Imprint

2025 © ScaleUp Association. Verein zur Sichtbarmachung der ScaleUp und StartUp Community in Österreich

Arsenalstraße 11, 1030 Vienna, Austria

ZVR: 1293179386

Bankverbindung
Inhaber: ScaleUp Association. Verein zur Sichtbarmachung der ScaleUp und StartUp
Community in Österreich
IBAN: AT472011185419131100
BIC: GIBAATWWXXX

Organisational purpose:
To help emerging scaleups to grow faster, stronger and beyond local markets.

contact mail: added soon

Media owner and publisher:
ScaleUp Association. Verein zur Sichtbarmachung der ScaleUp und StartUp Community in Österreich

pictures: ScaleUp Association (please add us)
Logo-Design: Kajetan Höckner und Michael Oberhoffner

Data privacy policy

Please read this privacy notice carefully. If you have any questions or require further information, you may contact us at any time.

General Information

For ScaleUp Association. Verein zur Sichtbarmachung der ScaleUp und StartUp Community in Österreich as the controller responsible for processing personal data within the meaning of the General Data Protection Regulation (GDPR), the protection of your personal data is of utmost importance.

We therefore comply with all requirements of the GDPR, the Data Protection Act (DSG), as well as other applicable national and EU legal provisions when processing personal data and we strive to ensure a state of the art level of transparency.

With regard to data security, we implement the appropriate technical and organisational measures to ensure that your data is secure with us. Furtermore, we process personal data in accordance with the principles of lawfulness, fairness, transparency, accuracy, purpose limitation, data minimisation, storage limitation, integrity, and confidentiality.

Collected personal data

General Information About Accessing the Website

Website visitos are informed that it is possible to access the website without providing any personal data. Personal data is only collected and stored when you register for a newsletter, an event, contact us for partnerships, or participate in workshops or speaker requests. Below we describe how we process your personal data.

The following categories of personal data may—depending on the contractual relationship or purpose—be subject to processing:

Personal details: name / company / other business designation, address, contact details (telephone, email address, fax), date of birth, etc.

1.1 Contacting us

If you contact us by email or via a contact form, we process your data as follows:

  • Processing of personal data: personal details and any data you provide to us.
  • Purpose of processing: the data you provide will be stored for the purpose of processing your request and for handling any follow-up questions.
  • Legal basis:
    • Processing is based on your consent pursuant to Art. 6(1)(a) GDPR.
    • If you wish to enter into a contractual relationship with us, the processing is carried out pursuant to Art. 6(1)(b) GDPR as the data is necessary for pre-contractual steps based on your request.
  • Recipients: a shared email inbox accessible to all relevant members of the association.
  • Retention period: data is stored until your request is fully resolved and as long as necessary for the purpose. If a contractual relationship is established or initiated, processing follows the rules under “Speaker & Mentor Pool, Business Partners, Suppliers and Customers.”

1.2 Business Partners, Suppliers and Customers
If you are a business partner, supplier or customer, we process your personal data as follows:

  • Processing of personal data:
    Personal details and data related to (i) contractual arrangements or agreements, (ii) the provision of services and/or (iii) other the delivery of goods.
  • Purpose of processing:
    We process your data in order to (i) handle and fulfil the respective contract with you and to assert any claims arising from or in connection with the contract, (ii) enter into new contracts and/or (iii) maintain existing contractual relationships.
    In addition, we process your data for internal business administration purposes (e.g., accounting, controlling).
  • Legal basis:
    The processing is based on Art. 6(1)(b) GDPR, as it is necessary for the performance of a contract, the initiation of a contract, or the continuation of an existing contractual relationship.
    We also process your data where required by applicable legal obligations pursuant to Art. 6(1)(c) GDPR (e.g., anti-money laundering regulations).
    Furthermore, we have a legitimate interest under Art. 6(1)(f) GDPR in ensuring proper and efficient business operations and optimising internal processes.
  • Recipients:
    All data are stored in our CRM system.
  • Retention period:
    We store your data for as long as necessary to fulfil the contract or for the purpose of the processing.

Please note:
If you do not wish us to process your data, we may be unable to enter into a contract with you, fulfil an existing contract, or continue an ongoing business relationship.

1.3. Speaker & Mentor Pool

If you register as part of our Speaker & Mentor Pool or agree to be included in our long-term network, we process your personal data as follows:

  • Processing of personal data:
    Personal details, professional background, expertise, profile information, contact details, and any information you voluntarily provide to us for potential collaboration opportunities.
  • Purpose of processing:
    We process your data to maintain our long-term Speaker & Mentor Pool, to evaluate potential cooperation opportunities, to contact you regarding suitable speaking engagements, mentoring roles or event participation, and to manage future positioning possibilities within our programmes and activities.
  • Legal basis:
    Processing is based on your consent pursuant to Art. 6(1)(a) GDPR.
    You may withdraw your consent at any time with effect for the future. The withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
  • Recipients:
    Your data may be stored in our CRM system and accessed internally by authorised team members responsible for speaker and mentor coordination.
  • Retention period:
    We store your data for as long as your consent is valid and until you request deletion or withdraw your consent.
    If you withdraw your consent, we will delete your data unless we are legally obliged to retain certain information (e.g., for accounting reasons in case of past collaborations).

Please note:
If you withdraw your consent, we may no longer be able to contact you regarding future speaking or mentoring opportunities.

1.4 Newsletter

You have the option to subscribe to our newsletter. For this, we require your consent. Without your consent, we cannot send you newsletter information. We process the personal data of our newsletter subscribers as follows:

  • Processing of personal data: personal details.
  • Purpose of processing: to send you our newsletter and provide information about news, event tips, job postings, contest reminders, our association, as well as other advertising and marketing information.
  • Legal basis: processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time without giving reasons. The withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
  • Recipients: all current members of the marketing team (listed under “About Us”).
  • Retention period: data is deleted after consent withdrawal. Data required to demonstrate that you originally provided consent will be stored for three years and three months after withdrawal.

1.5 Redirecting to Social Media (LinkedIn & Instagram)

We operate fanpages on various social media platforms. By clicking the respective link (or icon), you will be redirected to the respective external platform. On these platforms, personal data will be processed by the respective platform provider. .

Please note that we have no influence over the nature and scope of data processing carried out by LinkedIn or Instagram (Meta). These platforms process, in particular, log file data (e.g., IP address, browser information, usage data) as well as additional data collected through cookies and tracking technologies used by the respective providers.

For our social media fan pages, we and the respective platform provider act as joint controllers pursuant to Art. 26 GDPR. The processing is carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR to inform users about news and activities of our association.

Please visit our fan pages only if you agree to this data processing.

LinkedIn:

Name and contact information:
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Contact:https://www.linkedin.com/help/linkedin/ask/ppq
Further information: see LinkedIn Privacy Policy
Information on joint controllership:
https://legal.linkedin.com/pages-joint-controller-addendum

Instagram

Name and contact information: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Contact: https://www.instagram.com/accounts/help/ (or via Meta’s general contact form: https://www.facebook.com/help/contact/2061665240770586)
Further information: Instagram Privacy Policy (Meta Privacy Policy) https://privacycenter.instagram.com/policy
Information on joint controllership: Instagram (Meta) Joint Controller Addendum for Insights: https://www.facebook.com/legal/terms/page_controller_addendum

Retention Periods

We will not delete your data if and to the extent that we are legally required to retain it. For as long as claims may be asserted against us, we will retain any data necessary to defend against potential claims.

Confidentiality

All of our team members are bound by strict confidentiality obligations regarding any information entrusted to them or made known to them in the course of their work.

Exercise of data subject rights and contact information

We would like to let you know that, as a user, you generally have the following rights:

  • Right to withdraw consent – Art. 7(3) GDPR – The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.
  • Right of access: Art. 15 GDPR
  • Right to rectification: Art. 16 GDPR
  • Right to erasure: Art. 17 GDPR
  • Right to restriction of processing: Art. 18 GDPR
  • Right to data portability: Art. 20 GDPR
  • Right to object: Art. 21 GDPR

Furthermore, you also have the right to lodge a complaint with the supervisory authority:
Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna,
Email: dsb@dsb.gv.at

If you have questions regarding the processing of your personal data, wish to object to processing, withdraw consent you have previously provided, or feel that your data protection rights have been violated, please contact us.