Purpose Stiftung gemeinnützige GmbH (in the following also “we” or “us”) is delighted about your visit to its internet pages and your interest in its work and organization.

The following information refers to our website so-events.org 

and its subpages. 

We attach great importance to data protection and process your personal data confidentially and only in accordance with the statutory regulations. Below, we provide information about when we collect which data and how we use it.

A. Controller

The controller within the meaning of data protection law is:

Purpose Stiftung gemeinnützige GmbH 

Süderstraße 73

20097 Hamburg, Germany 

Managing Directors: Armin Steuernagel und Adrian Hensen

Court of registration: Hamburg Local Court

Registration number: HRB 153854

Contact: communications@purpose.ag 

B. Scope of personal data processing 

All information relating to an identified or identifiable natural person is personal data, such as name, identification number, email addresses or contract details. This may also include data that provides information about the physical, physiological, genetic, mental, economic, cultural or social identity of a natural person. We collect and use personal data only to the extent necessary to provide a functional website and our content and services. The collection and use of personal data of users of our website only takes place if there is a legal basis for this or if you have given us your consent.

C. Categories of data processed

I. When visiting the website

When you visit our website, the following categories of personal data are processed:

• Technical connection data that is essential for accessing our website and documents the connection established, such as IP address, date and time of website access and browser type used.

II. When registering for and subscribing to our newsletter

When you sign up to receive our newsletter, we process the following categories of data:

• • Contact data: first name, surname, email address

• Data documenting your consent to data processing

D. Purposes and legal bases of data processing

We process your personal data for the following purposes:

• Provision of the website (legal basis: legitimate interest in public relations within the framework of data protection regulations in accordance with Art. 6(1)(f) GDPR)
• Communication by email, post, telephone (legal basis: legitimate interest in responding to your inquiry in accordance with Art. 6(1)(f) GDPR or, where applicable, the implementation of a contract or the initiation of a contract in accordance with Art. 6(1)(b) GDPR)
• Conducting business relationships (legal basis: legitimate interest in the use of, for example, contact details in accordance with Art. 6(1)(f) GDPR)
• Provision of video files from third-party providers (YouTube) (legal basis: consent pursuant to Art. 6(1)(a) GDPR)
• To identify malfunctions and for security reasons (legal basis: fulfilment of our legal obligations in the area of data security and legitimate interest in eliminating malfunctions and ensuring the security of our services pursuant to Art. 6(1)(c) and (f) GDPR).
• Sending the newsletter to recipients by email (legal basis: consent pursuant to Art. 6(1)(a) GDPR)
• Safeguarding and defending our rights (legal basis: legitimate interest of the Purpose Foundation in asserting and defending its rights pursuant to Art. 6(1)(f) GDPR).
• Documentation of declaration(s) of consent (legal basis: Art. 6(1)(c) in conjunction with Art. 7(1) GDPR).

E. Transfer of data

I. General information

Your personal data will not be transferred to third parties for purposes other than those stated. We will only transfer your personal data to third parties if:

• you have given your express consent,
• the processing is necessary for the initiation or execution of a contract with you,
• the processing is necessary to fulfil a legal obligation,
• the processing is necessary to safeguard legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data.

II. Transfer to other controllers

We will only transfer your personal data to other controllers if we or the third party have a legitimate interest in the transfer, or if you have given your consent. In addition, data may be transferred to other controllers if we are obliged to do so by law or by an enforceable administrative or court order.

III. Transfer to service providers

We carefully select and regularly monitor the service providers we commission (e.g. programming or web hosting). All service providers are bound by us to maintain confidentiality and comply with the legal requirements regarding data protection.

We work together with the following service providers:

1. United Domains (web hosting)
2. MailerLite for sending and managing our newsletters; more details can be found under G. III.

IV. Transfer to recipients outside the EEA

We may also transfer personal data to recipients located outside the EEA and thus in so-called third countries. In such a case, prior to the transfer, we ensure that the recipient either provides an appropriate level of data protection (e.g. due to a decision of adequacy by the EU Commission for the respective country or due to the agreement based on so-called EU standard contractual clauses of the European Union with the recipient) and/or that you have given your consent to the transfer.

F. Duration of storage and deletion of data

We only store your personal data for as long as it is necessary to provide our online services or for as long as we have a legitimate interest in further processing. In all other cases, we delete the personal data unless we are obliged to continue storing it due to legal obligations (for example, we are obliged to retain certain documents for the period specified by law due to tax and commercial law deadlines).

G. Data processing when visiting our website

I. General information

When you visit our website, certain personal data is collected. This serves to improve the content and functionality and thus the attractiveness of our website.

We use these server log files to store information that your browser automatically transmits to us for technical reasons. This data is not stored in a way that can be traced back to you. Nor is this data merged with other data sources. The log files are stored to ensure smooth connection establishment, convenient use of our website, evaluation of system security and stability, and for security reasons (e.g. to investigate attempted attacks).

In individual cases, log files may be passed on to investigating authorities. We generally store your IP address in pseudonymised form; no personal evaluation takes place. With the exception of storage for the purpose of logging consent, the pseudonymised IP address is deleted promptly after your visit to our website.

When you visit our website, we store the following server log files:

• Browser type/version, including installed add-ons and language
• Pseudonymised IP address (Internet Protocol address) of the device from which our online services are accessed
• Referrer URL (the previously visited website)
• Date and time of the server request
• Type of request
• Amount of data transferred
• Name of the files or information accessed (visited page)
• Access status/HTTP status code

These log files are deleted after a storage period of 8 weeks, unless longer storage is necessary for purposes of evidence or to clarify an incident.

II. Embedding of YouTube (so-called embedding in privacy-enhanced mode)

If you activate playback of the embedded video by clicking on the preview, you consent to Google, as the provider of the YouTube service, processing your personal data. Processing is carried out by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider.
Google Fonts content may also be embedded in this context. YouTube content is embedded in the so-called “privacy-enhanced mode”. This mode is provided by Google as the operator of YouTube, which thereby assures that no data is transmitted to Google and no cookies are stored on your device before you activate your consent in the area of the browser window used to play the video.

As soon as you activate your consent by clicking to load the video, the video is loaded from YouTube. Technically, the same thing then happens as if you had followed a link to the YouTube website: YouTube receives all information that your browser transmits automatically. In addition, YouTube sets its own cookies on your device. This also happens if you do not have a YouTube user account. If you are logged in to YouTube or Google, your data will be assigned directly to your account. If you do not want your data to be assigned to your YouTube or Google user account, you must log out of YouTube and Google before clicking the consent notice in the video frame of the browser window.
The videos are embedded and played on the basis of your consent pursuant to Art. 6(1)(a) GDPR. Where consent is required for storing information on your device or accessing such information, this is based on Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act).

Withdrawal of your consent: You can withdraw your consent at any time with effect for the future. The withdrawal does not affect the lawfulness of the processing carried out up to that point. To withdraw your consent, please send an email to communications@purpose.ag.
 

A transfer of personal data to the USA cannot be ruled out. Where the requirements are met, the transfer may be based on the EU-U.S. Data Privacy Framework, under which Google LLC is actively certified. The certification does not constitute blanket proof that every individual processing operation complies with data protection law. Further information can be found in Google’s Privacy Policy at https://policies.google.com/privacy and in the official Data Privacy Framework register at https://www.dataprivacyframework.gov/ .

III. Newsletter distribution with MailerLite

Our free newsletter regularly informs you by email about current developments relating to our conferences. To subscribe to our newsletter, we require your email address. You may voluntarily provide further information, such as your name. Where provided, we use this information to address you personally in the newsletter.

We use the double opt-in procedure for subscriptions. After you subscribe, we will send you an email asking you to confirm your subscription by clicking on a confirmation link. Your email address will only be added to the active newsletter mailing list after this confirmation.

If you do not confirm your subscription within 30 days, the data stored for this purpose will be deleted, unless there is another legal basis for further storage.

To prove your subscription and to investigate any possible misuse, we store the evidence data collected during subscription and confirmation, in particular the IP address, where collected, and the respective times. This data is only stored to the extent and for the period necessary to prove consent and to protect legitimate legal interests.

We use MailerLite, MailerLite Limited, 88 Harcourt Street, Dublin 2, D02 DK18, Ireland, to manage and send our newsletter. Your personal data is processed for the purpose of sending the newsletter on the basis of your consent pursuant to Art. 6(1)(a) GDPR. MailerLite processes the data on our behalf as a processor. We have concluded a data processing agreement with MailerLite pursuant to Art. 28 GDPR.

Further information on data processing by MailerLite can be found in MailerLite’s privacy policy at: https://www.mailerlite.com/legal/privacy-policy

You can withdraw your consent to receiving the newsletter at any time with effect for the future. To do so, you can use the unsubscribe link included in every newsletter or send us a message using the contact details provided in our imprint. The lawfulness of the processing carried out up to the time of withdrawal remains unaffected.

We store your data for the purpose of sending the newsletter for as long as you are subscribed to the newsletter and have not withdrawn your consent. After you unsubscribe, your data will be removed from the active newsletter mailing list.

Where certain data is still required to prove your consent or your unsubscription, or to defend against legal claims, we only retain it to the extent necessary and for the relevant period. It is then deleted, unless there is another legal basis for further storage. 

IV. Data security: SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

H. Your rights

You have the right to:

• information about your data stored by us and its processing,
• correction of incorrect personal data,
• deletion of your data stored by us,
• restriction of processing pursuant to Art. 18 GDPR 
• data portability,
• right to revoke consent: if you have given us your consent, you can revoke it at any time with effect for the future.

Furthermore, in cases where we process your personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to the processing of your data with us, provided that the requirements of Art. 21 GDPR are met. 

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. This may be the data protection authority responsible for your place of residence or federal state, or the data protection authority responsible for us. The data protection authority responsible for us is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit

Ludwig-Erhard-Str. 22

20459 Hamburg

Email: mailbox(at)datenschutz.hamburg.de

I. Changes to our privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.