Privacy policy

1. Controller

Controller: Heinrich Lanz Stiftung ö. R., Bassermannstraße 51, 68165 Mannheim, Deutschland
e-mail: kontakt@heinrich-lanz-stiftung.de, phone: +49 (0)6232 34911

2. collection and storage of personal data and the nature and purpose of their use

a) When visiting the website

When you visit our website www.heinrich-lanz-stiftung.de/en, the browser used on your device automatically sends information to our website`s server. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • Website from which the access is made (referrer URL),
  • the browser used and, if applicable, the operating system of your computer and the name of your access provider. We process the aforementioned data for the following purposes:
  • Ensuring a smooth connection to the website,
  • Ensuring a comfortable use of our website,
  • Evaluation of system security and stability and
  • for further administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.

However, we do not use any other analytics services when you visit our website.

b) Communication

As part of our activities, we process (contact) data (in particular first and last name, telephone number, e-mail address, postal address) of our partners, donors, sponsored persons and their employees or their service providers as well as other third parties and communicate with them, in which further personal data is collected. In this context, we also process data that we do not receive directly from you, but from others.

This is done, for example, to initiate a business transaction, to fulfil the purpose of our foundation, to organise and manage our foundation, to fulfil legal obligations or generally to be able to communicate with you.

The legal basis for the processing of your personal data is primarily Art. 6 para. 1 lit. f GDPR (legitimate interests, e.g. in the sense of a desired business initiation, fulfilment of our contractual/foundation and statutory obligations, organisation of our foundation or fulfilment of an information request) and Art. 6 para. 1 lit. c GDPR (fulfilment of legal obligations).

The data collected is stored for as long as it is needed, i.e. as long as it is required to fulfil the purpose for which it was collected. In addition, we store personal data due to retention and documentation obligations under tax and commercial law (e.g. HGB, StGB or AO), according to which we are obliged to store data for a longer period of time. We usually store communication data such as e-mails and telephone notes as business letters for 6 years to the end of the year. Connection records and MS Teams communication are subject to a shorter deletion period.

3. disclosure of data

We only pass on your personal data to third parties if:

Your personal data will not be transferred to third parties for purposes other than those listed below.

  • you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
  • the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
  • in the event that there is a legal obligation for disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
  • this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

4. cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.

On the one hand, the use of cookies serves to make the use of our website more pleasant for you. For example, we use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a specified period of time. If you visit our site again to use our services, it is automatically recognised that you have already visited us and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you (see section 5). These cookies enable us to automatically recognise that you have already visited our website when you visit it again. These cookies are automatically deleted after a defined period of time.

The data processed by cookies are necessary for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.

5. social media

YouTube

On our website, we use components (videos) from YouTube, LLC 901 Cherry Ave, 94066 San Bruno, CA, USA, a company of Google Inc, Amphitheatre Parkway, Mountain View, CA 94043, USA.

We use the " - extended data protection mode - " option provided by YouTube.

When you access a page that has an embedded video, a connection to the YouTube servers is established and the content is displayed on the website by notifying your browser. According to YouTube, in " - extended data protection mode -" only data is transmitted to the YouTube server, in particular which of our websites you have visited when you watch the video. If you are logged in to YouTube at the same time, this information will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website.

Further information on data protection from YouTube is provided by Google under the following link:
https://www.google.de/intl/de/policies/privacy/

The use of YouTube on our website takes place exclusively on the basis of your consent and only if you have given your consent in the context of our cookie notice and consent option. The legal basis is then Art. 6 para. 1 sentence 1 lit. a GDPR.

6. rights of data subjects

You have the right:

  • to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;
  • in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
  • to demand the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
  • in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
  • in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller;
  • in accordance with Art. 7 para. 3 GDPR, to revoke your consent once given to us at any time. The consequence of this is that we may no longer continue the data processing that was based on this consent in the future and
  • to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office.

7. right of objection

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

If you wish to exercise your right of cancellation or objection, simply send an e-mail to kontakt@heinrich-lanz-stiftung.de

8. data security

We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit our website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognise whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

8. topicality and amendment of this privacy policy

This privacy policy is currently valid and has the status May 2025.

It may become necessary to amend this privacy policy as a result of the further development of our website and services or due to changes in legal or official requirements. You can access and print out the current privacy policy at any time on the website at https://www.heinrich-lanz-stiftung.de/en/privacy.