Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens with your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information on the topic of data protection can be found in our privacy policy listed below this text.

Data Collection on This Website

Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find their contact details in the section “Information on the Responsible Entity” in this privacy policy.

How do we collect your data?
Your data is collected in part because you provide it to us. This could be data that you enter into a contact form. Other data is collected automatically or after your consent when you visit the website by our IT systems. This primarily includes technical data (e.g. internet browser, operating system or time of page access). The collection of this data takes place automatically as soon as you enter this website.

What do we use your data for?
Some data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?
You have the right at any time to obtain free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may revoke this consent at any time with effect for the future. You also have the right, under certain circumstances, to request restriction of the processing of your personal data. In addition, you have the right to lodge a complaint with the competent supervisory authority.

Analysis Tools and Third-Party Tools
When visiting this website, your browsing behavior may be statistically evaluated. This is done primarily using so-called analysis programs. Detailed information on these analysis programs can be found in the following privacy policy.

2. General Information and Mandatory Disclosures

Data Protection

The operators of this site take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy. When you use this website, various personal data are collected. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done.

We point out that data transmission over the internet (e.g. via email) may have security vulnerabilities. Complete protection of data from third-party access is not possible.

Information on the Responsible Entity

The responsible entity for data processing on this website is:
White Unicorn e.V.
Hultschiner Damm 148
12623 Berlin
Germany
Email: info[at]white-unicorn.org

The responsible entity is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

Storage Duration

Unless a more specific storage period is specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate deletion request or revoke consent, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial retention periods). In the latter case, deletion takes place after these reasons no longer apply.

Legal Bases for Data Processing

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data are processed. In the event of explicit consent for the transfer of personal data to third countries, processing is also based on Art. 49(1)(a) GDPR. If you have consented to storage of cookies or access to information on your device, processing also takes place on the basis of § 25(1) TTDSG. Consent can be revoked at any time. If data is required for contract performance or pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, if required to fulfill a legal obligation, we process your data on the basis of Art. 6(1)(c) GDPR. Processing may also take place on the basis of our legitimate interest under Art. 6(1)(f) GDPR.

Data Transfer to the USA and Other Third Countries

We use tools from companies based in the USA or other third countries not considered safe under data protection law. If these tools are active, your personal data may be transferred to these third countries and processed there. In such countries, an EU-comparable level of data protection cannot be guaranteed. It is possible that US authorities (e.g. intelligence services) process your data stored on US servers for surveillance purposes without judicial recourse. We have no influence on these processing activities.

Revocation of Consent

Many data processing operations are only possible with your explicit consent. You can revoke your consent at any time. The legality of data processing up to the point of revocation remains unaffected.

Right to Object & Direct Marketing

If processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time for reasons relating to your situation. This also applies to profiling based on these provisions. If your personal data is processed for direct marketing, you have the right to object at any time. After objection, your personal data will no longer be used for direct marketing.

Right to Lodge a Complaint

In case of GDPR violations, data subjects have the right to complain to a supervisory authority, in particular in their EU Member State of residence, workplace, or location of the alleged infringement.

Right to Data Portability

You have the right to receive data processed automatically on the basis of your consent or contract in a machine-readable format, and to have it transmitted to another controller where technically feasible.

Right to Information, Deletion and Correction

You have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of data processing. You also have the right to correction or deletion of this data under applicable law.

Right to Restriction of Processing

You have the right to request restriction of the processing of your personal data in specific cases (e.g. accuracy is contested, unlawful processing, data needed to assert legal claims, objection still pending). Restricted data may only be processed with your consent or legal justification.

SSL/TLS Encryption

This site uses SSL/TLS encryption to protect the transmission of confidential content such as orders or inquiries. You can recognize this by “https://” and the lock icon in your browser. When SSL/TLS is enabled, data you transmit cannot be read by third parties.

3. Hosting and Content Delivery Networks (CDN)

External Hosting

This website is hosted by an external service provider. Personal data collected on this website is stored on the host’s servers, including IP addresses, contact inquiries, meta- and communication data, contract data, and other website-generated data.

The host is used for contract fulfillment and in our legitimate interest in secure, fast, and efficient delivery of our online offering. The host only processes data as necessary and follows our instructions.

Host:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Ireland
Email: support-deutschland@google.com

Domain Registration and DNS:
Our domain is managed by Squarespace Ireland Limited, with DNS services directing users to the correct server. Technical data (e.g. IP address) is transmitted to Squarespace DNS servers when the site is accessed. Squarespace may transfer data to the USA under the EU-US Data Privacy Framework (DPF), which seeks to ensure EU-comparable protection standards.

4. Data Collection on This Website

Cookies

Our website uses “cookies”, which are small data packages stored on your device during a session or permanently. Session cookies are deleted after your visit; permanent cookies remain until you delete them or your browser does. Some cookies from third parties may also be stored when you visit the site.

Cookies serve various functions: some are technically necessary for website functions, others help evaluate user behavior or display advertising. Necessary cookies are stored on the basis of Art. 6(1)(f) GDPR unless consent is obtained, in which case processing is on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG. You can set your browser to inform you about cookies, allow them only in individual cases, or deactivate them altogether. Disabling cookies may limit website functionality.

Contact Form

If you send us requests via a contact form, your details including contact data are stored for processing your inquiry and for follow-up questions. This data is not shared without your consent. Processing is based on Art. 6(1)(b) GDPR if related to contract fulfillment, otherwise on our legitimate interest (Art. 6(1)(f) GDPR) or your consent (Art. 6(1)(a) GDPR).

Data stays with us until you request deletion, revoke consent, or the purpose no longer applies, except where statutory retention periods apply. We use the tool campflow to manage online forms and member data. Campflow hosts data exclusively in Germany and does not share it with third parties.

Contact by Email, Phone or Fax

If you contact us via email, phone, or fax, your inquiry including personal data (e.g. name, message) is stored to process your request. This data is not shared without your consent. Processing is based on Art. 6(1)(b) GDPR if related to contract fulfillment, otherwise on our legitimate interest (Art. 6(1)(f) GDPR) or your consent (Art. 6(1)(a) GDPR). Data remains stored until deletion is requested, consent is revoked, or the purpose ceases. Statutory retention obligations remain unaffected.

5. Plugins and Tools

Google Forms

This website uses Google Forms (a service of Google Ireland Limited) for collecting data via online forms. Data you enter is transmitted to and stored on Google servers. It is used exclusively for the purposes stated in the form (e.g. event registration, feedback, contact). Processing is based on your consent (Art. 6(1)(a) GDPR), contract requirements (Art. 6(1)(b) GDPR), or legitimate interest (Art. 6(1)(f) GDPR) if stated. A data processing agreement with Google ensures GDPR compliance. Data may be transferred to the USA under Standard Contractual Clauses and the EU-US Data Privacy Framework.

YouTube

This site embeds videos from YouTube (Google Ireland Limited). When viewing pages with embedded YouTube, a connection to YouTube servers is established, and YouTube may set cookies or use similar recognition technologies. If you’re logged into YouTube, your browsing behavior may be associated with your personal profile. Logging out prevents this. Embedded videos serve the legitimate interest of a more engaging presentation (Art. 6(1)(f) GDPR). With consent, processing occurs under Art. 6(1)(a) GDPR and § 25(1) TTDSG.

More information on YouTube data handling can be found here: https://policies.google.com/privacy?hl=de

Google Fonts

We use Google Fonts for uniform font rendering. When a page is accessed, your browser loads the required fonts from Google servers, transmitting your IP address to Google. Use is based on Art. 6(1)(f) GDPR as a legitimate interest. With consent, processing is on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG. If the browser doesn’t support Google Fonts, a standard font is used. More info: https://developers.google.com/fonts/faq & https://policies.google.com/privacy?hl=de

Google Analytics

This website uses Google Analytics from Google Ireland Limited. The service analyzes visitor behavior, measures reach, and helps improve our online offering. Processing is based exclusively on your prior and revocable consent under Art. 6(1)(a) GDPR. IP addresses are anonymized before transfer to Google servers in the USA (IP masking). In rare cases the full IP may be sent and shortened there. Transfers rely on the EU-US Data Privacy Framework. Consent can be withdrawn via our cookie-consent tool or the Google Analytics opt-out browser add-on.

Own Services

Google Drive

We have integrated Google Drive (Google Ireland Limited) to provide an upload area on this website. When you upload content, it is stored on Google Drive servers. Access to Google Drive identifies that you have visited our site. Use is based on Art. 6(1)(f) GDPR as a legitimate interest; with consent, processing is on the basis of Art. 6(1)(a) GDPR and is revocable at any time.