Privacy Policy
Protecting your personal data matters to us. This privacy policy explains which personal data we process on this website and for which purposes – in accordance with Regulation (EU) 2016/679 (GDPR) and the Italian Data Protection Code (Legislative Decree 196/2003, as amended).
1. Controller
SUCHWERT GmbH
Innsbruckerstraße 33 – Kampill Center, I-39100 Bolzano (BZ), Italy
Email: [email protected] · Phone: +39 0471 379 044
2. Hosting and server log files
This website is hosted by DigitalOcean LLC. When you visit the website, technical access data is processed automatically (IP address, date and time, page accessed, browser type). This data is technically necessary for the secure operation of the website (Art. 6(1)(f) GDPR) and is not combined with other data sources.
3. Contact form
If you write to us via the contact form, we process the data you provide (name, company where applicable, email address, message) solely to handle your enquiry (Art. 6(1)(b) GDPR). Your message is delivered to us by email and stored in our CRM; once your enquiry has been dealt with, the data is deleted unless statutory retention obligations apply.
4. Service enquiries (/enquiry)
Through our enquiry form we process the information you provide (requested services, industry, optionally your website and advertising budget, company name, contact person, email address, optionally a phone number and message) to handle your enquiry, to get in touch with you and to prepare for a meeting (Art. 6(1)(b) GDPR). The data is stored in our CRM and additionally delivered to us by email.
SUCHWERT is part of the UPSCALE group. We operate our CRM jointly with our parent company UPSCALE vGmbH (Bolzano). If your enquiry also concerns services offered by UPSCALE (such as social media or content production), we pass it on to UPSCALE for that purpose, and UPSCALE may contact you about it.
With both forms, we also transmit where the visit to this website came from: source, medium and campaign (UTM parameters), the referring page, the landing page and the time of the first visit, as well as the page from which the form was submitted. Your browser stores the origin information for the current session (sessionStorage) and – only with your consent to marketing cookies – for up to 90 days (localStorage). It does not leave your browser until you submit a form and is used solely to evaluate which channels enquiries come from (Art. 6(1)(f) GDPR; for storage beyond the session, Art. 6(1)(a) GDPR).
5. Recipients and processors
To process the data submitted via our forms, we use the following service providers: Airtable Inc. (USA, CRM/database service), Google Ireland Ltd. (email communication), Slack Technologies Ltd. (Ireland; internal notification of our team about incoming enquiries) and DigitalOcean LLC (hosting). Where data is transferred to the USA, the transfer is based on the EU-U.S. Data Privacy Framework or on EU standard contractual clauses (Art. 46 GDPR). No further disclosure to third parties takes place.
6. Cookies, analytics and advertising platforms
The technically necessary functions of this website work without tracking cookies. For reach measurement, conversion measurement and interest-based advertising we use the following services – exclusively after your explicit consent via the cookie banner (Art. 6(1)(a) GDPR):
Google Analytics 4 (Google Ireland Ltd.): analysis of website usage in aggregated form (IP addresses are processed in truncated form).
Google Ads (Google Ireland Ltd.): conversion tracking and remarketing for ads in the Google advertising network. With both Google services, data may be transferred to Google LLC (USA).
META Pixel and META Conversions API (META Platforms Ireland Ltd.): measuring the effectiveness of our ads on Facebook and Instagram, conversion tracking (including server-side) and building audiences for interest-based advertising and retargeting. Data may be transferred to META Platforms Inc. (USA).
In practice, this works as follows: tracking scripts are only loaded after your consent. If you reach this website via one of our ads, we store the click identifier assigned by the platform (“gclid” or “fbclid”) in our own first-party cookie. If you then submit one of our forms, we may additionally transmit the corresponding conversion event server-side – your email address, name and, where provided, phone number are pseudonymised (hashed) using SHA-256 before transmission; the platform uses them solely to match them against existing accounts. Browser and server events carry a shared event ID so nothing is counted twice. We also log your consent decision itself for accountability purposes (time, version, selection).
The same applies to comparable measurement and advertising technologies of other platforms, should we use them – these are also loaded only after consent and are listed individually in the cookie banner. Transfers to the USA are based on the EU-U.S. Data Privacy Framework or EU standard contractual clauses. You can withdraw your consent at any time with effect for the future via the cookie settings. Without consent, these services are not loaded.
The following cookies and browser storage entries are used:
| Name | Purpose | Duration | Category |
|---|---|---|---|
| up-consent | Stores your cookie decision (version, time, selection) | 180 days | Necessary (first-party) |
| _upgcl | Stores the Google click identifier (gclid) for server-side conversion attribution; only set after consent | 90 days | Marketing (first-party) |
| _gcl_au, _gcl_aw | Set by Google tags; click identifiers for Google Ads conversion measurement | 90 days | Marketing (Google) |
| _ga, _ga_* | Set by Google Analytics; pseudonymous visitor identifier for usage analysis | 2 years | Statistics (Google) |
| _upfbc | Stores the META click identifier (fbclid) for server-side conversion attribution; only set after consent | 90 days | Marketing (first-party) |
| _fbc, _fbp | Set by the META Pixel; click and browser identifiers for attributing ad clicks | 90 days | Marketing (META) |
| up-attrib-session | Stores where the visit came from (e.g. UTM parameters, referring page) for the current session in order to attribute an enquiry; only transmitted when a form is submitted | Session (sessionStorage) | Enquiry attribution (first-party) |
| up-attrib-first | Stores where the first visit came from across multiple visits; only set after consent | 90 days (localStorage) | Marketing (first-party) |
7. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing (Art. 15–21 GDPR). You can withdraw any consent you have given at any time. To do so, simply contact [email protected]. You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
8. Retention period
We store personal data only for as long as is necessary for the purposes stated or as required by statutory retention obligations. After that, the data is deleted.
9. Changes
We will update this privacy policy whenever the data processing on this website changes. The version published here applies.
This translation is provided for convenience. In case of doubt, the German version prevails.
Last updated: September 2026