This statement describes what personal data Konglomerat e.V. processes on this website, in its mailing lists, and in its membership administration, for what purposes, and on what legal basis. It applies to konglomerat.org. The pages of the individual project areas on their own subdomains may have their own privacy notices.
Konglomerat e.V.
Jagdweg 1–3
01159 Dresden
Email: vorstand@konglomerat.org
Association Register: Dresden Local Court, VR 5771
Represented by the Executive Board.
As a small, volunteer-run association, we are not required to appoint a data protection officer. If you have any questions regarding data protection, please email us at vorstand@konglomerat.org.
Our website is hosted and technically maintained by Sandstorm Media GmbH, Tatzberg 47, 01307 Dresden. Sandstorm processes the data on our behalf and in accordance with our instructions; to this end, we have entered into a data processing agreement pursuant to Art. 28 of the GDPR.
Every time the website is accessed, the server automatically stores:
We need this data to deliver the website, ensure its security, and defend against attacks. The legal basis is our legitimate interest in maintaining a secure and functional website (Art. 6(1)(f) GDPR). We do not combine this data with other data, nor do we analyze it for statistical or advertising purposes. The log files are deleted as soon as they are no longer needed for these purposes. We retain data required to investigate a security incident until the investigation is complete.
We do not use cookies for analytics or advertising purposes. There is only one instance on our website where consent is required: embedded YouTube videos on the homepage.
Before such a video is loaded, we ask for your consent via a banner. We store your decision in your browser so that we do not have to ask you again every time you visit. This is technically necessary (Section 25(2)(2) TDDDG) and is based on our obligation to be able to demonstrate your consent (Article 6(1)(c) GDPR).
You can change or withdraw your consent at any time via the “Cookie Settings” link at the bottom of each page. You can also delete stored cookies and website data from your browser at any time.
We embed YouTube videos on the homepage. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The videos are not loaded until you give your consent in the banner. Without your consent, no connection to YouTube is established. As soon as a video is loaded, YouTube or Google receives at least your IP address and information about which page you are visiting. YouTube may store cookies or similar technologies on your device in the process. If you are logged into YouTube or Google at the same time, your visit may be associated with your account.
The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can revoke your consent at any time with future effect via the cookie settings.
Google may also transfer data to the United States. Google is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has determined an adequate level of data protection. For more information, see Google’s Privacy Policy.
There is no contact form on our website. If you email us, we will process your email address, your name, and the content of your message in order to respond to your inquiry.
The legal basis is Article 6(1)(b) of the GDPR if your inquiry relates to membership or use of our workshop; otherwise, it is our legitimate interest in responding to inquiries (Article 6(1)(f) of the GDPR). We delete the messages once the matter has been resolved and there is no legal obligation to retain them.
For communication within the association and in the workshop areas, we operate mailing lists at listen.konglomerat.org. They run on GNU Mailman 3 with the Postorius web interface and are hosted on our behalf by datenkollektiv.net GmbH & Co. KG, Böhmische Str. 14, 01099 Dresden. We have entered into a data processing agreement with Datenkollektiv.
Anyone can subscribe to the working group lists; however, some lists—such as those for the association—are restricted to members only. When you subscribe to a list, we store your email address, your name (if provided), your list settings, and the time of your subscription. For open lists, you confirm your subscription via a link sent by email (double opt-in). Only the list administrators can see who has subscribed to a list. Messages you send to a list are forwarded to all subscribers along with your sender address. The lists do not maintain an archive; messages are only delivered.
The legal basis is your consent upon signing up (Art. 6(1)(a) GDPR). For internal lists for members or work groups, it is the administration of membership (Art. 6(1)(b) GDPR). You can unsubscribe at any time using the link in any list email or via the web interface. Your email address will then be removed from the list.
If you become a member, a supporting member, or a group member, we process:
We need this data to manage your membership in accordance with our bylaws and membership fee regulations: admission, dues, invitations to the general meeting, and association communications. The legal basis is Article 6(1)(b) of the GDPR. Your name, address, and email address are required for this purpose; without them, we cannot admit you as a member. The phone number is optional and is based on your consent (Art. 6(1)(a) GDPR). We retain accounting records because we are required to do so under tax law (Art. 6(1)(c) GDPR).
For membership administration and accounting, we use the campai software provided by campai GmbH, Schönhauser Allee 163, 10435 Berlin. campai hosts the software itself and processes the data on our behalf; we have entered into a data processing agreement for this purpose. The data is stored on servers in the EU.
Within the association, only those individuals who need the data to perform their duties have access to it, in particular the board of directors and the individuals responsible for the treasury and membership administration.
Members with a monthly membership or a 10-visit pass receive a door card for #Rosenwerk. For this, we use Roseguarden, an access control system developed on a volunteer basis within the association, available at open.konglomerat.org. The server is operated privately for the association by a volunteer administrator.
Roseguarden stores:
We use this data solely to ensure the technical functioning of the locking system and do not share it with third parties. The system requires unique, personally identifiable accounts and must retain access records for 48 hours. To allow us to resolve errors even over a weekend, it automatically deletes the access logs after 72 hours. The legal basis is the administration of your membership (Art. 6(1)(b) GDPR); troubleshooting is based on our legitimate interest in a reliably functioning locking system (Art. 6(1)(f) GDPR).
We store your user account for as long as you are a member or have access, and delete it during our annual cleanup, no later than 12 months thereafter.
Only the system administrators have access to the data: the Executive Board, the Extended Executive Board (“Lichtvorstand”), and the volunteer development team at Roseguarden. All have received and signed a privacy policy.
You can view and edit your user account yourself at any time by logging in at open.konglomerat.org. You can request information about your door access via email to zugang@konglomerat.org.
We do not sell data or share it for advertising purposes. Aside from the service providers mentioned above (Sandstorm Media, Datenkollektiv, campai), we only transfer data to the extent necessary:
With the exception of the YouTube embed (see above), we process your data only within the EU.
We store data only as long as we need it for the respective purpose or are legally required to retain it:
You have the right at any time to:
A simple email to vorstand@konglomerat.org is sufficient.
You may also file a complaint with a data protection supervisory authority. The Saxon Data Protection and Transparency Commissioner is the competent authority for us: www.datenschutz.sachsen.de
We will update this statement if our website, our services, or the legal situation changes. The version currently published here is the valid one.
As of: October 2026
