With this privacy policy, we inform you about the personal data we process when you visit our website and when you contact us, the purposes for which this is done, and the rights you have.
1. Controller
Eine-Welt-Stiftung Rhein-Berg
c/o Ernst J. Leffelaar
Im Hilgersfeld 98
51427 Bergisch Gladbach
Phone: +49 2204 63822
Email: info@eine-welt-stiftung.de
We have not appointed a data protection officer, as we are not legally obliged to do so. For questions about data protection, please contact the address above.
2. Hosting and server logs
Our website is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp, Germany. The servers are located in Germany. We have concluded a data processing agreement with Mittwald in accordance with Art. 28 GDPR.
Each time our website is accessed, information transmitted by your browser is automatically stored in server log files: IP address, date and time of access, page requested, amount of data transferred, referrer URL, browser type and operating system. We need this data to deliver the website and to ensure its security. The legal basis is Art. 6(1)(f) GDPR. The log files are automatically deleted by the host after a short period.
The connection to our website is encrypted using SSL/TLS (recognisable by “https://” in the address bar).
3. Contact by email and phone
If you contact us by email or phone, we process your details (e.g., name, email address, phone number, content of the request) to process your request. The legal basis is Art. 6(1)(b) GDPR, insofar as your request relates to a donation or cooperation; otherwise, Art. 6(1)(f) GDPR (our interest in answering requests). We delete the data as soon as your request has been fully processed and no statutory retention obligations apply.
4. Contact form
Using the contact form, you can send us your name, email address, and a message. The information will be
- stored in the database of our website (at Mittwald, see section 2),
- sent by email to our mailbox info@eine-welt-stiftung.de, and
- copied to an email mailbox of our technical service provider, which is operated by Google (Gmail, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). This may involve a transfer to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework.
The legal basis is Art. 6(1)(b) and (f) of the GDPR (see section 3). We delete the submissions as soon as your request is finalized and there are no legal retention obligations.
5. Spam protection with Google reCAPTCHA
To protect the contact form from automated spam submissions, we use Google reCAPTCHA v3 from Google Ireland Limited (address see above). reCAPTCHA is only loaded on the contact page. Google analyzes the visitor’s behavior (e.g., IP address, time spent, mouse movements, browser and device information) and transmits this data to Google; a transfer to the USA is possible (Data Privacy Framework, see above). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the protection against abuse and spam. Further information: Google privacy policy.
6. Web analytics with Google Analytics (only with consent)
If you click “Accept” in the cookie notice, we use Google Analytics 4 from Google Ireland Limited (address see above), integrated via the WordPress plugin “Site Kit by Google”, to understand how our website is used (e.g. pages visited, time on page, approximate region, device type). For this, Google Analytics sets cookies (_ga, _ga_*, storage period up to 2 years) and transfers usage data to Google. Google Analytics 4 does not store IP addresses. A transfer to the USA is possible (Data Privacy Framework, see above). Without your consent, Google Analytics is not loaded and no data is transferred to Google.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. We store your decision in a technically necessary cookie (ews_einwilligung, storage period 1 year). You can withdraw your consent at any time with effect for the future: open Cookie settings at the bottom of any page and choose “Reject”; existing analytics cookies are then deleted. The usage data is automatically deleted once the retention period set in Google Analytics has expired.
7. Security (Wordfence)
To protect the website from attacks, we use the security plugin Wordfence. It checks for malicious patterns in requests to our server and logs IP addresses of suspicious requests and login attempts. To update security rules, the plugin establishes connections to servers of the provider Defiant Inc. (USA); no data from normal visitors is transmitted in this process. The legal basis is Art. 6(1)(f) GDPR (protection of the website and its users).
8. Fonts and translations
All fonts are loaded from our own server; there is no connection to Google Fonts or other font providers. The English version of the website is created using the TranslatePress plugin. Only our own content is translated; visitor data is not transmitted in this process.
9. Donations
We accept donations by bank transfer to our donation account. In this case, we receive your name, bank account details, the amount and the purpose of the donation from the bank. We use this information to record the donation and, if desired, to issue a donation confirmation. The legal basis is Art. 6(1)(b) and (c) of the GDPR. The data is stored in accordance with the tax and commercial retention obligations (usually 10 years).
10. Your rights
You have the right to
- Information about the data stored about you (Art. 15 GDPR),
- Correction of incorrect data (Art. 16 GDPR),
- Deletion (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
- Data portability (Art. 20 GDPR),
- Objection against processing based on Art. 6(1)(f) GDPR for reasons arising from your particular situation (Art. 21 GDPR),
- Revocation of a given consent with effect for the future (Art. 7(3) GDPR).
To exercise these rights, simply contact info@eine-welt-stiftung.de. You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for us, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
11. Changes
We will adapt this privacy policy if the technology of our website or the legal situation changes. The version published here applies.
Last updated: October 2026