Privacy Policy
We take the protection of your personal data very seriously. This Privacy Notice explains how we process personal data when you visit our website, in compliance with the General Data Protection Regulation (GDPR) and the requirements of German data protection authorities.
1. Controller
The controller responsible for data processing on this website is:
CiFAR – Civil Forum for Asset Recovery e.V.
Köpenicker Str. 147
10997 Berlin, Germany
2. Consent Management
We use a consent management platform to obtain and manage your consent for data processing activities.
When you visit our website, you will be asked to choose whether you accept or reject analytics tracking. Google Analytics will only be activated for analytics purposes after you have provided your consent.
Your consent decision is documented and stored to enable us to demonstrate compliance with our legal obligations.
The storage of consent records is based on Art. 6(1)(c) GDPR where necessary to comply with our legal obligations. Where applicable, the processing of consent information may also be based on our legitimate interest in documenting and managing consent in accordance with applicable data protection law.
You can change or withdraw your consent at any time using the consent management settings provided on our website. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
3. Web Analytics
We use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited and, where applicable, Google LLC and other Google entities involved in providing the service.
Google Analytics enables us to analyze how visitors use our website and to obtain statistical information about website traffic and user interactions.
Google Analytics may use cookies, device-related identifiers and similar technologies to distinguish users or sessions and to measure interactions with our website. Analytics data may include information about the device and browser used, how users navigate the website, and interactions with individual pages or features.
Google Analytics is only used for analytics purposes on our website after you have provided the corresponding consent.
We configure Google Analytics to limit the collection and use of data to what is necessary for our stated analytics purposes. In particular, we do not intentionally send directly identifying information such as names, email addresses or other similar personal identifiers to Google Analytics. Google also prohibits customers from sending such personally identifiable information to Analytics.
4. Scope of Data Processing
In this context, the following data may be processed:
Date and time of access
Pages and content viewed
Interactions and events on the website
Referrer URL and information about how you arrived at our website
Browser type and version
Operating system
Device type and technical information
Approximate geographic information, such as country, region or city
Information relating to sessions and website usage
IP addresses are not logged or stored in Google Analytics in the European Economic Area, Switzerland and the United Kingdom. IP-derived information may nevertheless be used to derive approximate location information before the IP address is discarded.
We do not use Google Analytics to collect directly identifying information such as names, email addresses, telephone numbers or similar information.
5. Purposes of Processing
We process the above data for the following purposes:
Statistical analysis of website usage
Improvement of our website and services
Ensuring the security and stability of our website
Documentation of user consent preferences
6. Legal Basis
The processing of analytics data through Google Analytics is based on your consent pursuant to Art. 6(1)(a) GDPR.
Analytics tracking is only activated after you have provided the relevant consent through our consent management platform.
You may withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
The documentation and storage of consent records is based on Art. 6(1)(c) GDPR, insofar as this is necessary to demonstrate compliance with applicable legal obligations.
7. Data Processing by Service Providers
Google Analytics is operated by Google Ireland Limited as a processor on our behalf in accordance with Art. 28 GDPR.
8. Transfers to Third Countries
The provider is an international company and may involve the processing of data outside the European Economic Area (EEA). The provider states that it uses various legal mechanisms for international data transfers, including adequacy decisions and the EU-U.S. Data Privacy Framework where applicable. Google LLC and relevant U.S. subsidiaries have certified compliance with the EU-U.S. Data Privacy Framework.
According to the provider, data is processed within the European Economic Area (EEA). If transfers to third countries occur in individual cases, these are carried out in compliance with GDPR requirements (e.g., based on adequacy decisions or appropriate safeguards).
9. Data Retention
The data collected is stored only for as long as necessary for the purposes described above and is then deleted or anonymized.
Consent records are stored for the duration required to demonstrate compliance with legal obligations.
10. Your Rights
Under the GDPR, you have the following rights, subject to the applicable legal requirements and limitations:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to withdraw consent at any time (Art. 7(3) GDPR)
Right to object (Art. 21 GDPR)
You may also contact us directly to exercise your data protection rights.
11. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority, in particular in your place of residence or in Berlin.
The competent supervisory authority in Berlin is:
Berlin Commissioner for Data Protection and Freedom of Information
12. Data Protection Officer
Jackson Oldfield
joldfield@cifar.eu
13. Updates to This Privacy Notice
We reserve the right to update this Privacy Notice to reflect changes in legal requirements or our data processing practices. The current version is always available on our website.