Privacy Policy

1. Who we are (Controller)

CityMakers is operated by Association FabLab, which acts as the data controller for personal data processed through CityMakers.

Legal notice: https://fablab.ba/legal-notice/

Contact: info@fablab.ba

2. What personal data we collect

Depending on how you use CityMakers, we may collect:

• Account data: name/username, email address, password hash, profile settings
• Team and competition data: team details, membership, competition edition and challenge participation
• Workspace and project data: collaborative workspace content, project submissions, internal moderation notes, and project progress updates
• Communications: messages you send to support (info@fablab.ba)
• Technical data: IP address, device/browser details, server logs, timestamps (for security and service operation)

3. What we use your data for

We process personal data to:

• create and manage your account
• support team participation in competition editions and project submissions
• enable workspace collaboration, moderation, and learning
• maintain platform security, prevent spam and abuse
• troubleshoot and improve platform reliability
• comply with legal obligations

4. Legal bases (GDPR-style)

Where applicable, we rely on:

• Contract: to provide your account, team, competition, workspace, submission, and learning features
• Legitimate interests: security, fraud prevention, service improvement
• Consent: for optional promotional emails/newsletters (see Section 6)

5. Hosting and processors (Cloudflare)

CityMakers uses Cloudflare infrastructure for security, performance, and content delivery. Cloudflare may process technical data (such as IP addresses and request metadata) to provide these services.

6. Marketing and promotions (optional toggle)

If you choose to enable the preference:

• This setting is OFF by default.
• You can register and use CityMakers even if it stays OFF.
• You can change this preference at any time in your profile settings (and unsubscribe from emails where applicable).

We do not send promotional materials unless you have opted in.

7. Who can see your data

• Public: published competition results and approved project information, including files selected for public publication.
• Private: team and workspace content is restricted to authorized team members, assigned moderators, and administrators, except where access is required for security, abuse prevention, legal compliance, or troubleshooting.
• Internal access: limited to authorized personnel/administrators as necessary to operate and secure the platform.

8. Data retention

We keep personal data only as long as needed:

• account data: for as long as your account is active (plus limited backup retention)
• public content: until you delete it or request deletion (unless legal retention is required)
• logs/security data: retained for limited periods for security and troubleshooting

9. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict processing, object, and data portability. You may also withdraw consent for promotional communications at any time.

To exercise rights, contact: info@fablab.ba

10. Security

We use technical and organizational measures to protect data (HTTPS, access controls, monitoring). No system can guarantee absolute security.

11. Children

CityMakers is not intended for children under 16 (or the applicable local age). If you believe a minor has provided personal data, contact info@fablab.ba.

12. Contact

Privacy questions and requests: info@fablab.ba