Privacy Policy

1. Controller

We have not appointed a data protection officer, as we are not required to do so under § 38 BDSG. Please address all data protection matters to the contact above.

2. Hosting and server log files

This website is hosted on servers of Hetzner Online GmbH in Germany. When you visit the site, the web server automatically records the following in log files: IP address, date and time of the request, the page requested, referrer URL, browser and operating system. This data is technically necessary to deliver the site and to protect it against attacks.

Legal basis: Art. 6 (1) (f) GDPR - our legitimate interest in the secure and reliable operation of the website. Log files are deleted after seven days at the latest, unless they are needed to investigate a specific security incident.

3. Contact and registration forms

The contact form, the partnership application, the event registration form and the vendor request form on the solution pages ask for your name, email address and, depending on the form, company, phone number, position and your message. We use this data solely to process your enquiry and to contact you about it; for a vendor request this includes introducing you to the software provider you asked about.

Your submission is stored in our own database on the German server described above. It is not forwarded to any external service provider. Legal basis: Art. 6 (1) (b) GDPR where your enquiry concerns the initiation of a contract, otherwise Art. 6 (1) (a) GDPR based on the consent you give when submitting the form. You can withdraw your consent at any time with effect for the future.

We keep enquiries for as long as they are needed for the business relationship and delete them no later than three years after the last contact, unless statutory retention periods under commercial or tax law require longer storage. Together with each submission we record the fact of your consent, the time and your IP address, so that we can demonstrate compliance under Art. 7 (1) GDPR.

4. Newsletter

If you subscribe to our newsletter, we process your email address and, if you provide it, your name, in order to send you information about events and the Uzbek IT market, once or twice a month. Subscription uses the double opt-in procedure: after submitting the form you receive an email with a confirmation link, and only after you click it is your address added to the mailing list.

The mailing list runs on Listmonk, an open-source application operated by us on our own server in Germany - the same infrastructure that hosts this website. No external newsletter service is involved and subscriber data does not leave our systems. Emails are sent via our own company mailbox. We do not track whether you open a newsletter or which links you click.

To demonstrate your consent (Art. 7 (1) GDPR) we record the time of your subscription, your IP address, the exact wording and version of the consent text you agreed to, the time of your confirmation, and the page the subscription came from. Legal basis of the processing: Art. 6 (1) (a) GDPR - your consent.

Every newsletter contains an unsubscribe link. One click ends the subscription with immediate effect; alternatively an informal message to info@itpark-uzb.de suffices. After unsubscribing we keep only the record needed to demonstrate that consent existed and when it was withdrawn.

5. Web analytics with Matomo

We use Matomo to understand how our website is used. Matomo records the pages visited, the referring page, the approximate duration of a visit, and technical details of your browser and device. Matomo runs on our own server in Germany - the same infrastructure that hosts this website. The analytics data therefore never leaves our systems, is not passed on to third parties and is not used for advertising.

By default Matomo runs without cookies. Only if you actively agree in the banner do we additionally store a Matomo cookie that allows returning visits to be recognised. If you decline, an opt-out is set and no analysis takes place. Legal basis: Art. 6 (1) (a) GDPR and § 25 (1) TDDDG for the storage on your device, otherwise Art. 6 (1) (f) GDPR. You can change your decision at any time by deleting the site data in your browser.

6. YouTube videos

Some pages contain videos hosted on YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The videos are not loaded automatically. You will first see a preview with a notice; only when you click to load the video does your browser connect to YouTube. From that moment on, your IP address and information about your browser are transmitted to Google and may be transferred to servers in the USA.

Legal basis: Art. 6 (1) (a) GDPR and § 25 (1) TDDDG - your consent, given by clicking. For transfers to the USA, Google relies on the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision. Further information: policies.google.com/privacy.

7. External links and appointment booking

Our site links to external services, for example to book an appointment via Calendly. Nothing is embedded on our pages and no data is transmitted until you actively follow such a link. Once you do, the privacy policy of the respective provider applies.

8. Storage on our own infrastructure

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future.

To exercise these rights, an informal message to info@itpark-uzb.de is sufficient.

10. Right to lodge a complaint

If you believe that we process your data unlawfully, you may lodge a complaint with a supervisory authority. The authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61, 10555 Berlin
Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de