Data Protection Statement

Last Update: February 2026

Identity and Contact Details of the Data Controller

The data controller responsible in accordance with the purposes of the General Data Protection Regulation (GDPR) and other data protection regulations is:

MTC Solutions GmbH
Hirtentäschelweg 2
81377 Munich
Germany
hello@scalan.ai

Data Processing Activities

Scope of Processing Personal Data

Generally, we process personal data of our users only to the extent necessary to provide a functional website with our content and services. The processing of personal data is regularly carried out only with the user's consent. Exceptions are cases where prior consent is not technically possible and the processing of the data is permitted by law.

Legal Basis for Data Processing

Article 6 (1) (a) GDPR serves as the legal basis for obtaining the consent of the data subject for the processing of their data.

For the processing of personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6 (1) (b) GDPR is used as the legal basis. This also applies to processing necessary to carry out pre-contractual measures.

If it is necessary to process personal data to fulfill a legal obligation to which our company is subject, Article 6 (1) (c) GDPR serves as the legal basis.

If the processing of data is necessary to safeguard the legitimate interests of our company or a third party and the fundamental rights and freedoms of the data subject do not outweigh the interests of the data subject, Article 6 (1) (f) GDPR serves as the legal basis for the processing of the data.

Legal Basis for the Processing of Data on Your Device

The legal basis for the use of technically necessary cookies and the associated data processing is § 25 para. 2 TDDDG in conjunction with Article 6 (1) (f) GDPR. The processing is intended to make it easier for you to use our website and to offer you our services as desired. Some functions of our website would not work without the use of these cookies and could therefore not be offered. Our legitimate interest in processing the cookies arises from the aforementioned purposes. The cookies are deleted after the session ends or after a certain period.

The legal basis for the use of technically non-essential cookies is your consent, which you give us via the cookie banner in accordance with § 25 para. 1 TDDDG in conjunction with Article 6 (1) (a) GDPR. You can withdraw your consent for these services at any time with effect for the future or give it again by calling up your cookie and data protection settings online via our data protection information and configuring them accordingly.

Data Transfer and Storage Duration

The personal data of the data subject will be deleted or restricted as soon as the purpose of their storage is fulfilled. Further storage can take place if this is provided for by the European directives and regulations or another relevant national legislator in laws or other regulations to which the controller is subject. Data will also be restricted or deleted if the storage period prescribed by the aforementioned standards expires, unless a longer storage period is necessary for the conclusion or fulfillment of the respective contract.

Rights of the Data Subject

With regard to your personal data, you have the following rights against us:

Right of Access

You have the right to request confirmation as to whether we are processing personal data concerning you. If this is the case, you have the right to access this personal data and further information, such as the processing purposes, the recipients, and the planned duration of storage or the criteria for determining the duration.

Right to Rectification

You have the right to request the rectification of inaccurate data without undue delay. Considering the purposes of processing, you have the right to request the completion of incomplete data.

Right to Erasure ("Right to be Forgotten")

You have the right to erasure if the processing is not necessary. This is, for example, the case if your data is no longer needed for the original purposes, if you have withdrawn your data protection consent declaration, or if the data has been unlawfully processed.

Right to Restriction of Processing

You have the right to restrict processing, e.g. if you believe that the personal data is incorrect.

Right to Data Portability

You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format.

Right to Object

You have the right to object, on grounds relating to your particular situation, at any time to the processing of certain personal data concerning you. In the case of direct marketing, you as the data subject have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing.

Right to Withdraw Your Consent to Data Protection

You can withdraw your consent to the processing of your personal data at any time with effect for the future. However, this does not affect the lawfulness of the processing carried out based on the consent until its withdrawal.

Notwithstanding these rights, you have the right to complain to a supervisory authority at any time if you believe that the processing of your personal data violates data protection regulations.

Automated Individual Decision-Making, including Profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is necessary for entering into, or the performance of, a contract between you and the data controller, is authorized by Union or Member State law to which the data controller is subject and these legal provisions lay down suitable measures to safeguard your rights and freedoms and legitimate interests, or is based on your explicit consent.

Website Operation

Description and Scope of Data Processing

Every time our website is accessed, our system automatically collects data and relevant information from the computer system of the accessing device. The following data is collected: type and version of the browser used, the user's operating system, the user's internet service provider, IP address, date and time of access, websites from which the user's system accessed our website, and websites accessed by the user's system via our website. The data is stored in the logfiles of our system. The data is not stored together with other personal data of the user.

Purpose of Data Processing

The temporary storage of the IP address by the system is necessary to deliver the website to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session. Storage in logfiles is done to ensure the functionality of the website. The data is also used to optimize the website and to ensure the security of our IT systems. An evaluation of the data for marketing purposes does not take place. These purposes also represent our legitimate interest in data processing according to Art. 6 para. 1 sentence 1 lit. f GDPR.

Legal Basis for Data Processing

The legal basis for the temporary storage of data is Art. 6 (1) (f) GDPR. The legitimate interest lies in the purpose of ensuring the functionality of the website, optimizing the website, and ensuring the security of the information technology systems.

Duration of Storage

The data is deleted as soon as it is no longer necessary for the purpose of its collection. The session ends when the data collection for the provision of the website is completed. In the case of data storage in logfiles, this is the case at the latest after seven days. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized so that an assignment of the calling client is no longer possible.

Possibility of Objection

The collection of data for the provision of the website and the storage of data in logfiles is essential for the operation of the website. Therefore, there is no possibility of objection on the part of the user.

Third Parties

Amazon CloudFront

On our website, we use the Amazon CloudFront service provided by Amazon Web Services, Inc. (AWS). When using our website, the following data is transmitted to AWS: IP address, date and time of request, content of the request (specific page), access status/HTTP status code, transferred data volume, website from which the request comes (referrer), browser and operating system, and language and version of the browser software.

The purpose of Amazon CloudFront is to accelerate and optimize the delivery of content on our website. The service acts as a Content Delivery Network (CDN) and helps reduce loading times of our website and ensure availability during high data traffic. Information is generally forwarded to AWS servers worldwide and temporarily stored there.

For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-US Data Privacy Framework. AWS is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR. The data is stored after the transfer for a limited period necessary for the purposes of the CDN.

Due to the improvement of website performance and ensuring the provision of the website, we have a legitimate interest in the sense of Art. 6 para. 1 lit. f GDPR.

More information on data protection at AWS and Amazon CloudFront can be found at: https://aws.amazon.com/privacy/

Google Fonts

To display the content of our website, we use "Google Fonts", provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google").

To integrate Google Fonts, the fonts are loaded from a Google server. This usually results in the transmission of the following data: IP address, referrer URL, operating system, browser type, screen resolution, and browser language setting.

Your data is generally transferred to a Google server in the USA. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. "Google" is certified within this framework, which is why such transfers are based on the legal basis of Article 45 GDPR.

You can generally prevent the storage of cookies by selecting the appropriate settings in your browser software. However, we point out that in this case, you may not be able to fully use all the functions of this website.

More information on data protection at Google can be found at: https://policies.google.com/privacy

Use of Cookies

Description and Scope of Data Processing

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. These cookies contain a string of characters that enable the browser to be uniquely identified when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. The following data is stored and transmitted in the cookies: entered search terms, frequency of page views, and use of website functions.

The user data collected in this way is pseudonymized by technical measures. Therefore, it is not possible to associate the data with the accessing user. The data is not stored together with other personal data of the users.

Purpose of Data Processing

The purpose of using technical cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. These require that the browser can be recognized even after a page change.

The user data collected by technical cookies is not used to create user profiles. The analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can continuously optimize our offering.

Legal Basis for Data Processing

The legal basis for the processing of personal data using non-technical cookies is Art. 6 (1) (a) GDPR. The legal basis for the processing of personal data using technical cookies is Art. 6 (1) (f) GDPR, legitimate interests.

Duration of Storage and Possibility of Objection

Cookies are stored on the user's device and transmitted from the user to our website. Therefore, as a user, you also have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also happen automatically. If cookies are disabled for our website, not all functions of the website may be fully usable.

If you use the Safari browser version 12.1 or higher, the cookies will be automatically deleted after seven days. This also applies to opt-out cookies used to prevent the use of tracking mechanisms.

Third Parties – Cookiebot

To manage consents for the use of cookies, we use the service Cookiebot by Usercentrics. Cookiebot helps us store and enforce your preferences regarding the use of cookies on our portal. In doing so, your consent data is transmitted to Usercentrics A/S, the operator of Cookiebot. The service provider is based in the EU and complies with the requirements of the GDPR.

The data processing is necessary to provide you with the legally required consent management and to fulfill our documentation obligations. The legal basis is Article 6(1)(c) GDPR as well as Article 6(1)(f) GDPR, justified by our legitimate interest in meeting the legal requirements for consent management.

Further information on data protection at Cookiebot can be found at: https://www.cookiebot.com/de/privacy-policy/

Cookie Overview

Name Provider Purpose Storage Duration
_ga Google Analytics Website user behavior analysis 1 Yr. 1 Mo.
_ga_* Google Analytics Website user behavior analysis 1 Yr. 1 Mo.
_gcl_au Google Analytics Website user behavior analysis 2 Mo. 29 Days
_gcl_ls Google Tag Manager Storing an ID for unique user identification Unlimited
VISITOR_INFO1_LIVE YouTube Storing information about the video player 5 Mo. 27 Days
VISITOR_PRIVACY_METADATA YouTube Storing privacy information 5 Mo. 27 Days
YSC YouTube Storing an ID for unique user identification Session
__Secure-ROLLOUT_TOKEN YouTube Providing audio/video player functions 5 Mo. 27 Days
yt-remote-cast-installed YouTube Remote device cast installation Session
yt-remote-connected-devices YouTube Storing connected devices Unlimited
yt-remote-device-id YouTube Storing device ID Unlimited
yt-remote-fast-check-period YouTube Storing check period Session
yt-remote-session-app YouTube Managing session applications Session
yt-remote-session-name YouTube Managing session names Session
yt.innertube::nextId YouTube Storing the next ID for Innertube Unlimited
yt.innertube::requests YouTube Storing Innertube requests Unlimited
ytidb::LAST_RESULT_ENTRY_KEY YouTube Storing last result entry in storage Unlimited
HUBLYTICS_EVENTS_53 HubSpot Storing HubSpot event data Session
__cf_bm HubSpot Managing bot management functions 30 Min.
__hmpl HubSpot Storing HubSpot metadata Session
__hssc HubSpot Storing session and browser data 29 Min. 25 Sec.
__hssrc HubSpot Storing session information Session
__hstc HubSpot Storing an ID for unique user identification 5 Mo. 27 Days
hubspotutk HubSpot Tracking HubSpot user data 5 Mo. 27 Days
UserMatchHistory LinkedIn Storing match history 30 Days 17 Sec.
bscookie LinkedIn Managing user ID cookies 11 Mo. 31 Days
AnalyticsSyncHistory LinkedIn Ads Storing analytics synchronization 30 Days 17 Sec.
ar_debug LinkedIn Ads Debriefing analysis functions 1 Mo. 10 Hrs.
bcookie LinkedIn Ads Managing browser cookies 11 Mo. 31 Days
li_sugr LinkedIn Ads Storing and managing user information 2 Mo. 29 Days
lidc LinkedIn Ads Managing connection information 1 Day 16 Sec.
_rdt_uuid Reddit Storing unique user identifier for ads 3 Mo.
_rdt_em Reddit Storing encrypted email for attribution Session

Communication

Email

You can contact us via the email address provided on our website. In this case, the personal data of the user transmitted with the email will be stored. The data will be used exclusively for processing the conversation.

Purpose of Data Processing

If you contact us by email, this also constitutes the necessary legitimate interest in processing the data.

Legal Basis for Data Processing

The legal basis for processing data transmitted in the course of sending an email is Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing you with the requested information, assistance, or services and efficiently handling your inquiry. If the purpose of the email contact is the conclusion of a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.

Duration of Storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data transmitted by email, this is the case when the respective conversation with the user is terminated. The conversation is terminated when it can be inferred from the circumstances that the relevant matter has been conclusively clarified. The personal data additionally collected during the sending process will be deleted at the latest after a period of seven days.

Possibility of Objection

The user has the option at any time to revoke their consent to the processing of personal data. In such a case, the conversation cannot be continued. In this case, all personal data stored in the course of contacting will be deleted.

Analysis and Marketing

We use tracking and analysis tools to ensure continuous optimization and needs-based design of our website. With the help of tracking measures, we are also able to statistically record the use of our website by visitors and use the insights gained to further develop our online offering for you. If you have given us your consent to use cookies via a notice provided by us on the website ("cookie banner"), the legality of the use is also governed by Art. 6 para. 1 sentence 1 lit. a GDPR.

Google Ads

This website uses Google Ads, an online advertising service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google"). Google Ads enables us to place targeted advertisements in Google search results and on partner websites.

In the context of Google Ads, we use the so-called conversion tracking. When you access our website via a Google ad, Google Ads places a cookie on your device. This cookie contains information about whether you have performed certain actions on our website, such as purchasing a product or submitting a form. This information is generally transmitted to a Google server in the USA and stored there.

For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. Google is certified within this framework, which is why such transfers are based on the legal basis according to Article 45 GDPR. In addition to this, standard contractual clauses (SCC) have been concluded with Google.

You can prevent the storage of cookies in your browser settings. However, we point out that you may not be able to use all the functions of this website to their full extent in this case. You can revoke your consent to processing and transfer to third countries at any time. The legality of the previous processing remains unaffected.

Further information on data protection at Google can be found at: https://policies.google.com/privacy

Google Tag Manager

This website uses the Google Tag Manager, provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, and Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google"). Google Tag Manager enables the management of website tags. When you visit the website, an HTTP request is sent to Google. As a result, device information (such as your IP address) is transmitted to Google and within a Google server in the USA.

There is an adequacy decision by the EU Commission for data transfers to the USA, the EU-U.S. Data Privacy Framework. "Google" is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR.

When using the Google Tag Manager, it cannot be ruled out that the data collected by Google also captures other personal data. We would like to point out that Google may transfer this information to third parties if required by law or if third parties process this data on behalf of Google.

Processing is only carried out after your explicit consent has been given. You can revoke your consent to processing and transfer to third countries at any time. The legality of the previous processing is not affected by this.

More information on data protection at Google can be found at: https://policies.google.com/privacy

Google Analytics

This website uses Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google").

Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. We have activated IP anonymization on this website, so your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. Google is certified within this framework, which is why such transfers are based on the legal basis according to Article 45 GDPR.

On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services relating to website and internet use. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies in your browser settings. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website and from processing this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout

Further information on data protection at Google can be found at: https://policies.google.com/privacy

HubSpot Analytics

We use the service "HubSpot" provided by HubSpot, Inc., 25 First Street, Cambridge, MA 02141 USA (hereinafter referred to as "HubSpot").

The following personal data is processed through the use of HubSpot: a unique user ID in the form of a user token, domain of the website, date and time of visiting our website, and number of sessions. The storage of the unique user ID takes place in the cookie "hubspotutk", while the other data is stored in the cookies "__hssc" and "__hstc".

The use of "HubSpot" allows us to monitor the website and thus supports us in improving its functionality. The data is further used to support and improve our digital marketing.

The processing of your personal data is only carried out after explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You are entitled to revoke your consent at any time. However, this does not affect the legality of processing carried out before the revocation.

The information is usually forwarded to a HubSpot server in the USA and stored there. There is an adequacy decision by the EU Commission for data transfers to the USA, the EU-U.S. Data Privacy Framework. "HubSpot" is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR.

More information on data protection at "HubSpot" can be found at: https://legal.hubspot.com/privacy-policy

LinkedIn Conversion

This website uses conversion tracking provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, and LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA 94085, USA (hereinafter referred to as "LinkedIn"). LinkedIn uses "cookies" and similar tracking methods such as device fingerprinting.

The information stored in these cookies, e.g. about the time, place, and frequency of your use of our website, is usually forwarded to a LinkedIn server in the USA and stored there. There is an adequacy decision by the EU Commission for data transfers to the USA, the EU-U.S. Data Privacy Framework. "LinkedIn" is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR. In addition, standard contractual clauses (SCC) have been concluded with LinkedIn.

When using LinkedIn, it cannot be ruled out that the cookies set by LinkedIn capture other personal data in addition to the IP address. We would like to point out that LinkedIn may transfer this information to third parties if required by law or if third parties process this data on behalf of LinkedIn.

LinkedIn will use the information generated by the cookie about this website to evaluate your use of the website, compile reports on website activities, and provide other services related to website and internet usage to the website operator.

You can generally prevent the storage of cookies by adjusting your browser settings accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

Processing is based on your consent. You can revoke your consent to processing at any time. However, this does not affect the legality of previous processing.

Further information on data protection at LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policy

Reddit Ads

This website uses Reddit Ads, an advertising service provided by Reddit, Inc., 548 Market St. #16093, San Francisco, CA 94104, USA (hereinafter referred to as "Reddit"). Reddit Ads enables us to display targeted advertisements on the Reddit platform and track conversions.

When you visit our website, the Reddit Pixel may collect the following data: IP address, browser type and version, device type, pages visited on our website, date and time of visit, and conversion events (e.g., form submissions, purchases).

Reddit uses this information to deliver relevant advertisements and measure the effectiveness of our advertising campaigns. The data is generally transmitted to Reddit servers in the USA.

For data transfers to the USA, Reddit relies on standard contractual clauses (SCC) as the legal basis in accordance with Art. 46 GDPR to ensure an adequate level of data protection.

Processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time by adjusting your cookie settings. The legality of processing carried out before the revocation remains unaffected.

You can prevent the collection of data by Reddit by disabling cookies in your browser settings or by using Reddit's opt-out options in your Reddit account settings.

Further information on data protection at Reddit can be found at: https://www.reddit.com/policies/privacy-policy

YouTube

We embed videos from YouTube on our website to provide users with informative and entertaining content. YouTube is a service provided by YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, United States, a subsidiary of Google LLC.

When using YouTube videos, various personal data are processed by YouTube, such as IP addresses and technical information about your device and browser. Personal data such as your IP address, browser details, and your interaction data with the service (e.g., watched videos, likes made) can be collected and processed.

The transmission of data to YouTube is based on the adequacy decision between the EU and the USA, the EU-U.S. Data Privacy Framework, to ensure adequate protection of personal data.

The inclusion of YouTube on our website is for providing multimedia content for information and communication purposes, which is based on our legitimate interest in accordance with Art. 6 (1) (f) GDPR.

You can object to the processing of your personal data at any time and assert your rights as a data subject as mentioned in this Privacy Policy. Please send us an informal email in this case.

Further information on data processing by YouTube and options to object can be found at: https://policies.google.com/privacy

Use of Company Presence on Social Media

LinkedIn

Responsible Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, and LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA 94085, USA.

Use of LinkedIn Content: On our company profile on LinkedIn, we publish information and offer users the opportunity to interact. Through activities such as comments, likes, or following our profile, personal data such as your username or profile picture can be made public.

Personal Data: When using LinkedIn services on our profile, various personal data can be processed, including real names, profile information, or interaction data (e.g., comments, likes).

Transmission and Processing of Data: The transmission of data to LinkedIn is based on the adequacy decision between the EU and the USA, the EU-U.S. Data Privacy Framework, to ensure adequate protection of personal data.

Purpose of Inclusion: Our presence on LinkedIn serves communication and exchange with (potential) customers, based on our legitimate interest in accordance with Art. 6 (1) (f) GDPR. We use LinkedIn to share information about our company, products, services, and relevant industry news.

Right to Object and Further Information: You can object to the processing of your personal data at any time and assert your rights as a data subject as mentioned in this Privacy Policy. To exercise these rights, please send us an informal email.

Further information on the processing of your data by LinkedIn and options to object can be found at: https://www.linkedin.com/legal/privacy-policy