Privacy policy

Information on the processing of personal data under Art. 13 GDPR (DSGVO). This site is operated from Germany; German data protection law applies.

1. Controller

Controller within the meaning of Art. 4 No. 7 GDPR:
Moritz Königsbüscher
Bismarckstraße 132, 20253 Hamburg, Germany
Email: moritz@fan-network.org

2. General

We process personal data only where this is necessary to provide a functioning website, our content and our events, or where you have consented. The legal basis is usually Art. 6(1)(b) or (f) GDPR; where you have given explicit consent, Art. 6(1)(a) GDPR.

3. Server log files

When you visit this site, our hosting provider automatically records information your browser transmits in server log files: the IP address of the requesting device, date and time of access, requested URL and HTTP status code, transferred data volume, user agent (browser type and version, operating system) and referrer (the page visited before). Legal basis is Art. 6(1)(f) GDPR (legitimate interest in technically error-free delivery and IT security). Our hosting provider (ALL-INKL.COM, see section 10) keeps these logs for a limited period for security and error analysis and deletes them automatically; we do not evaluate them ourselves and do not combine them with other data.

4. Cookies and analytics

This website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and similar technologies to evaluate how the site is used: pages visited, approximate region, device and browser type, time on site. For visitors from the EU, Google uses the IP address only to derive an approximate location and discards it afterwards; IP addresses are not logged or stored. Google Analytics does set cookies and similar identifiers to recognise returning visits.

Analytics runs only with your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Without consent no analytics cookies are set and no analytics script is loaded. We ask for your consent in a banner on your first visit; you can withdraw it at any time with effect for the future. Data may be transferred to Google, including to the USA. Google is certified under the EU-US Data Privacy Framework. More in Google's privacy policy.

Manage consent · Withdraw consent

Apart from that, the site sets no cookies. Your consent choice is stored in your browser's local storage, not in a cookie.

5. Contact form and email

If you contact us through the form on /fan-contact/ or by email, we process the following data to answer your request: name, email address, company and role (optional), subject and message, date and time of submission. Legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in handling requests efficiently). The data is used only to process your request and deleted once the matter is closed, at the latest after 24 months, unless statutory retention periods apply. The form uses technical spam protection (a hidden field and a time check) and no tracking. To limit abuse, our server stores a hashed form of your IP address together with the submission time for ten minutes; these entries are deleted automatically.

6. Event registration via Eventbrite

Registration for our events runs through Eventbrite. Registration links on this site take you to eventbrite.com or eventbrite.de, operated by Eventbrite, Inc., 535 Mission Street, San Francisco, CA 94105, USA. We do not embed Eventbrite content on this site. As soon as you open Eventbrite, Eventbrite processes technical data (IP address, device, cookies) under its own responsibility; the data you enter when registering is processed by Eventbrite as well. Eventbrite provides us with the registration data you enter (name, email address, company, role) so that we can run the event: guest list, name badges, capacity planning and event-related communication. Name and company may be shared with the host of the respective event, for example for building access or the badge desk. Legal basis is Art. 6(1)(b) GDPR. See Eventbrite's privacy policy.

7. Photography and video at our events

Our events are documented by photographers and videographers. Photos and aftermovies are published on this website (past events), on our LinkedIn channels and may be provided to event partners for their own channels. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in documenting and communicating our events) and, where applicable, Sections 22 and 23 of the German Art Copyright Act (KUG). We point this out at the events. If you do not wish to appear in published material, tell the photographer or us on site, or write to events@fan-network.org afterwards; we will remove the image where reasonably possible.

8. External links and calendar files

We link to external sites (Eventbrite, LinkedIn, Google Maps, partner websites). When you follow a link you leave this website; we have no influence on data processing there. The "Add to calendar" function offers a downloadable .ics file generated on our server and a link to Google Calendar; using the Google link means Google processes the event data you add. We embed no third-party content such as videos, maps or social media widgets.

9. Fonts

The typeface used on this site (Source Sans 3) is served from our own server. No connection to Google Fonts or any other external font service is made, and no IP address is transmitted to third parties for font loading.

10. Hosting

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in reliable provision). A data processing agreement under Art. 28 GDPR is in place. Details: all-inkl.com/datenschutzinformationen.

11. Banner generator ("I'm attending" banners)

For some events we offer a page on which you can create a personal banner for LinkedIn from a photo of yourself. The banner is composed in your browser; the finished image is not uploaded to us. If you choose the style "In a circle", your photo never leaves your device.

If you choose the style "Cut out", your photo is transmitted once to remove the background: from your browser to our web host ALL-INKL.COM (see section 10), which forwards it over an encrypted connection to a server operated for us by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. There the background is removed and the result is returned to your browser. The photo is processed only in memory and in short-lived temporary files for the duration of this request and is discarded immediately afterwards. It is not stored, not logged, not shown to anyone and not used to train any software. No name or account is involved. Legal basis is Art. 6(1)(b) GDPR (providing the function you request). Data processing agreements under Art. 28 GDPR are in place with both providers.

To protect the service against misuse we keep a keyed hash of the network part of your IP address for at most 24 hours. No full IP address is stored. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in keeping the service available).

12. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), to object to processing based on Art. 6(1)(f) GDPR (Art. 21), and to withdraw consent with effect for the future (Art. 7(3)). An informal message to events@fan-network.org is enough.

13. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 7. OG, 20459 Hamburg, datenschutz-hamburg.de.

Last updated: September 2026. This policy is updated when new processing is added, for example a newsletter or a change of hosting provider.