Privacy Policy

1. Controllers

Responsible for data processing on this website are:

Niklas Schmucker Bürgerstr. 37 69124 Heidelberg, Germany

Marvin Baum Europaplatz 14 69115 Heidelberg, Germany

Email: kontakt@proud.space

Both operators are jointly responsible for the processing described here. You can contact the email address above with any questions about your data.

2. The essentials at a glance

– No cookies. This website sets no cookies and stores nothing on your device. That is why there is no cookie banner here. – No third-party services. No external analytics tools, no advertising SDKs, no social media plugins, no externally loaded fonts or scripts. Everything this website loads comes from our own servers. – No selling of data. We do not sell data and do not pass it on for advertising purposes. – Data stays in Europe. Our entire infrastructure runs on servers in Germany with European contractual partners, with whom data processing agreements under Art. 28 GDPR are in place. – Data collection only where necessary. We process personal data in two cases only: technically necessary server log files when you visit the site, and your email address if you voluntarily sign up for our newsletter.

You can find the details in the following sections.

3. Hosting and server log files

3.1 Hosting infrastructure

This website is served as a static website via the infrastructure of Amazon Web Services EMEA SARL (38 Avenue John F. Kennedy, L-1855 Luxembourg). It is delivered from the AWS Frankfurt region (eu-central-1), i.e. from servers in Germany. A data processing agreement under Art. 28 GDPR is in place with AWS.

Parts of our infrastructure – in particular our newsletter system and our mail server – are operated by us on servers of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany). A data processing agreement under Art. 28 GDPR is in place with Hetzner as well.

3.2 Server log files

When you visit this website, information transmitted by your browser is automatically recorded in server log files. This includes:

– IP address of the requesting device – date and time of access – page or file accessed – amount of data transferred and HTTP status code – browser type and version – operating system used – referrer URL (the previously visited page)

This data is not combined with other data sources and is not used to identify you as a person. Processing is based on our legitimate interest (Art. 6(1)(f) GDPR) in the technical provision, stability and security of the website – for example to detect and defend against attacks and to analyze errors.

Storage period: server log files are automatically deleted after 7 days at the latest.

4. Newsletter and beta sign-up

4.1 What happens when you sign up

If you sign up for our newsletter or beta notification via the form on this website, we process your email address as well as the time of sign-up and confirmation and the IP address used. You can also voluntarily provide your first name and city and tick whether you’d like to hear about community news, events and updates – these details are optional and not required to sign up.

We use the so-called double opt-in procedure: after submitting the form, you receive an email with a confirmation link. Only when you click this link does your sign-up take effect and you receive our newsletter. Without confirmation, your sign-up is not activated. Logging the time of sign-up and confirmation as well as the IP address serves as proof of your consent.

4.2 How your data is processed

We do not use external newsletter providers. Processing runs entirely on our own infrastructure:

– The sign-up form transmits your details in encrypted form to an interface operated by us on our server at Hetzner in Germany. – Newsletter sign-ups are managed via the self-hosted open-source software Listmonk on our server at Hetzner in Germany. – Emails (confirmation email and newsletter) are sent via our own mail server at Hetzner and via the AWS email service (Amazon SES, Frankfurt region).

Your data therefore never leaves the infrastructure of our two processors AWS and Hetzner in Germany.

4.3 Legal basis, storage period and unsubscribing

Processing is based on your consent (Art. 6(1)(a) GDPR, Section 7(2) No. 2 UWG).

You can withdraw your consent at any time – via the unsubscribe link included in every newsletter email, or informally by emailing kontakt@proud.space. Withdrawal does not affect the lawfulness of processing carried out up to that point.

After unsubscribing, your email address is deleted from the mailing list. We retain the proof of your original consent (time of sign-up/confirmation, IP address) to the extent required, for as long as necessary to meet legal documentation obligations, and delete it afterwards.

5. Contacting us

If you write to us via the contact form on this website, we process the details you enter (name, email address, your message, and optionally company and phone number) in order to answer your inquiry. To prevent abuse, we additionally store a truncated IP address and technical metadata. If you contact us by email, we process the data you provide accordingly.

The legal basis is our legitimate interest in handling your inquiry (Art. 6(1)(f) GDPR) or Art. 6(1)(b) GDPR if your inquiry is aimed at concluding a contract.

Messages from the contact form are processed with our own form software on AWS (Frankfurt region); the notification to us is delivered via the AWS email service (Amazon SES, Frankfurt region). The form submission there is automatically deleted after 30 days. To protect against spam, the form uses a self-hosted, cookie-free bot check – no external captcha services are involved. Email traffic runs via our own mail server at Hetzner in Germany. We delete your inquiry once it has been fully handled and no statutory retention obligations apply.

6. No cookies, no third-party services

This website sets no cookies and uses no comparable technologies that store or read information on your device. Consent under Section 25 TDDDG is therefore not required – which is why you see no cookie banner here.

We do not embed any third-party services:

– no external analytics or tracking services – no advertising networks or advertising SDKs – no social media plugins – no externally loaded fonts (our fonts are hosted locally on our own servers) – no external content delivery networks for third-party scripts or content

No data is therefore transferred to third parties for analytics or advertising purposes when you visit this website.

7. Data sharing and transfers to third countries

Your personal data is not shared with third parties, except for the processors named in this policy (AWS and Hetzner), who process your data exclusively on our instructions and on the basis of data processing agreements under Art. 28 GDPR.

Processing takes place on servers in Germany. We do not transfer your data to countries outside the European Union or the European Economic Area.

8. Your rights

You have the following rights regarding your personal data:

– Access (Art. 15 GDPR): you can request information about which data we process about you. – Rectification (Art. 16 GDPR): you can request the correction of inaccurate data. – Erasure (Art. 17 GDPR): you can request the deletion of your data, provided no statutory retention obligations apply. – Restriction of processing (Art. 18 GDPR). – Data portability (Art. 20 GDPR): you can request that we hand over the data you provided to us in a structured, commonly used and machine-readable format. – Withdrawal of consent (Art. 7(3) GDPR): you can withdraw consent you have given – for example to receive the newsletter – at any time with effect for the future.

Right to object (Art. 21 GDPR): where we process your data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation.

To exercise your rights, an informal email to kontakt@proud.space is sufficient.

Right to lodge a complaint: you also have the right to complain to a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg Lautenschlagerstraße 20 70173 Stuttgart, Germany https://www.baden-wuerttemberg.datenschutz.de

9. Data security

This website is delivered exclusively over an encrypted connection (TLS/HTTPS). Your newsletter sign-up is also transmitted in encrypted form. In addition, we take technical and organizational measures to protect your data against loss, misuse and unauthorized access, and we continuously adapt these measures to the state of the art.

10. Validity and changes to this privacy policy

This privacy policy is currently valid (last updated: July 2026). As we develop the website further or legal requirements change, it may become necessary to amend this policy. You can always find the current version on this page.