Privacy policy

We are established outside the European Union but deliberately address businesses in German-speaking markets. Under Article 27 GDPR we therefore designate a representative in the Union whom you can contact in addition to us.

EU representative: name and full address of the EU representative.

For data protection matters and to exercise your rights, you can reach us at: privacy@brightpixel.agency.

No data protection officer has been appointed at this time.

We process personal data only where this is necessary to provide a functional website and our content and services, or where you have given us your consent.

Personal data means any information relating to an identified or identifiable natural person (Article 4(1) GDPR).

This website can generally be used without providing personal data. Certain data is required for the funding check and the contact form.

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS processes the related data on our behalf.

When you access the website, the server automatically collects information transmitted by your browser: the page requested, the date and time of access, the volume of data transferred, the referrer URL, browser type and version, operating system, and IP address.

The purpose is the technical operation, stability, and security of the website. The legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in secure and uninterrupted operation.

A data processing agreement under Article 28 GDPR is in place with the hosting provider.

In the funding check you first answer eight questions about your project: location, company size, legal form, current income, planned activities, company age, planned investment volume, and main objective.

To show you the result, we then collect your first name, email address, and company, and optionally your phone number. We store this information together with your answers and the calculated initial assessment.

The purposes are calculating and displaying your result, linking the result to your enquiry, and contacting you to explain the result.

The legal basis is Article 6(1)(a) GDPR (your consent) and Article 6(1)(b) GDPR insofar as processing is necessary to carry out the check you requested.

The result is a non-binding initial assessment and not a funding approval. There is no automated individual decision-making producing legal effects within the meaning of Article 22 GDPR; the assessment serves orientation purposes only.

If you contact us via the contact form or by email, we process your first name, email address, company, optional phone number, and your message in order to respond to your enquiry.

The legal basis is Article 6(1)(b) GDPR for contract-related enquiries, otherwise Article 6(1)(f) GDPR in responding to enquiries, and Article 6(1)(a) GDPR where you have given consent.

For hosting we use IONOS SE (see the section on hosting and server log files).

We handle enquiries, email communication, and customer management internally ourselves. We do not use any further external processors for these purposes.

A data processing agreement under Article 28 GDPR is in place with the hosting provider. Providers do not process the data for their own purposes.

To connect you with suitable support for funding, growth, or financing, we pass your details, with your consent, to selected partner companies. This transfer may be made for payment.

Data shared: first name, email address, company, and phone number, together with your answers from the funding check (location, company size, legal form, current income, planned activities, company age, investment volume, and main objective) and the resulting initial assessment.

Recipients (including paid transfer / sale to): funding consultancies, tax consultancies, management consultancies, financing providers, leasing providers, and software and digitalisation providers, as well as comparable partner companies in these categories.

After the transfer, the partner companies process your data as controllers in their own right and for their own purposes. Their own privacy notices apply to that processing.

The legal basis is your consent under Article 6(1)(a) GDPR, and additionally Section 7(2) of the German Act against Unfair Competition (UWG) for contact by email or telephone.

This consent is a condition for using the funding check and receiving your result. Without it we cannot provide the service in the form offered.

You can withdraw your consent at any time with effect for the future; a message to the contact details above is sufficient. The lawfulness of processing carried out before withdrawal remains unaffected. After a withdrawal we stop sharing your data and, at your request, inform the partner companies already supplied about the withdrawal.

We are established in the United States of America. Data collected via this website is therefore transferred to, or accessible by, a controller in a third country within the meaning of Chapter V GDPR.

For the United States, the European Commission decided on 10 July 2023 that an adequate level of protection exists for companies certified under the EU-US Data Privacy Framework. We do not currently rely on such a certification.

The basis for our transfers to the USA is your explicit consent under Article 49(1)(a) GDPR. Where required, standard contractual clauses under Article 46(2)(c) GDPR may also be used.

With your consent, we may also transfer or sell your details for payment to American partner companies, in particular funding consultancies, tax and management consultancies, financing and leasing providers, and software and digitalisation providers based in the USA, in addition to partner companies in the EU and the EEA.

You have the right to obtain a copy of the appropriate safeguards. Please use the contact details above.

Where data is shared with partner companies in third countries, including the USA, this is done only on the basis of your explicit consent under Article 49(1)(a) GDPR or on the basis of appropriate safeguards under Article 46 GDPR.

We use technically necessary cookies and local storage for your language preference (NEXT_LOCALE cookie), your cookie decision (bp_consent_v1 local storage), funding-check progress (bp_checker_v3 session storage), and, after login, the software session (bp_session cookie).

Funding-check progress is stored in your browser's session storage and deleted when you close the browser tab.

The legal basis for technically necessary storage is Section 25(2) no. 2 TDDDG in conjunction with Article 6(1)(f) GDPR.

Optional analytics events (funnel events in our own database, without third-party pixels) are used only with your consent (Section 25(1) TDDDG, Article 6(1)(a) GDPR). You can change your selection at any time in the cookie settings.

If you consent to optional analytics, we record events about the use of the funding check, such as starting and completing the check and page views. We store these events in our own database and do not use third-party pixels for this purpose.

The legal basis is Article 6(1)(a) GDPR. No analysis takes place without your consent.

We store personal data for as long as necessary for the stated purposes or as required by statutory retention obligations.

Funding check details and contact enquiries are deleted automatically once the applicable statutory retention periods have expired. While those periods are running, there is no early deletion unless you request erasure and no statutory retention obligation prevents it.

Consents and the record of them are stored for as long as we must demonstrate them under Article 7(1) GDPR and are then deleted automatically.

Commercial and tax law retention periods (in particular under the German Commercial Code and Fiscal Code, where applicable) remain unaffected and determine when automatic deletion takes place.

You have the right to obtain information about the data stored about you (Article 15 GDPR).

You have the right to have inaccurate data corrected (Article 16 GDPR) and to erasure (Article 17 GDPR).

You have the right to restriction of processing (Article 18 GDPR) and to data portability (Article 20 GDPR).

You have the right to object to processing based on Article 6(1)(f) GDPR (Article 21 GDPR). Where your data is processed for direct marketing, you may object at any time without giving reasons.

You can withdraw any consent you have given at any time with effect for the future (Article 7(3) GDPR). Withdrawal is as easy as giving consent and is free of charge for you.

A message to the contact details above is sufficient. The lawfulness of processing carried out before withdrawal remains unaffected.

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Article 77 GDPR).

The competent authority is in particular the one at your habitual residence, your place of work, or the place of the alleged infringement.

We update this privacy policy when our processing or the legal requirements change. The version published on this page applies.