Privacy Policy

Data Protection Policy – Michael Otto Stiftung, Werner-Otto-Str. 1-7, 22179 Hamburg for the website www.michaelottostiftung.org

In the following data protection policy, we will inform you about the processing of personal data by Michael Otto Stiftung, Werner-Otto-Str. 1-7, 22179 Hamburg (“MOS” and/or “We” and/or “Controller”) in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG 2018).

Please read our data protection policy carefully. If you have any questions or comments about our data protection policy, please contact us nfmchlttstftngrg

1. Name and Contact Details of Controller Responsible for Processing

This data protection policy applies to data processing by
Michael Otto Stiftung
Werner-Otto-Straße 1-7
22179 Hamburg, Germany
E-Mail address: nfmchlttstftngrg

Represented by Executive Director:
Olaf Gieseler

for the following website: www.michaelottostiftung.org

2. Contact information for data protection inquiries

If you have any questions regarding data protection you can reach out to us
Michael Otto Stiftung
Werner-Otto-Straße 1-7
22179 Hamburg, Germany
E-Mail address: nfmchlttstftngrg

3. Contact

You have the option of contacting us in several ways. By e-mail or by post. When you contact us, we use the personal data that you voluntarily provide to us in this context solely for the purpose of contacting you and processing your request.
The legal basis for this data processing is Article 6(1)(a), Article 6(1)(b), Article 6(1)(c) GDPR and Article 6(1)(f) GDPR.

4. Document Requests

Should you request documents on our website (e.g., an annual report), we will use the data specified by you for this purpose exclusively to send these documents.
The legal basis for this processing is Article 6, para. 1 point f) GDPR.

5. Recipients outside of the EU

With the exception of processing operations for which we provide information about the possibility of transmitting data to recipients based outside of the EU in this data protection policy, we do not transmit your data to recipients based outside of the European Union or the European Economic Area. Data are transmitted on the basis of so-called standard contractual clauses of the EU Commission.

6. Duration of Data Storage

The duration for storing data collected on you depends on the purpose for which we process the data. These data are stored as long as they are required for the achievement of the pursued purpose. If we are required to store certain categories of data for a specific period of time due to legal obligations (e.g., tax obligations), the continued storage of the data after such are no longer necessary for the achievement of the respective purpose will be exclusively for the purpose of fulfilling the legal obligation. In this case, the data will be restricted for access.

7. Your Rights

You are entitled to the rights of data subjects in connection with our processing of personal data. You have the right, for example, to receive information about the data we have stored on you. You can also revoke consent granted to us and object to individual cases of data processing. You also have the right to have incorrect data corrected and to request that we provide you with certain data in a standard electronic format.
Furthermore, you have a right to erasure of the data stored on you. Please remember in this regard that we may be obligated for legal reasons to continue to store the data despite your assertion of your right to erasure. Furthermore, in some situations, we have an interest in the ongoing storage of your data such that this interest outweighs your interest in their erasure (e.g., if we still have outstanding claims against you).

Your Rights in Detail

You have the right to revoke the consent you have given to us and are entitled to the following rights if the legal requirements are met in the individual case:

  • the right to information about your personal data stored by us (Article 15 GDPR); in particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to which your data was or will be disclosed, the planned storage period, and the provenance of your data, if they were not collected directly from you;

  • the right to rectification of incorrect data or to have correct data completed (Article 16 GDPR);

  • the right to erasure of your data stored with us (Article 17 GDPR), if no legal or contractual retention periods or other legal obligations or rights to further storage are to be observed by us (e.g., if we still have outstanding claims against you);

  • the right to restrict the processing of your data (Article 18 GDPR), if the accuracy of the data is disputed by you, the processing is unlawful, but you object to their erasure; the Controller no longer requires the data, but you need them to assert, exercise, or defend legal claims or you have objected to the processing in accordance with Article 21 GDPR;

  • the right to data portability (Article 20 GDPR), i.e., the right to receive selected data we have stored on you transmitted in a standard, machine readable format or to request transmission to another Controller;

  • the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority at your regular place of residency, workplace, or the registered office of our company.

The rights indicated above and to which you are entitled can be asserted at nfmchlttstftngrg.

If you have any questions, please feel free to contact nfmchlttstftngrg. 

As of: December 2025