Privacy Policy
The Urban Journalism Network (“UJN”) takes the protection of your personal data seriously. This Privacy Policy explains what personal data is processed when you visit our website, why we process it, and what rights you have under the General Data Protection Regulation (GDPR).
1. Data Controller
Deep City, z.s.
Filkukova 6
621 00 Brno
Czech Republic
ID No.: 21771677
Deep City, z.s. operates the Urban Journalism Network.
For questions concerning privacy or the processing of your personal data, please contact: [email protected]
2. Visiting our website and hosting
Our website is hosted in Germany by Hetzner Online GmbH.
When you visit urbanjournalism.org, technical information is automatically transmitted by your browser in order to establish a connection with our website and deliver its contents. Server logs may contain information such as:
- your IP address;
- date and time of access;
- requested pages and files;
- referring website;
- browser type and version;
- operating system;
- other technical request information.
We process this information to provide the website securely and reliably, identify technical problems, and protect our systems against misuse and attacks.
The legal basis is our legitimate interest in the secure, stable and efficient operation of our website pursuant to Article 6(1)(f) GDPR.
Server log data is retained only for as long as necessary for the operation and security of the website, unless a longer period is necessary to investigate a particular incident or comply with a legal obligation.
3. Cloudflare
We use services provided by Cloudflare to improve the security, reliability and performance of our website.
Cloudflare operates infrastructure between visitors and our web server. When you access the website, Cloudflare may therefore process technical information such as your IP address, browser and device information, requested URLs, timestamps, and security-related information used to identify and prevent malicious or automated traffic.
We use Cloudflare on the basis of our legitimate interests in providing a secure, reliable and efficient website and protecting our systems against attacks and misuse pursuant to Article 6(1)(f) GDPR.
Cloudflare operates an international infrastructure and may process data outside the European Economic Area, including in the United States. Where personal data is transferred internationally, the transfer is subject to an applicable mechanism under Chapter V GDPR. Cloudflare currently participates in the EU–US Data Privacy Framework and also provides for the use of the European Commission’s Standard Contractual Clauses where applicable.
4. Website statistics
We use Jetpack Stats (WordPress Stats) to understand how our website is used and to improve its content and performance.
Jetpack Stats collects information including page and post views, outbound link clicks, referring URLs and search terms, and approximate geographic information such as country, region and city. To generate these statistics, technical information including IP address, user agent, visited and referring URLs, timestamps, browser language and country code may be processed.
We receive aggregated statistics and do not have access through Jetpack Stats to information identifying individual website visitors. According to the provider, the underlying Jetpack Stats logs containing visitor-level technical information are retained for 28 days.
We use these statistics on the basis of our legitimate interest in understanding and improving the reach, use and performance of the Urban Journalism Network website pursuant to Article 6(1)(f) GDPR.
The website does not use non-essential cookies for analytics or advertising.
5. Cookies
Our website does not use non-essential cookies.
Where cookies or similar technologies are technically necessary for the operation, security or delivery of the website or a service explicitly requested by you, they may be used without consent to the extent permitted by applicable law.
We do not use advertising or marketing cookies.
6. Interactive graphics and EuroViz
The Urban Journalism Network publishes interactive data-journalism graphics, including graphics developed within the EuroViz project.
Most of these graphics are delivered through infrastructure operated by us. Some older graphics are currently delivered from infrastructure operated by external media partners, including Tagesspiegel.
When your browser loads a graphic or other resource from an external server, the operator of that server necessarily receives certain technical information required to deliver the resource. This can include your IP address, browser information, the requested resource and the page from which the request originated.
We use these resources to make interactive journalistic content available. The legal basis for associated processing is our legitimate interest in presenting our journalistic work and providing the functionality of the website pursuant to Article 6(1)(f) GDPR.
7. MapTiler
Some of our interactive graphics use map tiles provided by MapTiler AG, Switzerland.
When a graphic containing a MapTiler map is displayed, your browser connects to MapTiler’s infrastructure to retrieve the required map resources. In doing so, technical information, in particular your IP address and information relating to the requested resources, may be transmitted to MapTiler.
We use MapTiler to provide interactive maps as part of our data-journalism content. The legal basis is our legitimate interest in providing functional and informative interactive visualisations pursuant to Article 6(1)(f) GDPR.
8. ParticipAid
Some pages of the Urban Journalism Network website contain embedded ParticipAid elements. ParticipAid is a participatory-journalism tool developed and operated by Deep City, z.s. that enables audiences to interact with journalistic projects.
When a ParticipAid embed is loaded, technical information necessary to provide the embedded content may be processed. This can include your IP address, browser and device information, the page from which the embed is accessed, and technical request information.
Where you actively interact with ParticipAid, additional information may be processed depending on the particular feature or journalistic project. This may include responses to questions, contributions, feedback or other information you choose to submit.
Where a ParticipAid feature collects personal data beyond the technical information required to provide the embed, additional privacy information applicable to that processing will be provided in connection with the relevant feature or project.
The processing of information actively submitted through ParticipAid is therefore not governed solely by this general website Privacy Policy.
9. Contacting us
If you contact us by email, we process the information you provide, including your email address, the content of your message and any other personal data you choose to include.
We use this information to respond to your enquiry and, where necessary, manage subsequent communication relating to it.
Depending on the nature of your enquiry, the legal basis is our legitimate interest in communicating with people who contact us pursuant to Article 6(1)(f) GDPR, or Article 6(1)(b) GDPR where your communication concerns a potential or existing contractual relationship.
We retain correspondence only for as long as necessary for the purpose for which it was received and for any applicable legal or administrative retention requirements.
10. Recipients and service providers
We do not sell your personal data.
Personal data may be processed by service providers that help us operate, secure and deliver the website, including the providers described in this Privacy Policy.
Where a service provider processes personal data on our behalf, we require the processing to take place in accordance with applicable data-protection law and, where required, on the basis of a data processing agreement pursuant to Article 28 GDPR.
We may also disclose personal data where required by law or where disclosure is necessary to establish, exercise or defend legal claims.
11. International data transfers
Some of the service providers involved in operating the website may process personal data outside the European Economic Area.
Where personal data is transferred to a country outside the EEA, we ensure that the requirements of Chapter V GDPR are met. Depending on the destination and provider, this may include an adequacy decision by the European Commission, including the EU–US Data Privacy Framework where applicable, or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
12. Retention
We retain personal data only for as long as necessary for the purpose for which it was collected, unless applicable law requires or permits a longer retention period.
Retention periods therefore differ according to the type of processing. Where we no longer require personal data, it is deleted or anonymised unless continued storage is legally required.
Specific retention periods stated elsewhere in this Privacy Policy take precedence over this general principle.
13. Your rights
Under the GDPR, subject to the applicable legal requirements and limitations, you have the right to:
- request access to your personal data (Article 15 GDPR);
- request correction of inaccurate or incomplete data (Article 16 GDPR);
- request deletion of your personal data (Article 17 GDPR);
- request restriction of processing (Article 18 GDPR);
- receive certain personal data in a portable format (Article 20 GDPR);
- object to processing based on legitimate interests (Article 21 GDPR);
- withdraw consent at any time where processing is based on consent (Article 7(3) GDPR).
Where we process personal data on the basis of our legitimate interests under Article 6(1)(f) GDPR, you have the right to object to that processing on grounds relating to your particular situation in accordance with Article 21 GDPR.
To exercise your rights, please contact: [email protected]
14. Right to lodge a complaint
You have the right to lodge a complaint with a competent data protection supervisory authority.
As Deep City, z.s. is established in the Czech Republic, our supervisory authority is:
Office for Personal Data Protection
(Úřad pro ochranu osobních údajů)
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
You may also be entitled to contact the supervisory authority in the EU or EEA country where you habitually reside, work, or where you believe an infringement of data-protection law has occurred.
15. Security
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
These measures are reviewed in light of technological developments, the nature of the processing and the risks involved.
16. Changes to this Privacy Policy
We may update this Privacy Policy when our website, the services we use, or applicable legal requirements change.
The current version will be published on this page. The date of the most recent update is stated at the beginning of the policy.
17. Contact
Deep City, z.s.
Urban Journalism Network
Filkukova 6
621 00 Brno
Czech Republic
[email protected]