1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to personally identify you. Detailed information on data protection can be found in our privacy policy listed below this text.

Data Collection on Our Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the legal notice of this website.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may include, for example, data that you enter into a contact form.

Other data is collected automatically by our IT systems when you visit the website. This primarily includes technical data (e.g. internet browser, operating system or time of page access). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have the right to request correction, blocking or deletion of this data. For this purpose, as well as for further questions on the subject of data protection, you can contact us at any time at the address provided in the legal notice. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

Analysis Tools and Third-Party Tools

When visiting our website and using our app, your surfing behavior may be statistically evaluated. This is mainly done using cookies and so-called analysis programs. The analysis of your surfing behavior is generally anonymous; the surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following privacy policy. You can object to this analysis. We will inform you about the objection options in this privacy policy.

2. General Information and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy. When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this happens. We would like to point out that data transmission over the Internet (e.g. communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information on the responsible party

The responsible party for data processing on this website is:

Simon Köhl
c/o Impact Hub Munich
Gotzinger Straße 8
81371 Munich

Email: hello@future.coop

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You can revoke consent already given at any time. An informal notification by email to us is sufficient. The legality of the data processing carried out up to the point of revocation remains unaffected by the revocation.

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done insofar as it is technically feasible.

SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, Blocking, Deletion

Within the scope of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to correction, blocking or deletion of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address provided in the legal notice.

3. Data Collection on our Website

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources.

The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, server log files must be collected.

Security Log

The IP addresses of visitors and the user IDs of logged-in users, as well as usernames of login attempts, are stored under certain conditions in order to detect malicious activities and to protect the site from certain attacks. Examples of such conditions include login attempts, logout requests, requests to suspicious URLs, changes to site content and password changes. The information is stored for 60 days.

Processing of Data (Customer and Contract Data)

We collect, process and use personal data only insofar as this is necessary for the establishment, content design or modification of the legal relationship (inventory data). This is done on the basis of Art. 6(1)(b) GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. Personal data about the use of our internet pages (usage data) is collected, processed and used only insofar as this is necessary to enable the user to use the service or to bill it. The collected customer data is deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data Transfer Upon Conclusion of a Contract for Services and Digital Content

We only transfer personal data to third parties if this is necessary within the scope of contract processing, for example to the credit institution commissioned with payment processing. Any further transfer of data does not take place or only takes place if you have expressly consented to the transfer. Your data will not be passed on to third parties without your explicit consent, for example for advertising purposes. The basis for data processing is Art. 6(1)(b) GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

4. Plugins and Tools

Below you will find a list of the plugins and tools used by the Future Maps app and the website future.coop, including their contact details and privacy notices, as well as the manner of use and the respective legal basis. If processing is based on Art. 6(1)(f) GDPR, you have the right to object at any time for reasons arising from your particular situation.

Location and Map Provider Mapbox

When using Future Maps, the current map position is transmitted to our servers. This is done so that we can display places within the current map section. We do not store this map position information nor do we evaluate it further.

Your location is not passed on to third parties. However, when using Future Maps, the map provider Mapbox is informed which map section should be loaded. Depending on usage, this may allow Mapbox to roughly determine your location.

If you choose to display your current location on the map, it is used only for this purpose and for centering the map section. The current location is processed exclusively locally on your device and is not transmitted to any servers.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a functional map display).

Processing in the USA is possible. Mapbox is certified under the EU-U.S. Data Privacy Framework.

Provider: Mapbox, Inc., 740 15th Street NW, Washington, DC 20005, USA

Website: https://www.mapbox.com

Privacy: https://www.mapbox.com/legal/privacy

Newsletter Distribution via MailChimp

We use the MailChimp service to send our newsletter. MailChimp stores and processes the data you provide during registration and newsletter sign-up (e.g. email address, name).

MailChimp uses this information to send and analyze our newsletter (e.g. opens/clicks). Data processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time by unsubscribing from the newsletter. You will find an unsubscribe link in every email or you can contact us directly.

Mailchimp uses servers in the USA and is certified under the EU-U.S. Data Privacy Framework.

Provider: Intuit Inc. (Mailchimp), 2700 Coast Ave, Mountain View, CA 94043, USA

Website: https://mailchimp.com

Privacy: https://www.intuit.com/privacy/statement

Authentication and User Management Service Ory

For registration, login and management of user accounts in Future Maps, we use Ory. In doing so, account data (email address and name) as well as technical session and security information (e.g. tokens, login times, device/browser data) are processed in order to provide the app, secure access and prevent misuse.

The processing of this data is carried out to provide app functions and to fulfill the user contract pursuant to Art. 6(1)(b) GDPR. Ory processes the data exclusively on our behalf and only for the stated purposes. Ory does not pass on the data for its own purposes.

Processing in the USA is possible. Ory is certified under the EU-U.S. Data Privacy Framework.

Provider: Ory Corp, in Germany Ory Germany GmbH, Karlsplatz 3, 80335 Munich

Website: https://www.ory.com

Privacy: https://www.ory.com/legal/privacy

Server Hosting with Hetzner

We use servers of Hetzner Online GmbH. These servers therefore store the personal data processed on our behalf that arises during server operation, in particular technical data such as IP addresses, server log files and system information.

Hetzner is used for the purpose of secure and stable provision of our services. The legal basis for processing is Art. 6(1)(f) GDPR (legitimate interest in a reliable technical infrastructure).

Data processing takes place exclusively within the EU.

Provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany

Website: https://www.hetzner.com

Pricacy: https://www.hetzner.com/legal/privacy-policy

Provision of the Web Frontend via Vercel

To provide and deliver the web frontend of Future Maps, we use the Vercel service. When accessing the app, technically necessary data such as IP address, browser information and access times may be processed to deliver content, monitor stability and detect attacks/errors.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in performant, secure delivery).

Processing in the USA is possible. Vercel is certified under the EU-U.S. Data Privacy Framework.

Provider: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA

Website: https://vercel.com

Privacy: https://vercel.com/legal/privacy-policy

Content Delivery Network and Security Functions via Cloudflare

We use Cloudflare as a content delivery network (CDN) and for security functions (e.g. DDoS protection, web firewall). Technically necessary data is processed, in particular IP addresses and system and connection data (e.g. request headers, timestamps), to deliver content more quickly and defend against attacks.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in security and efficient delivery).

Processing in the USA cannot be ruled out. Cloudflare is certified under the EU-U.S. Data Privacy Framework.

Provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA

Website: https://www.cloudflare.com

Privacy: https://www.cloudflare.com/privacypolicy

Membership Declaration with WordPress on HostPress

The membership declaration for new cooperative members is created using the WordPress content management system and hosted by HostPress. HostPress processes the data as a processor pursuant to Art. 28 GDPR.

The purpose of processing is the provision of the membership declaration and the secure technical operation of the associated website. The legal basis is Art. 6(1)(b) GDPR (initiation of membership) and Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation).

Processing takes place within the EU.

Provider: HostPress GmbH, Bahnhofstraße 34, 66571 Eppelborn, Germany

Website: https://www.hostpress.de

Privacy: https://www.hostpress.de/datenschutz

Website Builder Framer

Our website future.coop is created and published using Framer. When accessing the website, technically necessary data may be processed (e.g. IP address, device/browser information, access times, requests/logs) in order to deliver the site, optimize performance and ensure security.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure, efficient web presence).

Processing in the USA cannot be ruled out. Framer is certified under the EU-U.S. Data Privacy Framework.

Provider: Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands

Website: https://www.framer.com

Privacy: https://www.framer.com/legal/privacy-statement

Error and Performance Monitoring with Sentry

Sentry is a tool for monitoring errors and performance of websites and apps. It is used by our developers to detect and fix technical errors (e.g. crashes, loading issues) at an early stage. Personal data may be processed in this context – in particular IP addresses, device information, access times and possibly shortened URLs or technical metadata may be processed in anonymized form.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in stability and error analysis).

Processing in the USA is possible. Sentry is certified under the EU-U.S. Data Privacy Framework.

Provider: Functional Software, Inc. d/b/a Sentry, 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA

Website: https://sentry.io

Privacy: https://sentry.io/privacy

Web Analytics with Simple Analytics

Future Maps uses the web analytics service Simple Analytics. In anonymized form, certain usage data of website visitors (date and time of access, browser user agent) is collected, analyzed and automatically processed. This enables us to continuously optimize our offering. Simple Analytics does not use cookies, but a simple script code. No cookies are set on your device by Simple Analytics.

As Future Cooperative eG, it is not possible for us in any way to obtain personal data from the information provided by Simple Analytics. Conclusions about your person are therefore not possible. However, the service inevitably receives IP addresses as well as system and connection data (e.g. request headers, timestamps).

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in privacy-friendly reach measurement).

Processing takes place within the EU.

Provider: Simple Analytics (sole proprietorship), Hooftlaan 4, 1401 ED Bussum, Netherlands

Website: https://simpleanalytics.com

Privacy: https://simpleanalytics.com/privacy-policy / https://docs.simpleanalytics.com/what-we-collect