Privacy Policy
1. Data controller
The data controller for this website is: SessionRoomProject e.V., Eleonorenstrasse 19a, 30449 Hannover, Germany. Contact: community@sessionroomproject.com
2. Privacy at a glance
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
If you have any questions about data protection, please contact: community@sessionroomproject.com
2. Data collection on our website
We collect, process and use personal data only insofar as this is necessary for the provision of a functional website and its contents and services. Collection and use take place only with your consent.
- Contact form: Name, email address and message (only with your consent)
- Website analysis: This website does not use any analytics or tracking tools.
- Cookies: Only Google reCAPTCHA when using the contact form (after your consent)
4. Contact form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provided there, are processed for the purpose of handling the inquiry and in case of follow-up questions.
The data is not stored in our own database but is sent to us by email and may remain in our email inbox and on the servers of our email service provider (Resend).
We do not pass on this data without your consent. The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO).
The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed).
5. Website analysis
This website does not currently use any web analytics services or tracking tools. No usage data is collected for analysis purposes.
No personal data is collected for analytics purposes.
6. Cookies
Our website does not set any cookies of its own during normal browsing. If you consent to reCAPTCHA and use the contact form, Google reCAPTCHA may set cookies.
These third-party cookies are used for spam protection. You can adjust the cookie settings in your browser.
7. Data sharing
Your personal data will not be passed on to third parties, except:
We have your express consent to do so, the disclosure is necessary for the assertion, exercise or defense of legal claims, or when using third-party services (Google reCAPTCHA for spam protection, Resend for email delivery). These services have their own privacy policies and data processing practices.
8. Third-party services
In the public area of this website, the following third-party services are used:
- Google reCAPTCHA: Spam protection on the contact form (only after your consent). Privacy policy: https://policies.google.com/privacy
- Resend: Email delivery for contact requests. Privacy policy: https://resend.com/privacy
9. Access data / hosting
When you access this website, access data (e.g. IP address, date/time, URL requested, browser information) may be recorded by the hosting platform Dokploy, the reverse proxy Traefik, and by Cloudflare (DNS and proxy service). Purpose: operation, security and abuse prevention. Legal basis: Art. 6(1)(f) GDPR. Retention is determined by the respective providers (typically a few weeks).
10. Your rights
You have the following rights regarding your personal data:
- Right of access to the personal data we process (Art. 15 GDPR)
- Right to rectification of incorrect or incomplete data (Art. 16 GDPR)
- Right to erasure of your data stored with us (Art. 17 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to the processing of your data (Art. 21 GDPR)
- Right to withdraw your consent (Art. 7(3) GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority is the State Commissioner for Data Protection of Lower Saxony (LfD): LfD Niedersachsen
11. International transfers
When using Google reCAPTCHA, Resend and Cloudflare (DNS and proxy service), data may be transferred to the USA or other third countries. There is no EU adequacy decision for the USA. We use appropriate safeguards (e.g. EU standard contractual clauses). For details, see the privacy notices of the providers mentioned.
12. Data security
We use the widespread SSL procedure in connection with the highest level of encryption supported by your browser during the website visit.
Usually this is a 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology.
13. Data protection officer
A data protection officer is not currently appointed, as the statutory requirements (e.g. § 38 BDSG) are not met.
14. Photo and video recordings at events
At our events (e.g. ELO sessions, concerts, workshops), photo and video recordings may be taken.
Recordings are made by us or photographers/videographers commissioned by us.
The purpose is to document our work, present it on our website and on social media channels (e.g. Instagram) for public relations and to promote future events.
The legal basis is generally our legitimate interest in public relations (Art. 6(1)(f) GDPR). Where we clearly depict individuals, processing may be based on your consent (Art. 6(1)(a) GDPR).
If you do not wish to be photographed or filmed, please contact the event staff or entrance control. We will then exclude you from recordings or make you unrecognisable afterwards.
15. Participant registration (workshops)
When registering for our workshops, we collect personal data.
We typically collect your name and email address, as well as any other information required for the workshop (e.g. prior knowledge, contact for follow-up questions).
The data is used to organise the event, contact you in case of cancellations or changes, and process your participation.
The legal basis is the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR) or your consent (Art. 6(1)(a) GDPR).
The data will be deleted after the workshop has ended or after the period required for follow-up questions or legal retention, unless statutory retention obligations apply.
16. Changes to the privacy policy
We reserve the right to occasionally adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy.
Status: February 2026