Privacy Policy

1. Data Controllers

Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH and Kyiv IT Cluster act as joint data controllers for personal data collected through this application form. GIZ is headquartered at Friedrich-Ebert-Allee 36, 53113 Bonn, Germany. Kyiv IT Cluster is headquartered in Kyiv, Ukraine.

2. Data Collected

The application form collects:

• Company name, website, sector, year founded, and description
• Representative's full name, position, business email, and English proficiency
• Business goals for the Berlin program
• Consent records (privacy, accuracy, terms, media consent)

3. Legal Basis

Processing is based on your consent (GDPR Article 6(1)(a)) given when you submit the application. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Purpose

Your data is used exclusively to evaluate and process your application, to organise the delegation program, and to communicate with you about participation. If you consent to media use, photographs and videos taken during the program may be used for promotional purposes by GIZ and Kyiv IT Cluster.

5. Recipients

Your data is shared with the GIZ Ukraine and Kyiv IT Cluster program teams involved in selection and organisation. We do not sell or share your data with third parties for marketing. Data may be processed by GIZ internal IT service providers acting as data processors under contract.

6. Retention

Application data is retained for 12 months after the conclusion of the program for evaluation and reporting purposes, then deleted. If you are selected, your contact data may be retained for the duration of the program and up to 6 months thereafter for follow-up communication.

7. Your Rights

Under GDPR Articles 15–22, you have the right to:

• Access your personal data (Article 15)
• Rectify inaccurate data (Article 16)
• Erase your data ("right to be forgotten", Article 17)
• Restrict or object to processing (Articles 18, 21)
• Data portability (Article 20)
• Withdraw consent at any time (Article 7(3))
• Lodge a complaint with a supervisory authority (Article 77)

To exercise any of these rights, email hello@kyivitcluster.ua.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Access is restricted to authorised program staff.

9. International Transfers

Your data may be transferred between Ukraine and Germany for program purposes. Both jurisdictions provide safeguards under applicable data-protection law. GIZ complies with EU GDPR standards for all data processing.

10. Contact

For any questions about this Privacy Policy or to exercise your data-protection rights, contact us at hello@kyivitcluster.ua.