Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website.
Personal data means any information that can be used to identify you personally.
Detailed information on data protection can be found in the full Privacy Policy listed below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator.
Contact details can be found in the section “Information About the Data Controller” below.

How do we collect your data?

Some data is collected when you provide it to us—e.g., by filling in a contact form.

Other data is automatically collected by our IT systems or after you consent when you visit the website. This includes primarily technical data (e.g., browser type, operating system, time of access).
These data are collected automatically once you enter the website.

What do we use your data for?

Some data is collected to ensure error-free operation of the website.
Other data may be used to analyze user behavior.

What rights do you have regarding your data?

You have the right to request information at any time—free of charge—about the origin, recipients, and purpose of your stored personal data.
You also have the right to request the correction or deletion of this data.
If you have consented to data processing, you may withdraw your consent at any time with future effect.
You also have the right to request the restriction of processing under certain circumstances.
Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time regarding these rights or any questions related to data protection.

Analytics Tools and Third-Party Tools

When visiting this website, your browsing behavior may be statistically evaluated. This happens primarily through analytics tools.

You can find detailed information about these tools in the Privacy Policy below.

2. Hosting

Mittwald

Our website is hosted by Mittwald.
Provider: Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp, Germany

Details can be found in Mittwald’s Privacy Policy:
https://www.mittwald.de/datenschutz

The use of Mittwald is based on Art. 6(1)(f) GDPR.
We have a legitimate interest in the most reliable presentation of our website possible.
If consent has been requested (e.g., for storing cookies or accessing device information), processing is based on Art. 6(1)(a) GDPR and § 25(1) TTDSG. Consent may be withdrawn at any time.

3. General Information and Mandatory Disclosures

Data Protection

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this Privacy Policy.

When you use this website, various personal data will be collected.
This Privacy Policy explains what data we collect, how we use it, and for what purposes.

Please note that data transmission over the Internet (e.g., email communication) can have security vulnerabilities. A complete protection of data from access by third parties is not possible.

Information About the Data Controller

The controller responsible for processing data on this website is:

Tutoro GbR
Mauergasse 19
65183 Wiesbaden
Germany
Phone: +49 611 17114226
Email: info@tutoro.org

The controller is the natural or legal person who decides, alone or jointly with others, on the purposes and means of processing personal data.

Storage Period

Unless a specific storage period is stated in this Privacy Policy, your personal data will remain with us until the purpose for the data processing no longer applies.
If you request deletion or withdraw your consent, your data will be deleted unless we have other legally permissible grounds for retaining it (e.g., tax or commercial retention requirements). In such cases, deletion occurs once those grounds no longer apply.

General Information on the Legal Bases of Processing

If you have consented to data processing, we process your data based on Art. 6(1)(a) GDPR or, if special categories of data are processed, Art. 9(2)(a) GDPR.
If you consent to transferring personal data to third countries, processing is based on Art. 49(1)(a) GDPR.
If you consent to cookies or device access, processing additionally follows § 25(1) TTDSG.

If processing is necessary for performance of a contract or for pre-contractual steps, it is based on Art. 6(1)(b) GDPR.

If processing is required for compliance with a legal obligation, the legal basis is Art. 6(1)(c) GDPR.

Processing may also be based on our legitimate interest under Art. 6(1)(f) GDPR.
More specific legal bases are detailed in the sections below.

Notice on Data Transfers to the U.S. and Other Third Countries

We use tools from companies located in the U.S. or other non–GDPR-compliant countries.
If these tools are active, your personal data may be transferred and processed abroad.

In such countries, an equivalent level of data protection cannot be guaranteed—for example, U.S. companies may be required to disclose data to security authorities with no ability for you to challenge this legally.

It is therefore possible that U.S. authorities (e.g., intelligence services) may process, analyze, and store your data indefinitely. We have no control over these processing activities.

Withdrawal of Your Consent

Many data processing operations require your explicit consent.
You may withdraw your consent at any time.
The legality of processing carried out prior to withdrawal remains unaffected.

Right to Object to Processing (Art. 21 GDPR)

If processing is based on Art. 6(1)(e) or (f) GDPR, you may object at any time on grounds relating to your particular situation.
This also applies to profiling based on these provisions.

If you object, we will stop processing your personal data unless we can demonstrate compelling legitimate grounds that override your interests or processing is required for the establishment, exercise, or defense of legal claims.

If your data is processed for direct marketing, you may object at any time.
If you do, your personal data will no longer be used for direct marketing purposes.

Right to Lodge a Complaint

In case of GDPR violations, you have the right to lodge a complaint with a supervisory authority in your country of residence, workplace, or place of the alleged violation.
This does not affect other administrative or judicial remedies.

Right to Data Portability

You have the right to receive data we process automatically based on your consent or a contract in a machine-readable format and to request transmission to another controller, where technically feasible.

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential information (e.g., inquiries or orders), this site uses SSL/TLS encryption.

You can recognize an encrypted connection when the browser address bar changes from “http://” to “https://” and a lock icon appears.
Encrypted data cannot be read by third parties.

Right to Access, Deletion, and Correction

Within legal requirements, you have the right to request information about your stored personal data, its origin and recipients, and the purpose of processing. You may also request correction or deletion of your data.

You may contact us at any time regarding these rights.

Right to Restrict Processing

You may request restriction of processing in the following cases:

• If you contest the accuracy of your data, we will restrict processing while verifying the claim.

• If processing is unlawful, you may request restriction instead of deletion.

• If we no longer need the data, but you need it for legal claims, you may request restriction.

• If you object under Art. 21(1) GDPR, processing is restricted until the balance of interests is determined.

If processing is restricted, the data may only be processed with your consent or for legal claims or public interest reasons.

4. Data Collection on This Website

Cookies

This website uses cookies—small text files stored on your device.
They are either session cookies (deleted automatically when you close the browser) or persistent cookies (remain until manually deleted).

Some cookies may be set by third-party providers.

Cookies serve various purposes:
Some are technically necessary; others analyze user behavior or display advertising.

Necessary cookies are stored based on Art. 6(1)(f) GDPR unless another legal basis applies.
If consent is requested for cookies or tracking technologies, processing is based on Art. 6(1)(a) GDPR and § 25(1) TTDSG.

You can configure your browser to:

• allow cookies only in specific cases,

• block cookies entirely, or

• delete cookies when closing the browser.

Disabling cookies may limit website functionality.

Real Cookie Banner

We use the consent tool “Real Cookie Banner” to manage cookies and similar technologies.
Details: https://devowl.io/de/rcb/datenverarbeitung/

Legal basis: Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR.
Providing data is not mandatory, but without it we cannot manage your consent settings.

Server Log Files

Our hosting provider automatically collects and stores server log files:

• Browser type and version

• Operating system

• Referrer URL

• Hostname of the accessing device

• Time of server request

• IP address

These data are not combined with other sources.
Processing is based on Art. 6(1)(f) GDPR—our legitimate interest in a technically error-free website.

Contact Form

If you contact us via contact form, we store the information provided (including contact details) for handling your inquiry and follow-up questions.
We do not share this data without your consent.

Legal bases:

• Art. 6(1)(b) GDPR (contractual/pre-contractual requests)

• Art. 6(1)(f) GDPR (legitimate interest in efficient communication)

• Art. 6(1)(a) GDPR (if consent is requested)

Data remain stored until you request deletion or the purpose no longer applies.

This website uses Sendinblue for operating the contact form.
Provider: Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

If you prefer not to use Sendinblue, please email us directly at info@tutoro.org.

Email, Phone, or Fax Requests

If you contact us by email, phone, or fax, your data will be processed for handling your inquiry.
We do not share this data without your consent.

The legal bases correspond to those for the contact form (see above).

5. Analytics Tools and Advertising

WP Statistics

This website uses WP Statistics to analyze visitor activity.
Provider: Veronalabs, ARENCO Tower, 27th Floor, Dubai Media City, Dubai, UAE
https://veronalabs.com

WP Statistics collects log files (IP address, referrer, browser, user origin) and interactions (clicks, views).

Data are stored solely on our own server.

Legal basis:

• Art. 6(1)(f) GDPR (legitimate interest in anonymized analytics)

• Art. 6(1)(a) GDPR and § 25(1) TTDSG when consent is required

6. Newsletter

Newsletter Data

To subscribe to the newsletter, we require your email address and confirmation that you own the address and agree to receive emails.

Processing is based on Art. 6(1)(a) GDPR (consent).

You may unsubscribe at any time via the link in the newsletter.

After unsubscribing, your email may be added to a blacklist solely to prevent future mailings (Art. 6(1)(f) GDPR).

7. Plugins and Tools

Font Awesome

This website uses Font Awesome for consistent display of fonts and icons.
Provider: Fonticons, Inc., 6 Porter Road Apartment 3R, Cambridge, MA, USA.

Your browser must connect to Font Awesome servers to load fonts, sharing your IP address.

Legal basis: Art. 6(1)(f) GDPR; if consented, Art. 6(1)(a) GDPR and § 25(1) TTDSG.

Privacy Policy: https://fontawesome.com/privacy

iThemes Security

We use iThemes Security to protect our website.
Provider: iThemes Media LLC, 1720 South Kelly Avenue, Edmond, OK 73013, USA.

iThemes collects IP addresses, login attempts, and log data.
It may share repeated attacker IPs with a U.S. database (“Network Brute Force Protection”).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in cybersecurity).

Source: https://www.e-recht24.de