Your Data. Your Control.

Our Responsibilty.

Contact Us
Privacy First | July, 2025

1. Controller

Branded Capital UG (haftungsbeschränkt)
Rosenthaler Straße 40
10178 Berlin, Germany
Email: data@branded-capital.com

2. Data Protection Officer

Alex Schwaderer
Email: as@branded-capital.com

3. General Information

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

3.1  Purpose & Legal Bases

We collect and process data for the following purposes:

Handling user inquiries and communication: Art. 6(1)(b) GDPR

Website performance and analytics: Art. 6(1)(f) GDPR

Marketing and newsletters (with consent): Art. 6(1)(a) GDPR

3.2 Categories of Data

Usage data: IP address, browser type, device information, referring website

Contact data: Name, email address, and other information you provide via forms

4. Cookies & Analytics

We use necessary cookies for website functionality (session-based, deleted upon browser closure).

Analytics tools (e.g., Matomo or GDPR-compliant alternatives) are used only with your consent.

You may opt out or manage preferences via our cookie banner at any time.0

5. Data Recipients

Hosting and IT service providers (e.g., AWS Europe/Frankfurt) under GDPR-compliant data processing agreements

Analytics or email marketing providers, with proper data protection measures in place

Authorities, where required by law

6. Data Retention

We only retain personal data as long as necessary for the respective purpose or to meet legal obligations (e.g., retention periods under tax law).

7. Your Rights

As a data subject, you have the right to:

Access your data (Art. 15 GDPR)

Correct inaccurate data (Art. 16)

Delete your data (Art. 17)

Restrict processing (Art. 18)

Data portability (Art. 20)

Object to processing based on legitimate interests (Art. 21)

Withdraw consent at any time (Art. 7(3))

Lodge a complaint with a supervisory authority (Art. 77); e.g., the Berlin Commissioner for Data Protection

8. Third-Country Transfers

If services like Google Analytics or YouTube are used, data may be transferred to non-EU countries (e.g., the US) with appropriate safeguards (Standard Contractual Clauses, EU-US Data Privacy Framework).

Social media integrations (e.g., LinkedIn plugins) will only load after user interaction (“two-click solution”) and follow GDPR requirements.

9. Data Security

We apply appropriate technical and organizational measures (TOMs), including:

Secure data transmission (TLS/SSL)

Access controls and encryption

Regular security checks and audits

10. Updates

This privacy policy was last updated in June 2025. We reserve the right to update this notice in line with legal or operational changes. The current version will always be available on our website.

Website Implementation Tip

Link this privacy policy in your footer

Use a GDPR-compliant cookie banner with opt-in for non-essential services

Ensure that all contact forms include a consent checkbox where required

Branded Capital only processes your data when necessary – for communication, analytics, or 
services – always in full compliance with GDPR. Your data is handled securely and transparently, 
and you remain in control at all times.

Let’s  build Brand into your
Value Creation Strategy