We, the Sto Foundation, appreciate your visit to our website and your interest in our organisation and our services. We take the protection of your personal data and its confidential treatment very seriously.
Your personal data is processed exclusively within the framework of the statutory provisions of the data protection law of the European Union, in particular the General Data Protection Regulation (hereinafter "GDPR") and, in addition, the Federal Data Protection Act (new).with this data protection declaration, we inform you about the processing of your personal data and about your rights as a data subject when using our website. The terms used, such as "personal data" or their "processing", correspond to the definitions in Art. 4 GDPR.
1. Responsible
The Sto Foundation, c/o DSZ - Deutsches Stiftungszentrum GmbH, Baedekerstraße 1, 45128 Essen, Germany, is responsible for data processing within the meaning of data protection legislation. You can view our legal notice here.
If you have any questions or suggestions regarding data protection, please feel free to contact us at info@sto-stiftung.com.
The Sto Foundation c/o DSZ - Deutsches Stiftungszentrum GmbH and the data protection officer are responsible.
5. Recipients of personal data
We transfer your aforementioned personal data to Deutsche Stiftungszentrum GmbH for further processing, as we have commissioned Deutsche Stiftungszentrum GmbH, Baedekerstraße 1, 45128 Essen, Germany, to review your scholarship application and process the funding as part of an agency agreement. There is an order processing contract with Deutsches Stiftungszentrum GmbH in accordance with Art. 28 GDPR, which guarantees the security of your personal data during data processing.
Furthermore, we transmit the aforementioned personal data to a1kommunikation Schweizer GmbH, Oberdorfstraße 31 A, 70794 Filderstadt and Die Crew AG | Kommunikations- & Werbeagentur Stuttgart, Heinestraße 41A, 70597 Stuttgart, which are entrusted with the public relations work of the Sto Foundation. There is an order processing contract with both agencies in accordance with Art. 28 GDPR.
Deutsche Stiftungszentrum GmbH has in turn entrusted the company QS Unisolution GmbH, Wankelstraße 14, 70563 Stuttgart, with the technical handling of the online application process by means of a subcontractor agreement and has concluded an order data processing contract in accordance with Art. 28 GDPR. The Sto Foundation in the Stifterverband remains responsible for the processing of personal data as part of the online application process. The
data protection information of the company QS Unisolution GmbH can be found here: www.qs-unisolution.com/privacy-policy/
7. Data subject rights and storage duration (?)
As a data subject within the meaning of the GDPR, you have the following rights:
1. Right to information
You can request confirmation from us as to whether personal data concerning you is being processed by us.
If such processing is taking place, you can request the following information from us:
the purposes for which the personal data is processed;
the categories of personal data being processed;
the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
the envisaged period for which the personal data concerning you will be stored, or, if specific information on this is not possible, the criteria used to determine that period;
the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
the existence of the right to lodge a complaint with a supervisory authority;
all available information about the origin of the data if the personal data is not collected from the data subject;
the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
2. Right to rectification
You have a right to rectification and/or completion if the processed personal data concerning you is incorrect or incomplete. We must make the correction without delay.
3. Right to restriction of processing
You may request the restriction of the processing of your personal data under the following conditions:
if you contest the accuracy of the personal data concerning you for a period enabling us to verify the accuracy of the personal data;
the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims; or
if you have objected to the processing pursuant to Art. 21 para. 1 GDPR and it is not yet certain whether our legitimate reasons outweigh your reasons.
If the processing of personal data concerning you has been restricted, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.