1. Privacy at a glance
General information
The following notes provide a simple overview of what happens to your data when you visit this website. Personal data is any data by which you can be personally identified. For detailed information on data protection, please refer to our data protection declaration listed below this text.
Data collection on this website
Who is responsible for the data collection on this website?
The website operator carries out data processing on this website. You can find his contact details in the section “Note on the responsible party” in this data protection declaration.
How do we collect your data?
On the one hand, your data is collected by providing it to us. This can be, for example, data that you enter in a contact form.
Other data is collected automatically or after your consent when you visit the website by our IT systems. This is mainly technical data (e.g., Internet browser, operating system, or time of page view). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right to receive information free of charge about the origin, recipient, and purpose of your stored personal data. You also have a right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time. You also have the right to request the restriction of processing your data under certain circumstances. Furthermore, you have the right to complain to the competent supervisory authority.
For this purpose, as well as for further questions on the subject of data protection, you can contact us at any time.
2. hosting and content delivery networks (CDN)
External hosting
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses, and other data generated via a website.
The hoster is used to fulfill contracts with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a safe, fast, and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f DSGVO).
Our hoster will only process your data to the extent necessary to fulfill its service obligations and follow our instructions regarding this data.
We use the following hoster:
Strato AG
Otto-Ostrowski-Straße 7
10249 Berlin
3. general notes and obligatory information
Data protection
The operators of these pages take the protection of your data very seriously. We treat your data confidentially per the statutory data protection regulations and this data protection declaration.
When you use this website, various personal data are collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We want to point out that data transmission on the Internet (e.g., when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.
Note on the responsible office and the data protection officer.
The data protection officer is:
Storage period
Unless a more specific storage period has been specified within this data protection declaration, your data will remain with us until the purpose for processing the data no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your data (e.g., retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.
Note on data transfer to the USA.
Among other things, tools from companies based in the USA are integrated into our website. If these tools are active, your data may be transferred to the US servers of the respective companies. We want to point out that the USA is not a safe third country in the sense of EU data protection law. US companies are obliged to hand over personal data to security authorities without you, as a data subject can take legal action against this. Therefore, it cannot be ruled out that US authorities (e.g., intelligence services) process, evaluate, and permanently store your data on US servers for monitoring purposes. We do not influence these processing activities.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke the consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to object to data collection in exceptional cases and to direct advertising (Art. 21 DSGVO).
IF THE DATA PROCESSING IS CARRIED OUT BASED ON ART. 6 ABS. 1 LIT. E OR F DSGVO, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS OR THE PROCESSING IS TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) DSGVO).
IF YOUR DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION UNDER ARTICLE 21 (2) DSGVO).
Right of appeal to the competent supervisory authority
In the event of violations of the GDPR, data subjects shall have a right of appeal to a supervisory authority, particularly in the Member State of their habitual residence, their place of work, or the place of the alleged violation. The right of appeal is without prejudice to any other administrative or judicial remedy.
Right to data portability
You have the right to have data that we process automatically based on your consent or in the performance of a contract handed over to you or to a third party in a standard, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done insofar as it is technically feasible.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the browser’s address line changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, third parties cannot read the data you transmit to us.
Information, deletion, and correction
Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient, and the purpose of data processing and, if necessary, a right to correct or delete this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time.
Right to restriction of processing
You have the right to request the restriction of processing your data. For this purpose, you can contact us at any time. The right to restriction of processing exists in the following cases:
• You have the right to request the restriction of processing your data. For this purpose, you can contact us at any time. The right to restriction of processing exists in the following cases:
• If the processing of your data happened/is happening unlawfully, you can request the restriction of data processing instead of deletion.
• If you dispute the accuracy of your data stored by us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of processing your data.
• According to Art. 21 (1) DSGVO, balancing you’re and our interests must be carried out if you have objected. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of processing your data.
Suppose you have restricted the processing of your data. In that case, this data may – apart from being stored – only be processed with your consent or for the assertion, exercise, or defense of legal claims or the protection of the rights of another natural or legal person or for reasons of a significant public interest of the European Union or a Member State.
4. Data collection on this website
Cookies
Our internet pages use so-called “cookies.” Cookies are small text files and do not cause any damage to your terminal device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your terminal device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them or your web browser deletes them.
In some cases, cookies from third-party companies may also be stored on your terminal device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g., cookies for processing payment services).
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or the video display). Other cookies are used to evaluate user behavior or display advertising.
Cookies that are necessary to carry out the electronic communication process (essential cookies) or to provide certain functions that you have requested (functional cookies, e.g., for the shopping cart function) or to optimize the website (e.g., cookies to measure the web audience) are stored based on Art. 6 (1) lit. f DSGVO, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies has been requested, the storage of the cookies in question is based exclusively on this consent (Art. 6 para. 1 lit. a DSGVO); consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
As cookies are used by third-party companies or for analysis purposes, we will inform you separately about this within the scope of this data protection declaration and, if necessary, request your consent.
Cookie consent with Borlabs Cookie
Our website uses the cookie consent technology of Borlabs Cookie to obtain your consent to the storage of certain cookies in your browser and to document this per data protection law. The provider of this technology is Borlabs – Borlabs GmbH, Rübenkamp 32, 22305 Hamburg (hereinafter Borlabs).
When you enter our website, a Borlabs cookie is stored in your browser, in which the consents you have given or the revocation of these consents are stored. This data is not shared with the Borlabs cookie provider.
The collected data will be stored until you request us to delete it, you delete the Borlabs cookie yourself, or until the data’s purpose no longer applies. Mandatory legal retention periods remain unaffected. Details on the data processing of Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.
Borlabs Cookie Consent Technology is used to obtain the legally required consent to use cookies. The legal basis for this is Art. 6 para. 1 p. 1 lit. c DSGVO.
Contact form
If you send us inquiries via the contact form, your data from the inquiry form, including the contact data you provided, will be stored by us to process the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
This data is processed based on Art. 6 (1) lit. b DSGVO, if your request is related to the performance of a contract or is necessary to implement pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) (f) DSGVO) or on your consent (Art. 6 (1) (a) DSGVO) if this has been requested.
The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g., after we have completed processing your request). Mandatory legal provisions – in particular retention periods – remain unaffected.
Inquiry by e-mail or telephone
If you contact us by e-mail or telephone, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us to process your request. We do not pass on this data without your consent.
This data is processed based on Art. 6 (1) lit. b DSGVO, if your request is related to the performance of a contract or is necessary to implement pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests sent to us (Art. 6 (1) (f) DSGVO) or on your consent (Art. 6 (1) (a) DSGVO) if this has been requested.
The data you send via contact requests will remain with us until you request us to delete it, revoke your consent to store it, or the data’s purpose no longer applies (e.g., after your request has been processed). Mandatory legal provisions – in particular legal retention periods – remain unaffected.
Registration on this website
You can register on this website to use additional functions on the site. We use the data entered for this purpose only to use the respective offer or service you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.
For significant changes, for example, in the scope of the offer or for technically necessary changes, we use the e-mail address provided during registration to inform you in this way.
The data entered during registration is processed to implement the user relationship established by registration and, if necessary, for initiating further contracts (Art. 6 para. 1 lit. b DSGVO).
The data collected during registration will be stored by us as long as you are registered on this website and will then be deleted. Legal retention periods remain unaffected.
Events
If you register for one of our events using the form provided, we store the data entered, including the contact details you provide there. We store and use this data for processing your registration, communicating with you in the context of the relevant event, and the event of follow-up questions. In addition, for transparency and information about our association’s work, we publish your details of title, first name, surname, function, and institution on our homepage, but only following events for which you have received a confirmation of participation from us. We also pass on your title, first name, surname, function, and institution details to third parties to whom we award contracts in the event context (e.g., presenters, event venues) or who act as cooperation partners for our events.
This data is processed based on Art. 6 (1) lit. b DSGVO if your request is related to the performance of a contract or is necessary to implement pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) (f) DSGVO) or on your consent (Art. 6 (1) (a) DSGVO) if this has been requested.
The data you enter in the event form will remain with us until you request us to delete it, revoke your consent to store it, or the data’s purpose no longer applies. Mandatory legal provisions – in particular retention periods – remain unaffected.
5. Analysis tools and advertising
6. Newsletter
Newsletter data
Suppose you would like to receive the newsletter offered on the website. In that case, we require your e-mail address and information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data is not collected or only voluntarily. We use this data exclusively for sending the requested information and do not pass it on to third parties.
The processing of the data entered in the newsletter registration form is based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent to the storage of the data, the e-mail address, and their use for sending the newsletter at any time, for example, via the “unsubscribe” link. The legality of the data processing operations already carried out remains unaffected by the revocation.
The data you provide to receive the newsletter will be stored by the newsletter service provider or us until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after unsubscribing from the newsletter or after the purpose has ceased to exist. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our discretion within the scope of our legitimate interest, according to Art. 6 (1) lit. f DSGVO.
After you have unsubscribed from the newsletter distribution list, your e-mail address will be stored by us or the newsletter service provider in a blacklist, if necessary, to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interests.
We use Sendinblue for the newsletter dispatch. By filling out and submitting the newsletter form, you confirm that the information you provide will be transferred to Sendinblue for processing per the terms of use.
7. Plugins and tools
Google Web Fonts
This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its cache to correctly display texts and fonts.
For this purpose, your browser must connect to Google’s servers. This lets Google know that this website has been accessed via your IP address. The use of Google WebFonts is based on Art. 6 para. 1 lit. f DSGVO. The website operator is interested in the uniform presentation of the typeface on his website. If a corresponding consent has been requested (e.g., consent to store cookies), the processing is carried out exclusively based on Art. 6 (1) lit. a DSGVO; the content can be revoked at any time.
If your browser does not support web fonts, a standard font from your computer will be used.
For more information on Google Web Fonts, please visit https://developers.google.com/fonts/faq and see Google’s privacy policy: https://policies.google.com/privacy.
8. Own services
Handling of applicant data
We offer you the opportunity to apply for a job with us (e.g., by e-mail, post, or online application form). In the following, we inform you about the scope, purpose, and use of your data collected during the application process. We assure you that your data collection, processing, and use will be carried out per applicable data protection law and all other statutory provisions and that your data will be treated in strict confidence.
Scope and purpose of data collection
When you send us an application, we process your associated personal data (e.g., contact and communication data, application documents, notes taken during interviews, etc.) to the extent necessary to decide whether to establish an employment relationship. The legal basis for this is § 26 BDSG-neu under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b DSGVO (general contract initiation) and – if you have given your consent – Art. 6 para. 1 lit. a DSGVO. The consent can be revoked at any time. Your data will only be passed on within our company to persons who process your application.
If the application is successful, the data submitted by you will be stored in our data processing systems based on Section 26 BDSG-neu and Art. 6 (1) lit. b DSGVO to implement the employment relationship.
Retention period of the data
If we are unable to make you a job offer, if you reject a job offer, or if you withdraw your application, we reserve the right to retain the data you have provided for us based on our legitimate interests (Art. 6 (1) (f) DSGVO) for up to 6 months from the end of the application process (rejection or withdrawal of the application). Subsequently, the data will be deleted, and the physical application documents will be destroyed. This storage serves, in particular, as evidence in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period has expired (e.g., due to an impending or pending legal dispute), the data will not be deleted until the purpose for continued storage no longer applies.
More extended storage may also occur if you have given your consent (Art. 6 para. 1 lit. a DSGVO) or if legal storage obligations prevent deletion.
9. Data processing in the course of grant applications and expressions of interest
Application and processing
Suppose you send us a funding application or an expression of interest by e-mail or via our online portal. In that case, the documents and data required for processing, including the personal data contained therein, will be stored and processed electronically by CyberCraft Institute.
The data will be processed to document receipt of the application or expression of interest, contacting you in the context of the application or expression of interest, if applicable, and making a decision on the application or expression of interest.
In certain circumstances, personal data may be processed to assert, defend, and exercise legal claims.
The legal basis of the processing concerning the application data is Art. 6 para. 1 p. 1 lit. b DS-GVO (performance of a contract, implementation of pre-contractual measures). If it is a matter of asserting, defending, and exercising legal claims, the legal basis is Art. 6 (1) lit. f DS-GVO. According to Art. 6 (1) (f) DS-GVO, processing of personal data is lawful if the processing is necessary for a legitimate interest of the controller or a third party, unless your interests and rights to the exclusion of the processing override the legitimate interests of the controller or the third party. The controller or third party’s legitimate interests lie in the assertion, exercise, or defense of legal claims.
Suppose you apply for project funding or express interest via the CyberCraft Institute website or email. In that case, the application data and documents you submit will also be shared with third parties during the selection process. These include, but are not limited to.
• Reviewers,
• Members of selection committees
• Members of the project selection committee,
• Subject matter experts
• Members of the controlling bodies of the association.
A transfer of your data to other countries outside the European Union or to an international organization is not intended but also – if lawful – not excluded.
Criteria for the storage period are the duration of the application procedure and, if applicable, statutory retention periods and the existence of overriding legitimate interests, which may consist of the assertion, defense, and exercise of legal claims.
Support and administration of funded projects
In the event of approval, funding, or cooperation, personal data is processed, e.g., to be able to service funding requests, to administer changes of the institution, changes of project management, or extensions of duration, etc.
The legal basis for processing personal data is Art. 6 para. 1 p. 1 lit. b DS-GVO (fulfillment of a contract, implementation of pre-contractual measures) or, if applicable, additionally Art. 6 para. 1 p. 1 lit. b DS-GVO (legitimate interests).
A transfer of your data to other countries outside the European Union or to an international organization also in this phase is not intended, but also not excluded if this is lawful.
Criteria for the storage period are the project’s duration and, if applicable, legal retention periods and the existence of overriding legitimate interests, which may consist of the assertion, defense, and exercise of legal claims.
In the event of approval, funding, or cooperation, selected data and information from your application or your expression of interest, including personal data, will be published by us if this is necessary or useful for the mediation and documentation of our association activities and/or for the success of the funded project.
Verification of the use of funds and proper project closure.
Personal data are processed to verify the proper use of project funds. This may be in writing or as part of an on-site audit of a funded entity. External parties can also carry out these audits via the grantor. In addition, data is processed to verify the proper substantive and financial progress and completion of the project.
The personal data may be name, address, e-mail address, telephone number, activity, and grade.
In this respect, the legal basis for processing your data is also basically Art. 6 para. 1 sentence 1 lit. b DS-GVO (fulfillment of a contract, implementation of pre-contractual measures) or, if applicable, additionally Art. 6 para. 1 sentence 1 lit. b DS-GVO (legitimate interests).
Recipients of personal data may, in this respect, be Members of the controlling bodies of the Association. Other recipients may be added in the future.
Criteria for the storage period are the duration of the audit and, if applicable, statutory retention periods and the existence of overriding legitimate interests, which may consist of the assertion, defense, and exercise of legal claims.
A transfer of your data to other countries outside the European Union or to an international organization also in this phase is not intended, but also not excluded if this is lawful.
Criteria for the storage period are the duration of the examination procedure as well as, if applicable, legal retention periods and the existence of overriding legitimate interests.
Compliance with other legal obligations
We may also process your data, including yours, to comply with legal obligations arising, for example, from commercial, tax, budgetary, or criminal law. The purposes of the processing result from the respective legal obligation. As a rule, the processing is carried out to comply with governmental control and information obligations. The legal basis for data processing in these cases is Art. 6 (1) p. 1 lit. c DS-GVO.
10. Committees, boards, and scientific advisory board
Suppose you are a member of committees, panels, or the scientific advisory board cooperating with the CyberCraft Institute or participate in nomination procedures as such or as a reviewer or reference person. In that case, your data will be processed to be able to be in contact with you.
The legal basis for processing personal data in the case of nomination and cooperation with committees, panels, and reviewers is the exercise of legitimate interests under Art. 6 para. 1 b DSGVO.
In case of nomination, your data will be forwarded to the committees cooperating with the CyberCraft Institute.
CyberCraft Institute may publish the personal data of members of committees and boards on its website.
The legal basis for processing personal data by publication is the exercise of legitimate interests, according to Art. 6 (1) f DSGVO.
Your data may be processed to assert, exercise, and defend legal claims in certain circumstances.
The legal basis for the case of the exercise of legitimate interests is Art. 6 para. 1 f DSGVO.
Furthermore, your data may be processed to comply with the legal obligations of CyberCraft Institute arising from tax, budgetary, or criminal law, among others.
The legal basis for processing personal data due to legal obligation is Art. 6 para. 1 c DSGVO.
CyberCraft Institute will store your data until it is no longer required for the intended purpose and there are no other, in particular legal or contractual, storage obligations.