Privacy Policy

1. Controller

Odonatum e.V.
c/o Fachschaft MSE
Parkring 35
85748 Garching bei München
Germany

Represented by the board: Daniel Ritter, Marlon Müller, Konstantin Eisebitt

Email: board@odonatum.com

We have not appointed a data protection officer, as we are not required to.

2. Overview

We process personal data only where it is needed to run this website, to handle applications and to answer enquiries. We use no cookies, no analytics or tracking tools and no advertising. Fonts are served from our own server, not from Google or other third parties.

3. Hosting and server log files

This website is hosted by Netlify, Inc. (USA). Each page request makes Netlify process technically necessary data: IP address, date and time, requested address, referrer URL, browser and operating system. This is needed to deliver the site and protect it from attacks (Art. 6(1)(f) GDPR, legitimate interest in secure operation). Transfers to the USA are based on the EU-U.S. Data Privacy Framework adequacy decision.

4. Images

Images on this website are delivered through the content delivery network of our content management system, Sanity (Sanity Inc.). This transmits your IP address to Sanity (Art. 6(1)(f) GDPR, legitimate interest in fast delivery).

5. Email and cooperation enquiries

When you email us, we process your details to answer your enquiry (Art. 6(1)(b) or (f) GDPR).

The cooperation form collects your name, email address and message. To prevent abuse we first send you a confirmation email; only after you click its link is the enquiry forwarded to our inbox. The link is valid for 24 hours. Emails are sent through Resend (Resend, Inc., USA). To avoid duplicate delivery we store a note in Amazon S3 that the enquiry was confirmed. Our inboxes are run by Google Workspace. We delete enquiries once they are dealt with and no retention obligation applies.

6. Applications

The application form collects your name, email address, chosen areas of interest, cover letter, motivation text and, optionally, your CV. We process this data to decide on your admission to the association (Art. 6(1)(b) GDPR).

  • Your CV is stored in Amazon S3 (Amazon Web Services, region Europe) when you submit the form.
  • You receive a confirmation email through Resend. Only after you click its link (valid for 24 hours) is the application, including the CV, sent to our inbox.
  • Only the members who decide on applications have access.
  • We delete applications and CVs 6 months after the process ends, including CVs from applications that were never confirmed. If you become a member, we keep the data needed for your membership in our member records.

7. Links to social networks

We link to our profiles on LinkedIn and Instagram. These are plain links, not embedded content: no data is transferred until you click one, and then the network's own privacy policy applies.

8. Encryption

This website is served exclusively over an encrypted HTTPS connection.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Write to board@odonatum.com.

You can also lodge a complaint with a data protection supervisory authority, for example the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.

Last updated: 02.11.2026