Privacy Policy
How The ISO Club collects, processes and protects your personal data under the DSGVO.
Last updated · 01 SEP 2026
1. Controller
The ISO Club e.V., Auguststraße 42, 10119 Berlin, is the controller for all personal data processed on this platform. Reach our data protection contact at privacy@theisoclub.de.
2. Data we process
Account data (name, handle, email, role), profile content you publish (portfolio images, comp cards, specialties), session participation records, delivery vaults, messages, and technical logs. Payment data are processed by our payment provider under a data processing agreement.
3. Legal basis
Contract performance (Art. 6 (1) b DSGVO) for sessions, vaults and messages; legitimate interest (Art. 6 (1) f) for platform security; consent (Art. 6 (1) a) for newsletters and public teaser profiles.
4. Your rights
You may request access, rectification, erasure, restriction and portability of your data at any time (Art. 15–20 DSGVO), and object to processing based on legitimate interest. Deletion requests are honoured within 30 days (with a 14-day statutory grace window); delivered session media already released under § 22 KunstUrhG remain with their licensed recipients.
7. Retention
Profiles are kept while your membership is active and 90 days after leaving. Vault media follow the 14-day delivery SLA plus a 30-day grace window. Server logs are kept 14 days.