Privacy Policy for Beam Website

This Privacy Policy applies to data processing by Beam GmbH, Kollwitzstraße 64 10435 Berlin, registered in the commercial register of the local court Charlottenburg under HRB 194610 B (“Beam”, “we”, “us”) regarding the use of our website available at https://beamberlin.com/ (“Website”).

With the following Privacy Policy, we inform you about the type, scope and purpose of the collection, use and other processing of Personal Data, as specified hereunder, when using the Website. Insofar as the processing of Personal Data is based on Art. 6 para. 1 lit. f) GDPR, the purposes mentioned also represent our legitimate interests.

When you use the Website, we process your Personal Data. “Personal Data” means any information relating to an identified or identifiable natural person. When Personal Data is processed, this means that we collect, store, transmit, delete or otherwise use this data.

When processing your Personal Data, we comply with the applicable data protection laws, in particular the General Data Protection Regulation (“GDPR”), the German Federal Data Protection Act (“BDSG”) and the German Telecommunications Digital Services Data Protection Act (“TDDDG”).

If the data processing carried out by us changes, we will adapt our Privacy Policy. We therefore ask you to inform yourself regularly about the content of our Privacy Policy. We will inform you if the change requires any action on your part, such as consent or other individual notification.

1. Controller

The Controller responsible for processing your Personal Data is:

Beam GmbH, Kollwitzstraße 64, 10435 Berlin

If you have any questions regarding data protection or exercising your rights in accordance with section 6 of this Privacy Policy in connection with the use of our Website you can contact the person responsible for data protection issues at: dataprotection@beamberlin.com.

2. Collection and Storage of your Personal Data; Type and Purpose of Processing and Relevant Legal Basis

In the following, we will inform you which Personal Data we process when you use the Website. We also explain the purpose for which we process your data and the legal basis on which we do so. In the following, we will inform you which Personal Data we process when you use the Website. We also explain the purpose for which we process your data and the legal basis on which we do so.

2.1 Informative Use of our Website (Automatically Collected Data)

During the mere informative use of our Website, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called server log files), whereby logging only takes place to the technically necessary extent. The following information is collected:

• Name of the Website accessed,
• File, date and time of retrieval,
• Volume of data transferred,
• Notification of successful retrieval,
• Browser type and version,
• Display resolution,
• Operating system of the user,
• Referrer URL (the website from which the access is made),
• IP address and the requesting provider,
• When the Website is accessed via a mobile device: country code, language, name of device, name of operating system and version.

The legal basis for the collection of this data is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in collecting this data results from the following purposes:

• ensuring optimal use of our Website,
• ensuring smooth connection establishment,
• evaluation of system security and stability.

2.2 Website Optimization and Website Analysis

(a) Functional Cookies

Our Website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on your computer. The cookie contains a string of characters that allows your system to be uniquely identified when you return to the Website.

Most of the cookies we use (“Session Cookies“) and the data stored and transmitted in them are automatically deleted at the end of your visit. Other cookies (“Persistent Cookies“) remain stored on your end device until you delete them.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally and activate the automatic deletion of cookies when closing the browser. You can delete cookies that have already been saved at any time. If you deactivate cookies, the functionality of the Website may be limited.

Some elements of our Website require that the calling browser can be identified even after a page change. Cookies may be stored for this purpose, which enable us to recognize your browser on your next visit.

If Personal Data is processed by means of cookies, we process them on the basis of a balancing of interests pursuant to Art. 6 para. 1 lit. f) GDPR (ensuring optimal use of our Website, ensuring smooth connection establishment, evaluation of system security and stability), which always also takes your interests into account.

(b) Analysis Cookies

When you visit our Website, cookies are also set that enable an analysis of your use of the Website for reach measurement (“Analysis Cookies“).

We use Analysis Cookies exclusively on the basis of your consent in accordance with section 25 para. 1 TDDDG and Art. 6 para. 1 lit. a) GDPR via our cookie banner. You can also access further information about the cookies we use via our cookie banner. You can also use the cookie banner to revoke your consent to the processing of your data through Analysis Cookies at any time.

We use the following Analysis Cookies:

(1) Google Analytics

To analyse your use of our Website, we use “Google Analytics”, a service provided by companies in the Google LLC Group, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), on the basis of a contract for commissioned data processing pursuant to Art. 28 GDPR.

Google Analytics uses cookies. The information generated by cookies about your use of our Website is usually transmitted to a Google server in the USA and stored there. The storage of Google Analytics cookies and the use of this analysis tool are based on your express consent in accordance with Art. 6 para. 1 lit. a) GDPR. Your consent can be revoked at any time.

We have activated the IP anonymisation function. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Google will use this information on our behalf to analyse your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage.

You have the option of preventing the storage of cookies by changing the settings of your browser software accordingly. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Further information about the processing of user data by Google Analytics can be found in Google’s privacy policy at: https://support.google.com/analytics/answer/6004245?hl=en.

(2) Google Tag Manager

We use “Google Tag Manager” to integrate content from third-party providers. Google Tag Manager itself does not store or read cookies or similar personal data processing technologies which require consent. Google Tag Manager only controls the conditions under which the other programs, such as Google Analytics, are used on our Website.

(3) Fullstory

We use “Fullstory”, a digital experience analytics and session replay service provided by FullStory, Inc., 120 Ottley Drive NE, Suite 100, Atlanta, GA 30324, USA. Fullstory enables us to analyze and improve the usability and performance of our Website by recording and evaluating user interactions.

The information generated by Fullstory cookies about your use of our Website include your:

• user behavior and interactions on our Website;
• browser type and version;
• operating system used;
• referrer URL (the website visited before accessing our Website);
• IP address; and
• session and request information.

Fullstory uses cookies and similar technologies, including a unique user identifier cookie (fs_uid), to associate interactions with a particular browsing session.

The storage of Fullstory cookies and the use of Fullstory’s analytics and session replay technologies are based on your express consent in accordance with Art. 6 para. 1 lit. a) GDPR. Your consent can be revoked at any time. You can activate the opt-out link https://www.fullstory.com/optout/.

Further information about the processing of personal data by Fullstory can be found in Fullstory’s Privacy Policy at: https://www.fullstory.com/legal/privacy-policy/ and Fullstory’s GDPR information at: https://www.fullstory.com/resources/fullstory-gdpr-you/.

(4) Typeform

On our Website, we inform you about company building and startup success factory. If you want to contact us for the purpose of founding a company with us or if he wants to provide us with information or feedback, you can choose to do so through a structured web form. For this we use Typeform SL, Vía Augusta 29-31, 08006 Barcelona, Spain (“Typeform”) on the basis of your consent in accordance with Art. 6 para. 1 lit. a) GDPR. Using this tool, we can provide online forms, surveys and other input fields, as well as process and store the data entered by users. The processing serves to handle and evaluate the respective request, survey or data entry, as well as to improve our services. Cookies may be used for this purpose, which enable the recognition of users. When using Typeform, usage data may also be processed.

When using Typeform, data may be transferred to the USA. Typeform uses Standard Contractual Clauses of the European Commission in order to ensure an adequate level of data protection.

Further information can be found in Typeform’s privacy policy: https://admin.typeform.com/to/dwk6gt?typeform-source=www.google.com

(5) YouTube

We use YouTube, a video hosting service provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube“), to provide and display video content on our Website.

When you interact with a YouTube video on our Website, YouTube may process information about your use of our Website, including:

• browser type and version;
• operating system used;
• referrer URL (the website visited before accessing our Website);
• IP address; and
• session and usage information.

The storage of YouTube cookies and the use of YouTube services are based on your express consent in accordance with Art. 6 para. 1 lit. a GDPR. Your consent can be revoked at any time.

3. Recipients or categories of recipients of your Personal Data3 Recipients or categories of recipients of your Personal Data

We sometimes use external service providers to process your Personal Data (e.g. IT service providers). In part these service providers process your Personal Data as data processors on our behalf, in accordance with our instructions and under our supervision exclusively for the purposes described in this Privacy Policy according to Art. 28 GDPR, in part they act as independent data controllers. In the last case we only forward your Personal Data if necessary for the fulfillment of the contract, in which case the legal basis for the transfer is Art. 6 para. 1 lit. b) GDPR.

4. Transfer of Personal Data outside the EEA

Your Personal Data may be transferred or disclosed to third-party companies which can be located outside the European Economic Area (EEA), i.e. in third countries. This concerns the use of the following services: Your Personal Data may be transferred or disclosed to third-party companies which can be located outside the European Economic Area (EEA), i.e. in third countries. This concerns the use of the following services:

In the context of the transfer of Personal Data to a third country, we will regularly ensure by means of suitable guarantees, for example by concluding the standard contractual clauses of the European Commission (“SCC”), that data is only transferred to a third country on the basis of a level of protection corresponding to the GDPR.

With respect to Personal Data transferred to the USA to

• Google LLC,
• FullStory, Inc.,
• The Rocket Science Group LLC

the data security is ensured by the EU-US Data Privacy Framework which has been approved by the EU Commission via its Adequacy Decision dated 10 July 2023 (C(2023)4745final).

5. Links to Social Media 5 Links to Social Media

You can find links to external social media platforms on our Website. Beam is not the controller of the personal data collected by these social media platforms. The social media platforms linked are e.g. the following:

• AngelList: AngelList Limited, White Bear Yard, 144a Clerkenwell Road, London EC1R 5DF, United Kingdom – AngelList Privacy Statement
• Crunchbase: Crunchbase Headquarters, 564 Market Street, Suite 700, San Francisco, CA 94104, USA – Crunchbase Privacy Statement
• LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland – LinkedIn Privacy Statement
• Medium: A Medium Corporation, 799 Market Street, 5th Floor, San Francisco, CA 94103, USA – Medium Privacy Statement
• Soundcloud: SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany – Soundcloud Privacy Statement
• Twitter: Twitter Inc., 1355 Market Street, Suite 900 , San Francisco, CA 94103, USA – Twitter Privacy Statement
• YouTube: YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA – Youtube Privacy Statement

If you visit these social media platforms, please be aware that the controller of these social media platforms may collect and process information that is linked to your user account and is stored and processed according to the privacy regulations of the respective controller. Please ask the respective controller of the linked platform for information about the details of the data processing prior to accessing the respective websites.

6. When do we delete your Personal Data?

We delete your data when it is no longer required for the purposes for which it was originally collected.

Irrespective of this, we store your Personal Data processed when using the Software and/or the Website until the expiry of the statutory or possible contractual warranty rights. After this period has expired, we will retain the information required under commercial and tax law relating to the contractual relationship for the periods specified by law. For this period, the Personal Data will only be processed again in the event of a review by the tax authorities.

7. Your Rights

With regard to our processing of your Personal Data, you are entitled to the following rights free of charge:

7.1 Right to information pursuant to Art. 15 GDPR

You have the right to obtain information from us as to whether and what Personal Data we process about you. This also includes information on how long and for what purpose we process the Personal Data, from which source it originates and to which recipients or categories of recipients we pass it on. We can also provide you with a copy of this Personal Data.

7.2 Right to rectification pursuant to Art. 16 GDPR

You have the right to demand that we correct any incorrect or no longer correct information about you without delay. You can also request that we complete your incomplete Personal Data. If this is required by law, we will also inform third parties of this correction if we have passed on your Personal Data to them.

7.3 Right to erasure pursuant to Art. 17 GDPR

You have the right to request that we erase your Personal Data without undue delay if one of the following applies:

• Your Personal Data is no longer necessary for the purposes for which it was collected or otherwise processed, or the purpose has been achieved;
• You withdraw your consent and there is no other legal basis for the processing;
• You object to the processing and there are no overriding legitimate grounds for the processing; in the case of the use of Personal Data for direct marketing purposes, a mere objection on your part to the processing is sufficient;
• Your Personal Data has been processed unlawfully;
• the deletion of your Personal Data is necessary to fulfil a legal obligation under EU law or the law of a member state to which we are subject.

Your right to erasure may be restricted on the basis of statutory provisions. This includes in particular the restrictions listed in Art. 17 GDPR.

7.4 Right to restriction of processing pursuant to Art. 18 GDPR

You have the right to obtain from us restriction of processing of your Personal Data if one of the following grounds applies:

• You contest the correctness of your Personal Data for a period of time that enables us to verify the correctness of the Personal Data;
• the processing is unlawful and you oppose the erasure of the Personal Data and request the restriction of their use instead;
• We no longer need your Personal Data for the purposes of the processing, but you need it for the establishment, exercise or defence of legal claims, or
• You have objected to processing as long as it is not yet clear whether our legitimate grounds override yours.

If you have obtained a restriction of processing in accordance with the above list, we will inform you before the restriction is cancelled.

7.5 Right to data portability pursuant to Art. 20 GDPR

You have the right to receive the Personal Data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those Personal Data to a third party. The exercise of this right does not affect your right to erasure.

7.6 Right to object pursuant to Art. 21 GDPR

You have the right to object to the processing of your Personal Data at any time for reasons arising from your particular situation if we base this processing on legitimate interests pursuant to Art. 6 para. 1 lit. f) GDPR. If you file an objection, we will no longer process your Personal Data, except in two cases

• We can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or
• The processing serves the assertion, exercise or defence of legal claims.

In particular, if we process your Personal Data for direct marketing purposes, you have the right to object at any time to the processing of your Personal Data for the purpose of such marketing. If you object to the processing of your Personal Data for direct marketing purposes, we will no longer use your Personal Data for this purpose.

7.7 Right to withdrawal of consent pursuant to Art. 7 GDPR

You can withdraw the consent you have given us at any time with effect for the future. This withdrawal can be made in the form of an informal notification to the above-mentioned contact addresses. If you withdraw your consent, this will not affect the legitimacy of the Personal Data processing carried out up to that point.

7.8 Right to file a complaint with the supervisory authority

If you believe that the processing of your Personal Data by us violates applicable data protection law, you have the right to file a complaint with the competent supervisory authority. The supervisory authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin
+49 30 13889-0
mailbox@datenschutz-berlin.de

In addition, you can file a complaint with the data protection supervisory authority responsible for you at your place of residence.

8. Automated individual decision-making including profiling pursuant to Art. 22 GDPR

We do not process your Personal Data for automated decisions in individual cases, including profiling within the meaning of Art. 22 GDPR.

Status: June 2026