Privacy Policy
1. General
The protection of your personal data is very important to us. Therefore, we want to provide you with full transparency regarding the processing of your data at TechLabs. This privacy statement applies to data processing that takes place when you visit our website www.techlabs.org, as well as data processing that takes place when you participate in our program as a 'Techie' or engage in TechLabs as a 'Volunteer'. A 'Techie' is considered to be any participant who uses the online course offering. You can view the specific data processing of 'Techies' data in section 4 of this Privacy Policy. If you are active as a 'Volunteer' at TechLabs, you can find the specific information on the processing of your data in section 5 of this Privacy Policy.
The following information is intended to inform you about what we use your personal data for, what data is involved and what rights you have with regard to data processing. Personal data within the meaning of Art. 4 No. 1 GDPR (hereinafter also referred to as "data") is any information that at least indirectly allows the identification of a person or relates to an already identified person.
The responsible party within the meaning of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and other data protection requirements is the
TechLabs e.V. Hafenweg 16 48155 Münster Germany
Represented by the Board of Directors: Henrik Kobus, Ranjini Kumar E-Mail-Adresse: info@techlabs.org
Hereinafter referred to as the „responsible party“ or „we“:
2. General information on data processing
We process personal data within the legally permissible limits. This means that data processing operations are based on a legal basis according to Art. 6 GDPR. In the case of data processing based on your consent (Art. 6 para. 1 lit. a GDPR), you will be informed separately about the consent process, e.g. by a checkbox or a pop-up window. Insofar as we have not specified any other legal basis for the individual data processing and it is not required for the initiation of a contract or for the fulfillment of a contract pursuant to Art. 6 Para. 1 lit. b GDPR, the respective data processing pursuant to Art. 6 Para. 1 lit. f GDPR is based on our legitimate interest in being able to provide you with our service.
A transfer of personal data only takes place in the cases described below. If we transfer your data to a third country that is not part of the European Economic Area (EEA), this is always done on the basis of a legal basis pursuant to Art. 44 et seq. GDPR. Data transfers to countries for which an effective adequacy decision exists (such as Andorra, Argentina, Faroe Islands, Guernsey, Isle of Man, Israel, Japan, Jersey, Canada, New Zealand, Switzerland or Uruguay) are made on this very basis. Unless we have received express consent from you pursuant to Art. 45 GDPR to transfer data to additional third countries (such as the USA), the transfer of data to these third countries will take place on the basis of Standard Contractual Clauses (SCC, Standard Data Protection Clauses) issued by the EU Commission, pursuant to Art. 46 (2) c) GDPR.
Personal data is processed by us only for the purposes described in clauses 3 to 5. As soon as the purpose of the processing ceases to apply, your personal data will be deleted. The same applies to the expiry of a prescribed storage period, subject to cases in which further storage is necessary for the conclusion or performance of a contract. In addition, there may be a legal obligation to store the data for a longer period or to pass it on to third parties (esp. to law enforcement agencies). In other cases, the storage period and type of data collected as well as the type of data processing depend on which functions of our website you use in each individual case. We will also be happy to provide you with information about this in individual cases in accordance with Art. 15 GDPR.
3. Data processing in connection with the use of our website
The use of our website with all its functions requires the processing of certain personal data. We would like to inform you that the provision of your data is not required by law or contract. However, if you do not provide your data, the consequence for you is that you may only be able to use the website to a limited extent.
All data is stored securely on servers operated by Netlify . (2325 3rd Street, Suite 296, San Francisco, 94107 CA, USA ; hereinafter referred to as 'Netlify') by default. The transmission of the data is encrypted.
3.1 Informational use of the website
The purely informative calling up of www.techlabs.org requires the processing of the following personal data and information: Browser type and version, operating system used, address of previously visited websites, address of the terminal device with which you access the website (IP address) and the time of the website call. All this information is automatically transmitted by your browser, should you not have configured it in such a way that transmission of the information is suppressed.
This personal data is processed for the purpose of the functionality and optimization of www.techlabs.org, as well as to ensure the security of our information technology systems. These purposes are at the same time legitimate interests according to Art. 6 para. 1 lit. f. GDPR.
The storage period of your personal data is a maximum of 30 days. This personal data will not be merged with other data sources. Data will only be passed on to third parties in the cases mentioned, except in the case of a legal, judicial or official obligation. Unless otherwise stated in this privacy policy, no data will be transferred to third countries or international organizations.
3.2 External Content
To ensure a smooth technical process and optimal user-friendly use of our website, we use the following tools:
CDN server accesses
To ensure fast loading times and smooth use of our website, we use a Content Delivery Network (CDN). In this process, the content is made available on several regionally distributed servers connected via the Internet. When a request is made, these servers are selected specifically according to criteria such as geographical distance, latency or transmission rate in order to provide you with the desired content as quickly as possible.
For this purpose, your IP address is transmitted to the selecting server and the servers used. This transmission the our legitimate interest to provide you with short loading times and to protect us from DDoS attacks. The legal basis for the data processing is therefore Art. 6 para. 1 lit. f GDPR.
Smallchat and Contentful
For the content management system of our website, we rely on Contentful (Max-Urich-Strasse 3, 13355 Berlin, Germany), as a communication tool within the website on Smallchat of the company Nicer LLC (637 W Arlington Pl # 2W, Chicago , IL, 60614-2611, USA). For this purpose, your IP address is transmitted to the selecting and the used servers. This transmission the our legitimate interest to ensure you an efficient website use. The legal basis for the data processing is therefore Art. 6 para. 1 lit. f GDPR.
3.3 Analysis tools and cookies
Information on the cookies used
Cookies are small text files that are stored on your device (computer, tablet or smartphone) and contain information about your user behavior. If a website is accessed where a cookie is set, the provider who placed the cookie can read the information contained on it.
First-party cookies and third-party cookies
A website may set its own cookies (first party) and allow third parties (third party) to place cookies on your device. First party cookies usually serve the functionality of the website (shopping cart, forms, etc.) while third party cookies are regularly used to evaluate user behavior on the website. The difference between a first-party cookie and a third-party cookie is the control over the processing of the data stored on the cookies. Third-party cookies are placed on your device by third parties (i.e., not by us). While we may allow third parties to access the Site to place these cookies on end users' devices, we do not have control over the information provided by the cookies or direct access to the data stored in them. This information is controlled entirely by that third party in accordance with their respective privacy policies.
How we use cookies
We want you to be able to make an informed decision for or against the use of cookies, which are not strictly necessary for the technical features of the website. Please note that if you decline the use of cookies for advertising purposes, you will still be shown advertisements, but they will be less targeted to your interests. However, you can still use all the functionality of the website.
We distinguish between
Necessary cookies, which are absolutely necessary for the technical functions of the website,
Functional cookies, which enable us to analyze the use of the website, and
Marketing cookies, which are placed by advertising companies to display advertisements relevant to your interests.
We offer you the opportunity to select your preferences regarding Functional and Marketing Cookies as part of your initial visit to our website through the cookie banner and at any time thereafter. In order to ensure that the setting you have chosen can be adhered to on our sub-pages and that no data is processed against your will, it is necessary that your decision is recorded in a machine-readable manner. This is in turn done by a cookie that is set by the cookie banner. The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. c GDPR in conjunction with. Art. 5 para. 2 and Art. 7 para. 1 GDPR.
Required cookies
These cookies are required for basic website functionality. These cookies enable a secure login and the storage of the progress of order transactions.
Functional cookies
These cookies allow us to analyze website usage so that we can measure and improve its performance. For example, these cookies allow us to store your login details, shopping cart content and to display page content in a consistent manner. You can change your personal Functional Cookies settings by clicking on the Cookie Settings link in the footer of the website.
Marketing cookies
These cookies are used by advertisers to serve you advertisements that are relevant to your interests. These cookies allow you to share pages via social networks and post comments. Likewise, offers that correspond to your interests are displayed. You can change your personal marketing cookie settings by clicking on the Cookie Settings link in the footer of the website.
Google Analytics
We use Google Analytics for the purpose of statistical analysis of your use of our website. Based on your consent, we use cookies to store and read personal data on your terminal device. The processed data is information about your usage behavior on our website and connection data. We anonymize your IP address by shortening it before it is collected by Google. The recipient of the data is Google Ireland Ltd. (Gordon House, Barrow Street Dublin 4 Ireland), which we use as part of commissioned data processing pursuant to Art. 28 GDPR. Should Google transfer this data to the United States, this will only be done on a case-by-case basis and on the basis of Standard Contractual Clauses (SCC) adopted by the European Commission.
The legal basis for the use of Google Analytics is your consent (opt-in in the cookie banner), if you have given us this during your first visit to our website in accordance with Art. 6 para. 1 lit. a GDPR. If you have not given us your consent to use Google Analytics (no opt-in in the cookie banner), we do not use Google Analytics in the context of your visits to our website.
Bitly
Features of the shortened URL service Bitly are embedded on our website, promotional material and e-mails. These functions are offered by bitly, Inc., NYC, USA. Please note that we as the website provider have no knowledge regarding the content of data transmitted or its use by Bitly. You can find more information in this regard in Bitly’s privacy policy at http://bitly.com/pages/privacy. You can deactivate the storage of cookies by Bitly by clicking the opt-out button at http://bitly.com/pages/privacy.
Features of the shortened URL service Short.io are embedded on our website, promotional material and e-mails. These functions are offered by Short.cm Inc, a Delaware Corporation, US, reg# 4976272. Please note that we as the website and promotional material (incl mail) provider have no knowledge regarding the content of data transmitted or its use by Short.cm. You can find more information in this regard in Short.cm’s privacy policy at https://short.io/de/privacy. You can deactivate the storage of cookies by Short.cm by navigating to https://www.iubenda.com/privacy-policy/52677371/cookie-policy.
4. Data processing when you participate as a techie.
When you join our program as a Techie, we process the following data from you:
4.1 Email newsletter
We send a general email newsletter and another one for communication with cooperation partners. For this purpose, we use the service provider Mailchimp of Rocket Science Group, LLC (675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA), as a processor. A data transfer to the USA takes place on the basis of Standard Contractual Clauses (SCC) adopted by the European Commission. For more information on data processing, please click here:
https://mailchimp.com/legal/privacy/
If you agree, we will be happy to inform you about news related to Techlabs as part of our email newsletter. Processed data categories here are contact data, master data, usage data, connection data. You will only receive the newsletter if you have expressly consented to the use of your e-mail address for this purpose as part of the so-called double opt-in procedure. For this purpose, we will send you an e-mail with a confirmation link, which you must click to confirm your consent. The legal basis for this data processing is Art. 6 para. 1 lit. a GDPR.
This consent to the newsletter also includes a reach measurement, where we can determine by means of an embedded pixel whether the contents of our email were also retrieved. As soon as you open the email, we automatically record your IP address and the time of the call and can use this basis to adapt the design of our newsletter to meet your needs. The legal basis for this data processing is Art. 6 para. 1 lit. a GDPR.
If you no longer wish to receive our newsletter, you can click on an unsubscribe link at the end of each email. We will then store your email address in a so-called blacklist and will not send you any further newsletters to this email address.
4.2 Joint processing with local TechLabs locations
The purposes and means of the data processing listed in this subsection are jointly determined by the main TechLabs site and the respective local site and are therefore carried out under joint responsibility. For this purpose, the main site has concluded joint responsibility agreements with the respective local sites pursuant to Art. 26 GDPR, in which the more detailed circumstances of the cooperation are regulated.
The cooperation between the main site and the respective local site is carried out in such a way that the organizational framework is defined by the main site, which also provides the technical infrastructure. Within this framework, the local site decides on the details of the data processing. If you have any questions or wish to exercise your rights explained in Section 7, please contact your local TechLabs site.
4.2.1 Online Learning
We use your name, email address and track selection to provide you with appropriate online learning content. For this purpose, you will receive an email with individual access to learning content from edyoucated (edyoucated GmbH, Hafenweg 16, 48155 Münster, Germany). This data processing is necessary for the fulfillment of our obligations under the user agreement. The legal basis for this data processing is Art. 6 para. 1 lit. b GDPR. You can find more information on data protection at edyoucated at: https://edyoucated.org/de/privacy
4.2.2 Online Learning Community
To enable you to communicate with your team members, we provide a Slack Channel for your team. You will receive access via email. For this process, we process your name as well as your email address and transmit this data to Slack (Slack Technologies Limited, One Park Place, Upper Hatch Street, Dublin 2,
Ireland). This data processing is necessary for the fulfillment of our usage contract concluded with you. The legal basis for this data processing is Art. 6 (1) lit. b GDPR.
If Slack transfers the data to the USA, this takes place on the basis of Standard Contractual Clauses (SCC , Standard Contractual Clauses) adopted by the European Commission. You can find more information on data processing at Slack here: https://slack.com/intl/de-de/trust/privacy/privacy-policy?geocode=de-de
4.2.3 Alumni program
To keep in touch with you in our alumni program, we use your name, track selection and information about your current professional activity. We collect this data via the service Typeform (C/Bac de Roda, 163 (Local), 08018 - Barcelona (Spain)) and process it via the services of Google GSuite. The email dispatch is carried out by the provider Mailchimp (see 4.1). If information is transferred to the USA during data processing, this is done on the basis of Standard Contractual Clauses (SCC).
We will only contact you if you have expressly consented to the use of your e-mail address for this purpose as part of the so-called double opt-in procedure. For this purpose, we will send you an e-mail with a confirmation link, which you must click to confirm your consent. The legal basis for this data processing is Art. 6 para. 1 lit. a GDPR.
5. Data processing if you are active as a 'Volunteer '
If you are active as a volunteer at TechLabs, we process the data listed in this section of the Privacy Policy from you. The purposes and means of this data processing are determined jointly by the TechLabs main site in Münster and the respective local site and are therefore carried out under joint responsibility. For this purpose, the main site has concluded joint responsibility agreements with the respective local sites pursuant to Art. 26 GDPR, in which the more detailed circumstances of the cooperation are regulated.
The cooperation between the main site and the respective local site is carried out in such a way that the organizational framework is defined by the main site, which also provides the technical infrastructure. Within this framework, the local site decides on the design of the data processing in detail. If you have any questions or wish to exercise your rights explained in Section 7, please contact your local TechLabs site.
5.1 Alumni program
To keep in touch with you in our alumni program, we use your name, track selection, and information about your current professional activity. We collect this data through the Typeform service and process it through Google GSuite services. The email dispatch is handled by the provider Mailchimp (see 4.1). If information is transferred to the USA during data processing, this is done on the basis of Standard Contractual Clauses (SCC).
We will only contact you if you have expressly consented to the use of your e-mail address for this purpose as part of the so-called double opt-in procedure. For this purpose, we will send you an e-mail with a confirmation link, which you are requested to click to confirm your consent. The legal basis for this data processing is Art. 6 para. 1 lit. a GDPR.
6. Order processing
In some cases, we use external service providers such as Netlify (hosting provider), Google Analytics (website analysis), Google GSuite (platform for office services), Typeform (survey tool), Mailchimp (email delivery), edyoucated (learning platform) and Slack (communication tool) to process your data. These service providers have been carefully selected and commissioned by us. They are bound by our instructions and are regularly monitored. In doing so, our order processing contracts comply with the strict requirements of Art. 28 GDPR.
7. Data subject rights
If your personal data is processed, you are a data subject within the meaning of the GDPR and as a user you have the following rights vis-à-vis the controller:
7.1 Right to information
You may request confirmation from the controller as to whether personal data concerning you is being processed by us.
If such processing exists, you may request information from the controller about the following:
the purposes for which the personal data are processed;
the categories of personal data which are processed;
the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
the planned duration of the storage of the personal data concerning you or, if concrete information on this is not possible, criteria for determining the storage period;
the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
the existence of a right of appeal to a supervisory authority;
any available information about the origin of the data, if the personal data are not collected from the data subject;
the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information about whether personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
7.2 Right to rectification
You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you are inaccurate or incomplete. The controller shall carry out the rectification without undue delay.
7.3 Right to restriction of processing
You may request the restriction of the processing of personal data concerning you under the following conditions:
if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
the controller no longer needs the personal data for the purposes of processing, but you need it for the assertion, exercise or defense of legal claims; or
if you have objected to the processing pursuant to Article 21 (1) GDPR and it is not yet clear whether the legitimate grounds of the controller outweigh your grounds.
If the processing of personal data concerning you has been restricted, such data may - apart from being stored - only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.
7.4 Right to deletion
7.4.1 You may request the controller to erase the personal data concerning you without undue delay, and the controller is obliged to erase this data without undue delay, if one of the following reasons applies:
The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
You revoke your consent on which the processing was based pursuant to Art. 6 (1) a or Art. 9 (2) a GDPR and there is no other legal basis for the processing.
You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
The personal data concerning you has been processed unlawfully.
The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
The personal data concerning you has been collected in relation to information society services offered pursuant to Art. 8(1) GDPR.
7.4.2 If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) of the GDPR, it shall take reasonable measures, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers which process the personal data that you, as the data subject, have requested that they erase all links to or copies or replications of such personal data.
7.4.3 The right to erasure does not exist insofar as the processing is necessary for
to exercise the right to freedom of expression and information;
for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for reasons of public interest in the area of public health pursuant to Art. 9 (2) (h) and (i) and Art. 9 (3) GDPR;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the right referred to in (1) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or
for the assertion, exercise or defense of legal claims.
7.5 Right to information
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right vis-à-vis the controller to be informed about these recipients.
7.6 Right to data portability
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, common and machine-readable format and to transfer this data to another controller without hindrance from the controller to whom the personal data was provided, provided that the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR, and that
the processing is carried out with the help of automated procedures.
In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one controller to another controller, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this.
The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
7.7 Right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.
The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to processing of the personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the possibility, in connection with the use of information society services - notwithstanding Directive 2002/58/EC - to exercise your right to object by means of automated procedures using technical specifications.
7.8 Right to revoke the declaration of consent under data protection law.
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
The processing is lawful until your revocation - the revocation thus only affects the processing after receipt of your revocation. You can declare the revocation informally by mail or e-mail. The processing of your personal data will then no longer take place, subject to permission by another legal basis. If this is not the case, your data must be deleted immediately after the revocation in accordance with Art. 17 (2) GDPR.
Your revocation should be addressed to:
TechLabs e.V. ℅ Henrik Kobus Hafenweg 16 48155 Münster Germany
E-mail address: info@techlabs.org
7.9 Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
8. Automated decisions in individual cases including profiling.
Automated decisions in individual cases including profiling do not take place.
9. Notification obligations of the responsible party
If your personal data have been disclosed to other recipients (third parties) with legal grounds, we will notify them of any rectification, erasure or restriction of the processing of your personal data (Art. 16, Art. 17(1) and Art. 18 GDPR). The notification obligation does not apply if it is associated with a disproportionate effort or is impossible. We will also inform you about the recipients upon request.
