The following information provides a simple overview of
what happens to your personal data when you visit this website. Personal data is
any data that can be used to personally identify you. Detailed information on the
subject of data protection can be found in our
data protection declaration listed below this text.
Data processing on this website is carried out by the website operator. You can find their
contact details in the “Note on the responsible body” section in this
data protection declaration.
On the one hand, your data is
collected when you provide it to us. This can be e.g. This could, for example, be data that you
enter into a contact form.
Other data is collected automatically or with your consent
by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser,
operating system or time of page access). This data is collected automatically as soon as you
enter this website.
Some of the data is collected to
ensure that the website is provided error-free. Other data may
be used to analyze your user behavior.
You have the right at any time to receive information free of charge about the origin, recipient and purpose of your
stored personal data. You also have the right to request the correction or
deletion of this data. If you have given your consent to data processing,
you can revoke this consent at any time in the future. You also have the right to request
that the processing of your personal data be restricted in certain circumstances
. You also have the right to lodge a complaint with the responsible supervisory authority
.
You can contact us at any time about this or if you have any further questions about data protection
.
When you visit this website, your surfing
behavior can be statistically evaluated. This happens primarily with so-called analysis programs.
Detailed information about these analysis programs can be found in the following
data protection declaration.
We host the content of our website with the following providers:
This website is hosted externally. The personal data
collected on this website is stored on the server(s) of the host(s). This can be
v. a. These include IP addresses, contact requests, meta and communication data, contract data, contact details,
names, website access and other data generated via a website.
External
hosting is carried out for the purpose of fulfilling the contract with our potential and
existing customers (Art. 6 Para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient
provision of our online offering by a professional provider (Art. 6 Para. 1 lit. f GDPR). If
appropriate consent has been requested, processing is carried out exclusively on the basis of Art
. 6 Para. 1 lit
. B. Device fingerprinting) within the meaning of the
TTDSG. Consent can be revoked at any time.
Our host(s) will
only process your data to the extent necessary to fulfill its service obligations and
follow our instructions regarding this data.
We use the following host(s):
Infomaniak Network AG
Rue Eugène Marziano 25
1227 Les Acacias (GE)
We have concluded an order processing contract (AVV) for the use
of the above-mentioned service. This is a
contract required by data protection law, which ensures that we only
process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
The operators of these sites take the protection of your personal data very
seriously. We treat your personal data confidentially and in accordance with statutory
data protection regulations and this data protection declaration.
When you use this website,
various personal data is collected. Personal data is data that
can be used to personally identify you. This data protection declaration explains
what data we collect and what we use it for. It also explains how and for what purpose this
happens.
We would like to point out that data transmission over the Internet (e.g. when communicating
via email) can have security gaps. Complete protection of data from
access by third parties is not possible.
The responsible body for data processing on
this website is:
Lehnhardt Foundation
Gaihofstrasse 23
79424 Auggen
Germany
Chairwoman of the board:
Dr.Dr.hc. Monika Lehnhardt-Goriany
Telephone: + 49 7631 123 67
Email: ml@lehnhardt-stiftung.org
The responsible body is the natural or legal person who alone or jointly with others decides
on the purposes and means of processing personal data (e.g. names, e-mail
addresses, etc.).
Unless a specific storage period
is specified in this data protection declaration, your personal data will remain with us until the purpose for data processing
no longer applies. If you make a legitimate request for deletion or
revoke your consent to data processing, your data will be deleted unless we have other legally
permissible reasons for storing your personal data (e.g. tax
or commercial law retention periods); In the latter case, the deletion takes place after
these reasons no longer apply.
If you
have consented to data processing, we will process your personal data on the basis of Art.
6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit
are processed. In the event of express consent to the transfer of personal
data to third countries, data processing is also carried out on the basis of Art. 49 Para. 1 lit. a GDPR.
If you have consented to the storage of cookies or to the access to information on your device (e.g. via
device fingerprinting), data processing will also be carried out on the basis of Section
25 Paragraph 1 TTDSG. Consent can be revoked at any time. If your data is necessary to fulfill the contract or to
carry out pre-contractual measures, we process your data on the basis of
Article 6 Paragraph 1 Letter b GDPR. Furthermore, we process your data if it
is necessary to fulfill a legal obligation on the basis of Art. 6 Para. 1 lit. c GDPR. Data processing
can also be carried out on the basis of our legitimate interest in accordance with Article 6 (1) (f) GDPR. Information about the
relevant legal bases in each individual case is provided in the following paragraphs of this
data protection declaration.
As part of our business activities,
we work with various external bodies. In some cases, it is also necessary to transmit
personal data to these external bodies. We only pass on personal data to
external bodies if this is necessary to fulfill a contract, if we
are legally obliged to do so (e.g. passing on data to tax authorities), if we have a legitimate
interest in accordance with Article 6 Paragraph 1 lit. f DSGVO in the transfer or if another legal basis
allows the data transfer. When using order processors, we
only pass on our customers’ personal data on the basis of a valid order processing contract. In the case of
joint processing, a joint processing contract is concluded.
Many data processing operations are
only possible with your express consent. You can revoke any consent you have already given
at any time. The lawfulness of the data processing carried out until the revocation remains
unaffected by the revocation.
IF THE DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LITER. E OR F
GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR
PARTICULAR SITUATION
; THIS ALSO APPLIES TO
PROFILING BASED ON THESE TERMS. THE APPLICABLE LEGAL BASIS ON WHICH PROCESSING IS BASED
CAN BE FOUND IN THIS DATA PROTECTION POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR
AFFECTED PERSONAL DATA UNLESS
WE CAN PROOF COMPLEX REASONS FOR THE PROCESSING
THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOM OR THE
PROCESSING IS FOR THE PURPOSE OF EFFECTING, EXERCISE OR DEFENSE FORMATION OF
LEGAL CLAIMS ( OBJECTION PURSUANT TO ARTICLE 21 (1) GDPR).
IF YOUR
PERSONAL DATA IS PROCESSED FOR DIRECT ADVERTISING, YOU HAVE THE
RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL
DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT IT
IS CONNECTED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT,
YOUR PERSONAL DATA WILL NO LONGER BE USED FOR THE PURPOSE OF
DIRECT ADVERTISING (OBJECTION PURSUANT TO ARTICLE 21 (2) GDPR).
In the event of
violations of the GDPR, those affected have the right to lodge a complaint with a
supervisory authority, in particular in the member state of their habitual residence, their
place of work or the place of the alleged violation. The right to lodge a complaint exists
without prejudice to any other administrative or judicial remedies.
You have the right to have data that we process automatically based on
your consent or in fulfillment of a contract
handed over to you or to a third party in a common, machine-readable format. If you
request the data to be transferred directly to another person responsible, this will only be done if it
is technically feasible.
Within the framework of the applicable legal
provisions, you have the right to free information at any time about your stored personal
data, its origin and recipient and the purpose of data processing and, if necessary, a right to
correction or deletion of this data.
You can contact us at any time about this or if you have any further questions on the subject of personal data.
You have the right to request that the
processing of your personal data be restricted. You can contact us at any time about this.
The right to restriction of processing exists in the following cases:
If you have restricted the processing of your personal data, this
data – apart from its storage – may only be used with your consent or to assert,
exercise or defend legal claims or to protect the rights of another
natural or legal person or for reasons of important public interest of the
European Union or a member state.
This site uses SSL or TLS encryption for security reasons and to protect
the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You
can recognize an encrypted connection
by the browser address line changing from “http://” to “https://” and
by the lock symbol in your browser line.
If SSL or TLS encryption is activated,
the data you transmit to us cannot be read by third parties.
The use of contact details published as part of the imprint obligation
to send unsolicited advertising
and information materials is hereby objected to. The operators of the pages expressly reserve
the right to take legal action in the event of unsolicited advertising information being sent, such as spam emails
.
The provider of the pages automatically collects and stores information in so
-called server log files, which your browser automatically transmits to us. These are:
This data will not be merged with other data sources.
This
data is collected on the basis of Article 6 Paragraph 1 Letter f GDPR. The website operator has a
legitimate interest in the technically error-free presentation and optimization of his website –
for this purpose the server log files must be recorded.
If you send us inquiries using the contact form, your
details from the inquiry form, including the contact details you provided there, will be
stored by us in order to process the inquiry and in case of follow-up questions. We will not pass on this data without your
consent.
This data is processed on the basis of Art. 6 Para. 1 lit. b GDPR,
provided your request is related to the fulfillment of a contract or
is necessary to carry out pre-contractual measures. In all other cases, the processing is based on
our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 Para. 1 lit. f
GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) if this was queried; consent can be
revoked at any time.
The data you enter in the contact form will remain with us until you
request us to delete it, revoke your consent to storage or the purpose for
data storage no longer applies (e.g. after your request has been processed). Mandatory
legal provisions – in particular retention periods – remain unaffected.
If you contact us by email, telephone or fax
, your request, including all resulting personal data (name, request), will be
stored and processed by us for the purpose of processing your request. We will not pass on this data without
your consent.
This data is processed on the basis of Art. 6 Para. 1 lit. b
GDPR, provided your request is related to the fulfillment of a contract or
is necessary to carry out pre-contractual measures. In all other cases,
the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us
(Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) if this was queried
; consent can be revoked at any time.
The data you
send to us via contact requests will remain with us until you request us to delete it,
revoke your consent to storage or the purpose for data storage no longer applies (e.g. after
your request has been processed). Mandatory legal provisions – in particular
statutory retention periods – remain unaffected.
Elements of the social network Facebook are integrated into this website. The provider
of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
However, according to Facebook, the data collected will also be transferred to the USA and other third countries.
You can find an overview of the Facebook social media elements here: https://developers.facebook.com/docs/plugins/?locale=de_DE .
If the social media
element is active, a direct connection is established between your device and the Facebook server
. Facebook thereby receives the information that you have visited this website with your IP address
. If you click the Facebook “Like” button while you
are logged into your Facebook account, you can link the content of this website to your Facebook profile. This
allows Facebook to assign your visit to this website to your user account. We would like to point out that as
the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook
. Further information can be found in Facebook’s data protection declaration at : https://de-de.facebook.com/privacy/explanation
.
The use of this service is based on your
consent in accordance with Article 6 Paragraph 1 Letter a GDPR and Section 25 Paragraph 1 TTDSG. Consent can be
revoked at any time.
To the extent that personal data is collected on our website using the tool described here
and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal
Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Article
26 GDPR). The joint responsibility is limited exclusively to collecting
the data and passing it on to Facebook. The processing carried out by Facebook after the forwarding
is not part of the shared responsibility. Our joint obligations have been
set out in a joint processing agreement. The text of the agreement can be found
at: https://www.facebook.com/legal/controller_addendum . According to this agreement, we are responsible
for providing data protection information when using the Facebook tool and for the
data protection-safe implementation of the tool on our website. Facebook is responsible for the
data security of Facebook products. You can assert data subject rights (e.g.
requests for information) regarding the data processed by Facebook directly on Facebook .
If you assert your data subject rights with us, we are obliged
to forward these to Facebook.
Data transfer to the USA is based on the EU
Commission’s standard contractual clauses. Details can be found here : https://www.facebook.com/legal/EU_data_transfer_addendum , https://de-de.facebook.com/help/566994660333381
and https://www.facebook.com/policy.php .
The company is certified according to the “EU-US Data Privacy
Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure
compliance with European data protection standards when data is processed in the USA .
Every DPF certified company undertakes to
comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https
:
//www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active
Functions of the Instagram service are integrated into this website. These
functions are offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal
Harbour, Dublin 2, Ireland.
If the social media element is active, a direct connection is
established between your device and the Instagram server. Instagram thereby receives information
about your visit to this website.
If you are logged into your Instagram account, you can link
the content of this website to your Instagram profile by clicking on the Instagram button .
This allows Instagram to assign your visit to this website to your user account. We would like to point out
that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use
by Instagram.
The use of this service is based on your consent in accordance with Article 6
Paragraph 1 Letter a GDPR and Section 25 Paragraph 1 TTDSG. Consent can be revoked at any time.
To the extent that personal data is collected on our website using
the tool described here and
forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand
Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing ( Art. 26 GDPR). The
joint responsibility is limited exclusively to collecting the data and
passing it on to Facebook or Instagram. The processing carried out by Facebook or Instagram after forwarding
is not part of the shared responsibility. Our joint
obligations have been set out in a joint processing agreement. The text
of the agreement can be found at: https://www.facebook.com/legal/controller_addendum . According to
this agreement, we are responsible for providing data protection information when using the Facebook
or Instagram tool and for the data protection-safe implementation of the tool on our
website. Facebook is responsible for the data security of Facebook and Instagram products
.
You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook or Instagram directly on Facebook. If you
assert your data subject rights with us , we are obliged to forward these to Facebook.
Data transfer to the
USA is based on the EU Commission’s standard contractual clauses. Details can be found here : https://www.facebook.com/legal/EU_data_transfer_addendum , https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381
.
Further information can be found in
Instagram’s privacy policy: https://privacycenter.instagram.com/policy/ .
The company is certified according to the “EU-US Data Privacy
Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure
compliance with European data protection standards when data is processed in the USA .
Every DPF certified company undertakes to
comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https
:
//www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active
If you would like to receive the newsletter offered on the website
, we need an email address from you as well as information that
allows us to verify that you are the owner of the email address provided and that you
agree to receive the newsletter . No further data is collected or only collected on a voluntary basis.
We use this data exclusively to send the requested information and do
not pass it on to third parties.
The data entered into the newsletter registration form
is processed exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your consent to the
storage of data, the e-mail address and their use to send the newsletter
at any time, for example via the “unsubscribe” link in the newsletter. The
legality of the data processing operations that have already taken place remains
unaffected by the revocation.
The data you provide to us for the purpose of subscribing to the newsletter will be
stored by us or the newsletter service provider until you unsubscribe from the newsletter and
will be deleted from the newsletter distribution list after you unsubscribe from the newsletter or if the purpose no longer applies. We
reserve the right to delete or block email addresses from our newsletter distribution list at our own discretion within the scope of our
legitimate interest in accordance with Article 6 (1) (f) GDPR.
Data
stored by us for other purposes remains unaffected.
After you have been unsubscribed from
the newsletter distribution list, your email address may be
stored in a blacklist by us or the newsletter service provider if this is necessary to prevent future mailings. The data from the
blacklist will only be used for this purpose and will not be merged with other data. This
serves both your interest and our interest in complying with legal requirements when
sending newsletters (legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR). The storage in the
blacklist is not limited in time. You can object to the storage if your
interests outweigh our legitimate interests.
This website embeds videos from the YouTube website. The website operator is
Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
When you
visit one of our websites on which YouTube is integrated, a connection to YouTube’s servers is
established. The YouTube server is informed which of our pages you have visited.
Furthermore, YouTube can store various cookies on your device or
use comparable technologies for recognition (e.g. device fingerprinting). In this way, YouTube can
receive information about visitors to this website. This information is, among other things, used
to collect video statistics, improve user experience and
prevent fraud attempts.
If you are logged into your YouTube account, you enable YouTube
to assign your surfing behavior directly to your personal profile. You can prevent this by
logging out of your YouTube account.
The use of YouTube is in the interest of an
attractive presentation of our online offerings. This represents a legitimate interest within the meaning of Art. 6 Para. 1
lit
TTDSG, insofar as the
consent includes the storage of cookies or access to information on the user’s end device
(e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Further information on how to handle user data can be found in
YouTube’s privacy policy at: https://policies.google.com/privacy?hl=de .
The company is certified according to the “EU-US Data Privacy
Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure
compliance with European data protection standards when data is processed in the USA .
Every DPF certified company undertakes to
comply with these data protection standards. Further information on this can be obtained from the provider at the following link :
https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
This site uses so -called Google Fonts, which are provided by Google, for the uniform display of fonts . The Google Fonts are installed locally. There is no connection
to Google servers.
Further information about Google Fonts can be found
at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de .
We use the OpenStreetMap (OSM) map service.
We integrate the
OpenStreetMap map material on the server of the OpenStreetMap Foundation, St John’s Innovation
Centre, Cowley Road, Cambridge, CB4 0WS, Great Britain. Great Britain is considered a
safe third country in terms of data protection law. This means that Great Britain has a level of data protection
equivalent to the level of data protection in the European Union. When using the OpenStreetMap
maps, a connection is established to the OpenStreetMap Foundation servers. Among other things
, Your IP address and other information about your behavior on this website
will be forwarded to the OSMF. For this purpose, OpenStreetMap may store cookies in your browser or
use comparable recognition technologies.
The use of OpenStreetMap is in the interest of an attractive presentation of our online
offers and of making it easy to find the locations we indicate on the website. This
represents a legitimate interest within the meaning of Art. 6 Para. 1
lit
TTDSG, insofar as the consent includes the storage of cookies or access to information on
the user’s end device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be
revoked at any time.
We have integrated Google Drive on this website. The provider is Google
Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Drive
allows us to include an upload area on our website where you
can upload content. When you upload content, it is stored on Google Drive’s servers. When you
enter our website, a connection is also established to Google Drive so that Google Drive
can determine that you have visited our website.
The use of Google Drive is
based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in a
reliable upload area on his website. If appropriate consent has been requested,
processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; consent can be
revoked at any time.
The company is certified according to the “EU-US Data Privacy
Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure
compliance with European data protection standards when data is processed in the USA .
Every DPF certified company undertakes to
comply with these data protection standards. Further information on this can be obtained from the provider at the following link :
https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
We have concluded an order processing contract (AVV) for the use
of the above-mentioned service. This is a
contract required by data protection law, which ensures that we only
process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Source: https://www.e-recht24.de