Privacy Policy
Last updated: 25.03.2025
Opportunity Pulse (hereinafter “we,” “us,” “our,” or the “Organization”) is committed to protecting your data by the EU General Data Protection Regulation (“GDPR”) and the German Federal Data Protection Act (“Bundesdatenschutzgesetz,” hereinafter “BDSG”). As a Germany-based non-profit organization, we adhere to all other national data protection regulations. This Privacy Policy explains the nature, scope, and purposes of any personal data we collect, process, and use and the rights to which data subjects are entitled.
Contact of the Controller
Within the meaning of the GDPR, BDSG, and other national data protection laws of the Member States, as well as any other data protection regulations, the “Controller” responsible for data processing is:
Opportunity Pulse
Belßstr. 78B. 78B, 12249 Berlin, Germany
+49 (0)162 984 3200
info@opportunitypulse.com
www.opportunity-pulse.com
If you have any questions regarding this Privacy Policy or our data processing practices, please contact us at the above details.
Contact of the DPO
We have appointed a Data Protection Officer (“DPO”) to oversee our compliance with data protection obligations.
You may contact the DPO at: info@opportunity-pulse.com
Michael Onwuatuegwu, Data Protection Officer for Opportunity Pulse
Opportunity Pulse
Belßstr. 78B. 78B, 12249 Berlin, Germany
+49 (0)162 984 3200
info@opportunitypulse.com
Any data subject may contact our Data Protection Officer at any time with any questions or concerns about data protection.
Definitions
Our Privacy Policy is intended to be user-friendly and understandable. Therefore, we use the following definitions as laid down in the GDPR:
- Personal Data
Any information relating to an identified or identifiable natural person (“data subject”), such as a name, an identification number, location data, an online identifier, or factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
- Data Subject
Any identified or identifiable natural person whose personal data is processed by the controller.
- Processing
Any operation or set of operations performed on personal data, whether or not by automated means (e.g., collection, recording, organization, storage, alteration, retrieval, use, disclosure, erasure, or destruction).
- Restriction of Processing
The marking of stored personal data to limit their processing in the future.
- Profiling
Any form of automated processing of personal data to evaluate certain personal aspects relating to a natural person, particularly to analyse or predict aspects concerning performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location, or movements.
- Pseudonymization
The processing of personal data in such a manner that the data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is protected.
- Controller
The natural or legal person, public authority, agency, or other body that determines the purposes and means of the processing of personal data.
- Processor
A natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.
- Recipient
A natural or legal person, public authority, agency, or body to whom the personal data are disclosed, whether a third party or not.
- Third Party
Any natural or legal person, public authority, agency, or body other than the data subject, controller, or processor authorized to process personal data under the direct authority of the controller or processor.
Legal Basis for Processing
We process personal data exclusively under a legal basis permitted by the GDPR and applicable German law (e.g., BDSG). In particular:
Article 6(1)(a) GDPR (Consent)
If we obtain your consent for a specific processing purpose.
Article 6(1)(b) GDPR (Contract Performance)
If processing is necessary for the performance of a contract (e.g., membership in the Organization or donation agreements) or to take steps at the request of the data subject before entering into a contract.
Article 6(1)(c) GDPR (Legal Obligations)
If processing is necessary to comply with our legal obligations (e.g., tax or social security requirements).
Article 6(1)(d) GDPR (Vital Interests)
If processing is necessary to protect someone’s vital interests.
Article 6(1)(f) GDPR (Legitimate Interests)
If processing is necessary for our legitimate interests (e.g., ensuring the security and functionality of our website), except where such interests are overridden by your fundamental rights and freedoms.
Purpose of Data Processing
Depending on how you engage with us, we may process personal data for the following purposes:
Website Operation: Ensuring proper functioning, security, and optimization of our website.
Member and Donor Management: Managing memberships, donations, event registrations, or partnership communications.
Newsletter/Email Marketing: Sending updates about our programs, services, and events, only with prior consent or as otherwise legally permitted.
Legal Compliance: Fulfilling our statutory or contractual obligations (e.g., bookkeeping, tax obligations).
Communication: Handling inquiries via email, phone, or contact forms on our website.
Cookies
6.1 Use of Cookies
Our website uses cookies—small text files stored on your device by your browser—to provide a better user experience, improve website functionality, and analyze site usage. Some cookies are strictly necessary for the functionality of the site, while others may be used for analytical or marketing purposes.
6.2 Control of Cookies
You can configure your browser to refuse or delete cookies. However, disabling cookies may limit some features of our website. For more details on how to manage cookie preferences, please consult your browser’s help section.
Collection of General Data and Information
When you access our website, we may automatically collect the following data, stored temporarily in server log files:
Browser types and versions used
Operating system used
Referrer URLs (the previously visited site)
Date and time of access
IP address
Internet service provider and related data
This data is collected anonymously and processed for technical purposes: to ensure our website’s stability and security, to optimize performance, and to assist law enforcement if needed.
Registration on our Website or Services
Should you register for specific sections of our website (e.g., event registration) or use our services, we will collect personal data necessary for fulfilling that service (e.g., name, contact details). We also store IP address, date, and time of registration to prevent misuse. This information will only be shared with third parties if legally obligated or if it is necessary for the operation of our services (e.g., payment processors, and couriers).
Newsletter Subscription and Tracking
9.1 Subscription
If you opt to receive our newsletter, we collect your email address and store information needed to prove your subscription (e.g., IP address, date, and time of sign-up). We use a double opt-in mechanism to ensure your email address was provided with consent. You can unsubscribe at any time via the “unsubscribe” link in each newsletter or by contacting us directly.
9.2 Tracking
Our newsletters may contain tracking pixels that allow us to see if and when you open an email and which links you click. We use this information to improve our content and tailor future communications. You can disable email tracking by disabling images in your email client by default or by unsubscribing from our newsletters.
Contact Forms and Email Contact
If you use our contact form or communicate with us via email, your provided personal data (e.g., name, email address, message) is stored for the purpose of responding to your request. We do not share this data with third parties unless required for resolving your inquiry or if we are legally required to do so.
Commenting on our Website and Blog
When leaving comments on our website or blog, we may store and publish the following data:
The comment itself
Date and time of the comment
Username or chosen pseudonym
IP address (stored temporarily for security and spam protection)
We do not share this data with third parties unless required by law or necessary to protect our legitimate interests (e.g., legal enforcement in the event of illegal content).
Social media and third-party integrations
We may integrate third-party tools or social media plug-ins on our website (e.g., Facebook, Instagram, LinkedIn, XING, Twitter, YouTube, Google Analytics). These providers may collect personal data (e.g., IP address) whenever you visit pages where the respective plug-ins are installed. To the extent possible under GDPR, we use privacy-friendly integrations (such as Shariff for social media buttons).
Please note that once you interact with or click on these integrations, you may be redirected to external services subject to their privacy policies. We recommend reviewing each service’s policy if you are concerned about the processing of your data.
Personal Data Storage and Erasure
We process and store your data only for as long as necessary to fulfill the purpose for which it was collected or as required under applicable laws. After the applicable retention period expires, we will securely erase or anonymize your data, unless a further retention period is mandated by law or necessary for the establishment, exercise, or defense of legal claims.
Data Subject Right
Under the GDPR and BDSG, you have the following rights regarding your data:
- Right of Confirmation and Access (Art. 15 GDPR)
You have the right to obtain confirmation of whether personal data concerning you is being processed and to request information about your stored data and a copy of this information.
- Right to Rectification (Art. 16 GDPR)
You have the right to request rectification of inaccurate or incomplete personal data concerning you without undue delay.
- Right to Erasure (Art. 17 GDPR)
Establishment, exercise, or defence of legal claims.
- Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request restriction of processing where one of the conditions set out in Art. 18 GDPR is met (e.g., accuracy is contested).
- Right to Data Portability (Art. 20 GDPR)
Where technically feasible, you have the right to receive your data in a structured, commonly used, and machine-readable format and to transmit it to another controller without hindrance.
- Right to Object (Art. 21 GDPR)
You have the right to object at any time to the processing of personal data concerning you based on legitimate interests or for direct marketing purposes.
7. Automated Individual Decision-Making, Including Profiling (Art. 22 GDPR)
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you, except in the cases expressly provided by law.
- Right to Withdraw Consent (Art. 7(3) GDPR)
Where processing is based on your consent, you have the right to withdraw this consent at any time with effect in the future.
To exercise any of these rights or for any questions, please contact us or our Data Protection Officer using the details provided above.
You have the right to request the erasure of your data where one of the grounds in Art. 17 GDPR applies unless the processing is necessary to comply with a legal obligation.
Data Security
We have implemented appropriate technical and organizational measures (TOMs) to protect your data against unauthorized or unlawful processing, accidental loss, destruction, or damage. However, Internet-based data transmissions can still have security gaps, and absolute protection cannot be guaranteed. You are free to choose alternative means of communication (e.g., telephone) whenever you prefer.
Non-Profit Status and Data Processing
As a German non-profit organization, we process personal data primarily to carry out our non-profit objectives (e.g., promoting charitable projects, facilitating memberships, and organizing fundraising). Any processing of personal data for these purposes is carried out in compliance with German non-profit regulations (e.g., §§ 51-68 of the German Fiscal Code) and the GDPR/BDSG.
Further information and Complaints
If you need any clarification about this Privacy Policy or wish to complain about how your data is handled, you can contact us at:
Opportunity Pulse
Belßstr. 78B, 12249 Berlin, Germany
+49 (0)162 984 3200
info@opportunitypulse.com
www.opportunity-pulse.com
If you believe we have not addressed your concerns, you have the right to complain with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement. In Germany, the competent data protection authority can be found at:
https://www.bfdi.bund.de/EN/Home/home_node.html
