back home

Privacy Policy

This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data in connection with the use of our website.

I. Data Controller

Internationales Design Zentrum Berlin e. V.
Hagelberger Straße 52
10965 Berlin
Germany

Board Members: Prof. Karsten Henze & Prof. Pelin Celik
Registered Association: District Court (Amtsgericht) Charlottenburg, VR 4034 B
Phone: +49 (0)30 61 62 321-0
E-mail: idz@idz.de

II. Data Protection Contact

For any questions regarding data protection, please contact us at:  idz@idz.de

III. General Information on Data Processing

1. Scope of Processing Personal Data

We process personal data only to the extent necessary to provide a functional website and our content and services.

2. Legal Basis for Processing

Where we obtain the consent of a data subject, the processing is based on Article 6(1)(a) GDPR.

Where processing is necessary for the performance of a contract or for pre-contractual measures, it is based on Article 6(1)(b) GDPR.

Where processing is necessary for compliance with a legal obligation, it is based on Article 6(1)(c) GDPR.

Where processing is necessary for the purposes of legitimate interests pursued by us and no overriding interests of the data subject exist, it is based on Article 6(1)(f) GDPR.

3. Storage Period

Personal data will be deleted as soon as the purpose for which it was collected no longer applies and no statutory retention obligations require further storage.

Membership application data is retained for up to twelve (12) months following the conclusion of the application process if no membership is established.

Membership-related data is stored for the duration of the membership and thereafter in accordance with applicable statutory retention obligations, in particular tax and commercial law retention periods.

4. Recipients of Personal Data

We use service providers who support us in operating our website and delivering our services. Where these providers process personal data on our behalf, this is done in accordance with Article 28 GDPR (data processing agreement).

In particular, we use:

  • Webflow, Inc. for website hosting and content delivery;
  • Brevo GmbH for newsletter distribution;
  • Make.com (Celonis, Inc.) for the automated transfer and processing of membership application data between connected systems;
  • easyVerein for membership administration and member management.

These service providers process personal data only to the extent necessary for the provision of their respective services and on the basis of appropriate contractual safeguards.

5. Social Media Profiles

We maintain profiles on social media platforms to provide information about our activities and to communicate with interested users. The privacy policies of the respective platform operators also apply to the processing of personal data on these platforms.

IV. Hosting and Content Delivery

This website is hosted by:

Webflow, Inc.
398 11th Street, 2nd Floor
San Francisco, CA 94103
USA

When visiting our website, personal data such as IP addresses, browser information, device information, and log data may be processed by Webflow to ensure the operation, security, and delivery of the website. Webflow acts as our processor pursuant to Article 28 GDPR.

As Webflow is headquartered in the United States, personal data may be transferred to servers located outside the European Union. Such transfers are carried out on the basis of appropriate safeguards, including the EU Standard Contractual Clauses and other applicable transfer mechanisms provided by Webflow.

Further information can be found in Webflow’s Privacy Policy and Data Processing Addendum:

https://webflow.com/legal/privacy
https://webflow.com/legal/dpa

V. Provision of the Website and Server Log Files

When accessing our website, information is automatically transmitted by your browser to our servers. This information is temporarily stored in so-called server log files.

The following data may be collected:

  • Browser type and browser version
  • Operating system used
  • IP address
  • Date and time of access
  • Referrer URL
  • Pages visited
  • Amount of data transferred

The processing is carried out to ensure the secure operation of the website, for technical administration, and for troubleshooting purposes on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR.

VI. Cookies

Our website uses cookies. Cookies are small text files that are stored on your device.

In addition, with your consent, we use analytics technologies and cookies to understand how visitors use our website and to improve our services. These technologies are only activated after consent has been provided via our consent management platform. The legal basis is Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time with future effect.

You can configure your browser to notify you when cookies are set, allow cookies only in individual cases, or prevent their storage entirely. Disabling cookies may limit the functionality of this website.

VII. Newsletter

You may subscribe to our newsletter through our website. For this purpose, we process the data you provide, in particular your e-mail address and, where applicable, your name.

We use the following service provider to send our newsletter:

Brevo GmbH
Köpenicker Straße 126
10179 Berlin
Germany

Newsletter registration is carried out using a double opt-in procedure. After registration, you will receive an e-mail asking you to confirm your subscription.

To document a valid subscription, we store the time of registration, the time of confirmation, and the IP address used during the process.

The legal basis for processing is your consent pursuant to Article 6(1)(a) GDPR.

You may withdraw your consent at any time by using the unsubscribe link included in every newsletter or by contacting us via email.

Further information can be found in Brevo's Privacy Policy: https://www.brevo.com/legal/privacypolicy/

VIII. Contact by E-mail

If you contact us by e-mail, the personal data transmitted will be processed solely for the purpose of handling your inquiry.

The legal basis is Article 6(1)(f) GDPR. If the inquiry aims at the conclusion or performance of a contract, the additional legal basis is Article 6(1)(b) GDPR.

The data will be deleted as soon as your inquiry has been fully processed and no statutory retention obligations apply.

IX. Membership Applications and Uploaded Content

When you submit a membership application via our website, we process the personal data provided in the application form. This may include:

  • Name and contact details
  • Professional and company information
  • Membership category
  • Billing information
  • Information voluntarily provided in application fields
  • Uploaded profile photos
  • Uploaded company logos and other supporting materials

The data is processed for the purpose of reviewing, administering, and managing membership applications and memberships.

For the administration of membership applications and memberships, submitted data may be transferred to and processed within easyVerein. In addition, we use Make.com to automate the secure transfer of application data between our website and membership management systems.

The legal basis for processing is Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures) and, where applicable, Article 6(1)(f) GDPR (legitimate interest in administering our membership network).

Uploaded profile photos and logos may be used in connection with membership administration and, where separately agreed or requested by the member, for publication in member directories, event materials, or communication formats.

Application data is stored for the duration of the application process. If membership is granted, the data will be retained for the duration of the membership and thereafter in accordance with statutory retention obligations.

If an application is rejected or withdrawn, the data will generally be deleted no later than twelve (12) months after completion of the application process unless legal obligations require longer retention.

X. Microsoft Clarity

We use Microsoft Clarity, a web analytics and user experience service provided by:

Microsoft Corporation
One Microsoft Way
Redmond, WA 98052
USA

Microsoft Clarity helps us understand how visitors interact with our website through aggregated analytics, heatmaps, and session recordings. Information collected may include page views, clicks, scrolling behavior, device information, browser information, and usage data. Personal information entered into form fields is masked by default

Microsoft Clarity uses cookies and similar technologies. The service is activated only after the user has provided consent through our consent management platform.

The legal basis for processing is Article 6(1)(a) GDPR and Section 25(1) TDDDG.

Consent may be withdrawn at any time with future effect via our cookie settings.

Data processing may involve transfers to the United States. Microsoft provides appropriate safeguards for international data transfers.‍Further information:

https://clarity.microsoft.com/privacy

XI. Rights of Data Subjects

Under the GDPR, you have the following rights in particular:

  • Right of access (Article 15 GDPR)
  • Right to rectification (Article 16 GDPR)
  • Right to erasure (Article 17 GDPR)
  • Right to restriction of processing (Article 18 GDPR)
  • Right to data portability (Article 20 GDPR)
  • Right to object to certain processing activities (Article 21 GDPR)
  • Right to withdraw consent at any time (Article 7(3) GDPR)
  • Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

‍

Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

The competent supervisory authority for Berlin is:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59-61
10555 Berlin
Germany

https://www.datenschutz-berlin.de

Last updated: November 2026