Data protection · GDPR
Privacy
What this website and the Guild do with your data. Short version: as little as possible.
Who is responsible
Alex Adamov Digital Services, Alexander AdamovKlarastraße 3, 12459 Berlin, Germany
Email: roboguild@protonmail.ch
Visiting this website
This website sets no cookies, runs no analytics and loads nothing from third parties. Fonts and images are served from our own host. If you switch between the light and dark theme, your browser remembers that choice in its local storage on your device. Nothing about it is sent to us.
Our hosting provider, Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, processes technical access data such as IP address, time and requested page in server logs to keep the site secure and running. Vercel participates in the EU-US Data Privacy Framework. Legal basis: Art. 6 (1) (f) GDPR. Vercel deletes these logs after a short period and processes them under its data processing agreement.
Joining the Guild on Discord
The community runs on Discord, operated by Discord Inc., 444 De Haro Street, San Francisco, CA 94107, USA. If you join, Discord processes your data under its own privacy policy. Other members see your Discord name, profile and messages. We see the answers you give to the server's joining questions and keep them only inside Discord. We delete them when you leave the server, at the latest after 12 months. Legal basis: Art. 6 (1) (b) GDPR.
Shared spaces, build logs and the member directory
If you join the Guild's organisation on Hugging Face (Hugging Face, Inc., USA) or GitHub (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA), your username and what you upload are visible to other members, or publicly in public repositories, under each provider's own privacy policy. Build logs and the member directory live in the Guild's Discord: what you post there, including the skills you list, is visible to other members. You decide what to share and can delete it at any time. Legal basis: Art. 6 (1) (b) GDPR.
Events on Luma
Guild Night RSVPs run on Luma, operated by Luma Technology Inc., USA. Luma processes your name and email to manage the RSVP and send reminders under its own privacy policy. Legal basis: Art. 6 (1) (b) GDPR. We see your name and email in the guest list and delete guest lists six months after the event.
Paying for a Hardware Pool seat
Payment buttons take you to a checkout page run by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland. Stripe processes your name, email, billing details and payment data to take the payment. We receive your name, email, billing address, the seat you bought, whether you asked to start before the 14-day withdrawal period ends, your acceptance of the terms, and payment status, never your full card details. Legal basis: Art. 6 (1) (b) GDPR, and Art. 6 (1) (c) GDPR for the billing address we must keep for tax records. Stripe's privacy policy: stripe.com/privacy.
Being a Hardware Pool member
To run the Berlin node we keep your name, email, seat, payment status, and records of robot loans and Kaution deposits. Legal basis: Art. 6 (1) (b) GDPR. We keep this while you are a member, and accounting records for as long as German tax and commercial law requires.
Withdrawal and cancellation forms
If you use /withdraw or /cancel, we process your name, the contract you name, your email address, any message, and the date and time we received it. The form is handled by a function on our host, Vercel, and the acknowledgement emails are sent through Resend, Inc., USA. For cancellations, the function may look up your membership in Stripe by the email you give, only to state your end date in the confirmation email. We keep these records as proof of what you sent and when, for three years from the end of the year in which the contract ended (the regular limitation period, § 195 BGB). Legal basis: Art. 6 (1) (c) GDPR for receiving your statement and sending the confirmation (§ 356a and § 312k BGB); Art. 6 (1) (f) GDPR for keeping the record afterwards, because we need to be able to prove what you sent and when.
Transfers outside the EU
Vercel, Discord, Luma, Resend, Hugging Face and GitHub are based in the USA. Where a provider is certified under the EU-US Data Privacy Framework, transfers rely on the European Commission's adequacy decision (Art. 45 GDPR); otherwise on the EU standard contractual clauses (Art. 46 (2) (c) GDPR). Stripe processes payment data through Stripe Payments Europe, Ltd., Ireland.
Writing to us
If you email us, we use your message and address to reply. Legal basis: Art. 6 (1) (b) or (f) GDPR. We delete your email once the matter is settled, at the latest three years after the end of the year of our last contact. Emails about a purchase are kept as long as tax law requires (up to eight years).
Your rights
You can ask for access to, correction, deletion or restriction of your data, receive it in a portable format. You can complain to a data protection authority, for example the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
Right to object (Art. 21 GDPR). Where we process your data on the basis of our legitimate interests (Art. 6 (1) (f) GDPR: server logs, some emails, records kept as proof), you can object at any time for reasons arising from your particular situation. Write to us at the address above. We then stop, unless we have compelling legitimate grounds or need the data to establish, exercise or defend legal claims.