Privacy Policy

This is a courtesy translation. The German version is legally binding.

1. Controller

Stanford Club of Germany - Freunde der Stanford University e.V.
Pacelliallee 18–20
14195 Berlin
Germany

Phone: +49 (0)30 834 096 338
E-mail: info@stanfordclubofgermany.de

2. Summary

This is a purely static website. It has no forms, no user accounts and no analytics or tracking tools. We do not set cookies or embed third-party content. Personal data is processed only as described below.

3. Hosting by Vercel

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. Each time the site is accessed, Vercel processes technically necessary access data:

• IP address of the requesting device
• date and time of access
• page or file requested, HTTP status code and amount of data transferred
• previously visited website (referrer), if sent by your browser
• browser and operating system (user agent)

This data is processed to deliver the website and to keep it stable and secure, for example to defend against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the website. The data is stored only for as long as these purposes require and is not combined with other data sources.

We have concluded a data processing agreement with Vercel under Art. 28 GDPR.

4. Domain name resolution (DNS) by Cloudflare

We use the DNS service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, to manage and resolve our domain name. For a device to find our website, the domain name is resolved via DNS. In this process, Cloudflare processes the IP address of the requesting DNS server (depending on the configuration, also that of your device), the name requested and the time of the request. The website's content is not delivered through Cloudflare.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is keeping the website reliably reachable. We have concluded a data processing agreement with Cloudflare under Art. 28 GDPR.

5. Data transfers to the USA

Vercel and Cloudflare are based in the USA, so personal data may be processed there. Both providers state that they comply with the EU-U.S. Data Privacy Framework; to that extent, transfers are based on the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR). In addition, the data processing agreements provide for standard contractual clauses under Implementing Decision (EU) 2021/914 (Art. 46(2)(c) GDPR).

6. No cookies; technically necessary local storage

We do not set cookies. While you navigate, the website keeps only technical details such as your scroll position in your browser's session storage, so that the back and forward functions work as expected. These details do not leave your device and are deleted at the latest when you close the browser tab. This storage is strictly necessary and therefore does not require consent under § 25(2) no. 2 TDDDG.

If our host detects an attack on the website, it may temporarily add a security check and set a technically necessary cookie for that purpose.

7. Fonts

The fonts used are delivered from our own website. No connection is made to servers of Google or other font providers.

8. Contacting us by e-mail or phone

If you contact us, we process your details (such as your name, contact details and the content of your message) to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns a contract or membership, and otherwise Art. 6(1)(f) GDPR; our legitimate interest is responding to enquiries. We delete the data once it is no longer needed, unless statutory retention obligations apply.

Our e-mail is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. We have concluded a data processing agreement with Hetzner under Art. 28 GDPR.

9. Donations

We accept donations by bank transfer; this website does not collect any data for them. When you donate, we process the details of the transfer (name, bank details, amount, payment reference) and, if you would like a donation receipt, your address. We do this to process the donation and issue the receipt (Art. 6(1)(b) GDPR) and to meet legal obligations (Art. 6(1)(c) GDPR). The data is kept in accordance with tax and commercial retention periods, in particular under § 147 of the German Fiscal Code (AO). Your bank and ours are each responsible for their own processing.

10. Links to other websites

This website links to external sites, such as Stanford University or YouTube. Videos and other third-party content are not embedded. No data is sent to these providers unless you click a link; from then on, their privacy policies apply.

11. Your rights

Subject to the statutory requirements, you have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You may withdraw any consent at any time with effect for the future (Art. 7(3) GDPR).

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

An informal message to info@stanfordclubofgermany.de is sufficient.

12. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin, Germany
E-mail: mailbox@datenschutz-berlin.de

13. Obligation to provide data; automated decisions

You are not required by law or contract to provide your data. However, the website cannot be delivered without the access data listed in section 3. No automated decision-making or profiling takes place.

Last updated: November 2026