1. Controller

The controller responsible for the processing of personal data on this website is:

Bettina B. Scheibe
operating under the business name NIUCAP Advisory – Bettina Scheibe Consulting
Moarstr. 7, 85737 Ismaning b. München
Germany

Email: bettina@niucapadvisory.com
Website: www.nextlevelshapers.com

2. General information

I take the protection of personal data seriously. Personal data is processed in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.

This website can generally be used without actively providing personal data. Personal data may be processed when you contact me by email, when you interact with this website, or when technical data is generated through the operation of the website.

3. Server log files

When you access this website, technical information may automatically be collected and stored in server log files by the hosting provider. This may include:

• browser type and version
• operating system
• referrer URL
• date and time of access
• IP address
• internet service provider
• accessed pages or files

This data is processed to ensure the secure and reliable operation of the website, to detect technical issues and to protect the website against misuse or attacks.

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is the secure, stable and technically functional operation of this website.

Server log files are stored only for as long as necessary for technical and security purposes, unless longer retention is required in individual cases for legal reasons.

4. Contact by email

If you contact me by email, I process the personal data you provide, such as your name, email address, message content and any additional information included in your communication.

The purpose of processing is to respond to your enquiry, communicate with you and, where applicable, prepare or perform a contractual relationship.

The legal basis is Art. 6(1)(b) GDPR where the communication relates to contractual or pre-contractual matters, and Art. 6(1)(f) GDPR for general communication.

5. Clients, partners and business contacts

If you become a client, partner or business contact, I may process contact details, communication data, contract data, billing data and project-related information.

The purpose of processing is client communication, project delivery, contract performance, invoicing, accounting and compliance with legal obligations.

The legal basis is Art. 6(1)(b) GDPR for contract-related processing, Art. 6(1)(c) GDPR for compliance with legal obligations, and Art. 6(1)(f) GDPR for legitimate business interests.

6. AI-supported research and advisory workflows

NIUCAP Advisory uses AI-supported research workflows to analyse companies, technologies, markets, sectors and innovation ecosystems.

Where possible, this work is based on publicly available, business-related and non-sensitive information. This may include company information, professional roles, publicly available statements, funding announcements, market activity, technology signals and ecosystem developments.

Personal data is not intentionally used to make automated decisions about individuals. AI-supported tools are used to support research, structuring, analysis and drafting. They are not used to make legally binding or similarly significant automated decisions about individuals.

Where personal data is processed in the context of research or advisory work, the legal basis is generally Art. 6(1)(f) GDPR, unless another legal basis applies. My legitimate interest is the provision of professional advisory, research and strategic intelligence services.

7. Cookies and analytics

This website does not currently use analytics or marketing cookies.

Technically necessary cookies or similar technologies may be used where required for the operation, security or functionality of the website. If analytics, marketing tools or non-essential cookies are introduced in the future, this Privacy Policy will be updated accordingly and, where required, consent will be obtained.

8. Newsletter

This website currently does not offer a newsletter.

If a newsletter is introduced in the future, this Privacy Policy will be updated with information about registration, double opt-in, mailing provider, statistical analysis and withdrawal of consent.

9. External links

This website may contain links to external websites, such as LinkedIn or other third-party sites. If you click on an external link, the respective provider is responsible for the processing of personal data on that website.

I have no influence over the data processing practices of external websites.

10. Service providers and recipients of data

Personal data may be processed by technical and professional service providers necessary for operating the website and delivering advisory services. These may include:

• hosting providers
• email providers
• IT and software providers
• AI-supported research or productivity tools
• accounting or tax service providers
• professional advisors

Where required, appropriate data processing agreements are used.

11. International data transfers

Some service providers may process personal data outside the European Economic Area. Where this occurs, appropriate safeguards are used where required by law, such as EU Standard Contractual Clauses or other recognised transfer mechanisms.

12. Storage period

Personal data is stored only for as long as necessary for the respective purpose or as required by statutory retention obligations.

Business and accounting records may be stored in accordance with applicable statutory retention periods. Communication data is deleted when it is no longer required, unless legal, contractual or legitimate business reasons require longer storage.

13. Your rights

You have the following rights under the GDPR, where the legal requirements are met:

• right of access
• right to rectification
• right to erasure
• right to restriction of processing
• right to data portability
• right to object to processing
• right to withdraw consent, where processing is based on consent

You also have the right to lodge a complaint with a competent data protection supervisory authority.

14. No automated decision-making

No automated decision-making within the meaning of Art. 22 GDPR takes place through this website.

15. Updates to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in legal requirements, website functionality or advisory workflows.

Last updated: June 2026