Data Controller

Responsible for data processing under GDPR:

npnHub Networks e.K.  

Tölzer Straße 1  

82031 Grünwald, Germany  

Email: [email protected]  

Represented by: Gordana Kennedy

We Respect Your Privacy

npnHub Networks e.K., hereinafter referred to as “we,” informs you, in accordance with the General Data Protection Regulation (EU-GDPR), how we process personal data.

We are committed to protecting your personal data and ensuring transparency in how we collect, process, and store it. This Privacy Policy explains what personal data we collect, the legal basis for processing it, how we use it, and your rights under the GDPR.

 

1. Legal Basis for Processing (Art. 6 GDPR)

We process personal data on the following legal bases:

• Legitimate Interests (Art. 6 (1) lit. f): To establish and maintain business relationships with companies and individuals who may benefit from our services.
• Consent (Art. 6 (1) lit. a): For marketing communications or processing sensitive data, we will request your explicit consent.
• Contractual Obligations (Art. 6 (1) lit. b): Where data processing is required for the performance of a contract.
• Legal Obligations (Art. 6 (1) lit. c): When necessary to comply with legal obligations.

 

2. Data We Collect and Process

We process the following categories of personal data:

• Name
• Email address
• LinkedIn profile
• Professional details: company name, industry, position
• IP address and device information (when interacting via our website)

Additional data you may provide:

• Feedback and survey responses
• Business inquiries and service orders
• Participation in events, video conferences, or webinars
• Payment details (processed securely by third parties)
• Photographs and video recordings for marketing and promotional purposes (with prior consent)

Note: We do not knowingly collect data from individuals under the age of 18 (Art. 8 GDPR).

3. Data Processing and Transfers

Your data is collected manually and processed exclusively by authorized employees and external service providers bound by strict Non-Disclosure Agreements (NDAs).

Personal data may be transferred to countries outside the EU/EEA only if:

• An Adequacy Decision exists (Art. 45 GDPR); or
• Appropriate safeguards such as Standard Contractual Clauses (SCCs) are in place (Art. 46 GDPR).

We ensure third-party providers comply with GDPR requirements, including:

• Stripe: https://stripe.com/au/privacy
  
• PayPal: https://www.paypal.com/myaccount/privacy/privacyhub
  
• Quaderno: https://quaderno.io/legal/privacy/
  
• Mighty Networks: https://www.mightynetworks.com/privacy-policy
  
• MailerLite: https://www.mailerlite.com/legal/privacy-policy
  
• Monday.com: https://monday.com/trustcenter/privacy

Data Storage on Google and BrilliantDirectories Servers
We store and process personal data using cloud-based services provided by Google LLC (Google Workspace and Google Cloud Platform) and BrilliantDirectories. These providers may process data on servers located in the United States and other countries outside the European Economic Area (EEA).

To ensure an adequate level of data protection, these providers comply with the EU Standard Contractual Clauses (SCCs) and other legally recognized safeguards under Art. 46 GDPR.

For more information, please refer to their respective privacy policies:

• Google: https://policies.google.com/privacy
  
• BrilliantDirectories: https://www.brilliantdirectories.com/privacy-policy
  
  

International Data Transfers and Non-EU Personnel
Our business operations involve cooperation with authorized personnel and contractors located in non-EU countries. All such collaborators are contractually bound by strict confidentiality and data protection agreements, including adherence to the GDPR through Standard Contractual Clauses (SCCs) where required.

4. Retention and Deletion of Data (Art. 17 GDPR)

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law. Data will be deleted or anonymized:

• When the purpose of processing no longer applies.
• Upon your request, in accordance with your right to erasure.

5. Your Rights Under the GDPR

As a data subject under the GDPR, you have the following rights:

• Right to access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (“right to be forgotten”) (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object to processing (Art. 21)
• Right to withdraw consent at any time (Art. 7 (3))
• Right to lodge a complaint with a supervisory authority (Art. 77)

Please contact [email protected] to exercise your rights. We may request identity verification before processing your request.

6. Hosting and International Data Transfers

Information we collect may be stored, processed, or transferred to countries outside the EU/EEA, including Australia, Singapore, the US, and the UK. In such cases, appropriate safeguards are implemented in compliance with GDPR.

We use the following platforms for processing and storage:

• Google Workspace
• BrilliantDirectories
• Microsoft 365
• Monday.com
• MailerLite

7. Recordings and Media Publications

Our online meetings, Q&A calls, and webinars are hosted via Zoom. By participating, you agree to being recorded unless you explicitly request otherwise before the session begins. Recordings may be added to our publicly accessible library.

We also manage a YouTube channel where we share photographs and video recordings of clients for promotional and informational purposes. Such content will only be published with your prior explicit consent. If you wish to withdraw your consent or request removal of media content featuring you, please contact [email protected].

8. Security of Your Personal Data

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, or disclosure. Where we employ external data processors, we ensure they comply with GDPR obligations and have adequate security measures.

However, please be aware that data transmission over the internet can involve risks, and we cannot guarantee absolute security.

 

9. Access to Your Personal Data

You may request access to the personal data we hold about you. If you believe any information we hold is incorrect, outdated, or incomplete, please contact [email protected] to correct it.

We reserve the right to refuse access under conditions set out in the GDPR or applicable local laws.

 

10. Cookies

Our websites use cookies to improve user experience and analyze website traffic. You can manage your cookie preferences via your browser settings. Declining cookies may impact your experience on our website.

11. Third-Party Websites

Our websites may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing personal data.

If you do not agree with their policies, contact [email protected] to request removal of your data from related platforms.

12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time in accordance with Art. 12 and 13 GDPR. Any changes will be published on our website. We encourage you to review this policy periodically.