Privacy Policy (GDPR)

1. Data Controller

Responsible for data processing:
Brandon Drayer
Riehlstraße 16A
14057 Berlin
Germany

Contact for data protection matters:
Email: MisterRubberBerlin@gmail.com Copy email

Mister Rubber Berlin is not a registered organization or association. The contest is operated by an individual.

2. General Information on Data Processing

This website (https://rubber.berlin) is hosted on Cloudflare Pages, a content delivery network and hosting service. We collect as little personal data as possible and process it only in accordance with legal requirements.

When you access our pages, your browser transmits technical data (e.g., IP address, date/time, requested file, browser type) to our hosting provider to ensure provision and security. The legal basis is Article 6(1)(f) GDPR (legitimate interest in the technical provision and security of the website). Server logs are automatically deleted after a short period and are not used for marketing purposes.

Hosting Provider: This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (Cloudflare Pages). Cloudflare operates data centers globally, including within the European Union. Data processing may involve a transfer of data to the United States. Cloudflare is certified under the EU–US Data Privacy Framework (DPF). Where applicable, data transfers rely on Art. 45 GDPR (adequacy decision) or on Standard Contractual Clauses (Art. 46 GDPR). We have concluded a Data Processing Agreement pursuant to Article 28 GDPR with Cloudflare.

3. Cookies and Similar Technologies

This website uses technically necessary cookies for functionality (e.g., cookie consent settings). These are set on the basis of Article 6(1)(f) GDPR (legitimate interest).

No tracking, analytics, or advertising cookies are used.

Note: Cloudflare Insights/RUM (Real User Monitoring) is disabled in our Cloudflare configuration. As an additional safeguard, we have implemented technical measures to block any analytics scripts that might be auto-injected by Cloudflare's edge network, ensuring no analytics data is collected or processed.

4. Contestant Data

Type of data: Name, contact details (email address, optionally phone number), application materials (text, photos, videos), social media handles (optional), other voluntarily provided information.

Purpose of processing: Conducting the "Mister Rubber Berlin 2026" contest, communication with contestants, publication of profiles on the website (only with explicit consent).

Legal basis: Processing is based on your voluntary consent pursuant to Article 6(1)(a) GDPR. Participation in the contest is voluntary, and you can withdraw your consent at any time.

Storage period: Your data will be stored as long as necessary for conducting the contest, unless you withdraw your consent or request deletion. After withdrawal or deletion request, the data will be deleted immediately, unless legal retention obligations apply.

Storage location: Application data submitted through forms is transmitted via Mailgun's EU servers to MisterRubberBerlin@gmail.com. The final storage location is the Gmail account, which is subject to Google's data processing terms and may involve storage in the United States. Google is certified under the EU–US Data Privacy Framework (DPF), and data transfers rely on Art. 45 GDPR (adequacy decision).

Sharing: Your data will not be shared with third parties unless required by law or you have explicitly consented. Transfers to third countries (e.g., USA) may occur when using service providers such as Cloudflare (for hosting) or Mailgun (for email transmission). These transfers rely on the EU–US Data Privacy Framework (Art. 45 GDPR) or Standard Contractual Clauses (Art. 46 GDPR).

5. Judge Data

Type of data: Name, title/function, contact details (email address), photo, biography, other voluntarily provided information.

Purpose of processing: Conducting the contest, communication with judges, publication of profiles on the website (only with explicit consent).

Legal basis: Processing is based on your voluntary consent pursuant to Article 6(1)(a) GDPR. Serving as a judge is voluntary, and you can withdraw your consent at any time.

Storage period: Your data will be stored as long as necessary for conducting the contest, unless you withdraw your consent or request deletion. After withdrawal or deletion request, the data will be deleted immediately.

Storage location: Judge data submitted through forms is transmitted via Mailgun's EU servers to MisterRubberBerlin@gmail.com (see Section 4).

Sharing: Your data will not be shared with third parties unless required by law or you have explicitly consented. Transfers to third countries may occur when using service providers such as Cloudflare or Mailgun (see Section 4).

6. Contact Form

When you use the contact form, the data you enter (name, email address, message) is processed to handle your inquiry. The legal basis is Article 6(1)(f) GDPR (legitimate interest in responding to your inquiry) or, if you have given consent, Article 6(1)(a) GDPR.

The data is transmitted via Mailgun's EU servers to MisterRubberBerlin@gmail.com and will be deleted after processing your inquiry, unless legal retention obligations apply.

Email Transmission (Mailgun)

Messages submitted through the contact and application forms are processed and transmitted via our email service provider Mailgun Technologies, Inc., 112 E Pecan St. #1135, San Antonio, TX 78205, USA. Mailgun operates EU-based servers, and we configure our account to use Mailgun's EU infrastructure for transmission to MisterRubberBerlin@gmail.com.

Mailgun processes email metadata and content on our behalf. While Mailgun's parent company is based in the United States, data transmission occurs via Mailgun's EU servers. Mailgun participates in the EU–US Data Privacy Framework (DPF). Where required, data transfers rely on the DPF (Art. 45 GDPR) or Standard Contractual Clauses (Art. 46 GDPR).

We have concluded a Data Processing Agreement pursuant to Article 28 GDPR with Mailgun.

7. Your Rights as a Data Subject

You have the following rights:

• Right of access (Art. 15 GDPR): You can request information about the personal data we process.
• Right to rectification (Art. 16 GDPR): You can request correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): You can request deletion of your data, unless legal retention obligations apply.
• Right to restriction (Art. 18 GDPR): You can request restriction of processing of your data.
• Data portability (Art. 20 GDPR): You can request the transfer of your data in a structured, commonly used format.
• Right to object (Art. 21 GDPR): You can object to processing of your data if it is based on legitimate interests.
• Withdrawal of consent (Art. 7(3) GDPR): You can withdraw a given consent at any time.
• Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority.

Supervisory Authority (Berlin):

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin
www.datenschutz-berlin.de

To exercise your rights, please contact: MisterRubberBerlin@gmail.com Copy email

8. Hosting and Data Security

The site is hosted on Cloudflare Pages (Cloudflare, Inc., USA). Cloudflare processes data for technical provision and in compliance with Article 28 GDPR (data processing agreement). We have entered into a corresponding data processing agreement with Cloudflare.

We use Mailgun as our email service provider for sending contest-related messages from contact and application forms. Mailgun transmits data via its EU servers to MisterRubberBerlin@gmail.com. While Mailgun's parent company is based in the United States, we configure our account to use Mailgun's EU infrastructure. Mailgun participates in the EU–US Data Privacy Framework (DPF). A Data Processing Agreement pursuant to Article 28 GDPR is in place.

We implement technical and organizational measures to protect your data from unauthorized access, loss, or destruction.

9. Event Photography

At our public events, photographs and videos are taken for documentation and public relations purposes.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in documenting public events) and § 23 KUG (German Art Copyright Act – images of assemblies).

Right to object: If you do not wish to be photographed, please inform the photographer or the organizing team. Upon request, images in which you are recognizable will not be published or will be deleted.

10. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy to reflect changed legal situations or changes to the service and data processing. Please check regularly for updates to our privacy policy.