We process personal data (hereinafter generally referred to as “data”) only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.
Pursuant to Article 4(1) of Regulation (EU) 2016/679, i.e., the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “processing” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
In the following privacy policy, we provide you with information regarding the nature, scope, purpose, duration, and legal basis of the processing of personal data, to the extent that we determine the purposes and means of such processing either alone or jointly with others. In addition, we provide information below regarding third-party components we use for optimization purposes and to enhance the user experience, to the extent that third parties process data in this context under their own responsibility.
Our Privacy Policy is structured as follows:
I. Information About Us as the Data Controller
II. Rights of Users and Data Subjects
III. Information on Data Processing
I. Information about us as the data controller
The entity responsible for this website under data protection law is:
myreforest gGmbH
Andrea Thoma
Wilhelm-Schauenbergstr. 3
79199 Kirchzarten
Phone: +41 793498298
E-Mail: andrea.thoma@myreforest.org
II. Rights of Users and Data Subjects
With regard to the data processing described in more detail below, users and data subjects have the right
- the right to confirmation as to whether personal data concerning them is being processed, the right to access the processed data, the right to further information regarding the processing of the data, and the right to receive copies of the data (see also Art. 15 GDPR);
- the right to have inaccurate or incomplete data corrected or completed (see also Art. 16 of the GDPR);
- the right to have data concerning them erased without delay (see also Art. 17 of the GDPR), or, alternatively, where further processing is necessary pursuant to Art. 17(3) of the GDPR, the right to restrict processing in accordance with Art. 18 of the GDPR;
- the right to receive the data concerning them that they have provided and to have that data transmitted to other providers/controllers (see also Art. 20 GDPR);
- to lodge a complaint with the supervisory authority if they believe that the provider is processing their personal data in violation of data protection regulations (see also Art. 77 of the GDPR).
In addition, the controller is obligated to inform all recipients to whom data has been disclosed by the controller of any rectification or erasure of data or restriction of processing carried out pursuant to Articles 16, 17(1), and 18 of the GDPR. However, this obligation does not apply if such notification is impossible or would involve a disproportionate effort. Notwithstanding this, the user has the right to obtain information about these recipients.
Furthermore, pursuant to Article 21 of the GDPR, users and data subjects have the right to object to the future processing of their personal data, provided that the data is processed by the provider in accordance with Article 6(1)(f) of the GDPR. In particular, an objection to data processing for the purposes of direct marketing is permitted.
III. Information on Data Processing
The data processed when you use our website will be deleted or blocked as soon as the purpose for which it was stored no longer applies, provided that no legal retention requirements prevent the deletion of the data and no contrary information regarding specific processing procedures is provided below.
Server data
For technical reasons, particularly to ensure a secure and stable website, data is transmitted to us or to our web hosting provider via your web browser. These so-called server log files collect, among other things, the type and version of your web browser, the operating system, the website from which you accessed our website (referrer URL), the pages of our website that you visit, the date and time of each visit, and the IP address of the Internet connection from which our website is accessed.
The data collected in this way is stored temporarily, but not together with any other data you have provided.
This data is stored on the legal basis of Article 6(1)(f) of the GDPR. Our legitimate interest lies in improving the stability, functionality, and security of our website.
The data will be deleted no later than seven days after collection, unless further retention is necessary for evidentiary purposes. Otherwise, the data will be exempt from deletion, in whole or in part, until the incident has been fully resolved.
Contact Requests / How to Contact Us
If you contact us via the contact form or by email, the information you provide will be used to process your inquiry. Providing this information is necessary for us to process and respond to your inquiry—without it, we will be unable to respond to your inquiry, or our response may be limited.
The legal basis for this processing is Article 6(1)(b) of the GDPR.
Your data will be deleted once your inquiry has been fully resolved and provided that there are no legal retention requirements preventing its deletion, such as those related to any subsequent contract processing.
Vimeo
We use “Vimeo” on our website to display videos. This is a service provided by Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA, hereinafter referred to simply as “Vimeo.”
In some cases, user data is processed on Vimeo servers in the United States.
If you have given your consent to this processing, the legal basis is Article 6(1)(a) of the GDPR. The legal basis may also be Article 6(1)(f) of the GDPR. Our legitimate interest lies in improving the quality of our website.
When you visit a page on our website that contains an embedded video, a connection is established with Vimeo’s servers in the United States to display the video. For technical reasons, this requires Vimeo to process your IP address. In addition, the date and time of your visit to our website are also recorded.
If you are logged in to Vimeo while visiting one of our web pages that contains an embedded Vimeo video, Vimeo may associate the information collected in this way with your personal Vimeo account. If you wish to prevent this, you must either log out of Vimeo before visiting our website or configure your Vimeo account accordingly.
Vimeo uses the web analytics service Google Analytics for the purposes of functionality and usage analysis. Google Analytics stores cookies on your device via your web browser and sends information about your use of our websites—on which a Vimeo video is embedded—to Google. It cannot be ruled out that Google may process this information in the United States.
If you do not consent to this processing, you can prevent cookies from being installed by adjusting the settings in your web browser. For more details, please see the section titled “Cookies” above.
The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in improving the quality of our website and in Vimeo’s legitimate interest in analyzing user behavior for statistical purposes to optimize the site and for marketing purposes.
Vimeo offers here
further information regarding the collection and use of data, as well as your rights and options for protecting your privacy.
YouTube
We use YouTube on our website. YouTube is a video platform operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to simply as “YouTube.”
We use YouTube in conjunction with the “Enhanced Privacy Mode” feature to display videos to you. If you have given your consent to this processing, the legal basis is Article 6(1)(a) of the GDPR. The legal basis may also be Article 6(1)(f) of the GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the “Enhanced Privacy Mode” feature ensures that the data described in more detail below is only transmitted to YouTube’s server if you actually start playing a video.
Without this “Enhanced Privacy” setting, a connection to YouTube’s server in the United States is established as soon as you visit one of our web pages that contains an embedded YouTube video.
This connection is necessary to display the video on our website via your web browser. In doing so, YouTube will collect and process at least your IP address, the date and time, and the website you are visiting. In addition, a connection is established with Google’s “DoubleClick” advertising network.
If you are logged in to YouTube at the same time, YouTube will associate the connection information with your YouTube account. If you wish to prevent this, you must either log out of YouTube before visiting our website or adjust the relevant settings in your YouTube account.
For the purposes of functionality and to analyze user behavior, YouTube permanently stores cookies on your device via your web browser. If you do not consent to this processing, you can prevent cookies from being stored by adjusting the settings in your web browser. For more information, please see the section titled “Cookies” above.
Google provides further information about the collection and use of data, as well as your rights and options for protection in this regard, in its privacy policy, which is available at
Google reCAPTCHA
On our website, we use Google reCAPTCHA to verify and prevent interactions on our website by automated access, such as by so-called bots. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google.”
Through its certification under the EU-U.S. Privacy Shield, Google guarantees that EU data protection requirements are met even when data is processed in the United States.
This service allows Google to determine which website a request is sent from and the IP address from which you are using the reCAPTCHA input box. In addition to your IP address, Google may collect other information necessary for providing and ensuring the functionality of this service.
The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in ensuring the security of our website and in preventing unwanted, automated access in the form of spam or similar.
Google provides further information on how it handles your user data at
Muster-Datenschutzerklärung der Anwaltskanzlei Weiß & Partner