Privacy Policy Social Media

1. Controller / contact details

In the following we inform you about the processing of your personal data carried out by Scalable Capital Bank GmbH, Seitzstraße 8e, 80538 Munich, Germany ("Scalable", "we" or "Controller") in the context of the use of our social media pages.

To exercise your rights and for further information, please contact us by e-mail at service@scalable.capital or by post at Scalable Capital Bank GmbH, Seitzstraße 8e, 80538 Munich, Germany.

You can reach our Data Protection Officer at: privacy@scalable.capital.

Further information on Scalable Capital can be found in the legal notice.

Scalable Capital operates its own social media pages together with the operator of the following social media platform:

Please note that the operator of the respective social media platform on which our social media pages are operated is itself responsible for the processing of personal data that is generated when using these. Further information on the processing of your personal data by the operator of the respective social media platform can be found in section 2.2.

2. Processing of your personal data

2.1 Processing of your personal data by Scalable Capital

As the operator of social media channels, we process your actions and interactions when you visit our site. For example, we collect the content of your messages, posts, or comments that you either send directly to us or leave on our site, as well as your likes or shares of posts. Depending on your profile settings, which you can adjust yourself in your settings on the social media platform, we process your publicly visible profile data, such as your name, profile picture, and other information, such as your profile description. Please note that we generally advise against transmitting or sharing sensitive data or confidential information (e.g., contract data, bank details) via social media platforms. Please use a secure transmission method, such as letter post or email.
On our social media channels, we process the aforementioned data in accordance with Art. 6 (1) (f) GDPR in order to share information about our company and our services and to communicate with our followers and interested parties. We also use these channels to respond to your messages, inquiries, posts, or comments that you send to us (Art. 6(1)(b) GDPR).
Some operators of social media platforms provide us with anonymous usage statistics or page insights data for our social media channels based on the actions and interactions of our followers. These statistics include, for example, likes, sharing of posts, comments, etc., the number of followers, views of individual page areas, the reach of a post, and statistics on followers by age, language, origin, or interests. We use this information to connect with our followers and interested parties, analyze the use and reach of our posts, evaluate content, and design our social media channels to be as relevant as possible to our target audience. The creation of these usage statistics and the processing of the underlying data is carried out on the operator's own responsibility by the operator of the respective social media platform and without us being able to view the personal data of individual followers or users. Processing is carried out on the basis of our aforementioned legitimate interests in accordance with Art. 6 (1)(f) GDPR.
We use these anonymous usage statistics to place targeted, interest-based advertising on and outside the respective social media platforms. If you have an account on the respective social media platform, interest-based advertising may be displayed on all devices on which you are or were logged in. This data processing is based on our aforementioned legitimate interests pursuant to Art. 6 (1) (f) GDPR. If, in the context of interest-based advertising, we carry out an extended comparison with customer lists that we upload to the respective social media platform for this purpose, this would only be done on the basis of your consent (Art. 6 (1) (a) GDPR).
Your personal data will be processed for as long as is necessary for the aforementioned purposes. In the event of an objection to processing based on our legitimate interests (Art. 6 (1) (f) GDPR), we will delete personal data unless further processing is permitted under the relevant legal provisions. We also delete personal data if we are obliged to do so for other legal reasons. We generally delete personal data immediately after the legal basis ceases to apply, if it is no longer required for the aforementioned purposes or if the aforementioned purposes cease to apply, and provided that there is no other legal basis (e.g., commercial and tax law retention periods).

2.2 Processing of your personal data by the operator of the respective social media platform

Please note that the operator of the respective social media platform is solely responsible for the processing of personal data on the platform on which we operate our social media channels. The operator of the platform generally processes your personal data during your visit to one of our social media channels, regardless of whether you have a user account on the respective social media platform or are logged in to the respective social media platform. Please note that cookies and other storage and, in some cases, cross-device tracking technologies are also generally used. Personalized usage statistics may be created, for example, for our own market research, advertising, or other commercial or business purposes, and personal data may also be processed outside the European Union. We have no influence or access to this processing.

Further information on the processing of your personal data by the operator of the respective social media platform can be found in the information on data protection on the following websites of the respective social media platform

3. Your rights

Right to access: You have the right to request information about the data stored about you, its origin, recipients or categories of recipients to whom the data is disclosed, as well as the purpose of the storage ( Art. 15 GDPR).

Right to rectification: You have a right to rectification and/or completion vis-à-vis the controller if the personal data processed concerning you are inaccurate or incomplete (Art. 16 GDPR).

Right to deletion: You can demand that we delete the personal data relating to you without delay. However, there is no right to erasure if statutory, regulatory or other sovereign retention obligations prevent erasure or if the retention serves the assertion, exercise or defence of legal claims (Art. 17 GDPR).

Right to restriction of processing: You may, under certain conditions (disputed accuracy, unlawful processing, cessation of the purpose of processing or lodging an objection), request the restriction of the processing of personal data concerning you (Art. 18 GDPR).

Right to data transfer: You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format (Art. 20 GDPR).

Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is processed on the basis of Art. 6 (1) (e) or (f) GDPR. We will then no longer process your data unless there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing is for the establishment, exercise or defence of legal claims (Art. 21 GDPR).

Right to complain to the supervisory authority: Pursuant to Art. 77 GDPR, you have the right to complain to a supervisory authority if you are of the opinion that the processing of personal data is not carried out lawfully. The address of the supervisory authority responsible for our company is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Postfach 1349, 91504 Ansbach, Germany, phone: +49 (0) 981 180093-0, email: poststelle@lda.bayern.de.

Version: 09/2025