Privacy Policy

We prioritize the protection of your personal data ("data") and process it exclusively in accordance with the applicable legal provisions. This Privacy Policy, in accordance with Articles 13 and 14 of the General Data Protection Regulation ("GDPR"), informs you about how we, as the data controller, process your data in relation to our services and our website www.startupval.com

This Privacy Policy is directed towards (i) our customers ("Customers"), and (ii) other users of our services and website visitors ("Users"; including employees of our Customers or other interested parties). Unless specifically addressed to Customers or Users, the provisions of this Privacy Policy apply to both groups (collectively referred to as "you" or "your").

How do we process your data?

Business relationship with Customers

We process the data of our Customers (particularly contact data and billing data) to fulfill our contractual obligations with the Customers, specifically the provision of services to Customers and Users, including SaaS solutions for business valuation (Art 6 para 1 lit b GDPR). Additionally, we process Customers’ data to comply with legal obligations (such as tax requirements; Art 6 para 1 lit c GDPR) and/or to protect legitimate interests, provided that these interests do not override the Customers' interests in the confidentiality of their data (Art 6 para 1 lit f GDPR).

Registration / Provision of Services

Our services are generally offered via our website (SaaS, web applications). If no login is required, only the data specified in section 2.d) is processed.

If services are accessible via user accounts that require prior login, we process your name, email address, and passwords. Additionally, within the user account, we process other data such as your contact information and information regarding valuation reports or other queries performed within the service.

This data is processed to operate and provide our services.

For Customers, the processing of data in the context of registration for a user account or the provision of services is based on Art 6 para 1 lit b GDPR.

For Users, the processing of data in the context of registration for a user account or the provision of services is based on our legitimate interest pursuant to Art 6 para 1 lit f GDPR, which is to fulfill the contract with our Customers and to grant Users access to our services.

Data Processing for Business Valuation Reports

If you use our service available at https://startupval.com, you may generate limited business valuation reports. In this case, we will collect your contact details to send the valuation report to you via email.

With your consent, the valuation report can also be sent to experts in the field of business valuation (e.g., tax and business advisors). By agreeing, you consent to being potentially contacted by these experts (via email or phone) and receiving offers for further consulting services. You can withdraw your consent for your data to be shared with experts at any time, with future effect, by sending an crm@startupval.com.

The data processing involved in creating the report and sending it to you is based on the performance of the contract pursuant to Art 6 para 1 lit b GDPR. The transfer of your contact data to experts is based on your explicit consent according to Art 6 para 1 lit a GDPR.

Cookies and Tracking

When you use our services or visit our website, we collect certain data to ensure quality assurance and further development of our services and website. This data includes the date, time, and duration of your use of the services/website, your IP address, system data on the device and operating system used, as well as information about your browsing behavior and search operations. We collect this data automatically through cookies and tracking tools provided by third parties based on your consent pursuant to Art 6 para 1 lit a GDPR.

You can refuse the storage of individual cookies or the use of tracking tools through the cookie banner settings or revoke the storage or use of tracking tools later in your browser settings. When cookies are stored or tracking tools are used based on your voluntary consent, your data may sometimes be transmitted to recipients in third countries outside the EEA, particularly the USA. The USA has not been certified by the European Court of Justice as having an adequate level of data protection; specifically, there is a risk that US authorities may access data for control and monitoring purposes. By giving your consent, you agree to the use of cookies and tracking tools from third-party providers in the USA or other insecure third countries and accept a possible lower level of data protection (Art 49 para 1 lit a GDPR).

Cookies that are absolutely necessary for the structure or functioning of our services or website (technically necessary cookies) cannot be deactivated. In these cases, data processing is based on our legitimate interest pursuant to Art 6 para 1 lit f GDPR to provide the services and website in a functional manner.

Contact / Request

When you contact us via email or through other available contact options, we process the data you provide to handle and respond to your request. This may include your name, email or phone number, and any data provided in the text or conversation.

We process data to manage Customers’ contact requests in the context of (pre)contractual relationships pursuant to Art 6 para 1 lit b GDPR.

We process data to manage Users’ contact requests based on our legitimate interest in providing User support and fulfilling our contracts with Customers according to Art 6 para 1 lit f GDPR.

This data processing is based on your explicit consent according to Art 6 para 1 lit a GDPR. You can withdraw your consent at any time, with effect for the future, by sending an email to crm@startupval.com. Your data will be stored until you validly withdraw your consent.

Testimonials

If you provide us with explicit consent, we will process your name and, if possible, your photo in the context of evaluations of our company (testimonials) and may publish them on our homepage, in (print) publications, and on other social media sites.

You acknowledge that such information may be accessible on the internet by any person. Despite all technical precautions, it cannot be guaranteed that such individuals may not use this information or pass it on to others.

You can withdraw your consent for the use of your testimonial at any time by emailing crm@startupval.com with effect for the future.

Storage Duration

Users

If Users have created an account with one of our services, we generally retain User data for the duration of their active account, unless there are mandatory provisions for the further retention of certain data or for the defense of legal claims.

Additionally, if User data is processed based on the Users’ consent, we retain User data until the User withdraws their consent.

Cookies stored on the Users’ end device are kept for a maximum period of 14 months.

Customers

We retain data within the scope of business relationships with Customers for the duration of the active contractual relationships, as well as beyond, in accordance with statutory retention and documentation obligations. Further storage of Customers’ data is possible, particularly for the defense of our legal claims.

Recipients of Your Data

Your data will be shared (only with your consent) with the following recipients in the course of processing for the above purposes:

• Service providers, especially IT providers.
• Company subsidiaries, as necessary for the provision of our services.
• Experts in the field of business valuation when using the tool (only with your consent).
• Banks, tax consultants, auditors.
• Legal representatives, notaries, courts, and administrative authorities, as necessary.

Transfer to Third Countries

If the recipients of your data mentioned above are located outside the European Economic Area (EEA) and the country in question has not been determined by decision of the EU Commission to have an adequate level of data protection, we will ensure that the transfer is made based on standard contractual clauses or otherwise in accordance with Art 46, 47, or 49 of the GDPR.

Your Rights

Right to Information

As long as we process your data, you have the right to information about the purposes of processing, the categories of data, the origin and recipients of your data, and the duration of storage.

Rectification and Erasure of Data

If we process inaccurate or incomplete data, you have the right to rectification of such data. If your data is processed unlawfully, you may also request us to erase your data. You may also request the erasure of your data if your data is processed unlawfully, subject to legal obligations preventing the erasure of your data.

Limitation of Processing

You may request us to limit the processing of your data in certain cases.

Data Portability

You have the right to receive the data you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to request the direct transmission of this data to another controller, as far as this is technically feasible.

Right to Object

You have the right to object, on grounds relating to your particular situation, at any time to the processing of data concerning you. If you object to the processing of your data, we will cease processing unless our legitimate interests in processing your data prevail. If data are processed for direct marketing purposes, you have the right to object at any time to the processing of data concerning you. In this case, we will immediately cease processing your data for marketing purposes.

Withdrawal of Consent

You have the right to withdraw your consent to the processing of your data (where such processing is based on Art 6 para 1 lit a GDPR) at any time. This does not affect the lawfulness of data processing carried out up to this point.

Complaint

You have the right to lodge a complaint with the supervisory authority if you believe that the processing of your data violates data protection law or your rights to protection of your data have been infringed.