Privacy Policy
Last updated: September 2026
Draft — This page contains placeholders, is not yet legally binding and must be reviewed by a lawyer before publication.
Thank you for visiting our website. Below we explain which personal data we process, for what purpose, and what rights you have.
Language
This is a translation provided for convenience. The German version of this privacy policy is the legally binding one.
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
[Company name including legal form][Street and number][Postal code and city]Phone: [+49 (0) 000 000000]Email: [datenschutz@supporters.com]2. Data protection officer
3. Legal bases for processing
Where we obtain consent for processing operations involving personal data, Art. 6 (1) (a) GDPR serves as the legal basis. Where processing is necessary for the performance of a contract or to take steps prior to entering into a contract, the legal basis is Art. 6 (1) (b) GDPR.
Where processing is necessary for compliance with a legal obligation, we rely on Art. 6 (1) (c) GDPR. Where processing is necessary to protect legitimate interests, the legal basis is Art. 6 (1) (f) GDPR.
4. Hosting
This website is hosted by an external service provider. The personal data collected is stored on the host's servers. We use this service in the interest of a secure, fast and reliable presentation of our offering, on the basis of Art. 6 (1) (f) GDPR.
[Name of hosting provider][Address][Country]5. Server log files
Each time this website is accessed, the hosting provider automatically records information transmitted by your browser. This comprises:
- browser type and version
- operating system used
- referrer URL
- host name of the accessing computer
- time of the server request
- IP address
This data is not merged with other data sources. Collection takes place on the basis of Art. 6 (1) (f) GDPR. We have a legitimate interest in the technically error-free presentation and the security of our website. The data is deleted after [number] days.
6. Contacting us
If you contact us by email or telephone, we process the data you provide in order to handle your enquiry and any follow-up questions. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to the performance of a contract or is necessary to take steps prior to entering into a contract. In all other cases we base the processing on our legitimate interest in handling enquiries effectively, pursuant to Art. 6 (1) (f) GDPR.
The data remains with us until you ask us to delete it, withdraw your consent, or the purpose for storing it no longer applies. Mandatory statutory retention periods remain unaffected.
7. Fonts
This website serves the typeface it uses locally from our own server. No connection to third-party servers, such as Google Fonts, is established. Your IP address is not transmitted to third parties for this purpose.
8. Cookies and analytics
This website does not use cookies for analytics or marketing purposes and does not embed any audience measurement services.
9. Retention period
Unless a more specific retention period is stated in this policy, your personal data remains with us until the purpose for processing it no longer applies. If you make a legitimate request for erasure or withdraw your consent, your data will be deleted unless we have other legally permissible grounds for storing it. In the latter case, deletion takes place once those grounds cease to apply.
10. Your rights
You have the following rights in relation to your personal data:
- right of access under Art. 15 GDPR
- right to rectification under Art. 16 GDPR
- right to erasure under Art. 17 GDPR
- right to restriction of processing under Art. 18 GDPR
- right to data portability under Art. 20 GDPR
- right to object to processing under Art. 21 GDPR
- right to withdraw consent under Art. 7 (3) GDPR
An informal message to the contact details given above is sufficient to exercise these rights.
11. Right to lodge a complaint
In the event of breaches of the GDPR you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or the place of the alleged infringement. This right is without prejudice to any other administrative or judicial remedy.
Competent supervisory authority:[Name of the state data protection authority][Address]12. SSL / TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL / TLS encryption. You can recognise an encrypted connection by the browser address bar switching from http:// to https://. When encryption is active, the data you transmit to us cannot be read by third parties.
13. Changes to this privacy policy
We update this privacy policy whenever changes to our services or to the legal situation make it necessary. The current version applies to each new visit.