Privacy Policy

This privacy policy explains how we collect, use, and protect your personal information when you visit our website, in line with the General Data Protection Regulation (GDPR) and applicable German data protection law (including the TTDSG).

Responsible party (controller)

Berlin 2026 project Email: feedback@berlin-2026.de

Data processed

When you visit our website, our hosting provider may automatically process technical data required to deliver the site (for example IP address, browser/user-agent information, and request timestamps in server logs). We do not operate user accounts or require registration.

We use Vercel Web Analytics for aggregated pageview statistics and PostHog for product analytics (for example page path, interface language, and interactions such as selecting parties, opening topics, or following program links), together with related technical metadata. PostHog does not create lasting user profiles for this site.

If you use the optional feedback form, we process your message, the page URL, the interface language, and — if you choose to provide it — your email address so we can reply.

If you report incorrect wording or a factual mistake (including via the “Report this text” control after selecting text), we process the quoted incorrect text, your suggested correction, the page URL, and the interface language.

When you submit either form, we also process a Cloudflare Turnstile security token and related technical signals needed to verify that the request is not automated spam.

Hosting

This website is hosted by Vercel Inc. Server infrastructure and content delivery may involve processing outside the European Economic Area under appropriate safeguards (including Standard Contractual Clauses where applicable). See Vercel’s Privacy Policy.

Processors and security checks

We use the following service providers as processors (Art. 28 GDPR) for the purposes described below. Transfers to the United States may occur for some providers; we rely on appropriate safeguards such as Standard Contractual Clauses and the providers’ data processing terms.

  • Vercel Inc. — hosting, delivery of the website, and Vercel Web Analytics (aggregated pageviews).
  • PostHog Inc. — product analytics on PostHog Cloud EU (Frankfurt). Details: PostHog Privacy Policy and PostHog’s data processing agreement.
  • Cloudflare, Inc. — Cloudflare Turnstile bot/spam protection when a feedback or text-report form is opened or submitted. Turnstile may process IP address and browser/device characteristics to issue a verification token. Details: Cloudflare Privacy Policy and Turnstile documentation.
  • Resend, Inc. — transactional email delivery of submitted feedback and text reports to us. Details: Resend Privacy Policy.

Legal basis for Turnstile and related security measures: Art. 6(1)(f) GDPR (legitimate interest in protecting the forms against abuse and spam). Where the user requests the form service, storage of or access to information on the end device that is strictly necessary for that service may also be covered by § 25(2) TTDSG.

Purpose and legal bases

We process data to:

  • Provide, secure, and maintain this website (Art. 6(1)(f) GDPR)
  • Measure aggregated traffic with Vercel Web Analytics (Art. 6(1)(f) GDPR)
  • Understand how the comparison tool is used and improve it with PostHog cookieless product analytics (Art. 6(1)(f) GDPR)
  • Receive and handle optional feedback and text/factual-error reports (Art. 6(1)(f) GDPR)
  • Reply when you voluntarily provide an email address (Art. 6(1)(a) GDPR and/or Art. 6(1)(b) GDPR, depending on the request)
  • Prevent spam and automated abuse of the forms via Turnstile (Art. 6(1)(f) GDPR)

Retention

Server logs are retained by the hosting provider only as long as needed for security and operations, then deleted or anonymised according to the provider’s practices.

Vercel Web Analytics pageview data is retained according to Vercel’s practices for that product.

PostHog analytics events are retained according to our PostHog project settings (typically up to about one year on the free tier) and then deleted or anonymised.

Feedback and text-report messages (including any email you provide) are kept only as long as necessary to review and handle your submission, and for a short period thereafter if needed for follow-up or documentation, then deleted.

Turnstile verification tokens are used for the security check and are not stored by us as a long-term profile.

Cookies and similar technologies

A language preference may be stored in a small cookie or in local storage so we can show your chosen language on return visits.

Vercel Web Analytics measures pageviews without advertising cookies.

PostHog product analytics runs in cookieless mode: it does not set analytics cookies or similar persistent storage on your device. Limited anonymous usage events (for example page path and interactions with the comparison tool) may still be processed using a privacy-preserving hash.

Cloudflare Turnstile may set or read technical cookies or similar storage only when you open or use a feedback/report form, for bot protection. We do not use Turnstile for advertising or cross-site tracking.

We do not use advertising cookies. You can delete cookies and site data in your browser settings at any time.

Your rights under the GDPR

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing based on legitimate interests (Art. 21 GDPR)
  • Right to withdraw consent where processing is based on consent (Art. 7(3) GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights or ask questions about your data, contact us at feedback@berlin-2026.de.

Supervisory authority

You may lodge a complaint with a data protection supervisory authority. For Berlin, this is typically:

Berliner Beauftragte für Datenschutz und Informationsfreiheit Alt-Moabit 59–61, 10555 Berlin, Germany https://www.datenschutz-berlin.de

Datenschutzerklärung auf Deutsch