Thank you for visiting our website and for your interest in the Alfred Landecker Foundation and our activities.

As the body responsible for processing the personal data of our website visitors, we attach great importance to compliance with data protection regulations. We will therefore explain everything you need to know about data protection on this website so that you can feel secure when you visit us online.

In principle, it is possible to visit our website without providing any personal data. However, if you wish to make use of special services that we make available on our website, it may be necessary to process personal data. If this processing of personal data is necessary and there is no legal basis for such processing, we will obtain your consent before processing.

The processing of your personal data, such as your name, address, email address or telephone number, is always carried out in compliance with the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), as well as in accordance with any country-specific data protection regulations that may apply to us. In this privacy policy, we inform you about the type, scope and purpose of the personal data processed by us and the rights to which you are entitled as a data subject under data protection law.

We have implemented numerous technical and organisational measures in advance to ensure that the personal data processed via this website is protected as completely as possible. Nevertheless, Internet-based data transmissions (e.g. e-mail) can generally have security gaps, so that absolute protection cannot always be guaranteed. This is particularly the case if the transmissions take place outside our sphere of influence. For this reason, you are always free to transmit personal data to us by alternative means, for example by telephone, post or in person.

General information

Person responsible

The controller within the meaning of the General Data Protection Regulation is

Alfred Landecker Foundation
Jägerstr. 51
10117 Berlin

E-mail: mail@alfredlandecker

Data Protection Officer

We have appointed an external data protection officer:

Sebastian Koye
data protection clinic
Tullastr. 89
79108 Freiburg

Phone: 0761-76 99 25 50
E-mail: datenschutz(at)datenschutzklinik.de
Web: www.datenschutzklinik.de

Webhosting

We host the content of our website with the provider subism Ltd, Unit 6 Heritage Business Centre, Derby Road, Belper, Derbyshire, DE56 1SW, United Kingdom. When you visit our website, subism collects various log files including your IP address.

The use of subism is based on Art. 6 (1) lit. f) GDPR. We have a legitimate interest in displaying our website as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) lit. a) GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. for device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which guarantees that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

SSL encryption

We use SSL encryption on our website in order to protect your transmitted data (e.g. via the contact form) from unauthorised third-party access in the best possible way. Such a secure connection can be recognised by the prefix "https://" in the URL of your address line, e.g:

https://www.alfredlandecker.or...

For unencrypted ones, the prefix looks like this: http://

Storage duration

One criterion for the duration of the storage of personal data is the respective statutory retention period. Two common regulations are listed below as examples:

• 6 years in accordance with § 257 (1) HGB (trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers, etc.)
  
• 10 years in accordance with § 147 (1) AO (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.)

After this period has expired, the corresponding data is routinely deleted, provided it is no longer required for contract fulfilment or contract initiation.

If no more specific storage period has been specified in this privacy policy or in further information on additional tools mentioned, your personal data will remain with us until the purpose for data processing no longer applies.

If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, deletion will take place after these reasons no longer apply.

Legal basis

If you have consented to data processing, we process your personal data on the basis of Art. 6 (1) lit. a) GDPR or Art. 9 (2) lit. a) GDPR, insofar as special categories of data are processed in accordance with Art. 9 (1) GDPR. In the event of express consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 (1) lit. a) GDPR.

If you have consented to the storage of cookies or access to information in your end device (e.g. via device fingerprinting), the data processing takes place on the basis of § 25 (1) TDDDG. Consent can be revoked at any time.

If your data is required for the fulfilment of the contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 (1) lit. b) GDPR.

Furthermore, we process your data if this is necessary to fulfil a legal obligation on the basis of Art. 6 (1) lit. c) GDPR. Data processing may also be carried out on the basis of our legitimate interest in accordance with Art. 6 (1) lit. f) GDPR. Information on the relevant legal bases in each individual case is provided in the following paragraphs of this privacy policy.

Collection of general data via this website

Cookies

We use cookies on our website. These are small text files that are stored on your computer system via an internet browser (e.g. Firefox, Chrome, Safari, Edge, Internet Explorer, Opera). They can have various functions on the website. Many cookies are technically necessary to ensure that the website can be displayed correctly (e.g. displaying videos). Other cookies are used to evaluate user behaviour or display advertising. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser.

As we also use other tools for optimisation or statistical purposes, cookies from third-party companies may also be stored on your device when you visit our website (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for storing a shopping basket or the processing of payment services).

Those cookies that are required to carry out electronic communication processes, to provide certain functions that you have requested (e.g. for the shopping basket function) or to protect the website (e.g. cookies to prevent attacks on the website) (necessary cookies) are stored on the basis of Art. 6 (1) lit. f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of necessary cookies for the technically error-free and optimised provision of its services.

If consent to the storage of cookies and comparable recognition technologies has been requested, the processing is carried out exclusively on the basis of this consent (Art. 6 (1) lit. a) GDPR and § 25 (1) TDDDG); the consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you about this separately in the context of this data protection declaration and, if legally required, obtain your consent.

We use the following cookies:

Necessary cookies

Without these cookies for the basic functions, our website could not be displayed correctly. We also need to be able to save your consent and your selection for additional functions, advertising and analyses.

Cookie: __cf_bm
Duration: will be cancelled after 1 hour
Description: Cloudflare sets the cookie to support Cloudflare Bot Management. This function is used to protect our website from attacks by malicious bots.

Cookie: cookieyes-consent
Duration: will be deleted after 1 year
Description: CookieYes sets this cookie to store the user's consent preferences so that their preferences are taken into account on subsequent visits to this website. No personal information about visitors to the website is collected or stored.

Cookie: CRAFT_CSRF_TOKEN
Duration: will be deleted at the end of the session
Description: CRAFT CMS sets this cookie to prevent attacks by means of cross-site request forgery when using forms.

Functional cookies

These cookies contain additional functions for displaying videos. Your personal data (IP address, browser fingerprint, end device information) is transferred to the video platform operator YouTube, including to the USA, in order to save your browser settings and display preferences. These cookies are deactivated by default. We have activated a mechanism on your first visit (a so-called consent banner or cookie banner), which allows you to activate these cookies.

Cookie: yt-remote-device-id
Duration: Never expires
Description: YouTube sets this cookie to store the user's video preferences using embedded YouTube videos

Cookie: yt-remote-connected-devices
Duration: Never expires
Description: YouTube sets this cookie to store the user's video preferences using embedded YouTube videos

Cookie: yt-remote-session-app
Duration: is deleted at the end of the session
Description: YouTube sets this cookie to store user preferences and information about the interface to the video player embedded on the page

Cookie: yt-remote-cast-installed
Duration: is deleted at the end of the session
Description: YouTube sets this cookie to store the user preferences of the video player used by the video embedded on the page

Cookie: yt-remote-session-name
Duration: is deleted at the end of the session
Description: YouTube sets this cookie to store the user preferences of the video player used by the video embedded on the page

Cookie: yt-remote-fast-check-period
Duration: is deleted at the end of the session
Description: YouTube sets this cookie to store the user preferences of the video player used by the video embedded on the page

Cookie: __Secure-ROLLOUT_TOKEN
Duration: will be deleted after 6 months
Description: YouTube sets this cookie to link user interactions with user preferences

Analysis cookies

We use these cookies to analyse the use of our website. Personal data (IP address, website from which you visited us, subpages visited on our website, browser fingerprint) is collected in the process. This data is also transferred to the USA and analysed there. This cookie is deactivated by default. We have activated a mechanism on your first visit (a so-called consent banner or cookie banner), which allows you to activate this cookie.

Cookie: _cfuvid
Duration: is deleted at the end of the session
Description: Calendly sets this cookie to track the user across multiple sessions on different websites, so that session stability is maintained and customised content can be displayed.

Advertising cookies

These cookies are used to display personalised advertising based on the websites you have previously visited. For this purpose, personal data (IP address, browser fingerprint, browser history) is processed and also transferred to the USA, where it is then analysed. These cookies are deactivated by default. We have activated a mechanism on your first visit (a so-called consent banner or cookie banner), which allows you to activate these cookies.

Cookie: YSC
Duration: is deleted at the end of the session
Description: YouTube sets this cookie to track views of videos embedded on the site

Cookie: VISITOR_INFO1_LIVE
Duration: Will be deleted after 6 months
Description: YouTube sets this cookie to measure bandwidth and determine whether the user receives the new or old player interface

Cookie: VISITOR_PRIVACY_METADATA
Duration: Will be deleted after 6 months
Description: YouTube sets this cookie to save
the cookie consent setting for this page

Cookie: yt.innertube:::requests
Duration: Never expires
Description: YouTube sets this cookie to collect a unique ID and store data about which YouTube videos the user has watched

Cookie: yt.innertube:::nextId
Duration: Never expires
Description: YouTube sets this cookie to collect a unique ID and store data about which YouTube videos the user has watched

Contact via the website

On our website you will find a contact form that allows you to contact our company quickly and communicate with us directly. For this purpose, we use a general e-mail address to which several internally authorised persons have access.

If a data subject contacts us by email or via a contact form, the personal data transmitted by the data subject will be stored automatically. Such personal data transmitted to us on a voluntary basis by a data subject will be stored for the purpose of processing or contacting the data subject in accordance with Art. 6 (1) lit. a) GDPR. This personal data is not passed on to third parties.

If your enquiry is related to the fulfilment of a contractual obligation or is necessary for the implementation of pre-contractual measures, the processing is based on Art. 6 (1) lit. b) GDPR.

Contact via e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your enquiry including all personal data (name, enquiry) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.

This data is processed on the basis of Art. 6 (1) lit. b) GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 (1) lit. f) GDPR) or on your consent (Art. 6 (1) lit. a) GDPR) if this has been requested; consent can be revoked at any time.

The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

Collection of log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer Time of the server enquiry
• IP address

This data is not merged with other data sources.

This data is collected on the basis of Art. 6 (1) lit. f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website, which requires the collection of server log files.

Use of additional tools and plugins

YouTube

We have integrated YouTube videos on our website. YouTube is operated by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. For example, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video.

For this reason, we have introduced an opt-in procedure for the display and playback of YouTube videos, which prevents data transmission without your prior consent. processing is carried out exclusively on the basis of Art. 6 (1) lit. a) GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged in to your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, YouTube can store various cookies on your end device after starting a video or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to record video statistics, improve user-friendliness and prevent fraud attempts.

Further information about data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=de.

Use of analysis and advertising tools

Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This is a tool that enables us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store any cookies and does not carry out any independent analyses. It is only used to manage and display the tools integrated via it. However, Google Tag Manager records your IP address, which may also be transmitted to Google's parent company in the United States.

For this reason, we have implemented an opt-in procedure for the activation of the Google Tag Manager, which prevents the transfer of data without your prior consent. Processing is therefore carried out exclusively on the basis of Art. 6 (1) lit. a) GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. The website operator receives various usage data, such as page views, length of visit, operating systems used and origin of the user. This data is summarised in a user ID and assigned to the respective end device of the website visitor.

Google Analytics can also record your mouse and scroll movements, as well as clicks on buttons, for example. Google Analytics also uses various modelling approaches to supplement the recorded data records and uses machine learning technologies for data analysis.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there.

For this reason, we have implemented an opt-in procedure for the use of the above-mentioned service, which prevents data transmission without your prior consent. This means that the processing is carried out exclusively on the basis of Art. 6 (1) lit. a) GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:

https://privacy.google.com/bus....

You can prevent the collection and processing of your data by Google by downloading and installing the browser plug-in available at the following link:

https://tools.google.com/dlpag....

You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

An order processing contract (AVV) was concluded with Google in accordance with Art. 28 GDPR in order to comply with the data protection regulations.

Google Ads

We use Google Ads on our website. This is an online advertising programme of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display adverts in the Google search engine or on third-party websites when the user enters certain search terms in Google (keyword targeting). Furthermore, targeted adverts can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analysing, for example, which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.

For this reason, we have implemented an opt-in procedure for the use of the above-mentioned service, which prevents data transmission without your prior consent. This means that the processing is carried out exclusively on the basis of Art. 6 (1) lit. a) GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. browser history) within the meaning of the TDSG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:

https://policies.google.com/privacy/frameworks and https://privacy.google.com/bus....

An order processing contract (AVV) was concluded with Google in accordance with Art. 28 GDPR in order to comply with the data protection regulations.

Your rights as a data subject

Deletion and blocking of personal data

We only store your personal data for as long as is necessary for the purpose for which it was stored or for as long as this is permitted by the European legislator or a country-specific legislator in laws or regulations to which we are subject.

If the storage purpose no longer applies or if a storage period prescribed above expires, your personal data will be blocked or deleted in accordance with the statutory provisions.

Rights of the data subject

Right to information (Art. 15 GDPR)

You have the right to receive information from us at any time and free of charge as to whether we store personal data about you.

If this is the case, you have the right to the following information:

The purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations, where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period, if this is not possible, the criteria for determining this duration the existence of a right to rectification or erasure of the personal data concerning them or to restriction of processing by us or a right to object to this processing the existence of a right to lodge a complaint with a supervisory authority if the personal data is not collected from the data subject: All available information on the origin of the data the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR and, in these cases, meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

If you wish to assert your right to information, you can contact one of our employees at any time.

Right to rectification (Art. 16 GDPR)

You have the right to demand the immediate correction of incorrect personal data concerning you. You also have the right to request the completion of incomplete personal data, including by means of a supplementary declaration, taking into account the purposes of the processing.

If you wish to assert your right to rectification, you can contact one of our employees at any time.

Right to erasure (Art. 17 GDPR)

You have the right to demand that we erase personal data concerning you without undue delay, provided that one of the following reasons applies and insofar as the processing is not required by other statutory provisions:

• If one of the above reasons applies and you wish to arrange for the deletion of personal data stored by us, you can contact one of our employees at any time.
• If we have made the personal data public and our company is obliged to erase the personal data as the controller in accordance with Art. 17 (1) GDPR, we will take reasonable steps, taking into account the technical possibilities available and the implementation costs, to inform other controllers (e.g. processors) who process your published personal data that you have requested the erasure of your personal data, copies or replications from these other controllers. This is done unless the processing is required by other legal provisions.
• Your personal data has been collected or otherwise processed for purposes for which it is no longer necessary.
• You withdraw your consent on which the processing was based according to Art. 6 (1) lit. a) GDPR or Art. 9 (2) lit. a) GDPR, and where there is no other legal ground for the processing.
• You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 (2) GDPR.
• Your personal data has been processed unlawfully.
• The deletion of your personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we are subject as the responsible body.
• The personal data was collected in relation to information society services offered in accordance with Art. 8 (1) GDPR.

If you wish to assert your right to cancellation, you can contact one of our employees at any time.

Right to restriction of processing (Art. 18 GDPR)

You have the right to demand that we restrict processing if one of the following conditions is met:

• One of the above conditions applies and you request the restriction of personal data stored by us.
• The accuracy of the personal data is contested by you, for a period enabling us as the controller to verify the accuracy of the personal data.
• The processing is unlawful, you oppose the erasure of your personal data and request the restriction of the use of your personal data instead.
• We no longer need the personal data for the purposes of the processing, but you need your personal data for the establishment, exercise or defence of legal claims and wish, for example, to prevent erasure.
• You have lodged an objection to the processing pursuant to Art. 21 (1) GDPR and it is not yet clear whether the legitimate reasons of us as the controller outweigh those of you as the data subject.

If you wish to exercise your right to restrict processing, you can contact one of our employees at any time.

Right to data portability (Art. 20 GDPR)

You have the right to receive personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format.

You also have the right to have this data transmitted to another controller without hindrance from us, provided that the processing is based on consent pursuant to Art. 6 (1) lit. a) GDPR or Art. 9 (2) lit. a) GDPR or on a contract pursuant to Art. 6 (1) lit. b) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, you have the right to data portability in accordance with Art. 20 (1) GDPR and may request that your personal data be transferred directly from us to another controller without hindrance or disadvantage, insofar as this is technically feasible and provided that this does not adversely affect the rights and freedoms of other persons.

If you wish to assert your right to data transfer, you can contact one of our employees at any time.

Right to object (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Art. 6 (1) GDPR. This also applies to profiling based on these provisions.

In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

If we process personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. This also applies to profiling insofar as it is associated with such direct advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

To exercise your right to object, you can contact one of our employees directly. You are also free to exercise your right to object in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.

Right to withdraw consent under data protection law (Art. 7 (3) GDPR)

You have the right to withdraw your consent to the processing of your personal data at any time.

If you wish to exercise your right to withdraw your consent, you can contact one of our employees at any time.

Right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR)

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes this Regulation.

Personal data within the application process

If you send us an application, we process your personal data for the purpose of handling the application process. Processing may also take place electronically. This is particularly the case if an applicant sends us the relevant application documents electronically, for example by e-mail or via a web form on the website. If an employment contract is concluded with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions.

If no employment contract is concluded with the applicant, the application documents will be deleted six months after notification of the rejection decision, provided that deletion does not conflict with any other legitimate interests of the controller. Other legitimate interest in this sense is, for example, the retention of evidence in proceedings under the General Equal Treatment Act (AGG).

It may also be possible to include you in our applicant pool if we have not made you a job offer in response to your application. If you are accepted, all documents and details from your application will be transferred to the applicant pool so that you can be contacted in the event of suitable vacancies.

Inclusion in the applicant pool takes place exclusively on the basis of your express consent in accordance with Art. 6 (1) lit. a) GDPR. Giving your consent is voluntary and is not related to the current application process. You can withdraw your consent at any time. In this case, the data will be irrevocably deleted from the applicant pool, provided there are no legal reasons for retention. Irrespective of this, the data from the applicant pool will be irrevocably deleted no later than two years after consent has been granted.