We take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and German data protection laws.

1. Responsible Entity

Responsible for data processing under the GDPR:

Dreamcode Lab GbR

Am Speicher 2, 10245 Berlin
[Email address for privacy-related inquiries]

2. What Data We Collect

We collect and process the following types of personal data:

• Website usage data (e.g. IP address, browser type, pages visited)

• Contact information when you reach out (e.g. email, name)

• App usage data if you're using our tools (e.g. login, feature usage)

We do not sell your data or use it for profiling.

3. Legal Basis for Processing

We process your data only when one of the following legal bases applies:

• You have given consent (Art. 6 (1) a GDPR)

• Processing is necessary for the performance of a contract (Art. 6 (1) b GDPR)

• Processing is required to comply with a legal obligation (Art. 6 (1) c GDPR)

• We have a legitimate interest that does not override your rights (Art. 6 (1) f GDPR)

4. How We Use Your Data

We use your data to:

• Operate and improve our website and services

• Respond to inquiries and support requests

• Analyze user behavior to optimize user experience

5. Cookies and Analytics

We may use cookies to enhance your experience and understand how users interact with our site. You can opt-out or manage your preferences via your browser settings.

If we use analytics tools like Google Analytics or Matomo, we’ll explicitly request your consent before tracking.

6. Data Sharing

We do not share your personal data with third parties unless:

• Required by law

• You have given explicit consent

• It’s necessary to provide the service (e.g. server hosting, analytics)

7. Your Rights

You have the right to:

• Access your personal data (Art. 15 GDPR)

• Correct inaccurate data (Art. 16 GDPR)

• Request deletion (Art. 17 GDPR)

• Restrict processing (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Withdraw consent at any time (Art. 7 (3) GDPR)

• Lodge a complaint with a data protection authority (Art. 77 GDPR)

8. Data Retention

We retain personal data only as long as necessary for the purposes outlined or as required by law.

9. Data Security

We implement technical and organizational measures to ensure your data is secure and protected from unauthorized access or disclosure.

10. Contact

If you have questions about this Privacy Policy or your data, contact us at:
📧 [Your email address]

11. Supervisory Authority

You have the right to lodge a complaint with the data protection authority in your German state. In Berlin, for example:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219, 10969 Berlin
📞 +49 (0)30 13889-0
🌐 https://www.datenschutz-berlin.de/