Privacy Policy
Privacy Policy for the futureSAX Website and Online Services
In the following privacy policy, we, futureSAX—the innovation platform of the Free State of Saxony, futureSAX GmbH, Anton-Graff-Straße 20, 01309 Dresden, as the data controller within the meaning of the General Data Protection Regulation (GDPR)—explain what personal data we process when you visit our website and use our online services. Please note that, by default, all data transmissions related to our website take place via an encrypted connection.
We reserve the right to update our privacy policy from time to time to ensure it always complies with current legal requirements or to reflect changes to our services. We therefore recommend that you review the privacy policy regularly to stay informed about the protection of the personal data we process.
Notice for persons under 18
Persons under the age of 18 must also obtain consent from a parent or guardian.
Logging and Creation of Log Files
When you access www.futuresax.de, a range of technical data is logged. This general data and information is stored in the server’s log files. Your IP address, browser identifier, and domain, the name of the file accessed, the date and time of access, the amount of data transferred, and the successful retrieval of the file are recorded in a log file. The processing of personal data is carried out for the purpose of providing the website, as well as for troubleshooting and investigating cases of misuse or fraud, based on a legitimate interest pursuant to Art. 6(1)(f) of the GDPR. The log files are deleted after seven days.
Use of Cookies
We use cookies on our website. Cookies allow us to optimize the information and offerings on our website to better serve the user. Cookies enable us to recognize users of our website. The purpose of this recognition is to make it easier for users to use our website.
Cookies are used on our website in connection with the following services:
Google Analytics, Google Ireland Limited – Web Analytics
Based on your consent pursuant to Article 6(1)(a) of the GDPR, we use Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”). To this end, we have entered into a data processing agreement with Google pursuant to Article 28 of the GDPR. Furthermore, in the event of data transfer to the parent company Google LLC—headquartered in the United States—appropriate safeguards for the protection of data subjects within the meaning of Article 46(1) of the GDPR are in place through the conclusion of standard data protection clauses pursuant to Article 46(2)(c) of the GDPR. Your declaration of consent expressly includes the possible worldwide transfer and processing of data by other group companies of Google LLC. We would like to expressly point out any risks in this regard, such as the difficulty in enforcing data protection rights of data subjects.
Through the cookies set by Google Analytics, usage data (e.g., websites visited, access times) and communication data (e.g., IP addresses, device information) are processed on our behalf to evaluate the use of our online offering, compile reports on activities within our online offering, and provide other services related to the use of our online offering. This may also involve the creation of pseudonymized user profiles.
Google Analytics is used exclusively with IP anonymization. All processed personal data is deleted or fully anonymized after 14 months. For more information on Google’s use of data, as well as options for settings and opting out, please refer to Google’s Privacy Policy and the settings for the display of advertisements by Google.
Google Maps, Google Ireland Limited – Map Display
Based on your consent pursuant to Art. 6(1)(a) of the GDPR, we integrate Google Maps, an online map provider operated by Google Ireland Limited (“Google”), to visually present our location and any directions. Your declaration of consent expressly includes the possible worldwide transfer and processing of data by other group companies of Google LLC. We would like to expressly point out any risks in this regard, such as the difficulty in enforcing data subject rights under data protection law.
Through the integration and use of the map content, both usage data (e.g., access times, addresses entered for route planning, if applicable) and communication data (e.g., IP addresses) may be processed by Google. We have no influence over the further processing of personal data by Google. The cookies set by Google Maps to ensure functionality are deleted at the end of the session.
Please refer to Google’s Privacy Policy for the purpose and scope of data processing by Google, as well as your rights in this regard and settings options to protect your privacy.
In addition, based on the legitimate interest pursuant to Art. 6(1)(f) of the GDPR, only technically necessary cookies are used. The legitimate interest of futureSAX GmbH in this regard consists of ensuring user-friendliness (e.g., not replaying the introductory video), ensuring that the website is provided in compliance with data protection regulations (e.g., saving the selection made regarding the cookie banner), and ensuring the unrestricted technical functionality of the website, particularly the login area (e.g., TYPO3-specific cookies). These cookies are stored for a maximum of twelve months.
Integrated Services
Sendinblue (formerly Newsletter2Go, Newsletter2Go GmbH) – Email Delivery
To provide our newsletter service, we integrate a form field from our service provider Newsletter2Go on our website for the purpose of collecting email addresses, based on a legitimate interest pursuant to Article 6(1)(f) of the GDPR. To provide the newsletter service, a contract for data processing was concluded with Newsletter2Go in accordance with Article 28 of the GDPR.
Subscription to the newsletter is always based on your consent in accordance with Article 6(1)(a) of the GDPR. To deliver the newsletter, we only need your email address. To ensure the accuracy of your information and to verify your consent, you will receive a confirmation email from us. Based on current case law, we log your email address, your IP address, and the date and time of registration and confirmation as part of the newsletter sign-up process.
If you participate in our events or contests, or join our network in any other way and provide your email address for this purpose, we use it on the basis of legitimate interest pursuant to Article 6(1)(f) of the GDPR to send you information about future events and our activities. Our interest in doing so is to remain in contact with you as a member of our network in the future and to deepen our joint networking activities.
Of course, you have the option at any time to withdraw your consent for the future or to object to data processing based on legitimate interest. To do so, please use the unsubscribe link found at the end of every email notification from us. Following this, the personal email address stored about you will be deleted, and you will no longer receive any further notifications via email.
YouTube, Google Ireland Limited – Display of Video Content
Based on a legitimate interest pursuant to Art. 6(1)(f) of the GDPR, we embed content from the YouTube video platform operated by Google Ireland Limited (“Google”) to present our activities in an engaging manner.
When video content is displayed, the user’s IP address and other browser-related information are transmitted to Google. By embedding the videos in enhanced privacy mode, no further personal data is processed. Only when you click on the video to view it is additional information transmitted to Google so that the video content can be displayed. If you are logged in to YouTube as a user, Google associates this information with your respective personal user accounts.
For information on the purpose and scope of data processing by Google, as well as your rights in this regard and settings options for protecting your privacy, please refer to Google’s Privacy Policy.
Contact Form
Our website features a contact form that can be used to contact us electronically. When you use the contact form, we process the personal data you provide—specifically your name, email address, and the nature of your inquiry—to address your request. We also process your IP address and the time of use to prevent and investigate cases of misuse. The processing of the aforementioned personal data is based on legitimate interest pursuant to Art. 6(1)(f) of the GDPR.
The personal data you provide will be treated confidentially by us, is used exclusively to process your inquiry, and will not be disclosed to third parties unless this is necessary in individual cases due to the nature of your inquiry. The personal data will be deleted after your inquiry has been fully resolved or upon your objection. The logged IP address and the time of contact will be deleted after seven days. The retention periods described here apply only to the extent that no statutory retention periods preclude deletion.
My futureSAX
To use special features of our network, you have the option on our website to register for My futureSAX based on your consent pursuant to Art. 6(1)(a) GDPR. For this, we specifically require your full name and address. We need your email address to send a confirmation email to verify and confirm your registration. By confirming your registration, you consent to our processing of your personal data in our system for the purpose of sending emails and carrying out network activities. Your personal data will not be used for any other purposes or linked to other data. You may change your personal data at any time via your profile settings.
Based on current case law, we log your email address, your IP address, and the date and time of registration and confirmation, as well as the text of the confirmation email, as part of the registration process. Your personal data will only be disclosed to third parties if this is necessary for the purpose of processing, if we are legally obligated or authorized to do so, or if you have given your prior consent.
Of course, you have the option at any time to revoke your consent for the future by clicking the “Request Deletion” button. Subsequently, the data stored about you will be deleted immediately. Please note that in this case, you will no longer be able to use your Mein futureSAX account and the associated features.
Registration for Events
You can register for our events through this website, among other channels. The processing of your personal data—specifically your full name, email address, and place of residence—is carried out for the preparation and execution of the relevant events, as well as for the duration of such events, based on Article 6(1)(b) of the GDPR.
By registering for events, you join our network. In doing so, we process your personal data in our system and store information regarding your event participation based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR. Our interest lies in being able to remain in contact with you as a member of our network in the future and in deepening our joint networking activities. You may object to the processing of your personal data beyond the scope of event participation at any time. Following this, the personal data stored about you will be deleted, provided that it is no longer necessary for the conduct of the event or that statutory retention obligations do not preclude deletion.
Let’s Get Digital (Event App & Networking Platform)
To provide information about our event and to implement digital event management, we use the event solution “Let’s Get Digital” from Let’s Get Digital B.V., Atoomweg 2-H, 9743 AK Groningen, Netherlands, as a data processor. A corresponding data processing agreement has been concluded.
Purposes of processing: Provision of the event app (e.g., program/event information) as well as—where used—networking and interaction features (e.g., chat, matchmaking, appointments) and technically necessary provision/security.
Categories of personal data: Profile data, information on interests, communication and interaction data (e.g., chat, matchmaking, appointments), as well as usage/technical data.
Legal bases:
- Art. 6(1)(b) GDPR (Execution/organization of participation)
- Art. 6(1)(a) GDPR (Consent), to the extent that functions are optional or additional information/functions are used voluntarily.
Recipients / Categories of Recipients: Let’s Get Digital B.V. (Processor) as well as any sub-processors engaged by Let’s Get Digital in accordance with the contract/information provided by the provider.
Conducting online events via Hyhyve and Microsoft Teams
We use Hyhyve and Microsoft Teams (“online platforms”) to conduct online events such as video conferences and webinars (hereinafter: “online events”). Hyhyve is an online live event platform operated by Binary Please UG (limited liability), headquartered in Berlin. Microsoft Teams is a service provided by Microsoft Corporation, headquartered in the United States.
When you access the websites of the online platforms, the respective provider is responsible for data processing. When using the online platforms in connection with our online events, various categories of personal data are processed. The scope of this processing also depends on what data you provide before or during your participation in an online event. Categories of personal data may include: user information (first name, last name, phone number, email address, etc.), meeting metadata (e.g., topic, description, participant IP addresses, device/hardware information, access times), and content data (e.g., text, audio, and video data). You also have the option to use the chat function during online events. In this regard, the text you enter is processed in order to display it in the online events and, if necessary, to log it.
We process your personal data in the context of contract performance pursuant to Art. 6(1)(b) of the GDPR. If no contractual relationship exists, we process your data on the basis of legitimate interest pursuant to Art. 6(1)(f) of the GDPR. Our legitimate interest lies in the effective conduct of our online events. If necessary for the purpose of recording the results of an online event, we will log the chat content. The personal data processed by us will be deleted as soon as it is no longer necessary for the purpose of processing, unless otherwise required by statutory retention periods.
Personal data processed in connection with participation in online events is generally not disclosed to third parties, unless it is intended for disclosure. The providers of the online platforms necessarily gain knowledge of the aforementioned data to the extent provided for in our data processing agreements. We have concluded data processing agreements with the respective providers that comply with the requirements of Art. 28 of the GDPR. In the case of data transfers to third countries, these agreements specifically include the standard data protection clauses within the meaning of Art. 46(2)(c) of the GDPR.
Applications for Competitions and Programs
In addition, it is possible to apply via the website for certain competitions and programs (e.g., mentoring network) offered by futureSAX. For this purpose, we process your personal data, in particular your full name, your full address, your telephone number, and your email address, for the preparation and implementation of, as well as for the duration of, the respective competitions and programs on the basis of Article 6(1)(b) of the GDPR.
When you begin your application, a profile is created in our system so that you can continue your application at a later time. If you do not submit your application, this profile will be deleted six months after the application deadline. If you submit your application, you will automatically join our network and, depending on your target group, may receive relevant email notifications based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR. Our interest in this regard is to remain in contact with you as a member of our network in the future and to deepen our joint networking activities. You may object at any time to the processing of your personal data beyond the scope of participation in the competition or program. Following this, the personal data stored about you will be deleted, provided that it is no longer necessary for the conduct of the competition or program or that statutory retention obligations do not preclude deletion.
Your personal data will be shared with futureSAX employees responsible for the organization. As part of our mentoring network, your personal data will be shared with the core team in your region and with potential mentors/mentees for the purpose of conducting the program.
Voting
Occasionally, you will have the opportunity to participate in polls on our website. For this purpose, we generally process only your email address to conduct the respective poll and the associated prize giveaway based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. Our legitimate interest lies in preventing multiple voting. Your data will be deleted as soon as the poll is over and the data is no longer required. We do not combine this personal data with other data sources. Data is not disclosed to third parties. There is no intention to transfer data to a third country or to an international organization.
Use of Service Providers for the Provision of the Website
To provide the website, we use service providers who process personal data on behalf of futureSAX GmbH or through whom access to personal data cannot be ruled out. We have entered into data processing agreements with all of these service providers in accordance with Art. 28 of the GDPR. In addition to the service providers already mentioned, these include Hetzner Online GmbH (hosting) and Netresearch DTT GmbH (support).
Data Subject Rights and Contacting the Data Protection Officer
Data subjects may at any time request information regarding their personal data, as well as, where applicable, request the correction, deletion, or restriction of processing, or object to processing. Furthermore, you have a right to data portability. In addition, if data processing is based on consent, this consent may be revoked at any time with future effect. To exercise your rights, please contact our Data Protection Officer, the Dresden Institute for Data Protection, at datenschutz[at]futuresax.de (further contact details at www.dids.de). Furthermore, pursuant to Art. 77 of the GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you suspect that the processing of personal data is unlawful.