Data Protection
Declaration

2. Collection of General Information

Hosting (DomainFactory)

We host our website with DomainFactory GmbH, c/o WeWork, Neuturmstraße 5, 80331 Munich.

When you visit our website, DomainFactory collects various log files, including your IP addresses. For details, please refer to DomainFactory’s privacy policy: https://www.df.eu/de/datenschutz/.

The use of DomainFactory is based on Art. 6(1)(f) of the GDPR. We have a legitimate interest in ensuring the most reliable presentation and security of our website. We have entered into a Data Processing Agreement (DPA) with the provider to ensure that data is processed in compliance with the GDPR.

3. Server Log Files

Every time our website is accessed, general information is automatically collected. This information (server log files) includes, for example:

• Type of web browser and operating system used
• Domain name of your Internet service provider
• IP address
• Date and time of access

This data is technically necessary to deliver the website’s content correctly. Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is deleted once the purpose has been fulfilled.

4. SSL Encryption

To ensure the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL/TLS) via HTTPS.

5. Newsletter (Mailchimp)

If you subscribe to our newsletter, we will use the data you provide exclusively for this purpose until you unsubscribe. We use the double opt-in procedure to ensure a valid registration.

Use of Mailchimp: The newsletter is sent via the mailing service provider “Mailchimp,” a newsletter distribution platform operated by the U.S. provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

The legal basis for sending the newsletter is your consent pursuant to Art. 6(1)(a) GDPR.

Data transfer to the U.S.: Mailchimp is certified under the EU-U.S. Data Privacy Framework. In addition, we have entered into standard contractual clauses with Mailchimp to ensure the protection of your data even when it is processed in the U.S.

Withdrawal: You may withdraw your consent to the storage of your data and its use for newsletter distribution at any time. You will find a link to do so in every newsletter. You may also notify us of your request using the contact options provided at the end of this statement.

6. Your Rights as a Data Subject

You have the following rights with respect to the personal data we hold about you:

Right of access (Art. 15 GDPR): You have the right to know what data we store about you.
Right to rectification (Art. 16 GDPR): If any data is incorrect, we must correct it.
Erasure (Art. 17 GDPR): You may request the erasure of your data (“right to be forgotten”).
Restriction of processing (Art. 18 GDPR): You may request that we restrict the use of your data.
Data portability (Art. 20 GDPR): You have the right to receive your data in a machine-readable format.
Objection (Art. 21 GDPR): If your data is processed on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to the processing.

To exercise your rights, please contact: datenschutz@weltethos-institut.org.

7. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data (Art. 77 GDPR). The competent authority for us is:

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg
P.O. Box 10 29 32, 70025 Stuttgart
https://www.baden-wuerttemberg.datenschutz.de/

8. Changes to Our Privacy Policy

We reserve the right to update this Privacy Policy to ensure it remains in compliance with current legal requirements or to reflect changes to our services (e.g., when introducing new services). The most recent version will apply to your next visit.

Privacy Policy effective as of: March 23, 2026