Privacy Policy
Last update: January, 2026
1. An overview of data protection
General information
The following information will provide you with an easy-to-navigate overview of what will happen with your personal data when you visit this website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information on the subject of data protection, please consult this Privacy Policy.
Data recording on this website
Who is the responsible party for the recording of data on this website (i.e., the “controller”)?
The data on this website is processed by the following controller within the meaning of the GDPR:
Nature Wealth Foundation
Public non-profit foundation under German civil law
Widenmayerstraße 18
80538 Munich
Germany
Email: info@nature-wealth.org
The Nature Wealth Foundation acts as trustee and administrator of the Art for Nature Foundation, a dependent foundation (foundation without legal capacity) under German civil law.
How do we record your data?
We collect your data as a result of your sharing of your data with us (e.g., via a contact form or newsletter subscription).
Other data are recorded automatically or after your consent during your visit by our IT systems. These data are primarily technical (e.g., internet browser, operating system, time of page access).
What are the purposes for which we use your data?
Some of the data are collected to ensure the error-free provision and security of the website. Other data may be used to analyze user behavior. If contracts are concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders, or inquiries.
What rights do you have regarding your data?
You have the right to obtain information about the origin, recipients, and purpose of your stored personal data at any time, free of charge. You also have the right to request rectification or erasure of your data. You may revoke any consent you have given at any time. You also have the right to request restriction of processing and to lodge a complaint with the competent supervisory authority.
2. Hosting
This website is hosted by:
Webflow, Inc.
398 11th Street, 2nd Floor
San Francisco, CA 94103
USA
When you visit our website, Webflow records various log files, including your IP address.
Webflow is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in a reliable and secure presentation of our website. If consent has been obtained, processing is based on Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be revoked at any time.
Data transfers to the USA are based on the EU Standard Contractual Clauses and the certification of Webflow under the EU–US Data Privacy Framework (DPF).
A data processing agreement pursuant to Art. 28 GDPR has been concluded with Webflow.
3. General information and mandatory information
Data protection
We treat your personal data confidentially and in accordance with statutory data protection regulations and this Privacy Policy.
Information about the responsible party (controller)
Controller within the meaning of the GDPR:
Nature Wealth Foundation
Public non-profit foundation under German civil law
Widenmayerstraße 18
80538 Munich
Germany
Email: info@nature-wealth.org
acting as trustee and administrator of the Art for Nature Foundation, a dependent foundation (foundation without legal capacity) under German civil law.
Supervisory authority for data protection
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
www.lda.bayern.de
Data Protection Officer
No data protection officer has been appointed, as this is not required by law.
Storage duration
Personal data will be stored only for as long as necessary for the respective processing purpose or as required by statutory retention obligations.
Legal bases for processing
Processing is carried out on the basis of Art. 6(1)(a), (b), (c) and (f) GDPR as well as § 25(1) TDDDG, depending on the specific purpose of processing.
Recipients of personal data
In the course of our activities, we cooperate with external service providers. Personal data will be transferred to such third parties only if this is necessary for the performance of a contract, if we are legally obliged to do so, if we have a legitimate interest pursuant to Art. 6(1)(f) GDPR, or if another legal basis permits the transfer. Where processors are used, data are transferred exclusively on the basis of a data processing agreement pursuant to Art. 28 GDPR.
Revocation of your consent to the processing of data
You may revoke any consent you have given at any time. This shall not affect the lawfulness of data processing carried out prior to the revocation.
Right to object pursuant to Art. 21 GDPR
If your personal data are processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, you have the right to object to such processing at any time. In this case, your data will no longer be processed for such purposes.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.
Right to data portability
You have the right to receive data which we process automatically on the basis of your consent or in performance of a contract in a commonly used, machine-readable format or to have such data transmitted to another controller, where technically feasible.
Information, rectification and erasure
Within the framework of the applicable legal provisions, you have the right to obtain information about your stored personal data, their origin, recipients and the purpose of processing, and, if applicable, the right to rectification or erasure of such data.
Right to restriction of processing
You have the right to request restriction of processing of your personal data in the cases provided for in Art. 18 GDPR.
SSL / TLS encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the “https://” in the browser address bar and the lock symbol.
4. Data recording on this website
Cookies
This website uses cookies. Cookies are small text files that are stored on your device and do not cause any damage. Session cookies are deleted automatically at the end of your visit; persistent cookies remain stored on your device until you delete them.
Cookies may be set by us (first-party cookies) or by third parties (third-party cookies). Technically necessary cookies are stored on the basis of Art. 6(1)(f) GDPR. Where consent is required, processing is based on Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. Consent may be revoked at any time.
CCM19 (Consent Management)
This website uses CCM19 (Papoo Software & Media GmbH, Bonn, Germany) to obtain and document consent for the use of cookies and similar technologies.
CCM19 stores a cookie in your browser to allocate your consent or revocation. Processing is based on Art. 6(1)(c) GDPR in conjunction with § 25 TDDDG and Art. 6(1)(f) GDPR (legal compliance and documentation).
A data processing agreement pursuant to Art. 28 GDPR has been concluded.
Requests by email, telephone or contact form
If you contact us, your details and the content of your inquiry will be processed for the purpose of handling your request. Processing is based on Art. 6(1)(b) GDPR (contractual or pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in efficient communication), or on your consent pursuant to Art. 6(1)(a) GDPR.
Data will be deleted once the purpose of processing no longer applies, subject to statutory retention obligations.
5. Social media
Functions of the social network Instagram are integrated on this website. These functions are provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
If the social media element is activated, a direct connection between your device and the Instagram server is established. Instagram thereby receives information that you have visited this website.
If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to this website with your user account. We point out that, as the provider of this website, we have no knowledge of the content of the transmitted data or of its use by Instagram.
The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be revoked at any time.
Insofar as personal data are collected on our website and transmitted to Meta Platforms, we and Meta Platforms Ireland Limited are jointly responsible for this data processing within the meaning of Art. 26 GDPR. This joint responsibility is limited to the collection and transmission of the data. The subsequent processing by Meta Platforms is not part of the joint responsibility. The respective agreement can be found at:
https://www.facebook.com/legal/controller_addendum
Data transfers to the USA are based on the EU Standard Contractual Clauses and the certification of Meta Platforms under the EU–US Data Privacy Framework.
Further information can be found in Instagram’s privacy policy:
https://privacycenter.instagram.com/policy/
6. Plug-ins and tools
Google Fonts (local hosting)
This website uses Google Fonts to ensure uniform font display. The fonts are installed locally, so no connection to Google servers is established. This means that no personal data are transmitted to Google in this context.
Further information on Google Fonts can be found at:
https://developers.google.com/fonts/faq
Google’s privacy policy:
https://policies.google.com/privacy
7. Amendments to this Privacy Policy
We reserve the right to amend this Privacy Policy in order to adapt it to changed legal requirements or to changes in the services offered on this website. The version published on this website at the time of your visit shall apply.