Privacy Policy

Legal

Privacy Policy

This privacy policy informs you about the nature, scope and purpose of the processing of personal data on this website in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR).

1. Controller

BCBT Berlin College of Business and Technology GmbH
World Cleanup Institute for Entrepreneurship and Impact (WCI)
Lohmühlenstraße 65, 12435 Berlin, Germany
Managing Directors: Hon.-Prof. Holger Holland, Dr. Valdrin Dervishaj
E-mail: [email protected] · Phone: +49 175 2014034

2. Data protection contact

For all questions regarding data protection, please contact us at [email protected] or by post at the address above, marked “Data Protection”.

3. Hosting and content delivery

This website is hosted by an external hosting provider that processes data on our behalf under a data processing agreement (Art. 28 GDPR). When you visit the website, the server automatically processes log data: IP address, date and time of access, requested page, browser type and version, operating system and referring website. This is necessary to deliver the website and to ensure its security. Log files are deleted after 7 days. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and functional website).

We use Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA) as a content delivery network and for protection against attacks. Requests to this website are routed through Cloudflare’s servers, which process your IP address and technical connection data. Data may be transferred to the USA; Cloudflare is certified under the EU–US Data Privacy Framework. Legal basis: Art. 6(1)(f) GDPR.

4. WordPress and Jetpack

This website runs on WordPress. We use the Jetpack plugin (Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA) for security functions (e.g. protection against brute-force attacks) and for aggregated visitor statistics. For this purpose, technical data including your IP address may be processed on Automattic’s servers, including in the USA. Automattic is certified under the EU–US Data Privacy Framework. Legal basis: Art. 6(1)(f) GDPR for security functions; for statistics, Art. 6(1)(a) GDPR insofar as consent is required (§ 25 TDDDG).

Technically necessary cookies are only set for logged-in editors of this website.

5. Fonts

The fonts used on this website are hosted locally on our own server. No connection to third-party font services (such as Google Fonts) is established.

6. Contact by e-mail or form

If you contact us by e-mail or via a contact form, we process the data you provide (name, e-mail address, organisation, message content) to handle your enquiry. Data is deleted 3 months after your enquiry has been answered, unless statutory retention obligations apply. Legal basis: Art. 6(1)(b) GDPR (pre-contractual enquiries) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

7. Funding and partnership enquiries

If you submit a funding, grant or partnership enquiry, we process name, organisation, e-mail address, optional phone number and project information to evaluate and respond to it. Data is retained for up to 6 months after the enquiry has been concluded, unless a longer period is agreed. Legal basis: Art. 6(1)(b) GDPR.

8. WCRI List and external platforms

Organisations listed on the WCRI List are published with their name, type, location, WCRI score and WCRI ID. This concerns organisations, not private individuals; where contact persons are named, this is done on the basis of the participation agreement (Art. 6(1)(b) GDPR).

The WCRI framework and methodology are provided on rap.worldcleanup.org; QR codes and Digital Product Passport data on app.wecreatefuture.world. These platforms are separate services with their own privacy notices.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You may withdraw consent at any time with effect for the future (Art. 7(3)). To exercise your rights, contact [email protected].

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, Germany.

10. Changes

We update this privacy policy when our website or the legal situation changes. The current version is always available on this page.

Last updated: October 2026