Introduction

We ("we", "us", "our") take the protection of the data of users ("users" or "you") of our website and/or mobile app (the "Website" and/or the "Mobile App") very seriously and are committed to protecting the information that users provide to us in connection with their use of our Website and/or Mobile App (collectively: "Digital Assets"). We are also committed to protecting and using your data in accordance with applicable laws.
This Privacy Policy explains our practices regarding the collection, use, and disclosure of your data through your use of our digital assets (the "Services") when you access the Services from your devices.
Please read this Privacy Policy carefully and make sure you fully understand our practices regarding your data before using our Services. If you read and fully understand this policy and do not agree with our practices, you must stop using our digital assets and services. By using our Services, you accept the terms of this Privacy Policy. Continued use of the Services constitutes your acceptance of this Privacy Policy and any amendments thereto.
This Privacy Policy will explain:
 

• How we collect data

• What data we collect

• Why we collect this data

• With whom we share the data

• Where the data is stored

• How long the data is retained

• How we protect the data

• How we handle minors

• Updates or changes to the Privacy Policy
   

What Data Do We Collect?
Category: Always

Here’s an overview of the data we may collect:

• Non-identifiable and unidentified information that you provide during the registration process or that is collected through your use of our Services (“Non-Personal Data”). Non-Personal Data does not allow us to identify the person from whom it was collected. This mainly consists of technical and aggregated usage information.

• Personally identifiable information, i.e., data that identifies you or could be used to identify you with reasonable effort (“Personal Data”). Personal Data we collect through our Services may include information such as names, email addresses, addresses, phone numbers, IP addresses, and more. When we combine Personal Data with Non-Personal Data, we treat it as Personal Data as long as it remains combined.

How Do We Collect Data?

The main methods we use to collect data include:

• We collect data when you use our Services. When you visit our digital assets and use the Services, we may collect, record, and store usage, sessions, and related information.

• We collect data you provide directly to us, for example, when you contact us via a communication channel (e.g., email with feedback).

• We may collect data from third-party sources as described below.

• We collect data you provide to us when you sign in via a third-party service like Facebook or Google.

Why Do We Collect This Data?

We may use your data for the following purposes:

• To provide and operate our Services

• To develop, customize, and improve our Services

• To respond to your feedback, requests, and support needs

• To analyze usage and request patterns

• For internal statistics and research

• To enhance data security and fraud prevention

• To investigate violations and enforce our policies and comply with applicable laws and regulations

• To send you updates, news, promotional materials, and other information related to our Services. You can opt out of promotional emails by clicking the unsubscribe link in those emails.

With Whom Do We Share the Data?

We may share your data with our service providers to operate our Services (e.g., hosting services, technical support, etc.).
We may also disclose your data in the following circumstances:
 

• To investigate or prevent illegal activities or misconduct

• To establish or exercise our legal rights

• To protect our rights, property, and the safety of users or the public

• In the event of a business change (merger, acquisition, etc.)

• To collect, store, and manage your data via authorized third parties (e.g., cloud service providers)

• To work with third parties to enhance your user experience

Note: We may share Non-Personal Data at our discretion.
Category: User has a blog or forum
Our Services may allow public interaction (e.g., posting content or chatting with others). Any content or data you post may be read, collected, and used by others. We advise against posting any personal information you do not wish to make public. Uploaded content is at your own risk.
Cookies and Similar Technologies
When you visit or access our Services, we authorize third parties to use tracking technologies such as web beacons, cookies, pixel tags, scripts, and analytics services. These tools may automatically collect data to improve navigation, performance, user experience, and for security and fraud prevention.
Please read our [Cookie Policy] for more information.
Advertising-Related Information
Category: User NOT connected to ad service
We will not share your email or Personal Data with advertisers or advertising networks without your consent.
Category: User connected to ad service, campaign manager, or Facebook Ads
We may deliver targeted advertising based on your recent browsing behavior. This may involve the use of cookies, JavaScript, web beacons, and other technologies. External providers may use similar technologies for ad measurement and customization. These are governed by their own privacy policies.
Where Do We Store the Data?
Category: Always – Non-Personal Data
Our company and trusted partners are located worldwide. Non-Personal Data may be stored and processed in various jurisdictions.
Category: User collects Personal Data
Personal Data may be stored in the US, Ireland, South Korea, Taiwan, Israel, and other jurisdictions as required by law or for service provision.
How Long Do We Keep the Data?
Category: Always
We retain collected data as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce agreements. Inaccurate or incomplete data may be corrected or deleted at our discretion.
How Do We Protect the Data?
Category: Always
Our hosting provider offers the platform for our digital assets and securely stores your data behind firewalls with HTTPS access to most areas.
Category: User accepts payments/eCommerce
Our payment processing complies with PCI-DSS standards, ensuring secure handling of credit card information.
Category: Always
Despite our efforts, we cannot guarantee absolute security. Use strong passwords and avoid sharing sensitive information via insecure channels like email or instant messaging.
How Do We Handle Minors?
Category: User does NOT collect data from minors
Our Services are not intended for users under the legal age of majority. We do not knowingly collect data from minors. If we discover such activity, we may block the user and delete the data.
Category: User collects data from minors
If children use our Services and submit data, we comply with applicable law, obtain parental consent, and only collect necessary information. Parents can review, request deletion, or prohibit further data collection.
Legal Basis for Processing (EU Users)
We process your Personal Data only when:

• It is necessary for contract fulfillment

• It is required by law

• It serves our legitimate business interests (and respects your privacy rights)

As an EU resident, you may:

• Request confirmation of data processing and access to your data

• Request a copy of your data in a portable format

• Request correction or deletion of your data

• Object to data processing

• Restrict data processing

• File a complaint with a supervisory authority

Please note, these rights may be limited by legitimate business or legal requirements. By using our Services, you consent to the transfer of your data outside the EEA. We ensure adequate protection through contracts and safeguards.
California Consumer Privacy Act (CCPA)
Category: Website does not sell user data
We do not sell users’ Personal Data under the CCPA.
Category: Blog or forum sites
If you're under 18 and reside in California, you may request removal of content you have posted. Requests must be marked “California Removal Request” and include identifying information. We cannot guarantee complete deletion.
Updates or Changes to This Privacy Policy

We may update this policy at our discretion. The latest version will always be posted on our Website. Please check regularly. Material changes will be communicated. Continued use after changes implies acceptance.
Contact
Category: Always
If you have any questions about the Services or the data we collect and use, please contact us at: team@hoi-startup-factory.de