Last updated: 1 August 2026

This notice also applies to the homepage www.herz-denken.com

Controller

Leben im Denken e.V., Stäudach 46, 72074 Tübingen

Board: Andreas Schmitt, David Martin, Ludger Scharlipp, Elvira Kraus

Stuttgart Local Court (Amtsgericht Stuttgart), register no. VR 725573

Data protection inquiries: info@spiritual-activity.org

No data protection officer has been appointed, as the requirements of Section 38 of the German Federal Data Protection Act (BDSG) are not met.

Our principle

We collect as little data as possible. This website does not use any analytics or tracking tools, does not embed third-party content, and does not load external fonts. Simply browsing the site leaves no trace beyond what is technically unavoidable.

When you visit the website

The website is hosted by Hetzner Online GmbH in Germany. Server log files record the IP address, date and time, page requested, browser, and operating system. This is technically necessary to deliver the website and serves operational security. The logs are kept for a maximum of 14 days and then deleted.

Legal basis: legitimate interest in secure operation (Art. 6(1)(f) GDPR).

We currently do not use cookies. The translations of the site are hosted entirely on our own server; no external translation service is called.

When you write to us or place an order

Our forms let you send us a message, register for an event, or order posters and postcards free of charge. We process the information you provide — depending on the form, this may include contact details, your address, and a free-text message — and use it solely for the relevant purpose. The data is stored on our own server in Germany.

We delete:

• Inquiries once they have been finally processed, and at the latest after one year
• Material orders one year after dispatch
• Event registrations six months after the event

Legal basis: Art. 6(1)(b) or (f) GDPR, as applicable.

Our forms are protected against automated submissions. For this we use Cloudflare Turnstile (Cloudflare, Inc., USA). When you submit a form, a technical verification token is sent to Cloudflare. General visitor traffic to this website is not routed through Cloudflare. The transfer to the USA is based on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.

Our reply and confirmation emails are sent TLS-encrypted via the mail server of Hetzner Online GmbH in Germany. Messages sent are logged to verify delivery and for troubleshooting; the log contains the recipient, subject, and content of the message, is stored in the website's database, and is automatically deleted after 14 days. Legal basis: legitimate interest in reliable delivery (Art. 6(1)(f) GDPR).

Newsletter

We manage our newsletter using our own application on our server. You sign up and confirm your subscription via a link in an initial email — only after that are you added to the list. We store your email address, your name and language if provided, and the date and time of sign-up and confirmation.

The sign-up form is protected against automated entries by ALTCHA (altcha.org). Emails are technically dispatched via Brevo (Sendinblue SAS, France).

You can unsubscribe at any time via the link included in every email. We retain the records evidencing your sign-up for as long as we need to be able to prove that you consented.

Legal basis: your consent (Art. 6(1)(a) GDPR).

Your rights

You may request information about your data, have it corrected or deleted, restrict its processing, receive your data in a portable format, and object to processing based on legitimate interest. You may withdraw any consent you have given at any time with effect for the future. Please write to us at info@spiritual-activity.org.

You may also lodge a complaint with a supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart.

Changes

We update this notice whenever the processing activities described change. The German version is the authoritative version.