Privacy policy

What this website doesn’t do

We do not measure who you are. There is no analytics, no tracking pixel, no advertising network and no profile built across your visits.

There are no cookies either. Two values sit in your browser storage, both only after you have decided something, and neither ever leaves your device.

Who is responsible

The controller under the GDPR is the party named in the imprint. everypreneurs is a venture and not a company, so what stands there is a name and an address a letter reaches.

For questions about data protection, write to that same address. No data protection officer is appointed, because the conditions requiring one are not met.

Delivering the website

This website sits as finished files at bunny.net, operated by BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia. The files are stored in Falkenstein, Germany, and delivered only from locations inside the EU.

To get a page to you, bunny.net processes technically necessary connection data. That includes your IP address, the address requested, the time and your browser identification.

The legal basis is our legitimate interest in delivering the site reliably and securely, Art. 6(1)(f) GDPR. No website can be delivered without this processing.

Newsletter

For the newsletter we pass your e-mail address to Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. Brevo belongs to Brevo SAS in Paris and sends the newsletter on our behalf.

We use double opt-in: after you submit, you receive an e-mail with a link, and only your click on that link puts you on the list. Until then your address is not subscribed.

Submitting the form discloses your IP address to Brevo, because the form posts directly to them. The notice under the field says so before you type anything.

The legal basis is your consent, Art. 6(1)(a) GDPR. We keep the address until you unsubscribe, and the link for that is in every newsletter.

Donations

The donation form comes from bcause GmbH, Meinekestraße 26, 10719 Berlin, Germany. It is loaded only when you ask for it.

Before that nothing is fetched from bcause, and bcause learns nothing about your visit. After the click, whatever you enter into the form falls under bcause’s own privacy policy.

The legal basis for loading it is your consent, Art. 6(1)(a) GDPR. bcause also issues the donation receipt and is the controller for the payment data.

Forms

Four forms on this website go to Formward: the questionnaire, the feedback after unsubscribing from the newsletter, the follow-up question on the thank-you page, and the contact form. Formward is operated by EGF Fastighetsservice AB, registration number 559501-3573, 106 31 Stockholm, Sweden.

Formward processes the entries on our behalf. The data sits in Sweden, and notifications are sent through providers inside the EU. Your IP address is not stored there in the clear, only as a checksum.

What is transmitted depends on the form. The questionnaire, the unsubscribe feedback and the follow-up on the thank-you page ask for neither your name nor your address. In the contact form you give your name, your e-mail address and your message; we need the address in order to reply.

The legal basis for the contact form is your consent, Art. 6(1)(a) GDPR. You give it with the checkbox above the send button, and you can withdraw it at any time by writing to us at the address under “Contact”. Withdrawal takes effect from the moment it reaches us.

We keep your enquiry for as long as we are dealing with it, and after that for as long as the law requires. Once both are over, we delete it. The answers from the other three forms are evaluated in aggregate; they hang on no account and no name.

Your account

You don’t need a password for an account. Signing in runs through Hanko: you enter your e-mail address and confirm with a code from the mail or with a passkey. Hanko is Hanko GmbH, Am Sandtorkai 27, 20457 Hamburg, Germany; they run the sign-in on our behalf and store your address and your sign-in methods for it.

On our side, a row appears with an identifier that Hanko issues. That is what links the two, not your address: you stay the same person if you change your address.

We also store what you enter in your account: first name, last name and how far along you are with your business. Those three are required, because the business portrait doesn’t work without them. You can change them at any time under “Me”.

We further record when you agreed to this policy and to which version. Without that note we couldn’t say later what you agreed to. The legal basis is Art. 6(1)(b) GDPR: without an account there is no thing you came for.

Your first and last name appear in public with the business portraits you belong to. That is stated on the page where you enter them, above the fields.

Inside everypreneurs, only the people who operate our back office see accounts. They see who has an account and what is public; the two texts in a portrait that are shown to signed-in people only stay closed to them as well.

To delete your account, write to us. The address is under “Contact”.

Your business portrait

When you are signed in, you can describe a business. We store what you enter: name, the address the portrait sits at, legal form, field, city and state, your website, a text about the business, a text about what has helped so far, a text about where it is stuck right now, and how you tag those two texts against our four core products.

Until you press “Publish”, nobody sees the entry except you and the people who belong to the same business.

Once you do, the portrait stands at everypreneurs.com/business/ and your address: name, legal form, field, city, state, website, logo, photos, the text about the business, and your name and photo. The other two texts stay visible to signed-in people only. You can unpublish at any time, and the entry is then yours alone again.

The legal basis is your consent, Art. 6(1)(a) GDPR. You decide whether to enter anything, what it says and whether it becomes public.

The data sits in a PostgreSQL database at Scalingo SAS, 13 rue Jacques Peirotes, 67000 Strasbourg, France. The servers are in Paris, run by 3DS Outscale. We keep your entry for as long as it exists; to delete it, write to us at the address under “Contact”.

Photos

You can upload a photo of yourself and images of your business: a logo and up to three photos. All of them are optional, and all of them are shown in public once your portrait is published.

Before we store an image, we remove what a camera writes into it: the device, the time it was taken and above all the coordinates of the place. A photo somebody takes at home would otherwise give away their home address. The colour profile stays, because it says something about colours and nothing about you.

The images sit with BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia. They are delivered through TwicPics SAS, 5 rue de Charonne, 75011 Paris, France, which resizes them on the way to the size they appear in. Both work for us and may not use the images for anything else.

The legal basis is your consent, Art. 6(1)(a) GDPR. You can remove any image at any time, and the file goes with it.

The donation figure on this page

The amount shown on the start page is read from bcause. A small program at our own address data.everypreneurs.com does that, running in the data centre and not in your browser.

So your browser asks us, and we ask bcause. Looking at a number is not a decision to donate, and bcause learns nothing about it.

Maps

The country pages carry a map from Toursprung GmbH, Mariahilfer Straße 93/20, 1060 Vienna, Austria, under the name Maptoolkit. It, too, loads only after you click.

The legal basis is your consent, Art. 6(1)(a) GDPR. Nothing is fetched from there before the click.

Statistics

We count page views with Pirsch Analytics, a service of Emvi Software GmbH, Hauptstraße 41, 92637 Weiden in der Oberpfalz, Germany.

Pirsch sets no cookie, stores nothing on your device, and issues no identifier that ties one visit to the next. Your IP address is turned into a hash that changes daily, on their server, and is not stored. The data stays in Germany.

The legal basis is our legitimate interest, Art. 6(1)(f) GDPR: we want to know which pages are read so we can make them better. Because Pirsch stores nothing on your device and does not recognise you, that outweighs the intrusion.

That also covers showing the people behind a business portrait, in their account, how often their own portrait page was opened. Those are the same numbers as above, just for that one page: nothing about individual visits and nothing that would let anyone be recognised.

You can object at any time, Art. 21 GDPR: choose “Don’t count me” in the privacy settings in the footer. From the next page view on, nothing is loaded and nothing is counted.

Booking a time

On the “Community formats” page you can book a time. The calendar comes from Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA.

Unlike the map and the donation form, there is no gate in front of it: the page asks Cal.com for the next free slot as soon as you open it, and loads the calendar directly. Your IP address is disclosed to Cal.com in the process, even if you book nothing.

The legal basis is our legitimate interest in being reachable for appointments, Art. 6(1)(f) GDPR. Whatever you enter into the calendar in order to book is processed by Cal.com as its own controller, under their privacy policy.

What is stored in your browser

Two values sit in your browser storage. Both are written only once you have decided something, and neither is transmitted.

• everypreneurs.consent.v1: your answer to the privacy settings. Recording a decision does not itself require consent.
• everypreneurs.lang: the language you picked. A detected language is read on arrival and never stored.

Contact

If you write to us, we process your message and your address in order to answer it. The legal basis is our legitimate interest in replying, Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR where the matter concerns a contract.

The form on the contact page currently sends nothing. It stays inert until there is somewhere that can receive messages safely, and the page says so.

Your rights

You can ask at any time what data we process about you, and request its correction or deletion. You can also have the processing restricted, object to it, and receive your data in a portable format.

You can withdraw consent at any time with effect for the future, without affecting the lawfulness of what came before. For the newsletter, the unsubscribe link in every newsletter is enough.

You can also complain to a supervisory authority. The competent one is the Berlin Commissioner for Data Protection and Freedom of Information.

There is no automated decision-making in individual cases and no profiling.