1. Introduction

StArfrica is committed to protecting your privacy and ensuring that your personal data is processed lawfully, transparently, and securely. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our website, participate in our programs, or engage with our services. It also explains your rights under the EU General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our website or services, you consent to the practices described in this policy. 

2. Data Controller

The data controller responsible for your personal data is: 

Email: dvormawor@uni-koblenz.de 

If you have questions about data processing, your rights, or complaints, please contact us at the email above. 

3. Data We Collect

We collect and process personal data provided voluntarily by you or generated automatically during your interaction with our website and services. This includes: 

• Personal Information: Name, email address, phone number, company/organization, and position.  Information provided through contact forms, program or course applications, newsletter sign-ups, and community platform registration 

• Technical & Usage Data: IP address, browser type and version, device type, operating system, pages visited, time spent on pages, referral websites, and clicks, cookies and similar tracking technologies 

• Program & Service Data: Information about participation in webinars, consulting courses, or entrepreneurship programs; feedback; survey responses; or content submitted during engagement with StArfrica initiatives 

4. Purpose of Data Processing

Your data is collected and processed for the following purposes: 

• Service Delivery: Managing applications, registrations, course enrollments, and event participation 
• Communication: Responding to inquiries, sending updates, newsletters, and relevant program information 
• Program Administration: Monitoring participation, providing access to course materials, certificates, and community platforms 
• Research & Analysis: Improving programs, content, and services through analytics and user feedback 
• Marketing & Outreach: Promoting StArfrica programs, events, and partnerships (only with your consent) 
• Legal Compliance: Fulfilling obligations under applicable laws, regulations, and contractual agreements 

5. Legal Basis for Processing

We process your personal data on the following legal grounds: 

• Consent (Art. 6(1)(a) GDPR): For newsletters, cookies, and optional program communications 

• Contractual necessity (Art. 6(1)(b) GDPR): To manage course enrollment, program participation, or service provision 

• Legal obligation (Art. 6(1)(c) GDPR): To comply with applicable laws 

• Legitimate interests (Art. 6(1)(f) GDPR): For website security, analytics, fraud prevention, and improving our services 

6. Sharing and Disclosure of Data

• We do not sell or rent personal data. Data may be shared in the following circumstances: 

• With service providers assisting us in program delivery, website hosting, or analytics (under confidentiality agreements) 

• With legal authorities if required by law or court order 

• With partner organizations for programs, events, or research initiatives, only when necessary and with contractual safeguards 

• With your explicit consent for specific third-party collaborations 

7. Data Transfer to Third Countries

Some of our services or cloud providers may be located outside the EU. We ensure that any data transfer complies with GDPR requirements, including adequate safeguards, such as Standard Contractual Clauses approved by the European Commission. 

8. Cookies and Tracking Technologies

StArfrica uses cookies and similar technologies to improve user experience, website performance, and analytics. 

Types of cookies 

• Essential cookies: Required for website functionality 

• Analytics cookies: Track website usage and user behavior (e.g., Google Analytics) 

• Functional cookies: Remember user preference 

• Marketing cookies: Used for outreach and retargeting (only with consent) 

You may manage or block cookies via your browser settings. Disabling cookies may limit website functionality. 

9. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined above or as required by law. Specific retention periods include: 

1. Program and course participation data: up to 5 years 

1. Newsletter and marketing data: until consent is withdrawn 

1. Website analytics: up to 2 years 

10. Your Rights

Under GDPR, you have the following rights regarding your personal data 

• Access: Request access to your data and information on its processing 

• Correction: Request correction of inaccurate or incomplete data 

• Deletion (Right to be Forgotten): Request deletion were lawful 

• Restriction of Processing: Limit how your data is used 

• Data Portability: Receive your data in a structured, machine-readable format 

• Withdrawal of Consent: Withdraw previously given consent at any time 

• Object to Processing: Object to processing based on legitimate interests or marketing purposes  

Requests can be sent to dvormawor@uni-koblenz.de. You also have the right to file a complaint with a European data protection authority. 

11. Data Security

We implement technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. Security measures include: 

• Encrypted data transmission (SSL/TLS) 

• Secure storage and access controls 

• Restricted access to authorized personnel only 

12. Changes to This Policy

This policy may be updated periodically. The latest version will always be available on the website. We recommend reviewing it regularly. 

Contact for Data Protection 

For any questions regarding your personal data, privacy, or GDPR compliance, please email dvormawor@uni-koblenz.de