Privacy Policy

1. Privacy at a Glance

General Information

The following overview explains what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on data protection can be found in our privacy policy below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the section "Notice on the responsible party" in this privacy policy.

How do we collect your data?

Your data is collected partly by you providing it to us (e.g. via a contact form). Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. browser, operating system, or time of page request).

What do we use your data for?

Some data is collected to ensure the error-free operation of the website. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right at any time to obtain free information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. You can withdraw consent to data processing at any time. You may also request restriction of processing and have the right to lodge a complaint with the competent supervisory authority.

2. Hosting

Hostinger

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. For details, please refer to Hostinger's privacy policy: https://www.hostinger.com/privacy-policy

The use of Hostinger is based on Art. 6(1)(f) GDPR. We have a legitimate interest in a reliable presentation of our website. A Data Processing Agreement (DPA) has been concluded with Hostinger, ensuring that personal data of our website visitors is only processed according to our instructions and in compliance with the GDPR.

3. General Information and Mandatory Disclosures

Data Protection

The operators of this website take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy. Internet data transmission may have security gaps, and complete protection from third-party access is not possible.

Notice on the Responsible Party

The responsible party for data processing on this website is:

AquaVentus Förderverein e.V.
c/o Deutscher Wasserstoff-Verband
Robert-Koch-Platz 4
10115 Berlin

Email: verein@aquaventus.org

Storage Period

Unless a specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. Upon a legitimate request for deletion or withdrawal of consent, your data will be deleted unless we have other legally permissible reasons for retaining it (e.g. tax or commercial law retention periods).

Withdrawal of Consent

Many data processing operations are only possible with your explicit consent. You may withdraw consent already given at any time. The lawfulness of data processing carried out before the withdrawal remains unaffected.

Right to Lodge a Complaint

In the event of GDPR violations, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, workplace, or the location of the alleged infringement.

Right to Data Portability

You have the right to receive data that we process automatically on the basis of your consent or in fulfilment of a contract in a commonly used, machine-readable format or to request its transfer to another controller, where technically feasible.

Access, Correction, and Deletion

You have the right at any time to obtain free information about your stored personal data, its origin, recipients, and the purpose of processing, and to request correction or deletion. You may contact us at any time for this purpose.

Right to Restriction of Processing

You have the right to request restriction of processing of your personal data under certain circumstances (disputed accuracy, unlawful processing, data needed for legal claims, or pending objection review under Art. 21(1) GDPR).

SSL / TLS Encryption

This site uses SSL/TLS encryption for security and confidentiality. An encrypted connection is indicated by the address bar changing from "http://" to "https://" and a padlock icon. Encrypted data cannot be read by third parties.

4. Data Collection on This Website

Server Log Files

The website provider automatically collects and stores information in server log files, including:

This data is not merged with other data sources. Collection is based on Art. 6(1)(f) GDPR (legitimate interest in technically error-free presentation and optimisation of the website).

Contact Form

Enquiries submitted via the contact form are stored together with your provided contact details for the purpose of processing and follow-up questions. We do not share this data without your consent. Processing is based on Art. 6(1)(b) GDPR (contract-related requests) or Art. 6(1)(f) GDPR (legitimate interest in efficient enquiry handling).

Enquiry by Email or Phone

If you contact us by email or phone, your enquiry including personal data (name, request) is stored for the purpose of processing. We do not share this data without your consent. The legal basis is Art. 6(1)(b) or Art. 6(1)(f) GDPR as applicable.

Registration on This Website

You can register on this website to access additional features in the member area. Registration data is used solely for the registered service. We use the email address provided at registration to notify you of important changes.

Processing is based on Art. 6(1)(b) GDPR (registered usage relationship). Registration data is stored while you remain registered and deleted thereafter, subject to mandatory retention periods.

Session Cookies (Login)

For the member area we use technically necessary session cookies. These cookies store only an encrypted session token, which is automatically deleted upon logout or session expiry. No behaviour analysis or sharing with third parties takes place. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure user authentication) and Art. 6(1)(b) GDPR (performance of the usage contract).

5. Fonts

Google Fonts (Local Hosting)

This site uses Google Fonts for consistent font rendering. The fonts are served locally: Next.js downloads the font files at build time and serves them directly from our own server. No personal data is transmitted to Google.

Further information: https://developers.google.com/fonts/faq and Google's privacy policy: https://policies.google.com/privacy.