DigitsUP

Privacy

Privacy Policy

How we handle personal data when you visit digitsup.org, contact us, or register your interest in the DigitsUp community.

Last updated: 28 October 2026

1. Data controller

The controller responsible for processing personal data through the DigitsUp website (digitsup.org) is:

offbyte GmbH
Heimat 93c
14165 Berlin
Germany
Managing Director: Julia Bandov
Email: hello@digitsup.org

2. General information

DigitsUp is an angel-investing community focused on education, networking, and connecting aspiring and experienced investors. We respect your privacy and process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws. This Privacy Policy explains how we handle personal information when you visit our website, contact us, or register your interest in joining our community.

3. Website hosting and access data

When you visit our website, certain technical information is processed automatically, including your IP address, browser type, device information, access time, and the pages requested. This information is used to deliver the website, maintain security, and ensure its technical functionality. The legal basis is Article 6(1)(f) GDPR (legitimate interests).

The website runs as a static site on cloud infrastructure provided by DigitalOcean, LLC (105 Edgeview Drive, Suite 425, Broomfield, CO 80021, USA), on their managed Kubernetes platform. Depending on the configured data-centre region, hosting takes place within the European Union, or — where DigitalOcean processes data outside the EEA — under the transfer safeguards described in section 8.

The web server runs in stateless, containerised form. Server access logs (including IP addresses) are held only transiently for the runtime of the serving containers and are not persistently stored or archived by us. We do not use these logs to identify individual visitors.

4. Contacting us

When you contact us by email, we process the personal information you provide, such as your name, email address, and message. We use this information solely to respond to your inquiry and manage related communication. The legal basis is Article 6(1)(b) GDPR where communication relates to a contract or pre-contractual steps, or Article 6(1)(f) GDPR for other inquiries. Personal data is retained for as long as necessary to handle the inquiry, subject to applicable statutory retention requirements.

5. DigitsUp community registration

Our website links to a community registration page provided through Notion. When you voluntarily register your interest in joining DigitsUp, we may collect information such as your name, email address, professional background, investment experience, and other information you choose to provide.

We use this information to:

  • Review and manage community registrations.
  • Communicate with prospective and existing community members.
  • Organise community participation and relevant activities.

Depending on the nature of the registration, processing is based on Article 6(1)(b) GDPR (contractual or pre-contractual measures) or Article 6(1)(f) GDPR (legitimate interests in managing the community). Providing the information required in the registration form is necessary for us to process your request; any additional information is voluntary.

Registration provider: Notion (Notion Labs, Inc., 2300 Harrison Street, 3rd Floor, San Francisco, CA 94110, USA). Data you submit through the Notion page is processed by Notion in the United States (see section 8). We retain community-registration data for as long as you remain a prospective or active community member, and delete it upon your request or when it is no longer needed for the purposes described above.

6. Cookies and similar technologies

This website does not use cookies for tracking, analytics, or advertising, and it does not embed third-party tracking technologies. Fonts are served from our own servers, so visiting the site does not transmit your data to font or CDN providers.

We store a single entry in your browser's local storage to remember that you have dismissed the cookie notice. This entry is strictly necessary for that preference, stays on your device, and is not transmitted to us or any third party. The legal basis for storing this strictly necessary information on your device is Section 25(2) TDDDG; no consent is required because it is essential to provide a function you have requested.

Should we introduce optional analytics, marketing, or other non-essential technologies in the future, we will request your consent (Article 6(1)(a) GDPR and Section 25(1) TDDDG) before activating them, and you will be able to manage or withdraw that consent.

7. Service providers and data sharing

We may share personal data with service providers involved in website hosting, community registration, and communication, where necessary for the purposes described in this policy. Where providers process personal data on our behalf, we use appropriate data-processing agreements as required by the GDPR. We do not disclose personal data to unrelated third parties for their own marketing purposes without an appropriate legal basis.

8. International data transfers

Some of our service providers are based outside the European Economic Area (EEA) — in particular Notion (USA), which handles community registration, and our hosting provider DigitalOcean, a US-based company. Where personal data is transferred to or processed in a third country, we rely on an appropriate transfer mechanism under the GDPR, such as an adequacy decision (for example the EU–US Data Privacy Framework) or EU Standard Contractual Clauses.

9. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law. Specific retention periods or criteria for website logs, community registrations, and correspondence are described in the relevant sections above.

10. Your rights

Under the GDPR, you have the right, subject to applicable legal requirements, to:

  • Request access to your personal data.
  • Request correction or deletion of your personal data.
  • Request restriction of processing.
  • Object to processing based on legitimate interests.
  • Request data portability where applicable.
  • Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
  • Lodge a complaint with a competent data protection supervisory authority.

For questions or requests concerning your personal data, contact hello@digitsup.org.

11. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our website, services, or applicable legal requirements. The latest version will always be published on digitsup.org.