Data Protection

1. Overview

General Information
The following provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

Who is responsible?
Alice Gedamu
c/o Impact Hub
Rollbergstraße 28A
12053 Berlin
Phone: +49 173 163 1815
Email: mail@alicegedamu.com

How do we collect your data?
We collect data you share with us (e.g., via contact form or email) and data collected automatically by our systems (e.g., browser type, access time).

What do we use your data for?
A portion of the data is collected to ensure the error-free provision of the website. Other data is used to respond to your inquiries and to schedule and conduct appointments.

Your rights
You have the right to access, rectification, deletion, restriction of processing, data portability, and the right to object. You also have the right to lodge a complaint with a supervisory authority. Contact us at any time with questions about your data.

2. Hosting

Manitu
We host our website with manitu GmbH, Welvertstraße 2, 66606 St. Wendel, Germany.

Legal basis: Art. 6(1)(f) GDPR. We have a legitimate interest in reliable website presentation.

We have concluded a data processing agreement (DPA) with Manitu, guaranteeing that they process personal data only based on our instructions and in compliance with the GDPR.

3. General Information and Mandatory Information

Data Protection
We take the protection of your personal data seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations.

We advise that data transmission via the Internet (e.g., email) may be prone to security gaps. Complete protection against third-party access is not possible.

Storage Duration
Unless a more specific storage period is specified, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke consent, your data will be deleted unless we have other legally permissible reasons for storing it.

SSL/TLS Encryption
This website uses SSL/TLS encryption for security. You can recognize an encrypted connection by “https://” in the address bar and the lock icon in your browser.

4. Data Collection on This Website

Cookies
This website uses cookies. Session cookies are deleted when you close your browser. Permanent cookies remain until deleted. Necessary cookies are stored based on Art. 6(1)(f) GDPR. You can adjust your browser settings to control cookies.

Server Log Files
Our hosting provider automatically collects: browser type and version, operating system, referrer URL, hostname, access time, and IP address.

Legal basis: Art. 6(1)(f) GDPR. This data is not merged with other data sources.

Contact Form
Data you submit via our contact form is stored to process your inquiry.

Legal basis: Art. 6(1)(b) GDPR if related to a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in effective processing of inquiries).

Request by Email
If you contact us by email, your request and all resulting personal data will be stored and processed for the purpose of handling your request. We do not pass this data on without your consent.

5. Email Communication

ProtonMail
We use ProtonMail for email communication. The provider is Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland.

ProtonMail is an encrypted email service based in Switzerland. When you send us an email, your message is stored on ProtonMail’s servers in Switzerland with end-to-end encryption.

Legal basis: Art. 6(1)(f) GDPR. We have a legitimate interest in secure and privacy-focused email communication.

6. Appointments & Video Calls

Meetergo
We use Meetergo for scheduling appointments and conducting video calls. The provider is meetergo GmbH, based in Germany.

When you book an appointment, the data you enter (name, email, requested date) is used for planning, executing, and following up the appointment. During video calls, technical data such as IP address, device information, and duration of the call may be processed.

Legal basis: Art. 6(1)(f) GDPR. We have a legitimate interest in uncomplicated appointment scheduling and communication.

7. Newsletter

Substack (Sparks & Threads)
We offer a newsletter via Substack. The provider is Substack Inc., 111 Sutter Street, San Francisco, CA 94104, USA.

If you subscribe to our newsletter, we need your email address and information that allows us to verify you are the owner of that address. We use this data only for sending the newsletter.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Legal basis: Art. 6(1)(a) GDPR. You may revoke your consent at any time by clicking the “unsubscribe” link in the newsletter. The legality of data processing prior to revocation remains unaffected.

8. Social Media

LinkedIn
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

If you would like to disable LinkedIn advertising cookies: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Instagram
We have a profile on Instagram. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission.

9. Fonts

The fonts used on this website are hosted locally on our server. No connection to external font providers takes place when you visit our website.

10. Maps

OpenStreetMap
This website uses OpenStreetMap for displaying maps. OpenStreetMap is a project of the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom.

When you view a page containing an OpenStreetMap map, your browser establishes a connection to OpenStreetMap servers. Your IP address is transmitted in this process.

Legal basis: Art. 6(1)(f) GDPR. We have a legitimate interest in displaying our location in an accessible way.

11. Your Rights in Detail

Revocation of Consent
You can revoke consent to data processing at any time. The legality of processing prior to revocation remains unaffected.

Right to Object (Art. 21 GDPR)
If data is processed based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time based on your unique situation. We will no longer process your data unless we have compelling legitimate grounds that outweigh your interests.

If your personal data is processed for direct advertising, you have the right to object at any time. Your data will subsequently no longer be used for direct advertising purposes.

Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority, particularly in the member state where you reside or work.

Right to Data Portability
You have the right to have data we process automatically on the basis of your consent or contract handed over to you or a third party in a machine-readable format.

Information, Rectification, and Deletion
You have the right to information about your data, its source, recipients, and purpose. You may also have your data rectified or deleted. Contact us at any time.

Right to Restriction of Processing
You have the right to demand restrictions on processing of your personal data under certain circumstances.

12. Objection to Unsolicited Emails

We object to the use of contact information published in our imprint for sending unsolicited promotional material. We reserve the right to take legal action against unsolicited promotional information such as spam emails.