Privacy Policy

Last updated: May 2026

We take the protection of your personal data seriously. This Privacy Policy explains what data we collect, why we collect it, and how we handle it in accordance with the EU General Data Protection Regulation (GDPR / DSGVO).

1. Controller

The controller responsible for data processing on this website is:

SpotYourStartup
Contact: contact@spotyourstartup.com

2. Data We Collect

We only collect data that you voluntarily provide to us. Specifically:

• Email address — when you sign up for our waitlist via the form on our homepage.

We do not use cookies, tracking pixels, or any analytics tools. No browsing data, IP addresses, or device information is stored by us.

3. Purpose and Legal Basis

Your email address is collected solely for the purpose of notifying you when SpotYourStartup launches. The legal basis for this processing is your explicit consent (Art. 6 para. 1 lit. a GDPR), which you grant by submitting the waitlist form.

4. Email Service Provider — Brevo (Sendinblue)

We use Brevo (formerly Sendinblue, operated by Sendinblue SAS, 55 rue d'Amsterdam, 75008 Paris, France) as our email marketing platform. Your email address is stored on Brevo's servers.

Brevo is certified under the EU-US Data Privacy Framework and processes data in accordance with GDPR. You can view Brevo's privacy policy at brevo.com/legal/privacypolicy.

Brevo provides a Data Processing Agreement (DPA) in accordance with Art. 28 GDPR, which applies to all customers using their platform. By using Brevo, this agreement is in place as part of their standard terms.

5. Data Retention

Your email address will be retained on our waitlist until:

• You unsubscribe / request deletion, or
• SpotYourStartup launches and the waitlist is no longer needed.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) — request a copy of the data we hold about you
• Right to rectification (Art. 16 GDPR) — request correction of inaccurate data
• Right to erasure (Art. 17 GDPR) — request deletion of your data ("right to be forgotten")
• Right to restriction (Art. 18 GDPR) — request restricted processing of your data
• Right to data portability (Art. 20 GDPR) — receive your data in a machine-readable format
• Right to withdraw consent (Art. 7 para. 3 GDPR) — withdraw consent at any time without affecting the lawfulness of prior processing
• Right to object (Art. 21 GDPR) — object to processing of your personal data under certain circumstances
• Right to lodge a complaint — you have the right to complain to a supervisory authority, e.g. the Thuringian Data Protection Authority (TLfDI): tlfdi.de

To exercise any of these rights, please contact us at contact@spotyourstartup.com.

7. Cookies and Tracking

This website does not use cookies, tracking scripts, or analytics services. We do not use any third-party trackers or advertising pixels. The only data temporarily stored in your browser is a session-scoped counter used to display the approximate number of signups — this data exists only in your browser's session storage, is never transmitted to our servers, and is automatically deleted when you close your browser tab.

8. External Links

Our website may contain links to external websites. We have no control over the content or privacy practices of those sites and accept no responsibility for them.

9. Pre-Launch Status

SpotYourStartup is currently in a pre-launch phase. We only collect email addresses for the purpose of notifying you at launch. We do not yet offer a commercial service, process payments, or collect additional personal data beyond your email address for the waitlist.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects when the latest changes were made. We will notify waitlist members by email of any material changes that affect the processing of their data.

For any privacy-related questions, contact us at contact@spotyourstartup.com.