Privacy Policy

Last updated: 2 April 2026

1. Controller

The controller responsible for data processing on this website is:

DGH Deutsche GründerHilfe gGmbH
Alt-Moabit 19, 10559 Berlin, Germany
Managing Director: Constantin Schmutzler
Email: info@berlinstartupschool.com
Phone: +49 (0) 30 609 888 251

2. What data we collect

We collect only the data that is necessary to operate the platform. We do not use analytics, tracking pixels, or third-party advertising scripts.

2.1 Program reviews

To submit a review, you must sign in with LinkedIn (OpenID Connect via Supabase). We use this only to verify that you are a real person and to limit abuse. Published reviews remain anonymous: we do not display your name, profile, or LinkedIn identity on the site. We store your Supabase user ID with the review for moderation and abuse prevention; the review content you provide (role, ratings, feedback) is what may appear publicly after approval.

2.2 Program submissions

When you submit a program for listing, we collect institution and program details, plus — optionally — your email address so we can follow up with questions.

2.3 Cookies

We use a strictly necessary cookie (haus_admin) to authenticate administrators. When you sign in with LinkedIn, Supabase sets session cookies that are required for that authentication. No tracking or advertising cookies are set for analytics or ads.

2.4 Server logs and rate limiting

Your IP address is read server-side to enforce rate limiting on review submissions (to prevent spam). IP addresses are held in memory only for the duration of the rate-limit window and are not stored permanently or shared with third parties.

3. Legal basis

• Art. 6(1)(a) GDPR — Consent: When you voluntarily sign in with LinkedIn to rate a program, or when you submit a program listing (including optional email for follow-up).
• Art. 6(1)(f) GDPR — Legitimate interest: For the operation and security of the website, including rate limiting and the admin authentication cookie.

4. Data processors

• Supabase Inc. — Database hosting (EU region, Frankfurt). Processes and stores submissions, reviews, and program data on our behalf.
• Vercel Inc. — Website hosting and edge delivery. Processes HTTP requests including IP addresses for content delivery.

Both processors maintain appropriate data processing agreements and technical safeguards. No data is sold or shared with third parties for marketing purposes.

5. Data retention

Submissions and reviews are retained for as long as they are relevant to the platform. You may request deletion of your data at any time by contacting us at the address above.

6. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (without affecting the lawfulness of prior processing)

To exercise any of these rights, email us at info@berlinstartupschool.com.

7. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for Berlin is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin
www.datenschutz-berlin.de