maintain the quality of our services, and safeguard our systems from unauthorized or harmful actions.

We use Google's reCAPTCHA as a protection mechanism against spam and bots.

Categories of personal data that are processed:

Legal basis for processing:

Involved data processors:

Additional information:

Integration of webfonts

To ensure a consistent, visually appealing presentation of text across devices and browsers, we use web fonts. This allows us to display custom fonts that may not be available on your device, thereby enhancing the overall user experience and accessibility of our online content.

Categories of personal data that are processed:

Legal basis for processing:

Additional information:

Additional Information

Data retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this privacy notice, or as long as required by contractual or legal retention obligations. Once your personal data is no longer needed for these purposes, or when applicable retention periods have expired, your data will be deleted or anonymized in accordance with applicable data protection laws

Protection of Personal Data

We safeguard personal data by implementing appropriate technical and organizational measures in accordance with applicable data protection laws and recognized industry standards. These measures include, where feasible, the pseudonymization and encryption of personal data both in transit and at rest. Our security practices are regularly reviewed and updated to ensure the ongoing confidentiality, integrity, and availability of your personal information.

Withdrawal of consent

If you have given your consent to the processing of your personal data for a specific purpose based on Art. 6 para. 1 lit. a GDPR, you can withdraw this consent at any time. The lawfulness of the processing of the personal data until the withdrawal is not affected by the withdrawal.

Transfer of data

We only transfer or disclose your personal data to third parties when required by applicable law, regulation, or legal process, or when it is necessary for the performance or provision of our services to you. In all cases, we ensure that any transfer of your personal data complies with relevant data protection laws, including the General Data Protection Regulation (GDPR) where applicable. Third-party data processors process personal data only as necessary to deliver the agreed-upon services, in accordance with our instructions and applicable data protection agreements. We do not sell your personal data to third parties. If we intend to use your personal data for purposes that require your consent under applicable law, we will obtain your explicit consent beforehand.

Rights of Data Subjects

Right of Access

You have the right to request at any time information about the personal data we store about you and to receive a copy of that information. Furthermore, you have the right to obtain confirmation as to whether the personal data in question is being processed.

Right to Rectification

Should your data be inaccurate or incomplete, we will rectify it upon request.

Right to Data Portability

If we process your personal data in an automated way based on your consent or based on a corresponding agreement, you have the right to request a copy of your data in a structured, commonly used, and machine-readable format, which can be sent to you or another party. This right applies only to the personal data that you have provided to us.

Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal data under certain circumstances.

Right to Erasure

You have the right to have the personal data processed by us deleted, insofar as this is legally permissible.

Objection to Processing

You can object to the processing of your personal data, for example, by not using certain services. If you object to the processing of your personal data for certain purposes, this may result in the inability to use the services concerned.

Right to Lodge a Complaint

If you believe that we are not processing your personal data correctly, you can contact us. You also have the right to lodge a complaint with a supervisory authority. For more information on the supervisory authorities in the European Union, please click here.
All rights can be exercised by sending an e-mail to the contact named at the beginning of this privacy notice.

Data Transfer to the United States of America and the Data Privacy Framework

To ensure the protection of your personal data when it is transferred outside the European Economic Area (EEA), we rely on recognized legal mechanisms in accordance with the General Data Protection Regulation (GDPR).

On July 10, 2023, the European Commission adopted an adequacy decision under Article 45(1) GDPR for the EU-US Data Privacy Framework (DPF). This means that personal data can be lawfully transferred from the EEA to organizations in the United States that participate in the DPF, as these organizations are considered to provide an adequate level of data protection equivalent to that of the EU.

What does this mean for you?

If we engage a US service provider that is not certified under the Data Privacy Framework, we will clearly inform you in this privacy notice and specify the alternative legal safeguards in place for such transfers (for example, Standard Contractual Clauses approved by the European Commission).

Regardless of the transfer mechanism, you retain all rights provided under the GDPR, including the right to access, rectify, erase, or restrict the processing of your personal data, as well as the right to lodge a complaint with a supervisory authority.

For more details about the EU-US Data Privacy Framework and the adequacy decision, you can visit the European Commission’s website.

Standard Contractual Clauses

In order to enable data transfer to countries without an adequacy decision, the EU Commission has drawn up standard contracts (standard contractual clauses). These standard contractual clauses require contractual partners to adhere to a level of data protection comparable to that in the EU. These contractual texts are made available on the European Commission's website. Standard contractual clauses are abbreviated to “SCC”.

Changes to this privacy notice

We may update this privacy notice occasionally to reflect changes in our data processing practices, legal requirements, or other operational needs. Any modifications will be published on this page, and the "Date of publication" below will be updated accordingly. We encourage you to review this notice periodically to stay informed about how we protect your personal data.

Date of publication of the current version: 03.06.2026

This privacy notice is generated and provided by the Metasoul privacy notice generator.