IMPRINT

Kinder-Schirm Foundation
in trusteeship of the Ruhrstiftung Bildung und Erziehung
(registered in the list of foundations of the state of NRW, order number 1009)
Theaterplatz 8, 45127 Essen
Telephone: 0201 125173-51
Fax: 0201 125173-59
E-mail: mail@stiftung-kinder-schirm.de
Homepage: www.stiftung-kinder-schirm.de
Chairman of the Board of Trustees of the Kinder-Schirm Foundation: Dr. Peter Noé
Board of the Ruhrstiftung Bildung und Erziehung: Dr. Sebastian Kuhlmann (Chairman),
Thomas Kufen

Privacy policy of the
Ruhrstiftung Education and Upbringing

1. Name and address of the controller

The controller within the meaning of the EU General Data Protection Regulation (GDPR) and
other national data protection laws of the member states as well as other data protection
regulations is the
Ruhrstiftung Bildung und Erziehung
c/o NATIONAL-BANK Aktiengesellschaft, Theaterplatz 8, 45127 Essen, Germany
Telephone: +49 201 125173-51
Fax: +49 201 125173-59
E-mail address: kontakt@ruhrstiftung.de
Website: www.ruhrstiftung.de

1. General information on data processing
As a matter of principle, we only process your personal data as a user to the extent
necessary to provide a functional website and our content and services. Exceptions apply in
cases where you have given us your consent for certain processing operations or where the
processing of data is permitted by law.

III Provision of the website and creation of log files

1. Description and scope of data processing
Each time our website is accessed, our system automatically collects data and
information from the computer system of the accessing computer. Your IP address,
website usage data (log data on website access, date and time of access, amount of
data transferred) and device information (e.g. operating system, browser type and
version) are stored.

The data is only stored in the log files of our system. This data is not stored together with
your other personal data.

1. Purpose of data processing and its legal basis
The temporary storage of the data described in section 1 above by the system is
necessary to ensure that the website is delivered to your computer and to guarantee
the functionality and security of the website. For this purpose, your IP address must
remain stored for the duration of the session.

The data is stored in log files to ensure the functionality of the website. We also use the data
to ensure the security of our information technology systems and for possible fault analysis
and error detection. The data is not analyzed for marketing purposes in this context.
However, a program-based evaluation of website usage is carried out for the purpose of
continuous optimization.

Insofar as the provision of the service is concerned, i.e. the delivery of the website requested
by you, Art. 6 para. 1 sentence 1 b) GDPR is the legal basis for the processing of your
personal data. With regard to ensuring IT security, the processing is based on Art. 6 para. 1
sentence 1 f) GDPR and Section 25 para. 2 TTDSG. The legitimate interest in the temporary
storage of log data (server log files) and session cookie information lies in our interest in the
efficient and secure provision of our website.

With regard to the evaluation of website usage, the legal basis is a balancing of our
legitimate interests against your legitimate interests in accordance with Art. 6 para. 1
sentence 1 f) GDPR. Our legitimate interests pursued in this respect lie in increasing the
efficiency of our website, evaluating the success of presentations and descriptions of our
products and in testing and improving the user-friendliness of the website.

1. Duration of storage
The data is stored for as long as it is required to achieve legitimate purposes. If the
data is collected to provide the website (so-called “session-based data”), it is stored
until the respective session has ended. If the data is stored in log files, it is deleted
after 30 days at the latest.
2. Possibility of objection
The collection of data for the provision of the website and the storage of data in log
files is absolutely necessary for the operation of the website. The same applies to
processing for the purpose of legal obligations of the controller. In this respect, you
have no right to object.
3. Categories of recipients
The personal data processed for the aforementioned purposes will be disclosed to
the following categories of recipients
Providers of technical services and services, in particular data center services, which
are used by the controller without exception as processors.
4. Contact form and email contact
5. Description and scope of data processing
If you send us inquiries, e.g. via the contact form, your details from the inquiry form,
including the contact details you provide there, will be stored by us for the purpose of
processing the inquiry and in the event of follow-up questions. We will not pass on
this data without your consent. For security reasons and to protect the transmission of
confidential content that you send to us, our website uses TLS encryption. This
means that data that you transmit via this website cannot be read by third parties. You
can recognize an encrypted connection by the “https://” address line of your browser
and the lock symbol in the browser line.

Alternatively, you can contact us via the e-mail address kontakt@ruhrstifung.de. In this case,
your personal data transmitted with the e-mail will be stored.

1. Purpose of data processing and its legal basis
We process the personal data from the input screen to process your contact. The
other personal data processed during the sending process is used to prevent misuse
of the contact form and to ensure the security of our information technology systems.
The legal basis for the processing of data transmitted in the course of contacting us or
sending an email is Art. 6 (1) sentence 1 f) GDPR, whereby our legitimate interest lies in
contacting you and, if necessary, optimizing our activities as a foundation.
1. Duration of storage
The data is generally deleted as soon as it is no longer required to achieve the
purpose for which it was collected. For the personal data from the input mask of the
contact form and those sent by e-mail, this is the case when the respective
conversation with you has ended. The conversation is ended when it can be inferred
from the circumstances that the matter in question has been conclusively clarified.
Furthermore, your consent – if given – will be stored.
2. Possibility of objection
Since you contact us without giving your consent under data protection law, you can
object to the storage of your personal data at any time. In such a case, the
conversation cannot be continued. You can object at any time at
kontakt@ruhrstiftung.de.
3. Categories of recipients
The personal data processed for the aforementioned purposes will be disclosed to
the following categories of recipients
Providers of technical services and services, in particular data center services, which
are used by the controller without exception as processors.
4. Obligations to provide
The provision of your personal data is necessary for communication with you. There
is no legal obligation to provide the data. However, failure to provide the data would
mean that you would not be able to communicate with us via this channel.
5. Rights of the data subject
If personal data is processed, the respective natural person, in particular you, is a data
subject within the meaning of the GDPR and has the following rights vis-à-vis the controller
1. Right to information pursuant to Art. 15 GDPR
You can request confirmation from the controller as to whether personal data
concerning you is being processed by us.
You also have the right to request information as to whether the personal data
concerning you is being transferred to a third country or to an international
organization. In this context, you may request to be informed of the appropriate
safeguards pursuant to Art. 46 GDPR in connection with the transfer.
2. Right to rectification pursuant to Art. 16 GDPR
You have a right to rectification and/or completion vis-à-vis the controller if the
processed personal data concerning you is incorrect or incomplete. The controller
must carry out the rectification without undue delay.
3. Right to restriction of processing pursuant to Art. 18 GDPR
Under the conditions set out in the GDPR, you may request the restriction of the
processing of personal data concerning you.
4. Right to erasure pursuant to Art. 17 GDPR
You have the right to obtain from the controller the erasure of personal data
concerning you without undue delay and the controller shall have the obligation to
erase personal data without undue delay unless one of the exceptions provided for in
the GDPR applies.
5. Right to data portability pursuant to Art. 20 GDPR
You have the right to receive the personal data concerning you, which you have
provided to the controller and the processing of which is based on consent or on a
contract with you, in a structured, commonly used and machine-readable format. You
also have the right, under the conditions set out in the GDPR, to transmit this data to
another controller without hindrance from the controller to which the personal data
has been provided.
In exercising this right, you also have the right to have the personal data concerning
you transmitted directly from one controller to another, where technically feasible. The
freedoms and rights of other persons must not be affected by this.
6. Right to object pursuant to Art. 7 para. 3 GDPR
You have the right to withdraw your consent to the processing of your personal data
at any time with effect for the future.
7. Right to withdraw the declaration of consent under data protection law
pursuant to Art. 21 GDPR
You have the right to withdraw a declaration of consent under data protection law at
any time. The withdrawal of consent shall not affect the lawfulness of processing
based on consent before its withdrawal. This also applies to the revocation of
declarations of consent given to us before the GDPR came into force, i.e. before May
25, 2018. All personal data stored on the basis of the consent given will be deleted in
this case, unless there is another legal basis for further storage under the law.
8. Automated decision-making in individual cases, including profiling
You have the right not to be subject to a decision based solely on automated
processing, including profiling, which produces legal effects concerning you or
similarly significantly affects you. No such automated decision-making takes place in
the context of the use of our website.
9. Right to lodge a complaint with a supervisory authority pursuant to Art. 57
para. 1 f), Art. 77 GDPR
Without prejudice to any other administrative or judicial remedy, you have the right to
lodge a complaint with a supervisory authority, in particular in the Member State of
your habitual residence, place of work or place of the alleged infringement if you
consider that the processing of personal data relating to you infringes the GDPR. The
supervisory authority with which the complaint has been lodged shall inform the
complainant on the progress and the outcome of the complaint including the
possibility of a judicial remedy pursuant to Art. 78 GDPR. To make it easier for you to
exercise your rights, you will find the address of the supervisory authority responsible
for us below
State Commissioner for Data Protection and Freedom of Information North Rhine-
Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf, Germany.