Privacy Policy

Introduction

Your data and your trust are important to me. I therefore make every effort to comply with the requirements of the General Data Protection Regulation (GDPR) and to ensure the responsible handling of your personal data.

In this Privacy Policy, you will learn which data is collected, how it is processed, and which rights you have. The aim is to explain everything as clearly as possible so you understand exactly what happens to your data.

General Information

2.1 Personal Data and Processing

Data protection concerns the handling of personal data—information that can directly or indirectly identify you, such as your IP address or details submitted via forms.

Processing means any action performed on such data, including storage, transmission, or analysis. For example, your IP address is automatically transmitted to our hosting provider and stored in server logs. This already qualifies as processing under Art. 4(2) GDPR.

Further definitions can be found in Art. 4 GDPR.

2.2 Applicable Data Protection Laws

The website’s data protection measures are based on the following legal regulations:

• GDPR (General Data Protection Regulation) – valid across the EU

• BDSG (Federal Data Protection Act) – German data protection law

• TDDDG (Telecommunications-Telemedia Data Protection Act) – regulates, among other things, the use of cookies

2.3 Data Controller

Responsible for the processing of your data on this website:

Name: Valerie Lange
Email: info@naumann-etienne-foundation.org

You may contact me at any time with questions regarding your data.

2.4 How Data Is Processed on This Website

Some data is collected automatically (e.g., your IP address) to ensure the technical operation of the site.
Other data you provide voluntarily, for example when filling out a contact form. In such cases, you will always be transparently informed and, if necessary, asked for consent.

2.5 Your Data Protection Rights

Under the GDPR, you have the following rights:

• Access: Find out what data is stored about you and how it is used.

• Rectification: Request corrections if your data is inaccurate or incomplete.

• Erasure: Request deletion of your data under certain conditions.

• Objection: Object to the processing of your data.

• Withdrawal of consent: Withdraw consent at any time if you have previously given it.

Details on how to exercise these rights are provided at the end of this Privacy Policy.

2.6 Our Approach to Data Protection

Your personal data is of great importance, and I handle it responsibly. Only necessary data is collected, and all information is treated confidentially. You should always remain in control of your data.

2.7 Data Sharing and Deletion

Your data will only be shared when there is a legal basis—for example, with a service provider under a data processing agreement pursuant to Art. 28 GDPR.

Data is retained only for as long as necessary. Once the processing purpose ceases and no legal obligations require further storage, data will be deleted in accordance with Art. 17 GDPR.

2.8 Website Hosting

This website is hosted by an external provider:

IONOS SE
Elgendorfer Str. 57, 56410 Montabaur, Germany
Email: info@ionos.de

IONOS stores automatically collected server logs and form input data. Data is processed exclusively on instruction and under a data processing agreement.

2.9 Legal Bases for Processing

According to Art. 6(1) GDPR, personal data may be processed on the following grounds:

• Consent (a): You have explicitly agreed.

• Contract (b): Processing is necessary to perform or enter into a contract.

• Legal obligation (c): Processing is legally required.

• Vital interests (d): Processing protects someone’s vital interests.

• Public interest (e): Processing is carried out in the public interest or by public authority.

• Legitimate interests (f): Processing is necessary to protect legitimate interests, unless overridden by your rights.

Each data processing activity on this website will state the applicable legal basis.

Data Processing on This Website

SSL/TLS Encryption

To protect your data from unauthorized access, this website uses SSL/TLS encryption. You can recognize this by the padlock symbol in your browser’s address bar or the “https://” prefix in the URL.

3.1 Server Log Data

When you visit this website, the following data is automatically stored in server log files:

• Browser type and version

• Operating system

• Referrer URL (previously visited site)

• Hostname of the accessing device

• Time of server request

• IP address

These logs are necessary to:

• Maintain website security and stability

• Fix errors

• Build the connection to the site

• Display the site correctly

Processing is based on Art. 6(1)(f) GDPR (legitimate interest in secure operation). Data is pseudonymized where possible and deleted once no longer needed, typically within 14 days, unless a security incident requires longer retention.

3.2 Cookies

3.2.1 General

This website uses cookies—small text files stored in your browser that enable navigation and specific functions.

3.2.2 Rejecting Cookies

You can manage non-essential cookies at any time via the Cookie Consent Tool or disable them directly in your browser. Instructions are available for Firefox, Chrome, Edge, and Safari.

Blocking cookies may limit website functionality.

3.2.3 Essential Cookies

Certain cookies are required for proper functionality. Legal basis: Art. 6(1)(b), (c), or (f) GDPR.

3.2.4 Non-Essential Cookies

Analytics or personalization cookies are used only with your consent (Art. 6(1)(a) GDPR). Consent can be withdrawn at any time.

3.3 Data from User Input

3.3.1 Contact via Email or Phone

• Email: If you contact me by email, your address and message details are stored and processed to handle your request.

• Phone: Calls may appear in call logs (pseudonymized). Data from conversations is only used to process your inquiry.

Legal basis: Art. 6(1)(b) or (f) GDPR. Data is deleted when no longer needed and legal retention periods expire.

3.4 Cookie Consent Tool

This site uses Complianz, provided by Complianz GDPR/CCPR Cookie Consent, to record your cookie preferences in compliance with legal requirements (Art. 6(1)(c) GDPR).

Your choices are saved in your browser and remain until you withdraw consent or the purpose no longer applies.

3.5 Analytics & Tracking Tools

3.5.1 Google Analytics

• Service: Google Ireland Ltd., Dublin

• Purpose: Analyzing visitor behavior

• Legal basis: Art. 6(1)(a) GDPR, §25(1) TDDDG

• Safeguards: IP anonymization, EU-US Privacy Framework, SCCs

• Data retention: up to 2 years

3.5.2 IONOS WebAnalytics

• Provider: IONOS SE, Germany

• Data: Referrer, requested page/file, browser, OS/device, time, anonymized IP

• No cookies used

• Legal basis: Art. 6(1)(f) GDPR (website optimization)

3.5.3 WP Statistics

• Provider: Veronalabs, Estonia

• Data: log files, site actions; IPs shortened

• Data stored only on own server, not shared with third parties

• Legal basis: Art. 6(1)(f) GDPR (site optimization)

3.6 Third-Party Content

This site may include external services such as:

• Yoast SEO (Netherlands) – no personal data processed

• Simple Lightbox (WordPress plugin) – for media display

Your Rights in Detail

Under the GDPR, you have the following rights:

• Art. 15 – Right of Access

• Art. 16 – Right to Rectification

• Art. 17 – Right to Erasure (“Right to be Forgotten”)

• Art. 18 – Right to Restrict Processing

• Art. 20 – Right to Data Portability

• Art. 21 – Right to Object

• Art. 22 – Right to Human Review of Automated Decisions

• Art. 7(3) – Right to Withdraw Consent

• Art. 77 – Right to Lodge a Complaint with a Supervisory Authority

Companies are also obliged to notify third parties if you exercise rights under Arts. 16–18 GDPR, where reasonable.

Updates to This Policy

This Privacy Policy is valid as of 1. September 2025.

Because data protection laws and technical requirements may change, this statement may be updated at any time. The current version will always be published here. You are encouraged to review this policy regularly.