Your data. Our responsibility.
Information under the General Data Protection Regulation on the processing of personal data on this website.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Erika und Erwin Schreiter Stiftung
Düsseldorf office
Grafenberger Allee 87
40237 Düsseldorf
Germany
Registered office: Bonn, Germany
Email: info@schreiter-stiftung.de
2. Hosting and server log files
This website is hosted by Host Europe GmbH, c/o WeWork, Pilgrimstraße 6, 50674 Cologne, Germany. When you access the website, the hosting provider processes technical connection and log data required to deliver the site. This may include, in particular, the IP address, date and time of access, requested file or URL, amount of data transferred, referrer URL, browser type and version and the operating system used.
Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and technically reliable provision of the website and the prevention of misuse and attacks. Host Europe processes personal data as a technical service provider within the applicable data protection framework.
According to information published by Host Europe, archived access or Apache log files for its common hosting products are generally retained for 14 days. Other technical logs may be retained for shorter periods depending on the product and configuration used. We do not use log data for advertising, profiling or marketing purposes.
3. Contact by email
If you contact us by email, we process the information you provide — in particular your email address, name, the content of your message and any other information you provide voluntarily — for the purpose of handling your enquiry.
The legal basis is Article 6(1)(f) GDPR where processing serves appropriate communication and the handling of general enquiries. Where your enquiry relates to the initiation or performance of a contractual or funding relationship, processing may additionally be based on Article 6(1)(b) GDPR.
Data is deleted once the enquiry has been fully dealt with and there are no statutory retention obligations or other legitimate grounds for further storage.
5. Recipients and international transfers
Personal data is generally disclosed only to parties required for the provision of the website or the handling of your enquiry, in particular technical service providers acting as processors. In the current website configuration, no targeted transfer to countries outside the European Union or European Economic Area takes place.
6. Your rights
Subject to the statutory requirements, you have in particular the right of access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR) and the right to object to processing based on Article 6(1)(e) or (f) GDPR (Article 21 GDPR).
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.
To exercise your rights, please contact info@schreiter-stiftung.de.
Right to lodge a complaint
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority for the Foundation is, in particular, the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
7. Data security
We take appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and other risks. In production, the website is to be provided using up-to-date TLS/SSL encryption.
8. Updates and amendments
This Privacy Policy will be updated if the technical functions of the website, service providers used or legal requirements change. The version published on this website at any given time is authoritative.
Last updated: September 2026