Privacy Policy – Platform Coops eG

Protecting your personal data is especially important to us. This website is deliberately built to be data-minimal: it runs on our own infrastructure, does without tracking services such as Google Analytics (for data-minimal, cookieless reach measurement we use self-hosted Plausible, see below), loads no fonts from external servers (e.g. Google Fonts) and sets no tracking cookies by default. For individual features we do embed external services — in particular the sending of our newsletter via Brevo, the display of our Mastodon feed, and event registration via Eventbrite, which is included as a linked external service. We inform you about these services in the relevant sections below. In the following we inform you, in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), which data we process for which purpose.

Controller

The controller for the processing of data on this website is:

Platform Coops eG Torstraße 105–107, 10119 Berlin, Germany Represented by the executive board: Michaela Kagel, Claudia Henke, Andreas Arnold Email: hallo@platformcoops.de

You can find further details in our Imprint.

Hosting and delivery of the website

This website is a static website and is operated on Platform Coops eG's own infrastructure in Germany (delivered via the Caddy web server). There is no data processing on behalf of an external hosting provider.

To deliver the pages technically, your IP address is processed — this is technically necessary each time a website is accessed so that the server can send the content to your browser. The web server keeps no permanent access logs (log files) containing personal data. This technical data is not combined with other data sources; for data-minimal reach measurement we use only the cookieless, self-hosted Plausible (see "Reach measurement" below). The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR).

Cookies and consent

Our website sets no cookies of its own and uses no cross-device tracking technologies. For data-minimal reach measurement we use the cookieless Plausible (see the "Reach measurement" section).

Your choice in the cookie notice (consent or refusal) is stored solely locally in your browser (localStorage) so that the notice does not reappear on every visit. No personal data is transmitted to us in the process.

Content requiring consent — the comment function as well as embedded external media (e.g. videos) — is only loaded after you have given your consent in the cookie notice. Without your consent no such content is loaded and no connection to third parties is established. You can withdraw or adjust your consent at any time via the "Cookie settings" link in the page footer. The legal basis is your consent (Art. 6(1)(a) GDPR).

Reach measurement (Plausible, self-hosted)

To analyse website usage in a data-minimal way we use Plausible Analytics – open-source software that we run ourselves on our own infrastructure. Plausible works without cookies and without cross-device recognition. No personal profiles are created and no data is shared with third parties; the analysis is fully aggregated (e.g. page views, referrer, country, device type). Your IP address is only processed briefly, using a daily-rotating, non-reversible counter to roughly distinguish repeat visits; it is not stored. The legal basis is our legitimate interest in data-minimal reach measurement (Art. 6(1)(f) GDPR). As no cookies are set and no personal data is stored, no consent is required.

Contacting us (contact form and email)

When you contact us via the contact form or by email, your email program opens and the details you enter (e.g. name, email address, message) are sent to us as an email. This data is not stored on the web server; processing takes place within the scope of ordinary email correspondence.

We use this data solely to handle your enquiry. The legal basis is the initiation or performance of a contract (Art. 6(1)(b) GDPR) or our legitimate interest in responding to your enquiry (Art. 6(1)(f) GDPR). The data is deleted as soon as your enquiry has been fully dealt with, provided no statutory retention obligations apply.

Appointment booking (initial consultation)

To book an initial consultation appointment we offer a selection tool on our website. When you choose an appointment and submit the request, your email program opens — as with the contact form — with a prepared appointment request that you send to us. No external appointment booking service is used, and no appointment data is stored on the web server.

We process the data transmitted by email (e.g. name, email address, requested appointment) solely to arrange and carry out the consultation appointment. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures).

To send our newsletter we use Brevo, a service of Sendinblue GmbH, Cologne (Germany). Brevo processes the newsletter data on our behalf as a processor; for this purpose we have concluded a data processing agreement with Brevo pursuant to Art. 28 GDPR.

Registration takes place using the double opt-in procedure: after you sign up, we send you an email containing a confirmation link. Only after you click this link is your email address added to the distribution list. This ensures that no one can register using someone else's email address.

To handle the sending, your email address is transmitted to Brevo and stored there. In addition, the date, time and IP address of your registration and confirmation are logged; these serve solely as proof of your consent. We use the data exclusively to send the newsletter and do not pass it on to any further third parties — apart from the transmission to Brevo for the purpose of sending. You can find further information on data processing by Brevo in Brevo's privacy policy at https://www.brevo.com/legal/privacypolicy/.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe from the newsletter at any time — via the unsubscribe link at the end of every newsletter email or by sending us an informal message. After you unsubscribe, the data stored in connection with the newsletter is deleted, unless it is needed as proof of consent previously given.

Comment function

For comments below blog posts we use Remark42, open-source comment software that we operate ourselves on our own infrastructure. Commenting is possible anonymously. As described above, the comment function is only loaded after you have given your consent in the cookie notice.

When you write a comment, the content you enter as well as technical data (e.g. timestamp) are stored on our server and displayed publicly. The legal basis is your consent (Art. 6(1)(a) GDPR) as well as our legitimate interest in exchange with the community (Art. 6(1)(f) GDPR). You can request the deletion of your comments from us at any time.

Event registration (Eventbrite)

Registration for our events takes place via the external service Eventbrite (Eventbrite, Inc., 95 Third Street, 2nd Floor, San Francisco, CA 94103, USA). We include Eventbrite solely as a linked external service: no Eventbrite scripts are loaded on our own pages. Only when you follow the registration link do you leave our website and reach Eventbrite.

The registration data you enter there is processed by Eventbrite under its own responsibility. We have no influence on the scope and purpose of this processing; Eventbrite's privacy policy applies. Eventbrite is a US company, so this may involve a transfer of personal data to the USA (a third country). The legal basis for the link is our legitimate interest in simple event organisation (Art. 6(1)(f) GDPR); the further processing by Eventbrite is based on its own legal bases and appropriate safeguards (e.g. EU standard contractual clauses).

Mastodon feed

On individual pages we display recent posts from our profile in the Fediverse. These are loaded from our own Mastodon instance at social.platformcoop.de, which we operate ourselves. When the feed is loaded, a connection to this server is established; for technical reasons your IP address is processed in the process. No transfer to commercial social networks takes place. The legal basis is our legitimate interest in displaying our public posts (Art. 6(1)(f) GDPR).

Recipients and transfer to third countries

The services operated on our own infrastructure (website, comments, Mastodon feed) process data exclusively in Germany. For sending the newsletter we use Brevo (Sendinblue GmbH), a processor based in Germany.

A transfer of personal data to a third country outside the EU/EEA may take place if you register for an event via the linked external service Eventbrite (Eventbrite, Inc., USA). This processing takes place under Eventbrite's own responsibility; for details see the section "Event registration (Eventbrite)".

Storage duration

We store personal data only for as long as is necessary for the respective purposes or as required by statutory retention periods. After that, the data is deleted.

Your rights under the General Data Protection Regulation

Under the GDPR you generally have the following rights:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure ("right to be forgotten", Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)
Right not to be subject to a decision based solely on automated processing — including profiling (Art. 22 GDPR)

You can withdraw any consent given at any time with effect for the future — an informal email to us is sufficient.

Right to lodge a complaint with a supervisory authority

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit Alt-Moabit 59–61, 10555 Berlin, Germany

Encryption (SSL/TLS)

This website is delivered exclusively in encrypted form via HTTPS (SSL/TLS). This means that the data transmitted between your browser and our server cannot be read by third parties.

Last updated: September 2026