Thank you for your interest in our campaign. We take the protection of your personal data seriously. Below we explain which data is processed when you visit this website, for what purposes and on what legal basis, and what rights you have.
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Zukunftsstiftung Landwirtschaft (administered by GLS Treuhand e.V.)
Christstraße 9, 44789 Bochum, Germany
(Vereinsregister No. 892, Amtsgericht Bochum)
Berlin Office:
V.i.S.d.P.: Benedikt Haerlin, c/o
Zukunftsstiftung Landwirtschaft / Marienstraße 19-20 / 10117 Berlin / www.zukunftsstiftung-landwirtschaft.de
Contact:
Tel: +49 030 2848 2323
E-mail: info@saveourseeds.org
Further details can be found in our imprint.
[If applicable: You can contact our data protection officer at: name, address, e-mail.]
2. General information on data processing
We process personal data only to the extent necessary to provide a functioning website and our content and services, or where you have given your consent. The legal bases are in particular:
- Art. 6(1)(a) GDPR – your consent,
- Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures,
- Art. 6(1)(c) GDPR – compliance with legal obligations,
- Art. 6(1)(f) GDPR – our legitimate interests, unless your interests or fundamental rights override them.
Storing information on your device and accessing it is additionally governed by Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).
Your data will be deleted as soon as the purpose of storage no longer applies and no statutory retention obligations prevent deletion.
3. Hosting and server log files
This website is hosted by the following provider:
Host Europe GmbH
c/o Spaces
Gertrudenstraße 30-36
50667 Köln
We have concluded a data processing agreement with the provider in accordance with Art. 28 GDPR.
Each time the website is accessed, the server automatically records information transmitted by your browser (server log files):
- IP address of the requesting device,
- date and time of access,
- page or file accessed and amount of data transferred,
- status code (e.g. whether the request was successful),
- referrer URL (the previously visited page),
- browser type and version, and operating system.
This processing is necessary to deliver the website and to ensure its stability and security. The legal basis is Art. 6(1)(f) GDPR. The log files are deleted after 14 days unless they are needed for longer to investigate a specific security incident.
4. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.
5. Cookies
This website uses only technically necessary cookies. We do not use tracking, analytics or advertising cookies.
- pll_language – stores the language you have selected for the website (German or English) so that you see the correct language version the next time you visit. Storage period: 1 year. Content: only the language code, no identifier of your person.
- wordpress_*, wordpress_logged_in_*, wordpress_test_cookie – are only set when you log in (e.g. in the access area of the coming-soon page) and keep you logged in. Storage period: until the end of the session, or up to 14 days with “Remember Me”.
These cookies are strictly necessary for the service you have expressly requested (Section 25(2) No. 2 TDDDG); no consent is required for them. The legal basis for the associated processing is Art. 6(1)(f) GDPR. You can delete or block cookies in your browser at any time; the website will remain usable, but it will not remember your language selection, and logging in will not be possible.
Local storage: If you pause the motion on the page using the button in the footer, your browser remembers this choice in local storage (microbes-motion-paused). The entry does not leave your device and is removed when you switch the motion back on.
Login protection: To protect against mass login attempts, after a failed attempt we store a hash of the IP address and the user name entered, together with the number of failed attempts, for 15 minutes. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the security of the website.
6. Fonts
The “Figtree” font used on this website is loaded locally from our server. No connection is made to servers of Google or other font providers.
7. Petition (Proca)
For our petition we use the petition tool Proca. The provider is Fix the Status Quo, Narva mnt 5, Tallinn 10117, Estonia. Reg 14987903 (“Proca”).
Form loaded only after your click (two-click solution)
The petition form is not loaded automatically. Simply visiting our website does not transmit any data to Proca. Only when you click the button to load the petition does your browser connect to Proca’s servers (widget.proca.app, api.proca.app, country.proca.foundation). In particular, your IP address, the date and time of the request and browser information are transmitted. Proca also uses your IP address to determine your country and suggest it in the form.
The legal basis for loading the form is the consent you give by clicking (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). This consent applies only to the current page view; on your next visit, the form will only be loaded after you click again.
Signing the petition
When you sign the petition, the data you enter is processed:
- first name and last name,
- e-mail address,
- postcode and country,
- your comment (if provided),
- your decision as to whether you would like to receive further information by e-mail.
We process this data to count and verify your signature, to hand the petition over to its addressees and – only if you have agreed – to keep you informed about the campaign. The legal basis is your consent (Art. 6(1)(a) GDPR). To confirm your e-mail address, Proca may send you an e-mail with a confirmation link (double opt-in).
We store the signature data until the end of the campaign and delete it no later than [period, e.g. six months] afterwards. If you have consented to receiving information by e-mail, we store your contact details until you withdraw your consent. When handing over the petition, we only pass on the total number of signatures and [if applicable: first name, initial of last name, country].
Proca processes the data on servers in the European Union. [We have concluded a data processing agreement with Proca in accordance with Art. 28 GDPR. / We are joint controllers with Proca in accordance with Art. 26 GDPR; we will provide you with the essence of this arrangement on request.] Further information can be found in Proca’s privacy policy: https://fixthestatusquo.com/privacy_policy/.
8. Contact by e-mail
If you contact us by e-mail, we process your e-mail address and the information in your message in order to answer your enquiry. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in answering) or Art. 6(1)(b) GDPR if your enquiry relates to a contract. We delete the data as soon as your enquiry has been dealt with conclusively and no retention obligations apply.
9. Your rights
You have the following rights with regard to your personal data:
- access (Art. 15 GDPR),
- rectification (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- withdrawal of consent with effect for the future (Art. 7(3) GDPR).
Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object to the processing at any time on grounds relating to your particular situation.
To exercise your rights, an informal message to the contact address given above is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
10. No automated decision-making
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
11. Changes to this privacy policy
We will update this privacy policy if the website or the legal requirements change. The version published here applies.
Last updated: October 2026