Privacy Policy

Azurit Foundation gGmbH (“we,” “us,” “our”) is the controller within the meaning of Art. 4 No. 7 GDPR for the processing of personal data described in this policy.

Controller
Azurit Foundation gGmbH
Ohmstraße 5, 80802 München, Germany
hello@azuritfoundation.org

Data protection contact: For questions about this policy or your data, contact us at hello@azuritfoundation.org. Azurit Foundation gGmbH is not required to appoint a Data Protection Officer under § 38 BDSG, as we do not meet the applicable thresholds.

1. What data we collect

• Data you provide directly (e.g., contacting us, applying for a grant, subscribing to our newsletter): name, email, and any details you choose to share.
• Data collected automatically via cookies (see Section 3): IP address, browser/device information, usage behavior.

2. Purposes and legal basis

Responding to inquiries — Art. 6(1)(b) or 6(1)(f) GDPR (contractual necessity / legitimate interest)
Newsletter (Mailchimp) — Art. 6(1)(a) GDPR (consent)
Website analytics (Google Analytics) — Art. 6(1)(a) GDPR (consent)
Legal/regulatory compliance — Art. 6(1)(c) GDPR
LinkedIn page interactions — Art. 6(1)(f) GDPR (legitimate interest in public presence and community communication)

3. Cookies and tracking

• Necessary cookies: required for the site to function; no consent needed.
• Analytics cookies (Google Analytics): only activated if you click “Accept” on our cookie banner. Processed by Google Ireland Ltd. / Google LLC (USA); IP anonymization enabled. Transfers to the US are safeguarded under the EU-U.S. Data Privacy Framework.

You can withdraw consent at any time via your cookie settings or browser settings.

4. Newsletter (Mailchimp)
If you subscribe, your email address (and name, if provided) is processed by The Rocket Science Group LLC (“Mailchimp”), USA, based on your consent (Art. 6(1)(a) GDPR). Mailchimp participates in the EU-U.S. Data Privacy Framework. You can unsubscribe at any time via the link in any newsletter email or by contacting us.

5. Social media (LinkedIn)
[as drafted above]

6. Recipients of your data

• Google Analytics (analytics, consent-based)
• Mailchimp / The Rocket Science Group LLC (newsletter, consent-based)
• LinkedIn (public interactions, as a separate controller)

We do not sell or rent your personal data to third parties.

7. International data transfers
Where data is transferred outside the EU/EEA (e.g., to the US via Google Analytics or Mailchimp), we rely on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework. Where this does not apply, we would use EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) as an alternative safeguard.

8. Profiling and automated decision-making
We do not use profiling or solely automated decision-making within the meaning of Art. 22 GDPR that produces legal effects concerning you or similarly significantly affects you.

9. Storage period

• Newsletter data: until you unsubscribe or your consent is otherwise withdrawn.
• Contact/inquiry data: for as long as needed to handle your request, generally no longer than 2 years.
• Data subject to statutory retention (e.g., tax/accounting law): per the applicable legal retention period.

10. Your rights
You have the right to access, rectify, erase, or restrict processing of your data, to data portability where applicable, and to object to processing based on legitimate interests (Art. 15–21 GDPR). Where processing is based on consent, you may withdraw it at any time without affecting past lawfulness.

You have the right to lodge a complaint with a supervisory authority, in particular the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), competent for our registered office in Munich.

11. Contact
Azurit Foundation gGmbH, Ohmstraße 5, 80802 München, Germany
hello@azuritfoundation.org

Last updated 21 July 2026