Data Policy

1. Controller

Justice Collective e.V.

c/o ReachOut
Heinrich-Heine-Str. 15
10179 Berlin
Germany

Authorized representative: Mitali Nagrecha

2. General Information

This privacy policy applies to the processing of personal data in connection with our website and the functions and services offered on it.

In particular, it informs you about which personal data is processed when you use our website, for which purposes this is done, on which legal basis the processing takes place, to which recipients data may be transferred, how long data is stored, and which rights you have as a data subject.

Personal data is any information relating to an identified or identifiable natural person.

We process personal data exclusively within the scope of the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR).

Insofar as we process personal data on the basis of Art. 6 (1) (f) GDPR, our legitimate interest lies in particular in the secure, stable, and functional provision of our online offering as well as its improvement in line with demand.

Processing of Member Data

This privacy policy concerns in particular the processing of personal data in connection with our website.

The processing of personal data of association members — in particular in connection with the establishment and administration of membership, member management, membership fee administration, association communication, event organization, and the fulfillment of legal obligations — may be subject to additional data protection information.

For such processing operations, we inform affected members separately about the relevant purposes, data categories, legal bases, recipients, storage periods, and data subject rights.

3. Hosting and Content Delivery Networks (CDN)

Our website is a custom-developed application based on Next.js and React and is hosted via Vercel.

When you access the website, technical access data is processed, in particular your IP address, the date and time of access, and information about your browser, operating system, and device. The processing takes place on the basis of Art. 6 (1) (f) GDPR to ensure the secure, stable, and functional provision of the website.

For content management and the delivery of images, we use Sanity. In this context, technical access data in particular may be transmitted to the infrastructure used by Sanity.

Further information:

Where required, we have concluded data processing agreements with the respective service providers.

4. Contact Form

You can contact us via a contact form on our website. In doing so, we process the data you enter, in particular your name, email address, subject, and message.

The data is transmitted to our email inbox via SendGrid, a service provided by Twilio.

Insofar as your inquiry is aimed at the conclusion or performance of a contract with us, the processing is based on Art. 6 (1) (b) GDPR. For other inquiries, the processing is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in processing and responding to inquiries.

The fields marked as required in the contact form are necessary to process your inquiry. Any further information is provided voluntarily.

We store the data only for as long as is necessary to process the inquiry or as long as statutory retention or limitation periods apply.

Further information on data protection at Twilio/SendGrid:

5. Cookies

Our website uses the cookie NEXT_LOCALE.

It stores the language setting you have selected for the website (German or English) and serves exclusively to provide the language function.

The cookie is stored for 365 days and is not used for advertising or tracking purposes.

Under our current technical configuration, we do not use any further cookies for advertising or tracking purposes.

6. Vercel Analytics and Speed Insights

We use Vercel Analytics and Vercel Speed Insights to analyze the usage and technical performance of our website and to improve the website.

Under our current technical configuration, these services are used without cookies. In this context, technical information about page views, browser, operating system, device, and performance metrics in particular may be processed.

The processing takes place on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in analyzing and improving the usage, functionality, and technical performance of our website.

Further information:

7. Recipients and International Data Transfers

In the course of operating our website, personal data may be processed by the following service providers:

Vercel – hosting and technical provision of the website;
Sanity – content management and delivery of images;
Twilio / SendGrid – transmission of messages from the contact form;
Vercel Analytics / Speed Insights – website analysis and technical performance measurement.

The respective service providers process personal data only insofar as this is necessary for the stated purposes and a corresponding legal basis under data protection law exists.

Insofar as service providers process personal data on our behalf, this is done on the basis of corresponding agreements pursuant to Art. 28 GDPR.

Some service providers may process personal data outside the European Economic Area (EEA). Insofar as personal data is transferred to a third country, this takes place under the conditions of Art. 44 et seq. GDPR, in particular on the basis of an adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses.

Further information can be found in the privacy information of the respective providers:

8. Rights of Data Subjects

Subject to the statutory requirements, you have in particular the following rights:

access (Art. 15 GDPR),
rectification (Art. 16 GDPR),
erasure (Art. 17 GDPR),
restriction of processing (Art. 18 GDPR),
data portability (Art. 20 GDPR),
objection to processing (Art. 21 GDPR).

If the processing is based on consent, you may withdraw it at any time with effect for the future.

To exercise your rights, you can contact the controller named above at any time:

info@justice-collective.org

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.

To exercise your rights or if you have any questions about data protection, you can contact us at the following email address: