Privacy Policy

1. Who we are

This website is operated by Open Alliance for PostgreSQL Education e.V. (“OAPG”, “we”, “us”, or “our”), a registered association under German law.

Registered address:

Open Alliance for PostgreSQL Education e.V.

Eschersheimer Landstraße 42

60322 Frankfurt/Main, Germany

Privacy contact: [email protected]

We are committed to protecting your personal data and processing it in accordance with the EU General Data Protection Regulation (GDPR) and applicable national data protection law.

2. Data We Collect and Why

We collect personal data only where necessary and for clearly defined purposes, as described below.

2.1 Contact Form

When you submit our contact form, we collect your first name, last name, and email address. We use this information solely to respond to your enquiry.

Lawful basis: Legitimate interests (Art. 6(1)(f) GDPR) — to respond to your message.
Retention: We retain contact form submissions for as long as necessary to handle your enquiry and for up to 12 months thereafter.

2.2 Newsletter (Mailchimp)

If you subscribe to our newsletter, we collect your name and email address. Our newsletter service is provided by Mailchimp (The Rocket Science Group LLC, Atlanta, USA). Your data is transferred to and stored on Mailchimp’s servers.

Lawful basis: Consent (Art. 6(1)(a) GDPR) — you opt in explicitly when subscribing.
Retention: Until you unsubscribe. You may withdraw consent at any time by clicking the unsubscribe link in any newsletter or by contacting us at [email protected].
International transfer: Mailchimp is based in the USA. The transfer is covered by Mailchimp’s Data Processing Agreement and Standard Contractual Clauses (SCCs). See Mailchimp’s Privacy Policy at mailchimp.com/legal/privacy.

2.3 Website Analytics (Google Analytics)

We use Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to understand how visitors use our website. Google Analytics uses cookies to collect anonymised information about page visits, session duration, and user behaviour. Your IP address is anonymised before storage.

Lawful basis: Consent (Art. 6(1)(a) GDPR) — analytics cookies are only placed after you accept them via our cookie banner.
Retention: Analytics data is retained for 14 months by default.
Opt-out: You can withdraw consent at any time via the cookie settings on our website, or by installing the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout).

2.4 Security and Performance (Cloudflare)

Our website is protected and accelerated by Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Cloudflare acts as a reverse proxy, meaning all traffic to our website passes through Cloudflare’s network. Cloudflare may process your IP address and request metadata to protect against threats such as DDoS attacks, spam, and malicious bots.

Lawful basis: Legitimate interests (Art. 6(1)(f) GDPR) — ensuring the security, availability, and integrity of our website.
International transfer: Covered by Cloudflare’s Data Processing Addendum and SCCs. See cloudflare.com/privacypolicy.

2.5 Bot Protection (Cloudflare Turnstile)

We use Cloudflare Turnstile on our contact form to verify that submissions are made by humans and not automated bots. Turnstile analyses browser and interaction signals without displaying a visual CAPTCHA. It may process technical data such as IP address, browser type, and interaction patterns.

Lawful basis: Legitimate interests (Art. 6(1)(f) GDPR) — preventing spam and protecting the integrity of our contact form.

3. Cookies

Our website uses cookies — small text files stored on your device. When you first visit our website, you will be presented with a cookie banner allowing you to accept or decline non-essential cookies.

Essential cookies: Required for the website to function (e.g. Cloudflare security cookies). These do not require consent.
Analytics cookies: Set by Google Analytics only after you provide consent.

You can manage or withdraw your cookie consent at any time via the cookie settings link on our website, or through your browser settings.

4. Third-Party Processors

We rely on the following third-party service providers to operate our website. Each acts as a data processor under a Data Processing Agreement with us:

Mailchimp (The Rocket Science Group LLC) — newsletter delivery
Google Analytics (Google Ireland Limited) — website analytics
Cloudflare (Cloudflare, Inc.) — CDN, DDoS protection, and bot detection

5. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right of access — to request a copy of the data we hold about you.
Right to rectification — to request correction of inaccurate or incomplete data.
Right to erasure — to request deletion of your data where there is no compelling reason for us to continue processing it.
Right to restrict processing — to request that we limit how we use your data.
Right to data portability — to receive your data in a structured, machine-readable format.
Right to object — to object to processing based on legitimate interests.
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. As a German-registered association, the relevant authority is the Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) or the data protection authority of the German federal state in which we are registered.

6. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is served over HTTPS and protected by Cloudflare’s security infrastructure.

7. Children's Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact us at [email protected] and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page will reflect the most recent revision. We encourage you to review this page periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

9. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Open Alliance for PostgreSQL Education e.V.
Eschersheimer Landstraße 42
60322 Frankfurt/Main, Germany

Email: [email protected]
Website: https://oapg-edu.org