Privacy Policy
1. Overview
This overview outlines what happens to your personal data when you visit our website. “Personal data” means any data that can personally identify you. For full details, see the sections below.
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator, NEW HIVE e.V., whose contact details are provided under “Responsible party (controller)” below.
How do we collect your data?
Some data is collected when you provide it to us directly — for example, information you enter into a contact form. Other data is collected automatically by our IT systems when you visit the site, mainly technical information such as your browser, operating system, or the time of access.
What do we use your data for?
Part of the data is collected to ensure the website functions without errors. Other data may be used to analyse how visitors use the site.
Your rights regarding your data
You have the right, at any time and free of charge, to obtain information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data, to withdraw consent you have given, to request restriction of processing under certain conditions, and to lodge a complaint with the competent supervisory authority. You may contact us at any time regarding this and any other data-protection matter.
2. Hosting
We host our website with Amazon Web Services (AWS), provided by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. When you visit our website, your personal data (including your IP address) is processed on AWS infrastructure located in the European Union (Frankfurt, Germany). Our host processes your data only to the extent necessary to fulfil its performance obligations and follows our instructions in relation to this data. The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in a reliably provided website. Where consent has been requested, processing is based additionally on Art. 6(1)(a) GDPR and § 25(1) TDDDG. We have concluded a data-processing agreement (AVV) with AWS as required by data-protection law.
3. General information and mandatory disclosures
Data protection
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data-protection regulations and this privacy policy. Please note that data transmission over the internet (for example, when communicating by email) can have security gaps; complete protection against access by third parties is not possible.
Responsible party (controller)
The controller for data processing on this website is:
NEW HIVE e.V.
Brienzer Str. 22
13407 Berlin
Germany
Email: info@newhive.de
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
Storage duration
Unless a more specific storage period is stated in this policy, your personal data remains with us until the purpose for processing no longer applies. If you make a legitimate request for deletion or withdraw consent, your data will be deleted unless we have other legally permissible reasons for storing it (such as retention periods under tax or commercial law); in the latter case, deletion takes place once those reasons no longer apply.
General legal basis for processing
Where you have consented to processing, we process your personal data on the basis of Art. 6(1)(a) GDPR, or Art. 9(2)(a) GDPR where special categories of data are processed. Consent to the transfer of data to third countries is based on Art. 49(1)(a) GDPR. Consent to the storage of cookies or access to information on your device (e.g. via device fingerprinting) is additionally based on § 25(1) TDDDG. Consent can be withdrawn at any time. Where data is required to fulfil a contract or pre-contractual measures, we process it under Art. 6(1)(b) GDPR. Where processing is necessary to comply with a legal obligation, we rely on Art. 6(1)(c) GDPR. Otherwise, processing is based on our legitimate interests under Art. 6(1)(f) GDPR. The relevant legal basis is stated in each of the sections below.
Withdrawal of your consent
Many data-processing operations are only possible with your express consent. You may withdraw consent already given at any time. The lawfulness of processing carried out before the withdrawal remains unaffected.
Right to object (Art. 21 GDPR)
Where processing is based on Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims. Where your data is processed for direct marketing, you have the right to object at any time; after such an objection, the data will no longer be used for that purpose.
Right to data portability (Art. 20 GDPR)
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format, where technically feasible.
Right to lodge a complaint with a supervisory authority
In the event of a breach of data-protection law, you have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI)
Alt-Moabit 59–61, 10555 Berlin, Germany
This is without prejudice to any other administrative or judicial remedy.
Right to information, correction, and deletion
Within the scope of the applicable law, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of processing, and, where applicable, a right to correction or deletion of this data.
SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” prefix in the address bar and the lock icon in your browser. When encryption is active, the data you transmit to us cannot be read by third parties.
4. Data collection on this website
Cookies
Our website uses cookies — small data files that do not damage your device. They are either stored temporarily for the duration of your visit (session cookies) or remain until you delete them or your browser deletes them automatically (permanent cookies). Cookies may be set by us (first-party cookies) or by third parties (third-party cookies), for example to enable services embedded in the site.
Essential cookies necessary for the basic operation of the site are stored on the basis of Art. 6(1)(f) GDPR. All other cookies are stored only with your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG, which can be withdrawn at any time. You can configure your browser to inform you about the setting of cookies and to allow cookies only in individual cases, exclude them, or delete them automatically. Disabling cookies may limit the functionality of this website.
Consent management (CookieYes)
To obtain and document your consent to cookies and comparable technologies, this website uses the consent tool CookieYes, provided by CookieYes Limited (United Kingdom). When you give or decline consent via the cookie banner, CookieYes stores your choice together with information such as your consent status and the time and scope of consent, so that we can demonstrate consent as required by law. Processing is based on Art. 6(1)(c) GDPR. The United Kingdom is covered by an EU adequacy decision, so no additional transfer safeguards apply. Further information: https://www.cookieyes.com/privacy-policy/
Server log files
The provider of this website automatically collects and stores information in server log files, which your browser transmits automatically. These are: browser type and version, operating system, referrer URL, hostname of the accessing device, time of the server request, and IP address. This data is not merged with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR — our legitimate interest in the technically error-free presentation and optimisation of our website — for which the log files must be recorded.
Contact by email or telephone
If you contact us by email or telephone, your enquiry and any personal data arising from it (name, request) will be stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent. Processing is based on Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual measures. In all other cases, it is based on our legitimate interest in effectively handling enquiries (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR). The data remains with us until you ask us to delete it, withdraw your consent, or the purpose for storage no longer applies, subject to mandatory statutory retention periods.
Contact and enquiry forms
Our website uses form plugins (WPForms and Contact Form 7) to let you send us messages and enquiries. When you submit a form, the details you enter (such as your name, email address, and message) are sent to us by email so that we can respond. This form data is not stored in a separate external form service. Processing is based on Art. 6(1)(b) GDPR where it relates to a contract or pre-contractual measures, otherwise on our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR). The data remains with us until you ask us to delete it, withdraw your consent, or the purpose no longer applies, subject to statutory retention periods.
Email delivery (WP Mail SMTP)
Outgoing email from our website, including messages generated by our contact forms, is sent via an SMTP service using the WP Mail SMTP plugin. In the course of delivery, the relevant email content and associated data are processed by our email-delivery provider. Processing is based on our legitimate interest in reliable and secure email delivery (Art. 6(1)(f) GDPR).
5. Analytics
Google Analytics
This website uses Google Analytics, a web-analytics service provided by Google Ireland Limited, integrated via the MonsterInsights plugin. Google Analytics uses cookies to analyse how visitors use the site, recording data such as pages viewed, time spent on the site, approximate location, and device and browser information. This data may be transmitted to Google servers, including servers in the USA, on the basis of the EU Standard Contractual Clauses. We use Google Analytics only with your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG, which you can withdraw at any time via the cookie settings. Further information is available in Google’s privacy policy: https://policies.google.com/privacy
6. Social media
Instagram feed (Smash Balloon)
We display a feed of our public Instagram posts using the Smash Balloon Instagram Feed plugin, which retrieves the posts from Instagram and caches them on our own server. By default, simply viewing the feed on our website does not transmit your personal data to Meta. If you click through to a post or profile, you are taken to Instagram, where the privacy policy of Meta Platforms Ireland Limited applies. Processing is based on our legitimate interest in presenting our community activity (Art. 6(1)(f) GDPR). Further information on Meta’s data processing: https://help.instagram.com/519522125107875
Links to social networks
Our website contains links to our profiles on external social networks such as Facebook, Instagram, and YouTube. These are simple links; your data is only transmitted to the respective network once you click a link and are taken to that platform, where its own privacy policy applies.
7. Plugins and tools
YouTube (extended data-protection mode)
We embed videos from YouTube (Google Ireland Limited) using extended data-protection mode, which restricts the data YouTube stores about visitors until a video is played. When you start a video, a connection to YouTube’s servers is established, telling them which page you visited; if you are logged in to YouTube, this may be assigned to your account. YouTube may store cookies or comparable technologies on playback. Details are in Google’s privacy policy: https://policies.google.com/privacy
Google Maps
We use Google Maps (Google Ireland Limited) to display interactive maps and improve the accessibility of the locations shown on our site. To use the map features, your IP address must be stored and is generally transmitted to a Google server. Where consent has been obtained, processing is based on Art. 6(1)(a) GDPR and § 25(1) TDDDG; otherwise on our legitimate interest in an easily accessible presentation of our locations (Art. 6(1)(f) GDPR). Data transfer to the USA is based on the EU Standard Contractual Clauses.
8. Conference tools
Zoom
We use Zoom, provided by Zoom Communications Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA, for online meetings and video conferences. Details of Zoom’s data processing are available in its privacy policy: https://zoom.us/en-us/privacy.html. Data transfer to the USA is based on the EU Standard Contractual Clauses.
9. Event registration
Meetup
We offer registration for some of our events via Meetup. During registration, Meetup collects information such as your name, email address, and, where applicable, payment details, along with metadata such as your IP address, browser, operating system, and device. The legal basis is our legitimate interest in simplifying event registration (Art. 6(1)(f) GDPR) or, where requested, your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG), which can be withdrawn at any time. For questions about this service you can contact Meetup via VeraSafe Ireland Ltd., Unit 3D North Point House, North Point Business Park, New Mallow Road, Cork T23 AT2P, Ireland. Meetup’s privacy policy: https://help.meetup.com/hc/en-us/articles/360044422391-Privacy-Policy
10. Changes to this privacy policy
We may update this privacy policy from time to time to reflect changes in our practices, in the tools we use, or in legal requirements. The current version always applies and is available on this page. Please review it periodically.