Privacy

What this website does with your data, and what it does not.

First things first

As long as you do not click anything, this site contacts exactly one server: its own. No cookies, no fonts from Google, no ad networks. Measured in a real browser on 29 July 2026.

Google Analytics only loads once you have clicked “Allow statistics” in the banner. Before that, not a single request goes to Google. You can change your decision at any time: Cookie settings

Controller

The controller within the meaning of Article 4 (7) GDPR is:

juuman´okudo GmbH
Enzianweg 49
88046 Friedrichshafen
Represented by Markus Giordano
hallo@undjetzt.io · 07541 3977019

No data protection officer has been appointed. The conditions of § 38 BDSG (German Federal Data Protection Act) do not apply. We answer questions about data protection at hallo@undjetzt.io.

Who gets to see your data

Simply opening the page makes your browser send technically necessary data to the server. Without it the page could not be delivered. The four services below only come into play once you agree to statistics, sign in or redeem an invitation.

We do not run a server of our own and we do not keep access logs ourselves. They are created at Vercel and deleted there according to Vercel's retention periods. We do not evaluate them. Data processing agreements under Article 28 GDPR are in place with Vercel and with Google.

Cookies and local storage

Running this site needs no cookie at all. The only things ever set are:

• undjetzt-consent in your browser's local storage. It records whether you agreed to statistics, which version of the text you saw and when. That is the record of your decision, and it never leaves your device.
• _ga and _ga_ZX6XSNFVVL from Google Analytics, and only if you agreed. They are deleted immediately when you withdraw.

Fonts

The site uses the Geist and Geist Mono typefaces. They are downloaded when the site is built and served from our own server. Visiting the site therefore sends no request to Google Fonts, and your IP address is not transmitted for that purpose.

Transfers to the USA

Vercel and Google are based in the USA. For Google Analytics, a transfer takes place as soon as you agree. The USA does not offer a level of data protection equivalent to the European one. In particular, authorities there can access data under certain conditions without the same legal remedies being available as in the EU.

The transfer is based on the European Commission's adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework. Vercel Inc. and Google LLC are certified under it. The Commission's standard contractual clauses apply in addition.

Your rights

You can ask at any time for:

• information about which data we hold about you
• correction of inaccurate data
• erasure
• restriction of processing
• your data in a portable format
• objection to processing based on legitimate interests

You can withdraw consent at any time without that making the processing up to then unlawful. Withdrawing is exactly as easy as agreeing: Cookie settings

You also have the right to lodge a complaint with a data protection supervisory authority.

The competent authority is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20, 70173 Stuttgart

Young people

This event is for 18 to 24-year-olds. The site is freely accessible to younger people too. That is why we try to collect as little as possible and to explain what happens in plain language.

Article 8 GDPR applies to the statistics: if you are under 16, talk the decision through with a parent. Without consent the site works completely, only the statistics are missing.

Photos and video will be taken on the day of the event, and that is part of taking part. How it works and how you can object is set out below, under “Photos and video on the day”.

If you subscribe to the newsletter

Signing up uses double opt-in: you enter your address, you get an email, and only the click inside it adds you. Without that second step your address is stored nowhere.

We store your email address, the time you confirmed, the version of the consent text and your IP address at the time of signing up. The last three are the record that the consent came from you, and they are used for nothing else. The sending system is Brevo, see the table above.

The legal basis is your consent under Article 6 (1) (a) GDPR. You can withdraw it at any time without giving a reason: every email contains an unsubscribe link, and a message to hallo@undjetzt.io works just as well. When you withdraw, we delete your address from the list.

We only send news about this event. No third-party advertising, and we never pass your address on.

If you redeem an invitation code

Anyone with a code can confirm a place without making a request. In that case we process:

• Your email address. We have it because someone from the team sent you the code. We need it to send you the code and the confirmation.
• First and last name. For the list at the door. Your badge shows only your first name.
• Your date of birth. For the door. You need to be at least 18 on 25 October 2026.
• Your three confirmations, with timestamps. That you are at least 18 on the day of the event, that you have read this notice, and that you are aware photos and video are part of taking part. The timestamp is the record that we asked.
• When the code was redeemed. That is how we know it is used up. Each code is valid for exactly one person.
• Which language you used the site in. So that our emails reach you in the same language. Nothing else.

The legal basis is Article 6 (1) (b) GDPR: we need these details so that you can take part in the event.

Everything is deleted three months after the event at the latest. Before that you can ask for erasure at any time, which forfeits the place. A message to hallo@undjetzt.io is enough.

These emails are sent through Resend (Resend Inc., USA), under the terms in the table above. What goes out is your code, your confirmation and nothing else.

If you send a request for a place

While you fill the form in, everything stays in your browser. Only when you press send does anything reach us. A half-finished draft never does.

When you send it, we store:

• First and last name and your email address. So that we can answer you and so that you are on the list at the door.
• Your answers from the form. Where you are right now, what makes you you and what you want for the next few years. That is what we select on, there is nothing else behind it.
• Your date of birth. You need to be at least 18 on 25 October 2026; we check that when you send the form and again at the door. Your age also feeds into the selection: the event is for 18 to 24-year-olds and we aim for a mixed group.
• Your three confirmations, with timestamps. That you are at least 18 on 25 October, that you have read this notice, and that you are aware photos and video are part of taking part. There is a separate section on the footage below.
• Which language you used the site in. So that our emails reach you in the same language. Nothing else.

Sending the form creates an account under your email address. You can use it later to sign in, plan your day and submit ideas. There is no password, we send you a link.

Your request stays exactly as you sent it. Changing your account later does not change the request: for a selection it has to stay clear what was decided on.

We record internally who from the team decided a request and when, plus a short reason for a rejection or a waiting-list place. That note stays internal and appears in no email to you.

The legal basis is Article 6 (1) (b) GDPR. Without these details we cannot decide about your participation. We have collected the date of birth since 26 August 2026; before that your statement about your age was enough.

Everything is deleted three months after the event at the latest. Before that, a message to hallo@undjetzt.io is enough.

No automated assessment. A human decides about your request. There is no ranking, no score and no model that sorts you into a bucket.

Photos and video on the day

On 25 October we take photos and film. We need the material to report on the day afterwards, to document it and to promote the event: on this website and on the organiser's social media channels, currently Instagram and LinkedIn.

The footage is part of taking part. You confirm this in the request form, with its own checkbox. Until 26 August 2026 it was voluntary; we changed it because on a day with 200 guests in the hall there is no way to keep track of who may be filmed and who may not. The legal basis is Article 6 (1) (f) GDPR: our interest in documenting and promoting the event, and for publication additionally §§ 22, 23 KunstUrhG (German Act on Copyright in Works of Art). Anyone who sent a request before we changed this stays under the terms that applied then.

You can object, at any time and informally, to hallo@undjetzt.io. Please say which shot you mean if you can. Online we take it down without delay. Anything already printed cannot be changed. An objection does not affect your place on the day.

Tell us on the day if you would rather not be in shot. The team will watch out for it as far as it can. There will be areas where nobody films; where exactly will be stated here and in the acceptance email in good time before the day. A wide shot of a full hall cannot leave anyone out.

For wide shots of the stage and the hall, in which no individual is the focus, we additionally rely on § 23 (1) no. 3 KunstUrhG: pictures of gatherings that the people shown took part in.

If you submit an idea

On the idea wall you can suggest what the day must not be missing. That needs an account, because without a link to a person we could neither handle a report nor delete your idea when you ask us to.

We store your headline, your text, the display mode you chose and the time. You decide what appears publicly under the idea: your first name, a pseudonym or “Anonymous”. With “Anonymous”, only the idea is visible from outside. Internally the link to your account remains, for exactly the reason in the first paragraph.

Nothing appears publicly before a human from the team has read and approved it. For every decision we record who made it and when.

If someone reports your idea, it disappears from the wall immediately and is checked again. Reporting needs no account: if you read an insult about yourself, you should not have to create one first.

The legal basis is your consent under Article 6 (1) (a) GDPR. You can withdraw your idea at any time, a message to hallo@undjetzt.io is enough. We delete it three months after the event at the latest.

If you plan your day

Once you have a place, you can pick sessions and ask for a one-on-one conversation. We store what you booked and when, and for a conversation request your topic, what you hope to get out of it and optionally the name of someone you would like to talk to.

A conversation only comes about through us. You see the person's name, the time and the room. We pass contact details in neither direction, and there is no channel for the two of you to write to each other beforehand.

The legal basis is Article 6 (1) (b) GDPR. It is deleted along with your request, three months after the event at the latest.

Protection against abuse

Four things on this site work without signing in: sending a request for a place, subscribing to the newsletter, redeeming an invitation code and reporting an idea. So that nobody abuses that automatically, we count how often each comes from the same place on the network within an hour.

We do not store your IP address for that. We derive an irreversible checksum from it and count only that. After 24 hours we delete the row. The legal basis is Article 6 (1) (f) GDPR: our legitimate interest in the idea wall not being emptied and in nobody being spammed from our sender address.

Who runs this site is stated in the imprint.

Version: 14. September 2026