Datenschutz.
Transparent und verständlich.

As of October 31, 2026

The protection of your personal data is important to us. Below, we provide information about what personal data is processed when you use our website www.emission-x.eco, for what purposes this is done, and what rights you have.

1. Data Controller

eMission-X gGmbH
Sauer Moor 4c
23845 Oering
Germany

Phone: +49 (0)171 275 00 26
Email: info@emission-x.eco
Website: www.emission-x.eco

Managing Directors with signing authority: Julian Regenstein and Till Mertens.

2. General Information on Data Processing

We process personal data in accordance with the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and the Telecommunications and Digital Services Data Protection Act (TDDDG).

Depending on the processing operation, we rely on your consent pursuant to Art. 6(1)(a) of the GDPR, the performance of a contract or precontractual measures pursuant to (b), legal obligations pursuant to (c), or legitimate interests pursuant to (f).

We process personal data only to the extent necessary for the respective purpose.

3. Hosting and Server Logs

Our WordPress website is hosted on Amazon Web Services (AWS Lightsail) server infrastructure in the Frankfurt am Main (eu-central-1) AWS region. The provider is Amazon Web Services EMEA SARL, Luxembourg.

When you visit our website, we may process, in particular, IP addresses, the date and time of access, requested pages and files, browser and device information, technical status messages, and, where applicable, referrer information.

This processing is necessary for the operation, error diagnosis, and security of the website. The legal basis is Article 6(1)(f) of the GDPR.

Even if the server is located in Germany, international data processing may occur in connection with support services or other contractually stipulated processes.

Additional information: AWS Privacy.

4. Cookies and Consent Management

We use Pressidium Cookie Consent to manage consent for cookies and similar technologies.

Technically necessary data storage may serve, in particular, to ensure the website’s functionality, to save your cookie preferences, to manage your shopping cart, and to ensure security.

The consent decision is stored via the cookie pressidium_cookie_consent . The intended retention period is six months.

To the extent that consent is required for cookies or similar technologies, their use is based on Section 25(1) of the TDDDG, and the associated processing of personal data is in accordance with Article 6(1)(a) of the GDPR. Section 25(2) of the TDDDG applies to technologies that are strictly necessary.

You can change your consent at any time via the cookie settings on our website or revoke it with future effect.

5. Contact Information and Contact Forms

When you contact us via email, phone, or a contact form, we process your information to handle your inquiry. This may include your name, email address, phone number, and the content of your message.

For forms, we use WPForms, among other tools.

The legal basis is Article 6(1)(b) of the GDPR, provided your request is related to a contract or precontractual measures; otherwise, it is Article 6(1)(f) of the GDPR.

The information will be deleted as soon as it is no longer needed and there are no legal retention requirements that prevent its deletion.

6. Online Store with WooCommerce

Our online store uses WooCommerce. When processing orders, we handle, in particular, names, contact and billing information, delivery addresses (if applicable), ordered products or services, order amounts, payment status, and transaction information.

Data is processed to fulfill your order in accordance with Article 6(1)(b) of the GDPR, as well as to comply with legal obligations in accordance with Article 6(1)(c) of the GDPR.

WooCommerce may use technically necessary session information for the shopping cart, checkout, and order processing. For customer accounts created voluntarily, the required account data is also processed.

7. Payment processing via PayPal and Stripe

We offer PayPal and Stripe for payments in our online store.

PayPal

If you select PayPal as your payment method, the payment will be processed through PayPal. For customers in the European Economic Area, PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg, is specifically responsible.

In particular, billing and contact information, payment amount, order details, technical transaction data, and other information required for payment may be processed.

For more information: PayPal Privacy Policy.

Stripe

We use Stripe for additional electronic payment options. Processing is carried out by the respective companies within the Stripe Group. Depending on the payment method, payment information, billing data, order amounts, and technical connection data may be processed.

Additional information: Stripe Privacy Policy.

The legal basis for the processing required for payment processing is Article 6(1)(b) of the GDPR. Statutory documentation and retention requirements are based on Article 6(1)(c) of the GDPR.

Payment service providers may also process data on their own responsibility, for example, to prevent fraud and to comply with legal obligations. Depending on the service provider, data may be transferred internationally.

8. Online donations via Twingle

For online donations, we use the donation form from twingle GmbH, Berlin, which is directly integrated into our website.

When the embedded form is accessed, a connection to twingle’s servers may be established. In the process, technical information—in particular, IP addresses and browser data—may be processed.

When a donation is made, the information necessary for processing the transaction is collected, including, in particular, name, contact information, donation amount, payment method, transaction details, and, if applicable, information needed to issue a donation receipt.

Depending on the payment method, other payment service providers may be involved. For bank transfers, we process the payment information provided by the financial institution for allocation and posting.

The legal basis, where applicable, is Article 6(1)(b), (c), or (f) of the GDPR.

In our twingle configuration, Google Analytics tracking, address data tracking, and optional twingle tracking are disabled.

Further information: twingle Privacy Policy.

9. Newsletters with MailPoet

For our newsletter, we use MailPoet with the MailPoet Sending Service from the Automattic group of companies.

When you register, we process your email address and, if applicable, any other information you voluntarily provide.

Registration is done via a double opt-in process. After you register, you will receive a confirmation email. Your registration will not take effect until you click the link in the email to confirm. To verify your consent, the time of registration and confirmation, as well as technical information such as your IP address, may be stored.

The shipping service processes the necessary recipient data and technical delivery information, including information used to identify undeliverable messages.

Optional open and click statistics are disabled on our site. We do not use these features to track individual reading behavior.

The legal basis for sending the newsletter is your consent pursuant to Article 6(1)(a) of the GDPR. You can unsubscribe at any time by clicking the unsubscribe link in the newsletter.

When using the shipping service, data may be processed internationally.

Additional information: Automattic Privacy Policy.

10. Interactive project maps with uMap and OpenStreetMap

To showcase our rewilding properties, we use interactive maps based on uMap and OpenStreetMap.

When displaying embedded maps, connections to external map and tile servers may be established. In particular, IP addresses as well as technical browser and device information may be processed.

The maps are used for geographic orientation and to illustrate our natural areas. To the extent that consent is legally required, processing is based on Article 6(1)(a) of the GDPR in conjunction with the relevant provisions of the TDDDG. In other cases, Article 6(1)(f) of the GDPR may apply.

Additional information: OpenStreetMap Privacy Policy.

11. Social Media and External Media

We link to our profiles on LinkedIn, Instagram, Facebook, and YouTube.

When you click on an external link, you will leave our website. The privacy policy of the respective platform operator applies to any subsequent data processing.

If external videos or other media are directly embedded, additional data transfers may occur. Where consent is required, we comply with the relevant legal requirements.

12. Website Security with Wordfence

We use Wordfence to ensure the technical security of our website.

This allows unauthorized access, automated attacks, and other security incidents to be detected and prevented. Among other things, IP addresses, access times, requested URLs, and security-related events can be processed.

The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in protecting our website and the data processed there.

Depending on the configuration, data may be transferred to the Wordfence provider’s infrastructure.

13. Caching and Data Backups

To optimize performance and ensure data backup, we use Redis Object Cache, WP Super Cache, and UpdraftPlus.

These systems are used to cache content and to back up and restore our website. Depending on the specific functions, cached data and backup copies may also contain personal information.

Where applicable, processing is carried out on the basis of Article 6(1)(f) of the GDPR to ensure the security, availability, and performance of the website.

14. Technical Email Delivery

We use WP Mail SMTP for the technical delivery of WordPress emails. This includes, for example, contact form messages, system emails, and transactional messages.

In this process, recipient addresses, message content, and technical delivery information may be processed by the configured email service provider.

The legal basis depends on the specific purpose and is derived in particular from Article 6(1)(b), (c), or (f) of the GDPR.

We send newsletters separately via the MailPoet Sending Service described in Section 9.

15. Job Applications and Volunteer Opportunities

If you are interested in a job or volunteer position with us, we will process the contact and application information you provide to handle your inquiry or to conduct a selection process.

The legal basis depends on the specific collaboration and the relevant labor and data protection regulations, in particular Article 6(1)(b) of the GDPR and, where applicable, Section 26 of the BDSG.

The data is deleted as soon as it is no longer needed and there are no legal requirements to retain it.

16. Recipients of Personal Data

We only disclose personal data to the extent necessary for a legitimate processing purpose.

Potential recipients include, in particular, hosting and IT service providers, security and maintenance service providers, email and newsletter service providers, payment service providers, banks, donation processing services, tax and accounting firms, and competent government authorities.

To the extent that service providers process personal data on our behalf, we comply with the requirements of Article 28 of the GDPR.

17. International Data Transfers

When using certain service providers, personal data may be processed outside the European Union or the European Economic Area.

Such transfers are made only in compliance with the requirements of Articles 44 et seq. of the GDPR. Depending on the recipient, adequacy decisions or appropriate safeguards—such as standard contractual clauses—may be particularly relevant.

18. Retention Period and Deletion

As a general rule, we store personal data only for as long as is necessary for the respective processing purpose or as required by statutory retention obligations.

For documents relevant to tax and commercial law, retention periods of six, eight, or ten years may apply, depending on the type of document.

Newsletter data is generally processed until the user unsubscribes or revokes consent. Additionally, required evidence of prior consent may be stored for the period required by law.

For contact inquiries, technical logs, security data, and data backups, the respective purpose-specific deletion and retention policies apply.

19. Your Rights

In accordance with applicable laws, you have the following rights in particular:

• Information pursuant to Article 15 of the GDPR
• Rectification pursuant to Article 16 of the GDPR
• Erasure pursuant to Art. 17 of the GDPR
• Restriction of processing pursuant to Art. 18 GDPR
• Data portability pursuant to Article 20 of the GDPR
• Objection pursuant to Article 21 of the GDPR

You may revoke your consent at any time with future effect. The lawfulness of the processing carried out prior to the revocation remains unaffected.

To exercise your rights, please contact us at info@emission-x.eco.

20. Right to File a Complaint

You have the right to file a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection laws.

The following person is specifically responsible for our office in Schleswig-Holstein:

Independent State Center for Data Protection Schleswig-Holstein (ULD)
Holstenstraße 98
24103 Kiel
www.datenschutzzentrum.de

21. SSL/TLS Encryption

Our website uses SSL/TLS encryption to secure the transmission of data between your browser and our web server.

You can recognize an encrypted connection, in particular, by the https:// ."

22. Updates to This Privacy Policy

We update this Privacy Policy when technical changes, new services, or legal requirements make it necessary.

You can find the current version at www.emission-x.eco/datenschutzerklaerung/.

eMission-X gGmbH
Two friends. One mission. More wilderness.