Privacy Policy
We take the protection of your personal data very seriously. This Privacy Notice explains how we process personal data when you visit our website, in compliance with the General Data Protection Regulation (GDPR) and the requirements of German data protection authorities.
1. Controller
The controller responsible for data processing on this website is:
CiFAR – Civil Forum for Asset Recovery e.V.
Gubener Str. 29
10243 Berlin
info@cifar.eu
2. Consent Management
We use a consent management platform to obtain and manage your consent for data processing activities.
When you visit our website, you will be asked to choose whether you accept or reject analytics tracking. Web analytics will only be activated after you have provided your explicit consent.
Your preferences are documented and stored to ensure compliance with legal obligations (Art. 6(1)(c) GDPR).
You can change or withdraw your consent at any time via the banner.
3. Web Analytics with Matomo Cloud
We use Matomo Cloud, a web analytics service provided by InnoCraft Ltd., to analyze the use of our website.
Matomo is configured in a privacy-friendly, cookieless mode, meaning:
No tracking cookies are stored on your device
No cross-site tracking takes place
No persistent user profiles are created
Analytics tracking is only carried out after you have given your consent via the consent banner.
4. Scope of Data Processing
In this context, the following data may be processed:
Anonymized IP address (shortened before processing)
Date and time of access
Pages visited and interaction data
Referrer URL
Browser type and version
Operating system and device type
This data is processed in a way that does not directly identify you as an individual.
5. Purposes of Processing
We process the above data for the following purposes:
Statistical analysis of website usage
Improvement of our website and services
Ensuring the security and stability of our website
Documentation of user consent preferences
6. Legal Basis
In accordance with the guidance of German supervisory authorities, the processing of analytics data is based on:
Consent (Art. 6(1)(a) GDPR) – analytics tracking is only activated after you provide consent via the consent banner
The storage of your consent preferences is based on:
Art. 6(1)(c) GDPR
7. Data Processing by Service Providers
Matomo Cloud is operated by InnoCraft Ltd. as a processor on our behalf in accordance with Art. 28 GDPR.
8. Transfers to Third Countries
According to the provider, data is processed within the European Economic Area (EEA). If transfers to third countries occur in individual cases, these are carried out in compliance with GDPR requirements (e.g., based on adequacy decisions or appropriate safeguards).
9. Data Retention
The data collected is stored only for as long as necessary for the purposes described above and is then deleted or anonymized.
Consent records are stored for the duration required to demonstrate compliance with legal obligations.
10. Your Rights
Under the GDPR, you have the following rights:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to withdraw consent at any time (Art. 7(3) GDPR)
Right to object (Art. 21 GDPR)
11. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority, in particular in your place of residence or in Berlin.
The competent supervisory authority in Berlin is:
Berlin Commissioner for Data Protection and Freedom of Information
12. Data Protection Officer
Jackson Oldfield
joldfield@cifar.eu
13. Updates to This Privacy Notice
We reserve the right to update this Privacy Notice to reflect changes in legal requirements or our data processing practices. The current version is always available on our website.