Privacy policy
1. Controller
The party responsible for data processing on this website is:
SAM – share and manage e.V.
Siebachstraße 101, 50733 Köln, Germany
represented by the Executive Board, Hannah Greiner (Chair)
Email: mail@hello-sam.eu
2. Your rights as a data subject
You have the right at any time to obtain information regarding your personal data stored by us, its origin and recipients, and the purpose of the data processing (Art. 15 GDPR). You are also entitled to a right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), as well as a right to object to the processing (Art. 21 GDPR). For this purpose, as well as for any further questions, you can contact us at any time at the address stated above. You also have the right to lodge a complaint with a data protection supervisory authority.
3. Hosting and server log files
This website is delivered via Firebase Hosting, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you visit the website, general information transmitted by your browser is processed automatically. This typically includes the browser type, operating system, referrer URL, time of the server request and the IP address. This data is used exclusively to ensure trouble-free and secure operation and is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). A transfer to the USA cannot be ruled out; Google is certified under the EU-US Data Privacy Framework.
4. No cookies, cookieless audience measurement
This website does not set cookies and does not store any information on your device. To understand how the website is used, we collect anonymous usage statistics with PostHog (PostHog Inc., data processed in the EU, servers in Frankfurt am Main), such as pages viewed, time on page, referring page and whether a pre-registration was completed. No profile is created and no identifier is stored in your browser. Repeat visits on the same day are grouped on the server using a hash that is regenerated daily; your IP address is not stored. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in improving our services). You can object to this processing at any time by email.
5. Pre-registration
If you pre-register using the form, we process your first name, last name, email address and password as well as the name, email address and registered seat of your organisation in order to create your account and organisation profile on Sam and to notify you when the platform launches. The password is only stored in encrypted form. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract).
If you use the form to invite colleagues or other organisations, we use the email address you enter and your optional message solely to send this one invitation (Art. 6(1)(f) GDPR).
The data is stored in Google Firebase (Google Ireland Limited, data centre in Frankfurt am Main); emails are sent via MailerSend (MailerLite Limited, Ireland). It is deleted when you delete your account or ask us to do so, unless statutory retention obligations apply.
6. Video from Vimeo
The home page offers a video from Vimeo (Vimeo.com, Inc., 330 West 34th Street, New York, NY 10001, USA). It is only loaded when you click “Play video”. Only then is a connection to Vimeo’s servers established, transmitting your IP address among other data; the player is loaded with the “Do Not Track” parameter. The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR). Further information can be found in Vimeo’s privacy policy: https://vimeo.com/privacy
7. Links to Instagram and betterplace.org
This website links to our Instagram profile (Meta Platforms Ireland Limited) and to our donation page on betterplace.org. These are plain links; no content from these providers is embedded, and data is only transmitted once you follow a link. Processing on the linked pages is governed by the respective provider’s privacy policy.
8. SSL/TLS encryption
For security reasons, this site uses TLS encryption. You can recognise an encrypted connection by the browser’s address bar starting with “https://”.
9. Changes to this privacy policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services. The new privacy policy will then apply to your subsequent visit.
As of September 2026