Privacy

Data Protection at a Glance

When you visit our website, we want you to feel safe and comfortable. The protection of your privacy is a high priority for us, as we consider it an important feature of providing high-quality content to our customers. In accordance with Art. 13 of the General Data Protection Regulation (GDPR), we would therefore like to inform you about the handling of your data by Dieter Schwarz Stiftung gGmbH while visiting our website and your rights resulting from this.

Data controller

The controller for processing of data within the meaning of Article 4(7) GDPR as described below is:

Dieter Schwarz Stiftung gemeinnützige GmbH (Dieter Schwarz Foundation, a non-profit limited liability company)
Rötelstraße 35
D-74172 Neckarsulm

Phone: +49 7132 307024
Email: info@dieter-schwarz-stiftung.de

Communication by Email/Telephone/Fax/Mail

Purpose of Data Processing/Legal Basis:

Personal data that you provide to us by email / phone / fax / mail will of course be treated confidentially. We use your data solely for the purpose of processing your inquiry. The legal basis for data processing is Article 6(1)(f) GDPR. Our legitimate interest in the data processing arises from the objective of answering your inquiries and thus ensuring and improving your level of satisfaction.

Recipients/Categories of Recipients:

Data will only be passed on to third parties outside Dieter Schwarz Stiftung if you have expressly consented to the transfer in advance or if we are obliged to do so by law. The legal basis for this data processing is Article 6(1)(a) GDPR (consent) or Article 6(1)(c) GDPR (legal obligation). In exceptional cases, we will have a processor process the data on our behalf. Such processors are carefully selected, audited by us and bound by contract in accordance with Article 28 GDPR.

Storage Period/Criteria for Determining the Storage Period:

We delete or securely anonymize all information we receive from you when you make inquiries no later than 90 days after the final response is sent to you. The information is retained for 90 days in case you contact us again after receiving a response from us on the same matter and we need to refer to our previous correspondence. Based on experience, we generally do not receive any questions concerning our responses after 90 days.

If personal data is processed for purposes other than answering simple inquiries, the personal data will be deleted when it is no longer required for the purpose stated here, unless we are under a legal obligation to store the data for a longer period of time (e.g. by tax, commercial, or trade laws).

If you assert your rights as a data subject, your personal data will be stored for three years after the final response in order to document the fact that we provided you with comprehensive information and that the legal requirements have been met.

Obligation to provide your data

You are under no statutory or contractual obligation to provide personal data to us. If you however chose not to provide us with the data required for the processing of your inquiry, we may not be able to process your inquiry or respond to it.

Use of Cookies

This website uses so-called "cookies" and other similar technologies to process usage data on our websites and the associated subdomains or subpages.

Cookies are small text files that are sent from our web server to your device (PC, notebook, smartphone or tablet) when you visit this website and stored within the Internet browser you are using. The cookies that are used can perform various functions. Cookies store certain information that results in connection with the specific device. However, this does not mean that we receive immediate knowledge about your identity.

You may also configure your browser to ensure that a warning appears every time a new cookie is placed. This makes the use of cookies more transparent for you. You may also configure your browser to refuse acceptance of all or some cookies from certain sources. Please be advised, however, that disabling cookies may limit the functionality of this website.

We use the following cookie:

PHPSESSID: a local, temporary session identifier and serves security purposes by protecting the website (esp. forms) from bot attacks. The cookie is automatically deleted at the end of the session. It therefore does not remain on your device (session cookie).

Additionally, information is stored locally on your device on whether the Consent Management banner was displayed and whether you have given your consent to optional technologies, so that the corresponding banner does not reappear each time you visit the page.

Both techniques belong to the category "technically necessary": these are cookies and similar methods without which you cannot use our services (for example, to properly display our website/functions requested by you, to save your registration in the login area, etc.).

The legal basis for using technically necessary cookies and other technologies is Section 25 (2) No. 2 TTDSG (Telecommunications and Telemedia Data Protection Act). Subsequent data processing is carried out on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR. Our legitimate interest in this regard is a technically stable and safe operation of the website.

Statistical Analysis of the Number of Website Visitors

The website operator automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.

Storage of the IP Address and usage data

Every time you access our website, your web browser transmits usage data. This includes your IP address and a designation of the retrieved content (URL). Without transmission of this data, it is not possible to use the website. In addition, depending on its configuration, your browser transmits further data (browser type, browser version, operating system used, referrer URL, time of server request, host name of the accessing computer).

Additionally, we store the full IP address transmitted by your web browser for a period of seven days in order to be able to detect, limit and eliminate attacks on our websites. After this period, we delete or anonymize the IP address. Our legitimate interest pursuant to Article 6(1)(f) GDPR in regards to this is a technically stable and safe operation of the website.

Personal data that is required for the use of our website based on technological necessity (“technically necessary”) must be provided in order to be able to view the website. Without providing this data, you will not be able to access our website.

Links

Our website may contain links to other websites over which we have no control. Thus, a link to Facebook and Twitter can be found on various sub-pages. In this case, the link alone does not create a direct connection to your Facebook account.

Embedded YouTube Videos

We have embedded YouTube videos on our website, which are stored on http://www.YouTube.com and can be played directly from our website. These are all embedded in "Privacy-Enhanced Mode", which means that no data about you as a user is transmitted to YouTube if you do not interact with the videos. Only when you play the videos, personal data is transferred. We have no influence on this data transmission.

Only after clicking the preview image, third-party content will be downloaded. This interaction provides to the third-party provider with information that you have accessed our site as well and allows transmission of the the usage data technically required in this context. In addition, the third-party provider is then able to implement tracking technologies. We have no influence on the further data processing by the third-party provider. By clicking on the preview image, you give us your consent to download content from the third-party provider.

The legal basis to process your data in context with video interactions is Article 6 (1)(a) GDPR, provided that you have given your consent by clicking on the preview image. Insofar as optional cookies and similar technologies are used in the context of the integration of the service or insofar as data is stored in or read from your device by the service, this is done in accordance with Section 25 (1) TTDSG.

Please note that your data will be processed outside the EU/EEA when you activate the video.

By using the service, your data will be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.
An adequacy decision is in place for the USA (Data Privacy Framework Program) pursuant to which certified companies can demonstrate an adequate level of data protection. Google LLC is certified thereunder and thereby states that your rights as a data subject can be ensured.

For more information on the purpose and scope of data collection and processing by YouTube, please refer to the provider's privacy policy. There you will also receive further information about your rights in this regard and the opportunity to change the settings in order to protect your privacy. YouTube address and privacy policy: Google LLC, 1600 Amphitheatre Parkway. Mountain View, CA 94043, USA; https://www.google.de/intl/de/policies/privacy/.

Google Maps

We have embedded content from Google Maps on our website, which is stored on http://www.google.com/maps and can be accessed directly from our website. These are embedded in such a way that no data about you as a user is transmitted to Google unless you interact with the maps. Only when you interact / activate them, a content is downloaded and data transmitted to Google. We have no influence on this data transmission.

Only after you click on the preview image, third-party content will be downloaded. This provides the third-party with information that you have accessed our site and with the usage data technically required for this purpose. In addition, the third-party provider is then able to implement tracking technologies. We have no influence on the further data processing by the third-party provider. By clicking on the preview image, you give us the consent to download contents of the third-party provider.

The legal basis to process your data in context with video interactions is Article 6 (1)(a) GDPR, provided that you have given your consent by clicking on the preview image. Insofar as optional cookies and similar technologies are used in the context of the integration of the service or insofar as data is stored in or read from your device by the service, this is done in accordance with Section 25 (1) TTDSG. Please note that your data will be processed outside the EU/EEA when you use maps offered by Google Maps.

The data recipient is Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. An adequacy decision is in place for the USA (Data Privacy Framework Program) pursuant to which certified companies can demonstrate an adequate level of data protection. Google LLC is certified thereunder and thereby states that your rights as a data subject can be ensured.

If you do not wish to have your data processed by Google LLC, please do not use the map.

For more information on the purpose and scope of data collection and processing by Google Maps, please refer to the provider's privacy policy. There you will also receive further information about your rights in this regard and the opportunity to change the settings in order to protect your privacy. The terms of use for Google Maps can be found at: http://www.google.com/intl/de_de/help/terms_maps.html.

Detailed information on Google's privacy policy can also be found at: http://www.google.de/intl/de/policies/privacy/.

Matomo (formerly Piwik)

This website uses the web analytics service Matomo. Information collected by Matomo about the use of this website is stored on our server. IP addresses are collected exclusively in a shortened (= anonymous) fashion which is ensured through the use of masking techniques. Therefore, no personal data is being processed.

With the help of Matomo, we are able to collect and analyze data about the way our website is used / interacted with by visitors. This allows us to find out, among other things, time and location for page views. We also collect various log files (e.g. IP address (shortened/anonymized), referrers, browsers used, and operating systems) and can measure whether our website visitors perform certain actions on the website (e.g., clicks, purchases, et cetera).

Hosting

We host Matomo with the following third-party provider:

VON HELDEN UND GESTALTEN GmbH
Rotebühlstrasse 44
70178 Stuttgart

Order processing

We have concluded data processing agreement (DPA) with the processor mentioned above. This is a contract required by data protection law, which ensures that the processor only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

You can object to data collection by Matomo by activating the "Do Not Track" setting in your browser.

Encryption

We take technical and organizational security measures to protect your data from unwanted access as comprehensively as possible. In addition to securing the operating environment, we use encryption procedures. The information you provide is transmitted in encrypted form using a TLS (Transport Layer Security) protocol and authentically verified to prevent misuse of the data by third parties. You can recognize this by the closed lock symbol in the status bar of your browser and "https...." at the beginning of the address bar.

Registration for the School Award Competition

You can register for the Dieter Schwarz Foundation School Award on our website.

The competition is organized by our cooperation partner

Akademie für Innovative Bildung und Management Heilbronn-Franken gemeinnützige GmbH

(AIM; Academy for Innovative Education and Management Heilbronn-Franken, a non-profit limited liability company)
Bildungscampus 7
D-74076 Heilbronn

Email address: info@aim-akademie.org

For the processing of your data in regards to the School Award, Dieter Schwarz Stiftung and AIM are joint controllers within the meaning of Article 26 GDPR. Information on the specifics of the joint controllership can be found in the following PDF.

When registering, the data you provide will be transmitted to AIM for the purpose of running the School Prize competition. The legal basis is Article 6(1)(f) GDPR, with the legitimate interest being the registration for the School Award.

For your registration, the following personal data will be processed: Full name, e-mail address, telephone number, job title, school, and type of school.

After submitting the registration, you will receive a confirmation e-mail from AIM.

Your data will not be stored by the Dieter Schwarz Foundation.

BASED ON ARTICLE 21 GDPR, YOU HAVE THE RIGHT TO OBJECT TO DATA PROCESSING BASED ON ARTICLE 6(1)(f) GDPR AT ANY TIME. WE WILL THEN NO LONGER PROCESS THE PERSONAL DATA YOU HAVE PROVIDED, UNLESS THERE ARE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE DATA IS SILL NEEDED FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

YOU CAN ADDRESS THE OBJECTION TO US, PREFERABLY TO INFO@DIETER-SCHWARZ-STIFTUNG.DE, OR TO THE CONTROLLER MENTIONED ABOVE.

IF YOUR DATA HAS ALREADY BEEN FORWARDED TO AIM, WE WILL OF COURSE FORWARD YOUR REQUEST TO AIM.

Your Data Protection Rights

Right of access (Article 15 GDPR): You have the right to obtain confirmation as to whether personal data concerning you is being processed; if this is the case you have the right to be informed about this personal data and to the information specified in Article 15 GDPR.

Right to rectification and erasure (Articles 16 and 17 GDPR): You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, if necessary, the right to have incomplete personal data completed. You also have the right to request that personal data relating to you shall be deleted without undue delay if one of the reasons listed in Article 17 GDPR applies, e.g. if the data is no longer needed for the purposes for which it was collected.

Right to restriction of processing (Article 18 GDPR): If one of the conditions set forth in Article 18 GDPR applies, you shall have the right to restrict the processing of your data to mere storage, e.g. if you revoke consent, to the processing, for the duration of a possible examination.

Right to data portability (Article 20 GDPR): In certain cases, which are listed in detail in Article 20 GDPR, you have the right to receive the personal data concerning you in a structured, well-established and machine-readable format, respectively to request the transfer of this data to a third party.

Right to object (Article 21 GDPR): If the data is collected on the basis of Article 6(1)(f) GDPR (data processing for the purposes of the legitimate interests), you have the right to object to the processing at any time for reasons arising out of your particular situation. We will then no longer process personal data, unless there are demonstrably compelling reasons for processing, that are worthy of protection and override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If the data are processed on the basis of the legitimate interest for the purpose of direct marketing, you have your own right of objection, which you may exercise at any time without giving reasons and the exercise of which will lead to the termination of the processing for the purpose of direct marketing.

In the aforementioned cases, in the event of open questions or in the event of complaints, please contact the data protection representative (indicated below) in writing or by e-mail.

Right to lodge a complaint with a supervisory authority: According to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of the data concerning you infringes data protection regulations. In particular, the right to lodge a complaint may be invoked before a supervisory authority in the member state where you are resident, your place of work or the place of the suspected infringement. In Germany, the competent authority is the data protection supervisory authority of the federal state in which you live or in which the data controller is based.

Contact Details of the Data Protection Officer:

Our external data protection representative will be pleased to provide you with information on the subject of data protection:

datenschutz süd GmbH
Wörthstraße 15
D-97082 Würzburg
Web: www.datenschutz-nord-gruppe.de
Email: office@datenschutz-sued.de