Privacy Policy
1. Privacy at a glance
General information
The following notes give a simple overview of what happens to your personal data when you visit this website or use one of our forms. Personal data is any data that can be used to identify you personally.
Who is responsible for data collection on this website?
The responsible party is:
Matvey Melnikov
Waldstr. 12
77694 Kehl, Germany
Phone: +49 1575 7097535
Email: [email protected]
How do we collect your data?
On the one hand, we collect data that you actively provide to us — for example via the project sheet, the contact form, or an event registration. On the other hand, our hosting provider automatically records technical data when you visit the website (e.g. IP address, browser type, time of access) in server log files.
What do we use your data for?
Some of the data is used to ensure the website is provided without errors and securely. We use other data to respond to your enquiries, project ideas, or registrations.
2. Hosting and technical provision
This website uses two technical service providers who process your data on our behalf. We have a data processing agreement under Art. 28 GDPR with both.
Hetzner Online GmbH
Our content management system (Directus) runs on a server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. All data submitted through our forms is stored exclusively on this server in Germany — there is no transfer to countries outside the EU/EEA. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a reliable, technically sound provision of our content).
Cloudflare, Inc.
The website itself (text, images, design) is delivered via Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare acts as a content delivery network and additionally protects the site against attacks. In doing so, Cloudflare processes, among other things, your IP address, browser type, operating system, and the time of access. Cloudflare is certified under the EU-US Data Privacy Framework, so the transfer of data to the USA takes place on a recognised legal basis. The legal basis for its use is Art. 6(1)(f) GDPR (legitimate interest in loading speed and protection against misuse). Details: Cloudflare's privacy policy.
What we deliberately do not use
This website does not use cookies for statistics or advertising purposes, no Google Analytics, no Meta/Facebook pixels, and no externally embedded fonts (our fonts are hosted locally on the server). There is currently no tracking of your usage behaviour.
3. General information and mandatory disclosures
Storage period
We store data submitted through our forms for as long as it is needed to process your enquiry, idea, or registration, but at least until the matter is finally resolved. Statutory retention obligations remain unaffected.
Withdrawing your consent to data processing
Where processing is based on your consent, you can withdraw it at any time, informally, by email to [email protected]. The lawfulness of processing carried out before the withdrawal remains unaffected.
Right to object (Art. 21 GDPR)
Where data processing is based on legitimate interests, you have the right to object to this processing at any time for reasons arising from your particular situation.
Right to lodge a complaint with the competent supervisory authority
In the event of a data protection violation, you have the right to lodge a complaint with the competent supervisory authority — for Baden-Württemberg, this is the State Commissioner for Data Protection and Freedom of Information.
Right to information, rectification, erasure and restriction
Within the scope of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing, and, where applicable, a right to rectification, erasure, or restriction of the processing of this data. Please contact us at the address given above for this purpose.
Right to data portability
You have the right to receive data that we process automatically on the basis of your consent or in fulfilment of a contract, in a common, machine-readable format.
4. Data collection on this website
Server log files
When you access the website, Hetzner and Cloudflare automatically collect information in so-called server log files, which your browser automatically transmits: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request, and IP address. This data is not merged with other data sources and serves the secure and smooth provision of the website (Art. 6(1)(f) GDPR).
Contact form ("Get involved")
If you write to us via the contact form, we process the data you provide (name, email address, message) to process your enquiry. The legal basis is Art. 6(1)(b) GDPR (initiating a collaboration) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
Project sheet
Through the project sheet you can submit your own project idea. In doing so, we collect the title and description of your idea, your personal motivation, the chosen pillar(s), what you can contribute and where you are looking for support, the planned location, people already involved, the next concrete step, and your email address for feedback. We use this information exclusively to understand your idea and support you in implementing it (Art. 6(1)(b) GDPR).
Event registration
When registering for a session or an event, we process your name, email address, optionally your city, and an optional message in order to organise your participation (Art. 6(1)(b) GDPR).
Project profile, organisation profile, session offer
These three forms are used to propose a public profile or offer (name/title, short description, contact email, and for organisations optionally also a website). Submitted profiles do not automatically appear publicly — we review them first before they are made visible, with your knowledge.
Minors
Our offering is aimed at young people between 16 and 27 years old. Under Art. 8 GDPR, in Germany people aged 16 or over can effectively consent to the processing of their data themselves. For participants under 16 — for example in activities involving younger siblings or groups — consent from a parent or legal guardian is required; we reserve the right to request this in individual cases.
Photos and videos at events
Photos or videos are occasionally taken at sessions and events, which we may want to show, for example, on Instagram. For this, we obtain a separate, explicit consent on site — independent of this privacy policy. Without this consent, we do not publish any recordings in which you are recognisable.
5. Social media
We link to our Instagram profile (@connectionforaction). Simply visiting this page does not transmit any data to Meta/Instagram.
On the "Get involved" page, we additionally offer the option to embed a single Instagram post directly. This post is not loaded automatically: you initially see only a placeholder with a checkbox. Only once you actively tick this box does your browser load the post directly from Instagram — your consent under Art. 6(1)(a) GDPR. In doing so, Instagram/Meta (USA) may process your IP address, among other things, and set cookies; Meta's privacy policy then additionally applies. You can deactivate the embedding again at any time by unticking the checkbox; your choice is only stored locally in your browser (no cookie, no tracking on our part).
6. Your rights at a glance
Unless stated otherwise, you have the right at any time to free information about your stored personal data, its origin, recipients, and the purpose of processing, as well as a right to rectification, blocking, or erasure of this data, and a right to lodge a complaint with the competent supervisory authority. Please contact us at the address given above at any time regarding this.