Privacy Policy

Table of Contents

1. Data Controller
1.1. Data Protection Officer:
2. General Information on Data Processing
3. Website Hosting and Server Log Files
3.1. 1 Description of the Processing
3.2. 2 Processed Data
3.3. 3 Purpose and Legal Basis
3.4. 4 Retention Period
3.5. 5 Recipients
4. Cookies and Similar Technologies
4.1. 1 Essential Cookies
4.2. 2 Statistics (Matomo)
4.3. 3 External Media (only with consent)
5. Contact via Email
5.1. 1 Description
5.2. 2 Purpose and Legal Basis
5.3. 3 Retention Period
5.4. 4 Recipient / Third Country
6. Newsletter
6.1. 1 Description
6.2. 2 Processed Data
6.3. 3 Purpose and Legal Basis
6.4. 4 Double Opt-In
6.5. 5 Use of Cookies and Google Services by MailChimp
6.6. 6 Cancellation
6.7. 7 Data Processing on Behalf of a Client
6.8. 8 Transfers to Third Countries
7. External Links and Social Media
8. Your Rights
9. Timeliness

1. Data Controller

The entity responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Wuppertal Institute for Climate, Environment, and Energy gGmbH
Döppersberg 19
42103 Wuppertal
Germany
Tel.: +49 202 2492-0
Email: info@wupperinst.org
Website: www.wupperinst.org

Data Protection Officer:

2B Advice GmbH
Joseph-Schumpeter-Allee 25
53227 Bonn
Germany
Tel.: +49 228 926165-120
Fax: +49 228 926165-109
Email: dsb@wupperinst.org

2. General Information on Data Processing

We process personal data only to the extent necessary to provide a fully functional website, to communicate with you, or to comply with legal obligations, or if you have given us your consent.

The Wuppertal Institute for Climate, Environment, and Energy gGmbH, as the data controller, has implemented numerous technical and organizational measures to ensure the most comprehensive protection possible for the personal data processed through this website. Nevertheless, Internet-based data transmissions may, in principle, be subject to security vulnerabilities, meaning that absolute protection cannot be guaranteed. If you have any questions, concerns, or comments regarding data protection, please feel free to contact us at hallo@transform.nrw.

Personal data is any information relating to an identified or identifiable natural person.

3. Website Hosting and Server Log Files

3.1 Description of the Processing

Our website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. As part of the hosting service, IONOS processes personal data that is technically necessary when you visit the website. This may include, in particular, IP addresses, the date and time of access, pages viewed, browser information, and server log data.

3.2 Processed Data

IP address (truncated if necessary)
Date and time of the request
URL accessed
Referrer URL
Browser and operating system used
amount of data transferred

3.3 Purpose and Legal Basis

Data processing is carried out for the purpose of providing the website and ensuring its security and stability, based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR.

3.4 Retention Period

Log data is deleted as soon as it is no longer needed for its intended purpose, typically after 8 weeks.

A contract for data processing has been entered into with IONOS in accordance with Article 28 of the GDPR.

3.5 Recipients

Hosting Provider: IONOS SE
Server location: Germany (Essen)
Web server: Apache

4. Cookies and Similar Technologies

4.1 Essential Cookies

Cookie	Vendor	Purpose	Retention period
wp-wpml_current_language	This website (WPML)	Saving the Selected Language	24 hours
cc_cookie	This website	Saving Your Cookie Settings	6 months

Legal basis: Article 6(1)(f) of the GDPR.

4.2 Statistics (Matomo)

We use Matomo (self-hosted) only with your consent.

Cookie	Purpose	Retention period
_pk_id.*	Distinguishing Between Visitors*	about 13 months
_pk_ses.*	Session Assignment	about 30 minutes

Provider: Matomo (hosted on our server)
Legal basis: Article 6(1)(a) of the GDPR (Consent)
Withdrawal: Can be done at any time via the cookie settings on this website

Vimeo (Vimeo Inc., USA) – embedded videos
Mapbox (Mapbox Inc., USA) – interactive maps
Spotify (Spotify AB) – Embedded Audio Content

When this content is loaded, cookies from the providers may be set, and personal data (e.g., IP address) may be transferred to third countries.

Legal basis: Art. 6(1)(a) of the GDPR
Withdrawal: via the cookie settings

You can find detailed information in this website’s Cookie Consent Manager.
You can manage your settings here at any time:

5. Contact via Email

5.1 Description

If you contact us by email, we will process the data you provide (e.g., name, email address, content of the message).

5.2 Purpose and Legal Basis

Processing and responding to your inquiry.
Legal basis: Article 6(1)(f) of the GDPR (legitimate interest in communicating with website visitors).

5.3 Retention Period

We will store your inquiry until our communication is complete and, provided there are no legal retention requirements to the contrary, the data will be deleted no later than the end of the project on April 30, 2027.

5.4 Recipient / Third Country

No disclosure to third parties, unless required by law. No transfer to third countries.

6.1 Description

You can subscribe to our newsletter. You can sign up using a form on our website; the technical processing is handled by Intuit Mailchimp (List-Manage, USA).

6.2 Processed Data

Email address (required)
any additional information requested on the form
Time of Registration, Confirmation via the Double-Opt-In Process

6.3 Purpose and Legal Basis

Sending the newsletter and proof of consent.
Legal basis: Article 6(1)(a) of the GDPR (consent).

6.4 Double Opt-In

After signing up, you will receive an email with a confirmation link. You will be added to the mailing list only after you confirm your subscription.

6.5 Use of Cookies and Google Services by MailChimp

Use of Cookies and Google Services by MailChimp

The MailChimp website sets various cookies and uses Google services (e.g., ajax.googleapis.com, www.google.com) for tracking and analytics purposes. These cookies and services are subject to the privacy policies of MailChimp and Google. We have no control over this. The following cookies are set by MailChimp for the use of the newsletter:

_abck

mcid

ak_bmsc

bm_sv

bm_sz

6.6 Cancellation

You may withdraw your consent at any time, for example:

via the unsubscribe link in each newsletter
by email to hallo@transform.nrw

The withdrawal does not affect the lawfulness of the processing carried out up to that point.

6.7 Data Processing on Behalf of a Client

We have a data processing agreement with Mailchimp in accordance with Article 28 of the GDPR.

6.8 Transfers to Third Countries

Mailchimp may transfer data to the United States.

We use MailChimp, a platform provided by the U.S. company The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, to send our newsletter. The information provided when signing up for the newsletter is stored on MailChimp’s servers in the United States.

When you access the newsletter sign-up page, you will be automatically redirected to a page hosted by MailChimp under the domain uni-wuppertal.us13.list-manage.com. In the process, your IP address is transmitted to MailChimp’s servers in the United States. This transfer is based on the EU-US Data Privacy Framework, which ensures that MailChimp is committed to complying with European data protection regulations. However, complete protection of your data during transfer abroad cannot be guaranteed.

Our website contains links to external websites (e.g., partners, social media profiles). The respective providers are solely responsible for data processing on these external sites.

When you click on an external link, you will leave our website. We have no control over how third parties process data.

Note regarding social media profiles: Information about data processing by the respective platforms can be found in their privacy policies.

8. Your Rights

You have the following rights with respect to the personal data we hold about you:

Right of Access (Art. 15 GDPR):
Every data subject has the right to obtain, free of charge, information about the personal data stored about them.
Rectification (Art. 16 of the GDPR)
Every data subject has the right to request the rectification of inaccurate personal data.
Erasure (Art. 17 GDPR)
Every data subject has the right to request the erasure of their personal data.
Restriction of Processing (Art. 18 GDPR)
Every data subject has the right to request the restriction of the processing of their personal data.
Data Portability (Art. 20 GDPR)
Every data subject has the right to receive their personal data in a structured, commonly used, and machine-readable format.
Right to object (Art. 21 of the GDPR), to the extent that the processing is based on Art. 6(1)(f) of the GDPR
Consent ( Art. 7(3) GDPR)
You have the right to withdraw your consent at any time with future effect, e.g., by sending an email to dsb@wupperinst.org or through the cookie settings.
Right to File a Complaint ( Art. 77 GDPR)
You have the right to file a complaint with a data protection supervisory authority.

The authority responsible for North Rhine-Westphalia is generally:

State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
https://www.ldi.nrw.de

9. Timeliness

As of July 8, 2026
We reserve the right to amend this Privacy Policy if the legal situation, the services we use, or our data processing procedures change.