Hackergarten: Event Privacy Notice

Controller

Depending on the event, the respective organizer:

• Karakun AG, Elisabethenalage 25, 4051 Basel, Switzerland

• Karakun GmbH, Kanalstraße 25, 44147 Dortmund, Germany

For jointly organized events: joint controllership.

Central privacy contact (for both): dataprotection@karakun.com

Purposes

Event documentation and public relations/communications (website, LinkedIn, Mastodon, Print).

Categories of personal data

Photo/video/audio recordings of participants (potentially including voice), basic metadata (time/location).
Name mentions/tagging only with consent.

Legal bases

EU/GDPR:

• Art. 6(1)(f) legitimate interests for group/crowd/atmosphere images without a focus on identifiable individuals.

• Art. 6(1)(a) consent for portraits/close-ups, testimonials, name mentions/tagging.

Switzerland/revFADP:

• Justification by overriding private interests (Art. 31 FADP) for group/crowd/atmosphere images.

• Consent (Art. 6(6) FADP) for portraits/close-ups, testimonials, name mentions/tagging.

Germany (in addition): the German right to one’s own image (KunstUrhG) is observed; portraits generally only with consent; group/incidental images may be permissible under narrow conditions.

Recipients/platforms

Service providers: CloudStore Provider/ Hoster (CloudSigma AG, Switzerland)
Platforms: LinkedIn (LinkedIn Ireland Unlimited Company; transfer to LinkedIn Corp., USA)
where applicable: [DevHub/YouTube/Mastodon/etc.]

International (third-country) transfers

Posting on platforms may involve transfers to third countries (notably the USA).
LinkedIn typically relies on the EU‑US and Swiss‑US Data Privacy Framework (DPF). Verify current certification: Data Privacy Framework
If DPF does not apply: EU Standard Contractual Clauses (SCC) and additional safeguards; details in our full privacy notice.

Retention

• Raw footage: up to 3 months for selection/editing.

• Published selection: until objection/withdrawal, unless legal obligations require longer.

Obligation to provide data

No obligation to be photographed; opt‑out options are available.

Your rights

• EU/GDPR: Access, rectification, erasure, restriction, data portability (Art. 15–20), objection (Art. 21), withdraw consent (Art. 7(3)), and lodge a complaint with a supervisory authority.

• Switzerland/revFADP: Access/data provision, rectification, deletion; object to unlawful processing; withdraw consent; complain to the FDPIC.

On‑site opt‑out

No‑Photo badges at registration, marked no‑photo areas, or speak to our team/photographer. We will avoid capturing you and remove/blur images where feasible.

Contact & further information

Controller:

• Karakun AG, Elisabethenalage 25, 4051 Basel, Switzerland
  Karakun GmbH, Kanalstraße 25, 44147 Dortmund, Germany

• Full privacy policy: https://karakun.com/en/privacy-statement/

Privacy contact: dataprotection@karakun.com

Last updated: Jan 23, 2026