Privacy Policy
1. At a glance
What happens to your data on this website?
When you visit this website, various personal data may be processed. Personal data means any information relating to an identified or identifiable natural person. Below you will find a clear overview; detailed information follows in the sections of this policy.
Who is responsible?
The controller for data processing on this website is the association named below (“we”/“us”).
What data do we collect and why?
Some data are collected automatically for technical provision and security (e.g., server logs). Other data you provide yourself (e.g., via contact forms). Certain third-party content (e.g., embedded audio) may process data only after your consent.
Your rights
You have the right to access, rectification, erasure, restriction, data portability, to object to certain processing, and to withdraw consent with effect for the future. You also have the right to lodge a complaint with a supervisory authority (see below).

2. Controller
Rhizom Institut für Interkulturelle Kommunikation Berlin e.V. (RIIK Berlin)
c/o Melih Sengölge
Erkelenzdamm 49
10999 Berlin, Germany
E-mail: info@riikberlin.com
Represented by the Executive Board (§ 26 BGB):
Chair: Melih Sengölge
Deputy Chair: Pinar Sengölge
General Secretary: Süleyman Utku Yanbay
(Note: We have not appointed a Data Protection Officer, as—based on our assessment—the legal requirements for mandatory appointment are not met.)

3. Hosting
Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. We have concluded a data processing agreement under Art. 28 GDPR. Hosting is based on our legitimate interest in the secure, fast, and efficient provision of our online offer (Art. 6(1)(f) GDPR) and, where applicable, for contract performance with members/interested parties (Art. 6(1)(b) GDPR).
Server log files
The host automatically collects and stores information in server log files that your browser transmits (e.g., IP address—shortened where possible, date/time, referrer URL, browser type/version, operating system). Processing is based on Art. 6(1)(f) GDPR for technical provision and security. Log data are regularly deleted automatically.

4. Legal bases, retention, necessity
Unless a more specific basis is stated, we process personal data on Art. 6(1)(b) GDPR (contract/pre-contract), Art. 6(1)(f) GDPR (legitimate interests, especially security/IT operation), or Art. 6(1)(a) GDPR (consent, e.g., to load external media).
Personal data are erased when the purpose ceases and no statutory retention obligations apply. Providing data is generally not legally required; however, certain technical data are required to visit/use the site.

5. Cookies & consent (GDPR / § 25 TTDSG)
We use cookies and similar technologies. Technically necessary cookies are required for operation and rely on Art. 6(1)(f) GDPR. Non-essential cookies (e.g., from third-party embeds) are used only with your consent (Art. 6(1)(a) GDPR in conjunction with § 25 TTDSG). You can grant/withdraw consent at any time via our cookie settings. Disabling cookies may limit functionality.

6. Analytics
We currently do not use web analytics tools such as Google Analytics or Matomo. If this changes, we will update this policy and obtain your consent beforehand.

7. Contacting us (WPForms, e-mail)
When you contact us via WPForms or e-mail, we process your details (e.g., name, e-mail address, message) to handle your request and any follow-up.
Legal basis: Art. 6(1)(b) GDPR (contract/pre-contract) or Art. 6(1)(f) GDPR (our interest in effective communication), or—where requested—your consent (Art. 6(1)(a) GDPR).
Retention: We keep messages until your request is fully handled and no legal retention duties apply. WPForms stores submissions in WordPress; administrative e-mails may include copies.

8. External content / plugins and tools
8.1 Spotify embeds
We embed audio content from Spotify (Spotify AB/Spotify Ltd.). When you open a page with a Spotify embed, a connection to Spotify’s servers may be established; your IP address and device/browser data can be transmitted. Transfers to third countries (including the USA) may occur.
Legal basis: Your consent (Art. 6(1)(a) GDPR / § 25 TTDSG). Without consent, Spotify content will not load.
8.2 Smart Slider (Nextend)
We use Smart Slider for sliders. Smart Slider itself does not set tracking cookies for advertising/analytics. If a slider contains embedded videos from YouTube/Vimeo, those providers may set cookies and process data (potentially in the USA). We use privacy-enhanced options (e.g., youtube-nocookie) where available, and such content loads only after your consent.
8.3 WordPress core, themes & Kubio
Operating the site with WordPress and the Kubio builder may set strictly necessary cookies (e.g., for display/session). Legal basis: Art. 6(1)(f) GDPR (technical operation).

9. International transfers
For external content (e.g., Spotify; YouTube/Vimeo if used), data may be transferred to countries outside the EU/EEA (notably the USA). Such transfers occur only with your explicit consent (Art. 49(1)(a) GDPR) or on the basis of appropriate safeguards (e.g., Standard Contractual Clauses) offered by the provider. Please consult the providers’ privacy information for details.

10. Security – SSL/TLS
This site uses SSL/TLS encryption. You can recognize an encrypted connection by “https://” and the lock icon in your browser. With encryption active, data you transmit cannot be read by third parties.

11. Your rights
You have the rights to access, rectification, erasure, restriction, data portability, and to object to processing based on Art. 6(1)(e) or (f) GDPR. You may withdraw consent at any time with future effect. To exercise your rights, simply contact us at the details provided above.
Right to lodge a complaint
You may lodge a complaint with a data protection authority. For Berlin:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin, Germany
Tel.: +49 30 13889-0 — E-mail: mailbox@datenschutz-berlin.de

12. Updates to this policy
We will amend this Privacy Policy when our website, services, or legal requirements change.
Last updated: 08 September 2025