Privacy policy

In this privacy policy, we provide information about the processing of personal data in connection with the use of our website, and about existing data subject rights.

Last updated: May 2022

RESPONSIBLE PERSON IN THE SENSE OF THE GDPR

The entity responsible for the processing of your personal information via this website is

KI Park e.V.
Lankwitzer Str. 48
D-12107 Berlin
EMail: info@kipark.de
(In the following:“KI Park”, “we”, “us”, “our")

For more information about us, please see Imprint.

DATA PROTECTION OFFICER

You are welcome to contact our data protection officer if you have any questions regarding the processing of your personal information.
You can reach the DPO by mail at our postal address or by email at datenschutz@kipark.de.

WHAT DATA WE COLLECT AND PROCESS

During your visit to our website, personal data is processed. Personal data is any information that relates to you personally or that can be attributed to you. We process all personal data on this website in accordance with the General Data Protection Regulation (“GDPR”), the German Federal Data Protection Act (“BDSG”), and all other relevant laws.

The personal data processed on this website can be assigned to the following categories:

Access data

Access data is essential information for providing our website. This type of data includes, in particular:

  • Browser type and version
  • Operating system used
  • IP address of the requesting device
  • Date and time of the server request
  • Screen resolution

Log data

Log data is information used to record certain actions on our website. Log data is collected to ensure the security and integrity of the website, and to document and attribute certain actions for legal compliance purposes. This type of data includes:

  • Date and time of an operation
  • IP address of the device used to perform a particular action

Contact details

Contact information is information that is necessary to contact you or to identify you for contact purposes. This primarily includes:

  • Salutation,
  • First and last name,
  • Email address,
  • Phone number,
  • Address,
  • Date of birth

WHAT WE USE YOUR DATA FOR

Visits to our website

When you access our website, access data is sent automatically from your browser to our website’s server, automatically and without any further action on your part. This is necessary to ensure your smooth connection to and comfortable use of the website, and to safeguard and optimize the security and stability of the system.

The legal basis for processing the data is Article 6 (1) lit. f GDPR; our legitimate interest results from the need to present our website to you in a functional manner in accordance with your expectations.

Requests to contact KI Park via the website

Wherever we offer you the option of contacting us using a form provided on the website, it is necessary for you to provide your full name, title, and email address (contact details) so that we can respond to your contact request. Any communication content will only be processed for the purpose of handling your request.

The legal basis for processing your data when you contact us is a legitimate interest according to Article 6 (1) lit. f GDPR; our legitimate interest lies in answering and processing your inquiry, which requires the temporary storage of data. If you are contacting us for the purpose of initiating a contract (e.g., questions regarding membership or application for membership), the legal basis is the implementation of pre-contractual measures according to Article 6 (1) lit. b GDPR.

We regularly delete personal data that we collect from you in connection with a contact request as soon as we have finished processing your request. For more information on the storage period, please refer to the relevant section of this Privacy Notice below.

If you expressly agree to this before sending the contact request, we will also store the data you provide beyond the contact request so that we can refer to previous conversations during our next contact. The legal basis for this is your consent in accordance with Article 6 Section 1 lit. a, 7 GDPR, which we obtain separately from you. You have the right to revoke your consent at any time with effect for the future.

For promotional purposes

Registration

In some cases, we offer you the option of providing your contact details on the website so that we can contact you in the future with information about upcoming KI Park events, services and promotions (e.g. in the form of a newsletter). Registration to receive advertising and information by email is always carried out in a “double opt-in” process. This means that after registration you will receive an email requesting that you confirm your registration. This request is necessary so that no one can register using someone else’s email address.

If you are contacted by email (this is the norm), the legal basis for data processing is your consent in accordance with Article 6 Section 1 lit. a, 7 GDPR, which we obtain separately from you.

You have the right to revoke your consent at any time with effect for the future (e.g., via an unsubscribe link provided in every advertising email).

Logging

The registrations to receive advertising (e.g., newsletter) are logged as evidence for the registration process in accordance with the legal requirements. This includes recording the time of registration and confirmation as well as the IP address.

The legal basis for the processing of access data for logging purposes is a legitimate interest pursuant to Article 6 (1) lit. f GDPR, arising from the need to properly document the declarations made and actions taken and, if necessary, to be able to prove them.

Performance measurement

To be able to improve our promotional mailings and measure the success of our promotional communications, we collect personal data from you (access data, possibly also email address) when you open and read them email, and navigate to links in the email. This analysis includes information that the newsletter was opened, when it was opened, and which links were clicked. In addition, certain parameters regarding reading behavior, the retrieval location (determinable by means of the IP address), and the access time are collected and transmitted to us. This information enables us to better understand our users’ reading habits and to adapt our content or send different content according to our users’ interests.

The legal basis for data processing for purposes of success measurement is your consent pursuant to Article 6 (1) a, 7 GDPR, which we obtain from you together with your consent to be addressed for promotional purposes. You have the right to revoke your consent at any time with effect for the future. Note: For technical reasons, a separate revocation of the consent to the performance measurement is not possible for technical reasons.

Storage duration

Contact data that we collect from you for the purpose of sending promotional communications will be deleted as soon as you object to being contacted for promotional purposes via email (e.g., by clicking on the unsubscribe link in a newsletter), provided that there are no further statutory retention obligations. Further information on the storage period can be found below in the relevant section of this Privacy Notice.

WHAT COOKIES WE USE

What are cookies and what do we use them for?

Our website uses cookies. Cookies are text files that are stored in your internet browser or by the internet browser on your computer system when you use the website.

Cookies can contain data that makes it possible to recognize the device used. In some cases, however, cookies only contain information about certain settings that are not personally identifiable. In any case, cookies cannot be used to directly identify a user.

A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. A distinction is also made between cookies with regard to their function. 

We use cookies to facilitate and improve the use of our website. Some of our website’s functions cannot be offered without the use of technically necessary cookies. Other cookies, meanwhile, enable us to tailor our internet offer to you, e.g. by tracking your use of our website.

Various types of cookies are used on our website, the nature and function of which are explained below.

Types of cookies

We use the following categories of cookies:

  • Essential cookies enable basic functions and are necessary for the proper functioning of the website.
  • Performance cookies help us understand how you, as a visitor, use our website and monitor the performance of the website as you interact with it by collecting and reporting anonymized information.
  • Functionality cookies help us improve the performance of the website, because certain functions of the website will not work without them.

Cookies used

We use the following cookies:

Essential cookies

Name: __cf_bm
Provider: HubSpot
Purpose: This cookie is used to distinguish between humans and bots.
Runtime: 30 minutes

Performance cookies

Name: __hssrc
Provider: HubSpot
Purpose: Whenever HubSpot changes the session cookie, this cookie is also set to determine whether the visitor has restarted their browser. If this cookie does not exist when HubSpot manages cookies, the session is considered as a new session. If it exists, it contains the value “1”.
Runtime: Session

Name: __hssc
Provider: HubSpot
Purpose: This cookie keeps track of sessions. It is used to determine whether HubSpot should increment the session number and timestamps in the __hstc cookie. It contains the domain, viewCount (increments each PageView in a session), and session start timestamp.
Runtime: 30 minutes

Name: __hstc
Provider: HubSpot
Purpose: The cookie is used to track visitors. It contains the domain, utk, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit) and session number (incremented for each subsequent session).
Runtime: 6 months

Functionality cookies

Name: hubspotutk
Provider: HubSpot
Purpose: This cookie is used to track the identity of a visitor. It is passed to HubSpot when a form is submitted and is used in deduplicating contacts.
Runtime: 6 months

What we use cookies for, and using which what solutions

To ensure smooth/flawless technical functioning of the website

The purpose of data processing using necessary cookies is to facilitate your use of the website. Some functions of our homepage cannot be offered without the use of cookies.

The legal basis for such processing is a legitimate interest pursuant to Article 6 Section 1 lit. f GDPR; it results from the described technical necessities as well as your reasonable expectation of the functioning of our homepage.

For web analytics with HubSpot

We integrate the services of HubSpot on our website. HubSpot is a U.S.-based service company with a branch in Ireland:

HubSpot Ireland Limited
2nd Floor 30 North Wall Quay,
Dublin 1, Irland

(“HubSpot”)

HubSpot uses cookies to help us understand how you use the homepage, provided you have agreed to the use of statistics cookies. The information generated by the cookie about your use of our homepage is stored on the servers of our software partner HubSpot.

The legal basis for the processing of personal data as part of our use of HubSpot for web analysis is your consent pursuant to Article 6 (1) lit. a, 7 GDPR, which you grant with your acceptance of the corresponding cookie settings when accessing our homepage. You have the right to revoke your consent at any time with effect for the future. You can also prevent the storage of cookies at any time, or delete cookies already set, in your browser settings.

HubSpot’s Privacy Notice containing further information can be found here:

For handling contact requests and marketing activities with HubSpot

We also use HubSpot (see section 3.3.2 above) as technical support for processing your contact requests and for our marketing activities. This includes, among other things, email marketing, which includes e.g. the sending of newsletters, the management and organization of contact data, and the provision of online-based contact forms.

Information collected via HubSpot is stored on the servers of our software partner HubSpot.

The legal basis for data processing when using HubSpot is a legitimate interest pursuant to Article 6 (1) lit. f GDPR; it arises from the need to automate and technically support processes to enable efficient and timely completion in accordance with your expectations.

In the event that personal data is transferred to the U.S. this will be done on the basis of standard contractual clauses pursuant to Article 46 GDPR, according to which HubSpot guarantees that the EU data protection requirements will also be complied with when processing data in the U.S.

HubSpot’s Privacy Notice containing further information can be found here:

If you generally do not want HubSpot to collect data, you can prevent the storage of cookies at any time by changing your browser settings.

STORAGE PERIOD

If no explicit storage period is specified in this Privacy Notice, your personal data will be deleted, or the processing of the data will be restricted, as soon as it is no longer required for the above-mentioned purposes. In addition, we store your personal data to the extent that we are legally obligated to do so. Corresponding obligations to provide proof and to retain data result, among other things, from the German Commercial Code, the German Fiscal Code, and the German Money Laundering Act. The storage periods specified therein are generally up to ten years.

RECIPIENTS OF PERSONAL DATA AND THIRD-COUNTRY TRANSFERS

We work with carefully selected service providers who support us with operating the website and dispatching promotional communications (e.g. via newsletter). We transmit your personal data to these service providers to the extent necessary for this purpose.
Provided the legal requirements for this are met, we have concluded “order processing contracts” within the meaning of Article 28 GDPR with these service providers. These contracts oblige the service providers, among other things, to process the personal data strictly in accordance with our instructions and in compliance with the requirements of data protection law, and to take all necessary measures to protect personal data.

Your personal data is not transferred to countries outside the European Union/European Economic Area.

NO PROFILING

We do not intend to use any personal data collected from you for any automated decision-making processes (including profiling).

RIGHT OF OBJECTION

You have the right to object to the processing of your data for reasons relating to your particular situation, to the extent that we process it for our legitimate interest pursuant to Article 6 (1) lit. f GDPR.

In the event of an objection, we will not further process your data unless this is necessary for overriding, compelling or legitimate reasons or for the assertion, exercise, or defense of legal claims, in which case we must be able to prove these reasons.

To the extent that we process your data on the basis of Article 6 (1) lit. f GDPR for direct marketing purposes, you may object to this processing at any time without stating reasons; this also applies to profiling, insofar as it is associated with direct marketing. If you object to processing for direct-marketing purposes, we will no longer use your personal data for these purposes.

If you wish to exercise your right of objection, please contact us or our data protection officer. The contact details are listed in the “Data protection officer“ section of this Privacy Notice.

YOUR RIGHTS

In accordance with Article 15 GDPR, you also have the right to information at any time. In particular, you may request information about the purpose of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the intended retention period, the existence of a right to rectification, erasure, restriction of processing, or objection to the existence of a right to object, the origin of your data if it wasn’t collected by us, as well as the existence of an automated decision-making process, including profiling, and, where applicable, meaningful information about their details.

As part of your right to information, you may request a copy of your personal data. Copies of data are generally provided in electronic form unless you have specified otherwise. The first copy is free to you; a reasonable fee may be charged for additional copies. The provision is subject to the rights and freedoms of other persons who may be affected by the transmission of the copy.

Under the conditions of Article 16 GDPR, you can immediately request the correction of incorrect or incomplete personal data stored by us.

In addition, under the conditions of Article 17 GDPR (“right to be forgotten”), you may always request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise, or defense of legal claims.

In accordance with Article 18 GDPR, you may also request that the processing of your personal data be restricted if you dispute the accuracy of the personal data stored by us or if you have objected to the processing in accordance with Article 21 GDPR. In this case, we are obligated to restrict the processing of your data for the duration of the review of your request. You can also request the restriction if the processing is unlawful and you object to the erasure of the personal data, or if you do not need your stored data [for use] with us, but for the assertion, exercise, or defense of legal claims.

To the extent that we process your personal data on the basis of consent or a contract using automated processes, you have the right under Article 20 GDPR to receive the personal data concerned in a structured, common and machine-readable format, or to have it transferred to another controller (“right to data portability”), insofar as this does not affect the rights and freedoms of other persons.

Please contact us or our data protection officer regarding your data subject rights. You can find the contact details in the “Data protection officer” section of this Privacy Notice.

RIGHT OF REVOCATION FOR CONSENT GRANTED

Once you have given us your consent to process your data, you have the right to revoke this consent at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent up until the time of revocation. Please contact us or our data protection officer regarding revocation of consent. You can find the contact details in the “Data protection officer” section of this Privacy Notice.

RIGHT TO COMPLAIN TO A SUPERVISORY AUTHORITY

If you believe that our processing of your personal data violates the provisions of data protection law, Article 77 GDPR states that you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.

The Commissioner for Data Protection and Freedom of Information Berlin responsible for the KI Park can be reached by post, telephone, fax, or email at

Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219
Visitor entrance: Puttkamerstr. 16 - 18 (5th floor)
D-10969 Berlin
Telephone: +49 (0)30 13889-0
Fax: +49 (0)30 2155050
EMail: mailbox@datenschutz-berlin.de

For more information about the Commissioner for Data Protection and Freedom of Information Berlin, please visit https://www.datenschutz-berlin.de/ueber-uns/kontakt.

FURTHER QUESTIONS

If you have any questions regarding the processing of your personal data by us and the associated rights or have any other data protection-related information/comments or suggestions, please feel free to contact our data protection officer at any time. You can find the contact details of our data protection officer in the “Data protection officer” section of this Privacy Notice. All inquiries to our data protection officer will, of course, be treated as strictly confidential.