Privacy notice — EBSMUN 2027

This notice reflects how the site and the conference actually handle data. Update it if you change the hosting, move applications away from mymun, or start using analytics. It is a carefully written template, not legal advice — have someone check it.

Who is responsible for this website

The controller for data processing on this website is:
EBSMUN e.V., c/o EBS Universität für Wirtschaft und Recht, Rheingaustraße 1, 65375 Oestrich-Winkel, represented by Emilie Siadak.
Contact for data protection questions: info@ebsmun.de

What happens when you visit this site

This website is hosted on Cloudflare Pages (Cloudflare, Inc.). When you open a page, your browser sends technical data to Cloudflare's servers — IP address, the page requested, time of the request, browser and operating system. Cloudflare processes this to deliver the site and to protect it from attacks. The legal basis is Art. 6 (1) (f) GDPR: our legitimate interest in a website that works and stays online.

We have not embedded any analytics, advertising or tracking scripts, and this site sets no cookies of its own.

Web fonts loaded from Google

The typefaces on this site are loaded from Google Fonts (Google Ireland Limited), which means your IP address is transmitted to Google when a page loads. If you would rather avoid this, the fonts can be self-hosted instead — ask your web contact. Legal basis: Art. 6 (1) (f) GDPR.

Registration and enquiries

Applications for EBSMUN 2027 are handled through mymun (mymun.com). When you apply there, mymun processes your data under its own privacy policy; we receive the delegate details it passes on to us — typically name, e-mail address, school or university, committee preferences and any dietary or accessibility requirements. We use them to organise the conference and to correspond with you. Legal basis: Art. 6 (1) (b) GDPR.

If you write to us directly, we process what you send us in order to answer. Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in replying to enquiries.

We delete registration data and conference correspondence six months after the conference. Invoices and payment records are kept for the statutory retention periods under § 147 AO and § 257 HGB — up to ten years — and deleted afterwards.

Photography and film at the conference

The conference is photographed and filmed. We publish a selection of those images on this website, on our social media accounts and in material promoting future editions. Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in documenting and promoting the conference.

You can object at any time, before or during the conference, by telling a member of the organising team or writing to info@ebsmun.de. We will not photograph you for publication, and we will remove images already published on our own channels. Images that have been shared onward by third parties are outside our control.

Delegates under 18: we ask a parent or guardian for written consent before publishing images in which the delegate is identifiable. Consent can be withdrawn at any time with effect for the future.

Your rights under the GDPR

You have the right to obtain information about the personal data we hold about you (Art. 15 GDPR), and to have it corrected (Art. 16), deleted (Art. 17), or its processing restricted (Art. 18). You may object to processing based on legitimate interests (Art. 21) and request your data in a portable format (Art. 20). Where processing is based on consent, you can withdraw that consent at any time with effect for the future.

To exercise any of these, write to info@ebsmun.de. You also have the right to complain to a supervisory authority — for Hesse, that is the Hessischer Beauftragter für Datenschutz und Informationsfreiheit.

Changes to this privacy notice

We update this notice when the site or the way we handle data changes. Last updated: 25 August 2026.