Privacy Policy
How and why we process your personal data.
Last updated: 2025-09-11
This Privacy Policy explains how Innovation Xperience ("we", "us") collects and processes your personal data in connection with our website and activities. We comply with the EU General Data Protection Regulation (GDPR) and other applicable laws.
Data Controller
Innovation Xperience
Sandtorstraße 23, 39106 Magdeburg, Germany
Data Protection Contact
For any request about this policy or to exercise your rights, contact us at the email above.
Data we collect
- Contact data (e.g., name, email) when you subscribe or contact us.
- Application data (e.g., project info, team details) when you apply.
- Usage data (e.g., pages viewed, device info) via cookies or similar technologies.
- Event data (e.g., attendance, feedback) for workshops and activities.
How we use your data & legal bases
| Purpose | Examples | Legal basis | Retention |
|---|---|---|---|
| Communications | Updates, invitations, program news | Consent (Art. 6.1.a) or Legitimate interest (Art. 6.1.f) | Until withdrawal or 24 months after last contact |
| Application management | Reviewing submissions, interviews, selection | Contractual steps (Art. 6.1.b) | 24 months after cycle closure (unless onboarded) |
| Analytics & security | Measurement, troubleshooting, preventing abuse | Legitimate interest (Art. 6.1.f) | Up to 14 months (aggregated thereafter) |
| Legal compliance | Record keeping, responding to requests | Legal obligation (Art. 6.1.c) | As required by law |
International data transfers
If data is transferred outside the EEA/UK, we use appropriate safeguards (e.g., EU Standard Contractual Clauses) and additional measures when necessary.
Data retention
We retain personal data only for as long as needed for the purposes described above or to comply with legal obligations, then delete or anonymize it.
Your rights
- Access your data and obtain a copy.
- Rectify inaccurate or incomplete data.
- Erase data (right to be forgotten) where applicable.
- Restrict or object to processing, including direct marketing.
- Data portability where processing is based on consent or contract.
- Withdraw consent at any time when processing is based on consent.
- Lodge a complaint with your supervisory authority (e.g., BfDI in Germany).
How to exercise your rights
Contact us at privacy@innovationxperience.eu from the email address you used, and specify your request. We may need to verify your identity.
Security
We implement technical and organizational measures appropriate to the risk to protect personal data against unauthorized access, alteration, disclosure or destruction.
Changes to this policy
We may update this policy from time to time. We will post the new version on this page and update the "Last updated" date above.