Legal
Privacy policy
Draft: this privacy policy is a carefully prepared draft and should be reviewed by a lawyer. The German version is the legally binding one.
1. Controller
The controller under the GDPR is Nella Christie Delva, STEM-azing, Holzmarktstraße 73, 10179 Berlin, Germany. Email: stemazing.advancement@gmail.com
2. Hosting (GitHub Pages)
This website is served by GitHub Pages, a service of GitHub, Inc. (USA). When you visit it, GitHub processes technically necessary data such as your IP address, the date and time of access and the page requested (server log files) to deliver the website and keep it secure. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure, working website). Data may be transferred to the USA; GitHub is certified under the EU-US Data Privacy Framework, so the transfer rests on the European Commission's adequacy decision (Art. 45 GDPR). Retention: we have no access to these log files ourselves; GitHub states that it keeps them only as long as needed for operation and security.
3. Email contact and invoice requests
If you email us, or use the "Request an invoice" button to send a pre-filled email, we process your details (such as name, email address, billing address and project description) to answer your request and issue invoices. Emails arrive in a Google mailbox (Gmail, Google LLC, USA); Google is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). The legal basis is Art. 6(1)(b) GDPR where your request concerns or prepares an assignment, Art. 6(1)(f) GDPR for other enquiries (legitimate interest in answering them) and Art. 6(1)(c) GDPR for tax record-keeping. We delete requests once they are dealt with and no legal retention duty applies.
4. Booking (Calendly)
On the booking page you can book a call through Calendly (Calendly LLC, USA). The calendar loads only after you click "Show calendar"; nothing is sent to Calendly before that. After the click, Calendly processes your IP address and the details you enter, and may set cookies. The legal basis is your consent by clicking (Art. 6(1)(a) GDPR; for cookies § 25(1) TDDDG) and Art. 6(1)(b) GDPR for arranging the appointment. Calendly is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). Calendly's own privacy policy also applies.
5. No cookies, no analytics, no tracking
This website itself sets no cookies and uses no analytics or tracking tools. It uses only system fonts; there is no connection to Google Fonts or any other font provider.
6. External links
The website links to external services such as the PenetranSci app (Streamlit), neuropenetrance.com, Google Scholar, LinkedIn, X and Instagram. Their own privacy policies apply only once you follow such a link.
7. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), withdrawal of consent (Art. 7(3)) and objection to processing based on legitimate interests (Art. 21). Contact us at the email address above. You may also complain to a data protection authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.