Effective 24 February 2025
Introduction
We take the protection of personal data—and therefore your privacy—very seriously. This notice explains how we safeguard your data. It fulfills the information obligations set out in Articles 12 ff. of the EU General Data Protection Regulation (GDPR) and gives you an overview of how your personal data (hereinafter “data”) are processed on this website.
Table of Contents
1. Who is responsible for processing my data?
betterplace lab gGmbH
Schlesische Straße 26
10997 Berlin, Germany
betterplace lab is the controller of your data on this website. We process personal data in accordance with the GDPR and the German Federal Data Protection Act (new version, “BDSG‑neu”).
The data‑protection officer can be reached at the postal address above (add “To the Data‑Protection Officer”) or via e‑mail: datenschutz@betterplace‑lab.org.
2. What data are collected?
When you visit the site, your computer automatically transmits access data (also called server log files). These typically include:
Except for the IP address, the log files are not personally identifiable. An IP address becomes personally identifiable only when it is permanently assigned to a single person by the ISP.
If you continue to use the site’s services, pseudonymous usage profiles and any data you enter (search terms, login credentials, comments, form entries, registration data, etc.) are processed.
Certain services require you to provide personal data to betterplace lab. In those cases the data you supply are used solely to deliver the requested service or to handle your request. The personal data processed on the website include:
3. Which cookies are used?
Cookies are small text files stored on your device when you visit a website. They are linked to the browser you use. When you revisit the site, the browser sends the cookie contents back, allowing the site to recognise you.
You can delete cookies at any time via your browser’s security settings and configure whether cookies may be set. Please note that disabling certain cookies may limit the functionality of the website.
Generally, cookies contain only an online identifier without personal data. They become personal only when combined with additional information. We distinguish between:
4. For what purposes are the data collected?
Processing purposes arise from technical, contractual, legal requirements or, where applicable, your consent.
We use the data listed in Section 2 for the following purposes:
Further details are given in the subsections below.
4.1 Technical provision of the website
4.1.1 Description and scope of processing
Server‑log files (access data) are automatically captured when you load the site and during use. They are stored briefly and are not merged with other data. The logs are used for statistical analysis, troubleshooting, detecting attacks/fraud, and optimising site performance.
4.1.2 Purpose and legal basis
Legal basis: Art. 6 (1) f GDPR (legitimate interests of betterplace lab for site functionality, security analyses, and threat mitigation).
4.1.3 Storage period / criteria
Log files are stored on the web server and the IP address is deleted no later than 7 days after collection. Evaluation occurs only during that period, primarily in case of an attack.
4.1.4 Right to object / deletion
You may object to the processing of your data in server logs where a specific situation justifies it. To exercise this right, contact the address listed in Section 1.
4.2 Email and telephone contact
4.2.1 Description and scope
If you contact us via e‑mail or phone, we receive your e‑mail address, telephone number, and the content of your inquiry. Depending on the matter (e.g., functional questions, exercising your data‑subject rights), your contact data may be forwarded to third parties (e.g., partner organisations).
4.2.2 Purpose and legal basis
General enquiries: Art. 6 (1) f GDPR (legitimate interests).
Contract‑related enquiries: Art. 6 (1) b GDPR (performance of a contract).
4.2.3 Storage period / criteria
Contact data are deleted after the request is fully handled, unless statutory retention periods apply or the data are needed for a contract or for exercising your rights. In those cases they are kept until the legal or contractual obligations are fulfilled.
4.2.4 Right to object / deletion
You may object to the processing of your contact data for reasons arising from your particular situation. Objecting may prevent further communication. If the data are necessary for contract performance or for exercising your rights, deletion is not possible until those purposes are completed.
4.3 Newsletter
4.3.1 Description and scope
You can subscribe to our free newsletter. Only your e‑mail address (collected via a service provider) is processed for sending the newsletter. No third‑party sharing occurs.
The newsletter contains tracking pixels (web‑beacons). These are linked to your individual ID to generate aggregated statistics (e.g., open rate). You can opt‑out of this tracking by unsubscribing via the link in the newsletter.
4.3.2 Purpose and legal basis
Purpose: informing you about current topics and general news from betterplace lab.
Legal basis: Consent – Art. 6 (1) a GDPR.
4.3.3 Storage period / criteria
Data are retained for the duration of your subscription. After you unsubscribe, the data are kept only to prove that consent was obtained (audit trail).
4.3.4 Right to object / deletion
You may withdraw consent at any time by using the unsubscribe link or contacting us via the address in Section 1. After withdrawal, no further newsletters will be sent.
4.4 Web‑tracking – Google Analytics
4.4.1 Purpose and legal basis
Google Analytics is used to analyse visitor behaviour and improve the website. Legal basis: Art. 6 (1) f GDPR (legitimate interests).
4.4.2 Storage period / criteria
Data are stored according to Google’s standard retention settings (default 14 months) unless configured otherwise.
4.4.3 Right to object / deletion
You may object to the processing of analytics data. Instructions for opting out are provided in the Google Analytics opt‑out browser add‑on or via the “Do Not Track” setting.
5. Who receives my data?
Within betterplace lab, only those employees or departments that need the data to fulfil the purposes listed in Section 4 have access.
External service providers (so‑called processors) such as hosting providers, newsletter‑distribution services, customer‑support platforms, or accounting software may also process your data. Processing agreements ensure they act only on our instructions, guarantee data security, and maintain confidentiality.
Data are disclosed to third parties (e.g., advertising partners, social‑media platforms, banks) only when required by law or when you have expressly consented. Public authorities (e.g., law‑enforcement agencies) may receive data when a legal obligation exists.
6. Are my data transferred outside the EU/EEA (third‑country transfer)?
If any of the processors or third parties mentioned in Section 5 operate outside the EU/EEA, your data may be transferred to a country that does not provide an EU‑equivalent level of protection. In such cases we rely on appropriate safeguards, such as:
You may request a copy of the safeguards from the contact address in Section 1.
Specific processors outside the EU/EEA
7. What data‑protection rights do I have?
You have the right at any time to obtain information about the personal data we store about you. If any of the data concerning you are incorrect or no longer up‑to‑date, you have the right to request their correction. You also have the right to request the deletion or restriction of processing of your data in accordance with Articles 17 and 18 of the GDPR. Additionally, you may be entitled to receive the data you have provided to us in a common, machine‑readable format (the right to data portability).
If you have given consent for the processing of personal data for specific purposes, you may withdraw that consent at any time with effect for the future. The withdrawal should be addressed to betterplace lab at the contact address listed in clause 1. Consents you have given on the website can also be withdrawn by emailing lab@betterplace‑lab.org.
Pursuant to Article 21 GDPR, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your data that is based on the legal ground of Article 6(1)(f) GDPR. You also have the right to object at any time to the processing of your personal data for direct‑marketing purposes. The same applies to automated procedures involving individual cookies, provided those cookies are not strictly necessary for the provision of the website.
Furthermore, you may contact a data‑protection authority and lodge a complaint there. The authority responsible for betterplace lab is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstraße 219
10969 Berlin, Germany
You may also contact the data‑protection authority that is competent for your place of residence.
8. Source of the data
All data are collected directly from the data subjects (i.e., from you).
9. To what extent is automated decision‑making used?
For the purposes listed in Section 4 we do not employ fully automated decision‑making that produces legal effects or similarly significant outcomes.
10. Does profiling take place?
No. Profiling as defined in Art. 22 (1) & (4) GDPR is not carried out.
11. Minors
Persons under 18 years old should not submit personal data to us without parental or guardian consent. We do not intentionally collect data from children and adolescents.
12. Closing / Version Information
As we continue to develop the website and introduce new technologies, this privacy notice may be updated. We recommend reviewing it periodically.
Version 2.0 – 24 February 2025