We, the Stiftung Digitale Chancen (SDC), operate the website www.digitale-chancen.de and collect certain data from you where necessary. In the following privacy statement, you will learn what we do with your data, so-called personal data, and why we do it. We also inform you how we protect your data, when we delete it, and what rights you have thanks to data protection laws.
 

Who can I contact?

In simple terms: We are SDC and want to enable equal access to the internet for all people. You can contact us at any time if you have questions. The fastest way is by email to datenschutz@digitale-chancen.de. 

Responsible entity for this website:

Stiftung Digitale Chancen
Chausseestr. 15
10115 Berlin
datenschutz@digitale-chancen.de 

Via this contact information, you can also reach our data protection officer or another relevant contact person. Please feel free to contact us if you have specific questions about your data, its deletion, or your rights.

What are my rights?

In simple terms: You have many rights regarding data protection. For example, you can ask what exactly happens to your data. You can also request deletion of your data at any time. However, due to legal requirements, not all data can be deleted.

You can contact us at any time if you wish to exercise the following rights:

• Right of withdrawal under Art. 7(3) GDPR (e.g., to revoke prior consent for receiving newsletters)
• Right of access under Art. 15 GDPR (e.g., to learn what data we have stored about you)
• Right to rectification under Art. 16 GDPR (e.g., if your email address has changed)
• Right to erasure under Art. 17 GDPR (e.g., if certain stored data should be deleted)
• Right to restriction of processing under Art. 18 GDPR (e.g., if we should retain but not use your email address)
• Right to data portability under Art. 20 GDPR (e.g., to receive your data in a compressed format)
• Right to object under Art. 21 GDPR (e.g., to opt out of advertising or analytics)
• Right to lodge a complaint with a supervisory authority under Art. 77(1) GDPR (List of German DPAs)

We will assess your rights individually and make every effort to fulfill them even without a legal entitlement. If we believe a right does not apply, we will explain this in writing upon request.

Please note: We may ask for further proof of identity to prevent misuse of data subject rights.

Data Deletion and Retention Periods

In simple terms: We keep track of how and when you visit our website or receive a newsletter. Once this data is no longer needed, we delete it.

Unless otherwise stated, your data is deleted once no longer needed—for example, your email address after unsubscribing from the newsletter. Blocking or deletion also occurs when retention periods expire. Some data must be retained longer for legal reasons.

Data protection-related inquiries and other legal matters may be stored longer in line with retention and limitation periods.

Visiting the Website

In simple terms: Our experts protect your data to prevent it from falling into the wrong hands.

When browsing our website, we do not collect personal data, except for what your browser transmits, such as:

• IP address
• Approximate location (e.g., Berlin)
• Internet provider (e.g., Vodafone)
• Internet speed
• Date and time
• Referring website
• Browser and operating system
• Hardware info

These are temporarily stored for technical reasons to display the website properly and diagnose errors. Legal basis: legitimate interest under Art. 6(1)(f) GDPR.

Contact

In simple terms: If you email us or use our contact form, we store that information until we've helped you.

You may provide:

• First and last name
• Email address
• Message or inquiry

This data is encrypted and used solely to respond to you. After resolving your inquiry, it is deleted. Legal basis: legitimate interest under Art. 6(1)(f) GDPR.

Social Media Presence

In simple terms: You can find us on Instagram, Facebook, X, YouTube, and LinkedIn.

We only forward data to social media platforms if you click their logos. Platforms receive access to your data only then.

If you visit a page with a YouTube video, YouTube gets info about your visit. If logged in, it can link your activity to your account.

Each provider becomes the data controller once you visit their site. Please review their privacy policies:

• Facebook & Instagram: Meta Platforms Ireland Ltd
• X (formerly Twitter): Twitter International Unlimited Company
• LinkedIn: LinkedIn Ireland Unlimited Company
• YouTube: Google Ireland Ltd

Platforms and SDC are joint controllers under Art. 26 GDPR. We’ve signed agreements ensuring they uphold user rights, data security, and breach notifications. We only receive anonymized stats.

Newsletters and Press Releases

In simple terms: You can unsubscribe from emails at any time by clicking a link or emailing us.

Subscription requires a double opt-in confirmation. Your data is deleted upon unsubscribing.
Legal basis: consent under Art. 6(1)(a) GDPR.

We use a service provider under a data processing agreement. You can unsubscribe anytime.

Event Registration

In simple terms: You can register for events (online or in person). We need some of your data to organize them.

We use Microsoft Forms for registration and collaborate with:

• Zoom
• BigBlueButton
• Microsoft Teams

We process your name for participant identification and use contact data to send event-related info. Legal basis:

• Consent under Art. 6(1)(a) GDPR
• Legal obligation under Art. 6(1)(c) GDPR
• Legitimate interest under Art. 6(1)(f) GDPR (for audits or evaluations – up to 10 years)

Event Recordings

In simple terms: Some events may be recorded and published (e.g., on YouTube).

Recordings usually include speaker presentations only.
Used for education, awareness, and promotion of future formats.
Legal basis: consent under Art. 6(1)(a) GDPR. Consent may be revoked at any time in writing.

Applications

In simple terms: If you apply to us, we process your data for the application process.

Application data may include personal or sensitive information (e.g., health or religion). You decide what to provide.

If hired, we retain data as part of your employment. If not hired, data is deleted after 6 months unless consent for longer retention is given.

We use Personio for recruitment. Legal basis:
Art. 6(1)(b), Art. 88 GDPR & §26 BDSG (German Federal Data Protection Act)

Ordering Materials

In simple terms: If we send you materials, we may share your data with sponsors to prove usage.

Legal basis: legitimate interest under Art. 6(1)(f) GDPR
(e.g., for funders to verify proper use of resources)

Payments and Payment Providers

In simple terms: When you donate, we share your data with the payment provider.

We use Fundraising Box, which processes:

• Name
• Account number
• Email
• Mailing address (for donation receipts)

Data transfer is encrypted (SSL/TLS).
Legal basis: consent under Art. 6(1)(a) GDPR

Cookies and Other Technologies

In simple terms: We use cookies to remember your preferences and improve our site.

Cookies store info such as:

• Site name
• Expiry date
• Custom value

We use:

1. Essential cookies (e.g., for correct site display)
2. Functional/performance cookies (e.g., to avoid error messages)
3. Advertising/analytics cookies

We use Matomo (self-hosted), with IP anonymization and no cookie storage. Legal basis: consent under Art. 6(1)(a) GDPR

Data Recipients

In simple terms: We use services from other companies, and your data may be shared with them.

Our providers include:

• IONOS SE
• Host Europe GmbH
• Microsoft 365

We share only necessary data under contracts for processing or based on your consent or legitimate interest. Data may be transferred to the US under the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.

We will occasionally revise this privacy notice, especially if legal changes or internal updates require it. The latest version can always be viewed at https://digitale-chancen.de/datenschutz.

Status: March 2025