Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Miroslav Konecny
Square Kollektiv
Ulmenweg 7
68167 Mannheim
Germany

Phone: +49 160 96523203
Email: info@square-kollektiv.de

2. The essentials

• This website sets no cookies and uses no analytics or tracking tools. It stores no information on your device, unless you close the “Powered by Netlify” notice (see section 3).
• There is no contact form and no embedded third-party content (such as videos, maps or social media plugins).
• Fonts and scripts are loaded from our own server. Visiting the website transfers no data to Google or other third parties.
• We only process personal data where this is technically necessary to run the website, or when you contact us on your own initiative.

3. Hosting and server log files

This website is hosted by Netlify. The provider is Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. Netlify delivers the website through a worldwide server network (content delivery network). Your request is usually answered by a server close to you.

Each time the website is accessed, the server automatically records information that your browser transmits (server log files):

• IP address
• date and time of access
• page or file requested
• referrer URL (the previously visited page)
• browser and operating system used
• HTTP status code and amount of data transferred

Purpose: delivering the website, ensuring stability and security, defending against attacks and analysing errors.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely and without errors.
Storage period: Netlify stores the log files only for as long as necessary for these purposes. We do not analyse them ourselves and do not compile visitor statistics.

Data processing agreement: We have concluded a data processing agreement with Netlify pursuant to Art. 28 GDPR.

Transfer to the USA: Netlify, Inc. is certified under the EU-US Data Privacy Framework. For certified companies, an adequacy decision of the European Commission applies (Art. 45 GDPR). In addition, our agreement with Netlify includes the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

“Powered by Netlify” notice: Our hosting provider shows a small notice about Netlify on this website. Its script is delivered through our own domain and transfers no data to third parties. If you close or minimise the notice, your browser saves this setting in its local storage so the notice stays hidden. After closing, this lasts up to seven days. The setting is only saved when you take this action, and only because it is strictly necessary for the function you asked for (§ 25(2) no. 2 TDDDG). You can delete it at any time in your browser settings.

More information: Netlify privacy statement

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

5. Contact and booking requests by email or phone

If you email us, for example via the “CONTACT” button, or call us, we process the data you share with us: usually your name, your email address or phone number, the content of your message and, where applicable, details about the venue, date and event.

Purpose: handling your request and, where applicable, preparing and carrying out a booking.
Legal basis: Art. 6(1)(b) GDPR where your request aims at a contract (such as a booking). Otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in answering requests.
Storage period: We delete your data once your request has been fully handled. If a booking is made, we keep the necessary documents for as long as statutory retention obligations (in particular tax law) require.

Email provider: Our emails are processed via Zoho Mail. The provider is Zoho Corporation B.V. (Netherlands). The data is stored in data centres in the EU. Access from India may occur for technical support; this is safeguarded by EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). We have concluded a data processing agreement with Zoho pursuant to Art. 28 GDPR.

6. Links to Instagram and Telegram

Our website contains links to our Instagram profile and our Telegram group. These are simple links, not embedded plugins. As long as you do not click them, no data is transferred to Instagram or Telegram.

Only when you click a link do you leave our website. From then on, the privacy policy of the respective provider applies.

7. Our Instagram profile

We run a profile on Instagram. The provider is Meta Platforms Ireland Limited (Ireland). When you visit our profile, Meta processes your data under its own terms, even if you do not have an Instagram account. Data may also be transferred to the USA. Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework.

Meta provides us with aggregated, non-personal statistics on the use of our profile (“Insights”). We are jointly responsible with Meta for these statistics (Art. 26 GDPR). Under the agreement concluded with us, Meta has primary responsibility for informing you about the processing and for fulfilling your rights. You can, however, also assert your rights against us; we will forward such requests to Meta.

The legal basis for running our profile is Art. 6(1)(f) GDPR. Our legitimate interest lies in making our collective and our events known and communicating with our community.

More information: Instagram privacy policy

8. Our Telegram group

Via a link on our website you can voluntarily join our public Telegram group “SQUARE EVENTS”. We use the group to share news about events and to stay in touch with our community.

Provider: Telegram Messenger Inc., Commerce House, Wickhams Cay 1, PO Box 3140, Road Town, Tortola, VG1110, British Virgin Islands. EU representative pursuant to Art. 27 GDPR: European Data Protection Office (EDPO), Avenue Huart Hamoir 71, 1030 Brussels, Belgium.

What is visible: When you join, your profile name, username, profile picture and messages are visible to us as administrators and to all other members. Because the group is public, people who are not members can also view the group and its content. Your phone number is only visible to others if your Telegram settings allow it. We do not store your data outside Telegram.

Transfers outside the EU: Telegram is based outside the EU, in a country without an adequacy decision of the European Commission. According to Telegram, data of users from the EEA is stored in data centres in the Netherlands. Telegram safeguards transfers to group companies, including in Dubai, with EU Standard Contractual Clauses. We have no influence over the processing by Telegram.

Legal basis: Art. 6(1)(a) GDPR, i.e. your consent through voluntarily joining. You can leave the group at any time, which withdraws your consent for the future.

More information: Telegram privacy policy

9. Event photos

On our website we show photos from our events in which guests may be visible. We show these photos to document the atmosphere of our events and to present our collective.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in presenting our events.

If you recognise yourself in a photo and do not want to be shown, just write to us at info@square-kollektiv.de. We will remove the photo promptly.

10. Your rights

You have the following rights regarding your personal data at any time:

• Access to the data we store (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

An informal message to info@square-kollektiv.de is enough to exercise your rights.

Right to object (Art. 21 GDPR)

Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Germany
www.baden-wuerttemberg.datenschutz.de

11. Obligation to provide data and automated decisions

You are not obliged to provide us with personal data. Without the technically necessary connection data (section 3), however, the website cannot be displayed. No automated decision-making, including profiling (Art. 22 GDPR), takes place.

12. Changes to this privacy policy

We update this privacy policy when the website or the legal situation changes. The version published here applies.