Legal
Privacy.
1. Privacy at a glance
The following gives an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.
This website sets no cookies, embeds nothing from other servers and does not analyse your behaviour. Without any action on your part, the only thing that leaves your computer is what every browser sends when it requests a page.
Data controller
Responsible for the data processing on this website:
Innovation Tank gGmbH
Moslesbuckel 6
69118 Heidelberg, Germany
Phone: +49 1575 2418213
Email: hello@innovation-tank.de
2. Hosting and server log files
Hosting
This website is hosted by an external service provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Personal data collected on this website is stored on the host’s servers. This is mainly IP addresses, meta and communication data, and access logs.
Legal basis: Art. 6(1)(f) GDPR. We have a legitimate interest in providing this website reliably and securely.
Data processing agreement: We have concluded a data processing agreement with Hetzner under Art. 28 GDPR.
Server log files
The host automatically collects and stores information in server log files that your browser transmits automatically: browser type, operating system, referrer URL, hostname of the accessing device, time of the request and IP address. The basis is Art. 6(1)(f) GDPR.
3. What this website does not do
No cookies, no consent banner
This website sets no cookies and stores nothing in your browser, neither in local storage nor in session storage. That is why there is no cookie banner: there is nothing for you to consent to.
No analytics, no tracking
We use no analytics tools, no tracking pixels and no advertising networks. Your behaviour on the site is not evaluated and not passed on to third parties.
No third-party servers
Icons and scripts are served from our own server, and the typeface comes from your own device. No font is loaded, and no connections are made to external services such as Google Fonts or a CDN.
The footer of every page carries an ordinary link to our Instagram profile. Nothing from Instagram is embedded. Only when you follow that link and open the page at Instagram does their privacy policy apply.
4. Signing up for events
On the events page you can sign up for individual evenings. We process what you enter in the form: the evening you chose, your name, your email address and, if you write one, your optional note. Your details are only sent to our mailbox as an email. They are not stored on the server; there is neither a database nor a list.
Purpose: Planning the evening in question and getting back to you about your sign-up.
Legal basis: Your consent by submitting the form, Art. 6(1)(a) GDPR.
Retention: Your details exist only as an email in our mailbox. We delete that email no later than 30 days after the evening.
Withdrawal: An informal email to mabar@innovation-tank.de is enough.
The form contains a field that is invisible to you and catches automated submissions. Its content is neither stored nor evaluated.
5. Contact by email
When you write to us, we process your message and your contact details in order to answer it. The basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or its preparation, otherwise Art. 6(1)(f) GDPR. We keep your message for as long as the matter is ongoing and delete it once it is settled and no retention period requires otherwise.
6. Your rights
You have the right at any time to obtain information free of charge about the origin, recipients and purpose of your stored personal data. You may request its correction, restriction or deletion, and you may withdraw consent you have given at any time with effect for the future. Please use the address given above.
You also have the right to lodge a complaint with the competent supervisory authority. For us that is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.
Last updated: 2 October 2026