1. Controller
The person responsible for processing personal data on this website is:
Iris Meschke
Hannah-Arendt-Schule Flensburg
Friesische Lücke 17
24937 Flensburg
Germany
Phone: +49 (0)152 55787227
Email: iris.meschke2@schule-sh.de / iris.meschke@online.de
2. Website provision and technical support
When you visit the website, connection data needed to deliver it is processed. This includes your IP address, the time and destination of the request, and information transmitted by your browser. Server logs may also contain status codes and the referring page. This serves to deliver the website, diagnose errors and protect against misuse.
Technical support is provided by Capt'n Capture GmbH, Toosbüystr. 5, 24939 Flensburg, Germany. It holds the contract with the hosting service Hostinger. Authorised personnel may have access to technical logs, stored content and backups as part of this support.
Article 6(1)(f) GDPR may provide the legal basis for secure operation. The legitimate interest is the reliable provision and protection of this information website.
3. Contact
If you contact us by email or telephone, we process the contact details and information you provide to handle and respond to your enquiry. For general project enquiries, this serves our legitimate interest in communication under Article 6(1)(f) GDPR.
The information is deleted once the enquiry has been resolved and no further substantive or legal reason for retention remains. Please only provide information necessary for your enquiry.
4. Sessions and website functions
The website uses Grav as its content management system. Grav currently sets a cookie with the name prefix grav-site- even when public pages are viewed. It contains a session identifier and has a lifetime of 30 minutes, which may be renewed on subsequent requests. On the HTTPS website it is set with Secure, HttpOnly and SameSite=Lax attributes. HttpOnly prevents JavaScript access; Secure restricts transmission to HTTPS. Sessions are used for functions including login and administration. Where storage or access is strictly necessary for a service explicitly requested, Section 25(2)(2) TDDDG applies; Article 6(1)(f) GDPR applies to subsequent processing of personal data.
The gallery, scroll progress indicator and testimonial slider run within the website itself. Their own code does not set cookies or store data in Local Storage or Session Storage. No additional analytics or advertising tracking services are embedded in the website code reviewed.
5. YouTube video
The video is only loaded when you select the labelled consent button. Before that, this video player does not establish a connection to YouTube. The embed uses the domain youtube-nocookie.com.
After you consent, Google receives your IP address and browser and device information, among other data. Further processing, association with a signed-in Google account, and storage or access to information on your device are possible. The embed domain does not prevent all processing by Google. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; processing in other countries, including the USA, is possible.
The basis for voluntarily loading the video is your consent under Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG. You can remove the player using “Disable video / withdraw consent”. This does not affect the lawfulness of processing before withdrawal. Removing the player does not automatically delete data already transmitted to Google or information stored there or in your browser. The website remembers your consent only until you leave or reload the page.
Information about Google’s processing and retention is available in Google’s privacy policy. For international transfers, Google cites adequacy decisions, including the EU-US Data Privacy Framework for covered transfers to certified Google LLC. Where no adequacy decision applies, Google states that it uses standard contractual clauses as necessary. Details and information on obtaining a copy of these safeguards are available in Google’s information about international data transfers.
6. External fonts from Adobe Fonts
The website currently loads fonts through Adobe Fonts. A connection to Adobe is established as soon as the page is opened; consent for the video does not control this connection. To deliver fonts, Adobe receives your IP address and information about the website and font project, among other data. According to Adobe, it does not set cookies solely to deliver fonts and does not store the IP address received for that purpose.
Further information: Adobe Fonts privacy information.
7. Published images, accounts and feedback
The website presents exhibition content, photographs and feedback. Where people are recognisable or information can be linked to them, this constitutes personal data. Published content is accessible to website visitors and may be redistributed.
8. Your rights
Subject to the applicable legal requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent at any time with effect for the future.
Where processing is based on legitimate interests, you may object on grounds relating to your particular situation.
Please contact the controller named above. You may also lodge a complaint with a data protection supervisory authority, particularly in your place of residence, place of work or the place of the alleged infringement. In Schleswig-Holstein, you can contact the Independent Centre for Data Protection Schleswig-Holstein.
Automated decision-making, including profiling, by the website operator is not intended for this website. Using the embedded video and contacting us are voluntary; without the necessary technical connection data, the website cannot be delivered.
9. Last updated
2 October 2026.