How we process your data

We place great importance on protecting your privacy and strive to gain your trust in terms of data protection. It is important to us to inform you clearly and understandably why and for how long we store your data. This allows you to independently determine the purposes for which your data is used by us. With this privacy policy, we want to inform you about the collection of your personal data when using our website and the associated services.

1. General

1.1 Processing of Personal DataAccording to Art.

4 of the EU General Data Protection Regulation (GDPR), "personal data" refers to all information that indicates a specific or identifiable natural person, such as name, place of residence, or email addresses.

1.2 Responsible Entity

The responsible entity for data processing according to Art. 4 (7) GDPR in Germany is:

Sunflower Care E.V

Czeminskistraße 10

10829 Berlin


1.3 Rights of Data Subjects

As a data subject in the context of data processing, you have the following rights regarding your personal data according to legal requirements:

  • Right to access
  • Right to restriction
  • Right to object to data processing
  • Right to data portability

Furthermore, you can complain to a competent data protection authority about our processing of your data. To exercise your rights, we may require proof of your identity.‍

1.4 Disclosure to Authorities

If legally required, we may be obliged to disclose information about you, especially if competent authorities or law enforcement services lawfully demand it from us (according to Art. 6 (1) c) GDPR).

2. Users of Our Website

2.1 Categories of Personal Data and Purposes of Processing

During your visit to our website, we automatically collect the following personal data from you:
Time of page access;

  • Your IP address in a form that does not allow clear identification;
  • The source of your visit, e.g., the previous website or the advertising medium that led you to us;
  • Achievement of certain website goals, such as sending a contact request;
  • Your activities on the page, such as mouse clicks, scrolling, and time spent;
  • Your rough location, i.e., country and city;
  • Selected cookies (more information below);
  • Technical details such as the name and version of your browser, your internet service provider, the device you use, and the screen resolution.

We may also ask you to enter additional data, such as your name or email address, on our page to offer you specific services. You are not obligated to provide this data, but without it, you may not be able to use all website functions.

2.2 Purpose and Legal Basis of Data Processing

The processing of your data is based on the legal requirements of Art 6 Paragraph 1 lit a (consent), and/or lit b (necessary for contractual purposes) and/or lit f (protection of legitimate interests of the data controller) of the GDPR. Your data is processed for the following reasons:
For the preparation and implementation of contractual agreements according to Article 6 Paragraph 1 lit b GDPR.
Legitimate interest according to Article 6 Paragraph 1 lit f GDPR, which lies in the optimization of our website for user-friendliness and in the need to protect it against potential threats.
Consent according to Article 6 Paragraph 1 lit a GDPR: If your consent to the processing of your data is given, this is done exclusively for the purposes defined in the consent and within the agreed framework. Given consent can be revoked at any time for future processes.
The described personal data is always processed in accordance with the provisions of the GDPR and only as far as necessary. If the data processing is based on Article 6 Paragraph 1 lit f GDPR, the stated reasons represent our legitimate interests at the same time. The processing of log data serves the purpose of statistically analyzing our website and improving its quality.

2.3 Transfer of Your Personal Data

If data is transferred to companies in the USA, we would like to point out that these companies do not operate according to the EU GDPR. It is possible that such companies do not meet the same data protection requirements as European companies. By consenting to the transfer of data, the user accepts that in case of a GDPR violation by such a company, they may have limited legal recourse, as these companies operate under a different legal system. We use, among others, external providers such as Google Analytics to improve the user experience on our website.

For purely informational use of our website, we only collect the personal data that your browser sends to our server. If it serves the stated purposes, we transfer the collected data to corresponding internal departments or to external IT service providers, including Google Analytics, to process them according to the necessary requirements (e.g., website presentation and content creation).

2.4 Data Deletion and Storage Duration

We store your data as long as it is necessary to provide our services to you or as long as we have a legitimate interest in further storage. Longer storage occurs only to the extent necessary to investigate detected attacks on our website and only until the end of relevant limitation periods, legal retention periods, or any legal disputes in which the data are needed as evidence. After that, the data will be deleted.

3. Collection and Processing of Personal Data

3.1 Contacting Us

When communicating and/or collaborating with us, e.g., via email, through a contact form on our website, the data you provide (email address, possibly your name and phone number, or the personal data within the communication) are stored by us to, for example, answer your questions or to comply with communication necessary for our business purposes. The data arising in this context are deleted again after the storage is no longer necessary, unless legal retention obligations exist or limitation periods must be observed. In processing the data that arise during communication, we have a legitimate interest in processing the data according to legal requirements, for internal review, or according to the respective communication concern.

3.2 Cookies (General)

So-called cookies are used on our website. A cookie is a small file that can be stored on your computer when you visit a website. In general, cookies are used to offer users additional functions on a website. They can, for example, be used to make navigation on a website easier and possible. Cookies cannot access other data on your computer, read them, or change them.

Some of the cookies we use are deleted after the end of the browser session, i.e., after closing your browser (so-called session cookies).

Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information in an individual scope, such as browser and location data and IP address values. Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie.

If you want to control cookies on your computer, you can select your browser settings so that you get a notification when a website wants to save cookies. You can also block or delete cookies if they have already been saved on your computer. If you want to know more about how to take these steps, please use the "Help" function in your browser. Please note that blocking or deleting cookies can affect your online experience and prevent you from using this website to its full extent.¡

3.3 Social Media Plug-ins

We use social media plug-ins to recommend content from social networks to users, such as Facebook, Instagram, LinkedIn, Twitter, Xing. For this purpose, we use a two-stage procedure. Data is only transmitted to third parties when users click on one of the icons displayed in the social media bar. We have no influence or access to cookies set by Facebook, Instagram, or LinkedIn.

3.4 Google Tag Manager

We use the Google Tag Manager on our pages. The Google Tag Manager is an application that allows us to deploy small code elements (tags) on our pages based on custom rules. Such tags can be used, for example, to measure visitor behavior (Google Analytics). The Tag Manager itself does not write cookies and does not collect personal data but can deploy tags that collect such data. The basis for the cookie consent tool offered on our pages is the use of the Google Tag Manager, which interprets the settings made by visitors and then deploys tags on the page or not.

3.5 Google Analytics

Our website uses features of the web analytics service Google Analytics, provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA ("Google"). Google Analytics uses cookies to help us analyze how you use this website. The information generated by such a cookie about your use of this website (including your IP address and the URLs of the accessed web pages and the attributes of the webpage) is transmitted to and stored by Google servers in the USA.

The data obtained is used to optimize our website and advertising measures. Our website uses the IP anonymization feature offered by Google Analytics. Therefore, your IP address is shortened/anonymized by Google as soon as Google receives your IP address. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activities, and to provide other services related to website and internet use to us. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent Google Analytics from collecting your data on this website using our "Cookie Management Tool" (link "Cookie Settings" at the bottom of the page) (an opt-out cookie is set that prevents the future collection of your data when visiting this website). Further information about Google's terms of use and Google's privacy policy:

3.6 Google Signals

Furthermore, we use the Signals function in Google Analytics. Google Signals enables an advanced analysis of the user behavior of visitors who have visited our pages with their logged-in Google account, among other things, and have consented to personalized advertising in their Google account. These are, for example, analyses of cross-device usage of our pages (summary of several end devices), the possibility of cross-device remarketing for logged-in Google users, and the storage of sociodemographic data (such as age group, geographical data, etc.) in the Google Analytics database.

3.7 Google Optimize

With Google Optimize, we use another tool of the Google Marketing Platform on our websites. Google Optimize allows us to increase the interaction rate of our visitors by playing out different test variants of our websites, including optimizing usability. Such tests are either A/B tests or multivariate tests. If Google Optimize is used on the website, cookies are used, which enable the optimization and analysis of the behavior of visitors to our website. It should be noted that some of our partner companies or the services we use are based in countries outside the European Union. Data transfer to these countries takes place in compliance with legal requirements. However, users should be aware that data protection standards in other countries may not provide the same protection as in the EU. We strive to work only with companies that offer a comparable level of data protection, but cannot assume liability for their actions.

3.8 Google Ads & Conversion tracking

We use Google AdWords Conversion Tracking to measure the success of our advertising campaigns. After certain goals are achieved on our website ("conversions") - such as submitting the contact form - this achievement is recorded by Google. Google can thus measure the number of goal achievements. In addition, Google will assign, based on previously set cookies, which advertisements were clicked on before and thus were decisive for the goal achievement. In this case, Google Ads sets a cookie on your computer if you have reached our websites via a Google ad. These cookies usually lose their validity after 30 days and are not used for personal identification. If users visit certain pages of the website of Google Ads customers and the cookie has not yet expired, Google and the customers can recognize that the user clicked on the ad and was redirected to that page. Each Google Ads customer receives a different cookie. Google processes this data on servers in the USA, but will not link it to personal data from your Google account. If you do not want to participate in the tracking process, you can also refuse the required setting of a cookie – for example via browser settings that generally deactivate the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain "". Google's privacy policy for conversion tracking can be found here.

3.9 Google Remarketing

We use the remarketing or "Similar Audiences" function from Google. This allows us to display personalized advertising to you on suitable advertising spaces on other websites. For this purpose, Google stores a small file with a number sequence in the browsers of users of the website. This number records the visits to the website as well as anonymized data on the use of the website. No personal data of the website users is stored. If you subsequently visit another website in the Google Display Network, you will see advertisements that are likely to consider previously accessed product and information areas. According to Google, the data collected in the context of remarketing is not merged with your personal data. In particular, Google uses pseudonymization for remarketing. This function is activated only after you have consented to the use of cookies on our site. You can control the setting via our "Cookie Management Tool" (link "Cookie settings" at the bottom of the page). Alternatively, you can deactivate the use of cookies by third parties by calling up the deactivation page of the Network Advertising Initiative (Network Advertising Initiative) at and implementing the further information there on opting out.

Further information on Google Remarketing and Google's privacy policy can be viewed at:

3.10. Facebook


When you visit our Facebook page, personal data (documentation of user behavior) is processed using cookies by Facebook. From this information, anonymized, statistical data about page activity is automatically created and provided to us (Insights). According to Article 26 GDPR, we are jointly responsible with Facebook for this data processing. We base this on our legitimate interests. Without processing this data, it would not be possible for us to maintain and optimize our presence on Facebook. More information can be found on the Facebook information page.


Plug-ins from Facebook used by us store personal data of visitors to our website according to Facebook's data usage policies. This also applies to users who are not logged in or are not members of Facebook. More information can be found in Facebook's privacy policy.


We also use the "Pixel" from Facebook on our websites. This allows the behavior of users to be tracked after they have clicked on an advertisement on Facebook. This evaluates ads for statistical and market research purposes and optimizes future advertising campaigns. Another benefit is to recognize whether and which interactions on the website (e.g., download) were carried out (see Event Tracking). This function also serves to present interest-based advertisements („Facebook-Ads“) to visitors of this website during their visit to the social network Facebook (see Custom Audiences). For this purpose, Facebook Pixel has been implemented on our website. When visiting the website, a direct connection to the Facebook servers is established. This transmits to the Facebook server that you have visited this website and Facebook assigns this information to your personal Facebook user account. We are not provided with any personal data. At the same time, the data is also stored and processed by Facebook itself, so that a connection to the respective Facebook user profile is possible for Facebook. Facebook may use this data for its own advertising purposes, according to the Facebook data usage policy. The consent to this lies within the domain of Facebook and is beyond our control. More information on the collection and use of data by Facebook, as well as your related rights and options for protecting your privacy, can be found in Facebook's privacy notices.


Our websites use Event Tracking in addition to the integration of the Facebook Pixel. An event is a specific action that a visitor on our website performs, such as a contact request or a newsletter subscription. This helps us better measure the achievement of our online campaigns and assess how successful an online campaign ultimately was. More can be found here.


Our website uses the remarketing function "Custom Audiences" from Facebook, where the Facebook Pixel integrated on our websites recognizes registered visitors, along with information on which of our pages the visit took place. These visitors can then be targeted with advertising.

3.11 Newsletter

We use the services of rapidmail for sending newsletters. The provider is rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany. To subscribe to the newsletter offered on our website, you can register via our form. We use the so-called double-opt-in procedure. First, a confirmation email is sent to your specified email address, asking for confirmation. The registration only becomes effective when you click the activation link in the confirmation email. We use your data transmitted to us exclusively for sending the newsletter, which may contain information or offers.

We use rapidmail to send our newsletter. Therefore, your data is transmitted to rapidmail GmbH. It is prohibited for rapidmail GmbH to use your data for purposes other than sending the newsletter. A transfer or sale of your data is not permitted by rapidmail GmbH. rapidmail is a German, certified newsletter software provider, which has been carefully selected according to the requirements of the GDPR.

We also use the rapid Services "recipient statistics". This makes it possible to draw conclusions about the effectiveness of the sent newsletters (when and by which recipients the messages were opened, clicked, or declared as spam (abused)). By registering for the newsletter, you agree to the use of recipient statistics.

You can revoke your consent to the storage of data and its use for newsletter dispatch at any time, e.g., via the unsubscribe link in the newsletter.

4. International Data Transfer

Manche der oben genannten Empfänger können sich außerhalb Deutschlands bzw. der EU befinden oder verarbeiten dort Ihre personenbezogenen Daten. Das Datenschutzniveau in anderen Ländern entspricht unter Umständen nicht dem Österreichs. Wir übermitteln Ihre personenbezogenen Daten jedoch nur in Länder, für welche die EU-Kommission entschieden hat, dass sie über ein angemessenes Datenschutzniveau verfügen oder wir setzen Maßnahmen, um zu gewährleisten, dass alle Empfänger ein angemessenes Datenschutzniveau haben.

5. Revocation, Changes, Corrections, and Updates

According to the law, you have various rights regarding your personal data:

  1. You can check what data we have about you and request a copy of it.
  2. If data is incorrect or not processed correctly, you can request a correction, addition, or deletion.
  3. You can ask us to restrict the use of your data.
  4. In some cases, you can object to the use of your data or withdraw your previous consent. However, this does not change the legality of the processing up to that point.
  5. You can request that your data be transferred.
  6. You want to know to whom we have passed on your data.
  7. If you have concerns, you can complain to the data protection authority.

6. Our Contact Details

f you have questions or concerns about the processing of your personal data, please contact us. You can reach us at the following contact details:

Sunflower Care E.V

Czeminskistraße 10

10829 Berlin


7. Update of the Privacy Policy

We reserve the right to make changes to this Privacy Policy at any time. The Privacy Policy is regularly updated, and all changes are automatically published.

Since 24 February 2022, we have been dedicated to assisting people in accessing safety and providing them with the necessary further support.

Apply for Volunteer