Cosmopolitan Business Club
GDPR Compliant

Privacy Policy

In accordance with the EU General Data Protection Regulation (GDPR)

Effective date: December 2025

Table of Contents

  1. 1. Data Controller
  2. 2. Types of Personal Data Processed
  3. 3. Purposes of Data Processing
  4. 4. Legal Basis for Processing
  5. 5. Payment Processing via Stripe
  6. 6. Data Sharing with Third Parties
  7. 7. Cookies & Tracking Technologies
  8. 8. Photo and Video Recordings
  9. 9. Data Retention
  10. 10. Rights of Data Subjects
  11. 11. Data Security
  12. 12. Amendments to this Privacy Policy
1

Data Controller

Cosmopolitan Business Club (CBC)

Represented by: Güney Yogurtçu & Tiemo Reim

Location: Berlin, Germany

Email: [email protected]

2

Types of Personal Data Processed

CBC processes the following categories of personal data:

  • Name, email address, telephone number
  • Payment information (processed in encrypted form via Stripe)
  • Membership data (e.g. Basic or Premium)
  • Event participation and registration data
  • Interactions within the member area or community platforms
  • Newsletter tracking data (open rates, click behavior)
  • Device and access data (IP address, browser type, cookies)
3

Purposes of Data Processing

Personal data is processed for the following purposes:

  • Administration and management of memberships
  • Processing of payments and subscriptions
  • Event registration, organization and communication
  • Personalized club communication
  • Newsletters and community updates
  • Improvement and optimization of services
  • Fulfillment of legal, contractual and regulatory obligations
4

Legal Basis for Processing

Processing is carried out in accordance with Art. 6 GDPR, in particular:

  • Art. 6 (1) lit. b GDPR – performance of a contract (membership, events)
  • Art. 6 (1) lit. f GDPR – legitimate interests (communication, marketing, security, documentation)
  • Art. 6 (1) lit. a GDPR – consent (where explicitly required, e.g. newsletters)
5

Payment Processing via Stripe

All payments are processed exclusively via Stripe Payments Europe Ltd.

CBC does not receive or store complete payment data (e.g. credit card numbers).

Further information on Stripe's data processing can be found at:
https://stripe.com/privacy

6

Data Sharing with Third Parties

Personal data is not sold.

Data may be shared with selected processors strictly for operational purposes, including:

  • Stripe (payment processing)
  • Email service providers (newsletter delivery and communication)
  • Event platforms or tools (where required for event organization)

All processors act in accordance with the GDPR and under appropriate data processing agreements.

7

Cookies & Tracking Technologies

CBC uses cookies and similar technologies for:

  • Login and session management
  • Website analytics (anonymized where possible)
  • Event and participation tracking
  • Newsletter personalization

Upon first visit, users are informed via a cookie consent banner and may manage their preferences.

8

Photo and Video Recordings at Events

By attending events, meetings or activities organized by the Cosmopolitan Business Club (CBC), participants acknowledge and agree that photo, video and audio recordings may be created during such events.

Usage of Recordings

These recordings may be used by CBC for marketing, communication and documentation purposes, including but not limited to:

  • Websites
  • Social media channels
  • Newsletters
  • Presentations and promotional materials

Processing is based on Art. 6 (1) lit. f GDPR (legitimate interest), reflecting CBC's interest in public relations, marketing and representation of its community.

Participants who do not wish to appear in recordings must inform CBC staff in advance or on-site. CBC will make reasonable efforts to respect such requests; however, exclusion from all recordings (e.g. crowd shots) cannot be guaranteed.

No recordings will be used in a misleading, defamatory or inappropriate context.

9

Data Retention

Personal data is deleted as soon as:

  • there is no longer a legal obligation to retain it,
  • the purpose of processing no longer applies, or
  • the membership has ended and all applicable retention periods have expired.
10

Rights of Data Subjects

Data subjects have the right to:

  • Access their personal data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Withdraw consent at any time (Art. 7 GDPR)

Submit Your Request

Requests may be submitted to:
[email protected]

11

Data Security

CBC applies SSL encryption and appropriate technical and organizational measures to protect personal data against unauthorized access, loss or misuse.

12

Amendments to this Privacy Policy

CBC reserves the right to update this Privacy Policy at any time.

The current version is always available at:
www.cosmopolitanbusinessclub.com/en/privacy-policy

Questions About Privacy?

If you have any questions or concerns regarding your personal data or this Privacy Policy, please don't hesitate to contact us.

Contact Us
SMS / Text Messages GDPR Compliant

SMS Privacy Policy

Additional information about the processing of your personal data in connection with SMS services.

1. Collection and Use of Phone Numbers

We collect your phone number exclusively for sending SMS notifications that you have explicitly requested or for which you have given us your consent.

  • ▸ Order confirmations and delivery status updates
  • ▸ Appointment and event reminders
  • ▸ Marketing messages (only with consent)
  • ▸ Security alerts and account notifications

2. Legal Basis for Processing

  • ▸ Art. 6(1)(a) GDPR: Your explicit consent
  • ▸ Art. 6(1)(b) GDPR: Contract performance
  • ▸ Art. 6(1)(f) GDPR: Legitimate interests

3. Storage Duration

Your phone number will only be stored for as long as necessary to provide the requested services or until you withdraw your consent.

4. Your Rights

  • ▸ Access (Art. 15 GDPR)
  • ▸ Erasure (Art. 17 GDPR)
  • ▸ Withdrawal (Art. 7(3) GDPR)
  • ▸ Objection (Art. 21 GDPR)

5. Payment Providers

For processing payments, we use the following third-party providers:

  • ▸ Stripe - Credit card and payment processing
  • ▸ Link - Payment processing
  • ▸ PayPal - Online payments
  • ▸ Credit Card Providers (Visa, Mastercard, American Express, etc.)
  • ▸ StageDates.com - All payment providers listed on stagedates.com

These providers process your payment data independently and are subject to their own privacy policies. We only share your payment data with these service providers to the extent necessary for payment processing.

6. Contact

For questions about this SMS Privacy Policy, contact us at:

Cosmopolitan Business Club

Email: [email protected]