Privacy Policy
Effective date: November 26, 2022
Last updated: November 5, 2025
1. Introduction
This Privacy Policy explains how Public Value Hub gUG (haftungsbeschränkt) ("we", "us", "our") collects, uses, and protects your personal data when you use our website Public Value Hub | We create Impact and related services ("Service"). We comply with the EU General Data Protection Regulation (GDPR) and applicable German data protection laws. By using our Service, you acknowledge that you have read and understood this Privacy Policy.
2. Controller Contact
Public Value Hub gUG (haftungsbeschränkt)
Markgrafenstraße 2
04109 Leipzig, Germany
E-Mail: contact@publicvaluehub.com
Phone number: +49 178 217 97 32
If you have any questions or requests regarding your personal data, please contact us.
3. Personal Data We Process
We may collect and process the following categories of data:
- Identification and contact information: name, organization, email address, phone number
- Usage data: IP address, browser type, operating system, referring URLs, date and time of visits, and pages viewed
- Communication data: information you provide when contacting us or registering for services
- Cookies and tracking data: information stored via cookies or similar technologies (see Section 10)
4. Purposes and Legal Bases of Processing
- To provide and maintain the Service, enable communication, and respond to inquiries – contract performance (Art. 6(1)(b))
- To send updates or information about our services (if you subscribed) – consent (Art. 6(1)(a))
- To analyze usage trends, improve functionality, and ensure security – legitimate interest (Art. 6(1)(f))
- To comply with legal obligations (e.g., tax, accounting, record-keeping) – legal obligation (Art. 6(1)(c))
You may withdraw consent at any time.
5. Data Retention
We store personal data only as long as necessary for the stated purposes. Usage and log data are normally retained for up to 90 days. Where legal or operational requirements demand longer storage, data may be retained in accordance with statutory retention periods. Anonymized or aggregated data may be stored indefinitely.
6. Sharing and Transfer of Data
We may share data with service providers or processors (hosting, analytics, CRM, communication tools) under Data Processing Agreements per Art. 28 GDPR, with public authorities where required by law, or with third-party analytics or contact-management providers. If personal data is transferred outside the European Economic Area, we ensure an adequate level of protection through an adequacy decision or Standard Contractual Clauses.
We are part of the Social Impact Republic (SIR) network, a collaboration of organizations working together to support social innovation and impact measurement. Where relevant to the purposes described in this Privacy Policy, we may share limited personal or organizational information with other SIR partners—for example, to coordinate joint activities, facilitate matchmaking between projects and partners, or assess collective impact. Such sharing occurs only within the scope of our legitimate interests (Art. 6(1)(f) GDPR) and under strict confidentiality and data processing agreements. No personal data is shared for marketing or unrelated purposes without your explicit consent. A current list of SIR partner organizations is available upon request.
7. Use of Artificial Intelligence (AI) and Automated Systems
We use and may further develop AI-based tools and algorithms to enhance our services, including SDG matching, impact measurement, chatbots, and retrieval-augmented generation systems. These systems may include classification or recommendation models. All AI systems operate under human oversight and are not used to make automated decisions producing legal or significant effects. We ensure compliance with the GDPR and forthcoming EU Artificial Intelligence Act, inform users when interacting with AI, and implement safeguards such as pseudonymization, encryption, and accuracy monitoring. Any third-party AI providers act under compliant data processing agreements.
8. Security of Your Information
We apply technical and organizational measures to protect data against unauthorized access, loss, or misuse, including encryption and access control. Despite these measures, no system is completely secure; use of our Service is at your own risk.
9. Automated Decision-Making and Profiling
We do not use automated decision-making or profiling that produces legal or similarly significant effects without human intervention.
10. Cookies and Similar Technologies
We use strictly necessary cookies for essential functions. Other cookies (analytics, preference) are set only with your consent in accordance with § 25 TTDSG and Art. 6(1)(a) GDPR. You can change or withdraw your consent through browser settings or our cookie banner. Details are provided in our Cookie Policy.
11. Your Rights
You have the right to access, rectify, erase, restrict, and port your data, object to processing, and withdraw consent. To exercise these rights, contact contact@publicvaluehub.com. You may also lodge a complaint with the Sächsischer Datenschutzbeauftragter, Bernhard-von-Lindenau-Platz 1, 01067 Dresden, Germany.
12. Data Protection Officer
We are currently not required by law to appoint a Data Protection Officer. Privacy inquiries can be directed to contact@publicvaluehub.com.
13. Updates to This Policy
We may update this Policy periodically. The latest version will always be available at https://publicvaluehub.com. Substantial changes will be announced on our website.
Public Value Hub gUG (haftungsbeschränkt)
Markgrafenstraße 2
04109 Leipzig, Germany