Data Protection Advice

The operators of this website (https://www.science4people.org) take the protection of your personal data very seriously. As new technologies and the ongoing development of this website may require changes to this Privacy Policy, we recommend that you review it regularly.

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Science4People e.V.
Hans-Kopfermann-Straße 1
85748 Garching bei München
Germany

Email: info@science4people.org
Website: https://www.science4people.org/

2. General Information on Data Processing

We process personal data exclusively in accordance with the applicable data protection provisions, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG).

Personal data means any information relating to an identified or identifiable natural person. This may include, for example, names, email addresses, IP addresses or information about the use of a website.

We process personal data only insofar as this is necessary for the operation of our website, communication with you, the processing of enquiries and donations, the fulfilment of our statutory and organisational purposes, or where another legal basis permits the processing.

3. Provision of the Website and Server Log Files

When you access our website, the web server processes technical information required for the operation of the website. This may include in particular:

• IP address of the accessing device,
• date and time of access,
• page or file accessed,
• amount of data transferred,
• referrer URL, if transmitted by the browser,
• browser and browser version,
• operating system used, and
• information about successful or unsuccessful access.

The processing is carried out in order to provide the website technically, ensure its stability and security, identify technical problems and prevent unauthorised access attempts.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional operation of our website.

Server log files are stored only for as long as necessary to ensure the secure and reliable operation of the website, to analyse technical errors, and to detect and prevent misuse. Longer storage takes place only where necessary to investigate or document a specific security-related incident.

As a general rule, these data are not combined with other data sources.

4. Hosting

This website is hosted by Alfahosting GmbH.

As part of the hosting services, Alfahosting processes technical data required for the provision and secure operation of the website. This may include IP addresses, access times, pages and files accessed, browser information and other technical connection data.

The processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and reliable provision of our website.

According to the provider, the servers used by Alfahosting are located in Germany.

Where Alfahosting processes personal data on our behalf, such processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.

5. Technically Necessary Cookies

Our website uses only technically necessary cookies and comparable storage technologies that are required for the operation and use of the website.

These include, in particular, session and language settings of the TYPO3 content management system. They enable, for example, the technical management of a session and the selection and provision of the requested language version.

These technologies are not used for analytics, tracking, profiling or advertising purposes.

Where information is stored on or accessed from your device, this is carried out on the basis of Section 25(2) no. 2 TDDDG, as these processes are strictly necessary to provide functions expressly requested by you.

Where personal data are processed in this context, the processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a technically functional and user-friendly website.

Technically necessary session cookies are generally deleted when the browser session ends. Where individual technically necessary settings are stored for a longer period, the storage period depends on the respective technical function.

6. Contact by Email

If you contact us by email, we process the data you provide, in particular your email address, your name where provided, and the content of your message, for the purpose of handling your enquiry and further communication with you.

Depending on the nature of the communication, the legal basis is Art. 6(1)(b), (c) or (f) GDPR.

The data are stored only for as long as necessary for the respective communication, statutory retention obligations or legitimate organisational purposes.

Our email accounts are operated by Alfahosting GmbH.

7. Donations and Donor Data

If you make a donation to Science4People e.V., we process the personal data required to process, allocate and administer the donation.

This may include in particular:

• name,
• address,
• contact details,
• bank or payment information,
• donation amount,
• date of donation,
• intended purpose of the donation, and
• information required for issuing a donation receipt.

The processing is carried out for the purpose of processing and administering your donation and, where applicable, issuing and sending a donation receipt.

Depending on the individual processing activity, the legal bases are in particular Art. 6(1)(b) GDPR and Art. 6(1)(c) GDPR for compliance with statutory retention and documentation obligations, particularly under tax law.

In the case of a bank transfer, personal data are also processed by the financial institutions involved in the payment.

Donor data are stored only for as long as necessary for the processing and documentation of the donation. Where statutory retention obligations apply, the data are deleted after the relevant retention periods have expired.

8. External Links

Our website contains links to websites and services provided by third parties.

When you follow such a link, you leave our website. When accessing the external website, personal data, in particular your IP address and technical connection data, may be processed by the respective provider.

The respective provider is generally responsible for the processing of personal data on external websites. The privacy policies of the respective external providers apply.

The mere presence of an external link does not mean that Science4People e.V. controls the processing of data carried out on the linked website.

9. Recipients of Personal Data

Within Science4People e.V., only those persons who require personal data for the performance of their respective tasks have access to such data.

Where necessary and legally permissible, personal data may also be disclosed in particular to the following categories of recipients:

• hosting and IT service providers,
• email and communication service providers,
• banks and payment service providers,
• tax advisers and accounting service providers,
• authorities and public bodies where required by law, and
• other service providers engaged by us to fulfil our tasks.

Personal data are disclosed for other purposes only where there is a legal basis for doing so or where you have given your prior consent.

10. Storage Period

We store personal data only for as long as necessary to fulfil the respective purpose of the processing.

Data may also be retained where statutory retention, documentation or record-keeping obligations apply, or where storage is necessary for the establishment, exercise or defence of legal claims.

Once the purpose of the processing no longer applies and any statutory retention periods have expired, the data are deleted or anonymised.

11. Legal Bases for Processing

Depending on the respective processing activity, we rely in particular on the following legal bases:

Art. 6(1)(a) GDPR – Consent
where you have given us consent for a specific processing activity;

Art. 6(1)(b) GDPR – Contract and pre-contractual measures
where processing is necessary for the performance of a contract or for taking steps at your request prior to entering into a contract;

Art. 6(1)(c) GDPR – Legal obligation
where processing is necessary for compliance with a legal obligation;

Art. 6(1)(f) GDPR – Legitimate interests
where processing is necessary for the purposes of our legitimate interests or those of a third party and your interests, fundamental rights and freedoms do not override those interests.

12. Your Rights

Where we process your personal data, you have, subject to the applicable legal requirements, in particular the following rights:

• right of access pursuant to Art. 15 GDPR,
• right to rectification pursuant to Art. 16 GDPR,
• right to erasure pursuant to Art. 17 GDPR,
• right to restriction of processing pursuant to Art. 18 GDPR,
• right to data portability pursuant to Art. 20 GDPR,
• right to object pursuant to Art. 21 GDPR, and
• right to withdraw consent pursuant to Art. 7(3) GDPR.

Withdrawal of consent applies with effect for the future. It does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

To exercise your rights, you can contact us at:

Science4People e.V.
Email: info@science4people.org

13. Right to Object

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right pursuant to Art. 21 GDPR to object to such processing at any time on grounds relating to your particular situation.

We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves the establishment, exercise or defence of legal claims.

14. Right to Lodge a Complaint with a Supervisory Authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

The supervisory authority generally responsible for Science4People e.V. is:

Bavarian State Office for Data Protection Supervision
(Bayerisches Landesamt für Datenschutzaufsicht – BayLDA)

Promenade 18
91522 Ansbach
Germany

Telephone: +49 (0) 981 180093-0
Email: poststelle@lda.bayern.de
Website: https://www.lda.bayern.de/

You may also lodge a complaint with another competent supervisory authority under the GDPR.

15. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

Our website is provided via an encrypted HTTPS connection. This protects data transmitted between your browser and our server during transmission.

16. Changes to this Privacy Policy

We may amend this Privacy Policy if legal requirements, our website or the data processing procedures we use change.

The current version published on this website applies.

Last updated: September 2026