Legal
Privacy Policy
This privacy policy informs you about the nature, scope and purpose of the processing of personal data on this website in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR).
1. Controller
BCBT Berlin College of Business and Technology GmbH
World Cleanup Institute for Entrepreneurship and Impact (WCI)
Lohmühlenstraße 65, 12435 Berlin, Germany
Managing Directors: Hon.-Prof. Holger Holland, Hon.-Prof. Dr. Valdrin Dervishaj
E-mail: [email protected] · Phone: +49 175 2014034
2. Data protection contact
For all questions regarding data protection, please contact us at [email protected] or by post at the address above, marked “Data Protection”.
3. Hosting and content delivery
This website is hosted by an external hosting provider that processes data on our behalf under a data processing agreement (Art. 28 GDPR). When you visit the website, the server automatically processes log data: IP address, date and time of access, requested page, browser type and version, operating system and referring website. This is necessary to deliver the website and to ensure its security. Log files are deleted after 7 days. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and functional website).
We use Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA) as a content delivery network and for protection against attacks. Requests to this website are routed through Cloudflare’s servers, which process your IP address and technical connection data. Data may be transferred to the USA; Cloudflare is certified under the EU–US Data Privacy Framework. Legal basis: Art. 6(1)(f) GDPR.
4. WordPress and Jetpack
This website runs on WordPress. We use the Jetpack plugin (Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA) for security functions (e.g. protection against brute-force attacks). For this purpose, technical data including your IP address may be processed on Automattic’s servers, including in the USA. According to its privacy policy, Automattic safeguards transfers to the USA with standard contractual clauses approved by the European Commission (Art. 46(2)(c) GDPR). Legal basis for the security functions: Art. 6(1)(f) GDPR. Comments and e-mail notifications of new posts are not offered on this website.
Visitor statistics (Jetpack Stats) – only with your consent. When you first visit, a consent banner asks whether you allow statistics. “Reject” and “Accept” are offered on the same level; nothing is loaded before you decide. Only if you accept, a script from stats.wp.com (Automattic Inc.) is loaded that records the page viewed, time, referrer, browser and device information and your IP address in order to produce aggregated page-view statistics; data may be processed in the USA. Legal basis: § 25(1) TDDDG and Art. 6(1)(a) GDPR. You can withdraw or change your consent at any time with effect for the future via “Privacy settings” in the footer of every page. Logged-in editors are not counted.
Your privacy choice (yes/no for statistics, date, version of the banner text and a random ID without reference to your person) is stored in your browser’s local storage so that the banner is not shown again and your consent can be documented (§ 25(2) No. 2 TDDDG; Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). It is not transmitted to us. The choice expires after 12 months or when the banner text changes; you will then be asked again. Technically necessary cookies are otherwise only set for logged-in editors of this website.
5. Fonts
The fonts used on this website are hosted locally on our own server. No connection to third-party font services (such as Google Fonts) is established.
6. Contact by e-mail or form
If you contact us by e-mail or via a contact form, we process the data you provide (name, e-mail address, organisation, message content) to handle your enquiry. Data is deleted 3 months after your enquiry has been answered, unless statutory retention obligations apply. Legal basis: Art. 6(1)(b) GDPR (pre-contractual enquiries) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
7. Funding and partnership enquiries
If you submit a funding, grant or partnership enquiry, we process name, organisation, e-mail address, optional phone number and project information to evaluate and respond to it. Data is retained for up to 6 months after the enquiry has been concluded, unless a longer period is agreed. Legal basis: Art. 6(1)(b) GDPR.
8. WCRI Register and external platforms
Organisations listed on the WCRI Register are published with their name, type, location, WCRI score and WCRI ID. This concerns organisations, not private individuals; where contact persons are named, this is done on the basis of the participation agreement (Art. 6(1)(b) GDPR).
The WCI Responsibility Framework (the rulebook of the WCRI) and the methodology are published on worldcleanup.org/wcri/methodology; QR codes are provided via app.wecreatefuture.world and lead to the Responsibility Passports. These are separate services with their own privacy notices.
QR codes. The QR codes on WCRI listings and Responsibility Passports are dynamic links via app.wecreatefuture.world. When you scan a code, the service forwards you to the passport and records the scan to produce scan statistics: date and time, the code scanned, device and browser type, the referring page and campaign parameters (UTM tags); your IP address is processed for the forwarding. We use these statistics in aggregated form only, to see how often passports are viewed. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in measuring the use of the register). Details on storage period and processors are given in the privacy notice of app.wecreatefuture.world.
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You may withdraw consent at any time with effect for the future (Art. 7(3)). To exercise your rights, contact [email protected].
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, Germany.
10. Changes
We update this privacy policy when our website or the legal situation changes. The current version is always available on this page.