Privacy policy

Last updated: November 2026

This is a translation for your convenience. Only the German version (Datenschutzerklärung) is legally binding.

Privacy at a glance

This policy applies to the websites civicspectra.com and meinungsplatz.jetzt in German and English. The processing of conversation data in MeinungsPlatz formats is not part of this website. We provide separate information about it before you take part.

Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

No data protection officer has currently been appointed under Art. 37 GDPR and § 38 BDSG, as the legal requirements are not met.

Hosting and server log files

This website is hosted by the following provider:

Each time the website is accessed, the server automatically records information transmitted by your browser (server log files):

• IP address of the requesting device
• date and time of access
• page or file accessed and amount of data transferred
• referrer URL (the previously visited page)
• browser and operating system used
• HTTP status code

Purpose: delivering the website, ensuring secure and stable operation, detecting attacks and errors.
Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is the technically error-free and secure provision of the website.
Retention: IP addresses in the log files are shortened (pseudonymised) or the log files are deleted after 7 days, unless they are needed longer to investigate a security incident.

We have a data processing agreement with the hosting provider pursuant to Art. 28 GDPR. The servers are located in data centres in Germany and processing takes place exclusively in the EU; hosting does not involve any transfer to countries outside the EU.

SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the lock symbol in your browser’s address bar.

Cookies and consent

This website does not set any cookies. On your first visit, we ask whether external content (currently only the Google Maps map) may be loaded. Until you decide, no external content is loaded.

We store your choice in your browser’s local storage under the name cs-consent-v1. Only your choice and the time are stored. This information does not leave your device and is not transmitted to us.

Legal basis: § 25 (2) no. 2 TDDDG (strictly necessary to respect your decision) and Art. 6 (1) (c) GDPR in conjunction with Art. 7 (1) GDPR (proof of consent).
Retention: until you delete your browser data for this website.

Withdrawal: you can change or withdraw your consent at any time with effect for the future: open cookie settings. The link is also at the bottom of every page.

Contact by email and contact forms

The “Interested in a partnership” form and the “Open email with template” link do not transmit any data to our server. Your input is assembled into an email text in your browser only, which then opens in your own email program. We only receive the data when you send this email yourself.

When you email us, we process the information it contains, for example salutation, title, name, organisation, position, email address, phone number, phone availability, desired type of partnership and your message.

Purpose: handling your request and contacting you, including by phone at the times you specify.
Legal basis: Art. 6 (1) (b) GDPR where your request aims at a collaboration or contract; otherwise Art. 6 (1) (f) GDPR (our legitimate interest in answering requests).
Retention: we delete your data once your request has been fully dealt with, unless statutory retention obligations apply (e.g. under commercial or tax law, up to 6 or 10 years).

Emails to sjm@ekairos.net are processed by the following email provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (Microsoft 365, Exchange Online). We have a data processing agreement with Microsoft pursuant to Art. 28 GDPR (Microsoft Products and Services Data Protection Addendum). A transfer to Microsoft Corporation in the USA cannot be ruled out; Microsoft Corporation is certified under the EU-US Data Privacy Framework, and the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR). More information: privacy.microsoft.com.

Please note: unencrypted emails can in principle be read by third parties in transit. Please do not send us particularly sensitive information by email.

Invitation to the event on 17 December 2026

The “Request an invitation” form also only opens your email program with a prepared text. With your email, we receive your name (optional) and your email address.

Purpose: sending the invitation and organising the event at Café Luitpold.
Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures at your request).
Retention: we delete the data no later than 3 months after the event. If you would like to hear about future events, we will ask for your consent separately.

Photos and videos: Photos and videos may be taken at the event to report on the event and our work, for example on our website and on social networks such as LinkedIn. We point this out on site. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is documentation and public relations. If you do not want to be photographed or filmed, please tell the team on site or write to us. You can object to the processing at any time under Art. 21 GDPR; we only publish recordings in which you are clearly the focus with your consent (Art. 6 (1) (a) GDPR).

Google Maps

On the MeinungsPlatz page you can display a map of the venue. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

The map is only loaded if you allow “External media” in the cookie settings or click “Load map”. Only then does your browser connect to Google’s servers. In particular, your IP address, date and time, the page visited and information about your browser are transmitted. Google may use cookies or similar technologies. If you are logged into a Google account, Google can associate the visit with your account.

Legal basis: your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can withdraw it at any time in the cookie settings; the map will then no longer be loaded.
Transfer to third countries: data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission’s adequacy decision (Art. 45 GDPR).

More information: Google privacy policy.

External links

This website contains simple links, for example to the website of Café Luitpold and to the address in Google Maps. With a simple link, data is only transmitted to the other provider when you click it. From then on, that provider’s privacy policy applies.

Fonts

We use the typeface “Schibsted Grotesk”. It is hosted on our own server. No connection is made to Google Fonts or any other font service.

Your rights

You have the following rights regarding your personal data:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to withdraw consent with effect for the future (Art. 7 (3) GDPR)

An informal message to sjm@ekairos.net is sufficient for all requests.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, place of work or the place of the alleged infringement. The authority responsible for us is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

Further information

Obligation to provide data

You are not obliged to provide us with personal data. Without your contact details, however, we cannot answer your request. Server log files are technically necessary to use the website.

No automated decision-making

We do not use automated decision-making, including profiling, under Art. 22 GDPR.

Changes to this policy

We update this privacy policy when the website or legal requirements change, for example when new services are added. The version published here applies.