webup// Datenschutz
Privacy policy
This policy explains what personal data we process when you visit this website, when you contact us, and when we contact your business. Last updated: October 2026.
1. Who is responsible
WebUp GbR
Represented by Aaron Vermeulen
Auf d. Höhe 3
78576 Emmingen-Liptingen
Germany
Email: contact@webupsolutions.com
2. Visiting this website
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, Vercel processes the technical data your browser sends: your IP address, the date and time, the page requested, the referring page, and your browser and operating system. This is needed to deliver the website and keep it secure. The legal basis is our legitimate interest in running a reliable, secure website (Art. 6 (1) (f) GDPR).
Vercel may process this data in the USA. The transfer is covered by Vercel’s data processing agreement with the EU Standard Contractual Clauses.
We do not set cookies ourselves and use no advertising tools. Fonts and images load from this website itself. Your browser contacts other services only for the contact form’s spam check (section 3).
3. Contacting us
If you use the contact form, email us or reply to one of our messages, we use what you send us (for example your name, email address, business details and message) to answer you and, if you want, to work on your website. The legal basis is taking steps towards a contract (Art. 6 (1) (b) GDPR) or, otherwise, our legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR). We delete this data when it is no longer needed, unless the law requires us to keep it, for example for tax records.
The contact form sends your name, email address, phone number (optional) and message to a small function on our Vercel hosting (see section 2), which forwards them to us by email. The email is sent and stored by our email provider, STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. To keep out spam, the form also loads a short-lived code when the page opens; it holds only the time the page was loaded and is not stored on your device. If a message looks like spam, its sender address may appear briefly in our hosting logs, so we can check for mistakes.
To check that a person is sending the form, it also uses Cloudflare Turnstile from Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Turnstile runs in the background once you reach the form and only asks you to click if it is unsure. It processes technical data such as your IP address and browser details; Cloudflare says it does not use this data for advertising. The legal basis is our legitimate interest in protecting the form from abuse (Art. 6 (1) (f) GDPR). Cloudflare may process this data in the USA; the transfer is covered by its data processing terms with the EU Standard Contractual Clauses.
4. If we contacted your business
We look for small businesses whose online presence we could improve. For this we use information the business has made public, such as its name, address, phone number, email address, website, opening hours, services and photos, from sources such as OpenStreetMap, the business’s own website and public listings.
We use this information to build a first version of a website for the business and to contact it about it. The preview is hosted by Vercel (see section 2) on a private link that isn’t listed anywhere or shown in search results. The legal basis is our legitimate interest in offering our services to businesses (Art. 6 (1) (f) GDPR).
You can object at any time by replying to our message or emailing us. We will then stop contacting you, take your preview offline and delete your details, unless the law requires us to keep them.
5. Links to other websites
This website links to other websites, such as schedlr.de. Their operators’ privacy policies apply once you follow a link.
6. Your rights
You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), erased (Art. 17) or its processing restricted (Art. 18), to receive it in a portable format (Art. 20), and to object to processing based on legitimate interest (Art. 21). To use these rights, email us.
You can also complain to a data protection supervisory authority (Art. 77 GDPR), for example the one where you live or work. In the UK, this is the Information Commissioner’s Office (ico.org.uk).