Privacy Policy
Privacy Policy
Last updated: May 2026
Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
ScaleIM Investment Management GmbH
Am Dorfanger 12
12529 Schönefeld
Germany
Phone: +49 160 94505706
Email: privacy@scale-im.com
Represented by its managing directors:
Rahim Bavandi
Dr. Jens Kirsch
Julian Kunz
General Information on Data Processing
We process personal data only to the extent necessary to provide our website, com-municate with users and comply with legal obligations.
Personal data means any information relating to an identified or identifiable natural per-son. This may include, in particular, your name, contact details, communication content, technical access data and any other information you provide to us.
Personal data is processed in particular on the basis of Art. 6(1)(b) GDPR where pro-cessing is necessary for the performance of a contract or for pre-contractual measures, on the basis of Art. 6(1)(c) GDPR where processing is necessary for compliance with a legal obligation, and on the basis of Art. 6(1)(f) GDPR where processing is necessary to protect our legitimate interests.
Data Protection Officer
For German content:
Our Data Protection Officer is: Niklas Ridder. For data protection inquiries, please contact us at: privacy@scale-im.com.
Visiting Our Website / Server Log Files
When you visit our website, information transmitted by your browser to our website server is automatically processed and temporarily stored in server log files.
This may include, in particular:
• IP address;
• date and time of access;
• page or file accessed;
• referrer URL;
• browser used;
• operating system used;
• amount of data transferred; and
• requesting provider.
This data is processed in order to technically provide the website, ensure system security and stability, identify and remedy technical errors and prevent misuse.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional provision of our website.
Server log files are stored for a limited period and then deleted, unless longer storage is necessary for security reasons or for the establishment, exercise or defence of legal claims.
Our website is hosted by:
Framer B.V.
Rozengracht 207
1016 LZ Amsterdam
The Netherlands
The hosting provider processes personal data, in particular technical access data, on our behalf in order to provide the website securely and efficiently.
The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, fast and reliable provision of our website.
We have entered into a data processing agreement with the hosting provider pursuant to Art. 28 GDPR.
Since Framer B.V. is located in the Netherlands, the processing takes place within the European Union. To the extent personal data is transferred to countries outside the Eu-ropean Union or the European Economic Area in connection with hosting or related ser-vices, such transfer will take place only in accordance with the requirements of Art. 44 et seq. GDPR.
Contact by Email
If you contact us by email, we process the personal data transmitted by you.
This may include, in particular:
• name;
• email address;
• company;
• content of your inquiry;
• time of contact; and
• any other information voluntarily provided by you.
The processing is carried out for the purpose of handling and responding to your inquiry.
If your inquiry relates to the conclusion or performance of a contract, the legal basis is Art. 6(1)(b) GDPR. In all other cases, processing is based on Art. 6(1)(f) GDPR. Our legiti-mate interest lies in properly handling and responding to your inquiry.
The data processed in connection with your inquiry will be deleted once it is no longer required for handling your inquiry, unless statutory retention obligations apply or further storage is necessary for the establishment, exercise or defence of legal claims.
Contact Forms
We currently do not use contact forms on our website.
Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Cookies are small text files that are stored on your device. Similar technologies may in-clude local storage, session storage, pixels or comparable technologies.
We may use the following categories of cookies and similar technologies:
Essential / Necessary Cookies
These cookies and technologies are strictly necessary for the technical operation and security of the website. They enable basic functions such as page navigation, secure ac-cess and proper display of the website.
The legal basis for accessing information on your device is Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). The subsequent processing of personal data is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free, secure and functional provision of our website.
Preference Cookies
Preference cookies may be used to remember choices you make, such as language or display settings. Where such cookies or similar technologies are not technically necessary, they are used only on the basis of your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR.
Analytics / Performance Cookies
Analytics or performance cookies may be used to understand how visitors interact with our website and to improve the website’s performance and user experience. Where such cookies or similar technologies are used, this will take place only on the ba-sis of your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR.
Marketing Cookies
Marketing cookies may be used to track browsing behaviour across websites in order to display relevant advertising. Where such cookies or similar technologies are used, this will take place only on the ba-sis of your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR.
You can update or withdraw your cookie preferences at any time by using the “Cookie Settings” link in the footer of our website, provided that a cookie consent management tool is implemented.
Your consent status may be stored for up to 12 months, after which renewed consent may be requested.
Analytics Tools and Tracking
We currently do not use analytics tools such as Google Analytics.
Google Analytics
Google Analytics is currently not used.
External Fonts
The fonts used on our website are integrated locally or provided as part of the website’s technical setup through Framer. If the fonts are integrated locally, no connection to servers of external font providers, such as Google Fonts or Adobe Fonts, is established when our website is accessed.
External Content and Services
Our website currently integrates or links to the following external content or services:
• social media links, in particular LinkedIn.
LinkedIn and Other Social Media Profiles
Our website may contain links to our social media profiles, in particular LinkedIn.
If you click on such a link, you leave our website and are redirected to the respective plat-form. Personal data is generally transmitted to the respective platform operator only when you click on the link. The respective platform operator is responsible for the pro-cessing of personal data on the platform.
For further information on the processing of personal data by LinkedIn, please refer to LinkedIn’s privacy policy.
Newsletter
We currently do not offer a newsletter.
Applications
We currently do not provide application forms on our website.
If you send us an application by email, we process the personal data provided by you for the purpose of handling the application process. This may include, in particular, your name, contact details, application documents, qualifications, professional experience and any other information submitted by you.
The legal basis for processing application data is Section 26 of the German Federal Data Protection Act (BDSG) and Art. 6(1)(b) GDPR, insofar as the processing is necessary for deciding whether to establish an employment relationship. Where processing is re-quired to comply with legal obligations, the legal basis is Art. 6(1)(c) GDPR. Where pro-cessing is necessary for the establishment, exercise or defence of legal claims, the legal basis is Art. 6(1)(f) GDPR.
Application data will be deleted once it is no longer required for the application process, unless statutory retention obligations apply or further storage is necessary for the estab-lishment, exercise or defence of legal claims. As a rule, application data is deleted no later than six months after completion of the application process, unless you have consented to longer storage, for example for inclusion in a talent pool.
Recipients of Personal Data
Personal data may be transferred to technical service providers who support us in oper-ating our website and communicating with users.
This may include, in particular:
• hosting providers;
• IT service providers;
• email providers;
• web design or website agencies; and
• other service providers acting on our behalf.
Personal data is disclosed to third parties only where there is a legal basis for doing so, in particular where disclosure is necessary for contract performance, required by law, based on your consent or justified by our legitimate interests.
Transfers to Third Countries
Personal data is transferred to countries outside the European Union or the European Economic Area only where the requirements of Art. 44 et seq. GDPR are met.
Such transfers may occur, in particular, in connection with the use of external service providers, such as email providers, IT service providers, analytics providers, social media platforms or other tools.
Where a transfer to a third country takes place, it will be based, in particular, on an ade-quacy decision of the European Commission, appropriate safeguards within the mean-ing of Art. 46 et seq. GDPR, including EU Standard Contractual Clauses, or your explicit consent.
Retention Period
We store personal data only for as long as necessary for the respective processing pur-poses.
Longer storage may take place where statutory retention obligations apply or where stor-age is necessary for the establishment, exercise or defence of legal claims.
Unless a specific retention period is stated in this Privacy Policy, personal data will be deleted once the relevant processing purpose no longer applies and no statutory reten-tion obligations or legitimate interests in further storage exist.
Your Rights
Subject to the statutory requirements, you have the following rights:
•
right of access to the personal data processed by us, Art. 15 GDPR;
•
right to rectification of inaccurate personal data, Art. 16 GDPR;
•
right to erasure of personal data, Art. 17 GDPR;
•
right to restriction of processing, Art. 18 GDPR;
•
right to data portability, Art. 20 GDPR;
•
right to object to processing, Art. 21 GDPR; and
•
right to withdraw consent at any time, Art. 7(3) GDPR.
To exercise your rights, you may contact us at any time:
Email: privacy@scale-im.com
Withdrawal of Consent
Where personal data is processed on the basis of your consent, you may withdraw your consent at any time with effect for the future.
The lawfulness of processing carried out on the basis of consent before its withdrawal remains unaffected.
Right to Object under Art. 21 GDPR
Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.
We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and free-doms, or unless the processing serves the establishment, exercise or defence of legal claims.
Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.
The competent supervisory authority may in particular be:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Stahnsdorfer Damm 77
14532 Kleinmachnow
Germany
Data Security
We implement appropriate technical and organisational measures to protect personal data against loss, destruction, manipulation, unauthorised access and unauthorised disclosure.
For security reasons and to protect the transmission of confidential content, our web-site uses SSL or TLS encryption.
Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy where this becomes necessary due to technical changes to our website, changes in data processing activities or changes in legal requirements.
