Privacy Policy of Visual Ink Publishing UG Publishing UG

Scope

This Privacy Policy applies to the website euciv.com and its sub-pages, as well as all online offers for which Visual Ink Publishing UG is responsible. With this declaration, we outline when, how, and for what purpose we collect, process, and store personal data.

Information and Access to Personal Data (Article 13-22 GDPR) on our Website

In the following sub-chapters, we provide information regarding the collection and processing of personal data on our website and its sub-pages.

Cookies / Personal Data from Direct Collection

Both essential and functional cookies are used on our website:

Essential Cookies: Essential cookies are technically necessary to guarantee the basic functioning of this website. For this reason, no separate user consent is required for essential cookies.

CMS / System Cookies (e.g., WordPress): These cookies are necessary to make changes to the website or maintain login sessions for administrators. Personal data is generally not recorded in this context for standard visitors.

Functional Cookies Functional cookies are necessary to enable and improve functions and services that go beyond basic provision. Such cookies, e.g., for accessing content on video platforms, are automatically deactivated and can only be activated by granting consent.

External Media (e.g., YouTube/Vimeo): These cookies are necessary to play videos published on external platforms directly on our website. In this context, IP addresses and metadata are collected and used by the provider (e.g., Google) to improve their services and provide personalized content.

Beyond this, we refrain from setting unnecessary cookies. The collection of personal data generally only takes place when you use our contact, booking, or registration forms. We have set up these processes to comply with the principles of data minimization. Only data strictly necessary for processing your request is collected.

Contact and Appointment Booking (Calendly)

When you contact us via email or book an appointment (e.g., for the Boost Program “Intro Call”), we collect your name, e-mail address, and any information you provide voluntarily.

To facilitate efficient appointment scheduling, we use the service Calendly (Calendly LLC, 271 17th St NW, Ste 1000, Atlanta, GA 30363, USA). If you click on a scheduling link or use the embedded calendar on our website, you will be connected to Calendly. The data you enter (name, email, appointment time) is transferred to Calendly to organize the meeting.

Legal Basis: The processing is based on our legitimate interest in effective communication and business organization (Article 6 (1) (f) GDPR) and, in the context of the Boost Program, on steps prior to entering into a contract (Article 6 (1) (b) GDPR).

Data Transfer: Calendly processes data in the USA. We ensure that appropriate safeguards (Standard Contractual Clauses) are in place to protect your data.

• Calendly Privacy Policy: https://calendly.com/privacy

Event Registration and Applications (Luma)

For our Hackathons, Meetups, and Forums, we use the event management platform Luma (Luma Labs, Inc., USA). When you register for an event or the community network, the data you provide (Name, Email, Job Title, Portfolio/Link) is processed by Luma to manage the guest list, ticketing, and event updates.

Legal Basis: The processing is necessary for the performance of the contract regarding event participation (Article 6 (1) (b) GDPR).

Data Transfer: As Luma is a US-based provider, data may be processed in third countries. This transfer is safeguarded by standard contractual clauses to ensure GDPR compliance.

• Luma Privacy Policy: https://lu.ma/privacy

Application Forms (Careers & Boost Program)

Should you apply specifically for a position or deeper participation in the Boost Program (beyond the intro call), your data will be collected and processed to establish a contractual or employment relationship.

For Employment: The legal basis is found in the Federal Data Protection Act (BDSG), §26, Paragraph 1.

For Programs: The legal basis is the performance of a contract or steps prior to entering into a contract (Article 6 (1) (b) GDPR).

Your data will be stored for the duration of the selection process and, should a relationship not be established, deleted according to the deletion periods established by the company.

Plugins

Our website may link to plugins from companies such as Instagram and LinkedIn. If one of the corresponding plugins is clicked, a connection to the respective social network is automatically established.

Data Privacy for our Presence on Social Networks

For certain processing operations, Visual Ink Publishing UG is not solely responsible, but acts as a Joint Controller with one or more other parties. Joint responsibility exists when two or more controllers determine the purposes and means of processing personal data. Joint responsibility means that shared purposes for processing exist and data subjects can enforce their rights under Art. 12-22 GDPR, including Art. 77 GDPR, against both controllers.

LinkedIn For the processing of personal data with Page Insights on LinkedIn, we determine the purposes and means jointly with LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2 (Ireland). You can view the Joint Controller Addendum here: https://legal.linkedin.com/pages-joint-controller-addendum.

• LinkedIn’s Privacy Policy: https://www.linkedin.com/legal/privacy-policy.

• Contact LinkedIn’s Data Protection Officer: https://www.linkedin.com/help/linkedin/ask/TSO-DPO.

Purpose of Processing

The purpose of data processing with LinkedIn is both the presentation of the company and interaction with our users. This includes information about our company, our products (such as the Boost Program), and services, combined with the possibility for users to interact with us in a targeted manner. The legal basis for data processing is Art. 6 (1) (f) GDPR. Our legitimate interest is specifically our business interest in sharing information with our users and being able to communicate with them.

If we publish images of persons, this is done via consent (Legal basis: Art. 6 (1) (a) GDPR), based on a contractual agreement (Legal basis: Art. 6 (1) (b) GDPR), and/or based on legitimate interests (Legal basis: Art. 6 (1) (f) GDPR).

Data Processing in Third Countries & Third Country Transfer

We generally process your personal data only in Germany and the European Union. However, both LinkedIn and Meta also transmit personal data to countries outside the EU and the European Economic Area (“Third Countries”). Regarding the protection of personal data during such transfers, LinkedIn and Meta rely, among other things, on so-called EU Standard Contractual Clauses. Details can be found in the respective data protection notices:

• https://legal.linkedin.com/pages-joint-controller-addendum

• https://www.facebook.com/privacy/policies/data_privacy_framework

Rights of the Data Subject

To exercise the following rights, we ask for an informal message to mail@euciv.com.

Right of Access

You have the right to know whether your personal data is being processed by us. If this is the case, you have a right to information about this data and further information (Art. 15 GDPR).

Right to Rectification

Should you discover that we have stored incorrect data about you, you can request a correction of the data at any time (Article 16 GDPR).

Right to Restriction of Processing

You have the right to restrict the processing of your personal data (Article 18 GDPR).

Right to Data Portability

You have the right to demand from us a transfer of the personal data available to us to a third party selected by you (Article 20 GDPR), provided that the data processing is based on your consent, a contract, or automated collection.

Right of Withdrawal and Objection

If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out based on consent before its withdrawal (Article 7 (3) GDPR).

If the processing of your personal data is based on Article 6 (1) (e) (public interest) or (f) (legitimate interest), you have the right to object (Article 21 GDPR).

Rights of the Data Subject against Joint Controllers

If your rights need to be asserted against LinkedIn, we will forward your request to LinkedIn. Further information regarding the exercise of your data subject rights against LinkedIn can be found in Section 4.2 of LinkedIn’s Privacy Policy.

Disclaimer / Links

It is possible that we link to other websites within the scope of our activities. This can happen, for example, when we refer to sources in research notes or partner organizations. Visual Ink Publishing UG assumes no liability for the content and/or treatment of data that could be stored by other website operators when visiting these links.

Technical and Organizational Measures

No data transmission on the Internet is invulnerable. However, we have taken measures to provide data transmission with proportionate and appropriate protection. For this purpose, data transmission takes place in encrypted form. SSL encryption is used on the website. In data transmission, only TLS encryption of version 1.2 and upwards is supported.

Right to Lodge a Complaint with a Supervisory Authority

Should you come to the conclusion that the data processing undertaken here violates the provisions of data protection law, you can exercise your right under Article 77 GDPR at any time and lodge a complaint with the competent data protection authority.

The competent authority is generally the State Commissioner for Data Protection in the federal state where our registered office is located.

Controller

Responsible within the meaning of Article 4, Paragraph 7 GDPR for the processing of personal data is:

Visual Ink Publishing UG
Pappelallee 78/79,
10437 Berlin
Germany

Contact for Data Protection: mail@euciv.com