It is important to us to inform you about what personal data we collect from you as a visitor to our website and for what purpose. For this reason, we describe in the following Privacy Policy the nature, scope, and purpose of the personal data we process.
Data Controller:
Stiftung Louisenlund
Louisenlund 9
24357 Güby
info@louisenlund.de
The Data Protection Officer is:
Jan A. Strunk
RAFAS::: law Specialized Law Firm
Fritz-Reuter-Weg 17
24939 Flensburg
office@rafas-law.de
1. Legal Basis and Purposes of Processing
We process your personal data solely for the purpose of fulfilling our contractual business relationship with you (pursuant to Art. 6(1)(b) GDPR), or to the extent necessary to provide the service you have requested. In addition, we process your personal data if you have given us your consent to do so (Article 6(1)(a) of the GDPR).
To the extent necessary, we also process your data (pursuant to Art. 6(1)(f) of the GDPR) beyond the actual fulfillment of the contract to safeguard our legitimate interests or those of third parties (e.g., for advertising and analysis, provided you have not objected to the use of your data; to assert legal claims and defend against legal disputes; to ensure IT security and IT operations; to prevent and investigate criminal offenses; to implement measures for business management and the further development of our offerings or inquiries on our website; and to provide the website with your content).
Any processing of personal data is carried out solely in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
2. Processing of Personal Data and the Nature and Purpose of Use
a.) Duration of Data Storage
As a general rule, we store your personal data only for as long as is necessary to provide the service you have requested or to fulfill our business relationship with you, unless statutory retention requirements provide otherwise; in the case of IP addresses, data is stored for 7 days to ensure IT security.
b.) Web Server
Like many other companies, we host our web server with an external service provider in Germany. This ensures that the web server is always kept up to date and that security vulnerabilities can be addressed promptly. Our web server requires certain information from you so that you can access our website and view it properly. This includes:
The browser you use to browse our website.
- Your IP address.
- The name and URL of the file accessed
- The website from which you accessed our site (referrer URL)
- The date and time of your visit.
- Pages you accessed.
This data is automatically deleted by the web server after no more than 7 days. The data is retained for this period so that, in the event of unauthorized access to our web server, we can determine who initiated the attack or where it originated.
The legal basis for this data processing is Article 6(1)(f) of the GDPR. Our legitimate interest stems from the purposes of data collection listed above.
c.) FAQ
For questions not answered by our FAQs, we provide a contact form in the “Contact Us” section. To process or respond to your inquiries, we require at least your email address.
As soon as you submit your inquiry, your data will be transmitted to us by the web server. Please do not include any sensitive data (e.g., bank account information, etc.) in the contact form, as transmission via email is never 100% secure. Your data will only be disclosed to third parties with your consent.
The legal basis for this data processing is Article 6(1)(a) of the GDPR and Article 6(1)(f) of the GDPR.
d.) Newsletter
Data we collect in connection with our newsletter (your email address) is transmitted to a service provider (“MailChimp, ” The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA). MailChimp provides a platform through which we handle the distribution of the newsletter. We have chosen this approach because “MailChimp” greatly simplifies the processing of newsletter subscriptions for us. Thus, only the data required for the newsletter is transmitted.
The legal basis for this data processing is Art. 6(1)(a) of the GDPR.
e.) Privacy Shield
MailChimp is certified under the Privacy Shield. This means that this company, based in the U.S., has committed to aligning its data processing practices with at least the European standard of data protection.
f.) Press Section
In our press section, you have the option to follow our news feed. Your email address is required for this. Your email address will be shared with one of our service providers, “Mynewsdesk,” based in Leipzig (Mynewsdesk GmbH, Hainstraße 20-24, 04109 Leipzig, kontakt@mynewsdesk.com). We use the “Mynewsdesk” service to publish press releases and distribute them to interested parties.
g.) Web Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies,” which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is generally transmitted to a Google server in the United States and stored there. However, if IP anonymization is enabled on this website, your IP address will be truncated by Google beforehand within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google. You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that, in this case, you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address), as well as from processing this data, by downloading and installing the browser plugin available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de). For more information on terms of use and data protection, please visit http://www.google.com/analytics/terms/de.html or http://www.google.com/intl/de/analytics/privacyoverview.html.
Google Analytics cookies are stored in accordance with Article 6(1)(f) of the GDPR. The Louisenlund Foundation has a legitimate interest in the anonymous analysis of user behavior to ensure that the website is designed to meet your needs and is continuously optimized for you.
You can object to the processing of your data in the future by clicking this link to set an opt-out cookie in your browser.
h.) Use of Cookies
Cookies are used on our website (see 5. Use of Cookies).
i.) Online Application
Your personal data is generally deleted immediately after the application process is completed, provided that no contract has been concluded. It will be deleted after a maximum of 18 months if you have consented to the longer storage of your data. The legal basis for processing your applicant data is Section 26(1), Sentence 1 of the German Federal Data Protection Act (BDSG) and, in the case of extended storage, Article 6(1)(a) of the General Data Protection Regulation (GDPR).
j) Facebook Pixel
This website uses Facebook’s visitor action pixels for conversion tracking. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the United States and other third countries.
This allows the behavior of website visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This enables the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.
The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, making it possible to link it to the respective user profile and allowing Facebook to use the data for its own advertising purposes, in accordance with the Facebook Data Use Policy. This enables Facebook to display advertisements on Facebook pages as well as outside of Facebook. As the website operator, we have no influence over this use of the data.
The use of Facebook Pixel is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in effective advertising measures, including those on social media. If consent has been requested (e.g., consent to the storage of cookies), processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR; consent may be withdrawn at any time.
Data transfers to the U.S. are based on the European Commission’s Standard Contractual Clauses. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum
and
https://de-de.facebook.com/help/566994660333381.
To the extent that personal data is collected on our website using the tool described here and forwarded to Facebook, we and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Article 26 of the GDPR). This joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing carried out by Facebook after the transfer is not part of the joint responsibility. The obligations we share have been set forth in a joint processing agreement. The text of the agreement can be found at:
https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing privacy notices when using the Facebook tool and for ensuring the tool is implemented on our website in compliance with data protection laws. Facebook is responsible for the data security of Facebook products. You can exercise your data subject rights (e.g., requests for information) regarding the data processed by Facebook directly with Facebook. If you exercise your data subject rights with us, we are obligated to forward these requests to Facebook.
You can find further information on the protection of your privacy in Facebook’s Privacy Policy: https://de-de.facebook.com/about/privacy/.
You can also disable the “Custom Audiences” remarketing feature in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged into Facebook.
If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.
3.) Your Rights
Right to Object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out pursuant to Article 6(1)(f) of the GDPR (data processing based on a balancing of interests). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
a.) Additional Rights
You have the right of access under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, and the right to data portability under Article 20 of the GDPR. The restrictions set forth in Sections 34 and 35 of the BDSG apply to the rights of access and erasure. In addition, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG) and, pursuant to Art. 7(3) GDPR, to withdraw the consent you have given at any time.
Please direct any such requests to our address listed above (or by email to: info@louisenlund.de).
4.) Validity and Amendments to This Privacy Policy
This Privacy Policy is currently in effect as of November 12, 2019.
Due to the ongoing development of our website and the services offered through it, or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy.
4.) Validity and Changes to This Privacy Policy
This Privacy Policy is currently in effect and is dated December 10, 2024.
Due to the ongoing development of our website and the services offered through it, or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy.