1. Controller / Verantwortlicher
Earth Resilience Institute GmbH
Leopoldstraße 31
80802 München
Germany
Email: info [at] Earth-Resilience-Institute.de
Represented by its Managing Directors.
2. General information
We take the protection of personal data seriously.
Personal data is processed on this website only where necessary to operate the website, communicate with visitors, or fulfil legal obligations.
The processing of personal data is carried out in accordance with the General Data Protection Regulation (GDPR / DSGVO) and applicable German data protection law.
3. Hosting
This website is hosted by:
Infomaniak Network SA
Switzerland
When you access this website, technical information may be processed automatically. This may include, in particular:
- IP address
- date and time of access
- requested page or file
- browser type and version
- operating system
- referring website
- technical error information
This information is processed in order to provide the website securely and reliably and to detect technical problems or misuse.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and technically reliable operation of the website.
4. Contact
If you contact us by email or through our contact form (see section 4.2), we process the information you provide in order to respond to your enquiry.
Depending on the nature of the enquiry, the legal basis is Art. 6(1)(b) GDPR where communication relates to a contract or pre-contractual measures, or Art. 6(1)(f) GDPR for other enquiries.
We retain correspondence only for as long as necessary for the respective purpose and applicable legal retention obligations.
4.1 Contact via WhatsApp
You can contact us via WhatsApp. WhatsApp is operated by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a company of Meta Platforms. No data is transmitted to WhatsApp when you visit our website; data is only processed once you click a WhatsApp link and send us a message.
When you contact us via WhatsApp, WhatsApp processes your phone number, profile information and message metadata. Message content is end-to-end encrypted. WhatsApp may transfer data to Meta Platforms, Inc. in the United States, which is certified under the EU-U.S. Data Privacy Framework.
We process your message in order to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures, and Art. 6(1)(f) GDPR otherwise; our legitimate interest is to offer a simple way to get in touch. Use of WhatsApp is voluntary – you can also contact us by email. Further information: WhatsApp Privacy Policy.
4.2 Contact form (Do It Better Initiative)
The Do It Better Initiative is a bottom-up initiative; the Earth Resilience Institute is the legal entity behind the initiative and the controller for this processing (see section 1). On the initiative’s page, we provide a contact form for questions, comments and suggestions for translators. When you submit the form, we process your name, your email address and your message. In addition, the technical data described in section 3 are processed when the form is sent.
The form content is sent by email to the Earth Resilience Institute and to a member of the initiative’s volunteer coordination team. The coordination team acts on behalf of the Earth Resilience Institute and processes the data exclusively for the purpose of answering your request and organising the workshops. Form submissions are not stored in the website database.
The email address of the coordination team member is hosted by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may therefore also be processed on servers of Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, on the basis of which the European Commission has recognised an adequate level of data protection (Art. 45 GDPR).
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR, which you give by ticking the checkbox in the form. You can withdraw your consent at any time with effect for the future by sending an email to the address given in section 1. The lawfulness of processing carried out before the withdrawal remains unaffected.
We delete your data as soon as it is no longer required for processing your request and for the Do It Better guideline process, unless statutory retention obligations apply. Providing your data is voluntary; without name, email address and message we cannot process your request.
5. Cookies and similar technologies
At present, this website does not intentionally use non-essential tracking or marketing technologies.
Technically necessary cookies or similar technologies may be used where they are required for the operation, security or functionality of the website.
Embedded third-party content (such as YouTube videos) is only loaded with your consent; see section 6.1. If we introduce analytics, marketing or other technologies requiring consent in the future, this privacy policy will be updated accordingly.
6. External services and embedded content
This website contains links to external websites. When you follow such a link, data may be processed by the respective provider. The privacy policies of those providers apply.
6.1 YouTube videos
We embed videos from YouTube on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
We use YouTube’s extended privacy mode (youtube-nocookie.com). In addition, videos are only loaded after you click on the video placeholder (“two-click solution”). Before you click, no data is transmitted to YouTube.
Once you click to load the video, a connection to Google’s servers is established. In the process, the following data in particular may be transmitted to Google: your IP address, the address of the page you are visiting, browser and device information, and the date and time of access. When you play the video, YouTube may store cookies or similar technologies on your device and process further usage data. If you are logged into a Google account, YouTube can associate this information with your account.
Google may also process data on servers in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, on the basis of which the European Commission has recognised an adequate level of data protection (Art. 45 GDPR).
The legal basis for loading the video is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG, which you give by clicking on the video placeholder. You can withdraw your consent at any time with effect for the future by not loading the video again and deleting cookies in your browser.
Further information on data processing by YouTube and Google can be found in Google’s privacy policy: https://policies.google.com/privacy
7. Your rights
Under the GDPR, you may have the right to:
- obtain information about personal data processed about you;
- request correction of inaccurate data;
- request deletion of personal data;
- request restriction of processing;
- receive certain personal data in a portable format;
- object to processing based on legitimate interests; and
- withdraw consent at any time where processing is based on consent.
You also have the right to lodge a complaint with a competent data protection supervisory authority.
8. Data security
We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access or alteration.
The website is transmitted using encrypted HTTPS connections where supported.
9. Changes to this Privacy Policy
We may update this Privacy Policy where our website, services or legal requirements change.
Last updated: September 2026