Privacy Policy

This English version is a convenience translation. Only the German version (Datenschutzerklärung) is legally binding.

Last updated: October 2026

1. Data protection at a glance

The following information provides an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), the German Telecommunications Digital Services Data Protection Act (TDDDG) and other applicable regulations.

This privacy policy applies to the website upvis.de and equally to upvis-films.com, a platform for templates, plugins and assets by UPVIS with the same controller (see section 2). upvis-films.com is hosted on Vercel just like upvis.de, so the information on hosting and server log files (sections 3 and 4) applies there accordingly; we do not use any analytics or marketing services or cookies on upvis-films.com.

2. Controller

The controller within the meaning of the GDPR is:

Kevin Schwed (UPVIS)
Neckaring 99
64521 Groß-Gerau
Phone: +49 151 25553575
Email: info@upvis.de

Further information can be found in our legal notice.

3. Hosting

We host our website with Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit the website, technical connection data (see "Server log files") is processed on Vercel's servers. In the process, personal data may be transferred to the USA.

Vercel is used on the basis of our legitimate interest in providing our online offering in a secure, fast and reliable manner (Art. 6(1)(f) GDPR). We have concluded a data processing agreement with Vercel (Art. 28 GDPR). The transfer of data to the USA is additionally safeguarded by the EU Standard Contractual Clauses (Art. 46 GDPR); insofar as the recipient is certified under the EU-U.S. Data Privacy Framework, an adequacy decision of the EU Commission applies.

For details, please refer to Vercel's privacy policy: https://vercel.com/legal/privacy-policy

4. Server log files

The hosting provider automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are in particular:

This data is not combined with other data sources. This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and the security of its website – for this purpose, the server log files must be recorded.

5. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser changes from "http://" to "https://" and by the padlock symbol in your browser bar. When encryption is activated, the data you transmit to us cannot be read by third parties.

6. Cookies and consent

Our website uses technically necessary storage mechanisms and – only with your express consent – services for statistics & marketing (Google Analytics and Google Ads, see section 7) and functions for external media (see "YouTube"). Before you give your consent, no non-essential cookies are set for these purposes and no data is transferred to the providers.

To manage consent, we use Google's "Consent Mode v2": by default, the consent categories analytics_storage, ad_storage, ad_user_data and ad_personalization are set to "denied". Only when you consent to the "Statistics & Marketing" category are they updated to "granted" and the corresponding services activated.

To store your privacy choice, we use your browser's local storage ("localStorage", key upvis-consent). This storage is technically necessary so that we can respect the decision you have made and do not display the consent banner again on every page view. It contains no personal content and is not transferred to third parties.

If you select a language using the language switch (DE/EN), we store your choice in a cookie set by our own website (first-party cookie) named upvis_lang (value "de" or "en", storage period 12 months). This cookie is only set when you actively use the switch, contains no personal data and is technically necessary to provide you with the language version you requested. It is therefore set on the basis of § 25(2) no. 2 TDDDG; your consent is not required for this.

If you access the homepage from outside Germany, Austria and Switzerland and your browser is not set to German, we forward you to the English version unless you have chosen a language via the switch. Nothing is stored for this purpose: our hosting provider makes the decision directly when delivering the page, based on the country derived from your IP address and the language setting of your browser. This brief processing is based on our legitimate interest in displaying the website to you in a language you understand (Art. 6(1)(f) GDPR). You can switch to the German version at any time using the language switch.

Storing information on your device and accessing it is based, insofar as strictly necessary, on § 25(2) TDDDG. For all operations that are not strictly necessary (in particular loading external media), we obtain your consent pursuant to § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.

You can withdraw consent you have already given or change your selection at any time with effect for the future – via the "Cookie settings" link in the footer of every page. The lawfulness of the processing carried out until the withdrawal remains unaffected.

7. Web analytics & online marketing (Google Analytics & Google Ads)

If you consent to the "Statistics & Marketing" category, we use services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"); for users outside the EEA, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics 4 (GA4)

Google Analytics is used to analyse usage behaviour on our website (e.g. pages visited, time spent on the site, approximate origin). Cookies or similar technologies are used for this purpose and usage data – possibly including a truncated IP address – is processed. We have activated IP anonymisation. This processing only takes place after you have given your consent.

Google Ads & conversion tracking

We advertise our services via Google Ads. To measure the success of our ads, we use Google's conversion tracking: if you reach the website via one of our ads and then carry out a specific action (in particular submitting the contact form), this is transmitted to Google – after you have given your consent – so that we can evaluate the effectiveness of our campaigns. We receive statistical evaluations; as the website operator, we are not able to identify you personally through this.

When you submit the contact form, we use – likewise only with your consent – the "Enhanced Conversions" feature. The contact details you provide (email address and, where applicable, phone number and name) are made cryptographically unrecognisable (SHA-256 hash) in your browser and transmitted to Google only in this hashed form. Google uses this information exclusively to attribute a conversion to your ad click. Without your consent, none of this data is transferred.

The sole legal basis for the use of these services is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw it at any time with effect for the future via the "Cookie settings" in the footer. If consent is active, personal data (including your IP address) may be transmitted to Google and transferred to the USA; the transfer is safeguarded by the EU Standard Contractual Clauses (Art. 46 GDPR) insofar as no adequacy decision applies. If you are logged in to Google, Google may associate the processing with your account.

Further information can be found in Google's privacy policy: https://policies.google.com/privacy

8. External media – YouTube

We embed videos from the YouTube platform on this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"); for users outside the EEA, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

We use YouTube's privacy-enhanced mode (domain youtube-nocookie.com). What matters most, however, is this: a YouTube video is only loaded once you have actively given your consent. Before you consent, no content is loaded from YouTube/Google and no data (in particular no IP address) is transferred to Google. Instead, you see a placeholder with a notice and a button to load the video. The preview image of the showreel is also delivered locally from our server, not from Google.

Only when you load the video or consent to the "External media / YouTube" category does your browser establish a connection to Google's servers. In the process, personal data (including your IP address) is transmitted to Google and possibly transferred to the USA. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. If you are logged in to Google, Google may associate your browsing behaviour with your profile.

Further information on the handling of user data can be found in Google's privacy policy: https://policies.google.com/privacy

9. Fonts (hosted locally)

For a consistent appearance, we use the fonts "Inter" and "Jost". These are embedded locally on our server and delivered together with the website. No connection is established to servers of Google (e.g. Google Fonts) or other third parties; in particular, no IP address is transmitted to Google when the fonts are loaded.

10. Contact form and email contact

If you contact us via the contact form or by email, the information you provide (in particular name, email address, phone number and the content of your message) is stored by us for the purpose of processing your enquiry and in case of follow-up questions. We do not pass on this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if this has been requested.

For sending and hosting our emails, we use services of Hostinger International Ltd. (61 Lordou Vironos Street, 6023 Larnaca, Cyprus). The data entered via the contact form is processed via Hostinger's mail servers (smtp.hostinger.com) for delivery by email. A data processing agreement pursuant to Art. 28 GDPR is in place with Hostinger.

The data remains with us until the purpose for storing it no longer applies (e.g. after your enquiry has been processed), you ask us to delete it or you withdraw consent you have given. Mandatory statutory retention periods – in particular under commercial and tax law – remain unaffected.

11. Your rights as a data subject

Within the scope of the statutory provisions, you have the following rights:

To exercise your rights and for any further questions about data protection, you can contact the controller named above at any time.

Right to object to data processing (Art. 21 GDPR)

If data processing is based on Art. 6(1)(f) GDPR (legitimate interest), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

12. Competent supervisory authority

You have the right to lodge a complaint with the data protection supervisory authority responsible for us. The competent authority is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
(Hessian Commissioner for Data Protection and Freedom of Information)
Postfach 31 63, 65021 Wiesbaden
Gustav-Stresemann-Ring 1, 65189 Wiesbaden
Phone: +49 611 1408-0
Website: https://datenschutz.hessen.de

13. Currency and amendment of this privacy policy

This privacy policy is current as of the date stated above. Due to the further development of our website or changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. You can access the current version on this page at any time.