Data protection information

Within the framework of www.eustory.org and in connection with events such as EUSTORY History Camps, the EUSTORY Next Generation Summit or other physical and digital EUSTORY Youth Activities, Körber-Stiftung collects, processes and uses personal data of participants and former participants.

The protection of your personal data is an important concern for Körber-Stiftung. We observe the legal regulations on data protection and data security.

Below you will find information about what personal data we collect when you use our website at www.eustory.org (“website”) and utilise the services and functions it contains, and how we use this data and for what purposes. In addition, we will inform you of the legal basis for the processing of your data and, if processing is necessary to protect our legitimate interests, of our legitimate interests. If you have any further questions about the handling of your personal data, please contact our data protection officer.

  1. Person responsible
  2. Contact the responsible data protection officer
  3. Legal basis for data processing
  4. General Uses of Personal Data
  5. Data security
  6. Data transmission
  7. Calling up our website
  8. Newsletter
  9. Interaction with social networks and integration of third-party content
  10. External links
  11. What are cookies?
  12. Contact
  13. Registration for events and inclusion in data processing programme
  14. Data deletion
  15. Changes to this privacy policy
  16. Your rights

1 Person responsible

The protection of your personal data is a matter of important concern to Körber-Stiftung. We observe all legal provisions dealing with data protection and data safety.

In the following you will find information on what personal data we collect when you access our Internet site at www.eustory.org (»website«) and use the services and functions contained therein, and how we use these data for what purposes. In addition, we inform you about the legal bases for the processing of your data and, insofar as the data are processed to pursue our legitimate interests, about these legitimate interests.

2 Contact the responsible data protection officer

You can contact our data protection officer at datenschutz@koerber-stiftung.de or by post at

Justus Brandt
c/o intersoft consulting services AG
Beim Strohhause 17
20097 Hamburg
www.intersoft-consulting.de

3 Legal basis for data processing

You can reach our competent data protection officer at datenschutz@koerber-stiftung.de.

According to Art. 13 para. 1 lit. c) GDPR, we must also inform you about the legal bases for data processing on our website and the purposes of the respective data processing. The data processing on our website is authorised by two different legal bases in addition to the provision of consent:

If we obtain your consent for certain data processing, the legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR (or § 25 para. 1 TDDDG).

According to Art. 6 para. 1 sentence 1 lit. b GDPR, data processing is lawful if it is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

Insofar as processing is necessary to fulfil a legal obligation to which we are subject, the legal basis is Art. 6 para. 1 sentence 1 lit. c GDPR.

According to Art. 6 para. 1 sentence 1 lit. f GDPR (or § 25 para. 2 no. 2 TDDDG), data processing is also lawful if it is necessary to safeguard the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail, in particular if the data subject is a child.

In the following, we refer to these two legal bases for the relevant data processing.

The following information is considered to be personal data:

  • Name, first name
  • Academic title
  • Address (street, house number, postcode, place, country – work/home)
  • Telephone (work/home)
  • Fax (work/home)
  • E-Mail address (work/home)
  • Account and bank details (exclusively for reimbursements)
  • Date of birth
  • Earlier participation in a national history competition (incl. country, title of the submission, year of participation)

4 General Uses of Personal Data

Personal data of participants (registered users on the EUSTORY History Campus and participants in events organised by Körber-Stiftung) and other persons who are not participants are only processed and used for the Körber-Stiftung’s own purposes to the extent to which this is necessary for the establishment, implementation or termination of a legal obligation or relationships similar to a legal obligation with the person affected. Personal data will only be processed and used in addition to this if this is necessary to safeguard the legitimate interests of Körber-Stiftung and there is no reason to assume that the person affected has an overriding interest in excluding the processing or use.

  1. Promotion of gifted young academics through publicity in media: It is a central aim of Körber-Stiftung to promote gifted young academics through publicity in the media. For this reason, personal data (including contact details) of participants of the current competition round on this website and of the events specified above can be forwarded to the media. In this context, only the personal data which is necessary and helpful for reporting will be forwarded. In addition, data is forwarded with the information that such data exclusively serves to provide information to the media and/or to facilitate contact with participants for the purpose or reporting, and is neither suitable nor intended for publication in the transmitted form.
  2. Cooperating with partners on this website or in the course of events: The personal data of the participants is transmitted to the participating cooperation partners in connection with the implementation of events (amongst other things, EUSTORY Summits, physical and digital EUSTORY Youth Activities, Alumni activities, award ceremonies).
  3. Customer Management System of Körber-Stiftung: Additionally, we collect the data of participant in events in a customer management system. These data are stored in order to facilitate the management of our relations with our visitors, the participants in contests, and other interested parties. The legal basis for this data processing is Art. 6 (1) lit. f GDPR (or, as the case may be, sec. 28 para. 1 sentence 1 no. 2 BDSG).
  4. Contact forms and inclusion in data processing programmes: We provide an email address on our website (eustory@koerber-stiftung.de) which you can use to contact us. The data provided by you for this (e.g. name, address, telephone number, email address, etc.) are used by us for the purposes of the contact on the basis of Art. 6 (1) lit. a GDPR (secs. 4a BDSG, 13 para. 2 TMG).
  5. Transmission of data: To perform our services, including the despatch of books, flyers and brochures, we use contractually bound sister companies as well as outside undertakings and external service providers such as shipping providers. For these purposes we pass on data that we collect and use in connection with your use of this website, e.g. address data, for example in order to allow the shipment of books. Information collected and used by us in connection with your use of this website may therefore also be processed by third parties under certain conditions, but only insofar as that is necessary for the purposes set out in this Privacy Statement or insofar as the third party acts as a service provider bound by instructions or as a contract data processor. The parties mentioned in this clause, for example the shipping providers, are carefully selected and regularly checked by us in order to make sure that your privacy will be protected. They may use the data exclusively for the purposes specified by us. They are bound contractually to use your data exclusively in accordance with our instructions and in compliance with the applicable data protection laws. Your personal data are disclosed to others only for the purpose of making available to you the website and the services offered through it. The legal basis is Art. 6 (1) sentence 1 lit. b GDPR (sec. 28 para. 1 sentence 1 no. 1, 2 BDSG). Our legitimate interest in passing on the data is to make available to you the services offered on our website.
  6. Other usage of data: Your personal data will generally be processed or used in any further manner only insofar as that is allowed by a legal provision or you have consented to such data processing or use. In case of further processing for purposes other than those which the data were originally collected for, we will inform you prior to further processing about these other purposes and will give you the further relevant information.
  7. Data erasure: Generally, we delete or anonymise your personal data as soon as they are no longer needed for the purposes for which we collected or used them on the basis of the statements above. Specific statements above regarding the retention or deletion of personal data remain unaffected. Except where this Privacy Statement contains any other deviating provisions regarding the storage of data, the data collected by us will be stored as long as necessary for the purposes stated above which they were collected for.
  8. Security: In spite of technical precautions (firewall; SSL web server certificate), it cannot be excluded that transmitted data may be seen by unauthorised parties and possibly even forged. Data is temporarily stored on our server in connection with your access for the purpose of data security which possibly permits identification (IP address, date, time and page visited). Data is not analysed for statistical purposes other than in anonymous form.

5 Data security

We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and adapted to technological progress.

6 Data transmission

Your personal data will not be transferred to third parties unless we are legally obliged to do so, or the transfer of data is necessary to fulfil the contractual relationship, or you have previously expressly consented to the transfer of your data.

External service providers and partner companies such as online payment provider or a shipping company commissioned with the delivery will only receive your data if this is necessary to process your order. In these cases, however, the scope of the transmitted data is limited to the necessary minimum. Insofar as our service providers process your personal data on our behalf, we ensure that they comply with the provisions of the data protection laws in the same way within the framework of order processing in accordance with Art. 28 GDPR. Please also note the data protection notices of the respective providers. The respective service provider is responsible for the content of external services, whereby we check the services for compliance with the legal requirements within the scope of reasonableness.

We attach great importance to processing your data within the EU/EEA. However, we may use service providers who process data outside the EU/EEA. In these cases, we ensure that an appropriate level of data protection comparable to the standards within the EU is established at the recipient before your personal data is transferred. This can be achieved, for example, by means of EU standard contracts or binding corporate rules or special agreements to which the company may be subject.

7 Calling up our website

When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information (e.g. via a contact form), we collect the following technical information (log file data):

  • Operating system of the device you use to visit our website
  • Browser (type, version & language settings
  • the amount of data retrieved
  • the anonymised IP address of the device you use to visit our website
  • Date and time of access
  • the URL of the previously visited website (referrer)
  • the URL of the (sub)page that you call up on the website

The collection of this data is technically necessary in order to display our website to you and to ensure stability and security. We and our service provider regularly do not know who is behind an IP address. We do not merge the data listed above with other data.

To ensure the error-free operation of our web server and to guarantee server security, your IP address is processed by our server Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The IP address is anonymised after collection.

The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR or § 25 para. 2 no. 2 TDDDG. Since the collection of data for the provision of the website and storage in log files is absolutely necessary for the operation of the website and for protection against misuse, our legitimate interest in data processing prevails at this point.

8 Newsletter

8.1 General information

You can subscribe to our newsletter on some of our websites, which we use to inform you about the activities of our network. The content of the newsletter is briefly described during the registration process. The legal basis for sending the respective newsletter is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with Art. 7 para. 2 no. 3 GDPR. § Section 7 para. 2 no. 3 UWG or the legal authorisation pursuant to Section 7 para. 3 UWG.

We use the so-called double opt-in procedure to subscribe to our newsletters. This means that after you have registered, we will send you an email to the email address you have provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be automatically deleted.

The only mandatory information for sending the newsletter is your e-mail address. The provision of further data is voluntary: this data is used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending you the newsletter and until cancellation. We also store your current IP address at the time of registration, the time of registration and the confirmation for up to three years after registration (limitation period). The purpose of this procedure is to be able to prove your registration in case of doubt and, if necessary, to clarify any misuse of your personal data. The legal basis for logging the registration is our legitimate interest in accordance with Art. 6 Para. 1 S.1 lit. f GDPR in the proof of a previously given consent, see also Art. 7 Para. 1 GDPR.

You can revoke your consent to the sending of a respective newsletter at any time and unsubscribe from the newsletter. You can declare your cancellation by clicking on the link provided in every newsletter email or by sending an email to info@koerber-stiftung.de.

8.2 Newsletter Tracking

We would like to point out that we evaluate your user behaviour when sending the newsletter in order to determine whether and when the newsletter was opened. For this analysis, the emails sent contain so-called web beacons or tracking pixels, which are stored on our server and are loaded when the newsletter is opened. Technical information such as browser type, time of opening and IP address are transmitted. For the analyses, we link the aforementioned data and the web beacons with your email address and an individual ID. Links received in the newsletter also contain this ID and enable us to analyse your click behaviour.

We use the data obtained in this way to create a user profile in order to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click on in them and infer your personal interests from this. The legal basis for this data processing is your consent, Art. 6 para. 1 sentence 1 lit. a GDPR.

You can revoke your consent at any time with effect for the future. In this case, the cancellation includes the respective newsletter subscription, as a separate cancellation of the tracking is unfortunately not technically possible. To do so, simply click on the unsubscribe link provided in every email.

Such tracking is only possible to a limited extent if you have deactivated the display of images in your email programme by default. However, clicking on links will still be recorded. In this case, the newsletter will not be displayed in full and you may not be able to use all the functions. If you display the images manually, the above-mentioned tracking will take place.

The information from the tracking is stored for as long as you have subscribed to the newsletter.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this.

9 Interaction with social networks and integration of third-party content

We have integrated third-party content in some places on our website. This includes videos, map services, images or fonts. A more detailed description of who we embed content from and how your data is processed can be found below in the respective description of the embedded content.

As the contents are stored on the server of the provider concerned in each case, data can be transmitted to the provider concerned already from the moment in which you retrieve the contents from our website.

We have no influence on the data being collected or on the data processing operations, and we are neither responsible for this data processing nor the data controller within the meaning of the GDPR and of the BDSG. The full extent of the data collection, its legal basis, the purposes as well as the retention periods are also not known to us. Therefore the information provided here is not necessarily complete.

To our knowledge, the provider receives the information that you have accessed the subpage concerned on our website. In view of your visit to the website, your IP address, the date and time of the enquiry, the URL of the website from which the enquiry came, the language and version of your browser, your operating system and its interface, the cookie ID and your user name for the social network, if any, are transmitted. According to Facebook, that provider collects only an anonymised IP address in Germany.

The transmission of the data takes place to our knowledge regardless of whether you actually have an account with the provider or have logged in there. If you are logged in, your data will be attributed directly to your account by the provider. Providers may also use cookies on your computer to track you.

To our knowledge, the provider stores these data in user profiles used by the provider for the purposes of advertising, market research and/or the needs-based design of its website. Such an analysis is made (also for users who are not logged in) in particular to display needs-based advertising and to inform other users of the social network about your activities on our website. You have a right to object against the creation of such user profiles. If you wish to exercise this right to object, please contact the provider concerned.

Further information about the purpose and scope of data usage can be found in the various providers’ privacy statements. You will also find further information there regarding your rights in this respect and the proper settings to protect your privacy.

9.1 Third Party Providers

10 External Links

This website contains links to other websites which do not belong to Körber-Stiftung. We have no influence on compliance by the providers of such third party websites with data protection provisions.

11 What are cookies?

Cookies are data that are stored on your computer by a website that you visit and enable your browser to be reassigned. Cookies are used to transmit information to the organisation that sets the cookie. Cookies can store various information, such as your language setting, the duration of your visit to our website or the entries you make there. This prevents you from having to re-enter required form data each time you use the website, for example. The information stored in cookies can also be used to recognise preferences and target content according to areas of interest.

There are different types of cookies: Session cookies are data sets that are only temporarily stored in the working memory and are deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. With this type of cookie, the information can also be stored in text files on your computer. However, you can also delete these cookies at any time via your browser settings.

First-party cookies are set by the website you are currently visiting. Only this website is authorised to read information from these cookies. Third-party cookies are set by organisations that do not operate the website you are visiting. These cookies are used by marketing companies, for example.

The legal basis for possible processing of personal data using cookies and their storage duration may vary. If you have given us your consent, the legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR or § 25 para. 1 TDDDG. Insofar as the data processing is based on our overriding legitimate interests, the legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR or Section 25 para. 2 no. 2 TDDDG. The stated purpose then corresponds to our legitimate interest.

We use cookies to ensure the proper operation of the website, to provide basic functionalities, to measure reach and – with your consent – to tailor our services to your preferred areas of interest.

You can delete cookies already stored on your device at any time. If you want to prevent the storage of cookies, you can do this via the settings in your Internet browser. You can find instructions for common browsers here: Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Google Chrome mobile, Microsoft Edge Browser, Safari, Safari mobile. Alternatively, you can also install so-called ad blockers. Please note that individual functions of our website may not work if you have deactivated the use of cookies.

11.1 Consent with Borlab

This website uses Borlabs’ consent technology to obtain your consent to the storage of certain cookies on your end device or to the use of certain technologies and to document these in compliance with data protection regulations. The provider of this technology is Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany, website: https://borlabs.io/ (hereinafter referred to as “Borlabs”).

Borlabs  does not process any personal data.

The Borlabs-cookie stores the consents you gave when you entered the website. If you wish to revoke these consents, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked again for your cookie consent.

11.2 Matomo Analytics

With your consent, we use the open source software Matomo to analyze and statistically evaluate the use of the website. Cookies are used for this purpose. The information obtained about website usage is transmitted exclusively to our servers and summarized in pseudonymous usage profiles. We use the data to evaluate the use of the website. The data collected is not passed on to third parties.

The IP addresses are anonymized (IP masking) so that they cannot be assigned to individual users.

The data is processed on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR. In doing so, we are pursuing our legitimate interest in optimizing our website for our external presentation.

You can withdraw your consent at any time by deleting the cookies in your browser or changing your privacy settings (see bottom of this webpage).

Further information on Matomo’s terms of use and data protection regulations can be found at: https://matomo.org/privacy/

11.3 Microsoft Dynamics CRM

The “Microsoft Dynamics CRM” cookie from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, is used to carry out the registration for our newsletter. This cookie ensures that the registration process runs smoothly and securely. Personal data that is required to subscribe to the newsletter, such as your email address, is processed.

The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f GDPR and Section 25 para. 2 no. 2 TDDDG, whereby our legitimate interest lies in the efficient and secure administration of newsletter registrations.

The storage duration of the cookie corresponds to the duration required to complete the registration process and to ensure correct registration.

Your data may be processed in the USA and transferred there, i.e. to a third country outside the European Union (EU) or the European Economic Area (EEA). The legal basis for the data transfer is the adequacy decision with the USA pursuant to Art. 45 para. 1 GDPR based on the EU-US Data Privacy Framework. The provider has certified itself in accordance with the EU-US Data Privacy Framework and is therefore obliged to comply with the EU level of data protection.

Further information on data processing in connection with the Microsoft Dynamics CRM cookie can be found at: https://learn.microsoft.com/en-us/dynamics365/customer-insights/journeys/cookies#list-of-outbound-marketing-cookies.

12 Contact

When you contact us by email or via a contact form, the data you provide (your email address, possibly your name and telephone number) will be stored by us in order to answer your questions and process your requests. The legal basis in this respect is Art. 6 para. 1 sentence 1 lit. f GDPR. If we request information via our contact form that is not required for contacting you, we have always labelled this as optional. We use this information to specify your enquiry and to improve the processing of your request. This information is provided expressly on a voluntary basis and with your consent, Art. 6 para. 1 sentence 1 lit. a GDPR. If this involves information on communication channels (e.g. email address, telephone number), you also consent to us contacting you via this communication channel in order to respond to your enquiry. You can of course revoke this consent at any time for the future.

Your data that we have received in the course of contacting you will be deleted as soon as it is no longer required for the purpose for which it was collected, your request has been fully processed and no further communication with you is necessary or desired by you.

As the data controller, our company has implemented numerous technical and organisational measures to ensure that the personal data processed via this website is protected as completely as possible. Nevertheless, internet-based data transmissions can generally have security gaps. Absolute protection cannot be guaranteed; in any case, sending unencrypted e-mails is not secure. We therefore ask you not to send sensitive data by unencrypted e-mail, but to use either encrypted communication channels (e.g. our contact form) or the postal service.

13 Registration for events and inclusion in the data processing programme

In order to register on the community forum and participate in events, participants must declare their consent to the data protection information provided by Körber-Stiftung.

By using the website and participating in events like EUSTORY History Camps, the EUSTORY Next Generation Summit and other physical and digital EUSTORY Youth Activities and by agreeing to the Terms and Conditions, participants consent to the use of my data in the specified manner mentioned in 4. and 5 of this Privacy Policy:

  1. Consent to the use of personal data: You agree that the information provided here (name, date of birth, postal address, E-Mail address, telephone number, school and/or educational establishment, including address, class and submission data of my history competition entry) can be collected, processed, used and stored for the purposes of implementing offers on the community forum and for conducting events such as EUSTORY History Camps, EUSTORY Summits and other physical or digital EUSTORY Youth Activities by Körber-Stiftung and its official partners. You likewise consent to information concerning name, age, place of residence, school or educational establishment, class, federal state, submission and participation success being collected, processed and used by the Körber-Stiftung for the purposes of press and public relations work for the EUSTORY network. This includes the onward transmission of this data to media (e.g. print media, TV, radio, online media) and publication there. Such publication can also lead to the transmission of data to countries in which there is no suitable appropriate level of data protection. During the entire duration of the respective event round (application, preparation, conduct and follow-up) and your activity on the community forum, my name, telephone number, E-Mail address, age and place of residence may be transmitted to the media by Körber-Stiftung for the purpose of direct contact with me.
  2. Consent to the use of photos and film recordings: You also give my consent to photos and film recordings of you being made within the framework of the community forum, events such as History Camps, EUSTORY Summits, other physical or digital EUSTORY Youth Activities and award ceremonies for national history competitions, and to the processing and use of such material by the Körber-Stiftung for the purposes of conducting the competition and for press and public relations work (including publications on the Internet and in social media). Such publication can also lead to the transmission of data to countries in which there is no suitable appropriate level of data protection.
  3. Data protection law consent for Alumni work: You agree that your data (name, date of birth, postal address, E-Mail address, telephone, information about my submission to the history competition and participation success as well as activity like this) can be stored, processed and used for the purpose of Alumni work by the Körber-Stiftung. Alumni work in particular includes invitations and opportunities to apply for workshops and seminars (e.g. History Camps, EUSTORY Next Generation Summit, other Alumni projects and digital or physical EUSTORY Youth Activities). You likewise agree that I can be contacted by post and by E-Mail with information about EUSTORY even after the conclusion of the event.
  4. Using the Internal Groups on the EUSTORY History Campus: You agree that your data (username, name, content I share in the groups and forums, documents I upload to the groups) can be stored, processed and used in the internal groups on the EUSTORY History Campus for the purpose of interacting with the other members of the group.

13.1 Revocation of Consent

Participants can revoke these consents to the abovementioned uses at any time with effect for the future by E-Mail to eustory@koerber-stiftung.de.

However, revocation of the data protection law consent to participation in a competition which also relates to statements about name, age, address, E-Mail address leads to exclusion from events and the community forum.

Likewise, a revocation of the consent to the use of photos and film recordings leads to exclusion from the competition, because it is not possible to conduct EUSTORY events and participate on the EUSTORY History Campus without sufficient press and public relations work. Any revocation of consent only applies for the future.

With regard to the consent to use of photos and film recordings, this means that photos and film recordings which have already been made, and in particular already published, can continue to be published. Taking into consideration the interests of the objecting participant, the Körber-Stiftung will decide whether current publications can be stopped or whether the publication of recordings already made can be waived.

Revocation therefore will not, for example, lead to the prevention of use of photos and film recordings which have already been made if this would involve disproportionately high amounts of time, effort and expenditure (e.g. after publication in print media which has already taken place) or would adversely affect the press and public relations work to a disproportionate extent, also in the interests of the other participants who may have been recorded at the same time. Revocation must be declared to the Körber-Stiftung.

14 Data deletion

In general, we delete or anonymise your personal data as soon as it is no longer required for the purposes for which we collected or used it in accordance with the above paragraphs. Specific information on the retention and deletion of personal data in the previous sections remains unaffected.

Unless this privacy policy contains other, deviating provisions regarding the storage of data, the data collected by us will be stored by us for as long as it is required for the aforementioned purposes for which it was collected.

15 Changes to this privacy policy

The further development of the Internet and our website may also affect the handling of personal data. We therefore reserve the right to amend this data protection declaration in the future within the framework of the applicable data protection laws and, if necessary, to adapt it to changed data processing realities. We therefore recommend that you visit our website from time to time to take note of any updates to our privacy policy

16 Your rights

We will be happy to provide you with information as to whether personal data concerning you is being processed; if this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 GDPR. In addition, you have the right to rectification (Art. 16 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to erasure (Art. 17 GDPR) and the right to data portability (Art. 20 GDPR) under the respective legal requirements.

You have the right to object to the processing under the legal requirements (Art. 21 GDPR).

To exercise your above rights, please contact us by e-mail at datenschutz@koerber-stiftung.de or by post at Körber-Stiftung, Kehrwieder 12, 20457 Hamburg. The exercise of your above rights is free of charge for you.

Without prejudice to these rights and the possibility of seeking any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority at any time, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes data protection regulations (Art. 77 GDPR).

The following data protection authority is responsible for Körber-Stiftung:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit,
Ludwig-Erhard-Str 22, 7th floor
20459 Hamburg
Tel.: 040 / 428 54 – 4040
Fax: 040 / 428 54 – 4000
E-Mail: mailbox@datenschutz.hamburg.de

This privacy policy has been machine translated.

Status of this privacy policy: 20 February 2026