Privacy Policy

For the planning and implementation of BCGDigital Ventures’ Social Impact competition (“Competition”), the processing of personal data is necessary. This privacy policy describes how your personal. data is collected and processed during your visit to our website https://socialimpact.bcgdv.com/ (“Website”) and during your application for and participation in the Competition. 

Personal data means any information concerning you personally, such as your name, address, e-mail address or user behaviour.We have taken extensive technical safety measures in our company to protect your data from accidental or intentional manipulation, loss, destruction or from access by unauthorised parties. Our security measures are regularly reviewed and updated to reflect technological developments.

1. Controller

The controller under Art. 4 (7) of the General Data Protection Regulation (GDPR) is  

BCG Digital Ventures GmbH („BCGDV“)
Dircksenstrasse 41
10178 Berlin

2. Contact details for the data protection officer

You can contact our Data Protection Officer under our postal address with the addition "data protection officer"or via e-mail to dataprotection@bcgdv.com.

3. Collection of personal data during visits to our website

3.1 Informational use

When you solely visit our website for information purposes, i.e. if you do not register for the Competition or otherwise provide information to us, we only collect the personal data that your browser transmits to our server.

When you view our website, we collect the following data, which are technically required to display our website and to ensure stability and security:

- IP address,
- date and time of the request,
- time zone difference to GreenwichMean Time (GMT),
- content of the request (specific page),
- access status/HTTP status code,
- data volume transmitted
- website where the request originated,
- browser, operating system and user interface,
- browser language and version.

The legal basis is our legitimate interest in the correct display of our website and ensuring its  stability and security, Art. 6 (1) lit. fGDPR.

3.2 Cookies

When you use our website, cookies are stored on your computer. Cookies are small text files that are stored on your hard disk and associated with the browser you use. They send specific information to the organization setting them. Cookies cannot execute applications or transmit viruses to your computer. They serve to make the overall web experience more user-friendly and efficient.

This website uses the cookie types listed below.

Transient cookiesTransient cookies are deleted when you close the browser. They include, in particular, session cookies. These cookies store a co-called session ID that permits assigning different requests from your browser to a specific session. Your computer can then be identified when you return to our website. Session cookies are deleted when you log out or close your browser. 

Persistent cookies
Persistent cookies expire after a specific period, which may be set individually for every cookie. You can delete these cookies at any time in the security settings of your browser. 

Preventing the use of cookies
You can configure your browser settings according to your preferences, such as blocking the use of third-party cookies or all cookies. Please note, however, that you may in this case not be able to use the full range of services provided on this website. 

Legal basis and storage period
The legal bases for possible processing of personal data and their storage duration vary and are described in the following sections.

4. Collection of personal data during application and participation in the Competition

You have the opportunity to apply for participation in the Competition via the Website. The basic process of the Competition is described in our FAQs and in the conditions of participation (“Terms and Conditions”).

4.1 Application

During the application process we collect personal data such as your name and your email address as well as certain information about your organization, your team members and your submitted venture idea. We further collect any personal data that you submit e.g. in additional documents and a motivation video. Information that is mandatory is marked accordingly in the application form.

After applying, we might reach out to you to request further information, such as contact details of your team members.

The purpose of the data processing is to run the Competition, e.g. to contact you and potentially invite you and your team members to events such as iteration calls, workshops and pitches. Information about your venture idea will be used to evaluate its impact and feasibility during the selection process.

The legal basis for data processing is Art. 6 (1)lit. b DSGVO. According to Art. 6 (1) lit. b DSGVO, personal data may be processed if this is necessary for the performance of a contract or for the implementation of pre-contractual measures. A contractual relationship is established when you agree to the Terms. This includes the carrying out of the competition as described in more detail in the Terms.

4.2 Photography and filming

We are photographing and filming during the pitch events (“Recordings”).  TheRecordings shall be used for internal documentation and public relations purposes and shall be published in connection with the Competition on our social media channels and on the Website. The objective of the publication is to raise awareness for the Competition and the winning venture idea. The legal basis is Art. 6 (1) lit. f GDPR, our legitimate interest is to report about theCompetition.

4.3 Retention

Personal data collected during the registration and participation will be deleted as soon as its storage is no longer necessary for the purposes mentioned under 4.1. – 4.2 and legal retention periods have passed.

5. Contact via e-mail

When you contact us via e-mail, we store the data you submit in order to respond to your enquiry. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) lit. fDSGVO. Our legitimate interest is to comply with your request. If the e-mail contact aims at the conclusion of a contract (i.e. applying for theCompetition), the additional legal basis for the processing is Art. 6 (1) lit.b DSGVO.  We will delete the data concerned when storage is no longer required, or we will restrict the processing of data that are subject to statutory retention periods.

6. Website analysis / marketing

We use cookies and other technologies for analysing and optimising our websites as well as for marketing purposes, which are described below. 

This helps us to improve our offers and make them more user-friendly. The data collected in the process is not used to identify individual users personally. Anonymous or at most pseudonymous data is collected.

6.1 Google Analytics

If you have given your consent, GoogleAnalytics, a web analysis service of Google Ireland Limited, is used on this website. Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users interact with the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

However, if IP anonymisation is activated on this website, Google will reduce your IP address within Member States of theEuropean Union or in other states party to the Agreement on the EuropeanEconomic Area beforehand. We would like to point out that on this websiteGoogle Analytics has been extended to include IP anonymisation in order to ensure anonymous collection of IP addresses (so-called IP masking). The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

Purpose of the processing: On behalf of theoperator of this website, Google will use this information to evaluate your useof the website, to compile reports on website activity and to provide thewebsite operator with other services related to website and Internet use.

The legal basis for the use of Google Analyticsis your consent in accordance with Art. 6 (1) lit. a GDPR. The recipient of thecollected data is Google.

Transfer to third countries: The personal datawill be transferred to the USA under the EU-US Privacy Shield on the basis ofthe European Commission's adequacy decision. You can download the certificate here.

The data sent by us and linked to cookies,user-identifiers (e.g. User-IDs) or advertising-identifiers are automaticallydeleted after 14 months. Data whose retention period has been reached isautomatically deleted once a month.

You can prevent the storage of cookies in thesettings of your browser software accordingly; however, we would like to pointout that in this case you may not be able to use all functionalities of thiswebsite to their full extent.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (includingyour IP address) and from processing this data by Google by downloading and installing the Opt-out cookie.

For more information on terms of use and data protection, please visit Google Analytic’s terms or policies.

6.2 Google Tag Manager

For reasons of transparency, we would like to point out that we use the Google Tag Manager. The Google Tag Manager itself does not collect any personal data. The Tag Manager makes it easier for us to integrate and manage our tags. Tags are small code elements used, among other things, to measure traffic and visitor behaviour, to measure the impact of online advertising and social channels, to set up remarketing and targeting, and to test and optimize websites. We use the Tag Manager for the Google services Google Analytics. For more information about the Google Tag Manager see: https://www.google.com/intl/de/tagmanager/use-policy.html.

7. Data transfer to third parties

A transfer of your data to third parties does not take place, unless we are legally obliged to do so, the data transfer is necessary for the performance of a contractual relationship with you or you have previously expressly consented to the transfer of your data.However, we engage external service providers who take on technical and content-related tasks in the provision of our website. These include services such as hosting and maintenance of our website. We use: 

Webflow, Inc., 398 11th Street, San Francisco,CA 94103  
Formagrid Inc., doing business as Airtable, with a place of business at 799 Market St, Floor 8, San Francisco, CA 94103, USA
GoogleDublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Google LLC,1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Egynte Inc., 1350 W. Middlefield Road, MountainView, CA 94043 USA
BostonConsulting Group Inc., 200 Pier Four Boulevard, Boston, MA 02210, USA


Where our service providers are engaged in order to assist us in our tasks, we ensure that they comply with the applicable provisions of the data protection laws.

8. Third country data transfer

For our daily work we use modern cloud-based storage and office solutions. As part of the use of these services, your data may be transferred, processed and stored outside the European Economic Area(EEA). Countries outside the EEA may handle the protection of personal data differently than countries within the European Union.

There is currently no decision by the EUCommission that these third countries generally offer an adequate level of protection. In this case, we conclude EU Standard Contractual Clauses with our service providers, or rely on privacy shield mechanisms, which are both recognised by the European Commission as adequate safeguards for the protection of personal data.

To learn more about how we ensure adequate protection, please contact our Data Protection Officer to request a copy of the specific security measures we apply when transferring your personal data.

9. Your rights

As a data subject, you have the following rights regarding our handling of your personal data:

9.1 General rights

You have the right of access under Article 15GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18GDPR, the right to object under Article 21 GDPR and the right to data portability under Article 20 GDPR.

9.2 Right to object in the event of data processing for legitimate or public interest

Pursuant to Art. 21 (1) GDPR, you have the right to object at any time to the processing of personal data concerning you on the basis of Art. 6 (1) lit. e GDPR (data processing in the public interest)or Article 6 (1) lit. f GDPR (data processing to protect a legitimate interest),this also applies to profiling based on this provision. 

In the event of your objection, we will no longer process your personal data unless we can prove compelling grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

9.3 Right to object to direct marketing

If we process your personal data for direct marketing purposes, you have the right pursuant to Art. 21 (2) GDPR to object at any time to the processing of personal data concerning you for the purpose of such advertising, this also applies to profiling insofar as it is associated with such direct marketing.

In the event of your objection to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

9.4 Revocation of consent

You can revoke your consent to the processing of your personal data at any time with effect for the future.

9.5 Right to complain to a supervisory authority

In addition, there is a right to lodge a complaint to the responsible data protection supervisory authority.

March 2020