Privacy

Privacy policy

This privacy policy explains how personal data is processed on the Berlin Expert Days e.V. website for the 2026 section. It reflects the current technical state of this website.

1. Controller

Berlin Expert Days e.V.
Bülowstraße 66
10783 Berlin
Germany

Email: info@bed-con.org
Website: https://bed-con.org

2. Access to the website and server log files

When this website is accessed, the web server processes technically necessary data, in particular IP address, date and time of access, requested URL, referrer, browser type, browser version and operating system. This processing is required to deliver the website, ensure stability and security and detect misuse or attacks.

The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure and reliable operation of the website.

3. Cookies and local storage

We do not use analytics, marketing or tracking cookies on the 2026 website.

In local storage, we store the status bedcon_cookie_consent_v1 for the privacy settings banner and, if applicable, the status bedcon_external_media_consent_v1 for your consent to external content. These entries are used solely to store your choice and not to ask you again on every page view.

In addition, we store your language selection in the cookie bedcon_2026_lang if you explicitly switch between German and English. The cookie is used to display the website in your chosen language on future visits and is stored for up to one year.

You can change or withdraw your choice for external content at any time via the privacy settings link in the footer. You can also delete local storage entries and cookies via your browser data.

4. Contact form and email communication

If you contact us via the contact form or by email, we process the data you provide to handle your request. In the contact form, this includes in particular first name, last name, email address, subject and message.

The content submitted through the contact form is forwarded to us by email. We use an SMTP infrastructure for sending. Processing is carried out exclusively to handle your request and communicate with you.

The legal basis is Art. 6 para. 1 lit. b GDPR insofar as your request is related to the initiation or performance of a contract; otherwise Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in handling incoming inquiries.

5. Google reCAPTCHA in the contact form

To protect our contact form against spam and automated requests, we use Google reCAPTCHA v3. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When the contact page is loaded and the form is used, a connection to Google is established for reCAPTCHA. In particular, IP address, browser and device information, referrer, usage data and the reCAPTCHA token generated by Google may be processed. The token is verified server-side before a message is sent.

The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in protecting our website from misuse and automated form submissions.

Further information: Google Privacy Policy and Google Terms.

6. Embedded content and external services

On some pages, we embed external content or scripts. YouTube videos, Google Maps and Sessionize are blocked by default and are only loaded after your explicit consent in the privacy settings or after clicking the respective placeholder. Only then is a connection to the respective provider established. In particular, your IP address, browser data, referrer and information about the requested content may be processed.

• YouTube (youtube-nocookie.com) on the home page for an embedded video.
• Google Maps on the venue page.
• Sessionize for program, session and speaker information as well as the link for submitting talks.
• Mastodon (mastodon.social) on the home page for displaying current posts, preview images and links to the BED-Con profile.

Mastodon posts are loaded server-side via the Mastodon API. In addition, connections to Mastodon may occur when embedded preview images are displayed or when a post is opened. In particular, IP address, browser data and referrer may be processed.

The legal basis for YouTube, Google Maps and Sessionize is your consent pursuant to Art. 6 para. 1 lit. a GDPR and, insofar as information is stored on or accessed from your device, Section 25 para. 1 TDDDG. You may withdraw your consent at any time with effect for the future via the privacy settings in the footer. Mastodon posts are loaded server-side; when preview images or external links are opened, processing is based on Art. 6 para. 1 lit. f GDPR. Please note that when external content is loaded, data may also be transferred to providers in third countries, in particular the USA.

7. Ticket sales via pretix and payment processing

For ticket sales we refer to the service pretix provided by rami.io GmbH, Berthold-Mogel-Straße 1, 69126 Heidelberg, Germany. On the ticket page, the ticket shop may also be embedded via a pretix widget. In this case, a connection to pretix is established when the ticket page is accessed, and technical usage data such as IP address, browser data and information about the requested page may be processed by pretix.

If you use the ticket shop, further data processing takes place within the order process by pretix. For payment processing, additional payment providers, in particular Stripe and, depending on the selected payment method, other providers may be involved.

The data processed there depends on the specific order and payment process. The privacy notices of the respective providers apply.

Further information: pretix privacy and Stripe privacy.

8. External links and social media presences

Our website contains links to external websites and social media presences, in particular Mastodon, Bluesky and LinkedIn. When simply visiting our website, no data is transferred to these services. A connection to the respective provider is only established when you actively click such a link.

9. No web analytics and no advertising tracking

On the 2026 website, we currently do not use web analytics, remarketing, conversion tracking or social media plugins. In particular, we do not use Google Analytics, Google Ads conversion tracking or embedded Twitter components in this section.

10. Storage period

We store personal data only as long as necessary for the respective purposes or as long as statutory retention obligations apply. Data from contact requests is deleted as soon as the request has been conclusively processed and no statutory retention obligations or other legitimate reasons require further storage.

11. Your rights

Subject to the statutory requirements, you have the following rights in particular:

• Right of access pursuant to Art. 15 GDPR
• Right to rectification pursuant to Art. 16 GDPR
• Right to erasure pursuant to Art. 17 GDPR
• Right to restriction of processing pursuant to Art. 18 GDPR
• Right to data portability pursuant to Art. 20 GDPR
• Right to object pursuant to Art. 21 GDPR
• Right to lodge a complaint with a supervisory authority

If processing is based on your consent, you may withdraw that consent at any time with effect for the future.

12. Contact for privacy matters

If you have questions about privacy or wish to exercise your rights, please contact us at info@bed-con.org.

13. Version of this privacy policy

Version: March 15, 2026