Privacy Policy

Last updated: 13th July 2025

1. Controller

The controller within the meaning of Art. 4 (7) GDPR is:
THE STRING AHEAD UG (haftungsbeschränkt)
Oelkersallee 14a
22769 Hamburg,
Germany

Purpose	Data categories	Legal basis	Retention
Waiting-list administration	Contact data; technical logs	Art. 6 (1)(b) GDPR (pre-contractual)	12 months after last interaction or upon request
Product research & feature prioritisation	Product-preference data (all survey answers)	Art. 6 (1)(f) GDPR (legitimate interest)	Raw data aggregated after 6 months, then erased
Marketing e-mails	Contact data; marketing consent data	Art. 6 (1)(a) GDPR (consent)	Until consent withdrawn or 3 years of inactivity
Fraud & abuse prevention	Technical logs	Art. 6 (1)(f) GDPR	90 days

3. Data Processors (Art. 28 GDPR)

• Tally .so (Klu Inc., EU hosting) — form data collection

All processors are bound by DPAs and EU Standard Contractual Clauses where required.

4. Data Retention

• Waiting-list data: deleted 12 months after last interaction or immediately upon request.
• Demo SMS logs: anonymised after 30 days.
• Billing data (if you purchase a Founder Pass): retained for 10 years as required by § 147 AO.

5. International Transfers

Where processors are located outside the EU/EEA, we rely on EU Standard Contractual Clauses pursuant to Art. 46 GDPR.

7. Your Rights

• Access (Art. 15)
• Rectification (Art. 16)
• Erasure (Art. 17)
• Restriction (Art. 18)
• Portability (Art. 20)
• Withdrawal of consent at any time (Art. 7 (3))
• Complaint to a supervisory authority (Art. 77). Our lead authority is the “Berliner Beauftragte für Datenschutz und Informationsfreiheit”.

8. Contact for Privacy Queries

E-mail: [email protected]  |  Postal mail to the controller address above.