Privacy Policy
This translation is provided for information only. Only the German version is legally binding.
1. Controller
Diskurs Niederrhein GmbH
Borgheeser Weg 49
46446 Emmerich am Rhein
Germany
Represented by: Till Nieke (Managing Director)
Register court: Kleve Local Court (Amtsgericht Kleve), HRB 20895
Phone: +491734089776
Email: desk@diskurs-niederrhein.de
We have not appointed a data protection officer, as the legal requirements for doing so (Section 38 of the German Federal Data Protection Act, BDSG) are not met.
2. Nature and Scope of Data Processing
This website is a fully static site. It works without cookies, without tracking tools, without analytics software and without content from third-party servers. When you visit this website, we process personal data only to the technically unavoidable extent that arises whenever any website is accessed: the connection data described in section 2.1. All resources (fonts and the JavaScript files used) are loaded exclusively from our own server.
2.1 Automatically Collected Data (Server Log Files)
When you visit our website, information is automatically transmitted to the server. It is stored in what are known as server log files. The following information is recorded:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the file retrieved
- Website from which access is made (referrer URL)
- Browser used and, where applicable, your computer’s operating system and the name of your access provider
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the proper provision of the website and in ensuring IT security)
Purpose of processing: this data is used solely for:
- the technical provision of the website
- ensuring the security and stability of the system
- defending against attacks on our IT systems
Storage period: according to our hosting provider, this data is retained only for a short period of less than 30 days and is then deleted automatically.
2.2 Fonts and Scripts
A privacy-friendly solution: all fonts used on this website (Orbitron, Exo 2) and all JavaScript files in use are loaded exclusively from our own server. No data is transferred to external providers such as Google Fonts or content delivery networks (CDNs). Beyond the technical operation carried out by our hosting provider (section 3), your IP address is not passed on to third parties.
3. Hosting
Our website is hosted by Netlify Inc. As part of providing the hosting, Netlify may have access to the server log files.
Provider:
Netlify Inc.
101 2nd Street
San Francisco, CA 94105
USA
Provider’s privacy policy: https://www.netlify.com/privacy/
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the reliable and secure provision of our website)
Netlify Inc. is certified under the EU-US Data Privacy Framework (DPF), the UK Extension to the EU-US DPF and the Swiss-US DPF. Any transfer of personal data to the USA is based on the adequacy decision of the European Commission of 10 July 2023 (Art. 45 GDPR). You can check the current certification status at https://www.dataprivacyframework.gov.
Should the EU-US Data Privacy Framework cease to apply, personal data will be transferred to Netlify Inc. on the basis of the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) in accordance with the data processing agreement (Data Processing Addendum) concluded between us and Netlify.
As part of the hosting, Netlify may set technically necessary session or load-balancing cookies that are required for the secure operation of the website. No consent is required for this under Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Tracking cookies are not used.
4. External Links
Our website does not embed content from external servers and contains no links to social networks. The occasional links to external websites (for example to our hosting provider’s privacy policy) are plain references: simply viewing our pages does not establish any connection to those providers. Only when you click such a link do you reach the external service, where that service’s own privacy policy applies.
5. Cookies
This website does not set any cookies of its own. Neither functional nor marketing or tracking cookies are used. Technically necessary cookies (for example session or load-balancing cookies) can only be set by our host Netlify; you will find more on this in section 3 of this policy. No consent is required for this under Section 25(2) TDDDG.
6. No Tracking Tools or Analytics Software
We deliberately use no tracking tools, no analytics software (such as Google Analytics) and no other tools for recording user behaviour. No profiling or behaviour-based analysis takes place.
7. Contacting Us by Email or Telephone
There is no contact form on this website. If you contact us by email at desk@diskurs-niederrhein.de or by telephone, we process the data you provide (such as your email address, your name and the content of your message) solely in order to handle and answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry serves the initiation or performance of a contract, and otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries). Our email accounts are operated by a provider based in Germany (mailbox.org, Heinlein Hosting GmbH, Berlin), so your email data is not transferred to countries outside the EU. Providing your data is voluntary. We delete correspondence as soon as it is no longer required for processing and no statutory retention obligations (for example for business letters under commercial and tax law) stand in the way.
8. Publication of Images from Projects
As part of our project work (in particular the “Wünschestadt” project) we publish photographs and video recordings in which children, young people and adults may be identifiable.
Legal basis: Art. 6(1)(a) GDPR (consent) in conjunction with Section 22 of the German Art Copyright Act (KunstUrhG). For minors under the age of 16, the consent of their legal guardians has been obtained; from the age of 14, the consent of the person depicted is also obtained.
Purpose: documentation and public presentation of our educational project work.
Recipients: all visitors to this website worldwide; technically also our host Netlify Inc. (see section 3).
Storage period: the images remain published until consent is withdrawn or until the purpose of publication no longer applies.
Right of withdrawal: consent can be withdrawn at any time, informally and with effect for the future, by email to desk@diskurs-niederrhein.de. If consent is withdrawn, we will remove the images concerned from this website without delay. We have no influence over content that has already been saved or further distributed by third parties.
The images shown come from projects we have carried out ourselves; we hold the necessary consents.
9. Your Rights as a Data Subject
Under the General Data Protection Regulation you have a number of rights:
9.1 Right of Access (Art. 15 GDPR)
You have the right to request information about the personal data we hold about you.
9.2 Right to Rectification (Art. 16 GDPR)
You have the right to request the rectification of inaccurate personal data or the completion of incomplete personal data.
9.3 Right to Erasure (Art. 17 GDPR)
You have the right to request the erasure of your personal data, provided the legal requirements for this are met.
9.4 Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request the restriction of the processing of your personal data.
9.5 Right to Object (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
9.6 Right to Data Portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.
9.7 Withdrawal of Consent Given (Art. 7(3) GDPR)
Where processing is based on your consent, you can withdraw it at any time with effect for the future. The lawfulness of the processing carried out up to the point of withdrawal remains unaffected.
9.8 No Obligation to Provide Data
You are under no legal or contractual obligation to provide us with personal data. When you visit this website, only the technical connection data listed in section 2.1 is generated.
9.9 No Automated Decision-Making
Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.
Contact for exercising your rights:
Email: desk@diskurs-niederrhein.de
10. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The authority responsible for us is:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen)
Kavalleriestraße 2-4
40213 Düsseldorf, Germany
Phone: 0211/38424-0
Email: poststelle@ldi.nrw.de
11. Data Security
In accordance with Art. 32 GDPR, and taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk.
12. Changes to This Privacy Policy
We reserve the right to update this privacy policy from time to time in order to adapt it to changes in the law or to changes in the service and in data processing. The new privacy policy will then apply to your next visit.
Last updated: September 2026