Privacy Policy

Controller

PyPSA Labs gGmbH

Mertensstr. 16A

13587 Berlin

Email: contact@pypsalabs.org

Hosting and server log files

This website is hosted by Cloudflare, who acts as our processor under a data processing agreement (Art. 28 GDPR). When you visit the site, the provider automatically collects technical access data (IP address, date and time, requested page, browser and operating system) in server log files, retained for a limited period for security and then deleted. This processing is based on our legitimate interest in the secure and stable operation of the website (Art. 6 (1) (f) GDPR). Data may be transferred to Cloudflare, Inc. in the USA, safeguarded by the EU-U.S. Data Privacy Framework and standard contractual clauses.

Contacting us

If you contact us via the contact form or by email, the data you provide is processed solely to handle your request (Art. 6 (1) (b) and (f) GDPR) and is deleted once your request has been fully handled, at the latest six months after our last correspondence, unless statutory retention obligations require longer storage.

Service providers

We use the following providers to operate specific features. Unless noted otherwise, they process personal data on our behalf under data processing agreements (Art. 28 GDPR):

• Newsletter: Brevo (Sendinblue SAS, Paris, France) sends our newsletter using a double opt-in and processes your email address on the basis of your consent (Art. 6 (1) (a) GDPR). You can withdraw consent at any time via the unsubscribe link; we store your email address until you unsubscribe.
• Workshop registration: Tally (Belgium) provides the forms you use to sign up for our workshops. Tally's script loads only when you open a registration form and then receives your IP address (Art. 6 (1) (f) GDPR); the details you enter (such as name and email) are processed to handle your registration (Art. 6 (1) (b) GDPR).
• Donations: Mollie B.V. (Netherlands) processes your name, email and payment details to carry out your donation and any recurring mandate (Art. 6 (1) (b) GDPR). As a licensed payment institution, Mollie acts as an independent controller; its own privacy policy applies. We retain donation records as required by German tax law (10 years; Art. 6 (1) (c) GDPR).
• Email delivery: Scaleway SAS (France) delivers our contact and transactional emails (Art. 6 (1) (f) GDPR).
• Spam protection: Cloudflare Turnstile protects our forms from automated abuse and processes your IP address (Art. 6 (1) (f) GDPR; see Hosting above for transfers).

Cookies

This website does not use analytics or tracking cookies.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing. Where processing is based on consent, you may withdraw it at any time with effect for the future. You may also lodge a complaint with a supervisory authority. For our company, this is the Berlin Commissioner for Data Protection and Freedom of Information. To exercise your rights, contact us at contact@pypsalabs.org.

Right to object (Art. 21 GDPR)

Where processing is based on our legitimate interests (Art. 6 (1) (f) GDPR), you may object at any time on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds. We do not use your data for direct marketing without your consent.