1. Data privacy summary

General notes

The notes below contain a simple summary of what happens to your personal data when you visit this website. Personal data is all information that allows you to be identified in person. You can find detailed information about data privacy in the Data Privacy Statement below.

Data collection on this website

Who is responsible for data collection on this website? 

Data on this website is processed by the website owner, whose contact data can be found in the Legal Notice. 

How do we collect your data? 

One way in which we collect your data is when you disclose them to us – when you enter them in a contact form, for example.  

Other data are collected automatically by our IT systems when you visit our website. These are mainly technical data (internet browser and operating system of your device, or the time at which you accessed the page). These data are collected automatically as soon as you access this website. 

How do we use your data? 

Some of the data are collected to ensure the error-free display of the website. Other data can be used to analyse user behaviour. 

What are your rights regarding your data? 

You are entitled to request information on the origin, recipient and purpose of your stored personal data free of charge at any time. You are also entitled to demand the rectification or erasure of these  data. For more information about these questions or other data privacy issues, please feel free to contact us at the address given in the “Legal notice” section at any time. In addition, you are also entitled to lodge complaints with the competent supervisory authority. 

Under certain circumstances, you are also entitled to demand the restriction of processing of your personal data. For details, please see “Right to restriction of processing” in the data privacy policy. 

2. Hosting

External Hosting

This website is hosted by an external service provider (the “host”). Personal data collected on this website are stored on the host’s servers. The stored data can include IP addresses, contact requests, metadata and communication data, contract data, contact data, names, website access details and other data generated via a website. 

The host’s services are used for the purpose of fulfilling our contractual obligations towards our potential and existing customers (Art. 6 Section 1 Point b GDPR) and in the interests of providing secure, fast and efficient access to our online services by a professional service provider (Art. 6 Section 1 Point f GDPR). 

Our host will only process your data to the extent necessary to fulfil his service provision obligations, and will follow our instructions regarding these data. 

Conclusion of a data processing contract 

We have concluded a data processing contract with our host in order to guarantee that all data processing complies with data privacy regulations. 

3. General notice and mandatory information

Data privacy 

The owner of this website takes the privacy of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data privacy regulations and the terms of this data privacy policy. 

Various personal data are collected when you use this website. Personal data is all information that allows you to be identified in person. This data privacy policy explains which data we collect and the purposes for which they is used. It also explains how and why we collect them. 

Please be advised that data transmission on the internet (e.g., communication by e-mail)  may involve gaps in security. Complete protection against unlawful access by third parties cannot be guaranteed. 

Information about the data controller 

The data controller for data processing on this website is:

Hering-Stiftung Natur and Mensch
Killets Mühle 1
57299 Burbach

Represented by:
Dipl.-Ing. Annette Hering
Lothar Reichert
Tobias Hering

Telephone: +49 (0) 2736 4489310
E-mail: stiftung@hering-stiftung.de

‘Controller’ means the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, e-mail addresses or similar information).

Withdrawal of your consent to data processing

Many individual data processing operations are only possible with your explicit consent. After giving your consent, you can withdraw it any time by sending us informal notification by e-mail. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to object to data processing in special cases and to direct marketing (Art. 21 GDPR)

IF DATA IS PROCESSED ON THE BASIS OF ART. 6 SECTION 1 POINT E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO PROCESSING OF PERSONAL DATA CONCERNING YOU; THIS INCLUDES PROFILING BASED ON THESE PROVISIONS. PLEASE REFER TO THIS DATA PRIVACY POLICY FOR THE LEGAL BASIS ON WHICH DATA ARE PROCESSED IN RESPECTIVE CASES. IF YOU LODGE AN OBJECTION, WE WILL NO LONGER PROCESS THE RELEVANT PERSONAL DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 SECTION 1 GDPR).

WHERE PERSONAL DATA ARE PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS INCLUDES PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU LODGE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21 SECTION 2 GDPR).

Right to lodge a complaint with a supervisory authority

In the event of an infringement of the GDPR, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement. This shall be without prejudice to any other administrative or judicial remedy.  

Right to data portability  

If we process your personal data – provided on the basis of your prior consent or under the terms of a contract – by automated means, you have the right to receive these data or to have them transmitted  to a third-party controller in a structured, commonly used and machine-readable format and have the right those data to another controller. If you request direct transmission of the data to another controller, it will only be transmitted to the extent which is technically feasible. 

SSL and TLS encryption 

We use SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send us as a website owner. You can see that a connection is encrypted when the address line of your browser changes from http:// to https:// and the padlock symbol appears in your browser line. 

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. 

Information, erasure and rectification 

At all times, you are legally entitled to request information on the origin, recipient and purpose of your stored personal data free of charge, as well as a right to demand the rectification or erasure of these data. For more information about these questions or other data privacy issues, please feel free to contact us at the address given under “Legal notice” at any time. 

Right to restriction of processing 

You are entitled to demand the restriction of processing of your personal data. To exercise this right, you may contact us at the address given under “Legal notice” at any time. The right to restriction applies in the following cases: 

• If you have contested the accuracy of the personal data, we normally need time to verify whether the data is accurate or not. You are entitled to demand the restriction of processing of your personal data for a period which enables us to verify the accuracy of the data. 
• If the processing of your data is/was unlawful and you oppose the erasure of the personal data and. 

• If we no longer need your personal data for the purposes of processing but you require them for the establishment, exercise or defence of legal claims, you are entitled to request the restriction of their use instead of their erasure. 
• If you have objected to processing pursuant to Article 21(1) GDPR, a verification of whether the legitimate grounds of the data controller override those of the data subject. You are entitled to request the restriction of processing of your personal data until it has been established whose are the overriding interests.  

Where processing has been restricted, such personal data may – with the exception of storage – only  be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State. 

4. Data collection on this website 

Server log files 

The website provider automatically collects and stores data in files called server log files which your browser transmits to us automatically. The information includes: 

• Browser type and version 
• User operating system 
• Referrer URL 
• Host name of the accessing computer 
• Timestamp of server request 
• IP address  

This data will not be combined with data from other sources. 

These data are collected on the basis of Art. 6 Section 1 Point f GDPR. Since the website owner has a legitimate interest in the technically flawless presentation and optimisation of his website, these server log files must be collected. 

Contact form 

If you send us an enquiry via the contact form, we store your personal data from the form – including  your contact data – for the purpose of processing the enquiry and responding to any subsequent enquiries. We will not disclose these data to third parties without your consent. 

These data are processed on the basis of Art. 6 Section 1 Point b GDPR, in so far as your enquiry is related to the fulfilment of a contract or required for the performance of precontractual measures. In all other cases, processing is on the basis of our legitimate interest in the effective processing of enquiries submitted to us (Art. 6 Section 1 Point f GDPR) or your consent (Art. 6 Section 1 Point a GDPR), in so far as it has been requested. 

The data you have entered in the contact form remain in our possession until you request their erasure, withdraw your consent to their storage or the reason for data storage is no longer valid (e.g., completion of the processing of your enquiry). Mandatory legal provisions – in particular statutory storage periods – are not affected. 

E-mail, telephone or telefax enquiries 

When you contact us by e-mail, telephone or telefax, your enquiry and all related personal data (name, enquiry), we will store and process them for the purpose of processing your enquiry. We will not disclose these data to third parties without your consent. 

These data are processed on the basis of Art. 6 Section 1 Point b GDPR, in so far as your enquiry is related to the fulfilment of a contract or required for the performance of precontractual measures. In all other cases, processing is on the basis of your consent (Art. 6 Section 1 Point a GDPR) and/or on the basis of our legitimate interest (Art. 6 Section 1 Point f GDPR), as we have a legitimate interest in the effective processing of enquiries submitted to us. 

The data you have sent to us in the context of contact requests remain in our possession until you request their erasure, withdraw your consent to their storage or the reason for data storage is no longer valid (e.g., completion of the processing of your enquiry). Mandatory legal provisions – in particular statutory storage periods – are not affected. 

Source: e-recht24.de