.GUT

Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Build-Up Biz GmbH Schönfließer Str. 18 10439 Berlin Germany

Email: hallo@gut.community

Represented by the Managing Director: Marc Bernath

2. General Information on Data Processing

We take the protection of your personal data very seriously. Personal data is only processed on this website to the extent technically necessary.

This website is a purely informational site. No user accounts are offered and no cookies are set for analytics or marketing purposes. For audience measurement we use self-hosted, cookie-free analytics that store no personal data (see section 6).

3. Hosting

Our website is hosted by Netlify, Inc., 44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA.

Netlify’s servers are located worldwide. When accessing the website, technically necessary data is processed, in particular:

  • IP address
  • Date and time of access
  • Browser type and version
  • Operating system
  • Referrer URL
  • Hostname of the accessing device

This data is required to technically provide the website and to ensure stability and security.

The legal basis for processing is Art. 6(1)(f) GDPR (legitimate interest in secure and stable provision of the website).

Insofar as processing takes place in third countries (e.g. USA), this is done on the basis of appropriate safeguards pursuant to Art. 46 GDPR, in particular through the conclusion of standard contractual clauses.

4. Contact by Email

If you contact us by email, the personal data you provide (e.g. name, email address, content of the message) will be processed to handle your inquiry.

The legal basis is:

  • Art. 6(1)(b) GDPR (for pre-contractual measures)
  • Art. 6(1)(f) GDPR (legitimate interest in processing inquiries)

The data will be deleted as soon as it is no longer necessary for the purpose of processing and no statutory retention obligations exist.

5. Cookies

No cookies for analytics, tracking or marketing purposes are used on this website.

Only technically necessary processes are used that do not require the use of consent-requiring cookies.

6. Audience measurement

To understand how this website is used, we run the open-source software Umami on our own infrastructure within the European Union. The data is not shared with third parties and is not transferred to countries outside the EU.

The measurement creates no personal data: no cookies are set, and no information is stored on or read from your device. Your IP address is not stored; it only feeds into a daily changing, irreversible hash that groups the page views of one visit. There is no fingerprinting and no cross-device recognition.

We record the page visited and the referring page, campaign identifiers from the address bar, approximate location at country level, device type, browser and operating system, plus anonymous events such as reaching a form step. Address parameters that may contain names or organisations are removed before transmission.

The legal basis is our legitimate interest in designing our offering to meet actual needs, pursuant to Art. 6(1)(f) GDPR. Since nothing is stored on or read from your device, no consent under Section 25(1) TDDDG is required. You can object to the measurement at any time by enabling the Do Not Track setting in your browser or by writing to us at the address given in section 1.

Our website contains links to external websites, including our LinkedIn company page and external information pages (e.g. YouTube).

When clicking an external link, you leave our website. The operators of the linked sites are solely responsible for data processing on those sites.

8. Recipients of Data

Your personal data will only be shared with third parties insofar as this is necessary for the technical provision of the website (hosting provider) or a legal obligation exists.

9. Storage Duration

Personal data is only stored for as long as necessary to fulfill the respective purposes or as required by statutory retention obligations.

10. Your Rights as a Data Subject

You have the right to:

  • Request information about your stored data pursuant to Art. 15 GDPR
  • Request rectification of inaccurate data pursuant to Art. 16 GDPR
  • Request deletion of your data pursuant to Art. 17 GDPR
  • Request restriction of processing pursuant to Art. 18 GDPR
  • Request data portability pursuant to Art. 20 GDPR
  • Object to processing pursuant to Art. 21 GDPR
  • Lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR

The competent supervisory authority in Berlin is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit Alt-Moabit 59-61 10555 Berlin

11. Data Security

We employ appropriate technical and organizational measures to protect your data against loss, misuse or unauthorized access.

12. Currency and Changes to this Privacy Policy

This privacy policy is current as of: February 2026.

We reserve the right to adapt it in the event of changes to the website or legal requirements.