Privacy Policy
Last updated: 29 May 2025
Controller
The controller responsible for processing personal data in connection with the “Vision” website and app is:
1UP Management GmbH
Emil-Hoffmann-Straße 55-59
50996 Köln
Deutschland
Commercial Register: Cologne Local Court, HRB 121333
VAT ID: DE346703976
Email: impressum@1up.management
(Hereinafter also referred to as “we”, “us” or the “Controller”.)
If you have questions about data protection or wish to exercise your rights, you can contact us at the email address above at any time.
General information about data processing
We take the protection of your personal data seriously. We process your data confidentially and in accordance with applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR), and this Privacy Policy.
We process personal data only to the extent necessary, for specified purposes and lawfully. In doing so, we follow these principles:
- Purpose limitation: We process data only for the purposes stated in each case.
- Data minimisation: We collect only the data needed for the relevant purpose.
- Storage limitation: We retain your data only for as long as necessary for the relevant purpose or as required by law. We then delete or restrict it.
Legal bases for processing
Unless this Privacy Policy states otherwise, the following applies:
- Performance of a contract (Art. 6(1)(b) GDPR): Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract, for example to provide services you request in our app.
- Consent (Art. 6(1)(a) GDPR): Where we ask for your explicit consent to process data, for example for optional features or third-party services that require consent, such as analytics cookies. You may withdraw your consent at any time with effect for the future.
- Legal obligation (Art. 6(1)(c) GDPR): Where we are legally required to process or retain data, for example payment records subject to commercial and tax retention requirements.
- Legitimate interests (Art. 6(1)(f) GDPR): Where we have a legitimate interest in processing and your interests do not override it. This may include ensuring the security and proper functioning of our website and services. You may object to processing based on legitimate interests on grounds relating to your particular situation.
General information collected when you visit our website
Nature and purpose of processing
When you access our website without registering or otherwise submitting information, general information is collected automatically. This server log data may include your browser type, operating system, internet service provider domain, IP address and similar information.
We process it in particular to:
- ensure a reliable connection to the website;
- ensure smooth use of the website;
- assess system security and stability; and
- optimise our website.
We do not use this data to draw conclusions about you. We may anonymise and statistically analyse this information to improve our website and the technology behind it.
Legal basis and legitimate interest
Processing is based on our legitimate interest in improving the stability and functionality of our website (Art. 6(1)(f) GDPR).
Recipients
Data may be received by technical service providers acting as processors for the operation and maintenance of our website.
Retention period
We delete data once it is no longer needed for the purpose for which it was collected. Data required to make the website available is generally no longer needed when the relevant session ends.
Whether provision is required
Providing this personal data is not required by law or contract. However, without your IP address, we cannot ensure that our website and its functions will work. Some services may therefore be unavailable or limited, so an objection to this processing is not possible.
Google Analytics
Nature and purpose of processing
We use Google Analytics 4 on our website and web app (app.1up.vision). It is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to analyse how you use our services. The resulting information, such as pages viewed, time spent, approximate location, device and browser information, and how you found us, is sent to and stored on a Google server.
We analyse this data to understand how people find and use our website, which content they are interested in, and where users abandon our checkout process. When a paid subscription is completed, we also send Google Analytics a server-side event containing the completion, selected plan and amount. This event does not contain your name, email address or payment details.
IP anonymisation is enabled by default in Google Analytics 4. Google truncates your IP address, which is not stored permanently. The collected data is not combined with other Google data.
Legal basis
Information is stored on and accessed from your device only with your consent under Section 25(1) of the German TDDDG. Subsequent processing of your personal data is based on your consent under Art. 6(1)(a) GDPR. Until you consent, no analytics cookies are set and no identifiers are stored on your device.
Withdrawing consent
You can withdraw your consent at any time with effect for the future by selecting “Reject” in the cookie notice or deleting the vision_consent cookie in your browser. The notice will then be shown again. Withdrawal does not affect the lawfulness of processing carried out before it.
Recipients and transfers to third countries
Google Ireland Limited receives the data as our processor. A transfer to Google LLC in the United States cannot be ruled out. Google LLC is certified under the EU–US Data Privacy Framework; we have also agreed the European Commission’s Standard Contractual Clauses with Google.
Retention period
Google Analytics cookies may remain active for up to two years. User-level and event-level data is automatically deleted after no more than 14 months.
Further information
For more information about Google’s handling of user data, see Google’s privacy policy. You can also use the browser add-on at tools.google.com/dlpage/gaoptout to prevent Google Analytics from collecting data.
Whether provision is required
Providing this data is not required by law or contract. You can use our website and web app without giving consent.
Third-party services and connected platforms
We use external service providers to operate Vision and make its features available. You can also connect external platforms to your Vision account. Depending on the feature you use, personal data may be sent to and processed by the relevant provider. A provider may act as our processor or as an independent controller; its role depends on the service and the processing in question.
- Cloudflare: Network services, video streaming, video-call features and our self-hosted real-time communications.
- Stripe: Payment processing and subscription management.
- Amazon S3: Storage of files and recordings.
- Twitch and Kick: Connections to streaming platforms and the integrations you enable.
- Apple: Sign in to Vision with Apple.
- Google: Various Google services depending on the feature, including Google Analytics.
- Streamlabs, StreamElements and TipeeeStream: Optional connections for alerts and other streaming features.
- Resend: Email delivery, for example service-related messages.
- Vercel: Website hosting and delivery, as well as web analytics.
Recordings are created only when the relevant feature is explicitly activated.
When you connect an optional platform or use a third-party feature, the data needed for that feature is sent to the relevant provider. The provider’s privacy terms also apply to your use of its platform. For more information about how each provider processes data, see its privacy notices and the terms that apply to the relevant service.
Your rights
Subject to the conditions of the GDPR, you can request access to your personal data and ask us to correct or delete it or restrict its processing. You may also exercise your right to data portability. You can object to processing based on legitimate interests on grounds relating to your particular situation.
You can withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. To exercise your rights, contact us at the email address above.
Contact
1UP Management GmbH
Emil-Hoffmann-Straße 55-59
50996 Köln, Deutschland
Email: impressum@1up.management
If you have questions about data protection, you can contact us at the email address above.
