Overview
The following overview summarizes the types of data processed, the purposes of processing, and the categories of data subjects.
Types of Data Processed: Inventory data. Employee data. Payment data. Location data. Contact data. Content data, Contract data. Usage data. Meta communication and procedural data. Social data. Image and/or video recordings. Log data. Performance and behavioral data. Membership data. Working time data. Salary data. Special categories of data: Health data, Religious or ideological beliefs, Trade union membership.
Categories of Data Subjects: Service recipients and clients. Employees. Interested parties. Communication partners.Users.Members. Business and contractual partners. Donors. Third parties.
Purposes of Processing: Fulfillment of contractual services and obligations. Communication. Security measures. Direct marketing. Audience measurement. Office and organizational procedures. Administrative processes. Feedback. Profiles with user-related information. Provision of our online offering and user-friendliness. Establishment and execution of employment relationships. IT infrastructure. Fundraising and donations. Public relations and informational purposes. Business processes and economic management
1. Data Protection at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website.
Personal data means all data that can be used to personally identify you.
Detailed information on data protection can be found in our Privacy Policy below.
Who Is Responsible for Data Collection on This Website?
Data processing on this website is carried out by the website operator. Their contact details can be found in the section “Information on the Responsible Party” within this Privacy Policy.
How Do We Collect Your Data?
Some data is collected when you provide it to us, for example, by filling out a contact form.
Other data is collected automatically or with your consent when you visit the website. This mainly includes technical data (e.g., internet browser, operating system, or time of page access). The collection of this data occurs automatically as soon as you enter the website.
What Do We Use Your Data For?
Part of the data is collected to ensure the proper functioning of the website. Other data may be used to analyze user behavior.
What Rights Do You Have Regarding Your Data?
You have the right to receive information free of charge about the origin, recipient, and purpose of your stored personal data at any time.
You also have the right to request correction or deletion of this data.
If you have given consent to data processing, you can withdraw that consent at any time with future effect.
You also have the right, under certain circumstances, to request restriction of processing of your personal data.
Furthermore, you have the right to file a complaint with the competent supervisory authority.
For this and any other questions about data protection, you can contact us at any time.
Analytics Tools and Third-Party Tools
When visiting this website, your browsing behavior may be statistically analyzed. This happens primarily through analysis programs. Detailed information about these can be found below in this Privacy Policy.
2. Hosting
IONOS
The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.
When you visit our website, IONOS collects various log files including your IP address.
For details, please refer to the IONOS Privacy Policy:
https://www.ionos.de/terms-gtc/terms-privacy
The use of IONOS is based on Art. 6 (1)(f) GDPR.
We have a legitimate interest in the reliable presentation of our website.
If consent has been requested, processing will be carried out exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting).
Consent can be withdrawn at any time.
Data Processing Agreement
We have concluded a data processing agreement (DPA) with the provider named above.
This legally required contract ensures that IONOS processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
3. General Information and Mandatory Disclosures
Data Protection
The operators of this website take the protection of your personal data very seriously.
We treat your personal data confidentially and in accordance with legal data protection regulations as well as this Privacy Policy.
When using this website, various personal data is collected.
Personal data refers to any data that can personally identify you.
This Privacy Policy explains what data we collect, how we use it, and for what purpose.
Please note that data transmission over the Internet (e.g., email communication) may have security gaps.
Complete protection of data from access by third parties is not possible.
Information on the Responsible Party
Stefanie Esmeralda Stockmann
Judith-Auer-Str.
04317 Leipzig
E-mail: s.stockmann@cannabis-anbau-leipzig.de
The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Storage Duration
Unless a more specific retention period is stated within this Privacy Policy, your personal data remains with us until the purpose for data processing no longer applies.
If you submit a legitimate request for deletion or withdraw consent to processing, your data will be deleted unless we have other legally permissible reasons to retain it (e.g., tax or commercial retention obligations). In the latter case, deletion occurs after those reasons no longer apply.
General Legal Basis for Processing
If you have given consent to data processing, we process your personal data based on Art. 6 (1)(a) GDPR or Art. 9 (2)(a) GDPR when special data categories apply.
If explicit consent for transfer to third countries exists, processing is also based on Art. 49 (1)(a) GDPR.
If you have consented to cookies or similar access to device information, processing is based on § 25 (1) TDDDG.
Consent can be revoked at any time.
If your data is necessary for contractual fulfillment or pre-contractual measures, processing occurs under Art. 6 (1)(b) GDPR.
Data may also be processed for legal obligations (Art. 6 (1)(c) GDPR) or legitimate interests (Art. 6 (1)(f) GDPR).
Recipients of Personal Data
We work with various external parties. Personal data is only transferred when: necessary for contract fulfillment, required by law, we have a legitimate interest under Art. 6 (1)(f) GDPR, or another legal basis allows it.
If processors are used, data is shared only under a valid data processing agreement.
In cases of joint processing, a joint controller agreement is concluded.
Withdrawal of Consent
Many data processing activities require your explicit consent. You can withdraw your consent at any time.
The legality of data processing carried out before withdrawal remains unaffected.
Right to Object (Art. 21 GDPR)
If your data is processed based on Art. 6 (1)(e) or (f) GDPR, you may object at any time for reasons related to your particular situation.
This also applies to profiling based on those provisions.
If you object, we will stop processing your personal data unless there are compelling legitimate grounds that override your interests or the processing is for the exercise or defense of legal claims.
If your data is used for direct marketing, you may object at any time; after objection, your data will no longer be used for such purposes.
Right to Lodge a Complaint
If you believe your data has been processed unlawfully, you have the right to file a complaint with a supervisory authority, especially in your place of residence, work, or where the alleged violation occurred.
Right to Data Portability
You have the right to receive data that we process automatically based on your consent or contract in a commonly used, machine-readable format, and to have it transferred to another controller, where technically feasible.
Right to Restrict Processing
You have the right to request restriction of processing under certain conditions, for example: You contest the accuracy of data (for the verification period); Processing was unlawful but you prefer restriction instead of deletion; We no longer need the data, but you need it for legal claims; You have objected under Art. 21 (1) GDPR, pending verification of overriding interests.
During restriction, your data may only be processed with consent or for legal purposes.
SSL/TLS Encryption
For security, this site uses SSL or TLS encryption.
An encrypted connection can be recognized by “https://” in your browser’s address bar and a lock icon.
When active, transmitted data cannot be read by third parties.
Objection to Advertising Emails
The use of published contact data for unsolicited advertising is prohibited.
The website operators reserve the right to take legal action against spam or unauthorized commercial messages.
4. Data Collection on This Website
Cookies
Our site uses cookies. These may be session cookies (deleted after your visit) or persistent cookies (stored until deleted).
Cookies can come from us or from third parties.
Necessary cookies are stored under Art. 6 (1)(f) GDPR; others only with consent (Art. 6 (1)(a) GDPR and § 25 (1) TDDDG).
You can configure your browser to notify you of cookies, block them, or delete them automatically.
Disabling cookies may limit website functionality.
Contact Form
If you contact us via the contact form, we store the information provided to process your request and any follow-up.
We do not share this data without consent.
Processing is based on Art. 6 (1)(b) GDPR (contract-related), Art. 6 (1)(f) GDPR (legitimate interest), or Art. 6 (1)(a) GDPR (consent, which can be withdrawn).
Contact by Email, Telephone, or Fax
If you contact us by these means, we store and process your request data to handle it.
We do not share it without consent.
Legal bases mirror those above (Art. 6 (1)(b), (f), or (a) GDPR).
Your data remains with us until deletion is requested, consent withdrawn, or the purpose no longer applies.
5. Social Media
This site uses Instagram features provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland.
When active, a direct connection to Instagram’s servers is established, transmitting visit information.
If you’re logged in, clicking the Instagram button links website content to your profile.
We have no control over the data transmitted or Instagram’s use of it.
Processing is based on Art. 6 (1)(a) GDPR and § 25 (1) TDDDG (consent).
Joint processing under Art. 26 GDPR applies to data collection and transfer only.
Further processing by Instagram is its sole responsibility.
See details:
Facebook Controller Addendum
Data transfer to the USA
relies on EU Standard Contractual Clauses.Instagram Privacy Policy
Meta is certified under the EU–US Data Privacy Framework (DPF).
6. Analytics Tools and Advertising
IONOS WebAnalytics
We use IONOS WebAnalytics to analyze site visits (page views, sources, duration, etc.).
IONOS stores anonymized data, including referrer URL, visited pages, device type, time, and anonymized IP addresses.
Cookies are not used.
Processing is based on Art. 6 (1)(f) GDPR (legitimate interest in optimization).
If consent is requested, Art. 6 (1)(a) GDPR and § 25 (1) TDDDG apply.
See details:
IONOS Privacy Policy
A data processing agreement ensures compliance with GDPR.
7. Plugins and Tools
Google Maps
This site uses Google Maps by Google Ireland Limited, Gordon House, Dublin 4, Ireland.
Your IP address is transmitted to Google when using Maps.
Google may also load Google Fonts.
Processing is based on Art. 6 (1)(f) GDPR (legitimate interest) or Art. 6 (1)(a) GDPR (§ 25 (1) TDDDG, consent).
Data transfer to the USA relies on EU Standard Contractual Clauses.
Privacy Policy: https://policies.google.com/privacy?hl=en
Google is certified under the EU–US Data Privacy Framework (DPF).
Source: https://www.e-recht24.de