We collect, process and use your personal information only to the extent permitted by the relevant data protection law. Personal information is any information that can be used to identify you personally.

In the following, we inform you about the type, scope, and purpose of data collection, processing, and use on our website at www.w-s-w.org .

Name and contact details of the responsible entity
The entity responsible for the website located at www.w-s-w.org is:
Wübben Wissenschaftsstiftung gGmbH
Hausvogteiplatz 3-4
10117 Berlin
T +49 30 26103130
info@w-s-w.org

What type of data do we collect and why?
Some of the data we collect is provided by you. This could be, for instance, information that you enter on a contact form. Other information is collected by our IT systems when you visit our website, either automatically or when you give your consent. This information is primarily technical (e.g. internet browser, operating system, or the time you accessed the page). This information is collected automatically as soon as you visit the website.

What do we use your information for?
Some of the information we collect ensures that the website functions correctly. Other information may be used to analyze your use of the website.

What are your data protection rights?
You have the right to ask us for information about the origin, recipients, and purpose of the personal data we hold about you, free of charge and at any time. You also have the right to ask us to rectify or erase this information. If you have consented to data processing, you can withdraw this consent at any time with future effect. In addition, you have the right in certain circumstances to ask us to restrict the processing of your personal information. Furthermore, you have the right to make a complaint to the relevant regulatory authority. You can contact us at any time for information about this and with any other questions about data protection.

Analytics and third-party tools
When you visit our website, your browsing behavior can be statistically analyzed. This is done primarily by analytics programs. You can find detailed information about these analytics programs in the following privacy notice.

HOSTING

This website is hosted externally. Personal data collected on this website is stored on the servers of the host(s). This information may include, in particular, IP addresses, contact requests, metadata and communications data, contract data, contact information, names, website traffic, and other data generated through a website.

The external host is used for the purpose of fulfilling the contract with our potential and existing customers (Article 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online services by a professional provider (Article 6(1)(f) GDPR). If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications and Telemedia Data Protection Act (TTDSG), insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g. device fingerprinting) within the meaning of the TTDSG. Such consent can be withdrawn at any time.

Our host(s) will only process your data to the extent necessary to fulfill their performance obligations and will follow our instructions in relation to this information.

We use the following host:
E-Fork GmbH & Co.KG
Seifhennersdorfer Str. 4-8 | 01099 Dresden
hallo@e-fork.de | +49(0)351-899 609 30
https://www.e-fork.de/de

Data processing agreement
We have entered into a data processing agreement (DPA) for the use of the service mentioned above. This is a contract required by data protection law to ensure that the service provider processes the personal information of our website visitors only in accordance with our instructions and in compliance with the GDPR.

GENERAL INFORMATION AND MANDATORY INFORMATION
Retention period
Unless a specific storage period is stated within this privacy notice, we will store your personal data until the purpose for processing the data ceases to apply. If you submit a legitimate request to erase your data or withdraw your consent to data processing, your data will be deleted, unless we have other legally permissible grounds for storing your personal information (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted when these grounds cease to apply.

General information on the legal basis for data processing on this website
If you have given your consent to data processing, we will process your personal information on the basis of Article 6(1)(a) or Article 9(2)(a) GDPR or, where special data categories are processed, in accordance with Article 9(1) GDPR. If you have opted in to the transfer of personal data to third countries, data processing will also take place on the basis of Article 49(1)(a) GDPR. If you have opted in to the storage of cookies or access to information on your end device (e.g. via device fingerprinting), data processing will also be carried out on the basis of Section 25(1) TTDSG. You can withdraw your consent at any time. If your information is required to perform the contract or to take steps prior to entering into a contract, we will process your information on the basis of Article 6(1)(b) GDPR. Furthermore, if your information is required to fulfill a legal obligation, we will process it on the basis of Article 6(1)(c) GDPR. Data processing may also take place on the basis of our legitimate interest in accordance with Article 6(1)(f) GDPR. Information about the relevant legal basis in each case is provided below.

Withdrawing your consent to data processing
Many types of data processing are only possible with your express consent. You can withdraw your consent at any time. The lawfulness of the data processing carried out prior to you withdrawing your consent is not affected.

Your right to object to data collection in special cases and to direct marketing (Article 21 GDPR)
If data processing is carried out on the basis of article 6(1)(e) or (f) gdpr, you have the right to object to the processing of your personal information at any time for reasons arising from your personal situation; this also applies to profiling based on these provisions. The legal basis for processing can be found in this privacy notice. If you object, we will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing is for the purpose of asserting, exercising, or defending legal claims (objection pursuant to article 21(1) gdpr).

If your personal information is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of this kind of marketing; this also applies to profiling, insofar as it is related to direct marketing. If you object, your personal information will no longer be used for the purpose of direct marketing (objection pursuant to article 21(2) gdpr).

Your right to complain to the relevant regulatory authority
In the event of a breach of the GDPR, those affected have the right to complain to a regulatory authority, particularly in the Member State in which they usually live or work, or where the alleged breach occurred. This right to complain exists without prejudice to legal remedies provided elsewhere under administrative law or through the courts.

Your right to data portability
You have the right to receive, or have transmitted to a third party, in a commonly used, machine-readable format, data that we process on the basis of your consent, or in an automated manner when performing a contract. If you request that the data be transmitted directly to another data controller, this will happen only where technically possible.

Access, rectification, and erasure
You have the right, under the legislation in force, to request access to your stored personal information at any time, and to receive information about its origin and recipients, and the purpose of the data processing, and, where relevant, a right to have this information rectified or erased. You can contact us at any time about this or with any other questions concerning your personal data.

Your right to restrict processing
You have the right to request the restriction of processing of your personal information. You can contact us at any time about this. The right to restrict processing exists in the following cases:

If you challenge the accuracy of the data we hold concerning you, we will generally require some time to check this. Pending verification, you have the right to request that we restrict processing of your personal data.

If your personal data has been/is being processed unlawfully, you can request restriction of processing instead of erasure.

If we no longer need your personal data but you need it in order to exercise, defend, or establish a legal claim, you have the right to request restriction of processing instead of erasure.

If you have lodged an objection under Article 21(1) GDPR, we have to weigh up your interests and our own. Pending verification, you have the right to request restriction of processing of your personal data.

If you have restricted the processing of your personal data, this data shall, with the exception of storage, be processed only with your consent or for the establishment, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

SSL/TLS encryption
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content such as orders or inquiries that you send to us as the website operator. You can recognize an encrypted connection by the fact that the address bar in your browser window changes from “http://” to “https://” and by the padlock symbol. When SSL/TLS encryption is active, the data you transmit to us cannot be read by third parties.

DATA COLLECTION ON THIS WEBSITE
No cookies
We consciously avoid using tracking, marketing, and other commercial cookies. 

Server log files
The website provider automatically collects and stores information in server log files that your browser automatically transmits to us.

This information comprises:
Browser type and version
Operating system used
Referrer URL
Hostname of the device accessing the website
Time of the server request
IP address
This information is not linked to other data sources.

This data is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the error-free technical presentation and optimization of its website, and the server log files must be collected for this purpose.

Inquiries by email, telephone, or fax
If you contact us by email, telephone, or fax, we will store and process your inquiry, including all personal information contained in it (name, inquiry) for the purpose of dealing with your request. We will not share this data without your consent.

This data is processed on the basis of Article 6(1)(b) GDPR, provided your inquiry is in connection with the performance of a contract or is necessary for taking steps prior to entering into a contract. In all other cases, the legal basis for processing your data is our legitimate interest in dealing effectively with the inquiries addressed to us (Article 6(1)(f) GDPR) or your consent (Article 6(1)(a) GDPR), provided this was obtained; you can withdraw your consent at any time.

The data you send to us via contact requests remains with us unless you ask us to erase it, withdraw your consent to storage, or if the purpose of the data storage ceases to apply (e.g. once your request has been dealt with). Mandatory legal provisions – in particular legal periods of retention – remain unaffected.

NEWSLETTER
Newsletter data
If you would like to subscribe to the newsletter offered through the website, we will need your email address and information that enables us to check that you are the owner of the email address provided, and that you agree to receive the newsletter. Other data is not collected, or only on a voluntary basis. In order to provide the newsletter, we use newsletter service providers, who are described below.

Brevo
This website uses Brevo to send out newsletters. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

Brevo is a service that can be used, among other things, to organize and analyze the sending of newsletters. The information you enter to subscribe to the newsletter is stored on Sendinblue’s servers in Germany.

Data analysis by Brevo
With the help of Brevo we are able to analyze our newsletter campaigns. For example, we can see whether a newsletter has been opened and which links were clicked on, if any. Among other things, this enables us to find out which links were clicked on particularly often. Furthermore, we can tell whether certain predefined actions took place after the newsletter was opened/link was clicked (conversion rate). Brevo also enables us to subdivide (“cluster”) newsletter recipients according to various categories. For instance, newsletter recipients can be subdivided according to age, gender, or place of residence. This allows us to improve the way we tailor the newsletters to the different target groups.

If you do not want Brevo to carry out this analysis, you will have to unsubscribe from the newsletter. We provide a link for this purpose in every newsletter email.

For detailed information about the Brevo functions, please see www.brevo.com.

Legal basis
Data processing takes place on the basis of your consent (Article 6(1)(a) GDPR). You can withdraw this consent at any time. This does not affect the lawfulness of the data processing carried out prior to you withdrawing your consent.

Retention period
The data you send us for the purpose of subscribing to the newsletter will be stored by us or by the newsletter service provider until you unsubscribe from the newsletter, and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored for other purposes is not affected by this.

After you have been removed from the newsletter distribution list, we or the newsletter service provider may store your email address in a blacklist if this is necessary to prevent future mailings. The data from the blacklist is used exclusively for this purpose and is not linked to other data. This serves your interest as well as our own interest in complying with the legal requirements when sending newsletters (legitimate interest pursuant to Article 6(1)(f) GDPR). Data retention in the blacklist is indefinite. You can object to storage if your interests outweigh our legitimate interest.

For further details, please see Brevo's data protection provisions (in German): https://www.brevo.com/de/datenschutz-uebersicht.

Data processing agreement
We have entered into a data processing agreement (DPA) for the use of the service mentioned above. This is a contract required by data protection law to ensure that the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.