Privacy policy

Data protection

The operator of these pages takes the protection of your data serious. We treat your data confidentially and according to the statutory data protection regulations as well as this privacy policy.

It is generally possible to use our websites without providing personal data. If personal data (e.g., name, address or email addresses) are collected on our sites, it is, as far as possible, on a voluntary basis. These data will not be disclosed to third parties without your explicit consent.

Please note that data transmission over the Internet (for example, when communicating via email) may have security vulnerabilities. Complete protection of data from access by third parties is not possible.

Contact form

If you send us inquiries via the contact form, we will store your details from the inquiry form, including the contact details you provided there, for processing the request and in case of follow-up questions. We will not share this information without your consent. We handle the data entered into the contact form exclusively from your approval (Section 6(1) letter a GDPR). You can revoke your consent at any time. An open message by email suffices to withdraw your consent. The legality of the data processing operations carried out until the revocation remains unaffected by the repeal. Data submitted via the contact form will be stored with us until you ask us to delete it, revoke your consent to storage or there is no longer any need for data storage. Legal provisions, in particular, retention periods, remain unaffected.

Whistleblower protection system

Within the framework of the whistleblower protection system, apart from an anonymous case number and the date and time of the report, the data entered there is processed, including information on the facts of the case and any persons named, as well as information on the person of the whistleblower, such as first name, surname, contact data or, if desired, the voice recording. The reporting procedure can be completely anonymous.

Recipients of the data:
The data will only be forwarded to the legal department and, if necessary, to those persons who require it for follow-up measures. Otherwise, the data will only be passed on to other persons with your consent. This does not include the forwarding of data due to legal requirements.

The hintcatcher system is provided by product kitchen GmbH as a processor. An order processing contract has been concluded with the order processor.

The purpose of the data processing is to receive information and data about suspected cases of possible breaches of rules, in particular about white-collar crime and corruption.

The legal basis for the processing is the Whistleblower Protection Directive of the European Union ((EU) 2019 / 1937, (EU) 2020 / 1503).

The data is retained for the duration of the investigation and assessment of the tips made. After completion of the investigation, the data will be automatically deleted after 6 months. In the case of legal proceedings, may be kept until the conclusion of the proceedings / expiry of the time limits for appeal.


Our websites make partial use of so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies are used to make our offer more user-friendly, practical, and secure. Cookies are small text files that are stored on your computer and stored by your browser.

Most of the cookies we use are so-called “session cookies.” They are deleted automatically after your visit. Other cookies remain stored on your device until you remove them. These cookies allow us to recognize your browser the next time you visit.

You can set your browser so that you are informed about cookies and allow cookies only in individual cases, restrict or deactivate the transmission of cookies, and enable the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of these websites.

Server log data

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us; this includes:

    Browser type and browser version

    Operating system used

    Referrer URL

    Hostname of the accessing computer

    Time of the server request

    IP address

These data cannot be assigned to specific persons. These data will not be merged with other data sources. We process data based on Section 6(1) letter b GDPR. We reserve the right to check this data retrospectively if we become aware of specific evidence of illegal use.

Registering on our websites

To use specific features, you can register on some of our sites. The transmitted data serve exclusively to make use of the particular offer or service. All mandatory information requested during registration must be provided in full. Otherwise, the registration can be rejected.

In the event of significant changes, e.g., for technical reasons, we will inform you by email. The email will be sent to the address you provided when registering.

The processing of the data entered during registration is based on your consent (Section 6(1) letter a GDPR). You may revoke your consent at any time. For this, it is sufficient to send an informal message by email. The legality of the already completed data processing remains unaffected by the revocation.

We use the email address provided at registration to inform you of significant changes, e.g., in the event of technically necessary changes or changes to the scope of the offer.

We store the data collected during registration for the period that you are registered on our website. Your data will be deleted should you cancel your registration. Legal retention periods remain unaffected.

Mandatory information according to Article 13 GDPR (General Data Protection Regulation):

In the event of initial contact, we are obligated pursuant to Art. 12, 13 GDPR to provide you with the following mandatory information:

If you contact us by e-mail, your personal data will only be processed by us if there is a legitimate interest in the processing (Art. 6 (1) (f) GDPR), you have consented to the data processing (Art. 6 (1) (a) GDPR), the processing is necessary for the initiation, establishment, content or amendment of a legal relationship between you and us (Art. 6 (1) (b) GDPR) or another legal norm permits the processing. Your personal data will remain stored by us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions, in particular retention periods under german tax and german commercial law, remain unaffected.

SSL encryption

This site uses SSL encryption for security reasons and to protect the transmission of sensitive content, such as the requests you send to us as the site operator. You can recognize an encrypted connection by the address line of the browser changing from “http: //” to “https: //,” and the lock symbol in your browser line.

If SSL encryption is enabled, the data you submit to us cannot be read by third parties.

Web analysis

Some of our websites make use of the open-source web analysis service Matomo (or its predecessor Piwik).

Matomo uses “cookies,” small text files that your web browser stores on your device and that allow analysis of website usage. Information about the use of our website is generated using cookies and stored on our servers. Your IP address is anonymized before storage.

Cookies from Matomo remain on your device until you delete them.

Matomo cookies are set based on Section 6(1) letter f GDPR. As the operator of this website, we have a legitimate interest in the anonymous analysis of user behavior to optimize our site.

No information stored in the Matomo cookie about the use of this website is transferred. You can prevent your web browser from setting cookies. However, some features of our sites may be restricted.

In this case, you can deactivate the storage and use of your data. Your browser sets an opt-out cookie that prevents the storage of Matomo usage data. If you delete your cookies, the Matomo opt-out cookie will also be removed. When you revisit our website, you will, therefore, need to set the opt-out cookie again to prevent the storage and use of your data.

Data protection officer

DITF has appointed a data protection officer. Email:


Right to information, deletion, blocking and appeal

You have the right to free information about your stored personal data, their origin and recipient and the purpose of the data processing at any time, and the right to have this data corrected, blocked or deleted. For further information on personal data, you can contact us at any time at the address provided in the imprint.

As the person affected in the event of a breach of data protection law, you have a right of appeal to the competent supervisory authority. The responsible supervisory body about data protection matters is the state data protection officer of the state of Baden-Württemberg (


Revocation of your consent to data processing

Some data processing operations may only be implemented with your express consent. Revoking your permission at any time is possible. An informal email message to this effect is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the repeal.