Privacy Policy
Last updated: January 7, 2026
1. Introduction
Ignite Next GmbH ("we", "us", or "our") takes the protection of your personal data very seriously. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or use our services, in accordance with the General Data Protection Regulation (GDPR - EU 2016/679) and the German Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG).
2. Data Controller
The data controller responsible for processing your personal data is:
3. Data Protection Officer
For questions regarding data protection, you can contact our Data Protection Officer at:
Email: dpo@ignitenext.com
4. Types of Data We Collect
We may collect and process the following categories of personal data:
4.1 Data You Provide to Us
- Contact Information: Name, email address, phone number, company name, job title
- Application Data: Information submitted through our program application forms, including business plans, team information, and pitch materials
- Communication Data: Content of emails, messages, and other communications you send to us
- Newsletter Subscription: Email address and preferences for receiving our communications
4.2 Data Collected Automatically
- Technical Data: IP address, browser type and version, operating system, device information
- Usage Data: Pages visited, time spent on pages, navigation paths, referring websites
- Cookie Data: Information collected through cookies and similar technologies (see Section 8)
5. Purpose and Legal Basis for Processing
We process your personal data for the following purposes and legal bases under Article 6 GDPR:
Contract Performance (Art. 6(1)(b) GDPR)
- Processing program applications and inquiries
- Providing our accelerator and incubator services
- Managing our relationship with portfolio companies
Legitimate Interests (Art. 6(1)(f) GDPR)
- Improving our website and services
- Analyzing website usage patterns
- Preventing fraud and ensuring security
- Business development and networking
Consent (Art. 6(1)(a) GDPR)
- Sending marketing communications and newsletters
- Using analytics and marketing cookies
- Processing data for purposes beyond the original scope
Legal Obligation (Art. 6(1)(c) GDPR)
- Compliance with tax and accounting regulations
- Responding to lawful requests from authorities
- Retention of records as required by law
6. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected:
| Data Category | Retention Period |
|---|---|
| Application data (unsuccessful) | 6 months after decision |
| Portfolio company data | Duration of relationship + 10 years |
| Newsletter subscriptions | Until unsubscription |
| Contact inquiries | 3 years after last contact |
| Tax-relevant documents | 10 years (§ 147 AO) |
| Server logs | 30 days |
7. Data Sharing and Recipients
We may share your personal data with the following categories of recipients:
- Service Providers: Hosting providers, email service providers, analytics tools, and other third parties who process data on our behalf under data processing agreements (Art. 28 GDPR)
- Partners and Investors: With your consent, we may share application data with our partner organizations, investors, and mentors for program-related purposes
- Legal Requirements: When required by law or to protect our legal rights
- Business Transfers: In connection with mergers, acquisitions, or asset sales
We do not sell your personal data to third parties.
8. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your browsing experience and analyze website usage. You can manage your cookie preferences at any time.
8.1 Types of Cookies We Use
Necessary Cookies
Essential for the website to function properly. These cookies cannot be disabled. They include session cookies, security cookies, and cookies that remember your cookie preferences.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)
Analytics Cookies
Help us understand how visitors interact with our website by collecting anonymous statistical information. This includes page views, time on site, and navigation patterns.
Legal basis: Consent (Art. 6(1)(a) GDPR)
Marketing Cookies
Used to track visitors across websites to display relevant advertisements. These cookies may be set by third-party advertising networks.
Legal basis: Consent (Art. 6(1)(a) GDPR)
Preference Cookies
Allow the website to remember choices you make, such as language preferences or region, to provide a more personalized experience.
Legal basis: Consent (Art. 6(1)(a) GDPR)
9. International Data Transfers
Some of our service providers may be located outside the European Economic Area (EEA). When we transfer personal data to countries without an adequacy decision from the European Commission, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Binding Corporate Rules for transfers within corporate groups
- EU-US Data Privacy Framework for certified US organizations
10. Your Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data:
Right of Access (Art. 15)
Request information about whether we process your data and obtain a copy of it.
Right to Rectification (Art. 16)
Request correction of inaccurate or incomplete personal data.
Right to Erasure (Art. 17)
Request deletion of your personal data under certain circumstances.
Right to Restriction (Art. 18)
Request limitation of processing under certain conditions.
Right to Data Portability (Art. 20)
Receive your data in a structured, machine-readable format.
Right to Object (Art. 21)
Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent
Where processing is based on your consent, you have the right to withdraw it at any time. This does not affect the lawfulness of processing before the withdrawal.
To exercise any of these rights, please contact us at dataprivacy@ignitenext.com. We will respond to your request within one month.
11. Right to Lodge a Complaint
If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for us is:
Sächsischer Datenschutzbeauftragter
(Saxon Data Protection Commissioner)
Devrientstraße 5
01067 Dresden, Germany
Website: www.saechsdsb.de
12. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption for data in transit
- Encryption of sensitive data at rest
- Regular security assessments and updates
- Access controls and authentication mechanisms
- Employee training on data protection
- Incident response procedures
13. Children's Privacy
Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new "Last updated" date. We encourage you to review this page periodically.
15. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Ignite Next GmbH
Frauenstraße 9, 01067 Dresden, Germany
General inquiries: contact@ignitenext.com
Privacy inquiries: dataprivacy@ignitenext.com
Data Protection Officer: dpo@ignitenext.com