Privacy Policy (Datenschutzerklärung)

Last updated: 10th Dec 2025

1. Controller

Re:source Ecosystems gUG (haftungsbeschränkt)
 Kollwitzstr. 76
 10435 Berlin
 Germany

Email: contact@resource.eco

2. What Data We Process

2.1 Server Logs

When you visit our website, our hosting provider Gandi automatically processes server log data:

  • IP address

  • Date and time of request

  • Browser type and version

  • Accessed URLs

  • Referrer URL

Purpose: technical delivery, security
 Legal basis: Art. 6(1)(f) GDPR
 Retention: 14 days

2.2 Contact Forms

If you contact us via forms, we process:

  • Name

  • Email

  • Role

  • Organisation

  • Message

Form data is transmitted securely and may be temporarily processed by our WordPress form plugin (for example Elementor Essential Forms,Mailer Lite Forms, or similar). The plugin does not store data permanently unless explicitly configured to do so.

Stored in: Gmail (Google Workspace) and Attio CRM

Purpose: responding to inquiries
 Legal basis: Art. 6(1)(b) & Art. 6(1)(f) GDPR
 Retention: 12 months unless further communication is needed

2.3 Newsletter Signup (MailerLite)

When you subscribe to our newsletter, we process:

  • Email address

  • Name (optional)

  • Technical metadata (subscription time, confirmation status)

We use Double Opt-In.
 Provider: MailerLite (EU-based, GDPR compliant)

Purpose: sending newsletters
 Legal basis: Art. 6(1)(a) GDPR (consent)
 Retention: until you unsubscribe or after 24 months inactivity

You can unsubscribe at any time via the link in each newsletter.

2.4 Attio CRM

We store contact information and interactions in Attio.

Purpose: relationship management, event communications, partner & community coordination

Legal basis: Art. 6(1)(f) GDPR
Retention: until no longer needed or upon request

Transfers outside the EU use Standard Contractual Clauses (SCCs).

3. Cookies and Cookie Banner

We use only technically necessary cookies.

Our cookie banner and consent management are provided by Complianz.

No analytics, tracking, or marketing cookies are used.

Legal basis: Art. 6(1)(c) GDPR

4. Third-Party Services

4.1 Google Workspace (Gmail, Calendar, Google Meet & Drive)

We use Google Workspace for email, calendar and file management.
Google may transfer data outside the EU using SCCs.

Purpose: communication, document management
 Legal basis: Art. 6(1)(f) GDPR

4.2 

Zoom

We may conduct online meetings and workshops using Zoom.

Data processed includes:

  • Name, email (if provided)

  • Meeting metadata (date, duration)

  • Technical connection data

Zoom may transfer data outside the EU using SCCs.
Legal basis: Art. 6(1)(b) or Art. 6(1)(f) GDPR

ChatGPT (OpenAI)

We may use ChatGPT by OpenAI to support communication, drafting, or efficiency in responding to inquiries.

We do not intentionally submit sensitive personal data.
Processing outside the EU may occur under SCCs.

Legal basis: Art. 6(1)(f) GDPR (efficient communication and workflow support)

4.3 Potential Future Embedded Services

In the future, our website may embed:

  • YouTube or Vimeo videos

  • Social media content (LinkedIn, Instagram)

  • Google Maps

  • Calendly scheduling tools

Such content will load only after consent via Complianz.

4.4 Hosting

Our website is hosted by Gandi, which processes data necessary for secure operation.

5. International Data Transfers

Some of the services we use (Google Workspace, MailerLite, Attio) may process data outside the EU.
 Transfers rely on:

  • Adequacy decisions, or
  • Standard Contractual Clauses (SCCs) under Art. 46 GDPR

    All providers used by us comply with GDPR requirements.

6. Your Rights Under GDPR

You may request:

  • Access (Art. 15
  • Correction (Art. 16)
  • Deletion (Art. 17)
  • Restriction (Art. 18)
  • Portability (Art. 20)
  • Objection to processing (Art. 21)
  • Withdrawal of consent at any time (Art. 7(3))

To exercise your rights, email: contact@resource.eco

7. Data Security

We protect personal data through appropriate technical and organisational measures, including SSL encryption and secure hosting.

8. Data Retention Summary

  • Server logs: 14 days
  • Contact form submissions: 12 months
  • Attio CRM: until no longer needed or upon request
  • Newsletter data: until unsubscribe or 24 months inactivity
  • No analytics data collected

9. No Data from Minors

Our website is not intended for individuals under 16.
 We do not knowingly process minors’ data.

10. Changes to This Policy

We may update this Privacy Policy occasionally.
 The most current version will always be available on this page.

11. Contact

For questions or data protection requests, contact:
 contact@resource.eco

Scroll to Top