Privacy Policy

We value your data

BayStartUP takes the protection of your personal data very seriously and adheres strictly to the rules of data protection laws. Personal data is only collected on this website if you use our services described below or if we have a legitimate interest in the processing of your data (for example, website provision and analysis). Under no circumstances will the collected data be sold.

If you have any questions you can contact us at:

BayStartUP GmbH
Am Tullnaupark 8
90402 Nuremberg
Tel.: +49 (0) 911 13 13 97-30


We have appointed an external data protection officer to regularly check the security of your data and to be available for questions on data protection. To get in touch, please contact (your e-mail with be forwarded to the data protection officer).  The following explanation provides you with an overview of the collection and handling of your data:

Data processing on this website

We collect information about visitors to our website in a few different ways. We collect certain information that the visitors provide to the website and some of information we collect automatically.

Information a visitor provides to a website

We’ll start with information that visitors provide directly to a Site, which primarily happens when visitors type into a text field on a Site, like a comment field or a sign-up form. We may collect other information that a visitor enters on the webiste – such as a contact form submission, or a search query.

Information we automatically collect from the site

We also automatically collect some information about visitors to our website.

  • Technical Data from a visitor’s computer: We collect the information that web browsers, mobile devices, and servers typically make available about visitors to a website, such as IP address, browser type, unique device identifiers, language preference, referring site, the date and time of access, operating system, and mobile network information.

This website links to, which automatically collects and stores information in its server log files that your browser transmits to us. These are:

  • Browser type and browser version
  • operating system in use
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

BayStartUP cannot assign this data to a specific person, they are used for the technical provision of the website and must therefore be collected in our legitimate interest in order to make our website available to you in a stable and secure manner. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f) GDPR.

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed. In the case of storing the data in log files this is the case after 7 days at the latest. Further storage is possible if required by the legitimate interest of the operator of the site, to prevent misuse, ensure data security and security or regulatory requirements.

Your contact with us

When you contact us by e-mail, the information you provide (your e-mail address, or your name or other information voluntarily provided by you) will be stored by us to answer your questions. We delete the data processed in this context after the storage is no longer required, or we limit the processing if there are statutory retention requirements. If the e-mail contact aims at the conclusion of a contract, then additional legal basis for the processing Art. 6 (para. 1, lit. b) DDPR. The user has the opportunity to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the conversation cannot continue. The revocation of the consent and the objection against the storage can be carried out as follows:

By e-mail to

By letter to:

BayStartUP GmbH
Tullnaupark 8
90402 Nuremberg

The revocation of the consent or the objection must show, which person desires the deletion of the personal data or revokes their consent. If only certain data should be deleted, or only a certain consent should be revoked, this must be stated. Without such restriction, all consent will be deemed revoked and all personal information will be deleted.


In addition, cookies are stored on your computer when you use Cookies are small text files that are stored on your hard disk and that give us certain information. Cookies cannot run programs or transmit viruses to your computer. Their purpose is to make the internet service overall more user-friendly and effective. Transient cookies are set on the website. These are automatically deleted when you close the browser. These include, in particular, session cookies, which make it possible to use a session ID to assign different queries from your browser to the same session. These cookies allow us to process your contact form information. Cross-site tracking does not occur. The cookies we set are solely for the purpose of providing the website. In addition, the website uses persistent cookies, which are automatically deleted after a specified time, which may vary depending on the cookie. You can delete these cookies at any time in your browser settings.

Investors Network

If you decide to be included in our investor network, we will store the specified e-mail address, name and, if necessary, the given telephone number of all contact persons. We use this information to connect you to interesting teams and to fulfill our legitimate interest in providing our competitors and you with a long-term partnership. The legal basis for this is Art. 6 (para. 1, sentence 1, lit. f). DDPR. The data of the contact persons we delete, if you inform us accordingly changes, immediately.

Social Media

Facebook Ireland Ltd (hereinafter "Facebook")

BayStartUP operates a Facebook page ( for the purpose of self-presentation and publicity of our cooperations and the successes of our startups supported by the users active there. When you visit the BayStartUP Facebook page, Facebook collects data about your behavior and interests, and provides BayStartUP with an anonymous analysis of the BayStartUP visitor groups and interactions (so-called page insights).

This processing of your data is based on our legitimate interest in accordance with. Art. 6 (para. 1, sentence 1, lit. f) GDPR. In addition, Facebook's data may be processed for its own use for market research and promotional purposes. Cookies may be stored on your computer to evaluate your usage behavior. Other data about your devices, Internet connection and more, can be recorded and possibly linked to their Facebook account. You may create a user profile about you even if you are not logged in to Facebook or do not have an account on Facebook. These profiles can be used to serve ads tailored to you on different platforms. It may happen that your data will be processed while visiting our Facebook page while outside the European Union. Facebook has been certified under the Privacy Shield (this: and is committed to respecting the EU's privacy standards. At any time you have the right to claim Facebook or BayStartUP's user rights regarding the BayStartUP Facebook page and the resulting page insights, however, we point out that in both cases Facebook is responsible for answering your request.

BayStartUP has reached an agreement with Facebook on shared responsibility that you can access here: You can access the privacy policy of Facebook here: If you have an account on Facebook, you can refuse to accept the following advertising-related data processing (opt-out):

Analysis tools and advertising

Piwik (now Matomo)

This website uses the open source web analytics service Piwik (now Matomo) to analyze and regularly improve the use of our website. With the statistics we can improve our offer and make it more interesting for you as a user. The legal basis for use is Art. 6 (para. 1, sentence 1, lit. f) GDPR. For the evaluation, cookies are stored on your computer. The information collected in this way is stored exclusively on our servers in Germany. You can prevent the evaluation by deleting existing cookies and preventing the storage of cookies. This prevention is possible by setting in their browser. Alternatively, you can remove the following checkmark to set an opt-out cookie. This will be deleted if you delete your cookies and you will need to opt-out again.

You have the opportunity to prevent the actions you take here are analyzed and linked. This will protect your privacy, but will also prevent the owner from learning from your actions and improving usability for you and other users. Your visit to this site is currently covered by Matomo Web Analytics. Deselect this checkbox for opt-out.

This website uses Motamo with an extension to shorten your IP-address exclusively shortened, a direct personal reference of your data can be excluded. The IP address collected by Motamo will not be merged or processed with other data collected by us. For more information about Motamo, visit:


This website uses Adobe Typekit to display fonts on our website. Adobe Typekit is a font library access service provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe). When you open a page, the browser loads the required web fonts into your browser cache in order to display texts and font types correctly. On providing the Typekit service, no cookies are placed or used to provide the fonts. To provide the Typekit service, Adobe may collect information about the font used to identify the website itself and the linked Typekit account.

You will find further information on the information Data Protection with Adobe Typekit as well as in the Adobe Data Protection Guideline.

Your rights

You have the following rights to us at any time regarding your personal data:

Right to information.

You may ask the person in charge to confirm if personal data concerning you is processed by us.

Right to rectification or cancellation. 

You have a right to rectification and / or completion to the controller, if the personal data you process is incorrect or incomplete. The person in charge must make the correction without delay. You may require the controller to delete your personal information without delay and the controller will be required to erase that information immediately unless another legal basis prevails.

Right to restriction of processing.

You may request the restriction of the processing of your personal data under the following conditions:

  • if you contest the accuracy of your personal information for a period of time that enables the controller to verify the accuracy of your personal information;
  • if the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of personal data;
  • if the controller no longer needs the personal data for the purposes of the processing, but you need them for the assertion, exercise or defense of legal claims, or
  • if you objected to the processing pursuant to Art. 21 (para. 1) GDPR and it is not yet certain whether the legitimate reasons of the person responsible prevail over your reasons.
  • If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purposes of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State.
  • If the limitation of the processing according to the above mentioned. If conditions are restricted, you will be informed by the person in charge before the restriction is lifted.

Right of opposition / revocation against processing

You have the right, for reasons of your own particular situation, to object at any time to the processing of your personal data in accordance with Art. 6 (para1, lit. e or f) of the GDPR; this also applies to profiling based on these provisions. The controller will no longer process your personal information, unless it can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims. If your personal information in question is processed for direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail. If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes. Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to opt-out by means of automated procedures that use technical specifications. You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Right to data portability

You have the right to receive your relevant personal information provided to the Responsible in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the person responsible for providing the personal data, provided the processing is based on a consent in accordance with Art.  6 (para. 1, lit. a)  or Art.  9 (para. 2, lit a) GDPR or on a contract pursuant to Art. 6 (para. 1, lit b) GDPR and the processing is carried out using automated procedures. In exercising this right, you also have the right to obtain that your personal data in question is transmitted directly from one controller to another controller, as far as technically feasible. Freedoms and rights of other persons may not be affected. The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller. You can direct requests for your rights to us in any way, for example by contacting our Privacy Officer by e-mail. You can use the e-mail address: You also have the right to complain to us about the processing of your personal data by a data protection supervisory authority. For example, you can contact the Bavarian State Office for Data Protection Supervision.