← Festival der Zukunft 2027

Privacy policy

1. Provider of this website

1E9 Denkfabrik GmbH, Spitzwegstraße 4, 81373 Munich, Germany, email hallo@1e9.community (hereinafter “the provider”) operates the website festivalderzukunft.com with its sub-pages (hereinafter “the website”). Further details are in the imprint.

The provider takes the protection of your personal data very seriously and complies with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The following statement gives you an overview of how the provider ensures this protection and which data is collected for which purpose.

If you have questions about or problems with data protection matters, please contact us at datenschutz@1e9.community.

2. Collection, processing and use of general data

This website is delivered by Netlify, Inc. When you open it, Netlify automatically processes information that your browser transmits, in order to deliver the page and to fend off attacks. This data is evaluated solely to ensure trouble-free operation and does not allow the provider to draw conclusions about you personally. It comprises:

The legal basis is our legitimate interest in secure operation (Art. 6 (1) (f) GDPR).

3. Usage measurement

We measure the use of the website with Plausible Analytics. Plausible sets no cookies, creates no cross-device profiles and stores no IP addresses. Only anonymous figures are recorded, such as the page visited, the referring page, the approximate region and the device type, plus which buttons (calendar, newsletter, partner enquiry, tickets) are used. For the ticket machine we also record steps such as opening the checkout, and for a purchase the amount, ticket types, size of the order, campaign, whether a membership was included, a code was used or an invoice to a company was requested, and whether the payment arrives immediately or later – never names, email addresses or order numbers. As no personal data arises, no consent is required; the legal basis is our legitimate interest in a data-sparing evaluation (Art. 6 (1) (f) GDPR).

4. Personal data

Personal data is collected, processed and used in the course of using the website only as described below. Personal data is any individual information about the personal or factual circumstances of an identified or identifiable natural person (not included: legal entities such as a GmbH or AG). Personal data includes in particular details such as a person’s name, address, email address or professional circumstances.

5. Collection, processing and use of personal data

The provider collects, processes and stores your personal data when you provide it in the course of subscribing to the newsletter, submitting a partner enquiry, buying tickets or a membership, or otherwise contacting us (e.g. by email or phone).

Newsletter. For the newsletter we use the sign-up procedure of Wix.com Ltd. After you sign up we send you an email with a confirmation link (double opt-in); only when you click it do we add you to the mailing list. We store your email address and the time of sign-up and confirmation in order to prove your consent. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time via the unsubscribe link in every newsletter or informally by email to us. To prevent misuse of the form we additionally store, for at most 24 hours, a check value (hash) of the address entered – not the address itself – and, for a few minutes, the number of requests per IP address (Art. 6 (1) (f) GDPR).

Partner enquiries. If you contact us via the partner form, we pass your details (organisation, name, email address, optionally phone number, your selections and your message) to a form of Wix.com Ltd., where they are stored so that we can reply to you. The legal basis is the initiation of a contract (Art. 6 (1) (b) GDPR) and our legitimate interest in handling enquiries (Art. 6 (1) (f) GDPR). To prevent misuse of the form we store the number of requests per IP address for a few minutes. We inform our team about new enquiries by a message in Slack (Slack Technologies Limited, Ireland) containing the details you entered. We do not send you a newsletter on this basis.

Tickets and membership. When you buy tickets, we process the names and email addresses of the attendees, your details as the buyer and, where applicable, your billing address, VAT ID and purchase order number, in order to perform the contract (Art. 6 (1) (b) GDPR). Payment is handled by Stripe Payments Europe, Ltd. (Ireland). As soon as you open the checkout, Stripe creates a customer record with your name or company, email address and billing address – also if you do not complete the purchase; your payment details go directly to Stripe and we never see them. Stripe also issues the invoices, which we keep for the statutory retention periods (Art. 6 (1) (c) GDPR). The tickets are issued via Wix.com Ltd. (Wix Events) together with the badge details you give after the purchase (company, position or “attending privately”). If you buy a membership, Stripe runs it as an annual subscription and we enter it as a plan in your 1E9 account at Wix; if you do not have an account yet, we create one with your name and email address.

Until the tickets are issued and for questions about your order, we store it with Netlify, including your optional answers on the thank-you page (motivation, topics, field of work, how you heard about us). If you do not complete the checkout, we remove the names, email addresses and billing details from the order once the checkout expires (after 30 minutes). We delete all orders 90 days after the festival. Our team is notified of sales internally in Slack (Art. 6 (1) (b) and (f) GDPR). If you state that you are a 1E9 member, we check this with Wix at checkout. To prevent misuse, we store for the day, per IP address, how many checkouts were opened and which email addresses were checked – only as keyed check values (HMAC) that change daily, deleted the next day (Art. 6 (1) (f) GDPR). Stripe sets its own cookies for fraud prevention once you open the checkout.

If you sign in with your 1E9 account in the ticket machine, the page takes you to the sign-in on 1e9.community (Wix.com Ltd.) and back. We then receive your member ID, login email and name and whether a membership is active, and keep this as a signed proof for up to three hours only in your browser (session storage, no cookie), in order to grant the member price (Art. 6 (1) (b) GDPR). If you request a code by email instead, we check with Wix whether a 1E9 account belongs to the address and have Wix send the code to it; we only store a check value of the code, for at most one day.

The provider uses the data you provide to process your requests. So that you do not have to provide the same information repeatedly, it is stored for as long as it is needed to clarify the request or the business relationship. Data is processed on the basis of Art. 6 (1) (b) GDPR where it serves the performance of a contract or pre-contractual measures; where you have consented, on the basis of Art. 6 (1) (a) GDPR; for legitimate internal purposes on the basis of Art. 6 (1) (f) GDPR; and where processing is necessary to comply with a legal obligation, on the basis of Art. 6 (1) (c) GDPR.

You have the right to object to the collection of data for direct marketing purposes. To exercise it, send an informal message stating your email address to hallo@1e9.community.

6. Photos and recordings at the festival

During the festival, we and photographers and film crews commissioned by us take photos, video and, where applicable, audio recordings. We use general overview and event shots to document and report on the festival and for our public relations – on our websites, in newsletters, on social media (e.g. LinkedIn, Instagram, YouTube) and in press work – on the basis of our legitimate interest (Art. 6 (1) (f) GDPR). We take the interests of the people shown into account. For targeted individual shots, interviews or testimonials that feature a person prominently, we generally ask for separate consent.

If you do not want to appear in recordings, please tell our team on site or write to festival@1e9.community. You may object to the processing at any time on grounds relating to your particular situation (Art. 21 GDPR). We keep recordings for as long as they are needed for documentation and reporting on the festival.

7. Content from Wix

Images and the background video on this website are loaded from the content delivery network of Wix.com Ltd. In doing so, Wix learns the IP address of your device, because it is technically necessary for delivery.

8. Transfer of data to third parties

The provider will pass your personal data on to third parties only in the following cases:

Data may be transferred to recipients outside the EU only within the limits permitted under Art. 44 et seq. GDPR, in particular on the basis of an adequacy decision or standard contractual clauses.

9. Deletion and rectification of data

On request, your personal data will be deleted without delay unless statutory retention or documentation obligations under tax or commercial law prevent this or the protection of the provider’s legitimate interests would be jeopardised. As long as not all contractual obligations have been fulfilled and your data is required for this, there is no entitlement to deletion.

Should data be incorrect, it will be corrected upon becoming aware of this or at your request.

10. Right of access and further rights

On request, the provider will inform you in particular about

On request, you will receive a copy of the data collected and processed about you. You also have the right to rectification, erasure, restriction of processing and data portability.

In the event of violations of data protection law you have the right to lodge a complaint with the competent supervisory authority, the Bavarian State Office for Data Protection Supervision.

11. Cookies

This website sets no cookies and uses no comparable technologies for tracking. Your browser may store technically necessary settings (for example a remembered form entry) locally on your device; this data does not reach the provider. Only when you open the checkout does Stripe load its payment page, which sets cookies that are necessary for the payment and for fraud prevention (§ 25 (2) TDDDG).

12. Changes to this privacy policy

The provider reserves the right to adapt security and data protection measures where this becomes necessary due to technical or legal developments. In such cases the provider will also adapt this privacy policy accordingly. Please therefore refer to the current version of our privacy policy.

13. Questions and contact

You have the right to free information about the data stored about you by the provider and, where applicable, the right to rectification, blocking or erasure of this data. For questions about the collection, processing or use of your personal data, for information, rectification, blocking or erasure of data, and to withdraw consent or object to a particular use of data, please contact datenschutz@1e9.community.