Privacy notice
Who is responsible
Maximilian Alexander Rupp, Oberföhringer Straße 26c, 81925 München, Germany, is the controller for personal data processed on this site. Reach him through the contact form.
Ethicora runs on a server in Munich, Germany, operated by the controller. There are no analytics, no advertising, no tracking pixels, and no fonts or scripts loaded from third parties.
What is stored and why
Visiting the site
The web server processes your IP address and the technical data your browser sends in order to deliver pages. Public forms store a salted hash of the IP address, never the address itself, to limit abuse. Those hashes are deleted after two days. Legal basis: legitimate interest in running a secure service, Art. 6 (1) f GDPR.
Cookies
Two cookies are used, both strictly necessary: a session cookie that keeps you logged in and a token that protects forms against cross site requests. Neither is used for tracking, and no consent banner is needed for them. They expire when you log out or after the session ends.
Applying for membership
Your name, email address, location and your answers to the application questions are stored so the application can be reviewed. A decision is sent to the address you gave. Legal basis: steps taken at your request before entering into an agreement, Art. 6 (1) b GDPR. Applications that are not accepted are kept for up to twelve months, so a later application can be read in context, and are then deleted. You can ask for earlier deletion at any time.
Being a member
Your profile, your introduction requests, the projects you post, the proposals you send and the updates and tasks inside projects are stored for as long as your membership lasts. Profiles and projects are visible to verified members only, never to the public and never to search engines. Your email address is not shown to other members. Legal basis: performance of the membership agreement, Art. 6 (1) b GDPR.
Emails
Ethicora sends only transactional messages: the outcome of an application, the outcome of an introduction request, and the outcome of a proposal. Each one is written by a person and sent to the address on file. There is no newsletter.
Cloudflare
Traffic to this site passes through Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, which connects the public address to the server in Munich and protects it against attacks. Cloudflare processes connection data such as your IP address for this purpose, under a data processing agreement and the EU standard contractual clauses. Legal basis: legitimate interest in a secure and available service, Art. 6 (1) f GDPR.
Your rights
You have the right to access the data stored about you, to have it corrected or deleted, to restrict its processing, to receive it in a portable format, and to object to processing based on legitimate interest. To exercise any of these, use the contact form. You also have the right to complain to a supervisory authority, for Bavaria the Bayerisches Landesamt für Datenschutzaufsicht.