Privacy policy

Privacy policy

We are responsible for the handling of your data, which we process according to your wishes and the provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Your personal data will only be processed by us if a legal provision permits it or if you have given your prior consent.

The entity responsible for the website you are visiting is boOst Startup Ecosystem gGmbH.
Lennéstr. 1
01069 Dresden

E-Mail: info@machn-festival.de

The following information will tell you what personal data is collected during your visit to our website and when using our services and offers, and how we process it.

Data Protection Officer

If you have a question regarding data protection, you can reach our Data Protection Officer by email at info@startup-factory-boost.de or by post at boOst Startup Ecosystem gGmbH, Lennéstr. 1, 01069 Dresden.

2. DATA PROCESSING NOTES

2.1 Mandatory Information

a. What are mandatory details?

Certain data fields within our forms are designated as mandatory fields. The provision of this data is required by law or contract, or is necessary for the conclusion of the contract, the requested service, or the stated purpose. The provision of this data is at your discretion. For the consequences of not providing mandatory data, please refer to Section 3.1 b.

b. Consequences of not making the data available

Without the provision of your data, you will not be able to use our services, e.g. reading on our websites, creating a customer account, using the shopping basket. Likewise, the provision of your data is necessary for the conclusion of a contract, the desired service or the stated purpose. Without the provision of data, neither a contract can be fulfilled, nor the desired service rendered, nor a stated purpose achieved.

2.2 What are your data processed for?

a. Contact enquiries

To answer your contact requests, including those via our contact form, your details will be processed by us (Art. 6(1)(b) and (f) GDPR). Your name and postal address or email address are required for us to process your request and respond via the appropriate communication channel.

We store the details from your contact request for 6 months after the request has been answered, in case of further queries. After that, your data will be deleted, unless it concerns commercial or business letters, which we will store for six or 10 years respectively (§ 257 para. 4 HGB, § 147 para. 3 AO, § 6 para. 1 lit. c GDPR).

b. Registering for your online account

We process your required registration data, as well as any further data voluntarily provided during your use, for setting up and for your use of your online account and for your online orders (Art. 6(1)(a), (b) GDPR).

We store the registration details for your online account until you have submitted a request to cancel your online account with us, provided that no statutory retention periods prevent this. To cancel the account, an email to info@machn-festival.de or datenschutz@madsack.de is sufficient.

c. Advertising for our products and offers

  • Customer analysis

We also process your personal data from orders and data collected offline, to the extent legally permissible, for customer analysis in order to better understand our customers' wishes and to optimise our offerings and advertising (Art. 6(1)(f) GDPR). The analyses are regularly pseudonymised.

  • Newsletter

With your consent, we will send you email advertisements with information about our interesting products and offers (Art. 6(1)(a) GDPR, § 7(2) No. 3 UWG). You can of course withdraw your consent at any time for the future.

We use the so-called double opt-in procedure online to obtain your consent, to avoid sending our e-mail advertising to e-mail addresses of persons who have not requested it. Your IP address will also be recorded and stored for documentation purposes (Art. 6(1)(c), Art. 7(1) GDPR).

  • Advertising retention period

We store the data collected for advertising purposes for as long as the advertising purpose persists or until we receive a revocation of your consent or your objection to the processing of your data for advertising purposes. Information on the duration of the storage of your data can be obtained individually by contacting our Data Protection Officer (see 1.).

d. CleverReach

This website uses CleverReach services for sending newsletters. Our free newsletter informs you regularly via email about new products and special offers. The data you enter here will only be used to personalise the newsletter and will not be shared with third parties. You can unsubscribe from the newsletter at any time or revoke your consent at any time by emailing info@machn-festival.de. Your data will be deleted within 1 month after you stop receiving the newsletter, unless statutory retention obligations prevent deletion. By submitting the data you have entered, you consent to data processing and confirm our privacy policy.

e. Workshops

A separate application is required for the workshops. The organiser, together with the respective workshop manager, will select from all applicants. For this purpose, the organiser will provide the manager with the applicants' first name, surname, email address, company, and position. Selected applicants will be notified separately by the organiser. There is no entitlement to admission to a workshop. The first name, surname, email address, company, and position of selected workshop participants will be transmitted to the workshop's organising company to enable further exchange during and after the event.

The organiser shall process and use the visitor's personal data solely for the purpose of processing the ticket order and the event, as well as for communication before and after the event.

3. USE OF OUR NEWSLETTERS

3.1 General Information

On our website, you can subscribe to free newsletters containing advertising information, provided you have explicitly consented to receive them. The legal basis for processing your data is Art. 6(1) sentence 1 lit. a) GDPR in conjunction with § 7(2) no. 3 UWG [German Unfair Competition Act] or the statutory permission according to § 7(3) UWG. To prevent misuse, you will first receive an email with a confirmation link, which you must activate to receive the actual newsletter (so-called double opt-in procedure).

When you sign up for the newsletter, your email address, IP address, and the date and time of your registration will be transmitted to us and stored and processed by us. This data will be used exclusively to provide proof of consent for receiving and sending the newsletter. Your data will not be passed on to third parties.

Your data will be stored for as long as we regularly send you the newsletter. If we no longer send you the newsletter, we will delete your data no later than 12 months after the last newsletter was sent to you.

Please note that you can withdraw your consent and unsubscribe from the newsletter at any time by clicking the unsubscribe link located in each newsletter.

3.2 Newsletter Tracking

We would like to inform you that when we send out the newsletter, we analyse your user behaviour to determine if and when the newsletter has been opened. For this analysis, the e-mails sent contain so-called web beacons or tracking pixels, which are stored on our server and loaded when the newsletter is opened. Technical information such as browser type, time of opening, and IP address is transmitted. For the analyses, we link the aforementioned data and the web beacons with your e-mail address and an individual ID. Links received within the newsletter also contain this ID and enable us to analyse your click behaviour.

Using the data thus obtained, we create a user profile to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click in them, and deduce your personal interests from this. We link this data with actions you have taken on our website. The legal basis for this data processing is your consent, Art. 6 (1) sentence 1 lit. a) GDPR or Section 25 (1) TDDDG.

You can withdraw your consent at any time with future effect. In this case, the withdrawal covers the entire newsletter, as separate withdrawal of tracking is unfortunately not technically possible. To do this, simply click the unsubscribe link provided in every e-mail.

Such tracking is also not possible if you have disabled the display of images by default in your email program. In this case, the newsletter will not be displayed in full and you may not be able to use all features. If you manually display the images, the above-mentioned tracking will occur.

The tracking information will be stored for as long as you are subscribed to the newsletter. After unsubscribing, the data will be anonymised and used for purely statistical purposes.

The data you have provided for the purpose of subscribing to our newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe. Data stored with us for other purposes will remain unaffected.

3.3 Use of your email address

In the event of purchasing a product or service, we will use your email address to send advertisements for similar services or items, unless you have objected to this use. Please note that you can object to this use at any time by clicking the unsubscribe link included in every email.

4. WHAT ARE COOKIES AND WHAT ARE THEY USED FOR?

4.1 Cookies

„Cookies“ are small files which we send to your end device via your web browser or other programmes. These are stored locally on your end device and kept ready for later retrieval. We and our service providers use cookies,

  • to make our website user-friendly and optimally tailor it to your needs (Art. 6(1)(f) GDPR),
  • to enable and secure the required technical functions (e.g. shopping cart function, creation of an online account) (e.g. for orders) (Art. 6(1)(b), (f) GDPR),
  • to analyse visits to our website in an anonymised or pseudonymised manner (web tracking) (Art. 6(1)(f) GDPR).

Session cookies are used only for the respective session. They store information about the username, user rights, session validity, and search terms when using the search function. These cookies are deleted again after the session ends, i.e., after leaving our website or closing the browser window.

Other cookies remain on your terminal device for a longer period and allow us to recognise your browser on your next visit (persistent cookies).

4.2 Cookie Deactivation

You can set your web browser to notify you when cookies are set, or to reject all or at least some cookies, thereby prohibiting web tracking and usage-related online advertising. However, if you disable cookies using your browser, various functions on our website will no longer be available to you. You can find information on this option for the most commonly used browsers via the links below:

5. WEB TRACKING (PSEUDONYMISED AND ANONYMISED)

5.1 Google Analytics

For our websites, we use Google Analytics, a web analysis service of Google Ireland Limited („Google“) on the basis of our legitimate interest (i.e. interest in the analysis, optimisation and economic operation of our digital offers) in accordance with Art. 6 para. 1 lit. f GDPR. Google Analytics uses cookies, which are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, by activating IP anonymisation on our website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google has submitted to the EU Privacy Shield (certificate available at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAIThe EU-Privacy Shield can be used as a basis for adequate data protection following a decision by the EU Commission, in order to transfer personal data from the EU to U.S. companies that have certified themselves according to the Privacy Shield.

On our behalf, Google will use this information to anonymously evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website and internet usage.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your truncated IP address) and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

For more information on Google's use of data, and your options for settings and opting out, please visit Google's websites: policies.google.com/technologies/partner-sites?hl=en-GB, policies.google.com/technologies/ads?hl=de, adssettings.google.com/anonymous

5.1.2 Google Fonts

When you visit our website, fonts are loaded from Google's servers to display them on this website, provided that font is not already in your browser's cache. Google is responsible for the processing of data sent with your browser's request for these fonts.

Information about Google Fonts https://fonts.google.com/about, as does Google's privacy policy: https://www.google.com/policies/privacy/.

5.1.3 Surveys with Google Forms

We use the service for individual surveys and feedback requests Google Forms, an offer from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). The data processing is carried out on the basis of your consent in accordance with Art. 6(1)(a) GDPR.

Google also processes the data in part on servers in the USA. For the transmission to the USA, Google relies on the EU-U.S. Data Privacy Framework. However, it cannot be ruled out that US authorities may be able to access the data. We therefore wish to point out that there may be a certain risk to your rights and freedoms when using Google Forms.

When you participate in a survey, the information you enter will be used solely for the stated purpose (e.g. for feedback analysis). Participation is voluntary. No data will be passed on to third parties.

 

Further information on Google's data processing can be found at:
https://policies.google.com/privacy

5.2 Usage-related online advertising

To show you interest-based advertising on our website that matches your interests, we work with third-party advertising companies. These companies collect information about your usage behaviour on our website and other websites using cookies (Art. 6(1)(f) GDPR). This data allows us to optimise ad serving for you and align it with your predicted interests.

The following companies process information for the delivery of usage-based online advertising – also with the help of cookies:

5.3. Use of embedded content

We also use embedded third-party content within our online offering, such as map material from Google Maps. It is not impossible that the providers of this content perceive the IP address of the users. Without this IP address, they cannot send the content to the respective user's browser. We have no influence on third-party providers storing the IP address, for example, for statistical purposes. Browser extensions can be installed against some embedded content, which prevent their display or restrict or anonymise data collection.

5.4. Paid Content

For individual services, charges only apply after a certain period of use has expired. To determine the scope of use required for this, our website sends a cookie to your browser. This is solely for the purpose of recording the time already used free of charge.

We use a paid content system for this, based on our legitimate interests (i.e., interest in the analysis, optimisation and economic operation of our online offering within the meaning of Art. 6(1)(f) GDPR) to determine relevant content depending on usage time. In detail, we want to use this to further develop our offering and, for example, understand how long users read our content and which content is popular in which reader groups. The data is stored and analysed exclusively on servers in the EU or the European Economic Area, to which only we have access.

5.5. Social Networks

  • Which social plugins do we use?

We use social media buttons on our websites using the Shariff method. The social buttons we use only establish direct contact between the social network and the visitor once you, the user, have actively clicked on the share button, like button, or play button. If you are already logged into a social network, a pop-up window will appear in which you can edit the text of the tweet or message. As a user of our websites, you can post our content on social networks. With the Shariff method, we take your data protection interests into account as far as is technically possible. The legal basis for this is your consent (Art. 6(1)(a) GDPR).

If you do not click the button or are not logged into the social network, no cookie from the social network will be placed on your computer. If you are logged in as a user of the social network and click the button, this information will be transmitted to your respective user profile. Other users will then be able to see that you are sharing or tweeting this article. Which users receive this information precisely depends on the privacy settings you have configured in your user profile.

We embed posts from platforms such as Facebook, YouTube, Twitter and Instagram on our website. These platforms are primarily headquartered in the USA, but are subject to the usual data protection regulations in EU and EEA states. For example, when you read an article with an embedded post or YouTube video, the embedding technique may transmit general framework data such as your IP address back to the social networks and platforms if the legal basis according to Art. 6(1)(a) GDPR (consent) is met. We have no influence over how the platforms use the data. Please seek information directly from Facebook, Twitter and YouTube and adjust your privacy settings there. The contact details of the social network providers can be found under 10.2.

  • Online presences on social networks

We maintain online presences on social networks and platforms in order to communicate with the customers, prospects and users active there, and to inform them about our offers.

Please be advised that user data may be processed outside the European Union. This can pose risks to users, as it could, for example, make it more difficult for users to enforce their rights.

Furthermore, user data is generally processed for market research and advertising purposes. For example, usage profiles can be created from user behaviour and the interests derived from it. These usage profiles can in turn be used to, for example, display advertisements both on and off the platforms that are presumed to match user interests. For these purposes, cookies are generally stored on users' computers, which store user behaviour and interests. Furthermore, data independent of the devices used by the users can also be stored in the usage profiles (especially if the users are members of the respective platforms and are logged in).

The personal data of users is processed on the basis of your consent in accordance with Art. 6(1)(a) GDPR.

For a detailed overview of the respective processing activities and the possibilities of objection (opt-out), please refer to the provider-specific information linked below.

We also point out that in the case of information requests and the assertion of user rights, these can be asserted most effectively with the providers. Only the providers have access to the users' data and can take appropriate action and provide information directly.

  • Spotify

Our websites integrate features of the music service Spotify. The provider is Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm in Sweden. You can recognise Spotify plugins by the green logo on our website. An overview of Spotify plugins can be found at: https://developer.spotify.com.

When you visit our websites, the plugin can establish a direct connection between your browser and the Spotify servers. This allows Spotify to receive information that you have visited our site via your IP address. If you click the Spotify button while logged into your Spotify account, you can link the content of our websites to your Spotify profile. Spotify can then associate the visit to our websites with your user account.

The data processing is carried out on the basis of your consent (Art. 6(1)(a) GDPR).

Further information on this can be found at: https://www.spotify.com/de/legal/privacy-policy/.

If you do not want Spotify to be able to link your visit to our pages to your Spotify user account, please log out of your Spotify user account.

  • Meta-Pixel

On our websites, remarketing tags from the social network Meta, 1601 South California Avenue, Palo Alto, CA 94304, USA, are integrated for the purposes of analysis, optimisation, and the economic operation of the online offering. If you visit our sites, the remarketing tags establish a direct connection between your browser and the Meta server, provided you have given your consent (Art. 6 para. 1 lit. a GDPR). Facebook thereby receives information that you have visited our site with your IP address. This allows Facebook to associate your visit to our websites with your user account. We can use the information obtained in this way to display Meta Ads. We would like to point out that we, as the provider of the sites, do not receive any knowledge of the content of the transmitted data or its use by Meta. You can find more information on this in Meta's privacy policy (http://www.facebook.com/about/privacy/). If you do not want data collection via Custom Audience, you can set up Custom Audiences here (http://www.facebook.com/ads/website_custom_audiences/Deactivate. Opt-Out http://www.facebook.com/settings?tab=ads, or http://www.youronlinechoices.com/de/.

  • LinkedIn Pixel

Personal data is processed when you visit this website. Categories of data processed: Data on the use of the website and the logging of clicks on individual elements. Purpose of processing: Investigation of user behaviour, analysis of the effect of online marketing measures and selection of online advertising on other platforms, which are automatically selected by means of real-time bidding based on user behaviour. The legal basis for processing: your consent in accordance with Art. 6 (1) a GDPR. Data is transferred: to the independent controller LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. The legal basis for the transfer of data to LinkedIn Ireland Unlimited Company is your consent in accordance with Art. 6 (1) a GDPR. This may also involve the transfer of personal data to a country outside the European Union. The transfer of data to the USA is based on Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, as the data recipient has undertaken to comply with the data processing principles of the Data Pricacy Framework (DPF). Further information about data protection at LinkedIn can be found in their privacy policy at https://de.linkedin.com/legal/privacy-policy

  • YouTube

We use YouTube to embed videos. The videos are embedded in enhanced privacy mode. YouTube uses cookies to collect information about visitors to their online content. Processing is carried out on the basis of your consent (Art. 6(1)(a) GDPR). YouTube uses this, among other things, to collect video statistics, prevent fraud, and improve user-friendliness. This also leads to a connection with the Google DoubleClick network. If you start the video, this may trigger further data processing operations. We have no influence over this. You can find more information about data protection at YouTube in their privacy policy at: http://www.youtube.com/t/privacy_at_youtube.

 

6. YOUR RIGHTS AS A DATA SUBJECT

If you have questions about the processing of your personal data by us, we will of course be happy to provide you with information about the data concerning you (Art. 15 GDPR).

You have the right to rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), objection to processing (Article 21 GDPR), and the right to data portability (Article 20 GDPR), provided the legal requirements are met.

In all these cases, please contact our Data Protection Officer (see above 2.) using the communication details provided there.

You also have the right to lodge a complaint with a competent supervisory authority (Art. 77 GDPR, § 19 BDSG).

7. CHANGES

From time to time, it will be necessary to adapt the content of this privacy policy for the future. We therefore reserve the right to change it at any time. We will also publish the amended version of the privacy policy in this location. Therefore, when you visit us again, you should re-read the privacy policy.

As of: January 2026