Template — fill this in before you go live. Under the GDPR a privacy notice is required as soon as you collect any personal data, which includes a registration form and an e-mail address. What follows reflects how this site is actually built; adjust it if you change the hosting or the form provider. This is a starting point, not legal advice — have it checked before you publish.

Who is responsible

The controller for data processing on this website is:
REPLACE — same legal entity as in the imprint.
Contact for data protection questions: info@ebsmun.de

What happens when you visit this site

This website is hosted on Cloudflare Pages (Cloudflare, Inc.). When you open a page, your browser sends technical data to Cloudflare's servers — IP address, the page requested, time of the request, browser and operating system. Cloudflare processes this to deliver the site and to protect it from attacks. The legal basis is Art. 6 (1) (f) GDPR: our legitimate interest in a website that works and stays online.

We have not embedded any analytics, advertising or tracking scripts, and this site sets no cookies of its own. REPLACE — delete this sentence if you later add analytics.

Web fonts

The typefaces on this site are loaded from Google Fonts (Google Ireland Limited), which means your IP address is transmitted to Google when a page loads. If you would rather avoid this, the fonts can be self-hosted instead — ask your web contact. Legal basis: Art. 6 (1) (f) GDPR.

Registration and contact

If you register for the conference or write to us, we process the data you give us — typically name, e-mail address, school or university, committee preferences and any dietary or accessibility requirements — in order to organise the conference and to correspond with you. Legal basis: Art. 6 (1) (b) GDPR (steps prior to and performance of a contract) and Art. 6 (1) (a) GDPR where you have given consent.

REPLACE — name the form provider you end up using (for example Tally or Google Forms) and link to its own privacy notice. Registration data is deleted REPLACE months after the conference unless we are required to keep it longer.

Photography at the conference

REPLACE — if you photograph or film the conference for the website or social media, say so here and explain how delegates can object. This is usually the point people ask about.

Your rights

You have the right to obtain information about the personal data we hold about you (Art. 15 GDPR), and to have it corrected (Art. 16), deleted (Art. 17), or its processing restricted (Art. 18). You may object to processing based on legitimate interests (Art. 21) and request your data in a portable format (Art. 20). Where processing is based on consent, you can withdraw that consent at any time with effect for the future.

To exercise any of these, write to info@ebsmun.de. You also have the right to complain to a supervisory authority — for Hesse, that is the Hessischer Beauftragter für Datenschutz und Informationsfreiheit.

Changes to this notice

We update this notice when the site or the way we handle data changes. Last updated: REPLACE-DATE.