Privacy Policy

General Information

Thank you for visiting our website at westerwelle-foundation.com and for your interest in our company.
The protection of your personal data, such as date of birth, name, telephone number, address, etc., is important to us.

The purpose of this privacy policy is to inform you about the processing of personal data that we collect from you when you visit our website. Our data protection practice is in line with current legal provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). The following privacy policy serves to fulfill the information obligations resulting from the DSGVO. These can be found, for example, in Art. 13 and Art. 14 et seq. GDPR.

Responsibility

The body responsible within the meaning of Art. 4 No. 7 GDPR alone or jointly with others decides on the purposes and means of processing personal data. With regard to our website, the responsible body is:

Westerwelle Foundation
Civil Law Foundation
Gartenstrasse 6, 10115 Berlin
Germany
Email: office@westerwelle-foundation.com
Tel: 015906228393

Personal Information

We do not collect any personal data (e.g. names, addresses, telephone numbers or e-mail addresses) via our website or our media portal, unless you have given us your consent to provide us with such data voluntarily (e.g. when applying for our Young Founders program). or the relevant legislation on the protection of your data allows this. Please note the special regulation for our Westerwelle Young Founders Program further down in this text.

We may collect information on our website that, by itself, cannot be used to directly identify you. However, in certain cases – especially in combination with other data – this information can constitute “personal data” within the meaning of the law. We may also collect information on our website that does not identify you directly or indirectly, such as aggregated information about all users of our website.

Providing the website and log file creation

Every time our website is called up, our system automatically collects data and information from the device that is accessing our website (e.g. your computer, mobile phone, tablet, etc.).

What personal data is collected and to what extent is it processed?

Information about your browser type and version;
the operating system of the device you are using;
host name of the accessing computer;
the IP address of the device you are using;
date and time of access;
pages and resources (images, files, other page content) accessed on our website;
the website from which you came to our website (referrer tracking);
notification of whether the retrieval was successful;
amount of data transferred

This data is stored in the log files of our web server. It is not stored together with any personal data of a specific user, so that individual site visitors cannot be identified.

Legal basis for processing personal data

Article 6 paragraph 1 lit. f GDPR (legitimate interest). Our legitimate interest is to ensure the achievement of the purpose described below.

Purpose of data processing

The temporary (automated) storage of data during website access is necessary to enable the correct delivery of the website content. Personal data is also stored and processed to maintain the compatibility of our website for as many visitors as possible and to combat abuse and eliminate faults. For this it is necessary to log the technical data of the accessing computer in order to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. In addition, we use the data to optimize the website and to generally ensure the security of our information technology systems.

Recipient

Technical service providers who are involved in the operation and maintenance of our website as processors can act as recipients of the data.

Duration of storage

The aforementioned data will be deleted as soon as they are no longer required to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.

Possibility of objection and deletion

You can object to the processing of your personal data at any time in accordance with Article 21 GDPR and request the deletion of your personal data in accordance with Article 17 GDPR. You can find out which rights you are entitled to and how to assert them in the “Your rights” section of this privacy policy.

Special functions of this website

Our site offers you various functions which we use to collect, process and store personal data. Below we explain what happens to this personal data:

Login Section

What personal data is collected and to what extent is it processed?

We will process registration and login information that you have entered to fulfill the purpose stated below.

Legal basis for processing personal data

Article 6 paragraph 1 lit. b GDPR (implementation of (pre)contractual measures)

Purpose of data processing

Our website provides an optional login section which contains information not accessible to the general public. In order to verify your authorization to use the login section or the protected documents, you must enter your login credentials (e-mail or user name and password) in the appropriate form.

Duration of storage

The data collected will be stored for as long as you maintain a user account with us.

Possibility of objection and deletion

You can find out which rights you are entitled to and how you can assert them in the “Your rights” section of this data protection declaration.

Requirement to provide personal data

In order to access protected areas of our website it is contractually required to use the user login. It is not possible to access any protected content without entering personal data. If you would like to use our user login, you must fill out the fields marked as mandatory (user name and password). Entering the data requires the existence of a user account. Registration is not possible if the data you have entered is incorrect. If you enter the data incorrectly or not at all, the protected area cannot be used. However, the rest of the page can still be used without logging in.

Newsletter registration form

What personal data is collected and to what extent is it processed?

By registering for the newsletter on our website, we receive the e-mail address you entered in the registration field and, if necessary, further contact details if you provide them to us through the newsletter registration form.

Legal basis for processing personal data

Article 6 paragraph 1 lit. a GDPR (consent through clear affirmative action or behavior)

Purpose of data processing

The data entered in the newsletter registration form is used by us exclusively for sending our newsletter, in which we provide information about all of our services and our news. After registration, we will send you a confirmation e-mail containing a link that you must click to complete newsletter registration (double opt-in).

Duration of storage

You can unsubscribe from our newsletter at any time by clicking on the unsubscribe link, which is also included in every newsletter. Your data will be deleted by us immediately after you have unsubscribed. We will also delete your data immediately if you have not completed your registration. We reserve the right to delete your data without giving reasons and without prior or subsequent information.

Possibility of objection and deletion

You can revoke your consent at any time in accordance with Art. 7 Para. 3 GDPR. However, the processing that has taken place up to the time of the revocation remains unaffected. With regard to further rights, we refer to the section “Your rights” in this privacy policy.

Requirement to provide personal data

If you would like to receive our newsletter, you must fill in the fields marked as mandatory and confirm the correctness of your e-mail address by clicking on the double opt-in link. The information you provide for newsletter registering is neither necessary to enter into a contract with us nor is it legally binding. They are used exclusively for sending our newsletter. If you do not fill in the necessary fields to register for the newsletter, we will not be able to provide you with our newsletter service.

Statistics and web tracking

We collect, process and store the following data when you access this website or individual files on the website: IP address, website from which the file was accessed, name of the file, date and time of access, amount of data transferred and notification of success of retrieval (so-called web log). We use this access data exclusively in a non-personalized form for the continuous improvement of our website and for statistical purposes. We also use the following web trackers to evaluate visits to this website:

Facebook Connect

We use the Facebook Connect service from Facebook Ireland Limited, 4 Grand Canal Square, 2 Dublin, Ireland, email: impressum-support@support.facebook.com, website: http://www.facebook.com on our website. Processing takes place in part in a third country for which there is no adequacy decision by the European Commission. Therefore, the level of protection customary for the GDPR cannot be guaranteed when data is transmitted, since it cannot be ruled out that authorities in third countries could gain access to the data collected.

The legal basis for the transmission of personal data is your consent in accordance with Article 6 Paragraph 1 Letter a GDPR or Article 9 Paragraph 2 Letter a GDPR, which you have given on our website.

Via Facebook Connect, users can use their Facebook profile for simplified registration with other web services.
You can revoke your consent at any time. You can find more detailed information on how to revoke your consent either in the consent itself or in the “Your rights” section of this privacy policy.

Further information on the handling of the transmitted data can be found in the provider’s data protection declaration at https://www.facebook.com/about/privacy.
Facebook also offers an opt-out option at https://www.facebook.com/about/privacy.

Facebook Custom Audience

On our website we use the Facebook Custom Audience service from Facebook Ireland Limited, 4 Grand Canal Square, 2 Dublin, Ireland, e-mail: impressum-support@support.facebook.com, website: http://facebook.com/ . Processing takes place in part in a third country for which there is no adequacy decision by the European Commission. Therefore, the standard level of protection for the GDPR cannot be guaranteed when the data is transmitted, since it cannot be ruled out that authorities in third countries could gain access to the data collected.

Facebook Custom Audience is an advertising tool by Facebook that can be used to target advertising campaigns to site visitors.
You can revoke your consent at any time. You can find more detailed information on how to revoke your consent either in the consent itself or in the “Your rights” section of this data protection declaration.

Further information on the handling of the transmitted data can be found in the provider’s data protection declaration at https://www.facebook.com/about/privacy. Facebook also offers an opt-out option at https://www.facebook.com/about/privacy.

Google Tag Manager

What personal data is collected and to what extent is it processed?

On our website we use the Tag Manager service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Tag Manager). Google Tag Manager offers a technical platform to run and control other web services and web tracking programs using so-called “tags”. In this context, Google Tag Manager stores cookies on your computer and analyzes your web browsing behavior (so-called “tracking”) if web tracking tools are run using Google Tag Manager. This data sent by individual tags integrated into Google Tag Manager is merged, stored and processed by Google Tag Manager under a uniform user interface. All integrated “tags” are listed separately in this privacy policy. You can find more information on the data protection of the tools integrated in Google Tag Manager in the respective section of this privacy policy.

When using our website with the activated integration of tags from Google Tag Manager, data such as your IP address and your user activities are transmitted to the server of Google Ireland Limited. With regard to the web services integrated using Google Tag Manager, the regulations in the respective section of this data protection declaration apply. The tracking tools used in Google Tag Manager ensure by IP anonymization of the source code that the IP address of Google Tag Manager is anonymized before transmission. In this case, only the anonymous collection of IP addresses (so-called IP masking) is enabled for Google Tag Manager.

Legal basis for processing personal data

According to Article 6 Paragraph 1 of the GDPR, the legal basis for data processing is your consent to our information banner regarding the use of cookies and web tracking (consent through clear confirmatory action or behavior).

Purpose of data processing

On our behalf, Google will use the information obtained using the Google Tag Manager to evaluate your visit to this website, to compile reports on website activity and to provide us with other services related to website activity and internet usage.

Duration of storage

Google will store the data relevant to the function of Google Tag Manager for as long as is necessary to fulfill the booked web service. The data is collected and stored anonymously. If there is a personal reference, the data will be deleted immediately, provided they are not subject to any statutory retention requirements. In any case, the deletion takes place after the retention period has expired.

Possibility of objection and deletion

You can prevent the collection and forwarding of personal data to Google (in particular your IP address) and the processing of this data by Google by deactivating the execution of script code in your browser, installing a script blocker in your browser or activate the “Do Not Track” setting of your browser. You can also prevent the collection of data generated by the Google cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link http://tools.google.com/dlpage/gaoptout?hl=de You can find Google’s security and data protection principles at https://policies.google.com/privacy.

Google Analytics

Scope of processing of personal data

On our site we use the web tracking service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Analytics). As part of web tracking, Google Analytics uses cookies that are stored on your computer and which enable an analysis of the use of our website and your web browsing behavior (so-called tracking). We carry out this analysis on the basis of the Google Analytics tracking service in order to constantly optimize our website and make it more broadly available. When you use our website, data such as your IP address and your user activities are transmitted to servers of Google Ireland Limited. We also need web tracking for security reasons. Web tracking enables us to track whether third parties are attacking our website, take effective countermeasures and protect the personal data we process from cyber-attacks. By activating IP anonymization within the Google Analytics tracking code on this website, your IP address will be anonymized by Google Analytics before transmission. This website uses a Google Analytics tracking code that includes the operator gat._anonymizeIp(); which only allows the anonymous collection of IP addresses (so-called IP masking).

Legal basis for processing personal data

Purpose of data processing

On our behalf, Google will use the collected information to evaluate your visit to this website, to compile reports on website activity and to provide us with other services related to website activity and internet usage. We also need web tracking for security reasons. Web tracking enables us to track whether third parties are attacking our website, take effective countermeasures and protect the personal data we process from cyber attacks.

Duration of storage

Google will store the data relevant to the provision of web tracking for as long as is necessary to fulfill the booked web service. The data is collected and stored anonymously. If there is a personal reference, the data will be deleted immediately, provided they are not subject to any statutory retention requirements. In any case, the deletion takes place after the retention period has expired.

Objection and deletion options

You can prevent the collection and forwarding of personal data to Google (in particular your IP address) and the processing of this data by Google by deactivating the execution of script code in your browser or by setting your browser to “Do Not Track”. You can also prevent Google from collecting the data generated by the Google cookie and relating to your use of the website (including your IP address) and from processing this data by Google by clicking on the following link (http://tools.google.com/dlpage/gaoptout?hl=de) and install the available browser plug-in. You can find Google’s security and data protection guidelines at https://policies.google.com/privacy?hl=de.

Integration of external web services and processing of data outside the EU

On our website we use active content from external providers, so-called web services. By accessing our website, these external providers may receive personal information about your visit to our website. It may be possible that some of the data collected is processed outside of the EU. You can prevent this by installing an appropriate browser plug-in or deactivating the execution of script code in your browser. This can lead to functional restrictions on websites that you visit. We use the following external web services:

Google

On our website we use the Google service from Google LLC, 1600 Amphitheater Parkway, 94043 Mountain View, USA, email: support-de@google.com, website: http://www.google.com/. Data processing in part takes place in a third country for which there is no adequacy decision by the European Commission. Therefore, the level of protection customary for the GDPR cannot be guaranteed when data is transmitted, since it cannot be ruled out that authorities in third countries could gain access to the data collected.

You can revoke your consent at any time. You can find more detailed information on how to revoke your consent either in the consent itself or in the “Your rights” section of this privacy policy.

For more information on how the transmitted data is handled, see Google’s privacy policy at https://policies.google.com/privacy

Google APIs

On our website we use the Google APIs service from Google LLC, 1600 Amphitheater Parkway, 94043 Mountain View, USA, email: support-de@google.com, website: http://www.google.com/. Data processing in part takes place in a third country for which there is no adequacy decision by the European Commission. Therefore, the level of protection customary for the GDPR cannot be guaranteed when data is transmitted, since it cannot be ruled out that authorities in third countries could gain access to the data collected.

We use Google APIS to be able to download additional Google services on this website. Google APIs is a collection of interfaces for communication between the various Google services used on our website.

We collect the following data for processing: your IP address

You can revoke your consent at any time. You can find more detailed information on how to revoke your consent either in the consent itself or in the “Your rights” section of this privacy policy.

For more information on how the transmitted data is handled, see Google’s privacy policy at https://policies.google.com/privacy.

Google Fonts

We use the Google Fonts service from Google LLC, 1600 Amphitheater Parkway, 94043 Mountain View, USA, email: support-de@google.com, website: http://www.google.com/ on our website. Data processing in part takes place in a third country for which there is no adequacy decision by the European Commission. Therefore, the level of protection customary for the GDPR cannot be guaranteed during transmission, since it cannot be ruled out that authorities in third countries could gain access to the data collected.

Fonts are loaded on our site via the Google Fonts service in order to be able to show you the site in a visually improved version.

You can revoke your consent at any time. You can find more detailed information on how to revoke your consent either in the consent itself or in the “Your rights” section of this privacy policy.

For more information on how the transmitted data is handled, see Google’s privacy policy at https://policies.google.com/privacy.

Google Maps

We use Google Maps on our website. Google Maps is operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This enables us to display interactive maps directly on our website and offer you convenient access to a map function. For more information about how Google processes data, see Google’s privacy policy: https://policies.google.com/privacy.

You can find detailed instructions on how to manage your data when using Google products at: https://www.dataliberation.org.

When you visit our website, Google receives the information that you have accessed the corresponding sub-page of our website. This notification occurs regardless of whether or not you have a user account with Google and whether or not you are logged into your account. If you are logged in to Google, your data will be linked directly to your account. If you do not want your data to be linked to your Google profile, you must log out of Google before activating Google Maps. Google stores data in the form of user profiles and uses this data for advertising, market research and/or needs-based design of the website. Such evaluations are carried out in particular (also for users who are not logged in) for the purpose of tailoring advertising to meet needs and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact Google directly to exercise this right.

Gstatic

On our website we use the Gstatic service from Google LLC, 1600 Amphitheater Parkway, 94043 Mountain View, USA, email: support-de@google.com, website: http://www.google.com/. Processing in part takes place in a third country for which there is no adequacy decision by the European Commission. Therefore, the standard level of protection for the GDPR cannot be guaranteed when data is transmitted, since it cannot be ruled out that authorities in third countries could gain access to the data collected.

Gstatic is a static content retrieval service used by Google to reduce bandwidth usage and preload required catalog files.
You can revoke your consent at any time. You can find more detailed information on how to revoke your consent either in the consent itself or in the “Your rights” section of this privacy policy.

Further information on the handling of the transmitted data can be found in the provider’s data protection declaration at https://policies.google.com/privacy.

Youtube

On our website we use the YouTube service from Google LLC, 1600 Amphitheater Parkway, 94043 Mountain View, USA, email: support-de@google.com, website: http://www.google.com/. Data processing in part takes place in a third country for which there is no adequacy decision by the European Commission. Therefore, the standard level of protection for the GDPR cannot be guaranteed when data is transmitted, since it cannot be ruled out that authorities in third countries could gain access to the data collected.

Videos from the YouTube platform are integrated on our website via the YouTube service.

You can revoke your consent at any time. You can find more detailed information on how to revoke your consent either in the consent itself or in the “Your rights” section of this privacy policy.

Further information on the handling of the transmitted data can be found in the provider’s data protection declaration at https://policies.google.com/privacy.

Social Plug-In “Facebook”

What personal data is collected and to what extent is it processed?

We have integrated a social plug-in from the social network Facebook on our website, which is operated by Facebook Ireland Limited, 4 Grand Canal Square, 2 Dublin, Ireland, e-mail: impressum-support@support.facebook.com, website: http://www.facebook.com/ (Facebook). If you access a page that contains such a plug-in, your browser automatically establishes a background connection to the Facebook servers. The content of the plug-in is transmitted directly to your browser by Facebook and only integrated into our site. Through this integration, Facebook receives the information that your browser has loaded a specific page of our website. This also applies if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in Ireland and stored there. If you are logged into Facebook, Facebook can immediately assign your visit to our website to your Facebook profile. If you interact with the plug-in, for example by clicking the “Like” button or making a comment, this information is transmitted directly to a Facebook server and stored there. The information will also be published on your Facebook profile and displayed to those of your Facebook contacts that you have enabled to see it.

Legal basis for processing personal data

Art. 6 Para. 1 lit. a GDPR (if you have registered with Facebook) and Art. 6 Para. 1 lit. f GDPR (if you have not registered with Facebook). Insofar as the processing takes place on the basis of Article 6 Paragraph 1 Sentence 1 lit. f GDPR, the legitimate interest of the site operator is to enable users to interact with the content of the site operator on Facebook.

Purpose of data processing

The primary purpose of data collection is to offer you a Facebook-networked opportunity for social interaction and thus to make our website interactive. The scope of the data collection and the further processing and use of the data you leave behind by Facebook as well as your rights in this regard and setting options for protecting your privacy can be found in Facebook’s data protection information: https://www.facebook.com/about/privacy

Duration of storage

Facebook will store the data relevant to providing the web service for as long as necessary. Insofar as the data is subject to statutory storage obligations, it will be deleted after the storage obligation has expired.

Possibility of objection and deletion

If you do not want the Facebook social plug-in to run, you can prevent it from running by installing an appropriate addon or script blocker. If you do not want Facebook to associate the data collected through our website with your Facebook profile, you must log out of Facebook before visiting our website. The objection and deletion options are based on the general regulations on the right to object under data protection law and the right to deletion described below in this privacy policy.

About the usage of cookies

What personal data is collected and to what extent is it processed?

We use cookies on various pages to enable certain functions of our website and to integrate external web services. “Cookies” are small text files that your browser can save on your access device. These text files contain a characteristic string of characters that uniquely identifies the browser when you return to our website. The process of saving a cookie file is also known as “setting a cookie”. Cookies can be set both by the website itself and by external web services. The cookies are set by our website or the external web services in order to maintain the full functionality of our website, to improve user-friendliness or to pursue the purpose given with your consent. Cookie technology also enables us to recognize individual visitors using pseudonyms, e.g. an individual or random ID, so that we can offer more individual services. Details are listed in the table below.

Legal basis for processing personal data

Insofar as the cookies are processed on the basis of consent in accordance with Article 6 Paragraph 1 lit. of the GDPR, or if another legal basis is mentioned (e.g. for the fulfillment of a contract or for the fulfillment of legal obligations), the storage or setting of cookies takes place on the basis of an exception according to § 25 Para. 2 TTDSG. This is the case “if the sole purpose of storing information in the end user’s terminal equipment or the sole purpose of accessing information already stored in the end user’s terminal equipment is to carry out the transmission of a message via a public telecommunications network” or “if the Storage of information in the end user’s terminal equipment or access to information already stored in the end user’s terminal equipment is absolutely necessary so that the provider of a telemedia service can provide a telemedia service expressly requested by the user”. Which legal basis is relevant can be found in the cookie table listed below.

Purpose of data processing

Cookies are set by our website or by external web services in order to maintain the full functionality of our website, to improve user-friendliness or to pursue the purpose given with your consent. Cookie technology also enables us to recognize individual visitors using pseudonyms, e.g. an individual or random ID, so that we can offer more individual services. Details are listed in the table below.

Duration of storage

Our cookies are stored until they are deleted in your browser or, if it is a session cookie, until the session has expired. Details are listed in the table below.

Possibility of objection and deletion

You can set your browser according to your wishes so that the setting of cookies is generally prevented. You can then decide on a case-by-case basis whether to accept cookies or accept cookies in general. Cookies can be used for various purposes, e.g. to recognize that your access device is already connected to our website (permanent cookies) or to remember the pages you last viewed (session cookies). If you have expressly given us permission to process your personal data, you can withdraw this consent at any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

List of cookies used

CONSENT (Youtube)	.youtube-nocookie.com	Youtube	After the user has given their consent, the CONSENT cookie saves the user’s permission to forward the data to YouTube.	Article 6 paragraph 1 lit. c GDPR (fulfilment of legal obligation)	about 24 months	Cookie-Banner
LAST_RESULT_ENTRY_KEY	www.youtube-nocookie.com	Youtube	Saves the user settings when calling up a YouTube video integrated on other websites.	Article 6(1)(a) GDPR or Article 9(2)(a) GDPR (consent)	Session	Convenience
Youtube	www.youtube-nocookie.com	Youtube	This cookie is required to embed the YouTube video player on our website and to play YouTube videos. The YouTube player is operated by us in data-saving mode.	Article 6(1)(a) GDPR or Article 9(2)(a) GDPR (consent)	Session	Marketing
_ga	westerwelle-foundation.com	Google-Analytics	This cookie assigns an ID to a user so that the web tracker can summarize the user’s actions under this ID. Art. 6 (1) (a) GDPR or Article 9 (2) (a) GDPR (consent)	Article 6(1)(a) GDPR or Article 9(2)(a) GDPR (consent)	about 24 months	Analytics
_ga_D9MDZ22G9L	westerwelle-foundation.com	Google Tag Manager	The cookie used assigns an ID to the site visitor and determines statistical data on the site visitor. This serves to customize the advertising that is displayed to the user.	Article 6(1)(a) GDPR or Article 9(2)(a) GDPR (consent)	about 24 months	Marketing
cookie_notice_accepted	westerwelle-foundation.com	website operator	Cookie that saves the user’s decision about the cookie banner in the event that consent is given.	Article 6 paragraph 1 lit. f GDPR (legitimate interests)	30 days	Cookie-Banner

Children

Westerwelle Foundation will not knowingly collect personal data from children without expressly pointing out that such data should only be transmitted with the parents’ consent if legal provisions are applicable. Generally, we will only use or share personal information from children as required by law, to obtain legally required parental consent, or to protect children.

Communication Security

Your personal data is protected by technical and organizational measures during collection, storage and processing so that it is not accessible to third parties. If you send information in an unencrypted fashion (i.e. by email), we can not guarantee complete data security on the transmission path to our IT systems, so we recommend encrypted communication or using the postal service for information with a high need for confidentiality.

Additional Disclosures About the Collection and Use of Personal Information in Our Programs

You have the opportunity to apply to our programs, to which the additional terms of this section apply.

Collection, processing and storage of personal data

Personal data from applicants is collected and processed using the online tool Google Forms. More information can be found here: https://privacy.google.com/intl/en_uk/businesses/compliance/#?modal_active=none
In addition, we use the Microsoft Office software to process personal data of our applicants. The personal data of our applicants are stored both on local hard drives and in a cloud.

Use for a specific purpose

Any personal data that you may enter during application (e.g. your first and last name, your e-mail address, your country and your occupation) is used by Westerwelle Foundation exclusively for the purpose of identifying the applicant and ensuring your eligibility to apply. We may also use your personal information to evaluate whether you are a successful applicant.
We reserve the right to statistically evaluate anonymous data sets.

Westerwelle Foundation will not use your personal data for other purposes or pass it on to third parties for advertising purposes.

Legal compliance; deletion of data

Any data collected or processed in connection with your application will be deleted or blocked in accordance with statutory provisions. In particular, your data will be deleted when it is no longer required to achieve the purpose for which it was stored or to comply with statutory retention periods. Westerwelle Foundation will delete your personal data after an unsuccessful application.
You can request the deletion of your application at any time. Please send your name, address and email address to the following address: office@westerwelle-foundation.com. We will delete your application and all associated data unless we are required by law to keep it; Such storage may be necessary, for example, for tax reasons.

Transmission to recipients within the EEA

Data transfer to other responsible persons

In principle, your personal data will only be passed on to other persons responsible for data processing if this is necessary to fulfill a contract, if we or the third party have a legitimate interest in the disclosure of that data or if you have given your consent. If data is passed on to third parties based on a legitimate interest, this is explained in this privacy policy. In addition, data can be transmitted to other responsible parties if we are obliged to do so due to legal regulations or enforceable official or court orders.

Service providers (general)

We have contracted external service providers with tasks such as sales and marketing services, contract management, payment processing, programming and data hosting. We have carefully selected these service providers and check them regularly, especially with regard to the careful handling and protection of the data stored with them. All service providers are bound to secrecy and to compliance with legal regulations.

Transfer to recipients outside the EEA

We may also transfer personal data to recipients located outside the EEA in so-called third countries. In these cases, we either ensure that the data recipient offers an appropriate level of data protection (e.g. due to an adequacy decision by the European Commission for the respective country or due to the agreement of so-called EU model clauses with the recipient) before the transmission or that you have consented to the transmission.

You have the right to receive an overview of the third-country recipients and a copy of the specifically agreed provisions to ensure an appropriate level of data protection.

Your rights

In accordance with statutory provisions, you are entitled (a) to request information about which personal data we have stored about you, (b) to request the correction of incorrect personal data or the deletion of personal data, insofar as we are not obliged to store this data (c) to request information about who we may share your personal data with and (d) to revoke your consent to the handling of your personal data at any time. Specifically, you have the following rights:

Right to information

You have the right to request confirmation as to whether we are processing your personal data. If this is the case, you have a right to know what specific information about you we are processing, as specified in Art. 15 Para. 1 GDPR, provided that the rights and freedoms of other persons are not impaired (cf. Art. 15 Para. 4 GDPR). We would also be happy to provide you with a copy of the data.

Right to rectification

In accordance with Article 16 GDPR, you have the right to have any incorrectly stored personal data (e.g. address, name, etc.) corrected at any time. You can also request that the data we have stored be completed at any time. A corresponding adjustment will be made immediately.

Right to deletion

According to Art. 17 Para. Para. 1 DSGVO you have the right to request the deletion of your personal information if

the data is either no longer needed;
the legal basis for processing no longer applies due to the revocation of your consent;
you have objected to processing and there are no legitimate grounds for it;
your data is processed unlawfully;
a legal obligation requires this or a collection has taken place in accordance with Article 8 (1) GDPR.

According to Art. 17 (3) GDPR, the right does not exist if

the processing is necessary to exercise the right to freedom of expression and information;
your data has been collected on the basis of a legal obligation;
the processing is necessary for reasons of public interest;
the data is required to assert, exercise or defend legal claims.

Right to restriction of processing

In accordance with Art. 18 Para. 1 GDPR, you have the right to demand the restriction of the processing of your personal data.

This is the case when

the accuracy of the personal data is contested by you;
the processing is unlawful and you do not consent to deletion;
the data is no longer required for the purpose of processing, but the data collected is used to assert, exercise or defend legal claims;
an objection to the processing pursuant to Article 21 (1) GDPR has been filed and it is still unclear which interests prevail.

Right of revocation

If you have given us your express consent to the processing of your personal data (Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR), you can revoke this consent at any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Right to objection

According to Article 21 GDPR, you have the right to object at any time to the processing of personal data relating to you that has been collected on the basis of Article 6 Paragraph 1 Letter f (within the scope of a legitimate interest). You are only entitled to this right if special circumstances speak against the storage and processing.

Right to data portability

In accordance with Art. 20 GDPR, you have the right to have your personal data transmitted. We provide the data in a structured, common and machine-readable format. The data can either be sent to you or to a person named by you.
On request, we will provide you with the following data in accordance with Article 20 (1) GDPR:

Data collected on the basis of express consent in accordance with Article 6 Paragraph 1 Letter a GDPR or Article 9 Paragraph Letter a GDPR;
Data that we have received from you in accordance with Article 6 (1) (b) GDPR within the framework of existing contracts;
Data processed as part of an automated process.

We will transfer the personal data directly to a responsible person of your choice, insofar as this is technically feasible. Please note that we are not permitted to transfer data that encroach on the freedoms and rights of other people in accordance with Article 20 (4) GDPR.

Right of appeal to the supervisory authority in accordance with Article 77 (1) GDPR

If you suspect that your data is being processed illegally, you can of course seek judicial clarification of the problem at any time. In addition, you have every other legal option. Irrespective of this, you have the option of contacting a supervisory authority in accordance with Article 77 (1) GDPR. You have the right to lodge a complaint according to Art. 77 GDPR in the EU member state of your residence, your place of work and/or the place of the alleged infringement, i.e. you can choose the supervisory authority to which you turn from the places mentioned above. The supervisory authority to which the complaint was lodged will then inform you of the status and results of your submission, including the possibility of a judicial remedy in accordance with Article 78 GDPR.

How do you exercise your rights?

You can exercise your rights at any time by using the contact details below:

Westerwelle Foundation
Gartenstraße 6
10115 Berlin
Germany
E-Mail: office@westerwelle-foundation.com
Phone: 015906228393

The revocation of your consent or the deletion or blocking of personal data can mean that we can no longer provide certain services and functions. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation.

If you have any questions or complaints, you can also contact the Berlin Data Protection Authority (0049 030 13889-0).

Updates

In the course of the further development of the Internet, we will also continuously update our privacy policy. We will announce changes on this website in good time. You should therefore visit this page regularly to find out about the current status of the privacy policy.