1. General

The protection of your personal data is very important to us. Therefore, we want to provide you with full transparency regarding the processing of your data at TechLabs. This privacy statement applies to data processing that takes place when you visit our website www.techlabs.org, as well as data processing that takes place when you participate in our program as a 'Techie' or engage in TechLabs as a 'Volunteer'. A 'Techie' is considered to be any participant who uses the online course offering. You can view the specific data processing of 'Techies' data in section 4 of this Privacy Policy. If you are active as a 'Volunteer' at TechLabs, you can find the specific information on the processing of your data in section 5 of this Privacy Policy.

The following information is intended to inform you about what we use your personal data for, what data is involved and what rights you have with regard to data processing. Personal data within the meaning of Art. 4 No. 1 GDPR (hereinafter also referred to as "data") is any information that at least indirectly allows the identification of a person or relates to an already identified person.

The responsible party within the meaning of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and other data protection requirements is the

TechLabs e.V. Hafenweg 16 48155 Münster Germany

Represented by the Board of Directors: Henrik Kobus, Ranjini Kumar E-Mail-Adresse: [email protected]

Hereinafter referred to as the „responsible party“ or „we“:

2. General information on data processing

We process personal data within the legally permissible limits. This means that data processing operations are based on a legal basis according to Art. 6 GDPR. In the case of data processing based on your consent (Art. 6 para. 1 lit. a GDPR), you will be informed separately about the consent process, e.g. by a checkbox or a pop-up window. Insofar as we have not specified any other legal basis for the individual data processing and it is not required for the initiation of a contract or for the fulfillment of a contract pursuant to Art. 6 Para. 1 lit. b GDPR, the respective data processing pursuant to Art. 6 Para. 1 lit. f GDPR is based on our legitimate interest in being able to provide you with our service.

A transfer of personal data only takes place in the cases described below. If we transfer your data to a third country that is not part of the European Economic Area (EEA), this is always done on the basis of a legal basis pursuant to Art. 44 et seq. GDPR. Data transfers to countries for which an effective adequacy decision exists (such as Andorra, Argentina, Faroe Islands, Guernsey, Isle of Man, Israel, Japan, Jersey, Canada, New Zealand, Switzerland or Uruguay) are made on this very basis. Unless we have received express consent from you pursuant to Art. 45 GDPR to transfer data to additional third countries (such as the USA), the transfer of data to these third countries will take place on the basis of Standard Contractual Clauses (SCC, Standard Data Protection Clauses) issued by the EU Commission, pursuant to Art. 46 (2) c) GDPR.

Personal data is processed by us only for the purposes described in clauses 3 to 5. As soon as the purpose of the processing ceases to apply, your personal data will be deleted. The same applies to the expiry of a prescribed storage period, subject to cases in which further storage is necessary for the conclusion or performance of a contract. In addition, there may be a legal obligation to store the data for a longer period or to pass it on to third parties (esp. to law enforcement agencies). In other cases, the storage period and type of data collected as well as the type of data processing depend on which functions of our website you use in each individual case. We will also be happy to provide you with information about this in individual cases in accordance with Art. 15 GDPR.

3. Data processing in connection with the use of our website

The use of our website with all its functions requires the processing of certain personal data. We would like to inform you that the provision of your data is not required by law or contract. However, if you do not provide your data, the consequence for you is that you may only be able to use the website to a limited extent.

All data is stored securely on servers operated by Netlify . (2325 3rd Street, Suite 296, San Francisco, 94107 CA, USA ; hereinafter referred to as 'Netlify') by default. The transmission of the data is encrypted.

3.1 Informational use of the website

The purely informative calling up of www.techlabs.org requires the processing of the following personal data and information: Browser type and version, operating system used, address of previously visited websites, address of the terminal device with which you access the website (IP address) and the time of the website call. All this information is automatically transmitted by your browser, should you not have configured it in such a way that transmission of the information is suppressed.

This personal data is processed for the purpose of the functionality and optimization of www.techlabs.org, as well as to ensure the security of our information technology systems. These purposes are at the same time legitimate interests according to Art. 6 para. 1 lit. f. GDPR.

The storage period of your personal data is a maximum of 30 days. This personal data will not be merged with other data sources. Data will only be passed on to third parties in the cases mentioned, except in the case of a legal, judicial or official obligation. Unless otherwise stated in this privacy policy, no data will be transferred to third countries or international organizations.

3.2 External Content

To ensure a smooth technical process and optimal user-friendly use of our website, we use the following tools:

CDN server accesses

To ensure fast loading times and smooth use of our website, we use a Content Delivery Network (CDN). In this process, the content is made available on several regionally distributed servers connected via the Internet. When a request is made, these servers are selected specifically according to criteria such as geographical distance, latency or transmission rate in order to provide you with the desired content as quickly as possible.