Privacy policy

In the following, we provide information about the collection of personal data via the website of the Innovation Alliance Foundation.
As the operator* of these pages, we take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.


§ 1 - Definitions, responsible body and data protection officer

(1) Personal data is all data that relates or can be related to you personally, e.g. name, address, email addresses, user behaviour.

(2) The responsible body for data processing is the Innovationsallianz Foundation. It is represented by the managing directors Jens Mohrmann (Chairman), Dr Michael Richter (Deputy), Thomas Richter.
You can contact the controller and its representatives at: Neuer Messplatz 3, 79108 Freiburg
Telephone: +49 (0)761 3881-1200
E-mail: info@innovationsallianz-freiburg.de
Internet: www.innovationsallianz-freiburg.de

(3) The data protection officer of the Innovation Alliance Foundation is the lawyer Marc E. Evers. 
You can reach our data protection officer at
Attorney Marc E. Evers
DataSEKure Rechtsanwaltsgesellschaft mbH
Schillerstraße 8
79102 Freiburg
Phone: +49 761 2057430
Email: datenschutz@datasekure.de


§ 2 - Purpose and legal basis of data processing

(1) Collection of personal data when visiting the website
When using the website for information purposes only, i.e. when you visit our website, we do not process any personal data, with the exception of the data that your browser transmits to enable you to visit the website. This means that we only store access data in so-called server log files, which are stored until they are automatically deleted. 
These are

  • IP address
  • Date and time of the enquiry
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/http status code
  • Amount of data transferred in each case
  • Website from which the request originates
  • browser
  • Operating system and its interface

  • Language and version of the browser software.

     

We process the aforementioned data for the following purposes

  • Ensuring a smooth connection to the website
  • Ensuring convenient use of the website
  • Analysing system security and stability and
  • for further administrative purposes

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f) GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.
We also use cookies and analysis services when you visit our website. You can find more detailed explanations on this under § 7 and § 8 of this privacy policy.

(2) Collection of personal data when using the "contact form" function on our website
In addition to the purely informational use of our website, we also offer the option on our website of contacting us directly and informing us of your enquiry. To do this, you must generally provide additional personal data, which we use exclusively to provide the respective service. 
This is the following data:

 

  • First name and surname
  • Street and house number
  • Postcode/city
  • Telephone/mobile number
  • e-mail address
  • Subject
  • Message
     

If additional voluntary information is possible, it is marked accordingly.

The data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR on the basis of your voluntarily given consent.
The personal data collected by us for the use of the contact form will be automatically deleted after your enquiry has been dealt with.

(3) Collection of personal data in the event of an enquiry by email or telephone
If you contact us by email or telephone, we will process your enquiry and your data resulting from the enquiry for the purpose of processing your enquiry.
The legal basis for this is Art. 6 para. 1 sentence 1 lit. b) GDPR, provided that your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. If this is not the case, the processing is based on our legitimate interest in processing the enquiries made to us in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR.

We delete the personal data required for the enquiry made after the storage is no longer necessary or restrict the processing if there are legal storage obligations.


§ 3 - Recipients of your data

(1) Your data will not be passed on to third parties without your express consent. In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored. Your personal data will not be transferred to third parties for purposes other than those listed below.
Personal data will only be transferred by way of the legally prescribed transfer, i.e. on the basis of the authorisation pursuant to Art. 6 para. 1 GDPR. We only pass on your personal data to third parties if

  • You have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR,
  • the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
  • in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c) GDPR, and
  • this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR.


(2) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, contracts or similar services together with partners. You will receive more detailed information on this when you provide your personal data or below in the description of the offer.

(3) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.

(4) Note on data transfer to the USA
We have integrated tools from companies based in the USA on our website. Your personal data may be transmitted to the US servers of the respective companies if these tools are active.
US companies are obliged to disclose personal data to security authorities. As the data subject, you have no right to object to this and cannot take legal action against it.


§Section 4 - Duration of storage of your data

(1) When you contact us by e-mail, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions. We delete the data arising in this context after storage is no longer necessary, or restrict processing if there are statutory retention obligations.
(2) The data stored by you will also be stored for the duration of the ongoing business relationship with you, or for as long as is necessary.

If this contractual relationship expires or you make use of your rights mentioned under § 5, your data will be treated in accordance with your exercise of rights within the meaning of § 5 and, if necessary, deleted, unless statutory provisions provide for longer retention periods (in particular under tax and commercial law). If statutory retention periods apply, the storage period for certain data may be up to 10 years, irrespective of the processing purposes.


§ 5 - Your rights as a data subject

Please send all requests for information, requests for information or objections to data processing by email to our data protection officer, lawyer Marc E. Evers: datenschutz@datasekure.de.

(1) Right to information
In accordance with Art. 15 GDPR, you have the right to request information from us at any time about the data we have stored about you, as well as its origin, recipients or categories of recipients to whom this data is disclosed and the purpose of storage.

(2) Right to rectification
In accordance with Art. 16 GDPR, you have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. 16 GDPR, you have the right to obtain without undue delay the rectification of inaccurate personal data stored by us or to have incomplete personal data completed.

(3) Right to erasure
You have the right to obtain the erasure of your personal data stored by us at any time within the scope of Art. 17 GDPR, provided that there are no statutory retention periods to the contrary or processing is necessary for the reasons specified in Art. 17 GDPR.

(4) Right to restriction of processing
In accordance with Art. 18 GDPR, you have the right to request the restriction of the processing of personal data under the conditions specified therein.

(5) Right to data portability
In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it betransmitted to another controller.

(6) To withdraw your consent or object to the processing of your data at any time

(a) If you have given your consent to the processing of your data, you can withdraw this consent at any time in accordance with Art. 7 (3) GDPR. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us. From the time of revocation, data processing may no longer be continued in the future.

(b) Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you, which is described by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing.

(c) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time.

(d) Neither automated decision-making nor profiling is used. In the event that such procedures are used, you will be informed separately.

(7) Right to lodge a complaint with the data protection authority
If you do not agree with the handling of your personal data stored by us, you have the right to lodge a complaint with the competent data protection authority in accordance with Art. 77 GDPR. The supervisory authority responsible for us is the State Commissioner for Data Protection Baden-Württemberg, Prof. Dr Tobias Keber, Königstraße 10 a, 70173 Stuttgart, telephone: 0711 615 54 10.


§ 6 - No obligation to provide data

Customers are not legally obliged to provide us with personal data.
However, if the data required for the conclusion and processing of the contract and the data that must be collected for legal reasons are not provided, it will generally not be possible to conclude the contract.


§Section 7 - Cookies

(1) We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

(2) Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.

(3) Session cookies are deleted immediately after you leave the website. Temporary cookies remain stored on your device for a specified period of time. Permanent cookies remain stored on your end device until you or the web browser deletes them.

(4) Cookies have various functions.
Many cookies are technically necessary for the error-free functioning of the website. The data processed by cookies are necessary for the purposes mentioned to safeguard our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR.
In addition, we use cookies that are not absolutely necessary. These enable us [to optimise the user-friendliness of our website], [to anonymously evaluate the use of our website and] to display personalised advertising. The legal basis for this is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.]

(5) If we obtain your consent to the storage of cookies, your data will be processed exclusively on the basis of this consent in accordance with Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time.

(6) You can configure your browser so that no cookies are stored or a message always appears before a new cookie is created. You can also exclude the acceptance of cookies in certain cases. You can also specify that cookies are automatically deleted when the browser is closed. However, completely deactivating cookies may mean that you cannot use all the functions of our website.


§Section 8 - Data security

We use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties (e.g. TSL encryption for our website), taking into account the state of the art, the implementation costs and the nature, scope, context and purpose of the processing as well as the existing risks of a data breach (including its probability and impact) for the data subject. Our security measures are continuously improved in line with technological developments.
We will be happy to provide you with more detailed information on request. Please contact our data protection officer (see § 1 (3)).


§ 9 - Hosting

Our website is hosted by an external service provider. The personal data collected on the website (see § 2 (1)) is stored on the hoster's servers.
The data processing in connection with the use of the hoster is based on our legitimate interest in a secure, fast and efficient provision of our website by a professional provider in accordance with Art. 6 (1) sentence 1 lit. f) GDPR. The hoster will only process your personal data in accordance with our instructions. We have concluded an order processing contract with our service provider.


§Section 10 - Links to third-party websites
We have no influence on the content and data processing on these websites. The purpose and scope of the data collection and the further processing and use of the data as well as your rights in this regard and setting options to protect your privacy can be found in the data protection information on the corresponding website.


§ 11 - Analysis tools and advertising

(1) Use of Google Analytics
If you have given your consent, we use the web analysis service "Google Analytics" in the version "Google Analytics 4" of Google Inc. (based in 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google") on our website.
Google Analytics uses cookies, which are text files placed on your computer, to help the website analyse how users use the site.
We only use Google Analytics with IP anonymisation activated. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.
Google will use the information collected on our behalf to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. This is done by means of pseudonymised user profiles - i.e. these do not contain any unique data such as name or email address.
The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
The following data in particular is collected during your website visit:

  • Your approximate location,

  • Time of the enquiry,

  • Your shortened IP address,

  • Your user behaviour,

  • Pages you have visited,

  • Your purchases and downloads,

  • Technical information about your browser, operating system and device,

  • your internet provider,

  • the referrer URL.


The data and the associated cookies are deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.
You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, please note that if you do this you may not be able to use the full functionality of this website.

You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google. You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de 
Data processing in connection with Google Analytics is based on your consent in accordance with Art. 6 para. 1 lit. a) GDPR, which was requested, for example, when consenting to the storage of cookies. You can withdraw your consent at any time. The easiest way to revoke your consent is via our Consent Manager or by installing the Google browser add-on, which can be accessed via the following link: https://tools.google.com/dlpage/gaoptout?hl=de/.

Google acts as a processor and we have concluded a corresponding contract with Google. The information generated by the cookie and the (usually shortened) IP addresses about your use of this website are usually transferred to a Google server in the USA and processed there. Google participates in the EU-US Data Privacy Framework, which came into force on 10 July 2023, and has thus officially committed itself to the US Department of Commerce to comply with the principles of the EU-US Data Privacy Framework. Google's EU-US Data Privacy Framework registration is available at https://www.dataprivacyframework.gov/list In accordance with the European Commission's adequacy decision of 10 July 2023, the EU-US Data Privacy Framework guarantees an adequate level of data protection, i.e. a level of data protection equivalent to that in the EU.
Further information on Google Analytics and information from the third-party provider: Google Dublin, Google Ireland Ldt, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001, can be found at

under https://marketingplatform.google.com/about/analytics/terms/de/ (user conditions),
under https://support.google.com/analytics/answer/6004245?hl=de/ (information on data processing when using Google Analytics),
under https://policies.google.com/privacy?hl=de&gl=de (privacy policy - general information on data processing which, according to Google, should also apply to Google Analytics).

(2) Use of Google Tag Manager
If you have given your consent, we use the web analysis service "Google Tag Manager" from Google Inc. (based in 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google") on our website.
With the help of Google Tag Manager, almost any tracking code can be inserted on your own website. This applies, for example, to the tags for Google, but also to the tracking codes for numerous online marketing tools and web analytics tools. The Google Tag Manager makes it possible to identify and measure the behaviour of users on our website. For example, we can find out to what extent a user scrolls, moves their mouse, clicks on pages or elements or fills out and submits forms.
Google sets cookies that track the website visitor across pages. Google processes the following data, among others

  • IP address

  • referrer URL

  • Mouse movements of the website visitor

  • Length of stay of the website visitor

  • Information about the website visitor's operating system

  • Language set in the browser
     

The data processing in connection with Google is based on your consent in accordance with Art. 6 para. 1 lit. a) GDPR, which was requested, for example, when consenting to the storage of cookies. You can withdraw your consent at any time. The easiest way to revoke your consent is via our Consent Manager or by installing the Google browser add-on, which can be accessed via the following link: https://tools.google.com/dlpage/gaoptout?hl=de/.

Google acts as a processor and we have concluded a corresponding contract with Google. The information generated by the cookie and the (usually shortened) IP addresses about your use of this website are usually transferred to a Google server in the USA and processed there. Google participates in the EU-US Data Privacy Framework, which came into force on 10 July 2023, and has thus officially committed itself to the US Department of Commerce to comply with the principles of the EU-US Data Privacy Framework. Google's EU-US Data Privacy Framework registration is available at https://www.dataprivacyframework.gov/list In accordance with the European Commission's adequacy decision of 10 July 2023, the EU-US Data Privacy Framework guarantees an adequate level of data protection, i.e. a level of data protection equivalent to that in the EU.
You can find more information about Google Analytics at: https: //marketingplatform.google.com/intl/de/about/tag-manager/features/ (functions).

(3) Use of the cookiebot from Usercentrics
We use the consent management service Cookiebot from Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany (Usercentrics). This enables us to obtain and manage the consent of website users for data processing. The processing is necessary to fulfil a legal obligation (Art. 7 para. 1 GDPR) to which we are subject (Art. 6 para. 1 sentence 1 lit. c) GDPR). For this purpose, the following data is processed using cookies:

Your IP address (the last three digits are set to '0'); date and time of consent; browser information; URL from which the consent was sent; an anonymous, random and encrypted key; your consent status as an end user as proof of consent.

The key and consent status are stored in the browser for 12 months using the "CookieConsent" cookie. This retains your cookie preference for subsequent page requests. The key can be used to prove and track your consent.

If you activate the "collective consent" service function to activate consent for multiple websites through a single end-user consent, the service also stores a separate, random, unique ID with your consent. If all of the following criteria are met, this key is stored in the third-party cookie "CookieConsentBulkTicket" in your browser in encrypted form: You activate the collective consent function in the service configuration. You allow third-party cookies via browser settings. You have deactivated "Do not track" via the browser settings. You accept all or at least certain types of cookies when you give your consent.

The functionality of the website is not guaranteed without the processing.
Usercentrics is the recipient of your personal data and acts as a processor for us.
The processing takes place in the European Union. Further information on objection and removal options vis-à-vis Usercentrics can be found at: https://www.cookiebot.com/de/privacy-policy/ Your personal data will be deleted continuously after 12 months or immediately after termination of the contract between us and Usercentrics.

Please note our general information on the deletion and deactivation of cookies above under § 7.


§Section 12 - Plug-ins and tools

(1) Integration of OpenStreetMap
We use the OpenStreetMap map service on this website. This allows us to show you interactive maps directly on the website and enables you to conveniently use the map function.
When you visit the website, OpenStreetMap receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under § 2 of this declaration and the data on your interaction with the map are transmitted.
Further information on the purpose and scope of data collection and its processing by the plug-in provider OpenStreetMap Foundation (OSMF) can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://wiki.osmfoundation.org/wiki/Privacy_Policy 
Data processing in connection with Open StreetMap is based on your consent in accordance with Art. 6 para. 1 lit. a) GDPR, which was requested, for example, when you consented to the storage of cookies. You can revoke your consent at any time.

Status January 2026