{"id":1326,"date":"2022-11-22T17:08:32","date_gmt":"2022-11-22T15:08:32","guid":{"rendered":"https:\/\/elly-beratung.de\/?page_id=1326"},"modified":"2026-02-17T18:09:49","modified_gmt":"2026-02-17T16:09:49","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/elly-beratung.de\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Preamble<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The counselling centre <em>elly \u2013 Hatespeech Beratung in Th\u00fcringen<\/em> is operated by <em>re:solut \u2013 Rundum engagiert: solidarische Unterst\u00fctzung in Th\u00fcringen e.V.<\/em> The association is an organisation of the Evangelical Church in Central Germany (hereinafter \u201cEKM\u201d). We take the protection of your personal data and the legal obligations designed to ensure this protection very seriously. The legal requirements demand comprehensive transparency regarding the processing of personal data. Only if the processing is comprehensible to you as the data subject are you sufficiently informed about the purpose, scope and use of your data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">With this privacy policy, we would like to inform you about which types of your personal data (hereinafter also referred to as \u201cdata\u201d) we process, for which purposes and to what extent. This privacy policy applies to all processing of personal data carried out by us, both in the context of providing our services and in particular on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter collectively referred to as the \u201conline offering\u201d).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Status: 3 February 2025<\/p>\n\n\n\n<h2 class=\"gb-headline gb-headline-311cf385 gb-headline-text\">Controller<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>re:solut \u2013 Rundum engagiert: solidarische Unterst\u00fctzung in Th\u00fcringen e.V.<br><\/strong>Juri-Gagarin-Ring 96\/98<br>99084 Erfurt<br>Authorised representative: Franz Zobel<br>Email: &#x69;&#x6e;&#102;o&#x40;&#x65;&#122;&#114;a&#x2e;&#x64;&#101;<br>Legal notice: <a href=\"https:\/\/ezra.de\/impressum\/\">https:\/\/ezra.de\/impressum\/<\/a><\/p>\n\n\n\n<h2 class=\"gb-headline gb-headline-f8eda67e gb-headline-text\">Contact Data Protection Officer<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">re:solut \u2013 Rundum engagiert: solidarische Unterst\u00fctzung in Th\u00fcringen e.V.<br>David Rolfs<br>&#100;&#x61;&#116;&#x65;&#110;&#x73;&#99;&#x68;&#117;&#x74;&#122;&#x40;&#114;&#x65;&#45;&#x73;&#111;&#x6c;&#117;&#x74;&#46;&#x64;&#101;<br>Juri-Gagarin-Ring 96\/98<br>99084 Erfurt<\/p>\n\n\n\n<h2 class=\"gb-headline gb-headline-4dda5fa5 gb-headline-text\">Overview of Processing<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The following overview summarises the types of data processed, the purposes of processing and the data subjects involved.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Types of data processed<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Inventory data<\/li>\n\n\n\n<li>Employee data<\/li>\n\n\n\n<li>Payment data<\/li>\n\n\n\n<li>Contact data<\/li>\n\n\n\n<li>Content data<\/li>\n\n\n\n<li>Contract data<\/li>\n\n\n\n<li>Usage data<\/li>\n\n\n\n<li>Meta, communication and procedural data<\/li>\n\n\n\n<li>Social data<\/li>\n\n\n\n<li>Applicant data<\/li>\n\n\n\n<li>Image and video recordings<\/li>\n\n\n\n<li>Audio recordings<\/li>\n\n\n\n<li>Log data<\/li>\n\n\n\n<li>Performance and behavioural data<\/li>\n\n\n\n<li>Member data<\/li>\n\n\n\n<li>Working-time data<\/li>\n\n\n\n<li>Creditworthiness data<\/li>\n\n\n\n<li>Salary data<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Special categories of data<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Health data<\/li>\n\n\n\n<li>Religious or ideological beliefs<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Categories of data subjects<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Service recipients (e.g. counselling clients) and clients<\/li>\n\n\n\n<li>Prospective customers<\/li>\n\n\n\n<li>Communication partners<\/li>\n\n\n\n<li>Users<\/li>\n\n\n\n<li>Business and contractual partners<\/li>\n\n\n\n<li>Persons depicted<\/li>\n\n\n\n<li>Donors<\/li>\n\n\n\n<li>Third parties<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Purposes of processing<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Provision of contractual services and performance of contractual obligations<\/li>\n\n\n\n<li>Communication<\/li>\n\n\n\n<li>Security measures<\/li>\n\n\n\n<li>Direct marketing<\/li>\n\n\n\n<li>Reach measurement<\/li>\n\n\n\n<li>Office and organisational procedures<\/li>\n\n\n\n<li>Conversion measurement<\/li>\n\n\n\n<li>Administrative and organisational procedures<\/li>\n\n\n\n<li>Application procedures<\/li>\n\n\n\n<li>Feedback<\/li>\n\n\n\n<li>Marketing<\/li>\n\n\n\n<li>User profile creation<\/li>\n\n\n\n<li>Provision and usability of our online offering<\/li>\n\n\n\n<li>IT infrastructure<\/li>\n\n\n\n<li>Donation collection \/ fundraising<\/li>\n\n\n\n<li>Public relations and informational purposes<\/li>\n\n\n\n<li>Financial and payment management<\/li>\n\n\n\n<li>Sales promotion<\/li>\n\n\n\n<li>Business processes and administrative procedures<\/li>\n<\/ul>\n\n\n\n<h2 class=\"gb-headline gb-headline-a58fd32f gb-headline-text\">Legal Bases<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Relevant legal bases under the GDPR:<\/strong><strong><br><\/strong>Below is an overview of the GDPR legal bases we rely on when processing personal data. Please note that national data protection laws of your or our state of residence may also apply. If specific legal bases are applicable in individual cases, we will inform you accordingly.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Consent (Art. 6(1)(a) GDPR)<\/strong> \u2013 You have given consent for one or more specific purposes.<\/li>\n\n\n\n<li><strong>Contract fulfilment and pre-contractual measures (Art. 6(1)(b) GDPR)<\/strong> \u2013 Processing is necessary for the performance of a contract or for pre-contractual steps.<\/li>\n\n\n\n<li><strong>Legal obligation (Art. 6(1)(c) GDPR)<\/strong> \u2013 Processing is necessary for compliance with a legal obligation.<\/li>\n\n\n\n<li><strong>Legitimate interests (Art. 6(1)(f) GDPR)<\/strong> \u2013 Processing is necessary for legitimate interests pursued by us or a third party, unless overridden by your interests or fundamental rights.<\/li>\n\n\n\n<li><strong>Application procedure (Art. 6(1)(b) GDPR and Art. 9 GDPR)<\/strong> \u2013 Special provisions for processing sensitive data during application processes.<\/li>\n\n\n\n<li><strong>Processing special categories of personal data in health, professional or social security contexts (Art. 9(2)(h) GDPR)<\/strong><\/li>\n\n\n\n<li><strong>Membership contract (Art. 6(1)(b) GDPR)<\/strong><\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">National privacy laws (Germany)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">In addition to the GDPR, the German Federal Data Protection Act (BDSG) applies, along with state data protection laws.<\/p>\n\n\n\n<h2 class=\"gb-headline gb-headline-3ab35890 gb-headline-text\">Security Measures<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We take appropriate technical and organisational security measures in accordance with legal requirements, taking into account the state of the art, implementation costs and the nature, scope and purpose of processing.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>TLS\/SSL encryption (HTTPS)<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">To protect user data transmitted via our online services, we use TLS\/SSL encryption technology. HTTPS indicates secure encrypted transmission.<\/p>\n\n\n\n<h2 class=\"gb-headline gb-headline-f399e268 gb-headline-text\">Transfer of Personal Data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We may transfer personal data to other entities, companies, or persons. This includes IT service providers or providers of integrated services and content.<\/p>\n\n\n\n<h3 class=\"gb-headline gb-headline-9e8dda70 gb-headline-text\">Data transfer within our organisational group<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Data may be shared with other organisational units or companies within our group based on legitimate interests or contractual necessity.<\/p>\n\n\n\n<h2 class=\"gb-headline gb-headline-c0003152 gb-headline-text\">International Data Transfers<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Transfers to third countries (outside EU\/EEA) only occur if:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>an adequacy decision exists (Art. 45 GDPR),<\/li>\n\n\n\n<li>Standard Contractual Clauses apply (Art. 46 GDPR),<\/li>\n\n\n\n<li>explicit consent is given,<\/li>\n\n\n\n<li>or a legal\/contractual obligation applies.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">References to the EU Commission\u2019s information portal are provided.<br>We also indicate which providers are certified under the <strong>EU\u2013US Data Privacy Framework (DPF)<\/strong>.<\/p>\n\n\n\n<h2 class=\"gb-headline gb-headline-eef3e186 gb-headline-text\">General Information on Data Storage and Deletion<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We delete personal data in accordance with legal requirements once consent is withdrawn or the legal basis no longer exists. Exception: statutory retention periods require longer storage.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Retention periods include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>10 years<\/strong> \u2013 accounting records, annual financial statements, etc.<\/li>\n\n\n\n<li><strong>8 years<\/strong> \u2013 booking documents (e.g. invoices)<\/li>\n\n\n\n<li><strong>6 years<\/strong> \u2013 business correspondence<\/li>\n\n\n\n<li><strong>3 years<\/strong> \u2013 limitation period for legal claims<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">More detailed rules apply depending on processing context.<\/p>\n\n\n\n<h2 class=\"gb-headline gb-headline-b0755967 gb-headline-text\">Rights of Data Subjects<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In accordance with Art. 15\u201321 GDPR, you have the following rights:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Right to object<\/li>\n\n\n\n<li>Right to withdraw consent<\/li>\n\n\n\n<li>Right of access<\/li>\n\n\n\n<li>Right to rectification<\/li>\n\n\n\n<li>Right to erasure or restriction<\/li>\n\n\n\n<li>Right to data portability<\/li>\n\n\n\n<li>Right to lodge a complaint with a supervisory authority<\/li>\n<\/ul>\n\n\n\n<h2 class=\"gb-headline gb-headline-8a5f58ac gb-headline-text\">Business Processes and Procedures<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Personal data of service recipients (e.g. counselling clients) and clients are processed in the context of contractual and pre-contractual relationships. This includes support for internal processes such as customer management, accounting, payment handling, and project management.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Data may be passed on to third parties if necessary for processing or required by law. Data is deleted after statutory periods expire.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Types of data processed<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">(inventory data, payment data, contact data, content data, contract data, log data, usage data, creditworthiness data, meta\/communication data)<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Data subjects<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Service recipients, clients, prospective customers, communication partners, business partners, third parties, employees, and users of online services.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Purposes<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Contract fulfilment, administrative processes, communication, public relations, credit assessment, financial management, security, IT infrastructure.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Legal bases<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Contract performance (Art. 6(1)(b) GDPR)<\/li>\n\n\n\n<li>Legitimate interests (Art. 6(1)(f) GDPR)<\/li>\n\n\n\n<li>Legal obligations (Art. 6(1)(c) GDPR)<\/li>\n<\/ul>\n\n\n\n<h2 class=\"gb-headline gb-headline-8577b90e gb-headline-text\">Further Information on Processing Activities, Procedures and Services<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Retention and Deletion of Data<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The following general retention periods apply to the storage and archiving of data under German law:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>10 years<\/strong> \u2013 Retention period for books and records, annual financial statements, inventories, management reports, opening balance sheets, as well as the working instructions and other organisational documents required for their understanding (\u00a7 147 (1) No. 1 in conjunction with (3) AO; \u00a7 14b (1) UStG; \u00a7 257 (1) No. 1 in conjunction with (4) HGB).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>8 years<\/strong> \u2013 Accounting records such as invoices and cost receipts (\u00a7 147 (1) Nos. 4 and 4a in conjunction with (3) sentence 1 AO; \u00a7 257 (1) No. 4 in conjunction with (4) HGB).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>6 years<\/strong> \u2013 Other business documents: received commercial or business correspondence, copies of sent commercial or business correspondence, and other documents relevant for taxation, such as hourly wage slips, cost accounting sheets, calculation documents, price lists, as well as payroll documents (if they are not already accounting documents) and cash register receipts (\u00a7 147 (1) Nos. 2, 3, 5 in conjunction with (3) AO; \u00a7 257 (1) Nos. 2 and 3 in conjunction with (4) HGB).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3 years<\/strong> \u2013 Data required to take into account potential warranty or compensation claims or similar contractual claims and rights, as well as to process related inquiries, based on past business experience and industry practices. These are stored for the duration of the regular statutory limitation period of three years (\u00a7\u00a7 195, 199 BGB).<\/p>\n\n\n\n<h2 class=\"gb-headline gb-headline-7a3b7d13 gb-headline-text\">Rights of Data Subjects<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Under the GDPR, you have various rights as a data subject, particularly those set out in Articles 15 to 21 GDPR:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Right to Object<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.<br>If your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing; this also applies to profiling insofar as it is connected to direct marketing.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Right to Withdraw Consent<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">You have the right to withdraw consent at any time.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Right of Access<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">You have the right to obtain confirmation as to whether personal data concerning you is being processed and, if so, to obtain access to this data along with further information and a copy of the data in accordance with legal requirements.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Right to Rectification<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">You have the right to request the completion of incomplete data or the correction of inaccurate data concerning you, in accordance with legal requirements.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Right to Erasure and Restriction of Processing<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">You have the right to request the immediate deletion of personal data concerning you, or alternatively to request a restriction of processing, in accordance with legal requirements.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Right to Data Portability<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, or to request its transfer to another controller, in accordance with legal requirements.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Right to Lodge a Complaint with a Supervisory Authority<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">In accordance with legal requirements, and without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority\u2014particularly in the Member State of your habitual residence, your place of work, or the place of the alleged infringement\u2014if you consider that the processing of your personal data infringes the GDPR.<\/p>\n\n\n\n<h2 class=\"gb-headline gb-headline-b5ec3442 gb-headline-text\">Business Processes and Procedures<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Personal data of service recipients (e.g. clients seeking advice) and commissioning parties\u2014including customers, clients, or in special cases mandate holders, patients, business partners, and other third parties\u2014are processed within the scope of contractual or comparable legal relationships and pre-contractual measures such as the initiation of business relationships. This data processing supports and facilitates business operations in areas such as customer management, sales, payment transactions, accounting, and project management.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The data collected serves to fulfil contractual obligations and ensure efficient business processes. This includes handling business transactions, managing customer relationships, optimizing sales strategies, and ensuring internal accounting and financial processes. Additionally, the data supports the protection of the controller\u2019s rights and facilitates administrative and organisational tasks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Personal data may be transferred to third parties if necessary to achieve the aforementioned purposes or to comply with legal obligations. After the expiry of statutory retention periods, or when the purpose of processing no longer applies, the data is deleted. This also includes data which must be stored longer due to tax or statutory documentation requirements.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Types of Data Processed<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Inventory data (e.g. full name, residential address, contact details, customer number)<\/li>\n\n\n\n<li>Payment data (e.g. bank details, invoices, payment history)<\/li>\n\n\n\n<li>Contact data (e.g. postal and email addresses, telephone numbers)<\/li>\n\n\n\n<li>Content data (e.g. written or visual messages and contributions, authorship information, timestamps)<\/li>\n\n\n\n<li>Contract data (e.g. contractual subject matter, duration, customer category)<\/li>\n\n\n\n<li>Log data (e.g. login logs, retrieval of data, access times)<\/li>\n\n\n\n<li>Usage data (e.g. page views, time spent, click paths, device types, operating systems, interaction with content)<\/li>\n\n\n\n<li>Creditworthiness data (e.g. credit score received, estimated default probability, risk assessment based on this, historical payment behaviour)<\/li>\n\n\n\n<li>Meta-, communication-, and procedural data (e.g. IP addresses, timestamps, identification numbers, involved persons)<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Categories of Data Subjects<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Service recipients (e.g. clients seeking advice) and commissioning parties<\/li>\n\n\n\n<li>Prospective clients<\/li>\n\n\n\n<li>Communication partners<\/li>\n\n\n\n<li>Business and contractual partners<\/li>\n\n\n\n<li>Third parties<\/li>\n\n\n\n<li>Employees (e.g. staff, applicants, temporary workers, other personnel)<\/li>\n\n\n\n<li>Users (e.g. website visitors, users of online services)<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Purposes of Processing<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Provision of contractual services and fulfilment of contractual obligations<\/li>\n\n\n\n<li>Office and organisational procedures<\/li>\n\n\n\n<li>Business processes and economic procedures<\/li>\n\n\n\n<li>Communication<\/li>\n\n\n\n<li>Public relations<\/li>\n\n\n\n<li>Sales and promotion<\/li>\n\n\n\n<li>Assessment of creditworthiness<\/li>\n\n\n\n<li>Financial and payment management<\/li>\n\n\n\n<li>Security measures<\/li>\n\n\n\n<li>IT infrastructure (operation and provision of IT systems and technical devices)<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Retention and Deletion<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Deletion in accordance with the details in the section \u201cGeneral Information on Data Storage and Deletion\u201d.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Legal Bases<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Contract fulfilment and pre-contractual inquiries (Art. 6(1)(b) GDPR)<\/li>\n\n\n\n<li>Legitimate interests (Art. 6(1)(f) GDPR)<\/li>\n\n\n\n<li>Legal obligation (Art. 6(1)(c) GDPR)<\/li>\n<\/ul>\n\n\n\n<h2 class=\"gb-headline gb-headline-ae926f91 gb-headline-text\">Further Notes on Processing Activities, Procedures, and Services<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Contact Management and Maintenance<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Processes required for organising, maintaining, and securing contact information (e.g. setting up and maintaining a central contact database, regular updates, ensuring data integrity, implementing data protection measures, access control, backups, staff training, review of communication history).<br><strong>Legal bases:<\/strong> Contract fulfilment (Art. 6(1)(b) GDPR), Legitimate interests (Art. 6(1)(f) GDPR)<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">General Payment Transactions<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Processes required for executing payment transactions, monitoring bank accounts, and controlling payment flows (e.g. preparing and reviewing transfers, managing direct debit payments, reviewing account statements, monitoring incoming and outgoing payments, managing returned debits, account reconciliation, cash management).<br><strong>Legal bases:<\/strong> Contract fulfilment, Legitimate interests<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Accounting, Accounts Payable, Accounts Receivable<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Processes required for capturing, managing, and reviewing business transactions (e.g. preparing incoming and outgoing invoices, managing outstanding receivables and payables, managing reminders, account reconciliation).<br><strong>Legal bases:<\/strong> Contract fulfilment, Legal obligation, Legitimate interests<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Financial Accounting and Taxes<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Processes for managing financial transactions and tax obligations (e.g. posting transactions, preparing quarterly and annual financial statements, handling payment processes, tax consulting, filing tax returns).<br><strong>Legal bases:<\/strong> Contract fulfilment, Legal obligation, Legitimate interests<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Public Relations<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Processes required for PR and organisational communication (e.g. developing communication strategies, PR campaigns, preparing press releases, maintaining media contacts, monitoring media coverage, organising press conferences or public events, crisis communication, developing content for social media and websites, managing corporate branding).<br><strong>Legal basis:<\/strong> Legitimate interests<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Guest Wi-Fi<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Processes for setting up, operating, maintaining and monitoring guest Wi-Fi networks (e.g. installing access points, managing guest access, monitoring connections, ensuring network security, troubleshooting, updating network software, compliance with data protection requirements).<br><strong>Legal bases:<\/strong> Contract fulfilment, Legal obligation, Legitimate interests<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Business Services<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We process the data of our contractual and business partners, e.g., customers and prospective clients (collectively referred to as \u201ccontractual partners\u201d), within the framework of contractual and comparable legal relationships, as well as associated measures, and for communication purposes with contractual partners (including pre-contractual measures), such as responding to inquiries.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We use this data to fulfill our contractual obligations. These obligations particularly include the provision of the agreed services, any obligations to provide updates, and remedies in cases of warranty issues or other service disruptions. Furthermore, we use the data to safeguard our rights and for administrative tasks associated with these obligations, as well as for organizational purposes. We also process the data on the basis of our legitimate interests in proper and efficient business management and in implementing security measures to protect our contractual partners and our operations from misuse, risks to their data, confidential information, and rights (e.g., by involving telecommunications, transportation, and auxiliary services, subcontractors, banks, tax and legal advisors, payment service providers, or tax authorities). In accordance with applicable law, we only disclose the data of contractual partners to third parties to the extent necessary for the aforementioned purposes or for fulfilling legal obligations. Contractual partners are informed about additional types of processing\u2014e.g., for marketing purposes\u2014within this privacy policy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We inform contractual partners which data is required for the aforementioned purposes before or during the data collection process\u2014e.g., in online forms, through special labels (such as colors) or symbols (such as asterisks), or in person.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We delete the data after the expiration of statutory warranty periods and comparable obligations, generally after four years, unless the data is stored in a customer account (e.g., for retention due to legal archiving obligations, typically ten years for tax purposes). Data provided to us within the framework of an assignment by a contractual partner is deleted in accordance with the legal requirements and generally after the assignment has ended.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Types of data processed:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Inventory data (e.g., full name, home address, contact information, customer number); payment data (e.g., bank details, invoices, payment history); contact data (e.g., postal and email addresses, telephone numbers); contract data (e.g., contract subject, duration, customer category).<br><strong>Special categories of personal data:<\/strong> Health data.<br><strong>Data subjects:<\/strong> Service recipients (e.g., clients in counseling) and clients; prospective clients; business and contractual partners; education and training participants.<br><strong>Purposes of processing:<\/strong> Provision and fulfillment of contractual services; communication; office and organizational procedures; administrative procedures; business processes and economic procedures.<br><strong>Retention and deletion:<\/strong> Deletion in accordance with the section \u201cGeneral Information on Data Storage and Deletion.\u201d<br><strong>Legal bases:<\/strong> Contract fulfillment and pre-contractual requests (Art. 6 para. 1 sentence 1 lit. b GDPR); legal obligation (Art. 6 para. 1 sentence 1 lit. c GDPR); legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).<\/p>\n\n\n\n<h2 class=\"gb-headline gb-headline-be4ce471 gb-headline-text\">Further Information on Processing Operations, Procedures, and Services<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Education and Training Services<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We process the data of participants in our educational and training programs (\u201ctrainees\u201d) to provide our training services. The type, scope, purpose, and necessity of the processed data depend on the underlying contractual and training relationship. Processing includes performance assessments and evaluation of our services and those of the instructors.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In the course of this activity, we may also process special categories of data, particularly health data, as well as data revealing ethnic origin, political opinions, religious or philosophical beliefs. Where necessary, we obtain the trainees\u2019 explicit consent and otherwise process special categories of data only to the extent necessary for providing training services, for health or social care purposes, or to protect vital interests.<br><strong>Legal basis:<\/strong> Contract fulfillment and pre-contractual requests (Art. 6 para. 1 sentence 1 lit. b GDPR).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Online Courses and Online Training<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We process the data of participants in our online courses and online training programs (\u201cparticipants\u201d) to provide our services. The processed data, type, scope, and necessity depend on the contractual relationship. Data includes information about attended courses and services, and where part of the offering, personal inputs and results. Processing includes performance evaluations and assessment of our services and those of instructors.<br>Depending on the course structure, additional processes may include attendance tracking, progress monitoring (e.g., tests and assessments), and analysis of platform interactions (e.g., forum posts, submissions).<br><strong>Legal basis:<\/strong> Contract fulfillment and pre-contractual requests (Art. 6 para. 1 sentence 1 lit. b GDPR).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Therapeutic Services<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We process the data of our clients, prospective clients, and other principals or contractual partners (\u201cclients\u201d) to provide our services. The type, scope, and purpose of the processed data depend on the underlying contractual and client relationship.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We may also process special categories of data, especially health data, potentially including data related to sexual life or orientation, as well as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership. Where necessary, we obtain explicit consent unless processing is required for the client\u2019s health, the data is publicly available, or legally permitted.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If necessary for fulfilling the contract, protecting vital interests, or required by law, or if consent is given, we may disclose client data to third parties or agents, such as authorities, medical facilities, laboratories, billing agencies, or service providers in IT, office, or comparable fields.<br><strong>Legal basis:<\/strong> Contract fulfillment and pre-contractual requests (Art. 6 para. 1 sentence 1 lit. b GDPR).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Payment Procedures<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In the context of contractual or other legal relationships, due to legal obligations, or based on our legitimate interests, we offer efficient and secure payment options and use banks, financial institutions, and other service providers (\u201cpayment service providers\u201d).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Payment service providers process inventory data (e.g., name, address), bank data (e.g., account numbers, credit card numbers), passwords, TANs, checksums, as well as contract-, transaction-, and recipient-related information. This data is necessary to process transactions. Entered payment data is processed exclusively by these providers; we do not receive account or credit card details, only confirmation or rejection notices.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Payment service providers may transmit data to credit agencies to verify identity and creditworthiness. Please refer to the payment providers\u2019 terms and privacy notices for further details and information on exercising rights (withdrawal, access, etc.).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Types of data processed:<\/strong> Inventory data; payment data; contract data; usage data; meta-, communication-, and procedural data; contact data.<br><strong>Data subjects:<\/strong> Service recipients; clients; business and contractual partners; prospective clients.<br><strong>Purposes:<\/strong> Provision of contractual services; business and administrative processes.<br><strong>Retention and deletion:<\/strong> According to the section \u201cGeneral Information on Data Storage and Deletion.\u201d<br><strong>Legal bases:<\/strong> Contract fulfillment and pre-contractual requests (Art. 6 para. 1 sentence 1 lit. b GDPR); legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).<\/p>\n\n\n\n<h3 class=\"gb-headline gb-headline-b55ad1e2 gb-headline-text\">Additional Information on Procedures and Services<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Google Pay<\/strong><strong><br><\/strong>Payment services (technical integration of online payment methods).<br>Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.<br>Legal basis: Contract fulfillment and pre-contractual requests (Art. 6 para. 1 sentence 1 lit. b GDPR).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Mastercard<\/strong><strong><br><\/strong>Payment services (technical integration of online payment methods).<br>Provider: Mastercard Europe SA, Chauss\u00e9e de Tervuren 198A, B-1410 Waterloo, Belgium.<br>Legal basis: Contract fulfillment and pre-contractual requests (Art. 6 para. 1 sentence 1 lit. b GDPR).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>PayPal<\/strong><strong><br><\/strong>Payment services (including PayPal, PayPal Plus, Braintree).<br>Provider: PayPal (Europe) S.\u00e0 r.l. et Cie, S.C.A., 22\u201324 Boulevard Royal, L-2449 Luxembourg.<br>Legal basis: Contract fulfillment and pre-contractual requests (Art. 6 para. 1 sentence 1 lit. b GDPR).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Visa<\/strong><strong><br><\/strong>Payment services (technical integration of online payment methods).<br>Provider: Visa Europe Services Inc., London Branch, 1 Sheldon Square, London W2 6TT, UK.<br>Legal basis: Contract fulfillment and pre-contractual requests (Art. 6 para. 1 sentence 1 lit. b GDPR).<br>Basis for third-country transfers: Adequacy decision (UK).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Provision of the Online Offer and Web Hosting<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We process the data of users in order to make our online services available to them. For this purpose, we process the user\u2019s IP address, which is necessary to transmit the content and functions of our online services to the user\u2019s browser or device.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Types of data processed:<\/strong><br>Usage data (e.g., page views and dwell time, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and features);<br>Meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, persons involved);<br>Log data (e.g., logfiles relating to logins or the retrieval of data or access times);<br>Content data (e.g., textual or visual messages and contributions, including related information such as authorship details or time of creation).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Data subjects:<\/strong><br>Users (e.g., website visitors, users of online services).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Purposes of processing:<\/strong><strong><br><\/strong>Provision of our online offer and user-friendliness;<br>Information technology infrastructure (operation and provision of information systems and technical devices such as computers, servers, etc.);<br>Security measures;<br>Provision of contractual services and fulfillment of contractual obligations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Retention and deletion:<\/strong><strong><br><\/strong>Deletion in accordance with the information provided in the section \u201cGeneral Information on Data Storage and Deletion.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Legal bases:<\/strong><strong><br><\/strong>Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Additional Information on Processing Operations, Procedures, and Services<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Provision of the Online Offer on Rented Storage Space<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">For the provision of our online offer, we use storage space, computing capacity, and software that we rent or otherwise obtain from a corresponding server provider (also referred to as a \u201cweb host\u201d).<br><strong>Legal basis:<\/strong> Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Collection of Access Data and Logfiles<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Access to our online offer is logged in the form of so-called \u201cserver logfiles.\u201d Server logfiles may include the addresses and names of retrieved web pages and files, date and time of access, transferred data volumes, information on successful retrieval, browser type and version, the user\u2019s operating system, referrer URL (the previously visited page), and typically IP addresses and the requesting provider.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Server logfiles may be used for security purposes\u2014for example, to prevent server overload (especially in cases of abusive attacks such as DDoS attacks)\u2014and to ensure the server\u2019s load capacity and stability.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Legal basis:<\/strong> Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).<br><strong>Deletion of data:<\/strong> Logfile information is stored for a maximum of 30 days and then deleted or anonymized. Data whose further retention is required for evidence purposes is exempt from deletion until the respective incident has been fully resolved.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Content Delivery Network<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We use a \u201cContent Delivery Network\u201d (CDN). A CDN is a service that helps deliver the content of an online offer\u2014particularly large media files such as graphics or program scripts\u2014faster and more securely using regionally distributed and internet-connected servers.<br><strong>Legal basis:<\/strong> Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Service Providers<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>DomainFactory<\/strong><strong><br><\/strong>Services in the field of providing IT infrastructure and related services (e.g., storage space and\/or computing capacity).<br>Provider: Domainfactory GmbH, c\/o WeWork, Neuturmstrasse 5, 80331 Munich, Germany<br>Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR)<br>Website: domainfactory.de<br>Privacy policy: df.eu\/de\/datenschutz<br>Data processing agreement: df.eu\/de\/support\/formulare\/<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Hetzner<\/strong><strong><br><\/strong>Services in the field of providing IT infrastructure and related services (e.g., storage space and\/or computing capacities).<br>Provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany<br>Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR)<br>Website: hetzner.com<br>Privacy policy: hetzner.com\/de\/rechtliches\/datenschutz<br>Data processing agreement: docs.hetzner.com\/de\/general\/general-terms-and-conditions\/data-privacy-faq\/<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>1&amp;1 IONOS<\/strong><strong><br><\/strong>Services for providing IT infrastructure and related services.<br>Provider: 1&amp;1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany<br>Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR)<br>Website: ionos.de<br>Privacy policy: ionos.de\/terms-gtc\/terms-privacy<br>Data processing agreement: ionos.de\/hilfe\/datenschutz\/\u2026<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>DigitalOcean<\/strong><strong><br><\/strong>Content Delivery Network (CDN) services enabling faster and more secure delivery of large media files.<br>Provider: DigitalOcean, LLC, 101 Avenue of the Americas, New York, NY 10013, USA<br>Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR)<br>Website: digitalocean.com<br>Privacy policy: digitalocean.com\/legal\/privacy-policy<br>Data processing agreement: digitalocean.com\/legal\/data-processing-agreement<br>Basis for third-country transfers: Data Privacy Framework (DPF)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Plesk<\/strong><strong><br><\/strong>IT infrastructure services and related offerings.<br>Provider: Plesk International GmbH, Vordergasse 59, 8200 Schaffhausen, Switzerland<br>Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR)<br>Website: parallels.com<br>Privacy policy: plesk.com\/legal\/#privacy-policy<br>Data processing agreement: Provided by the service provider<br>Basis for third-country transfers: Adequacy decision (Switzerland)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>gstatic.com<\/strong><strong><br><\/strong>CDN services supporting fast and secure delivery of website content.<br>Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland<br>Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR)<br>Website: google.de<br>Privacy policy: policies.google.com\/privacy<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>JSDelivr<\/strong><strong><br><\/strong>CDN services for efficient delivery of media and files, especially under high load.<br>Provider: ProspectOne, Kr\u00f3lewska 65A\/1, 30-081 Krak\u00f3w, Poland<br>Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR)<br>Website: jsdelivr.com<br>Privacy policy: jsdelivr.com\/terms\/privacy-policy<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>mailbox.org<\/strong><strong><br><\/strong>Email hosting services.<br>Provider: Heinlein Hosting GmbH, Schwedter Stra\u00dfe 8\/9A, 10119 Berlin, Germany<br>Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR)<br>Website: mailbox.org<br>Privacy policy: mailbox.org\/de\/datenschutz<br>Data processing agreement: Provided by the service provider<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Raidboxes<\/strong><strong><br><\/strong>IT infrastructure services and related offerings.<br>Provider: RAIDBOXES GmbH, Hafenstra\u00dfe 32, 48153 M\u00fcnster, Germany<br>Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR)<br>Website: raidboxes.io<br>Privacy policy: raidboxes.io\/legal\/privacy<br>Data processing agreement: helpcenter.raidboxes.de\/\u2026<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Contact and Inquiry Management<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When contacting us (e.g., by mail, contact form, email, phone, or via social media) and within existing user or business relationships, the information provided by the requesting individuals is processed to the extent necessary to respond to the inquiries and any requested measures.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Types of data processed:<\/strong><strong><br><\/strong>Inventory data (e.g., full name, home address, contact information, customer number);<br>Contact data (e.g., postal and email addresses, telephone numbers);<br>Content data (e.g., written or visual messages and related information such as authorship details or time of creation);<br>Usage data (e.g., page views, dwell time, click paths, frequency and intensity of use, device types, operating systems, interactions with content and features);<br>Meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, persons involved).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Data subjects:<\/strong><strong><br><\/strong>Communication partners.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Purposes of processing:<\/strong><strong><br><\/strong>Communication;<br>Organizational and administrative procedures;<br>Feedback (e.g., collecting feedback via an online form);<br>Provision of our online offer and user-friendliness.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Retention and deletion:<\/strong><strong><br><\/strong>Deletion according to the section \u201cGeneral Information on Data Storage and Deletion.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Legal bases:<\/strong><strong><br><\/strong>Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR);<br>Contract fulfillment and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b GDPR).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Additional Notes on Processes, Procedures, and Services<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Contact Form<br><\/strong>When contacting us via our contact form, email, or other communication channels, we process the personal data transmitted to us for the purpose of responding to and handling the respective inquiry. This typically includes information such as name, contact details, and, where relevant, additional information provided to us and required for proper handling. We use this data exclusively for the stated purpose of communication.<br><strong>Legal bases:<\/strong> Contract fulfillment and pre-contractual requests (Art. 6 para. 1 sentence 1 lit. b GDPR); Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Contact Form 7<br><\/strong>Management of contact inquiries and communication.<br>Provider: Rock Lobster, LLC<br>Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR)<br>Website: contactform7.com<br>Additional information: Operated within a self-hosted environment.<\/p>\n\n\n\n<h2 class=\"gb-headline gb-headline-d008528d gb-headline-text\">Video Conferences, Online Meetings, Webinars, and Screen Sharing<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We use platforms and applications provided by other providers (hereinafter referred to as \u201cconference platforms\u201d) for the purpose of conducting video and audio conferences, webinars, and other types of video and audio meetings (collectively referred to as \u201cconferences\u201d). When selecting the conference platforms and their services, we comply with applicable legal requirements.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Data processed by conference platforms<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">When participating in a conference, conference platforms process the following personal data of participants. The scope of processing depends on which data is required for a specific conference (e.g., login details or real names) and which optional information participants choose to provide. In addition to processing for hosting the conference, participant data may also be processed by the platforms for security or service optimization purposes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The data processed may include: personal data (first and last name), contact details (email address, telephone number), access data (access codes or passwords), profile photos, information about professional roles\/functions, IP address of the internet connection, information about participants\u2019 devices, operating systems, browsers and their technical and language settings, information about communication content (chat entries, audio and video data), and usage of available functions (e.g., polls). Content of communications is encrypted to the extent technically provided by the conference platform.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If participants are registered as users with the conference platform, additional data may be processed according to the agreement with the respective platform provider.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Logging and recordings<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If text entries, participation results (e.g., polls), or video or audio recordings are logged, participants will be informed transparently in advance and \u2014 where required \u2014 asked for their consent.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Data protection measures for participants<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Please review the privacy notices of the respective conference platforms for details on the processing of your data, and choose the security and privacy settings that are optimal for you. During video conferences, please ensure that your background is protected (e.g., by informing cohabitants, closing doors, or \u2014 where technically available \u2014 activating background-blurring functions). Links to conference rooms and login credentials must not be shared with unauthorized third parties.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Legal bases<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Where we process user data ourselves in addition to the conference platforms, and users are asked for consent to use conference platforms or specific features (e.g., consent to recordings), the legal basis is that consent. Furthermore, processing may be necessary to fulfill contractual obligations (e.g., participant lists, documentation of meeting results). Otherwise, data is processed based on our legitimate interests in efficient and secure communication with our communication partners.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Types of data processed<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Inventory data; contact data; content data; usage data; image and\/or video recordings; audio recordings; log data; meta, communication, and procedural data.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Data subjects:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Communication partners; users (e.g., website visitors, users of online services); individuals depicted in audio\/video recordings.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Purposes of processing:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Provision of contractual services; communication; office and administrative processes; provision of our online offer and user-friendliness.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Retention and deletion:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Deletion according to the section \u201cGeneral Information on Data Storage and Deletion.\u201d<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Legal basis:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Additional Information on Platforms<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Microsoft Teams<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Audio and video conferencing, chat, file sharing, Office 365 integration, real-time collaboration, calendar features, task management, screen sharing, optional recording.<br>Provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland<br>Legal basis: Legitimate interests<br>Website: microsoft.com\/microsoft-teams<br>Privacy policy: privacy.microsoft.com<br>Security information: microsoft.com\/trustcenter<br>Third-country transfer basis: Data Privacy Framework (DPF)<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Zoom<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Video conferences, online meetings, webinars, screen sharing, optional recordings, chat, calendar and app integrations.<br>Provider: Zoom Video Communications, Inc., 55 Almaden Blvd., Suite 600, San Jose, CA 95113, USA<br>Legal basis: Legitimate interests<br>Website: zoom.us<br>Privacy policy: explore.zoom.us\/privacy<br>Data Processing Agreement: explore.zoom.us\/docs\/...<br>Third-country transfer basis: Data Privacy Framework (DPF)<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">BigBlueButton<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Open-source web conferencing system, including integrations with major learning and content management systems.<br>Provider: Operation on servers and\/or computers under our own data protection responsibility.<br>Legal basis: Legitimate interests<br>Website: bigbluebutton.org<\/p>\n\n\n\n<h2 class=\"gb-headline gb-headline-3ed6b90a gb-headline-text\">Cloud Services<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We use software services accessible over the internet and operated on the servers of their providers (\u201ccloud services\u201d or \u201cSoftware as a Service\u201d) for storing and managing content (e.g., document storage and management, sharing documents and information with specific recipients, or publishing content).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Personal data may be processed and stored on the servers of cloud service providers if it forms part of communications with us or is otherwise processed by us as described in this privacy policy. This may include inventory and contact data, data relating to processes, contracts, or other procedures and their content. Cloud providers may also process usage and metadata for security or service optimization purposes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Where we use cloud services to provide forms or documents to other users or publicly accessible websites, providers may store cookies on users\u2019 devices for web analytics or remembering user settings (e.g., media playback).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Types of data processed:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Inventory data; contact data; content data; usage data.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Data subjects:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Interested parties; communication partners; business and contractual partners.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Purposes:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Office and administrative processes; IT infrastructure (operation and provision of IT systems and technical devices such as computers, servers, etc.).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Retention and deletion:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">According to \u201cGeneral Information on Data Storage and Deletion.\u201d<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Legal basis:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Cloud Service Providers<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">mailbox.org (Cloud storage)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Provider: Heinlein Hosting GmbH, Schwedter Stra\u00dfe 8\/9A, 10119 Berlin, Germany<br>Legal basis: Legitimate interests<br>Website: mailbox.org<br>Privacy policy: mailbox.org\/de\/datenschutzerklaerung<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Microsoft Cloud Services<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Cloud storage, cloud infrastructure, cloud-based software<br>Provider: Microsoft Ireland Operations Limited<br>Legal basis: Legitimate interests<br>Website: microsoft.com<br>Privacy policy: privacy.microsoft.com<br>Security: microsoft.com\/trustcenter<br>DPA: microsoft.com\/licensing\/docs\/...<br>Third-country transfer basis: DPF<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Nextcloud<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Cloud storage, cloud infrastructure, cloud-based applications<br>Provider: Nextcloud GmbH, Hauptmannsreute 44a, 70192 Stuttgart, Germany<br>Legal basis: Legitimate interests<br>Website: nextcloud.com<br>Privacy policy: nextcloud.com\/privacy<\/p>\n\n\n\n<h2 class=\"gb-headline gb-headline-b9171308 gb-headline-text\">Newsletter and Electronic Notifications<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We send newsletters, emails, and other electronic notifications (\u201cnewsletters\u201d) only with the consent of the recipients or based on a legal permission. If specific content is mentioned during newsletter registration, such content is decisive for the user\u2019s consent. Usually, providing an email address is sufficient; however, we may request a name for personalized addressing or additional information necessary for the newsletter\u2019s purpose.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Deletion and restriction of processing<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We may store unsubscribed email addresses for up to three years based on our legitimate interests, to prove that consent previously existed. Processing is limited to the purpose of possible defense against claims. Individual deletion requests are possible at any time if former consent is confirmed. Where objections must be observed permanently, we store the email address solely on a \u201cblocklist.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Logging of the registration process is based on our legitimate interests in proving its lawful execution. If we use a service provider to send emails, this is based on our legitimate interests in an efficient and secure email delivery system.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Content of newsletters<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The newsletter is sent twice a year and informs about our publications, events, and current developments such as legal proceedings and right-wing attacks.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Types of data processed:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Inventory data; contact data; meta and communication data; usage data.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Data subjects:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Communication partners.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Purposes:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Direct marketing; reach measurement.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Legal bases:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Consent (Art. 6 para. 1 lit. a GDPR); legitimate interests (Art. 6 para. 1 lit. f GDPR).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Opt-out<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">You may unsubscribe or withdraw your consent at any time. A link to unsubscribe is included in every newsletter, or you may contact us using the methods provided above (preferably via email).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Service provider: Brevo (formerly Sendinblue)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Email delivery and automation services<br>Provider: Sendinblue GmbH, K\u00f6penicker Str. 126, 10179 Berlin, Germany<br>Legal basis: Legitimate interests<br>Website: brevo.com<br>Privacy policy: brevo.com\/legal\/privacypolicy<br>Data Processing Agreement: Provided by the service provider<\/p>\n\n\n\n<h2 class=\"gb-headline gb-headline-2b28fb37 gb-headline-text\">Promotional Communication via Email, Post, Fax, or Telephone<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We process personal data for the purpose of promotional communication via various channels (email, telephone, post, fax), in accordance with legal requirements.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Recipients may revoke consent or object to such communication at any time.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Following revocation or objection, we retain the data required to prove prior authorization for up to three years based on our legitimate interests. Processing is restricted to defense against potential claims. Based on our legitimate interest in preventing renewed contact, we also store the data necessary to maintain a permanent block (e.g., email address, telephone number, name).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Types of data processed:<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Inventory data; contact data; content data.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Data subjects:<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Communication partners.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Purposes:<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Direct marketing; marketing activities; sales promotion.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Retention and deletion:<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">According to \u201cGeneral Information on Data Storage and Deletion.\u201d<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Legal bases:<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Consent (Art. 6 para. 1 lit. a GDPR); legitimate interests (Art. 6 para. 1 lit. f GDPR).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Web Analysis, Monitoring, and Optimization<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Web analysis (also referred to as \"reach measurement\") is used to evaluate the visitor flows of our online offerings and can include behavior, interests, or demographic information about visitors, such as age or gender, as pseudonymous values. Using reach analysis, for example, we can determine at which times our online offerings or their functions or content are most frequently used, or invite users to reuse them. Likewise, it allows us to track which areas require optimization.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In addition to web analysis, we can also use testing methods to, for example, test and optimize different versions of our online offerings or their components.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Unless otherwise specified below, profiles\u2014that is, data consolidated for a usage session\u2014may be created for these purposes, and information can be stored in a browser or on a device and later retrieved. The collected data includes, in particular, visited websites and the elements used there, as well as technical information such as the browser used, the computer system used, and usage times. If users have consented to the collection of their location data either to us or to the providers of the services we use, the processing of location data is also possible.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Furthermore, users\u2019 IP addresses are stored. However, we use an IP masking procedure (i.e., pseudonymization by shortening the IP address) to protect users. In general, no personal data of users (such as email addresses or names) are stored during web analysis, A\/B testing, and optimization; only pseudonyms are used. This means that neither we nor the providers of the software used know the actual identity of the users, only the information stored in their profiles for the respective processes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Notes on Legal Bases:<\/strong> If we ask users for their consent to the use of third-party providers, the legal basis for data processing is consent. Otherwise, user data is processed based on our legitimate interests (i.e., the interest in efficient, economical, and user-friendly services). In this context, we also refer you to the information on the use of cookies in this privacy policy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Types of Data Processed:<\/strong> Usage data (e.g., page views and duration, click paths, intensity and frequency of use, device types and operating systems used, interactions with content and functions). Meta, communication, and procedural data (e.g., IP addresses, time information, identification numbers, involved persons).<br><strong>Data Subjects:<\/strong> Users (e.g., website visitors, users of online services).<br><strong>Purposes of Processing:<\/strong> Reach measurement (e.g., access statistics, identification of recurring visitors). Profiles with user-related information (creation of user profiles).<br><strong>Retention and Deletion:<\/strong> Deletion according to the section \"General Information on Data Storage and Deletion.\" Storage of cookies for up to 2 years (unless otherwise stated, cookies and similar storage methods may be stored on users\u2019 devices for a period of two years).<br><strong>Security Measures:<\/strong> IP masking (pseudonymization of the IP address).<br><strong>Legal Bases:<\/strong> Consent (Art. 6(1) sentence 1(a) GDPR), legitimate interests (Art. 6(1) sentence 1(f) GDPR).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Further Notes on Processing Processes, Procedures, and Services:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Statify:<\/strong> Collection and display of visitor statistics without storing personal data. Counts page views and shows the number of visits for individual pages. No cookies or third-party services are used; service provider: execution on servers and\/or computers under our own data protection responsibility; legal basis: legitimate interests (Art. 6(1) sentence 1(f) GDPR). Website: <a href=\"https:\/\/pluginkollektiv.org\/\">https:\/\/pluginkollektiv.org\/<\/a>.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"gb-headline gb-headline-88d5ff4f gb-headline-text\">Social Media Presences<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We maintain online presences within social networks and process user data in this context to communicate with users active there or to provide information about us.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We note that user data may be processed outside the European Union. This may pose risks for users, for example, because enforcing users\u2019 rights could be more difficult.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Furthermore, user data within social networks is usually processed for market research and advertising purposes. For example, user profiles may be created based on usage behavior and resulting interests. These profiles may in turn be used to display advertisements within and outside the networks that presumably match the users\u2019 interests. Therefore, cookies are usually stored on users\u2019 devices, which store usage behavior and user interests. In addition, user profiles may contain data independent of the devices used by users (especially if they are members of the respective platforms and logged in there).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For a detailed presentation of the respective processing methods and opt-out options, we refer to the privacy policies and information of the operators of the respective networks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Even in the case of requests for information and the assertion of data subject rights, we note that these are most effectively exercised with the providers themselves. Only the latter have access to the user data and can take direct measures and provide information. If you still need assistance, you may contact us.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Types of Data Processed:<\/strong> Contact data (e.g., postal and email addresses or telephone numbers); content data (e.g., textual or visual messages and posts and related information, such as authorship or creation time); usage data (e.g., page views and duration, click paths, intensity and frequency of use, device types and operating systems used, interactions with content and functions). Meta, communication, and procedural data (e.g., IP addresses, time information, identification numbers, involved persons).<br><strong>Data Subjects:<\/strong> Users (e.g., website visitors, users of online services).<br><strong>Purposes of Processing:<\/strong> Communication; feedback (e.g., collecting feedback via online forms); public relations.<br><strong>Retention and Deletion:<\/strong> Deletion according to the section \"General Information on Data Storage and Deletion.\"<br><strong>Legal Bases:<\/strong> Legitimate interests (Art. 6(1) sentence 1(f) GDPR); consent (Art. 6(1) sentence 1(a) GDPR).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Further Notes on Processing Processes, Procedures, and Services:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Instagram:<\/strong> Social network that allows sharing photos and videos, commenting on and favoriting posts, sending messages, subscribing to profiles and pages; service provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; legal basis: legitimate interests (Art. 6(1) sentence 1(f) GDPR); website: <a href=\"https:\/\/www.instagram.com\/\">https:\/\/www.instagram.com<\/a>; privacy policy: <a href=\"https:\/\/privacycenter.instagram.com\/policy\/\">https:\/\/privacycenter.instagram.com\/policy\/<\/a>. Third-country transfer basis: Data Privacy Framework (DPF).<\/li>\n\n\n\n<li><strong>Facebook Pages:<\/strong> Profiles within the social network Facebook \u2013 We are jointly responsible with Meta Platforms Ireland Limited for the collection (but not further processing) of data from visitors to our Facebook page (\u201cFanpage\u201d). This includes information on the types of content users view or interact with or actions taken by them, as well as information on devices used (e.g., IP addresses, OS, browser type, language settings, cookies). Facebook also collects and uses data to provide analysis services (\u201cPage Insights\u201d) for page operators. We have a special agreement with Facebook covering these matters. Users\u2019 rights are not restricted. Further information: <a href=\"https:\/\/www.facebook.com\/legal\/terms\/information_about_page_insights_data\">https:\/\/www.facebook.com\/legal\/terms\/information_about_page_insights_data<\/a>. Third-country transfer basis: Data Privacy Framework (DPF).<\/li>\n\n\n\n<li><strong>TikTok:<\/strong> Social network enabling sharing of photos and videos, commenting and favoriting posts, sending messages, subscribing to accounts; service providers: TikTok Technology Limited (Dublin) and TikTok Information Technologies UK Limited (London); legal basis: consent (Art. 6(1) sentence 1(a) GDPR); website: <a href=\"https:\/\/www.tiktok.com\/\">https:\/\/www.tiktok.com<\/a>; privacy policy: <a href=\"https:\/\/www.tiktok.com\/de\/privacy-policy\">https:\/\/www.tiktok.com\/de\/privacy-policy<\/a>. Third-country transfer basis: Standard Contractual Clauses.<\/li>\n\n\n\n<li><strong>X (formerly Twitter):<\/strong> Social network; service provider: Twitter International Company, Dublin; legal basis: legitimate interests (Art. 6(1) sentence 1(f) GDPR); website: <a href=\"https:\/\/x.com\/\">https:\/\/x.com<\/a>; privacy policy: <a href=\"https:\/\/x.com\/de\/privacy\">https:\/\/x.com\/de\/privacy<\/a>.<\/li>\n\n\n\n<li><strong>YouTube:<\/strong> Social network and video platform; service provider: Google Ireland Limited, Dublin; legal basis: legitimate interests (Art. 6(1) sentence 1(f) GDPR); privacy policy: <a href=\"https:\/\/policies.google.com\/privacy\">https:\/\/policies.google.com\/privacy<\/a>; third-country transfer basis: Data Privacy Framework (DPF). Opt-out: <a href=\"https:\/\/myadcenter.google.com\/personalizationoff\">https:\/\/myadcenter.google.com\/personalizationoff<\/a>.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"gb-headline gb-headline-c071812f gb-headline-text\">Plugins and Embedded Functions and Content<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We integrate functional and content elements in our online offerings that are retrieved from the servers of their respective providers (\u201cthird parties\u201d). This may include graphics, videos, or maps (\u201ccontent\u201d).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Integration always requires that the third-party providers process users\u2019 IP addresses because without the IP, the content cannot be sent to the users\u2019 browsers. The IP address is thus required for the display of these contents or functions. We strive to use only content whose providers apply the IP solely for content delivery. Third parties may also use pixel tags (invisible graphics, also called \u201cweb beacons\u201d) for statistical or marketing purposes. Pixel tags can evaluate information such as visitor traffic on the pages of this website. Pseudonymous information may also be stored in cookies on users\u2019 devices, including technical details about the browser and OS, referrer websites, visit time, and other usage details, and may be linked with information from other sources.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Notes on Legal Bases:<\/strong> If we request users\u2019 consent for the use of third parties, the legal basis is permission. Otherwise, data is processed based on our legitimate interests (efficient, economical, and user-friendly services). We also refer to the information on cookie use in this privacy policy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Types of Data Processed:<\/strong> Usage data (e.g., page views, duration, click paths, intensity and frequency of use, devices, OS, interactions with content and functions). Meta, communication, and procedural data (e.g., IP addresses, time information, identification numbers, involved persons).<br><strong>Data Subjects:<\/strong> Users (e.g., website visitors, online service users).<br><strong>Purposes of Processing:<\/strong> Provision of our online offerings and user-friendliness; marketing. Profiles with user-related information (creation of user profiles).<br><strong>Retention and Deletion:<\/strong> Deletion according to the section \"General Information on Data Storage and Deletion.\" Cookies may be stored for up to 2 years.<br><strong>Legal Bases:<\/strong> Consent (Art. 6(1) sentence 1(a) GDPR); legitimate interests (Art. 6(1) sentence 1(f) GDPR).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Further Notes on Processing Processes, Procedures, and Services:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Google Fonts (from Google server):<\/strong> Retrieval of fonts (and symbols) for technically secure, maintenance-free, and efficient use of fonts and symbols, ensuring consistency, speed, and compliance with possible licensing restrictions. Users\u2019 IP addresses are transmitted to the provider to deliver fonts in their browser. Technical data (language, screen resolution, OS, hardware) is also transmitted. Data may be processed on Google servers in the USA. Google Fonts Web API logs HTTP request details (requested URL, user agent, referrer URL). Google states it does not use the information to create profiles or target ads. Service provider: Google Ireland Limited; legal basis: legitimate interests; website: <a href=\"https:\/\/fonts.google.com\/\">https:\/\/fonts.google.com<\/a>; privacy policy: <a href=\"https:\/\/policies.google.com\/privacy\">https:\/\/policies.google.com\/privacy<\/a>; third-country transfer: Data Privacy Framework. Further info: <a href=\"https:\/\/developers.google.com\/fonts\/faq\/privacy?hl=de\">https:\/\/developers.google.com\/fonts\/faq\/privacy?hl=de<\/a>.<\/li>\n\n\n\n<li><strong>X Plugins and Content:<\/strong> Plugins and buttons for the X platform, e.g., to share content from this site; service provider: Twitter International Company, Dublin; legal basis: legitimate interests; website: <a href=\"https:\/\/x.com\/de\">https:\/\/x.com\/de<\/a>; privacy policy: <a href=\"https:\/\/x.com\/de\/privacy\">https:\/\/x.com\/de\/privacy<\/a>; third-country transfer: Standard Contractual Clauses.<\/li>\n\n\n\n<li><strong>Font Awesome (from provider server):<\/strong> Retrieval of fonts and symbols for technically secure, maintenance-free, and efficient use; service provider: Fonticons, Inc., USA; legal basis: legitimate interests; website: <a href=\"https:\/\/fontawesome.com\/\">https:\/\/fontawesome.com<\/a>; privacy policy: <a href=\"https:\/\/fontawesome.com\/privacy\">https:\/\/fontawesome.com\/privacy<\/a>.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"gb-headline gb-headline-6e7fd4b5 gb-headline-text\">Changes and Updates<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Please regularly review the content of our privacy policy. We update the privacy policy whenever changes in our data processing make it necessary. We inform you if changes require your action (e.g., consent) or individual notification.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If we provide addresses and contact information of companies and organizations in this privacy policy, please note that addresses may change over time and should be verified before contacting.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Supervisory Authority Responsible for Us:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Data Protection Officer of the Evangelical Church in Germany \u2013 Berlin Branch \u2013<br>Invalidenstra\u00dfe 29<br>10115 Berlin<br>Phone: 030 2005157-0<br>Fax: 030 2005157-20<br>Email: o&#115;&#x74;&#x40;d&#97;&#116;&#x65;&#x6e;s&#99;&#x68;&#x75;t&#122;&#46;&#x65;&#x6b;d&#46;&#x64;&#x65;<br>Internet: <a href=\"https:\/\/datenschutz.ekd.de\/datenschutz\/\">https:\/\/datenschutz.ekd.de\/datenschutz\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Preamble The counselling centre elly \u2013 Hatespeech Beratung in Th\u00fcringen is operated by re:solut \u2013 Rundum engagiert: solidarische Unterst\u00fctzung in Th\u00fcringen e.V. The association is an organisation of the Evangelical Church in Central Germany (hereinafter \u201cEKM\u201d). We take the protection of your personal data and the legal obligations designed to ensure this protection very seriously. ... <a title=\"Privacy Policy\" class=\"read-more\" href=\"https:\/\/elly-beratung.de\/en\/privacy-policy\/\" aria-label=\"Read more about Privacy Policy\">Weiterlesen<\/a><\/p>\n","protected":false},"author":5,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-1326","page","type-page","status-publish"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Privacy Policy<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/elly-beratung.de\/en\/privacy-policy\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Privacy Policy\" \/>\n<meta property=\"og:description\" content=\"Preamble The counselling centre elly \u2013 Hatespeech Beratung in Th\u00fcringen is operated by re:solut \u2013 Rundum engagiert: solidarische Unterst\u00fctzung in Th\u00fcringen e.V. The association is an organisation of the Evangelical Church in Central Germany (hereinafter \u201cEKM\u201d). We take the protection of your personal data and the legal obligations designed to ensure this protection very seriously. ... Weiterlesen\" \/>\n<meta property=\"og:url\" content=\"https:\/\/elly-beratung.de\/en\/privacy-policy\/\" \/>\n<meta property=\"og:site_name\" content=\"elly against hatespeech\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/people\/Elly_against_hatespeech\/100088595240055\/\" \/>\n<meta property=\"article:modified_time\" content=\"2026-02-17T16:09:49+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/elly-beratung.de\/wp-content\/uploads\/Beratung02Frosch.png\" \/>\n\t<meta property=\"og:image:width\" content=\"2608\" \/>\n\t<meta property=\"og:image:height\" content=\"1454\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"45 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/elly-beratung.de\\\/en\\\/privacy-policy\\\/\",\"url\":\"https:\\\/\\\/elly-beratung.de\\\/en\\\/privacy-policy\\\/\",\"name\":\"Privacy Policy\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/elly-beratung.de\\\/en\\\/#website\"},\"datePublished\":\"2022-11-22T15:08:32+00:00\",\"dateModified\":\"2026-02-17T16:09:49+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/elly-beratung.de\\\/en\\\/privacy-policy\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/elly-beratung.de\\\/en\\\/privacy-policy\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/elly-beratung.de\\\/en\\\/privacy-policy\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\\\/\\\/elly-beratung.de\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/elly-beratung.de\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/elly-beratung.de\\\/en\\\/\",\"name\":\"elly\",\"description\":\"against hatespeech\",\"publisher\":{\"@id\":\"https:\\\/\\\/elly-beratung.de\\\/en\\\/#organization\"},\"alternateName\":\"elly against hatespeech\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/elly-beratung.de\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/elly-beratung.de\\\/en\\\/#organization\",\"name\":\"elly\",\"alternateName\":\"elly against hatespeech\",\"url\":\"https:\\\/\\\/elly-beratung.de\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/elly-beratung.de\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/elly-beratung.de\\\/wp-content\\\/uploads\\\/elly-logo-rahmen.svg\",\"contentUrl\":\"https:\\\/\\\/elly-beratung.de\\\/wp-content\\\/uploads\\\/elly-logo-rahmen.svg\",\"width\":1,\"height\":1,\"caption\":\"elly\"},\"image\":{\"@id\":\"https:\\\/\\\/elly-beratung.de\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/people\\\/Elly_against_hatespeech\\\/100088595240055\\\/\",\"https:\\\/\\\/www.instagram.com\\\/elly_against_hatespeech\\\/\",\"https:\\\/\\\/www.tiktok.com\\\/@elly_against_hatespeech\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Privacy Policy","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/elly-beratung.de\/en\/privacy-policy\/","og_locale":"en_US","og_type":"article","og_title":"Privacy Policy","og_description":"Preamble The counselling centre elly \u2013 Hatespeech Beratung in Th\u00fcringen is operated by re:solut \u2013 Rundum engagiert: solidarische Unterst\u00fctzung in Th\u00fcringen e.V. The association is an organisation of the Evangelical Church in Central Germany (hereinafter \u201cEKM\u201d). We take the protection of your personal data and the legal obligations designed to ensure this protection very seriously. ... Weiterlesen","og_url":"https:\/\/elly-beratung.de\/en\/privacy-policy\/","og_site_name":"elly against hatespeech","article_publisher":"https:\/\/www.facebook.com\/people\/Elly_against_hatespeech\/100088595240055\/","article_modified_time":"2026-02-17T16:09:49+00:00","og_image":[{"width":2608,"height":1454,"url":"https:\/\/elly-beratung.de\/wp-content\/uploads\/Beratung02Frosch.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"45 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/elly-beratung.de\/en\/privacy-policy\/","url":"https:\/\/elly-beratung.de\/en\/privacy-policy\/","name":"Privacy Policy","isPartOf":{"@id":"https:\/\/elly-beratung.de\/en\/#website"},"datePublished":"2022-11-22T15:08:32+00:00","dateModified":"2026-02-17T16:09:49+00:00","breadcrumb":{"@id":"https:\/\/elly-beratung.de\/en\/privacy-policy\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/elly-beratung.de\/en\/privacy-policy\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/elly-beratung.de\/en\/privacy-policy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/elly-beratung.de\/en\/"},{"@type":"ListItem","position":2,"name":"Privacy Policy"}]},{"@type":"WebSite","@id":"https:\/\/elly-beratung.de\/en\/#website","url":"https:\/\/elly-beratung.de\/en\/","name":"elly","description":"against hatespeech","publisher":{"@id":"https:\/\/elly-beratung.de\/en\/#organization"},"alternateName":"elly against hatespeech","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/elly-beratung.de\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/elly-beratung.de\/en\/#organization","name":"elly","alternateName":"elly against hatespeech","url":"https:\/\/elly-beratung.de\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/elly-beratung.de\/en\/#\/schema\/logo\/image\/","url":"https:\/\/elly-beratung.de\/wp-content\/uploads\/elly-logo-rahmen.svg","contentUrl":"https:\/\/elly-beratung.de\/wp-content\/uploads\/elly-logo-rahmen.svg","width":1,"height":1,"caption":"elly"},"image":{"@id":"https:\/\/elly-beratung.de\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/people\/Elly_against_hatespeech\/100088595240055\/","https:\/\/www.instagram.com\/elly_against_hatespeech\/","https:\/\/www.tiktok.com\/@elly_against_hatespeech"]}]}},"_links":{"self":[{"href":"https:\/\/elly-beratung.de\/en\/wp-json\/wp\/v2\/pages\/1326","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/elly-beratung.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/elly-beratung.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/elly-beratung.de\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/elly-beratung.de\/en\/wp-json\/wp\/v2\/comments?post=1326"}],"version-history":[{"count":1,"href":"https:\/\/elly-beratung.de\/en\/wp-json\/wp\/v2\/pages\/1326\/revisions"}],"predecessor-version":[{"id":1327,"href":"https:\/\/elly-beratung.de\/en\/wp-json\/wp\/v2\/pages\/1326\/revisions\/1327"}],"wp:attachment":[{"href":"https:\/\/elly-beratung.de\/en\/wp-json\/wp\/v2\/media?parent=1326"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}