Data protection

Data protection is very important to us!

When using this website, the protection of your personal data is taken very seriously. Below you will be informed about the collection, processing and use of your personal data when you visit this website and use the services provided here.

2. Information about personal data

(1) Personal data are individual details which refer to a person or which can be used to establish a reference to a person, e.g. name, postal address, telephone number, e-mail address, bank details, etc. Thus, under certain circumstances, personal data can be used to infer the identity of a person.

(2) Service provider pursuant to § 13 of the German Telemedia Act (TMG) and responsible party in terms of the German Federal Data Protection Act (BDSG) and the General Data Protection Regulation (GDPR):


Beckergrube 38 - 52

D-23552 Lübeck

2. Rights of data subjects

In connection with our processing of your data you have the following rights:

(1) Right of access pursuant to Article 15 GDPR to the processing of your personal data by us for the purposes of processing, categories of data concerned, recipients or categories of recipients, period of storage or the criteria used to determine the period, right to rectification, erasure, restriction of processing or objection to processing, right to lodge a complaint with the supervisory authority, if applicable, information as to the source of the data and the existence of automated decision-making and, if applicable, information provided on safeguards pursuant to Article 46 GDPR in the event of transfer to a third country or an international organisation;

(2) Right to the rectification of inaccurate or the completion of incomplete personal data without delay pursuant to Article 16 GDPR;

(3) Right to erasure of stored personal data pursuant to Article 17 GDPR, if the data are no longer necessary to the purposes for which they were collected or otherwise processed , if consent on which the processing is based is withdrawn and where there is no other legal ground for the processing, if objection to the processing has been filed and the data processed pursuant to Article 21 (1) or (2) GDPR may no longer be processed, if the data have been unlawfully processed, if erasure is necessary for compliance with a legal obligation or if the data have been collected in relation to the offer of information society services referred to in Article 8 (1) GDPR. This does not apply if processing is necessary for exercising the right to freedom of expression and information, compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;

(4) Right to restriction of processing pursuant to Article 18 GDPR if you contest the accuracy of the data (for the period necessary to verify the accuracy), if the processing is unlawful but you oppose deletion and instead request the restriction of their use, if we no longer need the data for the purposes of processing, but you require the data for the establishment, exercise or defence of legal claims, or if you object to processing pursuant to Article 21 (1) GDPR pending the verification whether our legitimate grounds override your legitimate grounds;

(5) Right to object to the processing of your personal data pursuant to Article 21 (2) GDPR (if the data are processed for direct marketing purposes) or pursuant to Article 21 (1) GDPR (if the processing is carried out pursuant to Article 6 (1) e) or f) GDPR, for reasons relating to your particular situation, unless we have compelling legitimate grounds for the processing which override your interests, or the processing serves the establishment, exercise or defence of legal claims).  For further information on the right to object, please also refer to No. 23 below;

(6) Right to data portability pursuant to Article 20 GDPR, i.e. to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format or to transmit it to another controller;

(7) Right to withdraw consent at any time pursuant to Article 7 (3) GDPR. Withdrawal of consent means the from the time of withdrawal we may no longer process the data in future. See also No. 24 below;

(8) Right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR. The supervisory authority responsible for us can be found in No. 4 below. The right to lodge a complaint applies without prejudice to any other administrative or judicial remedy.

(9) All requests for information or objections to data processing should be sent by e-mail to stiftung.datenschutz(at) or to the address specified in No. 1 (2).

3. Automated decision-making

Automated decision-making is not applied here.

4. Supervisory authority

The address for the supervisory authority responsible for us is:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein, Holstenstraße 98, D-24103 Kiel,

Phone: +49 431 988-1200, Fax: +49 431 988-1223

E-mail: mail(at) 


5. Storage of access data

(1) Each time our website is accessed, access data is stored in a log file on the server of our provider.

(2) This data record consists, for example, of your IP address, the date and time of the request, the name of the requested file, the amount of data transferred and the access status, a description of the web browser and operating system used and the name of your internet service provider.

(3) These data are collected for technical reasons. Analysis takes place for statistical purposes only and without any personal reference (visitor numbers and page popularity). Deletion takes place automatically after 14 days at the latest.

6. Collection of personal data for information purposes

(1) If you only use the website for information purposes, i.e. if you do not log in to use the website, register or otherwise provide us with information, we do not collect any personal data, with the exception of the data mentioned in 5.2, which your browser transmits to technically enable you to visit the website.

7. Using the features of our website

(1) In addition to the strictly informational use of our website, we offer various services that you can use if you are interested. To do so, you must usually provide additional personal information that we use to provide the service in question. If additional voluntary information is possible, it is indicated as such.

(2) When you contact us by e-mail, your e-mail address and, if you so indicate, your name and telephone number will be stored by us in order to answer your questions.

8. Liability for content

Great care was taken when preparing the content of this website. However, we cannot assume any liability for the correctness, completeness and topicality of the content. As a content provider we are responsible according to § 7 (1) of the German Telemedia Act (TMG) for our own content on these pages according to general laws. According to §§ 8 to 10 of the German Telemedia Act (TMG), however, as a content provider we are not required to monitor transmitted or stored third-party information or to investigate circumstances that indicate illegal activity. Any obligation to remove or block the use of information in accordance with general laws remains unaffected by this. However, liability in this respect is only possible from the time we become aware of a specific violation of the law. As soon as we become aware of such violations, we will remove the content without delay.

9. Liability for links

Our pages may include links to other websites, the contents of which are beyond our control. For this reason, we cannot assume any liability for such external content. The provider or operator of the pages linked to is always responsible for the content of these pages. The pages linked to were checked for possible violations of the law at the time of linking. Unlawful content was not discernible at the time of linking. However, a permanent control of the content of pages linked to is not reasonable without specific evidence of a violation of the law. As soon as we become aware violations, we will remove such links without delay.

10. Data security

We secure our website and other systems through appropriate technical and organisational measures against loss, destruction, access, alteration or distribution of your data by unauthorised persons. However, despite regular checks, complete protection against all risks is not possible.

Our website uses industry standard SSL (Secure Sockets Layer) for encryption. This guarantees the confidentiality of your personal data on the internet. You can tell whether an encrypted transmission is taking place by the closed key or padlock icon appearing in your browser.

11. Information disclosure

Disclosure of your personal data to third parties will take place only,

- if you have given your express consent to this in accordance with Article 6 (1) 1 a) GDPR;

- if disclosure is required for compliance with contractual obligations pursuant to Article 6 (1) 1 b) GDPR;

- if we are legally required to disclose the data within the meaning of Article 6 (1) 1 c) GDPR;

- if disclosure of the data is in the public interest within the meaning of Article 6 (1) e) GDPR or;

- if disclosure of the data pursuant to Article 6 (1) 1 f) GDPR is necessary to protect our legitimate interests or the legitimate interests of a third party, unless your interests in the protection of your data override.

12. Categories of data

We process the following categories of data: Master data (such as company, contact person if applicable, address), communication data, contract data, receivables data, payment and arrears information where applicable. See the information above.

13. Third-party recipients

In order to satisfactorily process your requests, we may have to disclose your personal data to third-party recipients. This third-party recipient is the firm L. Possehl & Co. mbH, Beckergrube 38-52. Other third party recipients can be found on our grant application form.

14. Period of storage of personal data

Your data will be stored by us for as long as it is required for the purposes for which it is processed. Beyond this, we store data only to the extent we are legally required to do so, e.g. due to legal retention requirements.

15. Information on the right to object

An objection to the processing of personal data concerning you on the basis of Article 6 (1) e) (processing in the public interest) or f) (processing necessary for the purposes of the legitimate interests necessary on the basis of a balancing of interests) is possible at any time pursuant to Article 21 GDPR. In the event of an objection, the personal data will no longer be processed, unless compelling grounds for processing worthy of protection are proven which override the interests, rights and freedoms of the data subject or processing is required for the establishment, exercise or defence of legal claims.

Please send your objection to the e-mail address stiftung.datenschutz(at)

16. Information on the right to withdraw consent

If you have given us permission to process personal data, you can withdraw your consent at any time. This also applies, of course, to declarations of consent issued to us before 25th May 2018 (before the GDPR came into force). The withdrawal of consent can always only apply in the future. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Please send your withdrawal of consent by e-mail to stiftung.datenschutz(at)

17. Updates

This data protection declaration was last updated on 15th November 2018. It is the current and valid version of our data protection declaration.

We would like to point out, however, that from time to time it may be necessary to revise this data protection declaration for factual or legal reasons.

18. Data protection officer

If you have any questions regarding data protection, please feel free to contact our data protection officer:

Vater Solution GmbH
Liebigstr. 26
D-24145 Kiel

or by e-mail to stiftung.datenschutz(at)