Privacy policy

§ 1 General information
In this privacy policy, you will find detailed information about what happens to your personal data when you visit our website italignment.org. All data that enables personal identification of you is personal data. When processing your data, we strictly adhere to legal requirements, in particular the General Data Protection Regulation ("GDPR"). It is very important to us that your visit to our website is completely secure.

§ 2 Responsible party
The responsibility for the collection and processing of personal data on this website lies, under data protection law, with Christof Gellweiler, Kürnbergstr. 35, 81369 Munich, Germany • Email: christof.gellweiler@italignment.org • Tel.: +49 89 20 965 389

§ 3 Access data (server log files)
When you access our website, we automatically collect access data that your browser transmits to us and store it in so-called server log files. These include the following:
• Browser type and browser version of your PC • Operating system used by your PC • Referrer URL (source/reference from which you reached our website) • Hostname of the accessing computer • Date and time of the server request • The IP address currently used by your PC (possibly in anonymized form)
As a rule, it is neither possible nor our intention to assign this data to a specific person. The processing of this data is carried out in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interest in improving the stability and functionality of our website.

§ 4 Cookies
We use so-called cookies to make visiting our website attractive and to enable the use of certain functions. These are small text files that are stored on your device. Cookies are not capable of executing programs or transferring viruses to your computer system.
Necessary cookies that are required for electronic communication or the provision of desired functions are stored in accordance with Art. 6 para. 1 lit. f GDPR. Our legitimate interest in storage serves the technically flawless and optimized provision of our services. Other cookies (e.g., for analyzing your surfing behavior) are treated separately in this privacy policy. We mainly use so-called "session cookies," which are automatically deleted after you end your visit. In addition, we use cookies that remain stored on your device until you delete them yourself. These enable us to recognize your browser on your next visit. You can set your browser to notify you when cookies are to be set. You can then decide whether to allow cookies on a case-by-case basis, whether to allow cookies for specific cases, or whether to reject cookies in general. You can also set cookies to be automatically deleted when you close the browser. Please note that the functionality of this website may be limited if you disable cookies.

§ 5 Contact form
If you contact us by email or contact form, the data transmitted, including your contact details, will be stored to process your inquiry and to be available for any follow-up questions. This data will not be passed on to third parties without your express consent.
The processing of data transmitted via the contact form is based exclusively on your consent given in accordance with Art. 6 para. 1 lit. a GDPR. You may revoke this consent at any time without giving reasons. An informal notification by email to us is sufficient for revocation. The lawfulness of data processing carried out before the revocation is not affected by the revocation.
The data transmitted via the contact form will be stored by us until you request deletion, revoke your consent to storage, or the need for data storage no longer applies. Statutory retention periods remain unaffected.

§ 6 Use and disclosure of data
We assure you that personal data that you provide to us, e.g., by email (such as your name, address, or email address), will not be sold to third parties or otherwise used commercially. Your data is processed exclusively for the purpose of correspondence with you and to fulfill the purpose for which you provided us with the data. In the context of payment processing, your payment data will be forwarded to the commissioned credit institution.
The data automatically collected during your visit to our website is used exclusively for the purposes mentioned above. No other use of the data takes place.
The protection of your personal data is important to us. We therefore generally do not pass on your data to third parties unless there is a legal obligation to do so or you have given us your express consent.

§ 7 Encryption (SSL/TLS)
Our website uses SSL or TLS encryption to ensure the security and protection of the transmission of confidential content. This particularly concerns inquiries that you, as a site visitor, send to us as the website operator. An encrypted connection can be recognized by the "https://" in your browser's address bar and the lock symbol in your browser bar.
The activation of SSL or TLS encryption ensures that the data you send to us cannot be read by unauthorized third parties.

§ 8 Storage duration
Your personal data that you transmit to us via our website is stored only for the duration necessary to achieve the respective purpose of data processing. In accordance with commercial and tax retention obligations, however, the storage of certain data may last up to 10 years.

§ 9 Your data protection rights
As a data subject, you have the following rights vis-à-vis the controller regarding your personal data, in accordance with legal provisions:

A. RIGHT OF REVOCATION
Many data processing operations are only possible with your express consent. If the processing of your data is based on your consent, you have the right to revoke this consent at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. The lawfulness of data processing that took place until the revocation on the basis of your consent remains unaffected. The storage of data for billing and accounting purposes is not affected by revocation.

B. RIGHT OF ACCESS
In accordance with Art. 15 GDPR, you have the right to request confirmation from us as to whether we process your personal data. If this is the case, you have the right to information about this data, including the processing purposes, the categories of data processed, the recipients or categories of recipients to whom the data has been or will be disclosed, the planned storage period or the criteria for determining it, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of the data if it was not collected from you, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed of what guarantees exist under Art. 46 GDPR when your data is transferred to third countries.

C. RIGHT TO RECTIFICATION
You have the right to request the correction of inaccurate personal data concerning you and/or the completion of your incomplete data from us at any time in accordance with Art. 16 GDPR.

D. RIGHT TO ERASURE
You have the right to request the erasure of your personal data in accordance with Art. 17 GDPR if one of the following reasons applies:
a. Your personal data is no longer needed for the purposes for which it was collected or otherwise processed.
b. You revoke your consent that legitimized the processing under Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there is no other legal basis for the processing.
c. You object to the processing under Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing under Art. 21 para. 2 GDPR.
d. There is unlawful processing of personal data.
e. We are obliged to erase the personal data due to a legal obligation under Union law or the law of the Member State to which we are subject.
f. The collection of personal data took place in connection with the provision of information society services in accordance with Art. 8 para. 1 GDPR.
This right may be restricted under the following circumstances if processing is essential:
a. to comply with a legal obligation that requires processing under Union or Member State law to which we are subject, or to perform a task in the public interest or in the exercise of official authority;
b. to fulfill a legal obligation that requires processing under Union or Member State law to which we are subject, or to perform a task in the public interest or in the exercise of official authority vested in us;
c. for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
d. for archiving purposes, scientific or historical research purposes, or statistical purposes in accordance with Art. 89 para. 1 GDPR that are in the public interest, provided that the safeguarding of the rights of the data subject would make the achievement of the objectives of such processing impossible or seriously impair them; or
e. for the establishment, exercise, or defense of legal claims.
If we have made your personal data public and are obliged to erase it in accordance with the above provisions, we shall take reasonable steps, including technical measures, taking into account available technology and implementation costs, to inform controllers processing the data that you, as the data subject, have requested the erasure of all links to your personal data or of copies or replications of such data.

E. RIGHT TO RESTRICTION OF PROCESSING
In accordance with Art. 18 GDPR, you have the right to request the restriction of processing (blocking) of your personal data. To exercise this right, you can contact us at any time. The contact details can be found in the imprint. Restriction of processing may be requested in the following cases:
a. If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of processing of your personal data.
b. If the processing of your personal data was/is unlawful, you may request restriction of data processing instead of erasure.
c. If we no longer need your personal data, but you need it for the exercise, defense, or establishment of legal claims, you have the right to request restriction of processing of your personal data instead of erasure.
d. If you have lodged an objection pursuant to Art. 21 para. 1 GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of processing of your personal data.
After restriction of processing of your personal data, such data may generally only be processed with your consent. Exceptions apply to certain legally defined cases, such as for the establishment of legal claims or for the protection of public interests.

F. RIGHT TO NOTIFICATION
If you exercise your right to rectification, erasure, or restriction of processing of your personal data, we are obliged under Art. 19 GDPR to notify all recipients to whom the data has been disclosed. This does not apply if such notification proves impossible or involves disproportionate effort. Upon your request, we will inform you of the recipients of your data.

G. PROTECTION AGAINST AUTOMATED DECISIONS (PROFILING)
In accordance with Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing—including profiling—which produces legal effects concerning you or similarly significantly affects you.
This does not apply if the decision:
a. is necessary for the conclusion or performance of a contract between you and us,
b. is authorized by Union or Member State law to which the controller is subject and which contains appropriate measures to safeguard your rights, freedoms, and legitimate interests, or
c. is based on your explicit consent.
However, decisions in cases (a) to (c) may not be based on special categories of personal data within the meaning of Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or lit. g applies and appropriate measures have been taken to protect your rights, freedoms, and legitimate interests.
In cases (a) and (c), we take appropriate measures to safeguard your rights, freedoms, and legitimate interests. This includes at least the right to obtain human intervention by the controller, to express your own point of view, and to contest the decision.

H. RIGHT TO DATA PORTABILITY
In the case of processing of your personal data based on your consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and carried out by automated means, you have the right under Art. 20 GDPR to receive your data provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller or to request transmission by us to another controller, provided this is technically feasible.

I. RIGHT TO OBJECT
If we process your personal data on the basis of a balancing of interests pursuant to Art. 6 para. 1 lit. f GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation; this also applies to profiling based thereon. The applicable legal basis for processing can be found in this privacy policy. In the event of an objection, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims (objection pursuant to Art. 21 para. 1 GDPR).
In the case of processing of your personal data for direct marketing purposes, you are entitled to object to such processing at any time; this also applies to profiling insofar as it is related to such direct marketing. In the event of an objection, your personal data will no longer be used for direct marketing purposes (objection pursuant to Art. 21 para. 2 GDPR).
With regard to the use of information society services, you have the option, notwithstanding Directive 2002/58/EC, to exercise your right to object by automated means using technical specifications.

J. RIGHT TO LODGE A COMPLAINT WITH THE COMPETENT SUPERVISORY AUTHORITY PURSUANT TO ART. 77 GDPR
In the event of violations of the provisions of the GDPR, data subjects have the right to lodge a complaint with a competent supervisory authority. The complaint may be lodged in particular in the Member State of the data subject's habitual residence, place of work, or the place of the alleged infringement. The right to lodge a complaint under this provision exists without prejudice to other administrative or judicial remedies.
Our competent supervisory authority is:
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18, 91522 Ansbach
Postfach 1349, 91504 Ansbach
Telephone: 0981/180093-0
Email: poststelle@lda.bayern.de
Internet: https://www.lda.bayern.de

§ 10 Validity and amendment of this privacy policy
This privacy policy enters into force on August 19, 2026. We reserve the right to amend this declaration as necessary and in compliance with applicable data protection laws. This may be necessary, for example, to meet new legal requirements or to reflect changes to our website or new services offered via our website. The current version of the privacy policy available at the time of your visit to our website is binding.
In the event of changes to this privacy policy, we will publish them on this page to inform you comprehensively about what personal data we collect, how we process it, and under what conditions we may disclose it.