Privacy policy

Last updated: 10 August 2026.

Foreword 

We, the German Red Cross (DRK General Secretariat), as operator of the Anticipation Hub website, hereinafter referred to as "the organisation," "we," or "us," take the protection of your personal data seriously and would like to inform you about data protection within our organisation. 

As per the European Union General Data Protection Regulation (Regulation (EU) 2016/679; henceforth referred to as "GDPR"), there exist obligations to safeguard the personal data of individuals affected by processing (hereinafter addressed as the "customer," the "user," "you," "yours," or "data subject"). 

Whether independently or in collaboration with others, where we determine the purposes and methods of data processing, our primary responsibility is to transparently communicate the nature, scope, purpose, duration, and legal basis of the processing (refer to Art. 13 and 14 GDPR). This statement, termed "privacy policy," serves to inform you about the manner in which we process your personal data. 

Our privacy policy is organised into modules. It comprises a general section applicable to any processing of personal data and processing situations encountered with every website visit (Part A. General). Additionally, there is a specific section, the content of which pertains solely to the indicated processing situation, specifying the respective offer or product. 

A. General

1. Definitions 

Following the guidelines outlined in Article 4 of the General Data Protection Regulation (GDPR), the privacy policy provided herein is based on the following definitions: 

  • "Personal Data" (Art. 4 No. 1 GDPR): All information pertaining to an identified or identifiable natural person, commonly referred to as the "data subject." 

  • "Processing" (Art. 4 No. 2 GDPR): Any operation or set of operations carried out on personal data, encompassing collection, recording, organization, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, alignment, combination, restriction, erasure, or destruction. 

  • "Controller" (Art. 4 No. 7 GDPR): The individual, authority, or entity responsible for determining the purposes and means of processing personal data. 

  • "Third Party" (Art. 4 No. 8 GDPR): Any person, authority, or entity excluding the data subject, the controller, and the processor. 

  • "Consent" (Art. 4 No. 11 GDPR): Voluntary, informed, and unambiguous expression of the data subject’s will regarding the processing of their personal data. 

2. Name and Address of the Controller Responsible for Processing 

We, the German Red Cross, act as the entity responsible for processing your personal data in accordance with Article 4 No. 7 of the General Data Protection Regulation (GDPR). You can contact us at: 

Deutsches Rotes Kreuz e.V. 

DRK-Generalsekretariat 

Carstennstraße 58 

12205 Berlin 

Phone: 030 / 85404 – 0 

E-Mail: drk(at)drk.de 

The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g. names, e-mail addresses, etc.). For additional information concerning our organization, please refer to the legal notice (Imprint) on our website. 

3. Contact Details of the Data Protection Officer 

Our company data protection officer is available at all times to answer any questions you may have and to act as your contact person on the subject of data protection. Their contact details are: 

R2Data GmbH 

Scanbox 18556 

Ehrenbergstraße 16a 

10245 Berlin 

https://www.r2data.de/ 

Datenschutz[at]r2data.de 

4. Legal Basis for Data Processing 

By law, the general principle is that the processing of personal data is prohibited, and it is only permitted when the data processing falls under one of the following legal justifications: 

  • Art. 6 para. 1 sentence 1 lit. a GDPR ("Consent"): If the data subject has voluntarily, informed, and unequivocally indicated through a statement or another clear affirmative action that they consent to the processing of their personal data for one or more specific purposes. 

  • Art. 6 para. 1 sentence 1 lit. b GDPR: If the processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures requested by the data subject. 

  • Art. 6 para. 1 sentence 1 lit. c GDPR: If the processing is necessary for compliance with a legal obligation to which the controller is subject (e.g., a legal retention obligation). 

  • Art. 6 para. 1 sentence 1 lit. e GDPR: If the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. 

  • Art. 6 para. 1 sentence 1 lit. d GDPR: If the processing is necessary to protect the vital interests of the data subject or another natural person. 

  • Art. 6 para. 1 sentence 1 lit. f GDPR ("Legitimate Interest"): If the processing is necessary for the protection of legitimate (especially legal or economic) interests of the controller or a third party, unless the overriding interests or rights of the data subject prevail, particularly if the data subject is a minor. 

For the processing operations we carry out, we indicate the applicable legal basis in each case below. Processing can also be based on several legal bases. 

General Information on the Legal Basis for Data Processing on this Website 

If you have consented to data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, insofar as special categories of data are processed in accordance with Art. 9 para. 1 GDPR. In the event of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 para. 1 lit. a GDPR. 

If you have consented to the storage of cookies or access to information in your end device (e.g. via device fingerprinting), the data processing is also carried out on the basis of § 25 (1) TDDDG (Telecommunications Digital Services Data Protection Act, which superseded the TTDSG). Consent can be revoked at any time. 

If your data is required to fulfil a contract or to carry out pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data if this is necessary to fulfil a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR. Data processing may also be carried out on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Information on the relevant legal bases in each individual case is provided in the following paragraphs of this privacy policy. 

5. Data Erasure and Storage Duration 

For the processing operations carried out by us, we indicate below how long the data will be stored by us and when it will be deleted or blocked. Unless a more specific storage period is specified below, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods, such as § 257 HGB or § 147 AO); in the latter case, the deletion will take place after these reasons cease to apply. 

Your data will generally only be stored on servers within the European Economic Area (EEA), subject to any disclosure in accordance with the provisions in A. (7) and A. (8). 

6. Data Security 

We use suitable technical and organisational measures to protect your data from manipulation, loss, destruction or unauthorised access by third parties. For security reasons and to protect the transmission of confidential content, such as inquiries you submit to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by checking whether the address line of the browser switches from "http://" to "https://" and by the lock icon in the browser line. If SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties. 

The measures take into account the current state of the art, the implementation costs as well as the type, scope, context and purpose of the processing and the risks of a data breach for you as the data subject (including the probability and impact). We continuously improve our security measures in line with technological progress. 

Please note that the transmission of data via the Internet (e.g. through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third-party access. 

7. Cooperation with Contract Processors 

We use external domestic and foreign service providers to process our business transactions (e.g. for IT, hosting, telecommunications and communication). These service providers only act in accordance with our instructions and are contractually obliged to comply with data protection regulations in accordance with Art. 28 GDPR. 

If your personal data is passed on by us to our subsidiaries or is passed on to us by our subsidiaries, this is done on the basis of existing commissioned processing agreements. 

8. Requirements for the Transfer of Personal Data to Third Countries 

As part of our business relationships, your personal data may be transferred or disclosed to third-party companies. These may also be located outside the EEA, i.e. in third countries. Such processing takes place exclusively to fulfil contractual and business obligations and to maintain your business relationship with us. We will inform you about the respective details of the transfer at the relevant points below. 

The European Commission certifies that some third countries have data protection standards comparable to the EEA standard by means of so-called adequacy decisions (a list of these countries and a copy of the adequacy decisions can be found here: commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). 

Other third countries to which personal data may be transferred may not have a consistently high level of data protection due to a lack of legal provisions. If this is the case, we ensure that data protection is adequately guaranteed. This is possible through binding corporate rules, standard contractual clauses of the European Commission for the protection of personal data, certificates or recognised codes of conduct. 

Information on data transfers to the USA in particular 

Our website uses services provided by companies based in the United States. When these services are used, personal data may be transferred to and processed in the United States. 

On 10 July 2023, the European Commission adopted an adequacy decision for the EU-U.S. Data Privacy Framework (EU-U.S. DPF). On this basis, personal data may be transferred to U.S. organisations participating in the EU-U.S. DPF without the need for additional safeguards under Article 46 GDPR. Where we transfer personal data to a U.S. service provider certified under the EU-U.S. DPF, the transfer is based on this adequacy decision pursuant to Article 45 GDPR. 

Where a recipient in the United States does not participate in the EU-U.S. DPF or the relevant transfer is not covered by the adequacy decision, we ensure that an appropriate legal basis and safeguards for the transfer are in place. These may include the Standard Contractual Clauses adopted by the European Commission pursuant to Article 46(2)(c) GDPR or, where applicable, another transfer mechanism permitted under the GDPR. 

Further information on transfers to the United States and the applicable safeguards is provided, where relevant, in the descriptions of the individual services used on this website. 

9. No Automated Decision-Making (including profiling) 

We do not intend to use personal data collected from you for automated decision-making (including profiling). 

10. No Obligation to Provide Personal Data 

We do not make the conclusion of contracts with us dependent on you providing us with personal data beforehand. As a user, you are under no legal or contractual obligation to provide us with your personal data; however, we may only be able to provide certain services to a limited extent or not at all if you do not provide the necessary data. If this should exceptionally be the case in the context of the offers presented below, you will be informed separately. 

11. Legal Obligation to Transmit Certain Data 

Under certain circumstances, we may be subject to a specific legal or statutory obligation to provide the lawfully processed personal data to third parties, in particular public authorities (Art. 6 para. 1 sentence 1 lit. c GDPR). 

12. Your Rights 

You can assert your rights as a data subject with regard to your processed personal data at any time by contacting us using the contact details provided under A. (2). As the data subject, you have the right: 

  • in accordance with Art. 15 GDPR, to request information about your data processed by us. In particular, you can request information about the purposes of processing, the category of data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on its details; 

  • in accordance with Art. 16 GDPR, to immediately request the correction of incorrect data or the completion of your data stored by us; 

  • in accordance with Art. 17 GDPR, to demand the erasure of your data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims; 

  • in accordance with Art. 18 GDPR, to demand the restriction of the processing of your data if the accuracy of the data is disputed by you or the processing is unlawful; 

  • in accordance with Art. 20 GDPR, to receive your data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller ("data portability"); 

  • in accordance with Art. 21 GDPR, the right to object to the collection of data in special cases and to direct marketing, provided that the processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. e or lit. f GDPR. If it is not an objection to direct advertising, we ask you to explain the reasons why we should not process your data as we have done. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing; 

  • in accordance with Art. 7 (3) GDPR, to withdraw your consent once given at any time. As a result, we may no longer continue the data processing that was based on this consent in the future; and 

  • in accordance with Art. 77 GDPR, to complain to a data protection supervisory authority about the processing of your personal data in our organization, in particular in the member state where you usually maintain your domicile, place of work or at the place where the alleged violation occurred. 

Rejection of unsolicited e-mails 

We herewith object to the use of contact information published in conjunction with the mandatory information to be provided in our Imprint to send us promotional and information material that we have not expressly requested. The operators of this website reserve the express right to take legal action in the event of the unsolicited sending of promotional information, for instance via SPAM messages. 

13. Changes to the Privacy Policy 

In the context of the further development of data protection law as well as technological or organisational changes, our privacy policy is regularly reviewed to determine whether it needs to be adapted or supplemented. You will be informed of any changes, in particular on our website. This data protection notice was last updated in August 2026.

B. Visiting the Website

When you visit our website, your personal data may be processed. When you use the website, the following categories of personal data may be collected, stored and processed by us: 

1. Data Processing, Purpose and Legal Basis 

Server Log Files ("log data") 

The provider of this website automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. This consists of: 

  • the type and version of browser used 
  • the operating system used 
  • the referrer URL (the page from which the request came) 
  • the hostname of the accessing computer 
  • the time of the server inquiry 
  • the IP address 

This data is not merged with other data sources. The log data is processed for statistical purposes and to improve the quality, stability and security of our website. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. The operator of the website has a legitimate interest in the technically error-free depiction and the optimization of the website; to achieve this, server log files must be recorded. 

Request by E-Mail, telephone or contact form 

If you contact us by email, telephone or via a contact form, we will store and process your request, including all resulting personal data (e.g. name, contact details, content of the request) for the purpose of processing your request and in the event of follow-up questions. We will not pass on this data without your consent. 

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR, provided that your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested. 

2. Duration of Data Processing 

Your data will only be processed until you ask us to delete it, revoke your consent to storage, or as long as this is necessary to achieve the above-mentioned processing purposes; the legal bases stated in the context of the processing purposes apply. With regard to the use and storage duration of cookies, please note the points mentioned under Part C as well as the cookie declaration. Third parties used by us will store your data on their systems for as long as is necessary in connection with the provision of the services for us in accordance with the respective order. 

3. Transfer of Personal Data to Third Parties; Legal Basis 

The following categories of recipients, which are usually processors, may receive access to your personal data: 

  • Service providers for the operation of our website and the processing of data stored or transmitted by the systems (e.g. for data centre services, IT security). The legal basis for the transfer is then Art. 6 para. 1 sentence 1 lit. b or lit. f GDPR, unless they are processors; 
  • Government bodies/authorities, insofar as this is necessary to fulfil a legal obligation. The legal basis for the transfer is then Art. 6 para. 1 sentence 1 lit. c GDPR; 
  • Persons employed to carry out our business operations (e.g. auditors, banks, legal advisors or supervisory authorities). The legal basis for the disclosure is then Art. 6 para. 1 sentence 1 lit. b or lit. f GDPR. 

In addition, we only pass on your personal data to third parties if you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or if this is necessary on the basis of the contract with you in accordance with Art. 6 para. 1 lit. b GDPR. 

4. Hosting and Content Delivery Networks (CDN) 

This website is hosted by an external service provider mittwald (Mittwald, CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp). Personal data collected on this website is stored on the servers of the host. This may include, but is not limited to, IP addresses, contact requests, metadata and communications, contract and contact information, names, website access data, and other data generated through a website. 

The host is used for the purpose of fulfilling the contract with our potential and existing users (Art. 6 para. 1 lit. b GDPR) and in the interest of secure, fast, and efficient provision of our online services by a professional provider (Art. 6 para. 1 lit. f GDPR). Our host will only process your data to the extent necessary to fulfil its performance obligations and to follow our instructions with respect to such data. 

Contract processing 

In order to guarantee processing in compliance with data protection regulations, we have concluded an order processing agreement (DPA) with our host. This is a contract prescribed by data protection law, which guarantees that the host processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR. 

C. Use of Cookies, Plugins and Other Services on our Website

1. General: Cookies and comparable technologies 

So-called "cookies" and comparable recognition technologies may be used on our website. Cookies are small text files that are assigned and stored to the browser you are using and through which certain information flows to the body that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer and therefore cannot cause any damage. They serve to make the internet offer more user-friendly and effective overall. 

A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. In terms of their function, a distinction is made between: 

  • Necessary or essential cookies (technical cookies): absolutely necessary in order to move around the website, use basic functions and ensure the security of the website; 
  • Functional cookies: cookies that collect user data to provide convenient website functions, e.g. for displaying a video; 
  • Analytical cookies (performance cookies): these collect anonymous information about how you use our website, which pages you visit and whether errors occur, and are only used to improve our website; 
  • Marketing cookies (advertising cookies, targeting cookies): used to offer needs-based advertising and to measure the effectiveness of these offers. 

In some cases, third-party cookies may be stored on your device once you enter our site. These enable you or us to take advantage of certain services offered by the third party. 

If consent to the storage of cookies and comparable technologies has been requested, the processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and § 25 (1) TDDDG); the consent can be revoked at any time. If no consent is requested or another legal basis is specified, the processing is based on our legitimate interest in the storage of cookies for the technically error-free and optimized provision of our services (Art. 6 para. 1 lit. f GDPR). 

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted. If cookies are used by third-party companies or for analysis purposes, we will inform you about this separately in this privacy policy and, if necessary, request your consent. 

2. Cookie Consent Tool 

Consent with Usercentrics 

This website uses the consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies and to document this in compliance with data protection regulations. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany; website: usercentrics.com (hereinafter "Usercentrics"). 

When you enter our website, the following personal data is transferred to Usercentrics: 

  • your consent(s) or the withdrawal of your consent(s) 
  • your IP address 
  • information about your browser 
  • information about your end device 
  • date and time of your visit to the website 

Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign the consents given or their revocation to you. The data collected in this way is stored until you ask us to delete it, delete the Usercentrics cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected. Usercentrics is used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Art. 6 para. 1 sentence 1 lit. c GDPR. 

Contract processing 

We have concluded a data processing agreement (DPA) with Usercentrics. This is a contract prescribed by data protection law, which ensures that Usercentrics only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR. 

3. Cookies, Plugins and Other Third-Party Services 

1) Google Analytics (Web analytics) 

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. 

Purpose: Web analysis of visitor behaviour patterns (pages accessed, time spent, operating system, origin) to understand and optimise the use of our website. In Google Analytics 4, IP addresses of users in the EU are not logged or stored. Further information on data collection and privacy in Google Analytics is available here.

Legal basis: Google Analytics is used only with your consent. The storage of information on your end device or access to information already stored on your end device is based on your consent in accordance with § 25 (1) TDDDG. The subsequent processing of personal data is based on Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time with effect for the future via the cookie/consent settings on our website. 

Data processed: Usage data (e.g. pages accessed, dwell time and interactions), technical information about your browser, device and operating system, approximate location information and online identifiers (e.g. cookies), as applicable. Further information on privacy and data processing in Google Analytics is available here. 

Recipients / third-country transfer: Data may be processed by Google Ireland Limited and other Google group companies. In this context, personal data may also be transferred to Google LLC and processed in the USA. Where the recipient is certified under the EU-U.S. Data Privacy Framework, the transfer may be based on the European Commission's adequacy decision pursuant to Art. 45 GDPR. Where the EU-U.S. Data Privacy Framework does not apply to a particular transfer, appropriate safeguards, such as the European Commission's Standard Contractual Clauses pursuant to Art. 46 GDPR, may be used. Further information on Google's data transfer mechanisms is available here. A data processing agreement has been concluded with Google. 

Retention period: User- and event-level data linked to cookies, user IDs or advertising IDs is retained in accordance with the retention period configured for our Google Analytics property. Google Analytics allows retention periods of 2 or 14 months for user-level data in standard Google Analytics properties. Further information is available here.  

You can prevent Google Analytics from collecting data by using the browser add-on available here. 

Further information: https://support.google.com/analytics/answer/6004245?hl=en 

2) Matomo (Web analytics) 

Provider: Open-source web analytics operated by us (self-hosted). Hosting is provided by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp, Germany (phone: +49-5772-293-100). 

Purpose: Collection and analysis of data on the use of our website (e.g. which page views occurred, from which region, and whether certain actions such as clicks were performed) in order to optimise our web offerings. 

Legal basis: The storage of information on your end device or access to information already stored on it (e.g. cookies) is based on your consent pursuant to § 25 (1) TDDDG; the subsequent processing of personal data is based on Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time with effect for the future via the cookie/consent settings on our website. 

Data processed: Usage data and log files (IP address [anonymised prior to archiving], referrer, browser and operating system used), online identifiers (cookies/device fingerprinting). 

Recipients / third-country transfer: The information is stored on our server and processed within the EU (Germany); no third-country transfer takes place. The IP address is shortened before analysis so that it can no longer be clearly assigned to you. 

Retention period: Data retention for data stored in Matomo: all visits and actions raw data are deleted after 11 months 26 days; aggregated reports are never deleted. Tracking implementation is cookie-based. A data processing agreement (DPA) has been concluded with the hosting provider. 

Further information: https://matomo.org/privacy/ (further details available on request from the controller, see A. 2). 

3) YouTube (Video embedding, expanded data protection mode) 

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. 

Purpose: Embedding of videos on our website in the expanded data protection mode, which according to YouTube means that no information about visitors is stored before they watch the video. As soon as a video is played, a connection to YouTube’s servers is established. 

Legal basis: The embedding in the expanded data protection mode is based on our legitimate interest in an appealing presentation of our online content (Art. 6 para. 1 lit. f GDPR). Insofar as, upon starting a video, cookies are stored or comparable technologies (e.g. device fingerprinting) are used, this is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 (1) TDDDG; consent can be revoked at any time. 

Data processed: Information on which of our pages you have visited; if you are logged into your YouTube account, your browsing patterns may be allocated directly to your personal profile; cookies or comparable technologies (e.g. device fingerprinting) may be placed after a video is started; video statistics. 

Recipients / third-country transfer: Google; regardless of video playback, a connection to the Google DoubleClick network is established. A transfer to the USA cannot be excluded. 

Retention period: Not separately specified; determined by YouTube/Google. Additional processing beyond our control may be triggered after video playback. 

Further information: https://policies.google.com/privacy?hl=en 

4) MapTiler (Maps) 

Provider: MapTiler AG, Höfnerstrasse 98, Unterägeri, Zug 6314, Switzerland. 

Purpose: Display of map material on our website to improve the geographical representation and to simplify the search within our projects. 

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in the graphic representation and simplification of projects); where consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time. 

Data processed: How you use the map itself is not recorded. IP addresses of MapTiler Cloud visitors are stored for a limited time for logging security-related activities on the MapTiler infrastructure. 

Recipients / third-country transfer: Insofar as personal data is transferred to MapTiler servers in Switzerland, the transfer is based on the EU Commission’s adequacy decision for Switzerland (details), which certifies data protection equivalent to the EEA standard. Where data is transferred to further countries (e.g. the US), the associated risks apply as described in A. (8). 

Retention period: IP addresses are stored for a maximum of 20 minutes and then automatically deleted. 

Further information: https://www.maptiler.com/privacy-policy/ 

5) Vimeo (Video embedding) 

Provider: Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. 

Purpose: Embedding of videos from the Vimeo video portal. If you visit a page with an embedded Vimeo video, a connection to Vimeo’s servers is established. 

Legal basis: The embedding is based on our legitimate interest in an appealing presentation of our online content (Art. 6 para. 1 lit. f GDPR). Insofar as cookies are stored or comparable technologies (e.g. device fingerprinting) are used, this is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 (1) TDDDG; consent can be revoked at any time. 

Data processed: Information on which of our pages you have visited, your IP address (also transmitted if you are not logged in or have no Vimeo account); if logged in, your browsing patterns may be allocated directly to your personal profile; cookies or comparable recognition technologies (e.g. device fingerprinting). 

Recipients / third-country transfer: The information recorded by Vimeo is transmitted to Vimeo’s servers in the USA. The transfer is based on the EU Standard Contractual Clauses and, according to Vimeo, on "legitimate business interests" (details). 

Retention period: Not separately specified; determined by Vimeo. 

Further information: https://vimeo.com/privacy

6) X, formerly Twitter (Social media plug-in) 

Provider: Twitter International Unlimited Company (part of X Corp.), One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. 

Purpose: Integration of functions of the social media platform X/Twitter (e.g. the "Re-Tweet" function). The operator of the website has a legitimate interest in being as visible as possible on social media. We have no knowledge of the content of the transferred data or its use by X/Twitter. 

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest); where a declaration of consent has been obtained, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time. 

Data processed: When you use the platform and its functions, the websites you visit are linked to your X/Twitter account and disclosed to other users; during this process data is transferred to X/Twitter. 

Recipients / third-country transfer: Data transmission to the USA is based on the EU Standard Contractual Clauses (details). 

Retention period: Not separately specified; determined by X/Twitter. You can reset your data protection settings under the account settings. 

Further information: https://twitter.com/en/privacy 

D. Newsletter

If you would like to receive a newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter (a verification link is sent to you by email). We therefore log your registration. No further data is collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties. 

Your personal data is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time, e.g. via the "unsubscribe" link in the newsletter. The lawfulness of the data processing operations already carried out remains unaffected by the revocation. The data you have provided for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe. 

The newsletter is managed and delivered via:

CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany

 

Last updated: 10 August 2026