This is a translation for convenience. The German version (Datenschutzerklärung) is legally binding.
Privacy policy
As of: 12/10/2026
Table of contents
- Controller
- Overview of processing
- Relevant legal bases
- Security measures
- Transfer of personal data
- International data transfers
- Rights of data subjects
- Provision of the online service and web hosting
- Use of cookies
- Blogs and publication media
- Contact and enquiry management
- Presence on social networks (social media)
- Plug-ins and embedded functions and content
Controller
IGNITE - Startup Club Lüneburg
Universitätsallee 1
21335 Lüneburg
Authorized representative: Linus Heidemann
Email address: stud.initiative.ignite@leuphana.de
Legal notice: https://ignite-startupclub.de/en/imprint
Overview of processing
The following overview summarizes the types of data processed and the purposes of their processing, and refers to the data subjects concerned.
Types of data processed
- Inventory data
- Contact data
- Content data
- Usage data
- Meta, communication and procedural data
- Log data
Categories of data subjects
- Communication partners
- Users
Purposes of processing
- Communication
- Security measures
- Reach measurement
- Tracking
- Audience building
- Organizational and administrative procedures
- Feedback
- Marketing
- Provision of our online service and user-friendliness
- Information technology infrastructure
- Public relations
Relevant legal bases
Security measures
In accordance with the legal requirements, and taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we take suitable technical and organizational measures to ensure a level of protection appropriate to the risk.
These measures include in particular safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as access to, input of, disclosure of, availability of and separation of the data. We have also set up procedures to ensure that data subject rights are exercised, data is deleted and incidents threatening the data are responded to. Furthermore, we take the protection of personal data into account already during the development and selection of hardware, software and procedures, in line with the principle of data protection by design and by default.
Transfer of personal data
In the course of processing personal data, it happens that data is transmitted to or disclosed to other bodies, companies, legally independent organizational units or persons. Recipients of this data can include, for example, service providers commissioned with IT tasks, or providers of services and content that are embedded in a website. In such cases we observe the legal requirements and in particular conclude appropriate contracts or agreements with the recipients of your data that serve to protect your data.
International data transfers
Rights of data subjects
Provision of the online service and web hosting
We process users’ data in order to be able to provide them with our online services. For this purpose we process the user’s IP address, which is necessary to deliver the content and functions of our online services to the user’s browser or device.
Data types processed:
- Usage data (e.g. page views and time spent, click paths, intensity and frequency of use, device types and operating systems used, interactions with content and functions)
- Meta, communication and procedural data (e.g. IP addresses, time stamps, identification numbers, persons involved)
- Log data (e.g. log files concerning logins or the retrieval of data or access times)
Data subjects:
- Users (e.g. website visitors, users of online services)
Purposes of processing:
- Provision of our online service and user-friendliness
- Information technology infrastructure (operation and provision of information systems and technical devices (computers, servers, etc.))
- Security measures
Storage and deletion:
Deletion in accordance with the information in the section “General information on data storage and deletion”.
Legal bases:
Legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR).
Use of cookies
The term “cookies” refers to functions that store information on users’ devices and read it from them. Cookies can also be used for different purposes, for example to ensure the functionality, security and convenience of online services and to create analyses of visitor flows. We use cookies in accordance with the legal provisions. Where necessary, we obtain users’ consent in advance. If consent is not required, we rely on our legitimate interests.
Storage period:
With regard to the storage period, the following types of cookies are distinguished:
- Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user has left an online service and closed their device (e.g. browser or mobile application).
- Permanent cookies: Permanent cookies remain stored even after the device is closed. For example, the login status can be saved and preferred content displayed directly when the user visits a website again.
Blogs and publication media
We use blogs or comparable means of online communication and publication. Readers’ data is processed for the purposes of the publication medium only to the extent necessary for its presentation and for communication between authors and readers, or for security reasons.
Contact and enquiry management
When contacting us (e.g. by post, contact form, email, telephone or via social media), the details of the persons making the enquiry are processed to the extent necessary to answer the enquiries and any requested measures.
Presence on social networks (social media)
We maintain online presences within social networks and process user data in this context in order to communicate with the users active there or to offer information about us.
Plug-ins and embedded functions and content
We integrate functional and content elements into our online service that are obtained from the servers of their respective providers (hereinafter referred to as “third-party providers”).