This policy explains what happens to your data when you use this website. Lvlup One is a business service for trading creators who want to launch their own prop firm.
1. Controller
LVLUP One UG (haftungsbeschränkt)
Am Langenwall 1
18439 Stralsund
Germany
Email: info@lvlupfutures.com
We have not appointed a data protection officer, as we are not required to under Article 37 GDPR and Section 38 BDSG.
2. Hosting and server logs
This website and its database run on servers operated by Render Services, Inc. Render acts as our processor under Article 28 GDPR.
When you open a page, your browser sends technical information, including your IP address and browser details, which is needed to deliver the site. Our host keeps short-lived operational logs to run the service and detect attacks.
| Purpose | Delivering the website, keeping it stable and secure |
|---|---|
| Legal basis | Article 6 (1) (f) GDPR, our legitimate interest in secure operation |
| Retention | Operational logs are kept only as long as needed for these purposes |
3. Cookies and storage on your device
We only store information on your device where it is strictly necessary for the service you asked for, or where you have given consent (Section 25 TDDDG).
- Your cookie choice: saved in your browser's local storage under
lv1_consent, so we do not ask on every page. - Where you came from: the referring site, landing page and campaign tags of your visit are kept in your browser's session storage (
lv1_src) until you close the tab. They are sent to us only if you apply.
Google Analytics load only after you allow them. See “Tools that run only with your consent” below. The full list is in our cookie policy.
4. Applications
When you apply to launch a prop firm with us, we receive the details you enter.
| Data | Name, email, main channel, plan choice, audience size and market; where you came from (referring site, landing page, campaign tags); and the country your request came from, as reported by our network provider |
|---|---|
| Purpose | Reviewing your application and contacting you about it |
| Legal basis | Article 6 (1) (b) GDPR, steps before a contract at your request |
| Recipients | Stored in our database at Render. Our team gets an email alert sent through Resend, Inc. |
| Retention | Up to 24 months after our last contact, unless we start working together; then contract and tax retention periods apply |
To prevent abuse, we limit how often an IP address can submit the form. The IP address is held in memory for a few minutes for this and is not stored with your application.
Spam protection (Cloudflare Turnstile)
Provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. The form uses Turnstile to check that you are a person. Turnstile processes your IP address and technical browser data. Legal basis: Article 6 (1) (f) GDPR, our interest in keeping the form free of spam, and Section 25 (2) TDDDG. Further information: Cloudflare privacy policy.
Booking a call (Calendly)
Provider: Calendly, LLC, 115 E Main St., Ste A1B, Buford, GA 30518, USA. After you apply, you can book a call with us on the confirmation page. Only then does the page load Calendly's booking calendar, with your name and email from the form filled in. Calendly processes the details you enter, the time you pick, your IP address and technical browser data, and may set cookies it needs for booking; it shows its own cookie notice. When you book, the page tells us that a call was booked for your application. Calendly processes data in the United States; Calendly, LLC is certified under the EU-US Data Privacy Framework. Legal basis: Article 6 (1) (b) GDPR, steps before a contract at your request. Further information: Calendly privacy notice.
5. Tools that run only with your consent
Google Analytics 4
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you allow analytics, Google Analytics helps us understand how visitors use our pages. It processes page visits, session information, browser and device details and a pseudonymous cookie identifier; connecting to Google also transmits your IP address. Google may process data outside the EU, including in the United States. Legal basis: Article 6 (1) (a) GDPR and Section 25 (1) TDDDG, your consent. Further information: Google privacy policy.
You can withdraw your consent at any time with the Cookie settings link in the footer. Withdrawal does not affect processing before it.
6. Service providers and transfers
These providers process data on our behalf: Render (hosting and database); Resend (application alerts to our team); Cloudflare (spam check on the form); Calendly (call booking, only after you apply); Google (analytics, only with consent). Some are based outside the EU. Where that is the case, transfers rely on an adequacy decision, such as the EU-US Data Privacy Framework, or on the EU Standard Contractual Clauses.
Fonts and images are delivered from our own server. Links to other websites are subject to the privacy policy of the respective provider.
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Article 15)
- have inaccurate data corrected (Article 16)
- have your data erased (Article 17)
- have processing restricted (Article 18)
- receive your data in a portable format (Article 20)
- object to processing based on legitimate interests, at any time and on grounds relating to your particular situation (Article 21)
- withdraw consent you have given, with effect for the future (Article 7 (3))
To exercise any of these rights, write to info@lvlupfutures.com. You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:
Der Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern
Werderstraße 74a, 19055 Schwerin, Germany
www.datenschutz-mv.de
8. Changes to this policy
We update this policy when the way we process data changes, for example when we add or remove a service. The date at the top shows the current version.