Data Privacy Policy

Privacy Policy

This privacy notice is applicable to this website and explains how we process personal data in our business as per the General Data Protection Regulation (GDPR).

Summary in  Non-Legalese

  • If you visit this website, we collect some information about how you interact with it in order to understand how visitors use our website
  • If you buy tickets to our events, we will use a third parties to process your purchase
  • If you want to talk to us about specifics of how we process your data, you can contact dpo@trkkn.com

Controller and Contact Information

Our contact details are:

  • Company name: Trakken GmbH, hereinafter referred to as “We” or “TRKKN”
  • Company address: Zirkusweg 1, 20359 Hamburg, Germany
  • Data protection contact email address: dpo@trkkn.com

If you feel that any information here is unclear, or missing, please do not hesitate to reach out.

What Are My Data Protection Rights?

  • Right to Access. To obtain the confirmation that we process personal information about you, to access and obtain copies of the information, as well as information relating to the processing we carry out.
  • Right to Rectify. To request your personal information be updated or corrected where appropriate.
  • Right to Delete. To request your personal information be deleted, where appropriate.
  • Right to Restrict Processing. To request that we restrict the processing of your personal information in some circumstances, such as where you contest the accuracy of the personal information, while we investigate your concern.
  • Right to Data Portability. To receive your personal information in a commonly used electronic format, including that we transfer your personal information in that format directly to another person.
  • Right to Object. To object to certain types of processing, such as, direct marketing, profiling, and for purposes of scientific or historical research and statistics.
  • Right to Withdraw Consent. To withdraw your consent at any time when the processing relies upon consent (such withdrawal shall not affect the lawfulness of our processing of your personal information based on consent before its withdrawal).
  • Right to complain to a supervisory authority or other regulator. You may have the right to lodge a complaint with a supervisory authority or other regulator, for example in the country in which you reside, place of work or where the alleged infringement took place. We ask that you contact us in the first instance to attempt to resolve your complaint before you complain to a supervisory authority or regulator.

To exercise any of these rights, you may contact us at the contact details listed above. You can also exercise your right to complain to the relevant supervisory authority or other regulator by contacting them via contact details indicated on their website.

Why Are You Processing My Personal Data?

We strive to minimise our data processing such that none of the processing operations will cause you to be surprised. This means that we aim to either explicitly tell you about the processing or ask you for consent for the processing right before the moment that the processing happens. This includes the following situations:

You Visit This Website

Website provision

When you access this website, there is some technical information that automatically gets transferred to our servers. This information includes:

  • IP address
  • browser type and operating system
  • URL of the requested resource
  • Request timestamp

This data is logged for a short period of time for the purpose of monitoring the health of our website servers and protecting it against malicious attacks. To the degree that the data we log might be personal, our legal basis for processing is GDPR Art. 6 (1) (f), “legitimate interest” as supported by GDPR recital 49.

Audience Measurement

To understand how visitors like you are interacting with this website, we deploy a web analytics service called “Google Analytics 4” (GA4). We send data about your interactions with this website via a first-party server (a server GTM) hosted in the European Union to the servers of GA4. This server GTM will anonymize your IP address before communicating with GA4 servers. GA4 for example collects the following information that relate to your interactions:

  • Browser type and operating system
  • URL of the page that you are on
  • Request timestamp
  • Type of interaction (e. g. page_view or newsletter_subscription)
  • Click IDs (e. g. gclid parameter)

If you grant your consent (GDPR Art. 6 (1) (a)), we connect your interactions to each other via a unique ID stored in a cookie on your device. If you do not grant your consent, we will use GA4 in a cookieless configuration that will collect anonymous information about your interactions with this website.

For the processing of this data, we have entered into the data processing agreement with the company that provides GA4. The DPA is available here: https://business.safety.google/adsprocessorterms/. GA4 is run by:

Google Ireland Ltd (Google)

Gordon House

Barrow Street Dublin 4

IRELAND

GA4 stores your data in the United States and deletes it automatically 14 months after your last visit to this website. For the export of personal data to third countries that have not received an adequacy decision in accordance with Art. 45 GDPR, Google Ireland Limited and its US-American equivalent Google LLC have concluded processor-to-processor standard contract clauses (P2P SCCs). These P2P SCCs are available here: https://business.safety.google/adsprocessorterms/sccs/p2p/. A description of technical security measures specifically for international transfers of data can be found here: https://services.google.com/fh/files/misc/safeguards_for_international_data_transfers.pdf.

Google provides an adequate level of security for the processing of personal data. The technical and organizational measures ensuring this level of security are described in Appendix 2 (“Security Measures”) of the Google Ads processor Terms.

Google Signals

In case you grant consent for targeting purposes, we will make use of a feature called Google Signals for Google Analytics. This feature will associate the data we collect about you in Google Analytics with information from your Google Account - provided that you are logged in and consented. You can review your consent choices in your Google Account for example here: https://myadcenter.google.com/

This additional data, we will use in order to do:

  • remarketing with Google Analytics data
  • Google Display Network Impression Reporting
  • Google Analytics Demographics and Interest Reporting
User-Provided Data

To improve the accuracy of Conversion tracking with Google Ads or Google Analytics, we use a feature called "user-provided data". This feature adds the hashed versions of data that you provide us with, such as your email address, to link conversions on this website with advertisements you might have interacted with on other websites. The legal basis to process this data will be GDPR Art. 6(1) (a), “consent”. This consent, we will ask you whenever you type your data into an input field on our website.

Google Ads

If you grant your consent (GDPR Art. 6 (1) (a)), we use a service called Google Ads run ads and understand how visitors like you are interacting with those ads. To do so, we collect conversion events on this website and share them with Google Ads. Such conversion events for example include the following information:

  • Browser type and operating system
  • URL of the page that you are on
  • Request timestamp
  • Type of conversion (e. g. purchase or newsletter_subscription)
  • Click IDs (e. g. gclid parameter)
  • Cookie IDs

Google Ads is run by:

Google Ireland Ltd (Google)

Gordon House

Barrow Street Dublin 4

IRELAND

Google Ads stores your data in the United States and deletes it automatically max 14 months after your last visit to this website. For the export of personal data to third countries that have not received an adequacy decision in accordance with Art. 45 GDPR, Google Ireland Limited and its US-American equivalent Google LLC have concluded processor-to-processor standard contract clauses (P2P SCCs). These P2P SCCs are available here: https://business.safety.google/adsprocessorterms/sccs/p2p/. A description of technical security measures specifically for international transfers of data can be found here: https://services.google.com/fh/files/misc/safeguards_for_international_data_transfers.pdf.

You Watch Videos on the Website

Our website may use YouTube to display videos. YouTube is provided by a third-party service provider Google, specifically: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you watch these videos, YouTube may collect information about your interaction with the video. This information is governed by YouTube's privacy policy, which can be found at YouTube Privacy Policy: https://www.youtube.com/howyoutubeworks/our-commitments/protecting-user-data/

In order to protect your privacy, this website will not load the YouTube video by default. There will be an opt-in button asking you to consent to loading the YouTube video player each time you want to watch a video on this website. In light of this our legal basis for processing your personal data will be GDPR Art. 6(1) (a), “consent”.

You Buy Tickets to the Analytics Summit

If you buy a ticket for the Analytics Summit, we will send you communication relating to the event. In addition, we work with a subprocessor called “Univents” to process your purchase. Univents is a German company registered at

Univents GmbH

Veilchenweg 38

71672 Marbach am Neckar

Germany

Univents will process the data that you provided to us during the checkout funnel in line with our instructions exclusively to process your purchase. Therefore, our respective legal basis is GDPR Art. 6(1) (b), “contract”. The data they will process includes:

  • Your full name
  • Your payment details
  • The products that you bought

You Watch the Livestream of the Analytics Summit

If you bought a streaming pass to watch the livestream of the Analytics Summit, we will process some of your personal data, such as your IP address, for technical reasons. Therefore, our respective legal basis is GDPR Art. 6(1) (b), created by the contract that you conclude with us on purchasing your streaming pass. This data will only be kept for as long as is necessary to provide the livestream to you. For the provision of the livestream, we cooperate with a third party called

Klink AI Consulting
Stefan Klink
Odenwaldstraße 34
64572 Büttelborn
Email: stefan@gen-ai.consulting

You Subscribe to Our Newsletter

To provide you with our newsletters and updates on the Analytics Summit, we will process the following information (“Subscriber Data”):

• Your email address
• Your name

In either case our legal basis for the processing will be GDPR Art. 6(1) (a), “consent”. To prevent someone else from subscribing your email address (or the other way around) to our newsletter, we will send a so-called “double opt-in” email after your submission on this website. Only email-addresses with a double opt-in will receive our newsletter.
If you want to withdraw your consent in the future, you can find an unsubscribe link at the bottom of each email that we send you.

For the distribution of these emails, we are making use of a third-party service called Mailchimp. We have concluded a data processing agreement with the company offering the Mailchimp service. This company is:

The Rocket Science Group, LLC
675 Ponce de Leon Ave NE
Suite 5000
Atlanta, GA 30308
USA

You can find a public copy of the data processing agreement here: https://mailchimp.com/en/legal/data-processing-addendum/.

Mailchimp stores your Subscriber Data in data centres in the United States. Mailchimp is certified under the EU-US Privacy Shield mechanism. Therefore, the legal basis for transferring your Subscribe Data to the United States is the adequacy decision pursuant to GDPR Art. 45.

—

policy version: 2025-03-14