Privacy Policy

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.

This website of the IRMA-Stiftung is purely informational. We do not collect personal data about visitors, do not use analytics or tracking tools, and do not use advertising cookies. Use is possible without providing personal data.

Where you contact us by email, the data you provide will be processed in order to answer your enquiry.

What rights do you have regarding your data?

You have the right at any time to receive free information about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may revoke this consent at any time for the future. In addition, under certain circumstances you have the right to request the restriction of the processing of your personal data. You furthermore have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time regarding this or any other questions on the subject of data protection.

2. Data Controller

The controller responsible for data processing on this website is:

IRMA-Stiftung Gehegsweg 12 98596 Brotterode-Trusetal Germany

Email: impressum@irma-stiftung.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

3. Hosting

This website is hosted externally. In the process, technical data (in particular IP addresses) may be automatically recorded and processed on the host’s servers when you access the website.

We use the following host:

netcup GmbH Daimlerstraße 25 D-76185 Karlsruhe

External hosting takes place in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR). Our host processes your data only to the extent necessary to fulfil its performance obligations and follows our instructions as well as the requirements of the GDPR. A contract for data processing (Auftragsverarbeitungsvertrag) is in place.

4. Server log files

When you access this website, our host automatically collects information that your browser transmits to us. This comprises:

  • Browser type and version used
  • the operating system of the accessing computer
  • date and time of access
  • the so-called referrer URL
  • the IP address (truncated / anonymised where technically possible)
  • other similar technical data

This data is not combined with other personal data. Processing is based on our legitimate interest in the technically error-free and secure provision of our website (Art. 6(1)(f) GDPR). This data is not merged with other data sources.

5. Contact by email

If you contact us by email, the details from your email (sender address, subject, content) are stored for the purpose of processing your enquiry. We do not pass on this data without your consent. Processing takes place on the basis of a legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR) or for taking pre-contractual steps (Art. 6(1)(b) GDPR). The data is deleted as soon as it is no longer required for processing, unless statutory retention periods conflict with deletion.

6. SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the browser’s address line changing from “http://” to “https://” and by the padlock symbol in your browser bar.

When SSL or TLS encryption is active, the data you transmit to us cannot be read by third parties.

Our offering contains links to external third-party websites, over whose content we have no influence. We therefore cannot accept any liability for this third-party content. The respective provider or operator of the linked pages is always responsible for their content. Any processing of personal data by the linked offerings takes place exclusively under their own terms stated there.

8. Your rights (overview)

  • Information, correction and deletion: Within the scope of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of data processing, as well as, where applicable, a right to correction or deletion.
  • Right to restriction of processing: You have the right to request the restriction of the processing of your personal data.
  • Right to data portability: You have the right to receive data that we process automatically on the basis of your consent or in fulfilment of a contract, handed over to you or to a third party in a common, machine-readable format.
  • Right to object (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
  • Right to lodge a complaint with a supervisory authority: In the event of infringements of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence.

9. Storage period

Unless a more specific storage period has been stated within this privacy policy, personal data remains stored with us until the purpose for processing ceases to apply. If you assert a legitimate request for deletion or revoke consent, the data will be deleted, provided we do not have other legally permissible grounds for storage (e.g. tax or commercial retention periods).

Source / orientation: e-recht24.de · Status: August 2026