Skip to content

Pri­vacy Policy

Infor­ma­tion on the Pro­ces­sing of Per­so­nal Data

Gene­ral Information

With this let­ter, we would like to inform you to what ext­ent and for what pur­pose per­so­nal data is pro­ces­sed in con­nec­tion with your visit to and use of this web­site. The legal pro­vi­si­ons gover­ning this pro­ces­sing include, in par­ti­cu­lar, the Gene­ral Data Pro­tec­tion Regu­la­tion (GDPR) and the Fede­ral Data Pro­tec­tion Act (BDSG).

Name and cont­act infor­ma­tion of the data controller

Schwarz­kopf Foun­da­tion for Young Europe 

28/29 Sophien­str., 10178 Berlin 

Email: info@schwarzkopf-stiftung.de

Cont­act infor­ma­tion for the data pro­tec­tion offi­cers of the data controller

ECOVIS Kel­ler Rechts­an­wälte PartG mbB
Att­or­ney Axel Kel­ler / Senior Asso­ciate Kars­ten Neu­mann
August-Bebel-Straße 10–12 – 18055 Ros­tock
Email: dsb-nord@ecovis.com
Tel: 0381 128849–0

Per­so­nal Data

We coll­ect infor­ma­tion about visits to and use of this web­site. Some of this infor­ma­tion con­sti­tu­tes per­so­nal data. This refers to infor­ma­tion that rela­tes to an indi­vi­dual who is eit­her alre­ady iden­ti­fied or who can be iden­ti­fied through this infor­ma­tion. Iden­ti­fia­bi­lity can occur eit­her through the com­bi­na­tion of the available infor­ma­tion or through the use of addi­tio­nal mea­su­res, such as asso­cia­tion with a name, an iden­ti­fi­ca­tion num­ber, loca­tion data, an online iden­ti­fier, or through a search in publicly acces­si­ble infor­ma­tion sources such as data­ba­ses, libra­ries, or the Internet. 

We coll­ect only the data that is strictly neces­sary for the respec­tive pur­pose. We pro­vide more detailed infor­ma­tion about these pur­po­ses below. 

Auto­ma­ted decis­ion-making based on your per­so­nal data does not occur in con­nec­tion with the use of ouron­line services.

Pro­ces­sing of Per­so­nal Information

Your per­so­nal data is pro­ces­sed by us, as the data con­trol­ler, as well as by Kon­nek­tiv Kol­lek­tiv GmbH, which pro­vi­des tech­ni­cal sup­port for the web­site as a ser­vice pro­vi­der (data processor).

In cer­tain cases, per­so­nal data may also be shared with third-party pro­vi­ders, such as social media pro­vi­ders (for more detailed infor­ma­tion on the sha­ring of per­so­nal data with third-party pro­vi­ders, see below).

Reci­pi­ents of Your Per­so­nal Data

As a gene­ral rule, we use your per­so­nal infor­ma­tion solely to pro­vide the ser­vices you have reques­ted. To the ext­ent that we engage exter­nal ser­vice pro­vi­ders in con­nec­tion with the pro­vi­sion of ser­vices, their access to the data is also limi­ted exclu­si­vely to the pur­pose of pro­vi­ding the ser­vice. Through tech­ni­cal and orga­niza­tio­nal mea­su­res, we ensure com­pli­ance with data pro­tec­tion regu­la­ti­ons andalso require our exter­nal ser­vice pro­vi­ders to do so. 

Fur­ther­more, we do not dis­c­lose your data to third par­ties wit­hout your express con­sent, par­ti­cu­larly not for adver­ti­sing pur­po­ses. Your per­so­nal data will only be dis­c­lo­sed if you yours­elf have con­sen­ted to the dis­clo­sure of the data or if we are aut­ho­ri­zed or obli­ga­ted to do so based on sta­tu­tory pro­vi­si­ons and/or offi­cial or court orders. This may include, in par­ti­cu­lar, the dis­clo­sure of infor­ma­tion for the pur­po­ses of cri­mi­nal pro­se­cu­tion, to pre­vent dan­ger, or to enforce intellec­tual pro­perty rights. 


Pro­tec­tion of Your Per­so­nal Information

In accordance with Article 32(1) of the EU GDPR, the ope­ra­tor of this web­site imple­ments tech­ni­cal and orga­niza­tio­nal mea­su­res to ensure secu­rity when pro­ces­sing data, to pro­tect per­so­nal data from acci­den­tal or inten­tio­nal mani­pu­la­tion, loss, des­truc­tion, and access, altera­tion, and dis­clo­sure by unaut­ho­ri­zed per­sons. The secu­rity mea­su­res in place are con­ti­nuously impro­ved in line with tech­no­lo­gi­cal developments. 

We store your infor­ma­tion on spe­ci­ally secu­red ser­vers within the Euro­pean Union. Our employees and the ser­vice pro­vi­ders we engage are bound by con­fi­den­tia­lity and are requi­red to com­ply with the pro­vi­si­ons of appli­ca­bleap­pli­ca­ble data pro­tec­tion laws. Access to your data is rest­ric­ted to a small num­ber of aut­ho­ri­zed indi­vi­du­als. These indi­vi­du­als are respon­si­ble for the tech­ni­cal or edi­to­rial manage­ment of the ser­vers. Howe­ver, despite regu­lar checks, com­plete pro­tec­tion against all risks is not possible. 

Your per­so­nal data is trans­mit­ted over the Inter­net in encrypted form. We use SSL (Secure Sockets Layer) encryp­tion for data transmission. 

Dis­clo­sure of Per­so­nal Data to Third Parties

As a gene­ral rule, we use your per­so­nal infor­ma­tion only to pro­vide the ser­vices you have reques­ted (use of the web­site). To the ext­ent that we engage exter­nal ser­vice pro­vi­ders in con­nec­tion with the pro­vi­sion of these ser­vices, their access to the data is also limi­ted exclu­si­vely to the pur­pose of pro­vi­ding the ser­vice. Through tech­ni­cal and orga­niza­tio­nal mea­su­res, we ensure com­pli­ance with data pro­tec­tion regu­la­ti­ons andalso require our exter­nal ser­vice pro­vi­ders to do so. 

Fur­ther­more, we do not dis­c­lose your data to third par­ties wit­hout your express con­sent, espe­ci­ally not for adver­ti­sing pur­po­ses. Your per­so­nal data will only be dis­c­lo­sed if you yours­elf have con­sen­ted to the dis­clo­sure of your data or if we are aut­ho­ri­zed or obli­ga­ted to do so under sta­tu­tory pro­vi­si­ons and/or offi­cial or court orders. This may include, in par­ti­cu­lar, the dis­clo­sure of infor­ma­tion for the pur­po­ses of cri­mi­nal pro­se­cu­tion, to pre­vent dan­ger, or to enforce intellec­tual pro­perty rights. 

In cer­tain cases, data may also be shared with pro­vi­ders out­side the scope of the GDPR. We have no con­trol over how these pro­vi­ders pro­cess the data thereafter—in par­ti­cu­lar, the ext­ent to which, the loca­tion where, and the dura­tion for which the data is pro­ces­sed; the ana­ly­ses per­for­med on the data; and to whom the data is disclosed. 

Legal Basis for Data Processing

To the ext­ent that we obtain con­sent for the pro­ces­sing of your per­so­nal data, Article 6(1)(a) GDPR ser­ves as the legal basis for data processing. 

To the ext­ent that we pro­cess your per­so­nal data, because this is neces­sary to ful­fill a con­tract or within the frame­work of a con­trac­tual rela­ti­onship with you, Article 6(1)(b) GDPR ser­ves as the legal basis for data processing. 

To the ext­ent that we pro­cess your per­so­nal data to com­ply with a legal obli­ga­tion, Article 6(1)© GDPR as the legal basis for the data processing. 

Article 6(1)(f) of the GDPR may also serve as the legal basis for data pro­ces­sing, if the pro­ces­sing of your per­so­nal data is neces­sary to safe­guard a legi­ti­mate inte­rest of our orga­niza­ti­onor a third party, and your inte­rests, fun­da­men­tal rights, and fun­da­men­tal free­doms do not require the pro­tec­tion of per­so­nal data. 

In the descrip­ti­ons below, we always indi­cate the legal basis on which we pro­cess your per­so­nal data.

Data Dele­tion and Reten­tion Periods

As a gene­ral rule, we delete or block your per­so­nal data when­ever the pur­pose for which it was stored no lon­ger applies. Howe­ver, data may con­ti­nue to be stored bey­ond that point if requi­red by legal pro­vi­si­ons to which we are sub­ject, such as in con­nec­tion with sta­tu­tory reten­tion and docu­men­ta­tion requi­re­ments. In such a case, we will delete or block your per­so­nal data once the appli­ca­ble requi­re­ments have expired. 

Infor­ma­tion About Your Computer

Every time you access our online ser­vice, regard­less of whe­ther you are regis­tered, we coll­ect the fol­lo­wing infor­ma­tion about your com­pu­ter: your computer’s IP address, your browser’s request, and the time of that request. In addi­tion, the sta­tus and the amount of data trans­fer­red are recor­ded as part of this request. We also coll­ect pro­duct and ver­sion infor­ma­tion about the brow­ser used and the computer’s ope­ra­ting sys­tem. We also record the web­site from which access to the online ser­vice was made. Your computer’s IP address is stored only for the dura­tion of your use of the online ser­vice and is sub­se­quently dele­ted or anony­mi­zed by trun­ca­tion. The remai­ning data is stored for a limi­ted period of time. 

We use this data to ope­rate our online ser­vice, spe­ci­fi­cally to iden­tify and cor­rect errors, to assess the per­for­mance of the online ser­vice, and to make adjus­t­ments or impro­ve­ments. These pur­po­ses also con­sti­tute our legi­ti­mate inte­rest in data pro­ces­sing pur­su­ant to Art. 6(1)(f) of the GDPR, which is the legal basis for this processing. 

Use of Cookies

Our online ser­vice uses cookies—as do many web­sites. Coo­kies are small text files that are stored on your com­pu­ter and that record cer­tain set­tings and data for exch­ange with our online­ser­vice via your brow­ser. A coo­kie typi­cally con­ta­ins the name of the domain from which the coo­kie file was sent, as well as infor­ma­tion about the cookie’s age and an alpha­nu­me­ric identifier. 

Some of these coo­kies are tech­ni­cally neces­sary so that we can enable you to visit and use the web­site as you wish. The legal basis for these tech­ni­cally neces­sary coo­kies is §25(1)(2) of the TDDDG. In addi­tion, coo­kies allow us to reco­gnize your com­pu­ter and make any pre­fe­ren­ces you have set imme­dia­tely available. 

Most brow­sers are set to auto­ma­ti­cally accept coo­kies. Howe­ver, you can disable the sto­rage of coo­kies or set your brow­ser to notify you as soon as coo­kies are sent. It is also pos­si­ble to manu­ally delete coo­kies that have alre­ady been stored via your brow­ser’s settings. 

News­let­ter

When you sign up for our news­let­ter, your email address will be used until you unsub­scribe. You’ll receive regu­lar updates via email on cur­rent topics, as well as emails for spe­cial occa­si­ons, such as spe­cial pro­mo­ti­ons. These emails may be per­so­na­li­zed and tail­o­red to you based on the infor­ma­tion we have about you. 

To sub­scribe to our news­let­ter, unless you have given us your writ­ten con­sent, we use the so-cal­led dou­ble­opt-in pro­cess, i.e., we will only send you a news­let­ter via email once you have expli­citly con­firmed to us that we should acti­vate the news­let­ter deli­very. We will then send you a con­fir­ma­tion email and ask you to click on a link con­tai­ned in that emailto con­firm that you would like to receive our newsletter. 

The legal basis for the pro­ces­sing of your data is your con­sent pur­su­ant to Art. 6(1)(a) GDPR, pro­vi­ded that you have expli­citly sub­scri­bed to the newsletter. 

If you no lon­ger wish to receive any news­let­ters from us, you may revoke your pre­viously given con­sent at any time with future effect or object to con­ti­nuing to receive the news­let­ter, wit­hout incur­ring any costs other than the trans­mis­sion costs at the stan­dard rates. Sim­ply use the unsub­scribe link included in each news­let­ter or send a mes­sage to us or our data pro­tec­tion officer. 

Social Media

On our web­site, you’ll find links to our social media accounts on Insta­gram, Lin­ke­dIn, and Tik­Tok. You can reco­gnize the links by the respec­tive provider’s logo. 

Cli­cking on the links will open the cor­re­spon­ding social media pages, to which this pri­vacy policy does not apply. For details on the pro­vi­si­ons that apply there, please refer to the respec­tive pri­vacy poli­cies of the indi­vi­du­al­pro­vi­ders; you can find these at: 

No per­so­nal infor­ma­tion is trans­mit­ted to the respec­tiv­e­pro­vi­der. Your access to the lin­ked page also ser­ves as the basis for data pro­ces­sing by the respec­tive provider. 

Your Rights and Cont­act Information

We place great importance on explai­ning the pro­ces­sing of your per­so­nal data as trans­par­ently as pos­si­ble and also informing you about the rights to which you are entit­led. If you would like more infor­ma­tion or wish to exer­cise your rights, you can cont­act us at any time so that we can address your concern. 

Data Sub­ject Rights

You have exten­sive rights regar­ding the pro­ces­sing of your per­so­nal data. First, pur­su­ant to Art. 15 of the GDPR, you have a com­pre­hen­sive right of access and, if appli­ca­ble, pur­su­ant to Art. 16 of the GDPR, you may request the rec­ti­fi­ca­tion and/or, pur­su­ant to Art. 17 of the GDPR, the era­sure of your per­so­nal data. You may also request a rest­ric­tion on pro­ces­sing pur­su­ant to Article 18 of the GDPR. For pro­ces­sing acti­vi­ties that we carry out on the legal basis set forth in Article 6(1)(f) of the GDPR (legi­ti­mate inte­rest), you have the right to object pur­su­ant to Article 21 of the GDPR. With regard to the per­so­nal data you have pro­vi­ded to us, you also have a right to data por­ta­bi­lity pur­su­ant to Article 20 of the GDPR. 

How can you exer­cise your rights with us?

To exer­cise your rights, please cont­act us using the cont­act infor­ma­tion pro­vi­ded above.

With­dra­wal of Con­sent and Objection

Once you have given your con­sent, you may revoke it at any time with future effect. With­dra­wing your con­sent does not affect the lawful­ness of the pro­ces­sing car­ried out on the basis of that con­sent up until the time of with­dra­wal. The cont­act per­son for this is also our Data Pro­tec­tion Officer. 

If, due to your par­ti­cu­lar situa­tion, you wish to object to the pro­ces­sing of your data on the basis of Article 6(1)(f) of the GDPR (Article 21(1) of the GDPR), we will review your objec­tion imme­dia­tely. In the case of direct mar­ke­ting (Article 21(2)), you may object at any time wit­hout pro­vi­ding a reason. We will inform you of the out­come and, if appli­ca­ble, explain the reasons for con­ti­nuing the processing. 

Email Secu­rity

The user agrees to elec­tro­nic com­mu­ni­ca­tion, as soon as they them­sel­ves initiate elec­tro­nic cont­act with the web­site ope­ra­tors. The user is her­eby advi­sed that emails may be inter­cepted or alte­red wit­hout aut­ho­riza­tion and wit­hout the user’s know­ledge while in tran­sit. The ope­ra­tor uses soft­ware to fil­ter out unwan­ted emails (spam fil­ter). The spam fil­ter may block emails if they are incor­rectly iden­ti­fied as spam based on cer­tain characteristics. 

Com­plaints

If you believe that our pro­ces­sing of your per­so­nal data is not in accordance with this Pri­vacy Policy or the appli­ca­ble data, you may file a com­plaint with our Data Pro­tec­tion Offi­cer. The Data Pro­tec­tion Offi­cer will then review the mat­ter and inform you of the out­come of the review. In addi­tion, you also have the right to file a com­plaint with a super­vi­sory authority. 

Links to Other Websites

Our web­site con­ta­ins links to other web­sites. These links are gene­rally marked as such. We have no con­trol over the ext­ent to which the appli­ca­ble pri­vacy poli­cies are adhe­red to on the lin­ked web­sites. We the­r­e­fore recom­mend that you also review the respec­tive pri­vacy poli­cies on other websites. 

Chan­ges to This Pri­vacy Policy

The cur­rent ver­sion of this pri­vacy policy is indi­ca­ted by the date (below). We reserve the right to amend this pri­vacy policy at any time with future effect. Chan­ges will be made, in par­ti­cu­lar, in the event of tech­ni­cal adjus­t­ments to the online­ser­vice or chan­ges to data pro­tec­tion regu­la­ti­ons. The cur­rent ver­sion of the Pri­vacy Policy is always available directly through the online ser­vice. We recom­mend that you check regu­larly for chan­ges to this pri­vacy policy. 

Date of this Pri­vacy Policy: Janu­ary 2026