Privacy Policy
Hamburger Stiftung für Wirtschaftsethik
When you visit our website or contact us, personal data is collected. The following information explains what data is collected and how it is used. The protection of your data is very important to us. We process your data in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
1. Data Controller
The data controller responsible for the processing of personal data on this website is:
Hamburger Stiftung für Wirtschaftsethik Erdmannstr. 10 22765 Hamburg
Telephone: +49 40 3077 9212 Email: post@stiftung-wirtschaftsethik.de
2. Data Protection Officer
: Our foundation is not currently under any legal obligation to appoint a Data Protection Officer. Please address any enquiries regarding data protection to the controller using the contact details provided above.
3. General information on personal data
Personal data is any information relating to an identified or identifiable natural person – for example, name, date of birth, address, email address or telephone number. We process personal data exclusively for specified, explicit and legitimate purposes, only to the extent necessary and only on the basis of a legal authorisation or your consent.
4. Access to our website (server log files)
When you visit our website, our hosting provider automatically records information in so-called server log files:
IP address of the accessing device
; date and time of access
; pages and files
accessed; amount
of data transferred; browser, browser version, operating system
; referrer URL (previously visited page)
This data is technically necessary to provide the website, ensure its stability and security, and prevent misuse.
Legal basis: Article 6(1)(f) of the GDPR (legitimate interest in a secure and functional website).
Retention period: The log files are deleted after a few days, unless they are required for longer for security reasons (e.g. to investigate attacks).
Our hosting provider is IONOS SE, Elgendorfer Straße 57, 56410 Montabaur. We have a data processing agreement with IONOS in accordance with Article 28 of the GDPR.
5. Contact via email or telephone
If you contact us by email or telephone, the data you provide (name, email address, telephone number, content of your message) will be processed to deal with your enquiry.
Legal basis: Article 6(1)(b) of the GDPR (pre-contractual measures / performance of a contract), provided your enquiry relates to a contractual relationship; otherwise, Article 6(1)(f) of the GDPR (legitimate interest in responding to enquiries).
Retention period: Your enquiry will be stored for as long as is necessary to process it. The data will then be deleted, provided there are no statutory retention obligations (e.g. under tax or commercial law) that prevent this.
6. Event invitations and information about our work
If you provide us with your email address for the purpose of being added to our mailing list for event invitations or information about our foundation’s work, we will process your data exclusively for this purpose.
Legal basis: Article 6(1)(a) of the GDPR (consent).
Withdrawal: You may withdraw your consent at any time, free of charge and without giving reasons, for example by sending an informal email to the contact address given above. Withdrawal does not affect the lawfulness of processing carried out on the basis of your consent prior to its withdrawal.
7. Donations and funding applications
If you contact us in connection with a donation, contribution or funding application, we will process the data you provide in order to deal with your enquiry.
Legal basis: Article 6(1)(b) of the GDPR (initiation or performance of a contract) and Article 6(1)(c) of the GDPR (compliance with legal obligations, in particular tax and charity law requirements regarding documentation and retention).
Retention period: The data will be stored for as long as is necessary to fulfil the purpose and to comply with statutory retention obligations (in particular those under the German Fiscal Code, the German Commercial Code and the law on donations).
8. Cookies and Plugins
Our website does not currently use any cookies beyond those technically necessary for the website to function. Plugins from social networks or other online services are not integrated. Links to external sites (e.g. social networks) are provided exclusively as plain text links, which only establish a connection to the respective providers when clicked.
9. Web analytics
Our hosting provider, IONOS SE, provides us with anonymised analyses of the use of our website (e.g. number of page views, browsers used, approximate geographical origin). No personal identification takes place in this process.
Legal basis: Article 6(1)(f) of the GDPR (legitimate interest in optimising our website).
10. Disclosure of data
We do not disclose your personal data to third parties unless
you have given your express consent,
the disclosure is necessary to fulfil a contract with you,
there is a legal obligation to do so, or
the data is disclosed to data processors carefully selected by us and bound by Article 28 of the GDPR (e.g. hosting, IT maintenance).
Data will only be transferred to countries outside the European Economic Area (third countries) if an adequate level of data protection is ensured – in particular through an adequacy decision by the European Commission (for example, the EU-US Data Privacy Framework), by means of the European Commission’s standard contractual clauses, or on the basis of your explicit consent.
11. Your rights
You have the following rights in relation to us regarding your personal data:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Article 18 of the GDPR)
Right to data portability (Article 20 of the GDPR)
Right to object to processing (Article 21 of the GDPR)
Right to withdraw consent (Article 7(3) of the GDPR)
To exercise your rights, please contact us using the details provided above.
Furthermore, you have the right to lodge a complaint with a data protection supervisory authority (Article 77 of the GDPR). The competent authority for the Hamburger Stiftung für Wirtschaftsethik is:
The Hamburg Commissioner for Data Protection and Freedom of Information Ludwig-Erhard-Straße 22, 7th Floor 20459 Hamburg Telephone: +49 40 428 54-4040 Email: mailbox@datenschutz.hamburg.de
12. Changes to this Privacy Policy
We will amend this Privacy Policy as soon as this becomes necessary due to changes in the legal framework or in our data processing activities. The current version is available on this page.
Last updated: 5 May 2026