Data protection information
Thank you for your interest in the RAPUNZEL One World Organic Foundation and in our website. By providing the following information, we would like to give you an overview of our processing of your personal data and your data privacy rights when you visit our foundation website here.
Generally speaking, you can use our website without entering personal data. If you want to use special services via our website or other possibilities, though, the processing of personal data could become necessary. If the processing of personal data is required, and there is no legal basis for such processing, we generally obtain your consent.
In our role as the controller, we always endeavour to ensure the most complete protection of data privacy possible for the personal data processed via this website. We do this by implementing up-to-date technical and organisational measures, just as we attach great importance to security and data privacy friendliness in our other processing activities. Regardless, Internet-based data transmissions can still have security gaps, so that absolute protection against unauthorised access by third parties cannot be guaranteed. For this reason, do not hesitate to contact us by telephone or post, for example, and to transmit personal data to us in this way, too.
RAPUNZEL Eine Welt Bio-Stiftung (One World Organic Foundation)
Rapunzelstr. 1
87764 Legau
Germany
Phone: +49 (0) 8330 - 529 1320
Web: https://www.rapunzelbiostiftung.de/
E-mail: info@rapunzelstiftung.de
Further information can be found in our imprint. If you have any questions about data privacy at the RAPUNZEL One World Organic Foundation, please feel free to contact us by using our contact details.
When visiting our website, your personal data is not transferred to third parties for any purposes other than those listed below. We only pass on your personal data to third parties if:
1 you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR,
2 the disclosure is authorised to protect our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
3 in the event that there is a legal obligation to disclose the data in accordance with Art. 6 para. 1 lit. c GDPR, and
4 this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 lit. b GDPR.
In order to protect your data and to allow us to transfer data to third countries (outside the EU/EEA) if necessary, we have concluded commissioned processing agreements based on the European Commission's standard contractual clauses. If the standard contractual clauses are insufficient to establish an adequate level of security, your consent may serve as the legal basis for the transfer to third countries in accordance with Art. 49 Par. 1 (a) GDPR. This sometimes does not apply to data transfers to third countries for which the European Commission has issued an adequacy decision pursuant to Art. 45 GDPR.
This site uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data or contact requests that you, as the operator, send to us. You can recognise an encrypted connection by the fact that there is a “https://” instead of a “http://” in the address line of the browser and by the lock symbol in your browser line. We use this technology to protect your submitted data.
When you use our website for information purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (in so-called “server log files”). Our website collects a series of general data and information each time you access a page or an automated system. This general data and information is stored in the server log files. The following can be recorded
When using this general data and information, we do not draw any conclusions about your person. Rather, this information is required to
The legal basis for the data processing is provided for by Art. 6 Par. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above.
To track campaigns using QR codes, we use techniques from Matomo – a service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. Matomo is a software tool for web analysis, i.e. for collecting, collating and evaluating data about the behaviour of visitors to websites. We only analyse how often which QR codes were scanned by visitors and which interactions with our pages took place as a result. We use the information to understand the behaviour on our website, to evaluate the use of our subpages and to make possible improvements to our campaigns.
IP addresses are anonymised to ensure the data protection of our users. We do not collect any personal data from QR code users and do not track individual users. Our analyses are used exclusively for feedback analysis and to optimise our offers and assess the success of our campaigns. We are not interested in the identities of our visitors or other data.
We have therefore set Matomo so that it does not use cookies. We also do not use “device fingerprinting”. No profiling or retargeting takes place.
Matomo is hosted on our own servers, which ensures that the data remains within the EU and that no data is passed on to third parties.
For QR code tracking, Matomo processes the anonymised IP addresses of visitors. The legal basis for our processing is Art. 6 I lit. f) GDPR. We have a legitimate interest in the security and technically appropriate design of the functionality of our pages and in the non-personalised analysis of our campaigns. Further information and the applicable data protection provisions of Matomo can be found here: https://matomo.org/privacy-policy.
We host our website with DATAGROUP Ulm GmbH. When you visit our website, your personal data (e.g., IP addresses in log files) are processed on DATAGROUP's servers. The legal basis of the processing is Art. 6 Par. 1 lit. f GDPR. We have a legitimate interest in the most reliable presentation and provision as well as safeguarding of our website. We have concluded a contract for commissioned processing (AVV) with DATAGROUP, pursuant to Art. 28 GDPR. Data protection information of the service provider: https://www.datagroup.de/datenschutz/
Here, we inform you about the RAPUNZEL One World Organic Foundation, which is committed to strengthening organic agriculture, socio-cultural engagement and health promotion at home, in Europe, and worldwide. You will find information about the foundation itself, our projects and news, and on how you can support our projects with a donation.
The information you provide in the form fields will be stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 Par. 1 lit. f GDPR. If your contact aims at the conclusion of or complaint about a contract, e.g., a donation, the additional legal basis for the processing is Art. 6 Par. 1 lit. b GDPR.
We have secured our forms with a simple verification code that does not involve any data processing or disclosure to third parties. Your data will be deleted once your enquiry has been processed. This is the case if the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary. Alternatively, you can contact us directly and informally and ask us to delete your data.
OpenStreetMap/Leaflet (local hosting with consent)
We use the OpenStreetMap (OSM) mapping service to show you where we are working on our projects to strengthen organic farming, socio-cultural engagement and health promotion through our Foundation at home, in Europe and around the world. The provider is the Open-Street-Map Foundation (OSMF), 132 Maney Hill Road, Sutton Cold-field, West Midlands, B72 1JU, United Kingdom. When accessing our website the first time, OpenStreetMap is disabled. We integrate OpenStreetMap on our own (tile) server. The map material is stored locally. The retrieval of further required map material on OpenStreetMap.de takes place on the server side; no personal data is transferred to third parties. The JavaScript library Leaflet is also hosted locally.
Display of YouTube films
To inform you about news, projects and initiatives concerning the RAPUNZEL One World Organic Foundation in a more comprehensive and appealing way, we have made video recordings of various engagements available on the YouTube portal. To view our videos, we offer you the option of going directly to YouTube via an embedded preview image displayed on the website for the respective video, using the link provided, where you can watch the film. To do this, you leave the website of the RAPUNZEL One World Organic Foundation. We transfer no personal data to YouTube. It is only there that YouTube requests user information from visitors and processes it on its own responsibility.
Further information on YouTube's data processing can be found here: https://www.youtube.com/yt/about/de/.
If you support our projects with a donation and transfer it to the donation account via our bank details, personal data will be exchanged with the parties involved, as with every transfer, i.e. also from your and our banking institution.
If you have made a donation to us stating your name and address in the purpose of the transfer, we collect this information that you yourself have provided for these purposes: Issuing and sending a donation receipt by post to the address you voluntarily provided yourself and sending a letter of thanks, administration of donations and donation receipts, bookkeeping. If you make a donation by name and wish to receive a donation receipt, data processing is required in accordance with Art. 6 Par. 1 p. 1 lit. b GDPR for the purpose of issuing the donation receipt. Possible data processing for the purpose of a letter of thanks is carried out according to Art. 6 Par. 1 p. 1 lit. f GDPR due to our legitimate interests in thanking donors known by name for their donation and in promoting and maintaining interest in our foundation. The donation data will be deleted no later than 4 years after the donation has been made, subject to a longer retention period due to legal provisions (e.g., for tax and/or accounting purposes).
We do not use cookies or similar technologies on our website. We also do not use any tools or other technologies that store information in the end user's terminal equipment. Accordingly, you will not find a cookie banner or CMP on our website to manage consent.
Furthermore, when exercising your right to data portability under Article 20 Par. 1 GDPR, you have the right to obtain that the personal data be transferred directly from one controller to another controller where this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.
In individual cases, we process personal data in order to carry out direct advertising. You may object to the processing of personal data for the purpose of such advertising at any time. This also applies to profiling, insofar as it is connected with such direct advertising. If you object to us processing your data for direct marketing purposes, we will no longer process the personal data for these purposes.
In addition, you have the right, on grounds relating to your particular situation, to object to the processing of personal data concerning you which is carried out by us for scientific or historical research purposes, or for statistical purposes pursuant to Article 89 Par. 1 of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
You are free to exercise your right to object by means of automated procedures using technical specifications in connection with the use of information society services, notwithstanding Directive 2002/58/EC.
We do not use profiling within the meaning of Art. 22 GDPR when using our websites.
To track campaigns using QR codes, we use techniques from Matomo – a service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. Matomo is a software tool for web analysis, i.e. for collecting, collating and evaluating data about the behaviour of visitors to websites. We only analyse how often which QR codes were scanned by visitors and which interactions with our pages took place as a result. We use the information to understand the behaviour on our website, to evaluate the use of our subpages and to make possible improvements to our campaigns.
IP addresses are anonymised to ensure the data protection of our users. We do not collect any personal data from QR code users and do not track individual users. Our analyses are used exclusively for feedback analysis and to optimise our offers and assess the success of our campaigns. We are not interested in the identities of our visitors or other data. We have therefore set Matomo so that it does not use cookies. We also do not use “device fingerprinting”. No profiling or retargeting takes place.
Matomo is hosted on our own servers, which ensures that the data remains within the EU and that no data is passed on to third parties. For QR code tracking, Matomo processes the anonymised IP addresses of visitors.
The legal basis for our processing is Art. 6 I lit. f) GDPR. We have a legitimate interest in the security and technically appropriate design of the functionality of our pages and in the non-personalised analysis of our campaigns. Further information and the applicable data protection provisions of Matomo can be found here: https://matomo.org/privacy-policy.
We have integrated the Matomo component of the provider InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, for web analysis on this website. Web analysis is the collection, collation and evaluation of data about the behaviour of visitors to websites. Among other things, a web analysis tool collects data on which subpages of the website were accessed or how often and for how long a subpage was viewed. Web analysis is mainly used to optimise a website and to analyse the costs and benefits of Internet advertising.
The software is operated on our server and the data protection-sensitive log files are stored exclusively on this server. The purpose of the Matomo component is to analyse the flow of visitors to our website. We use the information to understand the behaviour on our website, to evaluate the use of our subpages and to make possible improvements.
We are not interested in the identities of our visitors or other personal data. We have therefore set Matomo so that it does not use cookies. We also do not use “device fingerprinting”. Each time you access one of the individual pages of this website, your internet browser on your device is automatically prompted by the Matomo component to transmit data to our server for the purpose of online analysis. Through your browser, personal information such as the access time, the location from which the access was made, including the IP address of the Internet access you are using, is transmitted to our server. This personal data is stored by us in anonymised form. We do not pass this personal data on to third parties. No data is transferred to third countries.
Matomo processes the following data:
Sie können der Verarbeitung jederzeit widersprechen. Dadurch wird ein Matomo-Cookie gesetzt, das sich an Ihre Einstellung erinnert (allow_matomo=off).
Jetzt widersprechen.
Ihr Besuch dieser Webseite wird aktuell von der Matomo Webanalyse erfasst.
Further information and the applicable data protection provisions of Matomo may be retrieved at https://matomo.org/privacy-policy.
We process and store your personal data only for the period of time required to achieve the purpose of storage or if this has been provided for by the legal provisions to which our company is subject. If the storage purpose ceases to apply or if a prescribed storage period expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.
The criterion for the duration of storage of personal data is the respective statutory retention period. After expiry of the period, the corresponding data is routinely deleted if it is no longer required for the fulfilment or initiation of the contract.
If you have any further questions, comments or other requests regarding your personal data that are not answered here, simply contact us using our contact details.
Generally speaking, you can use our website without entering personal data. If you want to use special services via our website or other possibilities, though, the processing of personal data could become necessary. If the processing of personal data is required, and there is no legal basis for such processing, we generally obtain your consent.
In our role as the controller, we always endeavour to ensure the most complete protection of data privacy possible for the personal data processed via this website. We do this by implementing up-to-date technical and organisational measures, just as we attach great importance to security and data privacy friendliness in our other processing activities. Regardless, Internet-based data transmissions can still have security gaps, so that absolute protection against unauthorised access by third parties cannot be guaranteed. For this reason, do not hesitate to contact us by telephone or post, for example, and to transmit personal data to us in this way, too.
Responsible
RAPUNZEL Eine Welt Bio-Stiftung (One World Organic Foundation)
Rapunzelstr. 1
87764 Legau
Germany
Phone: +49 (0) 8330 - 529 1320
Web: https://www.rapunzelbiostiftung.de/
E-mail: info@rapunzelstiftung.de
Further information can be found in our imprint. If you have any questions about data privacy at the RAPUNZEL One World Organic Foundation, please feel free to contact us by using our contact details.
Transmission of data to third parties
When visiting our website, your personal data is not transferred to third parties for any purposes other than those listed below. We only pass on your personal data to third parties if:
1 you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR,
2 the disclosure is authorised to protect our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
3 in the event that there is a legal obligation to disclose the data in accordance with Art. 6 para. 1 lit. c GDPR, and
4 this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 lit. b GDPR.
In order to protect your data and to allow us to transfer data to third countries (outside the EU/EEA) if necessary, we have concluded commissioned processing agreements based on the European Commission's standard contractual clauses. If the standard contractual clauses are insufficient to establish an adequate level of security, your consent may serve as the legal basis for the transfer to third countries in accordance with Art. 49 Par. 1 (a) GDPR. This sometimes does not apply to data transfers to third countries for which the European Commission has issued an adequacy decision pursuant to Art. 45 GDPR.
SSL/TLS encryption
This site uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data or contact requests that you, as the operator, send to us. You can recognise an encrypted connection by the fact that there is a “https://” instead of a “http://” in the address line of the browser and by the lock symbol in your browser line. We use this technology to protect your submitted data.
Data collection when visiting the website
When you use our website for information purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (in so-called “server log files”). Our website collects a series of general data and information each time you access a page or an automated system. This general data and information is stored in the server log files. The following can be recorded
- Browser types and versions used,
- The operating system used by the accessing system
- The website from which an accessing system accesses our website (so-called referrer)
- The sub-websites that are accessed via an accessing system on our website
- The date and time of access to the website
- An abbreviated internet protocol address (anonymised IP address) and
- The internet service provider of the accessing system.
When using this general data and information, we do not draw any conclusions about your person. Rather, this information is required to
- deliver the content of our website correctly
- optimise the content of our website and the advertising for it,
- ensure the long-term functionality of our IT systems and the technology of our website, and
- to provide law-enforcement authorities with the information necessary for prosecution in the event of a cyber attack.
The legal basis for the data processing is provided for by Art. 6 Par. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above.
Matomo QR code tracking
To track campaigns using QR codes, we use techniques from Matomo – a service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. Matomo is a software tool for web analysis, i.e. for collecting, collating and evaluating data about the behaviour of visitors to websites. We only analyse how often which QR codes were scanned by visitors and which interactions with our pages took place as a result. We use the information to understand the behaviour on our website, to evaluate the use of our subpages and to make possible improvements to our campaigns.
IP addresses are anonymised to ensure the data protection of our users. We do not collect any personal data from QR code users and do not track individual users. Our analyses are used exclusively for feedback analysis and to optimise our offers and assess the success of our campaigns. We are not interested in the identities of our visitors or other data.
We have therefore set Matomo so that it does not use cookies. We also do not use “device fingerprinting”. No profiling or retargeting takes place.
Matomo is hosted on our own servers, which ensures that the data remains within the EU and that no data is passed on to third parties.
For QR code tracking, Matomo processes the anonymised IP addresses of visitors. The legal basis for our processing is Art. 6 I lit. f) GDPR. We have a legitimate interest in the security and technically appropriate design of the functionality of our pages and in the non-personalised analysis of our campaigns. Further information and the applicable data protection provisions of Matomo can be found here: https://matomo.org/privacy-policy.
Hosting by DATAGROUP
We host our website with DATAGROUP Ulm GmbH. When you visit our website, your personal data (e.g., IP addresses in log files) are processed on DATAGROUP's servers. The legal basis of the processing is Art. 6 Par. 1 lit. f GDPR. We have a legitimate interest in the most reliable presentation and provision as well as safeguarding of our website. We have concluded a contract for commissioned processing (AVV) with DATAGROUP, pursuant to Art. 28 GDPR. Data protection information of the service provider: https://www.datagroup.de/datenschutz/
Content and contact options
Here, we inform you about the RAPUNZEL One World Organic Foundation, which is committed to strengthening organic agriculture, socio-cultural engagement and health promotion at home, in Europe, and worldwide. You will find information about the foundation itself, our projects and news, and on how you can support our projects with a donation.
Contact us via the contact form
If you have questions or suggestions of any kind, we offer you the possibility to contact us via our contact form. First of all, we require a valid e-mail address, first name, surname and title so that we know who the enquiry is from, and so that we can answer it and contact you. We also ask for a telephone number so that we can contact you about this. Needless to say, this information is voluntary, yet simplifies us responding to your enquiries and helping us to organise things. If you make a callback request, it is necessary to provide a telephone number so that our contact persons can also contact you.The information you provide in the form fields will be stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 Par. 1 lit. f GDPR. If your contact aims at the conclusion of or complaint about a contract, e.g., a donation, the additional legal basis for the processing is Art. 6 Par. 1 lit. b GDPR.
We have secured our forms with a simple verification code that does not involve any data processing or disclosure to third parties. Your data will be deleted once your enquiry has been processed. This is the case if the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary. Alternatively, you can contact us directly and informally and ask us to delete your data.
Contact us by email
If you contact us via one of the e-mail addresses provided by us, the personal data you provide will be processed exclusively for the purpose of processing your respective enquiry, for correspondence with you and for the possible initiation and substantiation of a contract, information, etc. with you pursuant to Art. 6 Par. 1 sentence 1 lit. b GDPR. The personal data collected will be automatically deleted once your enquiry has been dealt with; this is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.OpenStreetMap/Leaflet (local hosting with consent)
We use the OpenStreetMap (OSM) mapping service to show you where we are working on our projects to strengthen organic farming, socio-cultural engagement and health promotion through our Foundation at home, in Europe and around the world. The provider is the Open-Street-Map Foundation (OSMF), 132 Maney Hill Road, Sutton Cold-field, West Midlands, B72 1JU, United Kingdom. When accessing our website the first time, OpenStreetMap is disabled. We integrate OpenStreetMap on our own (tile) server. The map material is stored locally. The retrieval of further required map material on OpenStreetMap.de takes place on the server side; no personal data is transferred to third parties. The JavaScript library Leaflet is also hosted locally.
Display of YouTube films
To inform you about news, projects and initiatives concerning the RAPUNZEL One World Organic Foundation in a more comprehensive and appealing way, we have made video recordings of various engagements available on the YouTube portal. To view our videos, we offer you the option of going directly to YouTube via an embedded preview image displayed on the website for the respective video, using the link provided, where you can watch the film. To do this, you leave the website of the RAPUNZEL One World Organic Foundation. We transfer no personal data to YouTube. It is only there that YouTube requests user information from visitors and processes it on its own responsibility.
Further information on YouTube's data processing can be found here: https://www.youtube.com/yt/about/de/.
Donations
If you support our projects with a donation and transfer it to the donation account via our bank details, personal data will be exchanged with the parties involved, as with every transfer, i.e. also from your and our banking institution.
If you have made a donation to us stating your name and address in the purpose of the transfer, we collect this information that you yourself have provided for these purposes: Issuing and sending a donation receipt by post to the address you voluntarily provided yourself and sending a letter of thanks, administration of donations and donation receipts, bookkeeping. If you make a donation by name and wish to receive a donation receipt, data processing is required in accordance with Art. 6 Par. 1 p. 1 lit. b GDPR for the purpose of issuing the donation receipt. Possible data processing for the purpose of a letter of thanks is carried out according to Art. 6 Par. 1 p. 1 lit. f GDPR due to our legitimate interests in thanking donors known by name for their donation and in promoting and maintaining interest in our foundation. The donation data will be deleted no later than 4 years after the donation has been made, subject to a longer retention period due to legal provisions (e.g., for tax and/or accounting purposes).
Cookies
We do not use cookies or similar technologies on our website. We also do not use any tools or other technologies that store information in the end user's terminal equipment. Accordingly, you will not find a cookie banner or CMP on our website to manage consent.
Your rights as a data subject
Right to confirmation
You have the right to request confirmation from us as to whether personal data relating to you is being processed.Right to information in accordance with Art. 15 GDPR
You have the right to obtain from us at any time, free of charge, information about the personal data stored about you as well as a copy of this data in accordance with the statutory provisions.Right to rectification in accordance with Art. 16 GDPR
You have the right to request that inaccurate personal data concerning you be corrected. You also have the right to request that incomplete personal data be completed, taking into account the purposes of the processing.Right to erasure in accordance with Art. 17 GDPR
You have the right to demand us to delete the personal data concerning you without delay, provided that one of the reasons provided for by law applies and insofar as the processing or storage is not necessary.Right to restriction of processing in accordance with Art. 18 GDPR
You have the right to demand that we restrict processing if one of the legal requirements is met.Right to data portability in accordance with Art. 20 GDPR
You have the right to receive the personal data concerning you, which has been provided to us by you, in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us to whom the personal data has been provided, subject to the proviso that the processing is based on consent pursuant to Art. 6 Par. 1 (a) GDPR or Art. 9 Par. 2 (a) GDPR or on a contract pursuant to Art. 6 Par. 1 (b) GDPR and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.Furthermore, when exercising your right to data portability under Article 20 Par. 1 GDPR, you have the right to obtain that the personal data be transferred directly from one controller to another controller where this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.
Right to object pursuant to Art. 21 GDPR
On grounds relating to your particular situation, you have the right to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6 Par. 1 (e) (data processing in the public interest) or (f) (data processing on the basis of a balance of interests) GDPR. This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves the purpose of asserting, exercising or defending legal claims.In individual cases, we process personal data in order to carry out direct advertising. You may object to the processing of personal data for the purpose of such advertising at any time. This also applies to profiling, insofar as it is connected with such direct advertising. If you object to us processing your data for direct marketing purposes, we will no longer process the personal data for these purposes.
In addition, you have the right, on grounds relating to your particular situation, to object to the processing of personal data concerning you which is carried out by us for scientific or historical research purposes, or for statistical purposes pursuant to Article 89 Par. 1 of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
You are free to exercise your right to object by means of automated procedures using technical specifications in connection with the use of information society services, notwithstanding Directive 2002/58/EC.
Right to withdraw consent under data protection law
You have the right to withdraw consent to the processing of personal data at any time with effect for the future.Right to lodge a complaint with a supervisory authority
You have the right to complain about our processing of personal data to a supervisory authority responsible for data protection. You can find a compilation of the contact details of the data protection officers in the federal states and the supervisory authorities for the non-public sector as well as in other countries on the pages of the Federal Commissioner for Data Protection and Freedom of Information, BfDI under Addresses and Links.Automated decision-making AND profiling
We do not use profiling within the meaning of Art. 22 GDPR when using our websites.
Matomo QR code tracking
To track campaigns using QR codes, we use techniques from Matomo – a service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. Matomo is a software tool for web analysis, i.e. for collecting, collating and evaluating data about the behaviour of visitors to websites. We only analyse how often which QR codes were scanned by visitors and which interactions with our pages took place as a result. We use the information to understand the behaviour on our website, to evaluate the use of our subpages and to make possible improvements to our campaigns.
IP addresses are anonymised to ensure the data protection of our users. We do not collect any personal data from QR code users and do not track individual users. Our analyses are used exclusively for feedback analysis and to optimise our offers and assess the success of our campaigns. We are not interested in the identities of our visitors or other data. We have therefore set Matomo so that it does not use cookies. We also do not use “device fingerprinting”. No profiling or retargeting takes place.
Matomo is hosted on our own servers, which ensures that the data remains within the EU and that no data is passed on to third parties. For QR code tracking, Matomo processes the anonymised IP addresses of visitors.
The legal basis for our processing is Art. 6 I lit. f) GDPR. We have a legitimate interest in the security and technically appropriate design of the functionality of our pages and in the non-personalised analysis of our campaigns. Further information and the applicable data protection provisions of Matomo can be found here: https://matomo.org/privacy-policy.
Web analysis with Matomo
We have integrated the Matomo component of the provider InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, for web analysis on this website. Web analysis is the collection, collation and evaluation of data about the behaviour of visitors to websites. Among other things, a web analysis tool collects data on which subpages of the website were accessed or how often and for how long a subpage was viewed. Web analysis is mainly used to optimise a website and to analyse the costs and benefits of Internet advertising.
The software is operated on our server and the data protection-sensitive log files are stored exclusively on this server. The purpose of the Matomo component is to analyse the flow of visitors to our website. We use the information to understand the behaviour on our website, to evaluate the use of our subpages and to make possible improvements.
We are not interested in the identities of our visitors or other personal data. We have therefore set Matomo so that it does not use cookies. We also do not use “device fingerprinting”. Each time you access one of the individual pages of this website, your internet browser on your device is automatically prompted by the Matomo component to transmit data to our server for the purpose of online analysis. Through your browser, personal information such as the access time, the location from which the access was made, including the IP address of the Internet access you are using, is transmitted to our server. This personal data is stored by us in anonymised form. We do not pass this personal data on to third parties. No data is transferred to third countries.
Matomo processes the following data:
- Anonymised IP addresses by removing the last 2 bytes (i.e. 198.51.0.0 instead of 198.51.100.54)
- Pseudo-anonymised location (based on the anonymised IP address)
- Date and time
- Title of the page accessed
- URL of the page accessed
- URL of the previous page (if this is permitted)
- Screen resolution
- Local time
- Files that have been clicked and downloaded
- External links
- Duration of the page load
- Country, region, city (with low accuracy due to IP address)
- Main language of the browser
- User agent of the browser
Sie können der Verarbeitung jederzeit widersprechen. Dadurch wird ein Matomo-Cookie gesetzt, das sich an Ihre Einstellung erinnert (allow_matomo=off).
Jetzt widersprechen.
Ihr Besuch dieser Webseite wird aktuell von der Matomo Webanalyse erfasst.
Further information and the applicable data protection provisions of Matomo may be retrieved at https://matomo.org/privacy-policy.
Storage, erasure and blocking
We process and store your personal data only for the period of time required to achieve the purpose of storage or if this has been provided for by the legal provisions to which our company is subject. If the storage purpose ceases to apply or if a prescribed storage period expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.
Storage period
The criterion for the duration of storage of personal data is the respective statutory retention period. After expiry of the period, the corresponding data is routinely deleted if it is no longer required for the fulfilment or initiation of the contract.
Further data protection issues
If you have any further questions, comments or other requests regarding your personal data that are not answered here, simply contact us using our contact details.