Privacy Policy
Last updated: 12 March 2026
We take the protection of personal data seriously. This privacy policy informs you in accordance with Articles 13 and 14 of the EU General Data Protection Regulation (GDPR) about the nature, scope and purpose of processing personal data when using this website and our contact and registration forms.
1. Data controller
The controller within the meaning of the GDPR is the organisation named in the legal notice (Imprint) of this website, or the representative indicated there. Full contact details (name, address, contact channels) are provided in the Imprint.
2. General information on processing
Personal data means any information relating to an identified or identifiable natural person. We process personal data only insofar as this is necessary to provide a functional website, content and services, to handle your requests, to comply with legal obligations, or where you have given consent.
Where we obtain consent for processing operations, the legal basis is Art. 6(1)(a) GDPR. Where processing is necessary for the performance of a contract or pre-contractual steps, the legal basis is Art. 6(1)(b) GDPR. Where processing is necessary for compliance with a legal obligation, Art. 6(1)(c) GDPR applies. Where processing is necessary for the purposes of legitimate interests, Art. 6(1)(f) GDPR may apply; legitimate interests may include IT security and abuse prevention.
3. Hosting and technical provision
This website is operated on servers of a hosting provider. Technical information transmitted by your browser (e.g. IP address, date and time of the request, browser type, referrer URL) may be processed insofar as this is technically necessary to deliver the pages and ensure stability and security. The legal basis is Art. 6(1)(f) GDPR (operation and security of the online service).
4. Contact and registration forms
If you contact us via a form or register for programmes, we process the data you enter (e.g. name, email address, city, language, message text and form-specific information) solely to handle your request or for pre-contractual measures or performance of a contract. Depending on the case, the legal basis is Art. 6(1)(b) GDPR and/or Art. 6(1)(a) GDPR where you consent to additional processing (e.g. publication of photos).
Transmission is encrypted (HTTPS) where supported by your browser. We do not share data with third parties for advertising purposes. Disclosure to processors (e.g. hosting, email delivery) only occurs under a data processing agreement pursuant to Art. 28 GDPR where necessary.
5. Cookies and local storage (consent)
We may use strictly necessary cookies or similar technologies that are essential for operating the website. With your consent via the cookie banner, we may store information (e.g. your consent decision) locally in the browser (e.g. localStorage) where necessary to document and implement your preferences.
The legal basis for non-essential cookies or storage is your consent under the ePrivacy rules (in Germany: Section 25(1) TTDSG) in conjunction with Art. 6(1)(a) GDPR where personal data is affected. You may withdraw consent with effect for the future by clearing site data in your browser; strictly necessary functions may be exempt.
Audience measurement: with your consent we collect anonymised usage statistics (page views, traffic source, UTM parameters, triggered events such as newsletter sign-ups or form submissions). Tools we may use are privacy-friendly: Plausible, Umami or Matomo (cookieless) and optionally Google Analytics 4 with IP anonymisation. Scripts are only loaded after your consent. We never store the content of forms or messages.
6. Retention and erasure
We retain personal data only as long as necessary for the respective purposes or as required by statutory retention periods. Form enquiries are deleted after completion of processing unless retention obligations or overriding legitimate interests require longer storage.
7. Your rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR), where processing is based on Art. 6(1)(f) GDPR
- Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)
To exercise your rights, please contact the address given in the Imprint. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence or place of work or of the alleged infringement.
8. Provision of data
There is no statutory or contractual obligation to provide personal data; however, certain information may be necessary to conclude or perform membership or to process your request. Without it, processing may not be possible.
9. Changes to this privacy policy
We may update this privacy policy to reflect legal requirements or changes to our services. The version published on this page applies at the time of your visit.
