The controller for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

A Million and One Trees
Stockstraße 3a
Phone: +49 (07838) 766 4163
Email: info@amillionandonetrees.com

If you have any questions regarding the collection, processing, or use of your personal data, as well as the exercise of your rights, please contact us at the email address provided above.

We collect and process personal data that you voluntarily provide to us when registering for our courses, using our website, or contacting us. This includes in particular:

• First and last name
• Email address
• Phone number (optional)
• Information about your educational or professional background (within the scope of the courses)
• IP address and usage data (e.g., pages visited, time spent)

Processing is carried out for the following purposes:

• Provision and implementation of environmental education programs and online courses
• Communication with you in connection with the courses (e.g., confirmations, updates)
• Improvement of our offering and user experience
• Fulfillment of legal obligations (e.g., retention obligations)

The processing of your data is based on the following legal grounds:

• Consent pursuant to Art. 6(1)(a) GDPR (e.g., for sending newsletters)
• Contract fulfillment pursuant to Art. 6(1)(b) GDPR (e.g., for conducting the courses)
• Legal obligation pursuant to Art. 6(1)(c) GDPR (e.g., tax retention obligations)
• Legitimate interest pursuant to Art. 6(1)(f) GDPR (e.g., to improve our offering)

Our website uses cookies and similar technologies to analyze usage and improve user-friendliness. Cookies are small text files stored on your device.

We use the following types of cookies:

• Necessary cookies: These are required for the operation of the website (e.g., session cookies).
• Analytics cookies: These help us understand how visitors interact with the website (e.g., Google Analytics).

Data processing through analytics cookies only occurs with your prior consent (Art. 6(1)(a) GDPR). You can revoke your consent at any time with effect for the future.

Your personal data is only disclosed to third parties if this is necessary for contract fulfillment, you have consented, or we are legally obligated to do so. Possible recipients include:

• Service providers for hosting and IT operations (e.g., server operators)
• Payment service providers (for paid courses)
• Analytics services (e.g., Google Analytics, only with consent)

We do not disclose your data to third parties for advertising purposes.

We store your personal data only as long as necessary for the fulfillment of the purposes mentioned above or as required by legal retention obligations. Once the purpose ceases to exist or the legal retention periods expire, the data will be deleted.

As a data subject, you have the following rights under the GDPR:

• Right of access (Art. 15 GDPR): You can request information about the data we process.
• Right to rectification (Art. 16 GDPR): You can request the correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): You can request the deletion of your data, provided no legal retention obligations conflict.
• Right to restriction of processing (Art. 18 GDPR): You can request the restriction of processing.
• Right to data portability (Art. 20 GDPR): You can request the provision of your data in a machine-readable format.
• Right to object (Art. 21 GDPR): You can object to the processing of your data on grounds relating to your particular situation.
• Right to withdraw consent (Art. 7(3) GDPR): You can withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, please contact: info@amillionandonetrees.com

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for us is the data protection officer of the federal state in which our company is based.

We take appropriate technical and organizational measures to protect your data from loss, unauthorized access, and misuse. These include encryption of data transmission (SSL/TLS) and regular security checks.

We reserve the right to adapt this privacy policy as necessary to reflect changes in legal or technical circumstances. The current version is always available on this website.

Status: May 2025