Privacy Policy

1. Data Controllers

Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH and Kyiv IT Cluster act as joint data controllers for personal data collected through this application form. GIZ is headquartered at Friedrich-Ebert-Allee 36, 53113 Bonn, Germany. Kyiv IT Cluster is headquartered in Kyiv, Ukraine.

2. Data Collected

The application form collects:

• Company name, website, sector, year founded, and description
• Representative's full name, position, business email, and English proficiency
• Business goals for the Berlin program
• Consent records (privacy, accuracy, terms, media consent)

3. Legal Basis

Processing is based on your consent (GDPR Article 6(1)(a)) given when you submit the application. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Purpose

Your data is used exclusively to evaluate and process your application, to organise the delegation program, and to communicate with you about participation. If you consent to media use, photographs and videos taken during the program may be used for promotional purposes by GIZ and Kyiv IT Cluster.

5. Recipients

Your data is shared with the GIZ and Kyiv IT Cluster program teams involved in selection and organisation. We do not sell or share your data with third parties for marketing. Data may be processed by GIZ internal IT service providers acting as data processors under contract.

Sharing among organisers and partners. By creating an account on this platform and completing or submitting an application form, you agree that the data you provide may be shared among the organisers (GIZ and Kyiv IT Cluster) and the partner organisations of the program, solely for the purpose of implementing the program's objectives — including review and selection of participants, organisation of the business delegation, matchmaking and B2B meetings, and related program communication. Details are set out in section 6.

6. Who we share your data with

Your application data and participant profile are shared with the partner organisations of the specific program you apply to. For Female Entrepreneurship in Times of War – IT & AI (Berlin 2026) the partner organisation is GIZ (Deutsche Gesellschaft für Internationale Zusammenarbeit GmbH), alongside Kyiv IT Cluster as program operator. Future programs may involve other partner organisations; the partners of each program are named on that program's page before you apply.

Categories of data shared

• Company details: name, website, registration and location data, sector, year founded, size, revenue range
• Representative details: full name, position, business email, date of birth where provided, English proficiency
• Your answers: company description, goals, offer to German partners, target partners, cooperation experience and all other free-text answers
• Uploaded materials: company logo, presentation file or presentation link
• Eligibility and consent records, evaluation scores, interview notes and selection decisions

Purpose. Sharing takes place solely for application review, scoring, interviews, selection of participants and the organisation of the program. Partner organisations do not use your data for marketing and we do not sell your data.

How partners access it. Partner organisations access your application only through this secure portal, under role-based permissions limited to the program they are a partner of. Their access is restricted to what is needed for evaluation and interviews, every action is recorded in an immutable activity log, and uploaded files are served through time-limited links. Final selection decisions remain with Kyiv IT Cluster.

Retention. Data shared with partner organisations is retained under the same framework as set out in section 7: 12 months after the conclusion of the program for evaluation and reporting, and up to 6 months after the program for follow-up communication with selected participants, after which it is deleted.

Your rights. The GDPR rights set out in section 8 — access, rectification, erasure, restriction, objection, portability and withdrawal of consent — apply to data held by Kyiv IT Cluster and by the partner organisations. To exercise them, or for any question about partner sharing, contact hello@kyivitcluster.com. Withdrawing consent before the selection is complete means your application can no longer be evaluated.

7. Retention

Application data is retained for 12 months after the conclusion of the program for evaluation and reporting purposes, then deleted. If you are selected, your contact data may be retained for the duration of the program and up to 6 months thereafter for follow-up communication.

8. Your Rights

Under GDPR Articles 15–22, you have the right to:

• Access your personal data (Article 15)
• Rectify inaccurate data (Article 16)
• Erase your data ("right to be forgotten", Article 17)
• Restrict or object to processing (Articles 18, 21)
• Data portability (Article 20)
• Withdraw consent at any time (Article 7(3))
• Lodge a complaint with a supervisory authority (Article 77)

To exercise any of these rights, email hello@kyivitcluster.com.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Access is restricted to authorised program staff.

10. International Transfers

Your data may be transferred between Ukraine and Germany for program purposes. Both jurisdictions provide safeguards under applicable data-protection law. GIZ complies with EU GDPR standards for all data processing.

11. Contact

For any questions about this Privacy Policy or to exercise your data-protection rights, contact us at hello@kyivitcluster.com.