1. Controller
[TBD: name and address of the controller, same as in the legal notice]
E-mail: [TBD: contact e-mail for privacy requests]
2. Overview
This website sets no cookies, uses no analytics or tracking tools and loads no content from third-party servers. Fonts are served from our own server. We only process personal data when you visit the site (server logs) and when you contact us through a form.
3. Hosting
The website is hosted by Netlify, Inc., USA. When you visit the site, Netlify processes technically necessary data (including IP address, date and time, page requested, browser information) in server logs to deliver the site and protect it from abuse. Legal basis: Art. 6(1)(f) GDPR. Data processing agreement: [TBD]. Transfer to the USA: [TBD: legal basis]. Log retention: [TBD].
4. Application and partner form
When you submit a form we process the information you enter there.
- Application: first and last name, e-mail, university, degree programme, semester, focus, technical initiative (optional), motivation, CV (PDF upload or link to a CV or LinkedIn profile), interest in founding.
- Partner request: company, name, position, e-mail, phone (optional), interests, message (optional).
Purpose: selecting participants and organising the event, or handling the partner request. Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(a) GDPR (consent via the checkbox). You can withdraw your consent at any time by e-mail. If you take part, we share your CV and profile data (name, university, programme, focus) with the partner companies before the event, as stated in the application form. [TBD: legal basis and consent for sharing, list of recipients] Data is deleted when no longer needed, at the latest [TBD: retention period].
5. E-mail delivery
We send the notification to our team and the confirmation to you through Resend [TBD: provider details]. Data processing agreement and third-country transfer: [TBD].
6. Storage of form data
Form data and uploaded CVs are stored in Netlify Blobs, the storage service of our host Netlify (see section 3). Only the organising team can access it through a password-protected area. The CV is also attached to the notification e-mail sent to the organising team. Retention as in section 4.
7. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and the right to withdraw consent (Art. 7(3) GDPR). You can lodge a complaint with a data protection authority: [TBD: competent authority].