Contents
- Data Protection at a Glance
- Personal data
- Special Categories of Personal Data
- Disclosure of Data to Third Parties
- Links
- User rights
- Contact
- Changes to our Privacy Policy
1. Data Protection at a Glance
Protecting your privacy is important to OekoFor GmbH. We therefore ask you to carefully read the following summary of the data collection carried out by our website www.oekofor.de. This privacy policy is intended to inform you about the type, scope, and purpose of the collection of personal data by the website operator (OekoFor GmbH). The collection and disclosure of data complies with the requirements of the GDPR (General Data Protection Regulation) and the BDSG (German Federal Data Protection Act). Changes and updates to this privacy policy cannot be ruled out, which is why we recommend that you review it regularly. We assure you that this data is used exclusively for the operation and improvement of our website. In accordance with applicable regulations, this data is stored only for as long as is necessary for the stated purposes. Exceptions apply where a longer storage period is provided for by the GDPR. The statutory deletion requirements are observed. OekoFor GmbH takes the protection of your data seriously and treats it confidentially. Nevertheless, internet-based data transmissions may have security vulnerabilities, so absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us via alternative means, such as by telephone. If you have any concerns or questions regarding the collection of your data, you will find our contact details at the end of this text as well as in the legal notice (Impressum).
2. Personal data
The OekoFor GmbH website collects and uses personal data. The data collection carried out here is based on a legitimate interest pursuant to Art. 6(1)(f) GDPR. In addition, we rely in part on information from our users in order to provide our service. Data is only collected, used, and forwarded to third parties to the extent permitted by law and/or if users have consented to this. As the operator, we may only store personal data for a longer period, disclose it, or subsequently access it insofar as this is legally permitted (e.g. in the event of suspected unlawful activity). By visiting and using our website, various types of personal data within the meaning of Art. 4 GDPR may be collected, which are listed below:
Access data - external hosting
Our website is hosted by an external service provider (hosting provider: Alfahosting GmbH, Ankerstraße 3b, DE-06108 Halle (Saale); https://alfahosting.de/). When you visit our website, Alfahosting collects various personal data, which is temporarily stored on Alfahosting’s servers as log files. This is done for security reasons and to maintain server operations. Server log files are stored for a maximum of seven days and are then deleted. For details, please refer to the Privacy Policy of Alfahosting.
The following personal data is collected by Alfahosting:
- The time at which the website was accessed.
- The amount of data sent, in bytes.
- The source or referrer from which you accessed the website.
- The browser used.
- The operating system used.
- The IP address used, which is anonymized after 24 hours (the last octet is set to zero).
To ensure processing in compliance with data protection law, we have entered into a data processing agreement (DPA) with Alfahosting
Contact Data
If you contact us by email, we will generally collect your name, email address, and IP address. We also have a legitimate interest in this, for example if your email violates applicable law. We furthermore reserve the right to delete statements containing content that is degrading to human dignity, defamatory, homophobic, or otherwise inflammatory and, if necessary, to report them to the authorities.
3. Special Categories of Personal Data
No special categories of personal data within the meaning of Art. 9 GDPR are collected.
4. Disclosure of Data to Third Parties
As a matter of principle, we do not pass your data on to third parties. We also take appropriate measures to ensure that the data we collect cannot be viewed or accessed by third parties from outside.
5. Cookies
The OekoFor GmbH website does not use cookies.
6. External Links
SoundCloud
Our website features a button that links to our account on the online music service SoundCloud. This button merely constitutes a link to that provider. Data is only transmitted to the provider once you click this button. For information on how SoundCloud further processes or uses your data, and on the options available to you to protect your data, please refer to the SoundCloud‘s Privacy Policy.
7. Your rights
Of course, you have rights with regard to the collection of your data. Under applicable law, we are obliged to inform you of these rights. Exercising these rights is free of charge for you.
A) Right of Withdrawal
You have the right to withdraw your consent to the collection of data at any time. An informal email to us is sufficient for this purpose. The lawfulness of data processing carried out prior to the withdrawal remains unaffected by the withdrawal. Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR): Where data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right at any time, on grounds relating to your particular situation, to object to the processing of your personal data; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims (objection pursuant to Art. 21(1) GDPR). Where your personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purposes of direct marketing (objection pursuant to Art. 21(2) GDPR).
B) Right to Data Portability
You have the right to have personal data concerning you handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
C) Right of Access
You have the right to request confirmation from us as to whether and how we process personal data concerning you. This right is fulfilled by this privacy policy. In addition, you may request electronic access to information.
D) Right to Rectification, Erasure, or Restriction
You have the right to have your data corrected, deleted, or restricted. Restriction applies where the legal situation does not permit erasure.
E) Right to Lodge a Complaint
In the event of violations of the GDPR, you have the right to lodge a complaint with a supervisory authority or other competent body – in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy.
F) Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data. You may contact us at any time using the address given below for this purpose. The right to restriction of processing exists in the following cases:
- If you dispute the accuracy of the personal data stored by us, we generally need time to verify this. For the duration of this verification, you have the right to request the restriction of the processing of your personal data.
- If the processing of your personal data has been/is unlawful, you may request the restriction of data processing instead of erasure.
- If we no longer need your personal data, but you need it to assert, exercise, or defend legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
- If you have lodged an objection pursuant to Art. 21(1) GDPR, a balancing of your interests and ours must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
8. Contact
OekoFor GmbH is responsible for the collection of data. For questions, requests for information, applications, complaints, or criticism regarding our data protection practices, you may contact:
OekoFor GmbH
Katharinenstr. 13
79104 Freiburg im Breisgau
• Email: info[at]oekofor.de • Phone: +49 761 88 666 510
Changes to our Privacy Policy
As the controller, we reserve the right to amend this privacy policy at any time in light of applicable data protection regulations. The current version is dated August 2026. This privacy policy was created using the privacy policy generator of e-recht24.de, with the assistance of a sample privacy policy on the website of Bussgeldkatalog, published by Verlag für Rechtsjournalismus GmbH.
Note: This is a non-binding English translation for information purposes only. The German version is legally authoritative.