This privacy policy uses, amongst others, the following terms.
Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as the ‘data subject’). A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more specific characteristics that reflect the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Cookies are small text files or similar technologies that are stored in your browser by the websites you have visited and can be read by those and other websites. They are used to optimise the usability of websites or to provide the operator with certain information about the website, for example to tailor advertising to your interests. Cookies may contain personal data, such as a personal ID.
Processing means any operation or set of operations which is carried out on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution or any other form of provision, the matching or linking, the restriction, erasure or destruction.
Permission to process personal data for specific purposes.
A recipient is a natural or legal person, public authority, agency or other body to whom personal data is disclosed.
The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for its designation may be laid down in accordance with Union law or the law of the Member States.
Web hosting refers to the provision of web space and the hosting of websites on an internet service provider’s web server.
Consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes, by a statement or by a clear affirmative action, by which the data subject signifies their agreement to the processing of personal data relating to them.
All countries outside the European Union.
Any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements of that natural person.
In the following, we would like to provide you with information in accordance with the General Data Protection Regulation (GDPR) and other data protection provisions. In particular, we hereby explain what personal data we collect, for what purposes, when you use our websites and communicate with us electronically; how we use this data; to whom we disclose it; and what rights you have in relation to your personal data.
The controller within the meaning of Article 4(7) of the GDPR and other provisions relating to data protection is
Institut für Berufsbildung und Sozialmanagement (IBS) gemeinnützige GmbH
Thuringian Specialist Centre for Refugees in Work and Training
Represented by: Katja Glybowskaja (Managing Director)
Juri-Gagarin-Ring 160
99084 Erfurt
Telephone: 0361 511500-10
Email: fachstelle@ibs-thueringen.de
You can contact our Data Protection Officer at the above address or by email at: datenschutz@awo-thueringen.de
You have the following rights in relation to your personal data held by all the data controllers listed above:
Right to confirmation and access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR),
Right to withdraw your consent (Art. 7(3) GDPR). Consent may be withdrawn at any time. The lawfulness of processing carried out prior to the withdrawal remains unaffected.
Right to receive the data in a structured, commonly used, machine-readable format (‘data portability’) and the right to have the data transmitted to another controller, provided the conditions set out in Article 20(1)(a) and (b) of the GDPR are met,
Right to object to processing (Article 21 of the GDPR) where this is based on our legitimate interests (Article 6(1), first sentence, point (f) of the GDPR). Your right to object applies where there are grounds relating to your particular situation. You do not have the right to object if we or our service providers can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. Nor do you have a right to object if the processing serves to establish, exercise or defend legal claims (Article 21(1) of the GDPR). Should you object, we will assess the circumstances and either cease or adjust the data processing, or explain to you our compelling legitimate grounds on the basis of which we will continue the processing.
Information on whether you have a right to object or withdraw consent when using relevant third-party services is provided below.
You can inform us of your intention to exercise your rights at: fachstelle@ibs-thueringen.de.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority. An overview of all German data protection supervisory authorities can be found here. The supervisory authority of the Free State of Saxony has primary jurisdiction over us.
Below you will find the statutory information on data categories, purposes, legal bases, retention periods, recipients, transfers to third countries, profiling, and rights of withdrawal and objection for each processing activity.
Data categories
The following data is automatically sent to us by your computer when you access the website.
Browser type / browser version
Operating system used
Language / browser software version
IP address (anonymised)
Date / time of the server request
Screen resolution
Time zone difference from GMT
Access status / HTTP status code
Referrer URL (previously visited website)
Frequency of page views
Use of website functions
Purposes of processing and obligation to provide data
We require this data for technical reasons in order to display our website to you (e.g. establishing a connection to the website) and to ensure its stability and security (e.g. tracking attacks on the website and load balancing). Without this data, you cannot access the website, so there is, in theory, an obligation to provide the data.
We also use the data to compile and analyse anonymised usage statistics (number of visitors and browser languages) and to improve our website on that basis, as well as to provide evidence of how funds have been used to our funding bodies. This data is not combined with other data sources. The data is not used to identify website visitors. The data is not used for marketing purposes.
Retention period
This data is stored for a period of seven days. Longer processing may be necessary in individual cases, e.g. for as long as and to the extent necessary to prevent misuse of the website. The data may be stored for up to five years. The anonymised usage statistics do not contain any personal data and therefore do not need to be deleted.
Recipients
This data is technically collected and stored by our hosting provider (Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen) and is further processed on our behalf by Afeefa Kollektiv (Weise, Struwe, Schönfeld GbR, Böhmische Straße 14,
01099 Dresden), which provides technical support for our website, on our behalf for the purposes mentioned above.
This data is also transferred to Mapbox Inc. (750 15th St NW, Washington, District of Columbia, USA) in order to load the map data.
Legal basis
The automatic collection of data is carried out on the basis of Section 25(2)(2) of the TDDDG. The storage and further processing are carried out on the basis of Article 6(1)(f) of the GDPR, as the purposes of the processing reflect our legitimate interests.
You may object to the storage and further processing at any time. Please refer to the information above regarding your right to object. You may submit your objection to the processing of access data to us. You may also contact Mapbox.
Transfers to third countries and legal basis
When map data is loaded, data is transferred to the USA. The US is assessed by the European Court of Justice as a country with a level of data protection that is insufficient by EU standards. In particular, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes, possibly without any means of legal redress.
An adequate level of data protection for transfers to the USA is generally guaranteed by the conclusion of so-called Standard Data Protection Clauses in accordance with Article 46(2)(c) of the GDPR, as well as the additional measures taken by Mapbox to protect the data. The Standard Data Protection Clauses are available here.
When you contact us, e.g. by email or via the contact form on the website, we process the personal data you provide in order to respond to your enquiry.
Categories of data
Your name / pseudonym
Email address or telephone number
Date and time of contact (collected automatically)
Content of the personal message
Subject line of emails, where applicable
Purposes of processing and obligation to provide data
We use the data to receive and respond to your enquiry. Only the content of the message is mandatory. All other information is provided voluntarily or is collected automatically.
Retention period
Your data will be processed during contract negotiations or throughout the contractual relationship if your enquiry leads to the conclusion of a contract with us and/or if the processing is necessary for the establishment, performance or termination of the contract. The legal basis for this is Article 6(1), first sentence, point (b) of the GDPR.
Otherwise, we will delete your data once processing is no longer necessary for handling and responding to your enquiry, or we will store it in a restricted and separate manner for the duration of the statutory retention periods, which may be up to 10 years. The legal basis for this storage of data is Article 6(1), first sentence, point (c) of the GDPR in conjunction with Section 147 of the German Fiscal Code (AO) and Section 257 of the German Commercial Code (HGB).
Recipients
The information contained in your enquiry is sent by email to our electronic inbox. The emails are processed on the server of AWO Alten-, Jugend- und Sozialhilfe (AJS) gGmbH.
Legal basis
The legal basis for the processing is Article 6(1), first sentence, point (f) of the GDPR, i.e. our overriding legitimate interests in providing and utilising a means of electronic contact and in achieving our organisational and project objectives.
You may object to the processing at any time by contacting us.
When contacting us to carry out pre-contractual measures (e.g. an enquiry about a service) or within the framework of an existing contract, the data is processed on the basis of Article 6(1), first sentence, point (b) of the GDPR.
You can find Mapbox’s full privacy policy here.
Data categories and cookies
The following data is automatically sent to Mapbox by your computer when you visit our website.
Browser type / browser version
Operating system used
Language / browser software version
IP address
Date / time of the server request
Screen resolution
Time zone difference from GMT
Access status / HTTP status code
Referrer URL (previously visited website)
Frequency of page views
In addition, a so-called Universally Unique Identifier (UUID for short) is stored on your computer. You can read about what a UUID is here.
Purposes of processing and obligation to provide data
This data is technically necessary to display the interactive map to you. The UUID is required so that the Mapbox server can quickly recognise our website and load the correct map design. Without this data and without the UUID, the map cannot be loaded; therefore, in theory, there is an obligation to provide the data.
Retention period
This data is stored by Mapbox for a limited period for security and accounting purposes. The UUID is stored indefinitely. You can delete it at any time via your browser settings.
Recipients
This data is transferred to Mapbox Inc. (750 15th St NW, Washington, District of Columbia, USA) in order to load the map content.
Legal basis
The automatic collection of data and the storage of the UUID on your computer are carried out on the basis of Section 25(2)(2) of the TDDDG.
You may object to the processing of your data by Mapbox directly with Mapbox. You can delete the UUID from your computer via your browser settings.
Transfer to third countries and legal basis
When the map data is loaded, data is transferred to the USA. The US is assessed by the European Court of Justice as a country with a level of data protection that is insufficient by EU standards. In particular, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes, possibly without any means of legal redress.
An adequate level of data protection for transfers to the USA is generally guaranteed by the conclusion of so-called Standard Data Protection Clauses in accordance with Article 46(2)(c) of the GDPR, as well as the additional measures taken by Mapbox to protect the data. The Standard Data Protection Clauses are available here.
Categories of data
The following data is automatically sent to us by your computer when you access the cloud or use ColloCall.
Browser type / browser version
Operating system used
Language / version of browser software
IP address (anonymised)
Date / time of the server request
Screen resolution
Time zone difference from GMT
Access status / HTTP status code
Referrer URL (previously visited website)
Frequency of page views
Use of website features
To log in or join a video call, you must also provide an email address and, where applicable, your username and password.
For video calls, the following data is also processed:
First names, surnames, employer, job title, email addresses, telephone numbers (depending on the type of participation), audio, video and text content of communications, including files, time, duration and location of participation, profile picture.
Purposes of processing and obligation to provide data
We require this data for technical reasons in order to provide you with the services (e.g. establishing a connection to the website, conducting a video call), to identify you and to ensure stability and security (e.g. tracking attacks on the services and load balancing). Without this data, you cannot access the services; therefore, there is, in theory, an obligation to provide the data.
Retention period
The content of communications via ColloCall is processed only for the duration of the call. Login details are stored for as long as you use the services. Device data is stored for a period of seven days. Longer processing may be necessary in individual cases, e.g. for as long as and to the extent necessary to prevent misuse of the website.
Recipients
This data is collected and processed on our behalf for the purposes stated above by Datenkollektiv (datenkollektiv.net GbR, Florian Rasch and Carsten Ungewitter GbR, Frühlingstr. 14, 01099 Dresden), which provides technical support for our website.
Legal basis
The automatic collection of data is carried out on the basis of Section 25(2)(2) of the TDDDG. The storage and further processing are carried out on the basis of Article 6(1)(f) of the GDPR, as the purposes of the processing reflect our legitimate interests.
You may object to the storage and further processing at any time. Please refer to the information above regarding your right to object. You may submit your objection to the processing of the data to us.
We send out newsletters containing useful information to project partners and other stakeholders at irregular intervals. In this context, the email address is processed for the purpose of sending the newsletter. The legal basis is either your consent pursuant to Article 6(1), first sentence, point GDPR or Section 7(3) of the German Unfair Competition Act (UWG), or Article 6(1)(f) of the GDPR, whereby ensuring transparency and keeping project partners and stakeholders informed about internal project developments constitutes our legitimate interests. The newsletter is sent via our email provider, AWO AJS gGmbH.
You may object to or withdraw your consent to the sending of the newsletter at any time by telephone, post or email, or, where applicable, via an unsubscribe link in the newsletter.
The DFN Event Planner 6 is a platform for coordination and bookings. It is provided by the Association for the Promotion of a German Research Network (Verein zur Förderung eines Deutschen Forschungsnetzes e. V.), DFN Office Berlin, Alexanderplatz 1, 10178 Berlin. The use of the scheduler is based on our legitimate interest in ensuring a modern, efficient and user-friendly survey design or booking process, as well as in optimising our operational processes in accordance with Article 6(1)(f) of the GDPR.
The service can be used without registering. It is not necessary to register with a user account. However, our appointment enquiries are password-protected and are only accessible to individuals who have received the password from us. The password may only be shared within the invited administration.
Data processing takes place exclusively within the territory of the Federal Republic of Germany. More detailed information on data protection at DFN can be found on the website: https://terminplaner6.dfn.de/de/datenschutz
This privacy policy may be amended from time to time. It was last updated on 11 August 2026.