Information on the handling of personal data

We are very pleased about your interest in our website - and thus in our company. The protection of your private rights and freedoms is very important to us; we only use your data for the purposes intended. Since it is important to us that you are aware at all times of the extent to which we collect, use and, if necessary, transfer your data to third parties, we will provide you with the following comprehensive information on the processing of your personal data collected by us or stored by us.

Visiting our website is generally possible without providing (personal) data; if there are exceptions to this for selected services, we will explain these in the following chapters. When processing personal data, we strictly adhere to the requirements of the EU General Data Protection Regulation (GDPR) and any other data protection regulations.

Name and address of the controller

INTERKULTUR
Ruhberg 1
35463 Fernwald
Germany

Phone: +49 (0)6404 69749-25
E-mail: data-protection@interkultur.com
Website: https://www.interkultur.com

Name and address of the data protection officer

Jörg ter Beek
Cortina Consult GmbH
Hafenweg 24
48155 Münster
Germany

Phone: 0251 95203740
E-mail: dsb.interkultur@cortina-consult.de
Website: https://www.cortina-consult.com

Actuality of the privacy policy

To ensure that we always have up-to-date data protection information in connection with the services of our website, we use the CLOUD DSE service of Cortina Consult GmbH, Hafenweg 24 in 48155 Münster. In this process, the contents of our privacy policy are hosted on the servers at Cortina Consult and managed centrally. Necessary changes are implemented promptly by Cortina Consult and immediately displayed via direct integration on our website.

Rights of data subjects

The EU General Data Protection Regulation (GDPR) provides for extensive rights for data subjects in Chapter III, which we explain to you accordingly below with regard to the processing of your personal data:

Right to information

This requirement concerns in particular information on the following details of data processing:

  • Processing purposes
  • Data categories
  • Recipients or categories of recipients, if applicable
  • If applicable, the planned storage duration or the criteria for determining this duration.
  • Note on the respective right of correction, deletion, restriction or objection
  • Existence of the right to complain to a supervisory authority
  • If applicable, origin of the data (if not collected from you)
  • If applicable, existence of automated decision-making including profiling, including meaningful information about the logic involved, the scope and the effects to be expected
  • If applicable, (planned) transfer to a third country or international organization
Right to rectification

We will correct any erroneous data immediately, provided that you inform us of the circumstance accordingly.

Right to erasure (right to be forgotten)

Provided that the processing is no longer necessary and one of the following conditions is met:

  • Discontinuation of the purpose of processing
  • Withdrawal of their consent and absence of any other legal basis for processing
  • Objection to processing without an important reason to the contrary
  • Unlawful processing
  • Required to fulfill a legal obligation
  • Data collection was carried out in accordance with Art. 8 (1) GDPR
Right to restriction of processing

Provided that one of the following conditions is met:

  • You dispute the accuracy of your data (restriction can be made for the duration of the review on our side)
  • In the event of unlawful processing and if the data is not to be deleted, restriction of processing shall take the place of deletion
  • If the processing purposes cease to apply, at the same time you need your data for the assertion, exercise or defense of legal claims
  • After you have lodged an objection pursuant to Art. 21 (1) GDPR and for the duration of the examination as to whether our legitimate reasons outweigh yours.
Right to data portability

If it is technically possible and does not affect the rights and freedoms of other persons, we will - at your request - transfer your data to another recipient (responsible party).

Right to object

If we collect or have collected and process personal data from you (on the basis of Art. 6 (1) e or f or Art. 9 (2) a GDPR), you have the right to object to the data processing (including profiling) at any time (with effect for the future). In exceptional cases, the objection may be ineffective, e.g. if we can demonstrate compelling interests worthy of protection for the processing that outweigh your interests or processing serves the assertion, exercise or defense of legal claims. If we process your personal data for the purpose of direct marketing, you have the right to object to such processing at any time. This also applies to profiling, insofar as it is related to such direct advertising. You also have the right to object to processing of your data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

Automated decisions in individual cases including profiling

If we collect or have collected and process personal data from you, you have the right not to be subject to any decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. Exceptions to this requirement apply if the decision is necessary for the conclusion or performance of a contract between you and us or you have expressly consented to the processing. In any case, we will take reasonable steps to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain the intervention of a person on our part, to express our own point of view and to contest the decision.

Right to complain to a supervisory authority

A list of the supervisory authorities responsible in Germany can be found on the website of the Federal Commissioner for Data Protection or at the following link: https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html.

General information on data processing on the website

The following information applies to the data processing on our website in general. If there are exceptions or additions to this information, these are described in detail in the relevant sections.

Data security information

We secure our website and other systems through technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. In addition, we have implemented SSL encryption (SHA256) on our website to protect your data. However, despite regular checks, complete protection against all dangers is not possible.

Our legitimate interest

Our legitimate interest, as defined in Article 6 (1) f GDPR, is based on the performance of our business activities in order to maintain our ability to operate and secure the employment of our employees.

General deadlines for data deletion

After the purpose of storage has ceased, the retention periods are generally at least six or ten years. As a rule, data is deleted immediately in accordance with our deletion concept, provided that this does not conflict with any retention obligation, necessity for contract fulfillment or a legitimate interest.

Deletion or blocking of personal data

We store your personal data only for the period required to fulfill the specified purpose. After the purpose no longer applies and after expiration of any existing retention periods, your data will be deleted immediately. If deletion is not possible, the data will be blocked instead.

Collection of general data and information

As soon as you visit our website, our web server collects some general data and technical information - as shown in the table below:

Data collected

Purpose of the survey

browser types and versions usedcorrect display of the page content
Operating system used, visitor origin (referrer, e.g. Google), subpages clicked onOptimization of our website content as well as our advertising
Date and time of access to the website as well as IP address and internet service provider of the visitorEnsuring the permanent functionality of our IT systems (for the operation of the website) and prevention of misuse

Other data and information for security in the event of attacks

Providing relevant information to law enforcement agencies in the event of a cyberattack

Obligation to provide personal data

Under certain circumstances (e.g. due to legal or contractual regulations), an obligation arises for you to provide us with your personal data. Examples of such processing as follows:

Nature or purpose of the processing

Need

Conclusion of a sales contract (e.g. your address)Fulfillment of the contractual obligation (e.g. delivery of the goods to your address)
In the employee context (e.g. transmission of data to the tax office)Compliance with legal requirements (e.g. tax regulations)
Google Analytics
Purpose of processingCreation of usage profiles to optimize the cost-benefit factor on the website
Legal basisConsent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG)
Recipient (if applicable)Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland
If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)If applicable, transfer, storage and processing in the USA.

We have concluded an order processing contract with the recipient to ensure that the personal data of our website visitors is only processed in accordance with our instructions.

If known: Duration of data storageSee General deadlines for data deletion
Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessitynone
Consequences of non-compliance (in case of failure to provide the required data)none
If applicable, existence of an automated decision-making processIn this context, we do not use automatic decision-making.
If applicable, origin of the data (if not collected directly from the data subject)As a rule, the data originates from the data subject himself.
If applicable, categories of pb data (if not collected directly from the data subject)which pages and functions are called up or clicked on during the website visit (click behavior), IP address assigned by the Internet service provider (ISP) in anonymized form, previously visited website (referrer), subpages visited, time spent on the website, frequency of visit, date, access location, time of visit, user agent
Change of purpose if necessarynone
Opt-OutInstallation of the browser plugin: https://tools.google.com/dlpage/gaoptout, See also under Cookies
Data protection officer of the providerhttps://support.google.com/policies/contact/general_privacy_form
Privacy policy of the providerhttps://policies.google.com/privacy?hl=en
Google reCaptcha
Purpose of processingBot protection, spam prevention, fraud detection
Legal basis (according to Art. 6 / 9 GDPR)
  • Informed consent (Art. 6 para. 1 a)
  • Recipient (if applicable)Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)If applicable, transfer, storage and processing in the USA, Google LLC

    The data transfer is based on the EU-U.S. Data Privacy Framework via which Google LCC is certified.

    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessitynone
    Consequences of non-compliance (in case of failure to provide the required data)none
    If applicable, existence of an automated decision-making processIn this context, we do not use automatic decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)The data usually originates from the data subject, but may also originate from third parties.
    Where applicable, categories of personal data (if not collected directly from the data subject).Screen resolution, browser language, browser plug-ins, click path, date and time of visit, IP address, user behavior, time spent on a page, user input, device information, mouse movements, geographic location, device operating system, user agent
    Change of purpose if necessarynone
    Data protection officer of the providerhttps://support.google.com/policies/contact/general_privacy_form
    Privacy policy of the providerhttps://policies.google.com/privacy?hl=en
    LinkedIn Ads
    Purpose of processingWebsite optimization, advertising
    Legal basis (according to Art. 6 / 9 GDPR)
  • Informed consent (Art. 6 para. 1 a)
  • Recipient (if applicable)LinkedIn Ireland Unlimited Company, LinkedIn Inc
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)LinkedIn, California, USA
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessitynone
    Consequences of non-compliance (in case of failure to provide the required data)none
    If applicable, existence of an automated decision-making processIn this context, we do not use automatic decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)The data usually originates from the data subject, but may also originate from third parties.
    Where applicable, categories of personal data (if not collected directly from the data subject).none
    Privacy info of the addinhttps://www.linkedin.com/legal/cookie_policy
    Change of purpose, if applicablenone
    Matomo (self-hosted)
    Purpose of processingThis is an open source web analytics service used to analyze user behavior and optimize the website.
    Recipient (if applicable)

    none

    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)A data transfer to a third country does not take place and is not planned.
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessitynone
    Consequences of non-compliance (in case of failure to provide the required data)none
    If applicable, existence of an automated decision-making processIn this context, we do not use automatic decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)The data usually originates from the data subject, but may also originate from third parties.
    Where applicable, categories of personal data (if not collected directly from the data subject).

    Browser language, Browser type, Device operating system, Device type, Geographic location, IP address, Number of visits, Referrer URL, Screen resolution, Usage data, Subpages visited.

    Change of purpose if necessarynone
    Meta Pixel (formerly Facebook Pixel)
    Purpose of processingOur website uses the visitor action pixel from Meta (formerly Facebook) to measure conversions. The behavior of website visitors can be tracked after they have been redirected to the provider\'s website by clicking on a Facebook ad. In this way, the effectiveness of Facebook ads can be evaluated for statistical and market research purposes and optimized for future advertising measures.
    Legal basis (according to Art. 6 / 9 GDPR)Consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG).

    If personal data is collected on our website with this tool and forwarded to Facebook, we are jointly responsible with Meta Platforms Ireland Ltd. for this data processing (Art. 26 GDPR). We expressly point out that this joint responsibility is limited exclusively to the collection of data and the transfer to Facebook. The further processing of personal data by Facebook is the responsibility of Facebook. You can find the wording of the agreement on joint processing here: https://www.facebook.com/legal/controller_addendum.

    Recipient (if applicable)Meta Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour Dublin 2 Ireland
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)If applicable, transfer, storage and processing of personal data in the USA.

    The data transfer is based on the standard contractual clauses of the EU Commission. Meta Platforms is certified in accordance with the EU-US Data Privacy Framework (DPF).

    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessitynone
    Consequences of non-compliance (in case of failure to provide the required data)none
    If applicable, existence of an automated decision-making processIn this context, we do not use automatic decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)The data usually originates from the data subject, but may also originate from third parties.
    Where applicable, categories of personal data (if not collected directly from the data subject).Ads viewed, Browser information, Content viewed, Device information, Geographic location, Interactions with ads, services, and products, IP address, Marketing information, Pixel ID, Referrer URL, Usage data, User behavior, Facebook user ID, Device operating system, Device ID, HTTP header, Items clicked, Pages viewed, Facebook cookie information, Page/click behavior, User agent, Browser type.
    Change of purpose if necessarynone
    Data protection officer of the providerhttps://www.facebook.com/help/contact/540977946302970
    Privacy policy of the providerhttps://www.facebook.com/privacy/explanation
    YouTube videos
    Purpose of processingThis is a video player service from Google.
    Legal basis (according to Art. 6 / 9 DSGVO)
  • Informed consent (Art. 6 para. 1 a)
  • Recipient (if applicable)Alphabet Inc, Google LLC, Google Ireland Limited
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)If applicable, transfer, storage and processing in the USA, Google LLC

    The data transfer is based on the EU-U.S. Data Privacy Framework via which Google LCC is certified.

    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessitynone
    Consequences of non-compliance (in case of failure to provide the required data)none
    If applicable, existence of an automated decision-making processIn this context, we do not use automatic decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)The data usually originates from the data subject, but may also originate from third parties.
    Change of purpose if necessarynone
    Vimeo
    Purpose of processingThis is a video player service from Vimeo LLC
    Legal basis (according to Art. 6 / 9 GDPR)
  • Informed consent (Art. 6 para. 1 a)
  • Recipient (if applicable)Vimeo LLC; 555 West 18th Street, New York, New York 10011, United States of America
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)If applicable, transfer, storage and processing in the USA
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessitynone
    Consequences of non-compliance (in case of failure to provide the required data)none
    If applicable, existence of an automated decision-making processIn this context, we do not use automatic decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)Browser Information, Browser Language, Browser Type, Cookie Information, Device Information, Device Operating System, Third Party Source Information, IP Address, Pages Visited, Referrer URL, Information Users Provide on Website, Search Queries, Geographic Location, Content Viewed, User Agent
    Where applicable, categories of personal data (if not collected directly from the data subject).none
    Change of purpose if necessarynone
    Data protection officer of the providerPrivacy@vimeo.com
    Privacy policy of the providerhttps://vimeo.com/privacy