Privacy Policy
I. General / Content of this Privacy Policy Statement
In this privacy policy statement, we, FEMSTORY, inform you about the processing of personal data when using our website or web app. Personal data is information that relates to an identified or identifiable person. This includes, above all, information that makes it possible to draw conclusions about your identity, such as your name, telephone number, address or e-mail address. Statistical data that we collect, for example, when you visit our website and that cannot be associated with your person, is not covered by the term “personal data“. You may print or save this Privacy Policy by using the usual functionality of your browser.
​
II. Contact Person
Contact person and so-called person responsible for the processing of your personal data when visiting this website within the meaning of the EU General Data Protection Regulation (“GDPR”, also referred to as “DSGVO”) is FEMSTORY
E-Mail: contact.femstory@gmail.com
If you have any questions about privacy in connection with our products or the use of our website, you can always contact our data protection officer. Our data protection officer can be reached at the above mentioned email address as well as at the previously stated e-mail address (keyword: “for the attention of the data protection officer”).
​
III. Data Processing on our website
1. Access of our website / Access data
Every time we use our website, we collect the access data that your browser automatically transmits to enable you to visit the website. The access data includes in particular:
IP address of the requesting device; date and time of request; address of the website and the requesting website; information about the used browser and the operating system; online identifiers (e.g. device IDs, session IDs).
The data processing of this access data is necessary to enable the visit of the website and to ensure the long-term functionality and security of our systems. The access data is also temporarily stored in internal log files for the purposes described above to 14 / 8 provide statistical information on the use of our website in order to further develop our website in terms of the usage habits of our visitors (for example, as the share of mobile devices increases, with which the pages are retrieved) and to maintain our website in general administration. The legal basis of this is Art. 6 para. 1 sentence 1 lit. b DSGVO.
The information stored in the log files does not allow any direct inference to your person – in particular, we store the IP addresses only in a shortened, anonymized form. The log files are stored for thirty (30) days and are archived after subsequent anonymization.
2. Contact/Communication
You have different ways to get in touch with us. This includes the contact form or the possibility to send an e-mail. In this context, we process data solely for the purpose of communicating with you. The legal basis of this is Art. 6 para. 1 lit. b DSGVO. The data collected by us when using the contact form will be automatically deleted after full processing of your request, unless we still need your request for the fulfillment of contractual or legal obligations (see section “Storage period“).
3. Application
You have the opportunity to apply at FEMSTORY and enjoy the full functionality of our website. We have highlighted the data you have to provide by labelling them as mandatory fields. Without this data registration is not possible. The legal basis of the processing is Art. 6 para. 1 lit. b DSGVO.
4. Mentorship and Community
Regarding our mentoring program we collect the necessary data for the contract: first and last name; phone number date of birth; e-mail address; address; job and company. Also we have a profile book of all mentees and mentors for which we collect the following data and share it within the community: name, location, batch #, Linkedin URL, driving #, fields of expertise, sector expertise
and type of organisation. The legal basis of the processing is Art. 6 para. 1 sentence 1 lit. b DSGVO.
5. Newsletter
You can subscribe to our newsletters, where we keep you up to date with news about our events. To order our newsletters, we use the so-called double opt-in procedure, this means we will only send you newsletters by email if you confirm by clicking on a link in our notification e-mail that you are the owner of the e-mail address provided. If you confirm your email address, we will save your email address, your name, the time of registration and the IP address used for registration until you unsubscribe from the newsletter. The sole purpose of the storage is to send you the newsletter and to prove your registration. You can unsubscribe from the newsletter at any time. A corresponding unsubscribe link can be found in every newsletter. A message to the above or in the newsletter specified contact information (e.g. by e-mail or letter) is of course also sufficient. The legal basis of the processing is your consent acc. Art. 6 para. 1 lit. a GDPR. In our newsletters, we use commercially available technologies that measure the interaction with the newsletters (e.g. opening the e-mail, clicked links). We use this data in pseudonymous form for general statistical evaluations as well as for the optimization and further development of our content and customer communication. This is done with the help of small graphics that are embedded 14 / 9 in the newsletter (so-called pixels). The data are collected exclusively pseudonymized and are not linked with your other personal information. The legal basis for this is your consent acc. Art. 6 para. 1 lit. a GDPR. Through our newsletter, we want to share content relevant to our members and better understand what readers are actually interested in. If you do not want us to analyze the usage behavior, you can unsubscribe from the newsletter or deactivate graphics in your e-mail program by default. The data for the interaction with our newsletters are stored in pseudonymous form for thirty (30) days and are then completely anonymized.
​
IV. Transfer of Data
A transfer of the data collected by us takes place only if:
you are required under Art. 6 para. 1 sentence 1 lit. a DSGVO to have given your explicit consent;
disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO is required to assert, exercise or defend legal claims and there is no reason to believe that you have an overriding interest in not disclosing your data;
in accordance with Art. 6 para. 1 sentence 1 lit. c DSGVO you are required by law to disclose; or this is legally permissible and according to Art. 6 para. 1 sentence 1 lit. b DSGVO this is required for the execution of contractual relationships with you or for the execution of pre-contractual measures, which are carried out at your request.
Part of the data processing can be done by our service providers. In addition to the service providers mentioned in this privacy policy, this may include, but is not limited to, data centers that maintain our website and databases, IT service providers who maintain our systems, and consulting firms. If we pass on data to our service providers, they may only use the data to fulfill their tasks. The service providers were carefully selected and commissioned by us. They are contractually bound by our instructions, have appropriate technical and organizational measures to protect the rights of the persons concerned and are regularly monitored by us. In addition, it may be disclosed in connection with government inquiries, court orders and legal proceedings if required for the prosecution or enforcement.
​
V. Storage Period
As a matter of principle, we store personal data only as long as necessary to fulfill the contractual or legal obligations for which we have collected the data. Thereafter, we delete the data immediately, unless we need the data until the expiration of the statutory limitation period for evidence for civil claims or for statutory storage requirements. The deadlines for storing documents are two (2) to ten (10) years.
​
VI. Your Rights
You have the right to request information about the processing of your personal data by us at any time. We will explain the data processing to you as part of the provision of information and provide an overview of the data stored about your person. If data stored by us should be incorrect or out-of-date, you have the right to have this information corrected. You can also request the deletion of your data. If deletion is not possible by way of exception due to other regulations, the data will be blocked so that they are only available for this legal purpose. You can also restrict the processing of your data, for example, if you believe that the information we hold is incorrect. You are also entitled to data portability. This means we will send you a digital copy of the personal information you provide on request. To exercise your rights as described here, you can always contact the above contact information. This also applies if you wish to receive copies of warranties to prove adequate data protection. In addition, you have the right to object to data processing, which is based on Art. 6 para. 1 lit. e or f DSGVO. Finally, you have the right to complain to the Data Protection Inspectorate responsible for us. You may assert this right with a regulatory authority in the Member State of your residence, your place of work or the place of alleged infringement.
​
VIII. Revocation and Opposition Right
In accordance with Article 7 (2) of the GDPR, you have the right to revoke a consent once given to us at any time. As a result, we will not continue the data processing based on this consent for the future. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. As far as we use your data on the basis of legitimate interests in accordance with Art. 6 para. 1 lit. f DSGVO, you have the right, in accordance with Art. 21 GDPR, to object to the processing of your data and to give us reasons that arise from your particular situation and that in your opinion speak in favor of your legitimate interests. If it concerns a contradiction against the data processing for purposes of the direct advertisement you have a general right of objection, which is implemented also without the indication of reasons by us. If you would like to make use of your right of revocation or objection, you will need to send an informal message to the above contact details.
​
IX. Data Security
We maintain up-to-date technical measures to ensure data security, in particular to protect your personal data against dangers during data transfers as well as prior knowledge of third parties. These are adjusted according to the current state of the art. To secure the personal information you provide on our website, we use Transport Layer Security (TLS), which encrypts the information you provide.
X. Amendments to Privacy Policy
From time to time, we may update this privacy policy, for example, when we adapt our website or change the legal or regulatory requirements.
​