PRIVACY

1. Controller

THE 100
Dennis Drenjovski
Im Hasenholz 12
73614 Schorndorf
Germany

Email: membership@the100edition.com

2. Website hosting and delivery

We use services provided by Cloudflare, Inc. to host, secure and deliver this website. When the website is accessed, technically necessary connection and log data may be processed, including IP address, date and time of the request, requested resource, browser and device information and technical security information.

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interests are the secure, stable and efficient operation of the website and protection against misuse and attacks.

3. Request Access

If you submit the Request Access form, we process the information you provide: first and last name, email address, city/country, company or occupation, optional social profile information, your statement of interest and any preferred member numbers.

We process these data to review your request, assess potential membership and communicate with you about THE 100.

To the extent your request is directed toward entering into a future contractual relationship, processing is based on Art. 6(1)(b) GDPR. For the selection and administration of prospective members, processing may additionally be based on Art. 6(1)(f) GDPR.

4. Service providers and recipients

For the current website and application workflow we use:

• Cloudflare, Inc. — website hosting, CDN, security and Worker infrastructure.
• ActiveCampaign, LLC / Postmark — transactional delivery of the internal notification generated by a Request Access submission.
• Google Ireland Limited / Google Workspace — receipt, storage and handling of application-related email communication.

These providers process personal data only to the extent required for the respective service and in accordance with the applicable contractual data-protection arrangements.

5. International data transfers

Depending on the service and processing location, personal data may be transferred to countries outside the European Economic Area, including the United States.

Where applicable, transfers are safeguarded through an adequacy decision such as the EU-U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses together with any additional safeguards required by law.

6. Retention

If no membership or other continuing relationship is established, Request Access data are generally deleted no later than six months after the request has been finally declined or closed, unless a longer retention period is required by law or necessary for the establishment, exercise or defence of legal claims.

If a continuing relationship is established, the data are retained for as long as required for that relationship and any applicable statutory retention periods.

7. Research relating to requests

Where necessary to assess a Request Access, we may review publicly available professional or social information associated with the details supplied by the applicant, for example publicly accessible LinkedIn, Instagram, company or search-engine results. The categories of data may include professional role, company affiliation, public profile information and other information made publicly available by the person or a third party.

This processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is to evaluate requests and maintain the intended composition and integrity of THE 100. Where Art. 14 GDPR applies, this section also provides information about data obtained from publicly accessible sources.

8. Cookies and analytics

We currently do not use marketing analytics, advertising trackers or non-essential cookies on this website.

9. Your rights

Subject to the statutory requirements, you have the right to access, rectification, erasure, restriction of processing and data portability. You may also have the right to object to processing and to lodge a complaint with a data protection supervisory authority.

Right to object under Art. 21 GDPR: Where personal data are processed on the basis of Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to such processing.

10. Supervisory authority

The competent supervisory authority for Baden-Württemberg is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI Baden-Württemberg).

11. Contact

For privacy-related requests, contact membership@the100edition.com.