We take the protection of your personal data very seriously. Therefore, with this privacy policy, we would like to inform you about the nature, scope, and purpose of the personal data we collect, use, and process. Furthermore, we would like to inform you about your rights.
We would like to point out that data transmission on the internet (e.g., in email communication) can have security vulnerabilities. Complete protection of data against third-party access is not possible.
1. Manager
The controller within the meaning of Art. 4 No. 7 GDPR, other data protection laws applicable in the Federal Republic of Germany and the Member States of the European Union, and other provisions of a data protection character is:
WIFU FoundationAlfred-Herrhausen-Straße 4858448 Witten
represented by the board of directors:Prof. Dr. Tom A. Rüsen
Tel: +49 2302 8898300E-mail: info@wifu-stiftung.de
2. Data Protection Officer
The controller has appointed the data protection officer:
Solicitor Martin ErleweinAlte Poststr. 28b42555 Velbert
E-mail: datenschutz@wifu.de
Any data subject affected by the processing of personal data by the controller may contact the data protection officer directly at any time with any questions and suggestions regarding data protection.
3. Scope of the processing of personal data
We generally only process the personal data of users of these pages to the extent necessary for providing a functional website and our content and services. As a rule, it is possible to use our website without providing personal data.
To the extent personal data (e.g. name, address, email addresses and telephone numbers) is collected, particularly in the event of you contacting us, this is done, as far as possible, on a voluntary basis.
4. Legal basis for the processing of personal data
Where we obtain the consent of the data subject for processing operations, Article 6(1) sentence 1(a) of the General Data Protection Regulation (GDPR) serves as the legal basis for processing based on this consent.
When processing personal data that is necessary for the performance of a contract to which the data subject is party, Article 6(1) sentence 1(b) GDPR serves as the legal basis. This justification also continues to apply to processing operations that are necessary for the implementation of pre-contractual measures.
Where personal data must be collected and/or processed due to legal requirements or in the public interest, Article 6(1) sentence 1(c) or (e) GDPR serves as the legal basis.
The processing is lawful if it is necessary for the purposes of the legitimate interests pursued by the WIFU Foundation as controller, the WIFU, or by a third party, and if such interests are not overridden by the interests or by the fundamental rights and freedoms of the data subject which require protection of personal data. Article 6(1)(f) GDPR shall apply as the legal basis for the processing.
5. Duration of storage
Your personal data will be deleted or blocked as soon as the purpose of storage ceases to apply, there are no legal retention periods contrary to the deletion of the data, and no deviating information is subsequently provided regarding individual processing procedures.
In the case of statutory retention obligations, we restrict the processing of the relevant data.
6. Data sharing
Your personal data will not be passed on to third parties for any purposes other than those listed below.
Your personal data will only be passed on to third parties if you have given your express consent, if there is a legal obligation to do so, if it is legally permissible and required for the performance of contractual relationships with you pursuant to Art. 6 (1) lit. b GDPR.
7. Transfer to Third Countries
Auf unseren Seiten unter www.wifu.de sind Funktionen der Firma Google LLC. (Google), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, und ihrer Tochtergesellschaft, der Firma YouTube, LLC (YouTube), 901 Cherry Ave., San Bruno, CA 94066, USA, eingebunden. Für den europäischen Raum ist das Unternehmen Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Irland für alle Google-Dienste verantwortlich.
It is not impossible that Google also transfers and processes personal data of European internet users in the USA and thus in a third country. In order to provide appropriate guarantees for compliance with the conditions for data transfer laid down in Chapter V of the GDPR and also with the other provisions of the GDPR, Google uses Standard Data Protection Clauses adopted by the EU Commission pursuant to Art. 46(2)(c) GDPR. Further information on what data is collected by Google, what this data is used for and what rights you are entitled to can be found at https://www.google.com/intl/de/policies/privacy/.
8. Server-Log-Dateien
When you visit our website, your browser automatically sends information to our website's server. This information is stored in server log files. The data stored includes, but is not limited to:
● IP address of the terminal device you are using
Date and time of server request
Referrer URL (Identifier for the previously visited webpage)
Browser type and browser version
● operating system used
This data cannot be assigned to specific individuals. The IP address is anonymised after collection. This data will not be merged with other data sources. This storage is based on the legal grounds of Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.
We reserve the right to review this data retrospectively if we become aware of specific indications of unlawful use. The data will be deleted unless further retention is necessary for evidential purposes. Otherwise, the data will be wholly or partially excluded from deletion until an incident has been finally clarified.
9. SSL- bzw. TLS-Verschlüsselung
Diese Seite nutzt aus Gründen der Sicherheit eine SSL- bzw. TLS-Verschlüsselung. Wenn die SSL-Verschlüsselung aktiviert ist, können die Daten, die Sie an uns übermitteln, nicht von Dritten mitgelesen werden.
You can recognise an encrypted connection by the address bar of the browser changing from “http://” to “https://” and by the padlock symbol in your browser bar.
10. Contact Form
The responsible body pursues the statutory purpose of promoting education, science, research and teaching in the field of family business, particularly within the framework of the legally dependent Witten Institute for Family Business (WIFU) of the Faculty of Economic Sciences at the University of Witten/Herdecke gGmbH. This promotion of the WIFU by the responsible body takes place, inter alia, through the responsible design and provision of the websites at www.wifu.de.
If you send us enquiries via the contact form, these will be stored by us, including the personal data you provide, for the purpose of processing the enquiry and in case of follow-up questions.
11. Weitergabe an das Wittener Institut für Familienunternehmen (WIFU)
Sofern sich Ihre Kontaktaufnahme bzw. Anfrage tatsächlich nicht unmittelbar an den Verantwortlichen, sondern an das WIFU bzw. Mitarbeiter des WIFU richtet, geben wir Ihre Anfrage und die von Ihnen übermittelten Kontaktdaten an das WIFU bzw. die Universität Witten/Herdecke gGmbH weiter. Bei Abgabe Ihrer Einwilligung im Kontaktformular gilt Art. 6 Abs. 1 lit. a DSGVO als rechtliche Grundlage für diese Weitergabe.
The data protection declaration of the University of Witten/Herdecke gGmbH can be found at: https://www.uni-wh.de/datenschutz/.
12. Embedded services
12.1. Matomo
Wir nutzen auf unseren Webseiten den Webanalysedienst Matomo, der uns die seitenübergreifende Wiedererkennung eines Nutzers zum Zweck der Analyse des Nutzerverhaltens ermöglicht (Reichweitenanalyse). Hierdurch können wir statistische Auswertungen erstellen, welche Seiten und Themen besonders attraktiv für unsere Nutzer sind, wann auf diese Seiten zugegriffen wird und aus welcher Region die Nutzer kommen. Hierfür erfassen wir verschiedene Nutzungsinformationen, wie z.B. die anonymisierte IP-Adresse, URL-Referrer, verwendete Browser und Betriebssysteme.
The information collected by Matomo on the use of our websites is stored locally on our server. There is no data transfer to third parties in this respect. IP addresses are automatically anonymised by truncation at the beginning of processing, so that they can no longer be uniquely assigned, but only provide an approximate indication of the region in which a user has logged into the internet. No cookies are used for Matomo; likewise, there is no active retrieval of information required for user assignment from the user's end device. The system is configured to take into account if you have set ‚Do-Not-Track‘ in your browser settings. In this case, no analysis will take place.
We have a legitimate interest in the anonymised analysis of user behaviour in order to optimise our pages and our offerings according to actual page usage. The use of Matomo is therefore based on Article 6(1)(f) of the GDPR.
You have the option to object to the processing of your data for analysis purposes. By clicking on the following link, you can stop the analysis by Matomo (https://stats.wifu.de/index.php?module=CoreAdminHome&action=optOut&language=deThe processing of your data carried out up to the point of your objection remains permissible.
12.2. Google Maps
We use the Google Maps service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google) to provide you with interactive maps for relevant use on our website. Google Maps is integrated into our pages in such a way that Google does not receive any data from you until you have accepted the reloading of Google Maps and the data processing and data export to the USA by Google. The legal basis for the processing of personal data is your consent in accordance with Art. 6 (1) lit. a GDPR.
The data mentioned in the „Server-Log Files“ section of this privacy policy will be transmitted. Please note the additional terms of use for Google Maps/Google Earth (https://www.google.com/intl/de_DE/help/terms_maps/If you wish to interact further with Google Maps (e.g. to view a larger map, plan routes, etc.), you will leave our data protection area of responsibility. At this point, Google will ask you to consent to the cookies used by Google and the purposes for which they are used. For the described processing, Google also transmits personal data to third countries (e.g. USA) outside the EU. Since US authorities can gain insight into personal data from providers in the USA, the data protection level in the USA does not correspond to that of the EU.
If you are logged into Google, your data is directly associated with your account. If you are not logged into a Google account, Google stores the collected data with unique identifiers linked to the browser, app, or device you are using. Google stores your data as usage profiles. You have the right to object to the creation of these user profiles. Please direct any such objection to Google.
For more information on what data Google collects, how it is used, and your rights, please visit https://www.google.com/intl/de/policies/privacy/. Furthermore, in its „Google Maps Controller-Controller Data Protection Terms,“ Google has committed to the appropriate handling of personal data, drawing inspiration from the European GDPR (https://privacy.google.com/businesses/mapscontrollerterms/).
12.3. YouTube
We use YouTube plugins to embed videos on our websites. The operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, which is a subsidiary of Google.
YouTube is integrated into our pages in such a way that YouTube will not receive any data from you until you load a video by clicking on a button and accept YouTube's data processing, storage of information on your device (local storage) and data export to the USA. The legal basis for processing personal data by Google in this respect is your consent according to Art. 6(1)(a) GDPR.
The integration of videos on these pages uses YouTube's advanced privacy mode. However, the advanced privacy mode does not necessarily exclude the transfer of data to YouTube partners. This may lead to further processing by Google, over which we have no influence. Google also transmits personal data for the described processing to third countries outside the EU; in particular to the USA.
As soon as a YouTube video is started on these websites, a connection is established to YouTube's servers. In doing so, the YouTube server receives information about which of our pages you are currently visiting. Furthermore, once a video is started on the YouTube platform, YouTube may store various cookies on your device. With the help of these cookies, YouTube can obtain information about visitors to our website. This information is used, among other things, to collect video statistics, improve user-friendliness, and prevent fraud attempts. The cookies remain on your device until you delete them.
As long as you are logged into your YouTube account, you allow YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account. For more information on how Google handles user data, please see the YouTube Privacy Policy at: https://www.google.de/intl/de/policies/privacy.
13. Social Media
The WIFU Foundation maintains its own presence on various social media platforms. Our aim is to provide you with a broad, multimedia offering and to engage with you on the topic of family businesses and the services of the Witten Institute for Family Business (WIFU).
Links on www.wifu.de will take you to our pages on social media providers„ platforms (so-called fan pages). In some cases, the providers of these platforms provide us, as the operators of these fan pages, with statistical evaluations, particularly regarding interactions (likes, shares, posts, etc.) that you make on one of our fan pages. These evaluations are so-called “Page Insights".
Due to the case law of the Court of Justice of the European Union (CJEU), it is to be assumed that we are jointly responsible with the operators of the platforms for personal data collected in connection with a visit to or interaction on one of our fan pages, insofar as this data is processed for Page Insights. This is based on our legitimate interest in optimising our fan page (Art. 6(1) sentence 1 lit. f GDPR). Further information can be found by visiting one of our social media presences via the supplementary data protection declaration for our social media linked there.
We expressly point out that the social media platforms we use store the data of their users (e.g. personal information, IP addresses) in accordance with their own data usage policies and use it for business purposes. Please refer to the respective data protection notices of these providers for your rights and setting options to protect your privacy.
13.1. Facebook
Our Facebook fan page is for discussion and public relations on all matters relating to the WIFU Foundation/WIFU concerning family businesses.
Facebook is a service provided by Meta Platforms Inc. (Meta). The company responsible for data processing in the European region is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
When you visit our fan page, Meta collects, stores, and processes your personal data. You can find Facebook's data policy at https://de-de.facebook.com/policy.php. Beyond this, we only engage in a very limited amount of further data processing. Due to the case law of the ECJ, it must still be assumed that we are jointly responsible with Facebook for your data that is collected in connection with a visit to or interaction with our Facebook fan page.
Facebook provides us as the operator of a fan page with insights that can be used to gain information about the interactions (likes, shares, posts, etc.) that you make on our Facebook fan page. Facebook has agreed with us as the operator of a fan page in a joint responsibility agreement that Facebook is primarily responsible for providing you with information about the joint processing and enabling you to exercise the rights available to you under the GDPR concerning the processing of your data in connection with our Facebook fan page. You can find more information about Facebook Insights here.
We use the provided insights in the form of anonymised statistics for the purpose of tailoring and continuously optimising our pages. We gain insights into, among other things, the activity of page visitors, our page views, the reach of posts, their views and the average duration of video playback, as well as information about the countries and cities our visitors come from. We cannot draw conclusions about individual users from this information.
Meta/Facebook also processes data from you in the USA. Due to the existing legal situation in the USA, US authorities can demand access to personal data from providers in the USA. Therefore, the level of data protection in the USA is assumed to be below the EU standard. This can lead to risks for the lawfulness and security of data processing.
To nonetheless offer suitable guarantees for an appropriate level of data protection, Meta uses the standard data protection clauses adopted by the EU Commission under Art. 46(2)(c) GDPR, the binding validity of which has been agreed with us. The Facebook Data Processing Addendum, which corresponds to the standard contractual clauses, can be found at https://www.facebook.com/legal/terms/dataprocessing. Meta has also taken other appropriate measures to ensure a level of protection comparable to that of the GDPR.
You can find information on the type, scope, purposes, legal basis, and opt-out and withdrawal options for Facebook's use of cookies at https://www.facebook.com/legal/terms/page_controller_addendum.
13.2. Instagram
Unser Instagram-Kanal dient dem Austausch sowie der Öffentlichkeitsarbeit zu allen Themen der WIFU-Stiftung/ des WIFU rund um Familienunternehmen. Bei Ihrem Besuch unsere Fanseite auf Instagram erhebt, speichert und verarbeitet die Facebook Ltd., 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland (Facebook), als Anbieter von Instagram personenbezogene Daten von Ihnen. Die Datenschutzrichtlinie von Instagram finden Sie unter https://help.instagram.com/519522125107875.
Wir nehmen darüber hinaus nur in sehr begrenztem Umfang weitere Datenverarbeitung vor. Facebook bietet den Betreibern von Fanpages auf Instagram die statistische Auswertung der Nutzung der Fanpage durch sog. Insights an. Entsprechend der Rechtsprechung des Europäischen Gerichtshofes sind wir danach neben Facebook als gemeinsam verantwortlich für die Verarbeitung personenbezogener Daten auf Instagram anzusehen. Facebook hat mit den Betreibern der Fanpage eine Vereinbarung über die Aufteilung der sich hieraus ergebenden Rechte und Pflichten geschlossen. Diese finden Sie unter https://www.facebook.com/legal/terms/page_controller_addendum.
We use the statistics function within Instagram Insights to learn more about our page visitors. Using this feature allows us to better tailor our content to our visitors' interests. While we can statistically view information, such as user origin, we cannot draw conclusions about individual users from this information.
Information about the type, scope, purposes, legal basis, and objection and revocation options for Instagram's use of cookies can be found here: https://help.instagram.com/1896641480634370.
13.3. YouTube
We use our YouTube channel „WIFU – Stiftung“ to advance discussions and public relations on all topics related to family businesses through film contributions.
When you visit YouTube, Google LLC („Google“), Amphitheatre Parkway, Mountain View, CA 94043, USA, as the operator of YouTube, stores and processes personal data in accordance with Google’s privacy policy. You can find YouTube’s privacy policy at https://policies.google.com/privacy?hl=de&gl=de.
YouTube offers channel operators YouTube Insights for statistical evaluation of channel usage. We use the statistics function within YouTube Insights to learn more about the usage of our video channel. The use of this function allows us, among other things, to analyse the frequency of views of our posts or the average playback duration of the videos. We cannot establish any personal reference. Furthermore, we only carry out further data processing to a very limited extent.
Information about the type, scope, purposes, legal basis, and opt-out and revocation options for YouTube's use of cookies can be found at https://policies.google.com/technologies/cookies (including Youtube).
13.4. XING
Our page for the WIFU Foundation on Xing is for exchange and public relations concerning all topics of the WIFU Foundation/WIFU related to research on family businesses. When you visit our page on LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, collects, stores, and processes data. You can find Xing's data protection policy at https://privacy.xing.com/de/datenschutzerklaerung.
Xing offers us the statistical evaluation of our site's usage through so-called Insights. These Insights data are particularly suitable for analysing visitors' interaction on a Xing page and the frequency of views (reach). The Insights data provided by Xing are not used by us.
Information on the type, scope, purposes, legal basis, and opt-out and withdrawal options for Xing's use of cookies can be found at https://privacy.xing.com/de/datenschutzerklaerung.
13.5. LinkedIn
Our page for the WIFU Foundation on LinkedIn is for networking and public relations concerning all topics related to family businesses. When you visit our page on LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland collects, stores and processes your data. You can find LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy?_l=de_DE.
LinkedIn provides us with statistical analysis of the use of our page through so-called "Insights". We use the Insight data provided by LinkedIn to analyse visitor interaction with our page on LinkedIn (especially reach). For the contractual regulation of the resulting joint responsibility, LinkedIn Ireland Unlimited Company bases the processing on a Data Processing Agreement; you can find this at https://legal.linkedin.com/pages-joint-controller-addendum.
Information on the type, scope, purposes, legal basis, and options for objection and withdrawal when using cookies by LinkedIn can be found at https://www.linkedin.com/legal/cookie-policy
14. WIFU-Events-App
Die WIFU-Events-App wird im Apple App Store für iOS-Geräte und im Google Play Store für Android-Geräte zum Download bereitgestellt.
14.1. Purpose of Data Processing
Die WIFU-Events-App bietet Ihnen Zugang zu allgemeinen Informationen und einzelnen Events der WIFU-Stiftung/des WIFU. Bei der App handelt es sich um eine mobile Anwendung, zur Förderung des Informationsaustauschs und der Kommunikation zwischen den Nutzern. Je nachdem, welche Funktionen der App von Ihnen in Anspruch genommen werden, kann eine weiterführende Verarbeitung personenbezogener Daten erforderlich werden.
To optimise the design of the app and the events, statistical analysis of user interactions with the app will be carried out by the person responsible.
14.2. Type of Data
To use the app, users must register after being assigned a personal access code. Only the user's surname and first name are required for registration. The entry of further personal data when creating the user profile is voluntary. The legal basis for processing your user profile data is Art. 6(1)(a) GDPR.
For technical reasons, the collection and processing of so-called log file data is necessary to offer you the functions of the app and to ensure its stability and security. This includes the IP address, date and time of the request, access status/HTTP status code, and the type of internet browser. The legal basis for this processing is Art. 6(1)(f) GDPR.
When you download a mobile app, the information required for this is transferred to the app store, specifically your username, email address, and account identifier, the time of download, and the individual device identifier. We have no influence over this data collection and are not responsible for it. We only process this data to the extent necessary for downloading the mobile app to your mobile device.
14.3. Legal Basis for Data Processing
In the case of the performance of contracts with you, as well as the performance of measures and activities within the scope of pre-contractual relationships, the legal basis is derived from Art. 6 (1) sentence 1 lit. b GDPR. This includes, in this case, the performance of the user contract, which is concluded with you through your use of and registration in the app.
If the processing of personal data is necessary, and there is no other legal basis for such processing, we request your consent before processing, in accordance with Article 6(1) sentence 1 lit. a GDPR. You may revoke such consent at any time.
The statistical evaluation of user interaction with the app for the purpose of optimising the app and its events is legitimated by the controller's legitimate interest (Art. 6(1)(f) GDPR).
14.4. Recipients of your data
Depending on whether you are using an end-device with an Android or iOS operating system for the app, the companies Google or Apple will also gain access to your usage data.
Upon the initial setup of the Android operating system on your device, you also provided consent to data processing by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google). For more information on what data is collected by Google, how this data is used, and what rights you have, please visit https://policies.google.com/privacy?hl=de. On https://www.google.com/intl/de_de/policies/technologies/product-privacy/ Find further options for making privacy settings on an Android device to the desired extent. It is not out of the question that Google also transmits and processes personal data of European internet users in the USA.
To the extent that you use the app on Apple Inc.'s (1 Infinite Loop, Cupertino, CA 95014, USA) iOS operating system, personal data will also be processed by Apple, depending on usage and your device settings. The privacy settings for this can be adjusted in your device's settings. Your data will be handled in accordance with Apple's privacy policy, which is available at the following address: https://www.apple.com/privacy/.
14.5. Access Permissions
Certain access permissions are required for the app to function. Permissions indicate which functions or data this app is allowed to access. Permissions can be changed at any time in your device's settings after the app has been installed.
14.5.1. Camera
Access to your device's camera will only occur after you have given your consent. The camera can be used, for example, to scan QR codes for event activation. You can disable camera access in your device settings at any time, thereby revoking your consent.
14.5.2. Storage
Access to your device's shared storage is required for the app to read, save, and delete content. You can disable access to your device's storage, thereby withdrawing your consent at any time. This may affect the functionality of the app.
14.5.3. Location
Access to your precise or approximate network-based location will only occur after you have given your consent and when the app is running in the foreground. The data collected in this way will be used exclusively for the provision of the app's functions that you have requested. The legal basis for this data processing is Art. 6(1)(a) of the GDPR. We do not create movement profiles or similar data. You can disable access to location data in your device settings, thereby revoking your consent at any time.
14.5.4. Miscellaneous
Certain access permissions are technically required for the app to function. The legal basis for these data processing activities is Article 6(1)(b) of the GDPR, with the purpose of fulfilling the user agreement.
Technical access permissions in Android up to and including version 5User account access: Read Google service configuration, find accounts on the device to enable push notificationsDevice-specific access: disable sleep mode, control vibration alert to signal the arrival of push messages.Network Access: Receive internet data, retrieve network connections, full network access, retrieve WLAN connections to enable the app to retrieve information.
Technically required access permissions on Android from version 6:Access all networks, disable the sleep state, read Google service configuration, receive internet data, retrieve network connections
Technically determined access permissions on iOSMobile data: To receive internet data outside of a Wi-Fi zone, enabling the app to retrieve information on the go.
15. Your Rights
You have a right to information from the controller about your personal data processed by them and further information about the processing carried out in relation to your personal data. You also have a right to rectification, erasure or restriction of processing, as well as the right to object to processing and data portability of your personal data. In addition, you have a right and a right of complaint to a supervisory authority. In the event of your consent to the processing of your personal data in accordance with Art. 6 (1) sentence 1 lit. a in conjunction with Art. 4 No. 11 GDPR, you have the right to withdraw this consent at any time.
If you wish to assert any of the rights mentioned, please contact the controller directly using their contact details provided above.info@wifu-stiftung.de) or our Data Protection Officer (datenschutz@wifu.deThe person responsible is obliged to comply with your asserted right, provided there are no justifiable reasons to the contrary. Furthermore, they may only comply with your request if they have been able to clearly identify you as the person affected by their processing of personal data.
You may lodge a complaint with the supervisory authority responsible for the controller. Their contact details are:
The State Commissionerfor Data Protection and Information Freedom NRW (LDI)Kavalleriestraße 2440213 Düsseldorf,
Tel.: +49 (0) 211 – 384240E-mail: poststelle@ldi.nrw.deInternet https://www.ldi.nrw.de/
Date: 26 July 2022
You are currently viewing placeholder content from Elfsight. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
