Privacy policy

1. Controller

The controller responsible for processing personal data on this website is:

Social Affairs GbR
Mierendorffstr. 19
10589 Berlin, Germany
Jointly represented by Serafina Rosé Hannemann and Lia Zlateva
Email: info@social-affairs.de

2. Website delivery and hosting

When you visit our website, technical data is processed to deliver its content and maintain its security and stability. This may include your IP address, the date and time of access, the page or file requested, the volume of data transferred, access status, browser and operating system information, and the referring page, if transmitted.

IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, is our contractual provider for domain and server services. We use Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, for hosting, DNS, content delivery and security of this website. Cloudflare processes technical access data for these purposes.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide a secure and reliable website. Processing on our behalf is governed by the providers’ data processing terms under Article 28 GDPR: Cloudflare Data Processing Addendum and IONOS data processing agreement.

The retention of technical access and security data depends on its purpose and the services used. Cloudflare determines retention by the need to operate and secure its services and by applicable legal obligations, and deletes or destroys the data when the retention period ends. Details are set out in the Cloudflare Privacy Policy, section 11. Information on international transfers is provided in section 6 below.

3. Email enquiries and the enquiry form

You can contact us by email at info@social-affairs.de. We process your name, email address, message and any company details or other information you choose to provide. Email delivery also involves technical connection and delivery data, such as IP addresses and timestamps.

We use this information to respond to your enquiry, discuss the planning of events and experiences, and, where applicable, take steps towards entering into a contract or perform a contract. We handle enquiries ourselves. Our technical email provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. For enquiries submitted using the form, our server-side application at Cloudflare receives the form data and sends it through IONOS to info@social-affairs.de. IONOS provides the infrastructure for receiving, storing and sending email; it does not handle the content of your enquiry on our behalf. Its processing on our behalf is governed by the IONOS data processing agreement under Article 28 GDPR.

Where an enquiry concerns a possible or existing contract with you, the legal basis is Article 6(1)(b) GDPR. For other enquiries, including correspondence with company representatives, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is handling enquiries and communicating for business purposes.

When you submit the enquiry form, the required information is transmitted over an encrypted connection to our application at Cloudflare and then sent by email through IONOS. Required fields are necessary to process your enquiry. To protect the form against automated misuse, we use a hidden check field and limit submissions using the connection’s IP address. The legal basis for this protection is Article 6(1)(f) GDPR; our legitimate interest is preventing spam and maintaining the availability of the contact service. You are under no legal obligation to send us an enquiry.

Enquiries we receive that do not result in a contract are generally deleted no later than six months after they have been fully handled, unless statutory retention obligations or specific grounds for establishing or defending legal claims require longer retention. If a contract is concluded, relevant data is retained for contract performance and for the applicable statutory retention periods. The legal basis for statutory retention is Article 6(1)(c) GDPR; for necessary legal defence, it is Article 6(1)(f) GDPR.

4. Language preference

When you select a language, we store your preference in your browser’s local storage under the key “tda-language” so that the website can remember it on subsequent visits. This entry is not used for advertising or usage profiling. It remains stored until you delete the website’s browser data or change your preference.

Storage is necessary to provide the language feature you expressly request and is based on Section 25(2), point 2, of the German Telecommunications Digital Services Data Protection Act (TDDDG). To the extent personal data is processed, the legal basis is Article 6(1)(f) GDPR; our legitimate interest is providing the website in your selected language.

5. Fonts, images and external content

Fonts, images and our own media are served through our website. Loading these resources does not establish connections to external font, video, map or social media providers. We do not use analytics or advertising tracking services on this website.

6. Transfers outside the European Economic Area

Cloudflare operates a global network. Technical access data and information submitted via the enquiry form may therefore be processed outside the European Economic Area (EEA), including in the USA. Cloudflare states that it is certified under the EU–US Data Privacy Framework. Transfers to Cloudflare in the USA covered by that certification rely on the European Commission’s adequacy decision under Article 45 GDPR. Where that framework does not apply and no other adequacy decision covers a transfer, Cloudflare’s data processing terms provide for the European Commission’s Standard Contractual Clauses under Article 46 GDPR and, where necessary, supplementary safeguards.

IONOS provides for processing in the EU or EEA under its data processing agreement. Where a service requires a transfer to a third country, IONOS undertakes to comply with Articles 44 et seq. GDPR. The relevant terms and safeguards are available in the Cloudflare Data Processing Addendum and the IONOS data processing agreement. You can also request information or a copy of the applicable safeguards from us at info@social-affairs.de.

7. Your rights

Subject to the applicable legal requirements, you have the right to access your personal data (Article 15 GDPR), have it rectified (Article 16), have it erased (Article 17), restrict its processing (Article 18), and receive it in a portable format (Article 20).

Where processing is based on your consent, you may withdraw it at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Right to object: Where we process data under Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation under Article 21 GDPR. We will then stop processing the data unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or processing is necessary for establishing, exercising or defending legal claims. You may object to processing for direct marketing at any time without having to provide such grounds.

To exercise your rights, contact info@social-affairs.de.

You also have the right to lodge a complaint with a data protection supervisory authority, particularly in the EU Member State of your habitual residence, place of work or the alleged infringement (Article 77 GDPR).

8. Automated decision-making

We do not carry out automated decision-making, including profiling, that produces legal or similarly significant effects.

Published: 24 October 2026
Last updated: 26 October 2026