Privacy policy

• Data controller and Data Protection Officer

  The data controller under data protection law is the Federal Ministry for the Environment, Nature Conservation, Nuclear Safety and Consumer Protection. You will find the contact details of the data controller and the Data Protection Officer below: 

  Contact details of the data controller:

  Federal Ministry for the Environment, Climate Action, Nature Conservation and Nuclear Safety 
  Stresemannstraße 128 – 130, 10117 Berlin 
  Telephone: +49 30 18 305-0
  Email: poststelle(at)bmukn.bund.de

  Contact details of the Data Protection Officer:

  Officially appointed Data Protection Officer at the BMUKN 
  Email: datenschutzbeauftragte_r(at)bmukn.bund.de
  Telephone: +49 30 18 305-0

  Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH, Stresemannstr. 69–71, 10963 Berlin, operates the website on behalf of the BMUKN. We, ZUG, act as a data processor within the meaning of Article 28 of the GDPR. As part of our activities, we process personal data on behalf of and in accordance with the instructions of the data controller. 

  Contact details of the appointed data protection officer at ZUG

  Email: datenschutz(at)z-u-g.org
  Postal address: Stresemannstr. 69–71, 10963 Berlin 

• Principles of data processing

  We process personal data exclusively in accordance with the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). 

  Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address or user behaviour. 

  We process personal data only to the extent necessary. Which data is required and processed, for what purpose and on what legal basis, depends largely on the nature of the service you are using, or rather on the purpose for which it is required. 

  Processed personal data is deleted as soon as the purpose of the processing has been achieved and there are no longer any statutory retention obligations to be complied with.

  As a general rule, personal data processed in connection with the following processing operations is not disclosed to third parties, unless it is specifically intended for disclosure. Access to your data is granted to the service providers specified in each case, whose services we use to carry out the processing activities. Disclosure of the data to the relevant authorities is possible on a case-by-case basis. Your data will not be disclosed to third parties for commercial or any other purposes.

  Automated decision-making within the meaning of Article 22 of the GDPR is not used in any of the processing operations.

Processing operations

• 1. Visits to the website

  Every visit to our website is recorded in a log file to ensure data security. The following data is stored for a maximum of 24 hours:

  • Name of the file accessed
  • Date and time of access
  • Amount of data transferred
  • Indication of whether the access was successful
  • IP address of the user or the provider
  • Internet address of the previous page (referrer)
  • Details of the programme retrieving the data (user agent)

  It is not possible to link the IP address directly to you as an individual, and this is ruled out. 

  The IP address is only analysed in the event of attacks on our website, in the event of breaches of public decency, or if the website is used for other illegal activities. In such cases, it is only possible to trace the IP address back to you via your internet service provider as part of a police or public prosecutor’s investigation. This data is not used for statistical purposes.

  The data on our website is processed by our main service provider, coding. powerful. systems. CPS GmbH, based in the Federal Republic of Germany, with whom we have concluded a data processing agreement in accordance with Article 28 of the GDPR. Any further disclosure of personal data to other recipients will be indicated accordingly on the relevant web service.

  The website uses cookies. You can find our privacy policy regarding cookies here.

• 2. Contacting the IKI Office

  The processing of personal data for the purpose of seeking advice from the IKI Office at ZUG depends on the method of contact used. There are various ways to contact us to make use of our advisory services: 

  • Electronically via the contact form
  • Electronically by email
  • By post 
  • By telephone 

  We process your personal data for a specific purpose: to identify your enquiry and respond to it appropriately. To this end, we would like to use the email address you have provided to contact you to respond to an enquiry or in the event that we need to follow up with you. Your name, your organisation, the content of your enquiry and our reply will be documented within the team for quality assurance and organisational purposes, so that we can provide you with efficient advice should you have any recurring or further enquiries. The information you enter in the contact form is stored in the website’s backend for a maximum of 90 days. The correspondence notes associated with these enquiries are retained for a maximum of a further 3 years. 

  Anonymised documentation may be passed on to the data controller.

  The data processing operations described below, carried out on behalf of the BMUKN for the purpose of establishing contact, are based on Article 6(1)(e) of the GDPR. The provision of a channel for communication with you is necessary for the purpose of processing your enquiry. 

  a. Contact via the contact form

  You can contact our IKI Office at ZUG via the website. To do so, we only require your email address in order to respond to your enquiry. Providing your name and organisation is optional. If you provide us with your name, we will use it to address you personally. 

  b. Contacting us by email

  Alternatively, you can send us an email to our central email addresses, which are listed on the website.

  We will store the data you provide (for example: surname, first name, address), and at the very least your email address, as well as the information contained in the email (including any personal data you may have provided yourself), for the purpose of contacting you and processing your enquiry. 

  c. Contacting us by post

  If you write a letter to the IKI Office at ZUG, we will store the data you provide (for example: surname, first name, address) and the information contained in the letter (including any personal data you have provided) for the purpose of contacting you and processing your enquiry. 

  d Contact by telephone

  We use the Zoom (Phone) communication platform to conduct telephone calls. Zoom is a service provided by Zoom Video Communications, Inc., which is based in the USA. You can find the privacy policy under Section 6 ‘Participation in online meetings, telephone conferences and webinars’. 

• 3. Subscription to newsletters and other information services

  You can subscribe to a newsletter or other information service by registering for it on the website. We only require your email address for this purpose. As a recipient of an information service, you will be informed – either regularly or on an ad hoc basis, depending on the format – about new events, funding opportunities and the latest news on the selected topic.

  Providing your name is optional. If you do provide your name, we will use it to address you personally. The details you enter in the registration form will be stored in the website’s backend for a maximum of 90 days. Once you have submitted the registration form, you will receive a confirmation email. Your registration will only take effect once you have clicked on the link in the confirmation email. If registration is not confirmed via the link, your data will be deleted immediately. You can unsubscribe from the newsletter or information service at any time. To do so, simply use the unsubscribe link at the bottom of each email. 

  To send you this information, we process your email address and, where applicable, your name and your company/organisation using the CleverReach GmbH & Co. KG platform. We use your personal data exclusively for sending the newsletter and for statistical evaluations to analyse system performance. 

  Subscription to the newsletter or any other information service is voluntary. The processing of your personal data is based on your consent in accordance with Article 6(1)(a) of the GDPR, which you provide to us by submitting your registration. You may withdraw this consent at any time with future effect via the unsubscribe link, by sending an email to iki-communications(at)z-u-g.org or by post. 

  Your personal data will be deleted immediately upon withdrawal of your consent. Your data will also be deleted if we or our client discontinue the service. 

• 4. Participation in events

  a. Registration for and organisation of events

  When you register for an event, we process your data in order to prepare for and organise the event. The nature and scope of the data processing depend on the event for which you have registered. In general, we process the following categories of personal data in order to organise an event: 

  • Name
  • Email address
  • Company/institution (if applicable)
  • Position (if applicable)

  Without the data marked as mandatory fields during registration, we will not be able to process your registration or run the event. 

  We process your data in particular for the following purposes:

  • Sending the registration confirmation and event materials
  • Providing support before, during and after an event
  • Compiling the list of participants
  • Where applicable, forwarding the list of participants to the client
  • Where applicable, producing a name badge for face-to-face seminars
  • Where applicable, issuing a certificate of attendance

  Further information on the nature and scope of the processing of personal data when participating in an event may be set out in the terms and conditions of participation for events. We will delete your participation data no later than one year after the end of the event. Participation lists may be passed on to the responsible body.

  To send the confirmation of attendance and event information, we process your name and contact details using the application provided by CleverReach GmbH & Co. KG.

  To run online events, we use the Zoom conferencing and collaboration solutions. You can find the privacy information under section 6, ‘Participation in online meetings, teleconferences and webinars’.

  The legal basis for the data processing described is Article 6(1)(b) of the GDPR (performance of a contract, organisation of the event).

  b. Live streaming and recording

  In the case of live streams or recordings (excluding live streaming), video and audio recordings will be broadcast or recorded only containing the speakers and those individuals who actively participate in the event by requesting to speak. If a livestream and/or recording is planned, you will be informed of this during the registration process and/or immediately before the event begins.

  We use livestreams and video recordings primarily for journalistic and editorial purposes, such as publishing the event or still images on our website, other high-visibility channels and, where applicable, ZUG’s print media, as well as those of cooperation partners or clients involved in the respective event; sharing with third parties, in particular print and online media, for the purpose of reporting (public relations); invitations to follow-up events, and the long-term storage of the recordings in an internal archive. Recordings are deleted once the original purpose no longer applies and no other legal requirements necessitate longer-term storage. Recordings for journalistic and editorial purposes are stored permanently. All other recordings will be deleted after 2 years at the latest. 

  If you do not make a contribution to the discussion, neither your name nor your image will be stored. Insofar as we process your personal data in the context of a live stream and/or a recording, we do so on the basis of Article 6(1)(a) of the GDPR (consent). You give your consent to the recording and use of the recording by actively speaking and, where applicable, switching on your camera. You can therefore decide for yourself whether your image and/or audio is recorded. If the camera is switched on, people within the camera’s field of view will be visible to all participants in the online event and – if you contribute to the discussion – will form part of the video recording we produce. You must ensure that no other people are within the camera’s field of view. Alternatively, you may use the chat or Q&A function of the video conferencing platforms for questions and comments.

  c. Photographs and video recordings 

  At in-person events, we regularly take photographs and/or make video recordings of the event and the guests. Where such recordings are planned, you will be informed of this immediately before the start of the event and, where applicable, also during the registration process. 

  Where recordings made during an in-person event take the form of panoramic shots of the event without a specific focus on particular groups of people, or of gatherings of more than 10 people at the event, this is carried out in accordance with Article 6(1), first sentence, point (e) of the GDPR in the public interest of documenting and reporting on events organised on our behalf, and does not require the separate consent of the persons depicted.

  Where individual portrait photographs of participants or targeted group photographs of up to a maximum of 10 people are taken, we take and use such photographs based on the consent you have given in accordance with Article 6(1), first sentence, point (a) of the GDPR. If we take photographs and/or make video recordings, we will use public notice boards in the entrance area to inform participants. If you do not wish to be photographed in portraits or small group shots, you may collect a coloured badge from the registration desk upon entering the event, which you should attach to your clothing in a clearly visible position on your chest. This will signal to the cameramen and photographers present that you do not wish to be filmed or photographed. However, you may also speak directly to the cameramen, photographers and the event team at any time if you do not wish to be filmed or photographed.

  Our staff, or service providers we have commissioned, take photographs and make video recordings. We use them primarily for journalistic and editorial purposes, such as publishing coverage of the event or photographs on our website, other high-visibility channels and, where applicable, in ZUG’s print media. They may also be used by cooperation partners or clients involved in the respective event, shared with third parties, in particular print and online media, or used for the purpose of reporting (public relations), invitations to follow-up events and the long-term storage of the recordings in an internal archive. Recordings will be deleted once the original purpose no longer applies and no other legal requirements necessitate longer-term storage. Recordings for journalistic and editorial purposes will be stored permanently. All other recordings will be deleted after two years at the latest.

• 5. Surveys for quality improvement

  We conduct surveys to systematically review the quality of our services and to continuously improve them. Participation in such surveys is voluntary. 

  For surveys conducted before, during or after our events, we use the survey tool provided by LimeSurvey GmbH, a survey services and consultancy firm based in Germany, with whom we have concluded a data processing agreement in accordance with Article 28 of the GDPR, as well as the survey functions of the Zoom video conferencing solution. The survey functions enable us to make our meetings more interactive and conduct surveys in real time. If we conduct satisfaction surveys after the event, you will receive the invitation via our email marketing tool, CleverReach. If, when you register for an event, we ask you for data that is relevant for quality assurance, monitoring and evaluation, the provision of this information is also voluntary. Once you have registered, this information will be anonymised and processed separately from your registration details. 

  We treat your details as strictly confidential and analyse them in anonymised form. We do not carry out any personalised analysis or presentation of results, and we will not pass on your details to third parties. Only the anonymised data set is stored locally on our server. The results of the analysis of the anonymised data set may be provided to the data controller.

  The legal basis for processing personal data in connection with the survey is your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw this consent at any time with future effect by sending an email to iki-office(at)z-u-g.org or by post.

• 6. Participation in online meetings, telephone conferences and webinars

  We use the Zoom conferencing and collaboration solution to conduct telephone calls and teleconferences (collectively ‘telephone calls’), online meetings, video conferences and/or webinars (collectively ‘online meetings’). Zoom is a service provided by Zoom Video Communications, Inc., which is based in the USA. Zoom acts as a data processor within the meaning of Article 28 of the GDPR. 

  When conducting telephone calls, we process the following data:

  • Communication content: audio, voicemail
  • Recordings (optional): MP4 files of voicemail audio recordings
  • Call history with participant information: details of incoming and outgoing phone numbers, country code, date and time of call, call duration
  • Location data: approximate location of call participants (nearest location)
  • Metadata, telemetry data: session information (e.g. call outcome, call type, waiting time), participants’ IP addresses, device/hardware information

  We process various types of data when conducting online meetings. The scope of the data also depends on what information you provide before or while participating in an online meeting. To take part in an online meeting or enter the ‘meeting room’, you must at least provide your name. The following personal data is subject to processing:

  • User details: first name, surname (if provided or taken from your Zoom account), email address, password, profile picture (if provided), login details
  • Meeting metadata, telemetry data: subject, description (optional), participants’ IP addresses, device/hardware information
  • For recordings (optional): MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat.
  • Text, audio and video data: you may have the option of using the chat, question or poll functions during an online meeting. In this regard, the text you enter is processed so that it can be displayed in the online meeting and, where applicable, logged. To enable the display of video and the playback of audio, data from your device’s microphone and, where applicable, its video camera will be processed for the duration of the meeting. You can switch off the camera or mute the microphone yourself at any time in the Zoom application.
  • Survey results: results obtained through the surveys.
  • Q&A results: answers to questions.

  If we wish to record online meetings (e.g. as part of organising an event in accordance with clause 4), we will inform you of this transparently in advance and – where necessary – seek your consent. You will also be notified visually and audibly within the application that the meeting is being recorded. Telephone calls are not recorded. If it is necessary for the purposes of documenting the results of an online meeting, we will record the chat content. However, this will not usually be the case. We will also inform you of this transparently in advance. In the case of webinars, we may also process questions asked by webinar participants for the purposes of recording and following up on webinars.

  Audio and video content is not stored unless it is recorded. Recorded events are generally stored permanently in accordance with Section 4(b) ‘Live streaming and recording’ or (d) ‘Photographs and video recordings’. We will delete other recordings for which you have given us your consent once it is no longer necessary to store them. Further storage may be necessary, in particular, if the data is still required to fulfil contractual obligations, or to assess, grant or defend against warranty and, where applicable, guarantee claims. 

  Please note that content from telephone calls and online meetings, as well as from face-to-face meetings, is often used to communicate information to prospective clients or third parties and is therefore intended for disclosure. 

  Further information on the handling of personal data can be found in the data protection policy of the data processors: 

  https://www.zoom.com/de/trust/privacy/?cms_guid=false&lang=null

  Zoom is a service provided by a US-based company. Personal data is therefore also processed in a third country. Zoom Video Communications, Inc. is certified under the Data Privacy Framework, meaning that an adequacy decision within the meaning of Article 45 of the GDPR is in place for transfers to third countries. In addition, a data processing agreement including standard contractual clauses has been concluded with Zoom, thereby providing a suitable guarantee within the meaning of Article 46(1) and (2)(c) of the GDPR. As supplementary safeguards, we have also configured our system so that only data centres within the EU/EEA are used to conduct online meetings. 

  The legal basis for data processing when conducting telephone calls and online meetings is Article 6(1)(b) of the GDPR, insofar as the calls are made within the framework of contractual relationships (e.g. participation in events). Furthermore, telephone calls and online meetings are conducted as part of the consultancy services referred to in clause 2 and are therefore based on Article 6(1)(e) of the GDPR. Where you have given your consent to the video and audio recording of online meetings, the lawfulness of this processing is based on your consent in accordance with Article 6(1)(a) of the GDPR.

• 7. Video content on the website

  As part of our public relations work, we provide videos using the YouTube Player. In some cases, we also present videos via our video content management system from VIMP GmbH.

  a. YouTube

  To use the YouTube Player, we operate an account on the ‘YouTube’ video portal of Google Ireland Limited, a company based in Ireland. Provided you have given your consent in the cookie settings, the following data is transmitted to YouTube when you access a live stream:

  • Your IP address
  • Your access and usage data.

  At the same time, YouTube sets one or more technically necessary cookies on your device. You can find our privacy policy regarding cookies here. 

  In logging into your YouTube account, you allow YouTube to link your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

  We have no influence over the data processing carried out by YouTube. Please refer to YouTube’s website for information on the data protection practices of the company behind the service.

  You can give us your consent via the pop-up window that appears when you click on the video or via the cookie settings. Your consent to the use of YouTube serves as the legal basis for its provision in accordance with Article 6(1)(a) of the GDPR.

  b. VIMP Video Content Management System

  In certain cases, we use the VIMP Video Content Management System provided by VIMP GmbH. We have entered into a data processing agreement with VIMP GmbH in accordance with Article 28 of the GDPR. The videos are hosted in data centres in Germany.

  When you access a video or live stream, no personal data is transferred to VIMP; IP addresses are processed only in anonymised form.

• 8. Use of social media

  As part of its public relations work, IKI maintains its own accounts on social media. These online presences are operated to interact with active users on these platforms and to provide information about projects and services. Advisory services and any other communication going beyond the aforementioned purpose of use are not offered, processed or responded to via these services. Clicking on a social media logo takes you to the IKI page on the respective platform. 

  Please note that these platforms process data globally, and in particular in the USA. This data transfer to a third country outside the EU or the EEA entails risks regarding the potential exercise of your data protection rights. Please do not contact us via social media if you wish to avoid this. You use these services and their features at your own risk. This applies in particular to the public use of interactive features (e.g. commenting, sharing, rating) on the platforms.

  Please do not actively share any personal data via our social media channels – for example, in posts, comments or retweets – and always use our direct communication channels to get in touch with us. All interactions with the social media accounts (sharing, retweeting, liking, commenting on or quoting posts) are displayed publicly. This applies both to actions by third parties in relation to IKI posts and to those by the IKI account in response to third-party posts. The data collected depends on the information you provide and the contact details you have specified or shared. Where applicable, IKI staff may view publicly available data such as profile and account name, profile picture, the content of the enquiry, the number of followers and the profiles the account follows, as well as the latest posts.

  Please note that the processing of data on behalf of the BMUKN is carried out on the basis of Article 6(1)(e) of the GDPR for the purpose of handling your communication.

  LinkedIn

  When accessing the IKI page on LinkedIn, the operator’s terms of use and privacy policy apply. You can view the privacy policy for the social network LinkedIn, which is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, at https://de.linkedin.com/legal/privacy-policy?

  We have entered into an agreement with LinkedIn in accordance with Article 26 of the GDPR, in which the data protection obligations arising from the operation of our company page are shared between us and LinkedIn. LinkedIn has assumed the majority of the data protection obligations, such as the fulfilment of data subjects’ rights under Articles 12 et seq. of the GDPR, the obligation to maintain appropriate technical and organisational measures to protect the security of personal data, and the reporting and notification obligations in the event of a data breach. If you contact us regarding your rights as a data subject, we will forward your enquiry to LinkedIn without delay.

  Further information on the agreement between us and LinkedIn can be found at: https://www.linkedin.com/help/linkedin/answer/124838?lang=de  and https://legal.linkedin.com/pages-joint-controller-addendum 

  Bluesky

  When accessing the IKI page on Bluesky, the operator’s Terms of Use and Privacy Policy apply. Bluesky is operated by Bluesky Social, Inc., 2108 N St, STE 200, Sacramento, CA 95816, USA. You can view Bluesky’s privacy policy via the following link: https://bsky.social/about/support/privacy-policy

  Please note that we have no agreement with Bluesky Social, Inc. regarding joint controllership under Article 26 of the GDPR. Please also note that Bluesky is based on an open, decentralised protocol (AT Protocol). This means that your public interactions (such as posts, likes, reposts and follow lists) are publicly accessible by default and may also be viewed, stored or indexed by third parties outside the official Bluesky app. You use these services and their features at your own risk.

  X (formerly Twitter)

  When accessing the IKI page on X, the operator’s Terms of Service and Privacy Policy apply. X is operated by X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. You can view X’s privacy policy via the following link: https://x.com/privacy

  Please note that we have no agreement with X Corp. regarding joint controllership under Article 26 of the GDPR. IKI has no influence over the extent to which, the location where, or the duration for which X stores data, analyses it or passes it on to third parties. You use this service and its interactive features (e.g. sharing, liking, commenting) at your own risk.

  Jaimo Stage

  Content from IKI’s social media channels is integrated onto our website via the ‘Stage’ plug-in solution provided by Jaimo Solutions GmbH, Friedrichstraße 52, 76669 Bad Schönborn. Jaimo Stage is a social media aggregator tool designed to curate social media feeds and present social media content. We have entered into a data processing agreement with Jaimo Solutions GmbH in accordance with Article 28 of the GDPR.

  Jaimo Stage temporarily stores posts from social media platforms and delivers them via its own servers. When these posts are displayed on our website, no information about your visit is stored and no cookies are set. Consequently, no consent is required. The aggregated content contains external links to the social media platforms. By clicking on these links, you will be taken to those websites. 

  Further information on the handling of personal data can be found in the provider’s privacy policy: https://about.stage.bio/datenschutz

• 9. Hyperlinks to other providers’ websites

  Our website contains hyperlinks to websites operated by other providers. When you click on these hyperlinks, you will be redirected directly from our website to the websites of those other providers. You can recognise this by the change in the URL, for example. We cannot accept any responsibility for the confidential handling of your data on these third-party websites, as we have no influence over whether these companies comply with data protection regulations. Please refer directly to the websites concerned for information on how these companies handle your personal data.

• 10. Translation of content (DeepL API)

  Internally, we use the automated text translation service provided by DeepL SE, Schanzenstraße 22, 50667 Cologne, Germany to process communication enquiries and contributions in foreign languages as part of our public relations work.

  The DeepL API is used for this purpose. Only the text content that we enter is transmitted to DeepL’s servers to generate the translation. The texts are anonymised wherever and as far as possible. However, we cannot completely rule out that texts may contain personal data. Sensitive data falling within the special categories as defined in Article 9 of the GDPR (in the context of complaints or consultations regarding IKI Safeguards) is not specifically translated as part of IKI’s activities.

  We have concluded a data processing agreement in accordance with Article 28 of the GDPR with DeepL SE, Maarweg 165, 50825 Cologne. For API use, the transmitted texts are processed exclusively for the purpose of producing the translation, stored only for the duration of the translation and not used to train DeepL’s AI models. This data is processed on the basis of Article 6(1)(e) of the GDPR, in particular for the purpose of efficiently handling and responding to your enquiries. 

  Further information on data protection at DeepL can be found at: https://www.deepl.com/en/privacy

Additions

• Protection of minors

  Persons under the age of 18 should not provide us with any personal data without the consent of their parents or legal guardians. We do not request any personal data from children and young people without the consent of their parents or legal guardians. We do not knowingly collect such data, and we do not pass it on to third parties.

• Data subjects’ rights

  As a data subject whose personal data is being processed, you have the following rights under the GDPR:

  • In accordance with Article 15 of the GDPR, you may request information about your personal data processed by us. In particular, you may request information regarding the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the intended storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, information regarding transfers to third countries or to international organisations, and information on the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details.
  • In accordance with Article 16 of the GDPR, you may request, without undue delay, the rectification of inaccurate personal data or the completion of your personal data stored by us.
  • Under Article 17 of the GDPR, you may request the erasure of your personal data stored by us, provided that the processing is not necessary to exercise the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or to establish, exercise or defend legal claims.
  • Under Article 18 of the GDPR, you may request the restriction of the processing of your personal data, provided that you contest the accuracy of the data, the processing is unlawful, we no longer require the data, and you object to its erasure because you require it to establish, exercise or defend legal claims. You are also entitled to the right under Article 18 of the GDPR if you have objected to the processing in accordance with Article 21 of the GDPR.
  • Under Article 20 of the GDPR, you may request that we inform you, in a structured, commonly used and machine-readable format, of the personal data you have provided to us, or you may request that it be transferred to another controller.
  • Under Article 7(3) of the GDPR, you may withdraw your consent at any time by notifying us. As a result, we may no longer continue to process your data on the basis of that consent in the future.
  • Under Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority for your usual place of residence, your place of work or our registered office.
• Right to object

  In accordance with Article 21 of the GDPR, you have the right to object to the processing of your data on grounds relating to your particular situation. In the event of a valid objection, we will no longer process your data.

• Data security and safeguards

  We are committed to protecting your privacy and treating your personal data as confidential. To prevent the manipulation, loss or misuse of your data stored with us, we implement comprehensive technical and organisational security measures, which are regularly reviewed and adapted to technological progress. These include, amongst other things, the use of recognised encryption methods (SSL encryption). However, we would like to point out that, due to the structure of the internet, it is possible that data protection rules and the aforementioned security measures may not be observed by other persons or institutions outside our sphere of responsibility. In particular, data disclosed in unencrypted form – for example, via email – may be read by third parties. We have no technical control over this. It is the user’s responsibility to protect the data they provide against misuse, whether through encryption or by other means.