We, the Sto Foundation, appreciate your visit to our website and your interest in our organisation and our services. We take the protection of your personal data and its confidential treatment very seriously.
Your personal data is processed exclusively within the framework of the statutory provisions of the data protection law of the European Union, in particular the General Data Protection Regulation (hereinafter "GDPR") and, in addition, the Federal Data Protection Act (new).with this data protection declaration, we inform you about the processing of your personal data and about your rights as a data subject when using our website. The terms used, such as "personal data" or their "processing", correspond to the definitions in Art. 4 GDPR.
1. Responsible
The Sto Foundation, c/o DSZ - Deutsches Stiftungszentrum GmbH, Baedekerstraße 1, 45128 Essen, Germany, is responsible for data processing within the meaning of data protection legislation. You can view our legal notice here.
If you have any questions or suggestions regarding data protection, please feel free to contact us at info@sto-stiftung.com.
The Sto Foundation c/o DSZ - Deutsches Stiftungszentrum GmbH and the data protection officer are responsible.
5. Recipients of personal data
We transfer your aforementioned personal data to Deutsche Stiftungszentrum GmbH for further processing, as we have commissioned Deutsche Stiftungszentrum GmbH, Baedekerstraße 1, 45128 Essen, Germany, to review your scholarship application and process the funding as part of an agency agreement. There is an order processing contract with Deutsches Stiftungszentrum GmbH in accordance with Art. 28 GDPR, which guarantees the security of your personal data during data processing.
Furthermore, we transmit the aforementioned personal data to a1kommunikation Schweizer GmbH, Oberdorfstraße 31 A, 70794 Filderstadt and Die Crew AG | Kommunikations- & Werbeagentur Stuttgart, Heinestraße 41A, 70597 Stuttgart, which are entrusted with the public relations work of the Sto Foundation. There is an order processing contract with both agencies in accordance with Art. 28 GDPR.
Deutsche Stiftungszentrum GmbH has in turn entrusted the company QS Unisolution GmbH, Wankelstraße 14, 70563 Stuttgart, with the technical handling of the online application process by means of a subcontractor agreement and has concluded an order data processing contract in accordance with Art. 28 GDPR. The Sto Foundation in the Stifterverband remains responsible for the processing of personal data as part of the online application process. The
data protection information of the company QS Unisolution GmbH can be found here: www.qs-unisolution.com/privacy-policy/
7. Data subject rights and storage duration (?)
As a data subject within the meaning of the GDPR, you have the following rights:
1. Right to information
You can request confirmation from us as to whether personal data concerning you is being processed by us.
If such processing is taking place, you can request the following information from us:
the purposes for which the personal data is processed;
the categories of personal data being processed;
the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
the envisaged period for which the personal data concerning you will be stored, or, if specific information on this is not possible, the criteria used to determine that period;
the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
the existence of the right to lodge a complaint with a supervisory authority;
all available information about the origin of the data if the personal data is not collected from the data subject;
the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
2. Right to rectification
You have a right to rectification and/or completion if the processed personal data concerning you is incorrect or incomplete. We must make the correction without delay.
3. Right to restriction of processing
You may request the restriction of the processing of your personal data under the following conditions:
if you contest the accuracy of the personal data concerning you for a period enabling us to verify the accuracy of the personal data;
the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims; or
if you have objected to the processing pursuant to Art. 21 para. 1 GDPR and it is not yet certain whether our legitimate reasons outweigh your reasons.
If the processing of personal data concerning you has been restricted, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.
1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. For detailed information on the subject of data protection, please refer to our data protection declaration listed below this text.
Data collection on our website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator's contact details in the legal notice of this website.
How do we collect your data?
On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form. Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter our website.
What do we use your data for?
Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyze your user behavior.
What rights do you have with regard to your data?
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time at the address given in the legal notice if you have any further questions on the subject of data protection. You also have the right to lodge a complaint with the competent supervisory authority.
Analysis tools and tools from third-party providers
When you visit our website, your surfing behavior may be statistically evaluated. This is primarily done using cookies and so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You can find detailed information on this in the following privacy policy.
You can object to this analysis. We will inform you about the objection options in this privacy policy.
4. Analysis tools and Advertising
Matomo
We use the open source software Matomo to analyze and statistically evaluate the use of the website. Cookies are used for this purpose. The information obtained about website usage is transmitted exclusively to our servers and summarized in pseudonymous usage profiles. We use the data to evaluate the use of the website. The data collected is not passed on to third parties.
The IP addresses are anonymized (IP masking) so that they cannot be assigned to individual users.
The data is processed on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR. In doing so, we are pursuing our legitimate interest in optimizing our website for our external presentation.
You can withdraw your consent at any time by deleting the cookies in your browser or changing your data protection settings
Newsletter about cleverreach
If you register for our newsletter, personal data such as your e-mail address, name, date of birth and place of residence will also be requested and processed during the registration process. In addition to the time and date of registration, your IP address is also recorded and stored on CleverReach servers. Web analysis data on your usage behavior with the newsletter (e.g. whether you click on a link) may also be processed.
Data security is a top priority at CleverReach. That is why all systems are regularly maintained and updated if necessary. In this way, CleverReach can guarantee high stability, performance and maximum security.