Privacy Policy

1. Introduction

Scalista UG (haftungsbeschränkt), located at Endenicher Str. 153, 53115 Bonn, Germany, is committed to protecting your personal data. This privacy policy outlines how we collect, use, and protect your information when you use our website and services.

2. Data Controller

Email: info@scalista.eu
Phone: +49 179 5316650

3. Data Protection Officer

Noel José Rodrigues Vicente
Email: admin@scalista.eu

4. Categories of Data, Purposes, and Recipients

We collect and process the following data:

• User Data (Name, Email): Account management and contract fulfillment. Recipients: Stripe, Vercel, Google, Google Analytics, Google OAuth 2.0.
• Payment Data: Billing processes via Stripe. Recipient: Stripe.
• Usage and Analytics Data: Product optimization. Recipient: Google Analytics.
• Device Data (Cookies, IP): Session management and personalization. Recipients: Our infrastructure, Cookie Consent Provider.

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: To fulfill our obligations under the terms of service.
• Legal Obligations: To comply with legal requirements.
• Legitimate Interests: To improve our services and user experience.
• Consent: Where required, we will obtain your consent before processing your data.

6. Data Transfers

Some of our third-party service providers may process your data outside the European Economic Area (EEA), including in the United States. We ensure that appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data.

7. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Typically, this is for a period of up to 6 months after your last interaction with our services.

8. Cookies and Tracking

Our website uses cookies for the following purposes:

• Necessary Cookies: For technical functions (e.g., session cookies).
• Statistics Cookies: (Google Analytics) – only with consent.
• Profiling Cookies: (e.g., social plugins) – only with consent.

You can manage your cookie preferences through our cookie banner or your browser settings.

9. Automated Decision-Making

We do not engage in automated decision-making with legal or similarly significant effects as described in Article 22 of the GDPR. Authentication checks may be automated, but manual review is always possible.

10. Children and Adolescents

Our services are not directed to individuals under 16 years of age. We do not knowingly collect data from children under 16 without verifiable parental consent, in accordance with Article 8 of the GDPR.

11. Security

We implement appropriate technical and organizational measures (TOMs) to ensure a level of security appropriate to the risk, including encryption, pseudonymization, access controls, and regular audits.

12. Your Rights

Under the GDPR, you have the following rights:

• Access: You can request access to your personal data.
• Rectification: You can request correction of inaccurate or incomplete data.
• Erasure: You can request deletion of your data, subject to legal obligations.
• Restriction: You can request restriction of processing under certain conditions.
• Objection: You can object to processing based on legitimate interests.
• Data Portability: You can request transfer of your data to another service provider.

To exercise these rights, please contact us at admin@scalista.eu.

13. Supervisory Authority

If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with the supervisory authority:

Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Website: www.ldi.nrw.de

14. Changes to This Privacy Policy

We may update this privacy policy from time to time. We encourage you to review this policy periodically for any changes. Significant changes will be communicated via email or our website.