Privacy policy

This is an English translation of the German privacy policy (“Datenschutzerklärung”). The German version is the original.

1. Controller

The controller responsible for processing personal data on this website is:

Willi Kühn-Dehmlow
c/o flexdienst – #22393
Kurt-Schumacher-Straße 74
67663 Kaiserslautern
Germany
Email: info@autismus-wissen.de

2. The essentials in brief

• When you read this website, it does not set any cookies itself and shows no advertising. Visitor statistics with Google Analytics run only if you expressly consent (section “Visitor statistics with Google Analytics”); we then store only your choice in your browser. The font comes from our own server. There are no public user accounts.
• When you simply open a page, your browser makes no connection to third-party servers, as long as you do not consent to visitor statistics.

• Opening a page generates technically necessary connection data (section “Hosting and connection data”). The hosting provider may keep access logs; we use its web statistics to evaluate aggregated visitor numbers from them.
• The newsletter is provided by our service provider Brevo. We load the sign-up form only when you click “Load newsletter form”. From that click, your browser connects to Brevo’s servers (section “Newsletter”). Loading the form is not yet a sign-up. Signing up and your consent to the newsletter are a separate, later step.
• If you want to support us voluntarily via Stripe or Wise, you leave this website only when you click the respective payment link. Until then, no data is transmitted to Stripe or Wise. The payment is processed on the respective provider’s pages (section “Links to other websites”).

• If you report an error or write to us via the contact form or by email, we process only what you tell us. The contact form stores nothing in the website’s database and sets no cookies (sections “Report an error” and “Contact form and email”).
• A mobile app has been announced but is not yet in operation. This website processes no data for it.

3. Hosting and connection data

The website is operated by ALL-INKL.COM – Neue Medien Münnich (owner: René Münnich), Hauptstraße 68, 02742 Friedersdorf, Germany. The hosting provider processes data on our behalf. A data processing agreement under Art. 28 GDPR is in place with the provider; we accepted it on 1 June 2026.

When you open a page, your browser transmits technically necessary connection data, mainly your IP address, date and time, the requested address and information about your browser. This data is needed briefly to deliver the page and to ensure secure operation. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). The connection is encrypted via HTTPS.

A web statistics tool (Webalizer) has been set up with the hosting provider for this website. It evaluates the hosting provider’s access logs, which may technically contain, among other things, the IP address, date and time, the address requested, browser information and the referring page. We see aggregated figures from this, such as visits and page views per day; the evaluation is accessible only to us behind a password. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a rough overview of the use and errors of the website). How long the hosting provider keeps the logs and the evaluation, and whether it shortens IP addresses, depends on the hosting provider’s settings and information; we have not set a retention period of our own and are looking into this. Independently of this, the hosting provider may briefly process technically necessary connection and security data, for example to defend against attacks. In addition, and only with your consent, we measure with Google Analytics (section “Visitor statistics with Google Analytics”).

4. Cookies, browser storage and language choice

When you read this website, it does not set any cookies itself. In your browser’s Local Storage we store only your choice about visitor statistics (entry “aw_statistik” with “ja” (yes) or “nein” (no) and the time; 180 days, after which we ask again). We treat this entry as technically necessary so that your decision is respected; it contains no identifier. We do not use Session Storage. If you consent to statistics, Google Analytics sets two cookies (section “Visitor statistics with Google Analytics”). This applies to the pages of this website. For third-party services that you deliberately open, their own rules apply: Brevo’s newsletter form (section “Newsletter”; we observed no cookies there in our tests) and links to other websites. The language of a page also depends only on the address (for example /en/ for English), not on a stored value.

For the administration area (editorial team), WordPress sets login cookies; visitors are not affected (section “Editorial access”).

5. Search

If you enter a search term, it is transmitted to our server as part of the address (…/?s=search term) to display the results. The website does not store search terms. They remain in your browser history. Please do not enter personal information in the search.

6. “Report an error” function

At the end of articles you can point out errors or outdated information. We store the page concerned, the type of report and your description (up to 2,000 characters). Providing an email address is voluntary; we use it only for questions about your report. We do not store any IP address, browser data or cookies. Protection against automated reports works without personal data (hidden field, signed timestamp, general rate limit). When the editorial team is notified of new reports by email, that email contains only a link to the report, not its content.

We delete a provided email address as soon as the report is closed. We delete the report itself 12 months after it is closed. Please do not write health data or other very personal information in the description.

The legal basis is Art. 6(1)(f) GDPR (interest in correct and up-to-date content); for a voluntarily provided email address, Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future, for example by email to info@autismus-wissen.de.

7. Contact form and email

You can write to us via the contact form on the “Contact” page or directly by email. In the form, the email address and the message are mandatory; the name is voluntary. The website does not store your details in its database, writes no IP address and no browser data to a form log and sets no cookies. It sends your details only as an email to info@autismus-wissen.de and then discards them. It does not send you a copy. To send the email, the website uses the mail service of the server it runs on (ALL-INKL.COM, see section “Hosting and connection data”); an email may be processed there briefly for technical delivery.

Spam protection works without third-party services and without personal data: a hidden field that only automated programs fill in, a signed timestamp and a general rate limit for all visitors combined.

We process your sender address, the content of your message and the time in order to handle and answer your request. The email arrives in the mailbox of info@autismus-wissen.de, which is operated through our hosting provider’s email service. The same applies if you write to us directly by email. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in answering enquiries); if your enquiry aims at a contract or its preparation, it is Art. 6(1)(b) GDPR. We delete your message as soon as your matter has been finally dealt with, unless statutory retention obligations apply. This is done by hand, not automatically. An email is not generally confidential in transit; please therefore do not send us health data or other very personal information unless necessary. If you nevertheless give us such information, we process it only to reply to you. Using the form is voluntary; you can also write to us by email without the form.

8. Newsletter

The newsletter is voluntary. It informs you by email about new and revised articles.

Loading the sign-up form (first step)

The sign-up form is provided not by this website but by our service provider Brevo. We load it only when you click “Load newsletter form”. Before that, your browser makes no connection to Brevo. You can also open the form via the link “Open form directly at Brevo”; the same applies then.

With the click, your browser connects to Brevo’s servers. In our tests, files were retrieved from the addresses sibforms.com, a subdomain of it and assets.brevo.com (form page, program file, styling, font). According to its contract documents, Brevo uses, among others, the service Cloudflare for delivery (see “Service provider, contract and third countries”). Brevo technically receives your IP address, information about your browser and device, the time and the address of our website. In our tests we observed no cookies and no browser storage by Brevo; we cannot rule out that this changes.

Loading the form is not yet a sign-up and not consent to the newsletter. If you do not want the connection to Brevo, do not load the form; you can then use all other content of the website without restriction.

The legal basis for this connection is your consent by clicking the button, after you have been informed in the notice about the connection to Brevo and the transmission of your IP address (Art. 6(1)(a) GDPR). You can withdraw it at any time: leave the page or reload it, and the form is no longer displayed and no further data is transmitted to Brevo. What was already transmitted when loading remains unaffected. We do not store that you loaded the form.

Sign-up and consent to the newsletter (second step)

When you sign up, you enter your email address in the form and tick a box with which you consent to receiving the newsletter. On our behalf, Brevo processes your email address, the time of sign-up and the confirmation details in order to send you a confirmation email (double opt-in) and then the newsletter. Only when you click the link in the confirmation email are you added to the mailing list. This website does not receive or store your email address.

Because the newsletter is about autism, your sign-up may reveal that you are interested in this topic; this can be an indication about health. We therefore use your email address exclusively for the newsletter, do not pass it on except to Brevo and treat it confidentially. You can do without signing up without any disadvantage; you can use all content of the website without the newsletter.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future: via the unsubscribe link in every newsletter email or by email to info@autismus-wissen.de. The lawfulness of the processing carried out until then remains unaffected. Signing up is voluntary; without signing up you receive no newsletter.

The emails are sent on behalf of Autismus Wissen from the address newsletter@autismus-wissen.de.

No personal performance measurement without your separate consent. Brevo is set so that opens and clicks are recorded only for contacts who have expressly and separately agreed to this (“tracking consent per contact”); contacts with unknown consent are not tracked. Signing up for the newsletter is not consent to this measurement. We currently do not ask for this consent. We therefore do not record on a personal level whether and when you open or click a newsletter email. According to Brevo staff, the tracking of links cannot be switched off completely in Brevo; links in the newsletter may therefore be routed through Brevo’s servers. In addition, Brevo may process technically necessary information about the delivery and security of the emails.

Service provider, contract and third countries

The service provider is Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. For the data of our newsletter contacts, Brevo acts as a processor; we are the controller. The basis is the data processing agreement under Art. 28 GDPR, which is part of Brevo’s terms of use (Annex 3, version of 1 October 2025).

Under the contract, Brevo uses sub-processors. For email sending and the forms, according to the list in the contract, these are in particular:
– OVH (hosting; France, servers in France) and Google Cloud Platform (hosting; servers in Belgium),
– Cloudflare (delivery and protection, “content delivery network and WAF”; USA, servers in the USA and the EU),
– Zendesk (customer support; USA) and Omni Dashboards (USA, servers in the EU),
– companies of the Brevo group: Brevo GmbH (Germany), Sendinblue SAS (France), Brevo CRM Solutions Limited (India) and Brevo Inc. (USA); group servers in France and Belgium.

Other services named (for example SMS sending or AI functions) apply only if they are used; we do not use them. Brevo announces new sub-processors in advance; we can terminate the contract if we object to them for data protection reasons.

Where data is processed outside the European Economic Area (for example by Cloudflare, Zendesk or group companies in the USA and India), Brevo uses, under the contract, EU standard contractual clauses with supplementary measures and, for the USA, as long as it applies, the adequacy decision on the EU-U.S. Data Privacy Framework (Art. 44 et seq. GDPR). You can obtain a copy or an extract of the safeguards on request from us or from Brevo.

Storage period, unsubscribing and deletion

We store your email address at Brevo for as long as you are subscribed. You can unsubscribe at any time via the unsubscribe link in every newsletter email; Brevo carries out the unsubscription automatically. According to Brevo’s description, the address is blocked in the process: it remains stored as a blocked contact so that you receive no further emails and we can prove your withdrawal; it is not deleted. If you want complete deletion, write to us; we will then delete the contact permanently in Brevo (this cannot be undone). We regularly keep the records of your consent and your unsubscription (for example the time of sign-up, confirmation and unsubscription and the IP address transmitted at sign-up) for three years to be able to prove that you consented and unsubscribed (Art. 7(1) and Art. 5(2) GDPR; our legitimate interest in defending against claims, Art. 6(1)(f) GDPR; the period is based on the regular limitation period of three years, sections 195 and 199 of the German Civil Code). The period begins at the end of the calendar year in which you unsubscribed or withdrew your consent. After that we delete the records and the blocked contact in Brevo. This is done by hand and checked by us at least once a year; we do not use automatic deletion. Until then your address remains stored as a blocked contact so that you receive no further emails; we do not add addresses to the mailing list without your own sign-up.

Under the contract, we, not Brevo, are responsible for the duration of storage at Brevo. At our request, Brevo deletes or anonymises all data no later than three months after our contract with Brevo ends.

You can obtain information, rectification and erasure regarding your data in the newsletter mailing list from us (section “Your rights”); we coordinate this with Brevo.

9. Visitor statistics with Google Analytics

If you allow it, we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). We want to understand how many people read our pages, which articles are in demand and where visits come from, in order to improve the website.

Only with your consent. On your first visit we ask you in a notice. “Allow statistics” and “Do not allow” are equal choices. As long as you do not consent, Google Analytics is not loaded, your browser makes no connection to Google for this purpose, and no statistics cookies are set. The pages work the same either way.

What happens after you consent. Your browser loads a script from Google (googletagmanager.com) and sets two cookies (“_ga” and “_ga_” with our measurement ID) that contain a random identifier (lifetime 180 days). Google technically receives your IP address, the page viewed, the time, information about your browser, device, language and approximate region, the previous page and the identifier from the cookie. According to Google, Google Analytics 4 does not store full IP addresses. We have switched off Google Signals (linking to Google accounts), the optional data-sharing settings and advertising features, and we do not use ad personalisation. We measure page views only, not individual clicks, and we do not build profiles of individual people. We see only aggregated figures.

Legal basis. Your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG for storing and reading information on your device). The pages you read may point to your interests and also to health-related topics. Insofar as health data may be affected, we expressly ask for your consent (Art. 9(2)(a) GDPR). You do not have to consent; you suffer no disadvantage if you do not.

Service provider and third countries. Google processes the data on our behalf (processing under Art. 28 GDPR); we accepted Google’s data processing terms on 20 October 2026. The data may be transferred to the USA and to other countries outside the EU. The bases are EU standard contractual clauses and, for as long as it applies and Google is certified under it, the adequacy decision on the EU-U.S. Data Privacy Framework (Art. 44 et seq. GDPR). You can obtain a copy of the safeguards on request.

Storage period. The cookies expire after 180 days. Google deletes event data and user data after 2 months; aggregated reports (figures without personal reference) remain. We store your choice (consent or refusal) in your browser for 180 days (section “Cookies, browser storage and language choice”); after that we ask you again.

Withdrawal. You can change your decision at any time: at the bottom of every page under “Statistics settings”. After you withdraw, nothing more is measured, and we delete the statistics cookies on this device. Withdrawal only takes effect for the future: data that has already reached Google by then is not deleted immediately but after the period stated above. Processing carried out until withdrawal remains lawful. If you would like us to have data relating to your device deleted at Google, write to us at info@autismus-wissen.de; for this we need the identifier from the “_ga” cookie.

Effect on the figures. Only visits with consent are counted. The figures therefore show trends, not the exact number of visitors.

10. Links to other websites

This website contains links to other providers, for example to Instagram (Autismus Wissen profile), to sources and to contact points. These are ordinary links: when our pages are opened, nothing is loaded from these providers and no connection is made. Only when you click a link do you leave this website; from then on the privacy policy of the respective provider applies. For Instagram, this is Meta Platforms Ireland Limited.

Voluntary support. If you want to support Autismus Wissen voluntarily, we forward you via a link to the payment page of Wise (wise.com). The contracting party for our Wise account is Wise Europe SA/NV, Rue du Trône 100/3, 1050 Brussels, Belgium (company number 0713.629.988). Simply visiting transmits no data to Wise: the link is an ordinary link, and the QR code is an image file from our own server. Only with the click do you leave this website; from then on the privacy policy of Wise applies.

Wise: data, purposes and storage. Which details you enter on Wise’s payment page is determined by Wise; Wise processes these entries according to its privacy policy. In our Wise account we see the details of a received payment that Wise displays to us there. We process them for the same purposes and on the same legal bases as for Stripe: (1) processing and, where applicable, refunding your voluntary payment, Art. 6(1)(b) GDPR; (2) documentation and compliance with statutory retention obligations, Art. 6(1)(c) GDPR in conjunction with section 147 of the German Fiscal Code (Abgabenordnung); (3) preventing and investigating misuse, Art. 6(1)(f) GDPR. We keep accounting records with payment details in principle for eight years (section 147 of the Fiscal Code); we store other data only as long as necessary for the respective purpose. How long Wise stores data is governed by Wise’s privacy policy. Wise may also process data outside the European Economic Area; as safeguards, Wise names in its privacy notices, among others, adequacy decisions and EU standard contractual clauses. You can direct questions about data protection at Wise to privacy@wise.com.

Payment via Stripe. For support by card and other payment methods, we forward you via a link to the payment page hosted by Stripe (buy.stripe.com). Support is voluntary. Simply visiting this website transmits no data to Stripe: the link is an ordinary link, and no connection to Stripe is established. Only with the click do you leave this website, and the payment is processed on Stripe’s page.

Stripe entities and roles. The contracting party for our Stripe account is, under Stripe’s services agreement for businesses in the European Economic Area, which includes Germany, Stripe Payments Europe, Limited (Ireland). For regulated financial services, such as processing certain payment methods, Stripe Technology Europe, Limited (Ireland) may additionally be involved under the contract terms. Depending on the activity, Stripe processes personal data as a controller and/or as a processor. The privacy policy of Stripe and Stripe’s contract terms are decisive.

Which data is processed. Which details you provide on the payment page depends on the chosen payment method. These may be contact details (for example your email address), payment data and transaction data (for example payment method, amount and time) as well as technical data such as the IP address. Stripe processes these entries according to its privacy policy. In our Stripe account, for a completed payment we see in particular email address, country, payment method, amount, payment ID, time of the transaction and fees. We receive these details only for payments processed through our Stripe account.

Purposes and legal bases. We process the data from a payment in order to (1) process your voluntary payment and, if necessary, refund it: the legal basis is Art. 6(1)(b) GDPR (payment agreement that you enter into with the payment); (2) document payments and comply with statutory recording and retention obligations: the legal basis is Art. 6(1)(c) GDPR in conjunction with section 147 of the German Fiscal Code; (3) prevent and investigate misuse and fraudulent payments: the legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure payment processing). Stripe additionally pursues its own purposes, such as fraud prevention and compliance with legal obligations, on its own legal bases; Stripe describes this in its privacy policy.

Storage period, third countries and rights. We keep accounting records with payment details in accordance with statutory requirements, in principle for eight years (section 147 of the Fiscal Code). We store other data, for example a message about a refund, only as long as necessary for the respective purpose. How long Stripe stores data is governed by Stripe’s privacy policy. Stripe may also process data outside the European Economic Area; as safeguards, Stripe names in its privacy policy, among others, the EU standard contractual clauses and the EU-U.S. Data Privacy Framework. You will find your rights against us in the section “Your rights”; for data that Stripe processes under its own responsibility, you can turn to Stripe (contact for Stripe’s data protection officer: dpo@stripe.com).

11. Editorial access

For editorial work there is access to the administration area. In doing so we process access data (user name, email address, password in encrypted form) and session data (among others time of login, IP address, browser information). WordPress sets technically necessary cookies that apply only to logged-in editorial team members. Visitors are not affected. The legal basis is Art. 6(1)(f) GDPR (security and operation of the administration area).

12. Recipients and third countries at a glance

• Hosting provider: ALL-INKL.COM – Neue Medien Münnich, Friedersdorf (processor).
• Email service for info@autismus-wissen.de, also for messages from the contact form (processor).
• Newsletter service provider: Brevo GmbH, Berlin (processor) with the sub-processors named in the section “Service provider, contract and third countries”, also in the USA and India, safeguarded by EU standard contractual clauses and the EU-U.S. Data Privacy Framework.
• Google Analytics (only with your consent): Google Ireland Limited, Dublin, Ireland (processor); data may also be transferred to Google LLC and other group companies in the USA and other countries (section “Visitor statistics with Google Analytics”).
• Payment service providers for voluntary support (only if you click the respective payment link): Stripe Payments Europe, Limited (Ireland) and Wise Europe SA/NV (Belgium). You enter the payment data yourself on the providers’ pages; this website transmits no data to them in the process. The providers’ roles and the details are set out in the section “Links to other websites”.

• Beyond the recipients named, there are no further recipients for the functions described.
• From this website, data is transferred to third countries only in connection with the newsletter service provider (section “Service provider, contract and third countries”) and, if you consent to visitor statistics, Google Analytics (section “Visitor statistics with Google Analytics”). If you pay voluntarily, the payment service providers may, according to their own information, also process data outside the European Economic Area; they name the safeguards in their privacy policies (section “Links to other websites”).

13. Obligation to provide data, automated decisions

You do not have to provide any information to visit the website. “Report an error”, contact form, email and newsletter are voluntary. There is no automated decision-making, including profiling.

14. Your rights

You have the right against us to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). Write to info@autismus-wissen.de for this.

Right to object (Art. 21 GDPR): You can object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR.

15. Complaint to a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, place of work or the place of the alleged infringement.

16. Changes

We adapt this policy when the website or the legal situation changes.

Last updated: 20 October 2026