We, the Sto Foundation, appreciate your visit to our website and your interest in our organisation and our services. We take the protection of your personal data and its confidential treatment very seriously.
Your personal data is processed exclusively within the framework of the statutory provisions of the data protection law of the European Union, in particular the General Data Protection Regulation (hereinafter "GDPR") and, in addition, the Federal Data Protection Act (new).with this data protection declaration, we inform you about the processing of your personal data and about your rights as a data subject when using our website. The terms used, such as "personal data" or their "processing", correspond to the definitions in Art. 4 GDPR.
2. Collection and processing of personal data
Storage of personal data at the Deutsche Stiftungszentrum GmbH
We collect personal data in accordance with the provisions of the General Data Protection Regulation (GDPR). The data is stored in connection with the Sto Foundation's funding projects. The following data categories may be collected
- Title, first name, surname
- Institution/school, training company
- e-mail address
- postal address
- Telephone number
- Grade point average
In addition, information is stored which, according to our applicable guidelines, is a prerequisite for the granting of funding or is made available in connection with the application. This includes, for example, details of any associated persons, institutions, etc.
Deutsche Stiftungszentrum GmbH has in turn entrusted the company QS Unisolution GmbH, Wankelstraße 14, 70563 Stuttgart, with the technical processing of the online application procedure on the basis of a subcontractor agreement and has concluded an order data processing agreement in accordance with Art. 28 GDPR. The Sto Foundation in the Stifterverband remains responsible for the processing of personal data as part of the online application process.
The data is processed by the Deutsche Stiftungszentrum GmbH:
- in order to be able to verify the existence of the requirements for the approval of funding in accordance with our funding guidelines
- to enable the processing of the funding (e.g. handover of the suitcases/training materials)
Storage of personal data at the Sto Foundation
The Sto Foundation also uses the cloud-based platform Monday.com to store personal data. This also includes the data of sponsored persons, members and other persons who are in contact with the Sto Foundation.
The data is stored on Monday.com servers in Germany and the United States.
Monday.com is a certified data protection service provider and fulfills the requirements of the General Data Protection Regulation (GDPR). The data is protected with the help of security technologies.
The Sto Foundation has concluded an order processing contract with Monday.com. This contract protects your data and specifies what Monday.com must do as a processor.
The Sto Foundation can download the data from Monday.com's servers and store it on its own servers.
The data processing is necessary for public relations work, processing your application and handling the grant.
3. Purpose of data processing
When data is processed by the Deutsche Stiftungszentrum GmbH
The data processing takes place on the basis of your application for a grant and is in accordance with Art. 6 para. 1 sentence 1 lit b. GDPR for the purposes mentioned for the appropriate processing of your application and for the processing of the grant.
The personal data collected by us for the examination of the application or the processing of the grant will be deleted as soon as it is no longer required for our purposes and there are no legal retention periods to the contrary.
When data is processed by the Sto Foundation
We continue to store, process and publish images and reports associated with the funding project in all media, including online. The processing and publication serves our public relations work and takes place - insofar as the reports or images contain personal data - on the basis of the consent given by you and the trainee in accordance with Art. 6 para. 1 lit a GDPR.
We only process users' data if they allow us to do so. In some cases, consent is not possible. In this case, the data may still be processed if there is a legal basis for this.
The purpose of data processing is to establish an alumni network in addition to traditional public relations work and to maintain the dialog between participants and sponsored persons.
4. Forwarding of data
We pass the data on to Deutsche Stiftungszentrum GmbH so that the Sto Foundation can have its funding applications checked and the funding processed there. We have concluded a contract with Deutsche Stiftungszentrum GmbH to ensure that your data is processed securely. We also pass on your data to our agencies for the purpose of public relations and project management. These are a1kommunikation Schweizer GmbH, Oberdorfstraße 31A, 70794 Filderstadt, Germany, DIE CREW AG, Heinestraße 4. 1A, Stuttgart, and designed2b, Seelenbinderstraße 45, 12555 Berlin, which provide support for the Sto Foundation's project and communication management. There is an order processing contract with the agencies in accordance with Art. 28 GDPR.
5. Cookies and analysis
We use the open source software Matomo to analyze and statistically evaluate the use of the website. Cookies are used for this purpose. The information obtained about website use is transmitted exclusively to our servers and summarized in pseudonymous user profiles. We use the data to evaluate the use of the website. The data collected is not passed on to third parties.
The IP addresses are anonymized (IP masking) so that they cannot be assigned to individual users.
The data is processed on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR. We want to optimize our website for our external presentation.
You can revoke your consent at any time by deleting the cookies in your browser or changing your data protection settings
6. Links to other websites
Our website contains links to other websites:
Newsletter via CleverReach
If you register for our newsletter, personal data such as your e-mail address, name, date of birth and place of residence as well as your industry affiliation will also be requested and processed during the registration process. In addition to the time and date of registration, your IP address is also recorded and stored on CleverReach servers. Web analysis data on your usage behavior with the newsletter (e.g. whether you click on a link) may also be processed.
Social media plug-ins and links
We use social media plug-ins on the website, e.g. to integrate YouTube or to ensure a jump to other social media platforms, e.g. Instagram. Please note that by integrating these plug-ins, the social media platform operators gain access to data such as IP address and browser data.
7. Your rights
You have the following rights in relation to your personal data managed by the Sto Foundation and Deutsche Stiftungszentrum GmbH:
- Right to information:
You have the right to obtain information from us about your personal data.
- Right to rectification:
You have the right to ask us to correct your personal data if it is incorrect or incomplete.
- Right to erasure:
You have the right to ask us to erase your personal data if there is no legal basis for the continued processing of your data.
- Right to restriction of processing:
You have the right to ask us to restrict the processing of your personal data if you object to the accuracy of your data, if the processing is unlawful or if you have requested the erasure of your data but we still need this data to fulfill our legal obligations.
- Right to data portability:
You have the right to receive your personal data in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller if this is technically feasible.
- Right to object:
You have the right to object to the processing of your personal data if the processing is based on a legitimate interest or a public interest.
To exercise these rights, you can contact us at sto-stiftung@stifterverband.de