For the planning and implementation of BCGDigital Ventures’ Social Impact competition (“Competition”), the processing of personal data is necessary. This privacy policy describes how your personal. data is collected and processed during your visit to our website https://socialimpact.bcgdv.com/ (“Website”) and during your application for and participation in the Competition. 

Personal data means any information concerning you personally, such as your name, address, e-mail address or user behaviour.We have taken extensive technical safety measures in our company to protect your data from accidental or intentional manipulation, loss, destruction or from access by unauthorised parties. Our security measures are regularly reviewed and updated to reflect technological developments.

The controller under Art. 4 (7) of the General Data Protection Regulation (GDPR) is  

BCG Digital Ventures GmbH („BCGDV“)
Dircksenstrasse 41
10178 Berlin

You can contact our Data Protection Officer under our postal address with the addition "data protection officer"or via e-mail to dataprotection@bcgdv.com.

3.1 Informational use

When you solely visit our website for information purposes, i.e. if you do not register for the Competition or otherwise provide information to us, we only collect the personal data that your browser transmits to our server.

When you view our website, we collect the following data, which are technically required to display our website and to ensure stability and security:

- IP address,
- date and time of the request,
- time zone difference to GreenwichMean Time (GMT),
- content of the request (specific page),
- access status/HTTP status code,
- data volume transmitted
- website where the request originated,
- browser, operating system and user interface,
- browser language and version.

The legal basis is our legitimate interest in the correct display of our website and ensuring its  stability and security, Art. 6 (1) lit. fGDPR.

3.2 Cookies

When you use our website, cookies are stored on your computer. Cookies are small text files that are stored on your hard disk and associated with the browser you use. They send specific information to the organization setting them. Cookies cannot execute applications or transmit viruses to your computer. They serve to make the overall web experience more user-friendly and efficient.

This website uses the cookie types listed below.

Transient cookiesTransient cookies are deleted when you close the browser. They include, in particular, session cookies. These cookies store a co-called session ID that permits assigning different requests from your browser to a specific session. Your computer can then be identified when you return to our website. Session cookies are deleted when you log out or close your browser. 

‍Persistent cookies
‍Persistent cookies expire after a specific period, which may be set individually for every cookie. You can delete these cookies at any time in the security settings of your browser. 

‍Preventing the use of cookies
‍You can configure your browser settings according to your preferences, such as blocking the use of third-party cookies or all cookies. Please note, however, that you may in this case not be able to use the full range of services provided on this website. 

‍Legal basis and storage period
‍The legal bases for possible processing of personal data and their storage duration vary and are described in the following sections.

You have the opportunity to apply for participation in the Competition via the Website. The basic process of the Competition is described in our FAQs and in the conditions of participation (“Terms and Conditions”).

4.1 Application

During the application process we collect personal data such as your name and your email address as well as certain information about your organization, your team members and your submitted venture idea. We further collect any personal data that you submit e.g. in additional documents and a motivation video. Information that is mandatory is marked accordingly in the application form.

After applying, we might reach out to you to request further information, such as contact details of your team members.

The purpose of the data processing is to run the Competition, e.g. to contact you and potentially invite you and your team members to events such as iteration calls, workshops and pitches. Information about your venture idea will be used to evaluate its impact and feasibility during the selection process.

The legal basis for data processing is Art. 6 (1)lit. b DSGVO. According to Art. 6 (1) lit. b DSGVO, personal data may be processed if this is necessary for the performance of a contract or for the implementation of pre-contractual measures. A contractual relationship is established when you agree to the Terms. This includes the carrying out of the competition as described in more detail in the Terms.

4.2 Photography and filming

We are photographing and filming during the pitch events (“Recordings”).  TheRecordings shall be used for internal documentation and public relations purposes and shall be published in connection with the Competition on our social media channels and on the Website. The objective of the publication is to raise awareness for the Competition and the winning venture idea. The legal basis is Art. 6 (1) lit. f GDPR, our legitimate interest is to report about theCompetition.

4.3 Retention

Personal data collected during the registration and participation will be deleted as soon as its storage is no longer necessary for the purposes mentioned under 4.1. – 4.2 and legal retention periods have passed.

When you contact us via e-mail, we store the data you submit in order to respond to your enquiry. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) lit. fDSGVO. Our legitimate interest is to comply with your request. If the e-mail contact aims at the conclusion of a contract (i.e. applying for theCompetition), the additional legal basis for the processing is Art. 6 (1) lit.b DSGVO.  We will delete the data concerned when storage is no longer required, or we will restrict the processing of data that are subject to statutory retention periods.

A transfer of your data to third parties does not take place, unless we are legally obliged to do so, the data transfer is necessary for the performance of a contractual relationship with you or you have previously expressly consented to the transfer of your data.However, we engage external service providers who take on technical and content-related tasks in the provision of our website. These include services such as hosting and maintenance of our website. We use: 
‍
Webflow, Inc., 398 11th Street, San Francisco,CA 94103  
Formagrid Inc., doing business as Airtable, with a place of business at 799 Market St, Floor 8, San Francisco, CA 94103, USA
GoogleDublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Google LLC,1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Egynte Inc., 1350 W. Middlefield Road, MountainView, CA 94043 USA
BostonConsulting Group Inc., 200 Pier Four Boulevard, Boston, MA 02210, USA

‍
Where our service providers are engaged in order to assist us in our tasks, we ensure that they comply with the applicable provisions of the data protection laws.

For our daily work we use modern cloud-based storage and office solutions. As part of the use of these services, your data may be transferred, processed and stored outside the European Economic Area(EEA). Countries outside the EEA may handle the protection of personal data differently than countries within the European Union.

There is currently no decision by the EUCommission that these third countries generally offer an adequate level of protection. In this case, we conclude EU Standard Contractual Clauses with our service providers, or rely on privacy shield mechanisms, which are both recognised by the European Commission as adequate safeguards for the protection of personal data.

To learn more about how we ensure adequate protection, please contact our Data Protection Officer to request a copy of the specific security measures we apply when transferring your personal data.

As a data subject, you have the following rights regarding our handling of your personal data:

8.1 General rights

You have the right of access under Article 15GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18GDPR, the right to object under Article 21 GDPR and the right to data portability under Article 20 GDPR.

8.2 Right to object in the event of data processing for legitimate or public interest

Pursuant to Art. 21 (1) GDPR, you have the right to object at any time to the processing of personal data concerning you on the basis of Art. 6 (1) lit. e GDPR (data processing in the public interest)or Article 6 (1) lit. f GDPR (data processing to protect a legitimate interest),this also applies to profiling based on this provision. 

In the event of your objection, we will no longer process your personal data unless we can prove compelling grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.