Your data,
handled with care.

1. Controller & contact

The data controller responsible for this website is:

BIRNE7 e.V.
Henkestr. 91
91052 Erlangen
Germany
Email: team@birne7.de
Register court: Vereinsregister Fürth, VR 201149

If you have any questions about how we handle your personal data, please contact us at team@birne7.de.

2. Data protection principles

We process personal data only in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection law. Our core principles:

• Minimal collection — we only collect data that is strictly necessary for the stated purpose.
• Purpose limitation — data collected for one purpose will not be used for another without your consent.
• No selling of data — we do not sell, rent, or trade personal data to third parties.
• No third-party tracking — this website does not use Google Analytics, Facebook Pixel, or any other behavioural tracking service.
• No cookies — we do not set any cookies on your device. Preferences are stored locally in your browser only (see section 6).

3. Hosting & technical operation

This website is hosted on servers within the European Union. Your connection to our web server is encrypted via HTTPS (TLS). The legal basis for technical data processing is Art. 6(1)(f) GDPR — our legitimate interest in providing a secure, functional website.

4. Server log files

Our hosting provider automatically collects and stores information in server log files that your browser transmits. This includes:

• Browser type and version
• Operating system
• Referring URL
• Hostname of the accessing device
• Date and time of the server request
• IP address (anonymised or deleted within 7 days)

This data is not merged with other data sources and is used solely for the detection of technical errors and security incidents. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). Retention period: max. 7 days.

5. Contact and submission forms

When you use the contact form, barrier submission form, or collaboration enquiry form on this website, the information you provide is transmitted to us by email and stored solely to process your request.

Data processed may include: name, email address, organisation, and the content of your message or submission.

• Legal basis: Art. 6(1)(b) GDPR (contract performance or pre-contractual steps) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
• Retention: We retain form submissions only as long as necessary to process your request, and delete them thereafter unless legal retention obligations apply.
• No third-party sharing: Your data is not passed on to third parties unless this is necessary to handle your enquiry and you have been informed accordingly.

6. Local storage (accessibility preferences)

This website stores your accessibility preferences — such as colour theme, font size, contrast mode, and motion settings — in your browser's localStorage. This data:

• Never leaves your device
• Is not transmitted to our servers
• Is not accessible to us or any third party
• Can be cleared at any time via your browser settings

This is not a cookie and does not require consent under the ePrivacy Directive or GDPR. It exists solely to remember your display preferences between visits.

7. Your rights under GDPR

You have the following rights regarding your personal data under the GDPR:

• Right of access (Art. 15 GDPR) — you may request confirmation of whether we process data about you and obtain a copy.
• Right to rectification (Art. 16 GDPR) — you may request correction of inaccurate data.
• Right to erasure (Art. 17 GDPR) — you may request deletion of your data where no legal obligation requires its retention.
• Right to restriction of processing (Art. 18 GDPR) — you may request that we restrict processing in certain circumstances.
• Right to data portability (Art. 20 GDPR) — you may request your data in a machine-readable format where processing is based on consent or contract.
• Right to object (Art. 21 GDPR) — you may object to processing based on our legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at team@birne7.de. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. The competent authority in Bavaria is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach
www.lda.bayern.de

8. Changes to this policy

We may update this privacy policy to reflect changes in our practices or applicable law. The current version is always available at birne7.de/privacy. Material changes will be noted with an updated date at the top of the page.