This English translation is provided for convenience. The German version is legally binding.
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Sinio UG (haftungsbeschränkt)
Marienthaler Straße 91
20535 Hamburg, Germany
Email: [email protected]
For any data protection inquiries, please contact us at [email protected].
SlideUp is a live interaction platform for creators and fans. We only process personal data to the extent necessary for providing our platform and related services. Processing is carried out in accordance with the GDPR and applicable German data protection law.
Categories of data subjects:
Each time our website is accessed, access data is automatically collected and stored in server log files. This includes:
This processing is necessary for providing and securing the website.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure provision of the website).
When you sign up for our waitlist, we process the following data:
This data is used to manage the waitlist and to contact you when access is granted.
Legal basis: Art. 6(1)(a) GDPR (consent). You may withdraw your consent at any time by contacting us via email. Data will be deleted once the waitlist purpose ceases or you withdraw your consent.
During registration, we process your email address and password to provide your user account. Authentication is handled by a specialized authentication service.
Legal basis: Art. 6(1)(b) GDPR (performance of contract).
During the onboarding process, we collect additional personal data required for contract performance and compliance with legal obligations:
This data is processed for identity verification, payout setup, and compliance with tax law obligations.
Legal basis: Art. 6(1)(b) GDPR (performance of contract) and Art. 6(1)(c) GDPR (legal obligation) in conjunction with Sec. 147 AO (German Fiscal Code), Sec. 257 HGB (German Commercial Code).
Payments are processed through a payment service provider based in the USA. The following data is processed:
Full payment data (e.g., credit card numbers) is processed exclusively by the payment provider. We only store reference identifiers.
Legal basis: Art. 6(1)(b) GDPR (performance of contract). Transfer to the USA is based on Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.
To process payouts to creators and issue credit notes, we process:
The retention of personal data in credit notes is required to comply with Sec. 14 UStG (German VAT Act — mandatory invoice content) and the tax retention obligation under Sec. 147 AO (retention period: 10 years).
Legal basis: Art. 6(1)(b) GDPR (performance of contract) and Art. 6(1)(c) GDPR (legal obligation) in conjunction with Sec. 14 UStG, Sec. 147 AO.
When fans submit content (e.g., song requests) via the platform, we process:
For registered fans, submissions are linked to the user account. For unregistered fans (guests), the IP address and provided name are stored.
Legal basis: Art. 6(1)(b) GDPR (performance of contract) for registered users; Art. 6(1)(f) GDPR (legitimate interest in providing the service) for guests.
Users may upload various files, including audio files, profile pictures, background media, and support attachments. Uploaded files are stored within the EU.
Legal basis: Art. 6(1)(b) GDPR (performance of contract).
When you submit a support request, we process the subject, message content, and any attached files.
Legal basis: Art. 6(1)(b) GDPR (performance of contract) for existing users; Art. 6(1)(f) GDPR (legitimate interest) for pre-contractual inquiries.
To enforce our terms of service and protect the platform from abuse, we process:
This data is used to enforce bans and ensure accountability of moderation decisions. Our legitimate interest in protecting the platform and its users from abuse outweighs the data subjects' interest in non-processing.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
Submitted content may be subject to automated review by an AI-based service. The review serves to detect content that violates our terms of service. Based on this review, content may be automatically flagged for manual review or rejected.
Pursuant to Art. 22(3) GDPR, you have the right to:
You may exercise these rights by contacting the creator or submitting a support request.
The AI service is based in the USA. Data transfer is based on Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR. The provider does not use transmitted data for its own training purposes.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in content safety).
We use a web analytics service to analyze and improve the use of our platform. Analytics are only performed with your explicit consent. Without your consent, no analytics data is collected.
The analytics service operates on servers within the EU.
Legal basis: Art. 6(1)(a) GDPR (consent).
To ensure the stability and functionality of our platform, we use an error tracking service. In the event of an error, information about the error is automatically transmitted, including error messages, device and browser information, and potentially user context data.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in maintaining a functional service).
To protect our platform from automated access and abuse, we use a bot prevention service. Interaction data is processed to distinguish between human users and automated access.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protection against automated abuse).
As part of our affiliate program, we process data for referral attribution, commission calculation, and affiliate payout processing.
Legal basis: Art. 6(1)(b) GDPR (performance of contract).
We use the following categories of cookies:
Legal basis: Art. 6(1)(a) GDPR (consent) for non-essential cookies; Art. 6(1)(f) GDPR (legitimate interest) for strictly necessary cookies.
We transfer personal data to the following categories of recipients:
For transfers to third countries (in particular the USA), we ensure an adequate level of data protection through Standard Contractual Clauses (Art. 46(2)(c) GDPR). We have entered into data processing agreements pursuant to Art. 28 GDPR with all processors.
You have the following rights regarding your personal data at any time:
To exercise your rights, contact us at [email protected].
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority for us is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22, 7. OG
20459 Hamburg, Germany
Personal data is deleted once the purpose of storage ceases, unless statutory retention obligations apply. Specifically:
We reserve the right to update this privacy policy to reflect changes in the legal framework or changes to the service. In the event of material changes, we will notify you separately. The current version is always available on this page.
Last updated: April 2026