Data Privacy

Thank you for visiting our website and for your interest in our project. We take the protection and security of your personal data seriously and want you to feel secure when visiting our website and using our internet services and to know which personal data is processed when you use our internet services.

PRIVACY POLICY

The operator of this website – hereinafter referred to as the operator – attaches the utmost importance to protecting the privacy of its website visitors – hereinafter referred to as users. The processing of all data provided to the operator is carried out exclusively in strict compliance with the General Data Protection Regulation (EU GDPR) and all other data protection laws or provisions of a data protection nature applicable in the member states of the EU. This applies in particular to the processing of personal data. The following provisions also apply to the operator's programme partner database.

In close cooperation with our hosting providers, we endeavour to protect the databases as well as possible against unauthorised access, loss, misuse or falsification.

When our websites are accessed, the following data is stored in log files IP address, date, time, browser request and general information transmitted about the operating system or browser and usage behaviour. This usage data forms the basis for statistical, anonymous analyses so that trends can be identified, which we can use to improve our services accordingly.

Controller responsible for data processing

Responsible for the processing within the meaning of the data protection regulations is

AK. Culture. Marketing, Sales, Service
Anna Kleeblatt
Ballaufstr. 9
81735 Munich
E-mail: kontakt@kleeblatt.biz

Definitions of terms

This privacy policy uses legal terms that are defined in Art. 4 GDPR. According to this, personal data is any information relating to an at least identifiable natural person (Art. 4 No. 1 GDPR). The term "processing" encompasses every practically conceivable type of use in connection with personal data (Art. 4 No. 2 GDPR), i.e. from collection to destruction.

Data processing when accessing the website

This website is hosted by Ionos. Ionos collects personal data when you visit this website. This includes:

  • Information about your browser, your network and your device
  • Websites that you visited before visiting this website
  • Web pages that you visit on this website
  • Your IP address
  • Ionos needs the data to operate this website and to protect and improve its platform and services. Ionos analyses the data in a depersonalised form.

Analytics

This website collects personal data that serves as the basis for our website analytics. This includes:

  • Information about your browser, network and device
  • Websites you visited before coming to this website
  • Your IP address

This information may also include details about your use of this website, including

  • Clicks
  • Internal links
  • Pages visited
  • Scrolling
  • Searches
  • Timestamps

We collect this information to learn more about the traffic and activity on this website.

Data processing through cookies

This website uses cookies and similar technologies, which are small files or short texts that are downloaded to a device when a visitor accesses a website or app.

Data processing in our programme partner database

The database for recording programme partner data is created by the company update AG in Zurich, Switzerland and hosted by Ionos in Germany (ionos.de). The requirements of the EU GDPR are complied with. Personal data is treated as strictly confidential and is neither sold nor passed on to third parties.

In close cooperation with the hosting providers, we endeavour to protect the databases as well as possible against unauthorised access, loss, misuse or falsification.

The following data is stored in log files when the websites are accessed: IP address, date, time, browser request and general information transmitted about the operating system or browser and user behaviour.

General information on the deletion of data

Personal data will generally be deleted immediately after the purpose of storage has been fulfilled, unless the statutory retention periods stipulate extended storage (see §§ 257 para. 1 HGB: 6 years, 147 para. 1 AO: 10 years) or storage is required for evidence purposes. Proper deletion is reviewed on an annual basis. If the data is not deleted because it is required for other and legally permissible purposes, its processing is restricted.

Security measures of the operator

In accordance with Art. 32 GDPR and taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of data processing as well as the risk of varying likelihood and severity for the rights and freedoms of data subjects, the operator shall implement appropriate organisational, contractual and technical measures on an ongoing basis to ensure compliance with data protection regulations and to protect the data undergoing data processing against accidental or intentional manipulation, loss, destruction or access by unauthorised persons.

Rights of the user

The user has the right to request information at any time as to whether and which personal data of the user is being processed (Art. 15 GDPR). Upon request, the user's personal data must be provided in a structured, commonly used and machine-readable format (Art. 20 GDPR).

Furthermore, the user has the right to have inaccurate personal data rectified or incomplete personal data completed (Art. 16 GDPR) and - under the conditions of Art. 18 GDPR – the right to restrict processing.

Unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims, the user may also request the erasure of their personal data (Art. 17 GDPR).

Consent to data processing within the meaning of Art. 6 para. 1 sentence 1 a.), 7 GDPR can be revoked by the user at any time with effect for the future. If the data processing is carried out on the basis of Art. 6 para. 1 sentence 1 f.) GDPR, the user can object to the data processing with effect for the future, unless the operator can prove compelling reasons worthy of protection for the processing that outweigh the interests, rights and freedoms of the user, or the processing serves the assertion, exercise or defence of legal claims of the operator of the website (Art. 21 GDPR).

If the user is of the opinion that the processing of their personal data violates data protection regulations, they can lodge a complaint with the competent supervisory authority (Art. 77 GDPR).

Status: 10/03/2025