Privacy Policy

Dear visitor. We would like to welcome you to our website and are pleased that you are participating in our „Next Generation Compliance“ survey.

As part of the survey, we will process personal data from you. The protection of your data is important to us and in the following we would like to inform you about the processing as well as your rights.

If you have any questions, please feel free to contact us at any time.

Contact details of the person responsible:

The responsible party for the processing of your personal data via the website is.

KI Park e.V.

Lankwitzer Str. 48

12107 Berlin


Contact details of the data protection officer


Data sources

Personal data is any information relating to an identified or identifiable natural person. In principle, we only process data that is necessary for the presentation of the website as well as the implementation of the survey. We collect the following data directly from you:

– IP address (partly only in shortened form, if applicable).

– Information about the browser type and its version

– The operating system of your terminal device

– Your Internet service provider

– URLs of the pages you visit, including pages captured by our browser extension

– Date and time stamps associated with such browsing, searching and clicking activity

– Content you share

– Whenever you use our websites, we may collect usage information about you, such as the web pages you visit, language preferences, etc.

Purpose of processing

The purpose of the processing is to conduct a survey to investigate current compliance practices in the company culture.

Legal basis

Participation in this survey and all information provided is voluntary. The legal basis for the processing in this case is Art. 6 (1) sentence 1 letter f) GDPR. Our legitimate interest lies in the determination of trends, opinions and experiences of the participating companies, in particular with regard to the compliance with regulatory requirements. We use the results obtained to further develop our consulting services and to identify (individual) consulting needs. Therefore, our interest qualifies as legitimate within the meaning of the aforementioned provision. Affected by this is your IP address, which is required for calling up the website with the survey tool. We ask you not to provide any information in free text fields that has a personal reference (e.g. names, but also functions in certain authorities). Should this nevertheless be the case, we have no intention of collecting data in this regard. The compulsory processing of this data, which we cannot prevent but can only terminate as quickly as possible, is also based on our legitimate interest pursuant to Art. 6 (1) p. 1 letter f) GDPR.

Data transfer

Recipients within the scope of this processing activity include:

– Cooperation partners

– Providers of web hosting services

Data transfer always takes place on the basis of a legal norm or an appropriate contract according to Art. 26 or 28 GDPR, which ensures compliance with all data protection requirements.

Apart from that, data is only forwarded in the cases provided for by law, for example in the case of a legal obligation to provide information to law enforcement authorities.

Third country transfer

A third country transfer to the USA takes place. In order to make the third-country transfer as data-protection-friendly as possible, standard contractual clauses have been concluded with the provider in the insecure third country in accordance with Art. 46 (2) letter c GDPR. A copy of the standard data protection clauses can be requested by sending an informal email to

Storage period

The personal data received or collected will only be stored for as long as is necessary to fulfill the associated purpose. Once this purpose has ceased to apply, we generally delete or anonymize the data again, provided and insofar as the deletion does not conflict with any legitimate storage reasons and obligations (e.g. in accordance with tax or professional regulations). In the latter case, the data will only be processed in a restricted manner, i.e. only to fulfill the reason or obligation to retain the data and otherwise only with your consent, to assert, exercise or defend legal claims, to protect the rights of another natural or legal person or for reasons of an important public interest of the European Union (EU) or an EU member state. In the event of the existence of a retention obligation, we delete or anonymize the data after the retention obligation has safely ceased to exist.

Data subject rights

As a person affected by the processing of personal data, you have the following rights:

          Right to information (Art. 15 GDPR).

You have the right to request confirmation as to whether personal data concerning you is being processed. If this is the case, you have a right to be informed about the personal data and to receive the information listed in detail in Art. 15 GDPR.

          Right to rectification (Art. 16 GDPR).

You have the right to request from the controller without undue delay the rectification of any inaccurate personal data concerning you and, where applicable, the completion of any incomplete personal data (Art. 16 GDPR).

          Right to erasure (Art. 17 GDPR).

You have the right to request that the controller erases personal data concerning you without undue delay, provided that one of the reasons listed in detail in Art. 17 GDPR applies, e.g. if the data is no longer needed for the purposes pursued (right to erasure).

          Right to restriction of processing (Art. 18 GDPR).

You have the right to request the controller to restrict processing if one of the conditions listed in Art. 18 GDPR applies, e.g. if you have objected to the accuracy of the data concerned.

          Right to information (Art. 19 GDPR).

If you have asserted to us the rectification or erasure of your data or the restriction of processing, we are obliged to inform all recipients to whom personal data relating to you have been disclosed of the rectification or erasure of the data or the restriction of processing, unless this proves impossible or involves a disproportionate effort. You also have the right against us to be informed about these recipients.

          Right to data portability (Art. 20 GDPR).

You have the right to receive the personal data concerning you in a structured, common and machine-readable format and to transfer it to another responsible party, or to have it transferred by us to this party, insofar as you have provided us with this data on the basis of consent, or on the basis of a contract and the data is processed with the aid of an automated procedure. You have the right to have the data transmitted by us directly to the other person responsible, insofar as this is technically feasible and the rights and freedoms of other persons are not affected.

          Right to object (Art. 21 GDPR).

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims (Art. 21 GDPR).

Regarding the exercise of your rights, you can always contact our data protection officer at

Right of complaint

If you believe that the processing of your personal data by us violates the provisions of data protection law, you also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, in accordance with Article 77 of the GDPR.

You can reach the Berlin Commissioner for Data Protection and Freedom of Information responsible for KI Park by post, telephone, fax or e-mail at.

Berlin Commissioner for Data Protection and Freedom of Information

Alt-Moabit 59-61

10555 Berlin

Telephone: 030 13889-0

Fax: 030 2155050


For more information about the Berlin Commissioner for Data Protection and Freedom of Information, please visit

Obligation to provide data

In principle, there is no obligation to provide data. However, the provision of data may be necessary for the use of certain functions. If you do not provide the required data, you will not be able to use certain functions.

Automated decisions, including profiling, within the meaning of Art. 22 GDPR.

Your personal data will not be used for automated decision-making, including profiling, in accordance with Art. 22(1) and (4) of the GDPR.

Status and adaptations of this privacy policy

This data protection declaration corresponds to the status indicated below. We reserve the right to make adjustments to this data protection declaration. We would therefore like to ask you to view the data protection declaration on an ongoing basis so that you can inform yourself of any changes.