Draft, pending legal review. As of 26 October 2026. The German version prevails.
1. Controller
digihub.li Genossenschaft, In der Specki 3, 9494 Schaan, Liechtenstein. Email: team@digihub.li, phone: +423 797 16 86. Registered office as stated in the Impressum.
We process personal data under the General Data Protection Regulation (GDPR), which applies in Liechtenstein through the EEA Agreement, and the Liechtenstein Data Protection Act (DSG).
2. Hosting and delivery
The website is delivered through Cloudflare Pages and Cloudflare Workers (Pages Functions) of Cloudflare, Inc., USA. When you open a page, Cloudflare processes technically necessary data, in particular IP address, date and time, requested address, browser identifier (user agent) and referrer, to deliver the site, keep it stable and protect it against attacks (Art. 6(1)(f) GDPR). Cloudflare acts as our processor; transfers to the USA rely on the EU-U.S. Data Privacy Framework or standard contractual clauses.
3. Contact and registration forms
When you write to us through a form or register for a session, workshop or programme, we process the details you enter (e.g. name, email address, phone, company, message). To prevent abuse we also transmit technical data: IP address, browser identifier, country (derived from the IP address) and the page the form was sent from.
The data is sent over an encrypted connection to our request system (intake.digihub.li) and by email to our team. Session registrations are also stored in Cloudflare Workers KV. We use the data to answer your request and run registrations (Art. 6(1)(b) GDPR) and delete it once it is no longer needed and no statutory retention applies.
4. Spam protection with Cloudflare Turnstile
Our forms and participation features are protected by Cloudflare Turnstile (Cloudflare, Inc., USA). Turnstile loads a script from challenges.cloudflare.com and uses technical signals (e.g. IP address, browser and device properties) to check that a request comes from a human. The legal basis is our legitimate interest in preventing spam and abuse (Art. 6(1)(f) GDPR).
5. LIHGA participation features
Entries you make in interactive features such as Gedankenbaum, Plank or LIHGA Loop are stored in Cloudflare Workers KV so they can be shown. Please do not enter sensitive data there. To limit abuse we briefly store your IP address as a counter (usually 60 seconds). Some features keep your progress locally in your browser (local storage or session storage).
6. Cookies, local storage and analytics (Google Analytics 4)
Only entries in your browser's local storage are necessary, e.g. your cookie choice (digihub_cookie_consent) and the light/dark display setting. They stay on your device.
With your consent (Art. 6(1)(a) GDPR) we use Google Analytics 4 of Google Ireland Limited, Ireland (parent Google LLC, USA) to analyse how the website is used. We use Google Consent Mode v2: by default all analytics and advertising storage is denied. Only when you choose "Accept analytics" does Google Analytics set cookies (e.g. _ga). Advertising features are always disabled. The Google Analytics script is only loaded after you choose "Accept analytics". Without consent, or if you decline, it is not loaded and no data is sent to Google Analytics.
If you reach our website via an ad or a link with campaign parameters, we store the click ID (gclid or gbraid/wbraid), the UTM parameters (source, medium, campaign, term) and the landing page in your browser's session storage, only until you close the tab and without a cookie. If you send us a request via the contact form, this information is sent along with it so we can see which campaign the request came from. Contact form submissions and clicks on the online booking link are measured in Google Analytics 4 only within the consent described above.
You can withdraw or change your consent at any time: open cookie settings (also in the footer of every page).
7. Email and collaboration (Google Workspace)
For email (e.g. to team@digihub.li) we use Google Workspace of Google Ireland Limited. When you write to us, your message and contact details are processed there (Art. 6(1)(b) and (f) GDPR). Transfers to the USA rely on the EU-U.S. Data Privacy Framework or standard contractual clauses.
8. Fonts and external links
Fonts are served from our own server; no connection to Google Fonts is made. Links to other websites (e.g. LinkedIn, Instagram, YouTube) are plain links. The privacy policies of those providers only apply once you click them.
9. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time with effect for the future. Write to team@digihub.li.
You can also lodge a complaint with the supervisory authority: Datenschutzstelle Liechtenstein, www.datenschutzstelle.li.