Legal Notice & Privacy Policy

Legal Notice, Privacy Policy & Terms of Use

Adaptation Exchange
Operated by DSR partners GmbH

Last updated: 30 September 2026

This page covers the Adaptation Exchange website (www.adaptation-exchange.org) and the Corporate Adaptation Toolbox (toolbox.adaptation-exchange.org). Both are operated by DSR partners GmbH, Viersen, Germany. English is the binding version; a German version is available on request.

LEGAL NOTICE (IMPRINT)

Information pursuant to Section 5 of the German Digital Services Act (Digitale-Dienste-Gesetz, DDG)

Operator of www.adaptation-exchange.org and toolbox.adaptation-exchange.org:

DSR partners GmbH
Albertstr. 1
41751 Viersen
Germany

Managing Director: Daniel Schmitz-Remberg

E-mail: info@adaptation-exchange.org
Website of the operator: www.dsr-partners.com

Commercial register:
Local Court (Amtsgericht) Mönchengladbach, HRB 22237

VAT identification number pursuant to Section 27a German VAT Act (UStG):
DE366591315

D-U-N-S number: 344878661

Responsible for editorial content pursuant to Section 18(2) German State Media Treaty (MStV):
Daniel Schmitz-Remberg
Albertstr. 1
41751 Viersen
Germany

The Adaptation Exchange is an initiative of DSR partners GmbH. It is not a separate legal entity. All contracts, obligations and data processing described on this page are those of DSR partners GmbH.

DISCLAIMER

Liability for content

The content of the website and the Toolbox has been created with the greatest possible care. We do not guarantee the accuracy, completeness or timeliness of the information provided.

As a service provider we are responsible for our own content under general law. Under Articles 4 to 6 of the EU Digital Services Act (Regulation (EU) 2022/2065) we are not obliged to monitor transmitted or stored third-party information or to investigate circumstances indicating unlawful activity. On becoming aware of a legal violation we will remove the content concerned without delay.

Liability for external links

The website and the Toolbox contain links to third-party websites, including the websites of solution providers listed in the Adaptation Stack. We have no influence over their content and assume no liability for it. The respective provider is responsible for the content of linked pages. At the time of linking no legal violations were apparent.

All content and works on the website and in the Toolbox, including the assessment questionnaire, the business case methodology, the Adaptation Stack taxonomy and all texts, graphics and reports generated by the tools, are subject to German copyright law. Reproduction, editing, distribution or commercial use beyond the limits of copyright law requires the prior written consent of DSR partners GmbH. Reports and PDF exports generated by the Toolbox may be used by the generating organisation for its own internal purposes.

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

DSR partners GmbH
Albertstr. 1
41751 Viersen
Germany

Managing Director: Daniel Schmitz-Remberg
E-mail: info@adaptation-exchange.org

We have not appointed a data protection officer, as we are not required to do so.

Hosting of the website (www.adaptation-exchange.org)

The website is hosted by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel. Wix provides the technical infrastructure and processes personal data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Israel is recognised by the European Commission as providing an adequate level of data protection.

Hosting of the Toolbox (toolbox.adaptation-exchange.org)

The Corporate Adaptation Toolbox is built and hosted on the Lovable platform (Lovable Labs Incorporated, Stockholm, Sweden) and delivered through the content delivery network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Application data of the Toolbox are stored in a Lovable Cloud database hosted in the European Union. Both providers process data on our behalf under Art. 28 GDPR. Where data are transferred to the USA, this is based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.

Access data (server log files)

When you visit the website or the Toolbox, technical access data are processed automatically: IP address, date and time of access, browser type and version, operating system, pages accessed, referrer URL and the data volume transferred. This processing is necessary to deliver the pages and to ensure stability and security, including protection against attacks.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

Log files are deleted after 30 days at the latest, unless they are needed to investigate a security incident.

Contact form and e-mail

If you contact us via the website form or by e-mail, we process the data you provide: name, e-mail address, company (if provided) and the content of your message. The data are used exclusively to respond to your inquiry and to assess potential cooperation.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual communication) and Art. 6(1)(f) GDPR (legitimate interest in answering inquiries).

Data are stored as long as necessary to process your request or to follow up on potential cooperation, and deleted after two years at the latest unless a contract results.

Newsletter

If you subscribe to our newsletter, we process your e-mail address and name (if provided). Subscription is based on your explicit consent and uses a double opt-in procedure.

Legal basis: Art. 6(1)(a) GDPR (consent).

You may withdraw your consent at any time via the unsubscribe link in each newsletter or by e-mail. Newsletters are distributed via the integrated e-mail tools of Wix as part of data processing on our behalf. Open and click rates are measured to evaluate the newsletter; you can object to this measurement by unsubscribing.

Cookies and similar technologies

The website uses essential cookies required for technical functionality and security; Wix provides a consent management tool for any consent-based cookies.

The Toolbox uses only technically necessary cookies and local browser storage: a session cookie of the content delivery network for security and load management, and, for signed-in members, a session token to keep you logged in. The Toolbox additionally uses the built-in usage telemetry of the Lovable platform, which records page views, technical events and error reports in pseudonymised form so that we can monitor stability and usage of the tools; it involves no cross-site tracking and no advertising. The Toolbox does not use tracking or advertising cookies.

Legal basis: Art. 6(1)(f) GDPR and Section 25(2) TDDDG for technically necessary storage; Art. 6(1)(a) GDPR and Section 25(1) TDDDG for consent-based cookies on the website.

You may adjust cookie settings via the consent banner or your browser settings.

The Toolbox at toolbox.adaptation-exchange.org provides three tools: the Climate Resilience Maturity Assessment, the Business Case tool and the Adaptation Stack. This section describes what happens to the data you enter.

Use without an account

All three tools can be used without registration. Answers to the Assessment, figures entered in the Business Case tool and categories selected in the Adaptation Stack are processed in your browser and on our servers only to calculate and display your result during the session. Apart from the technical telemetry described under Cookies, they are not stored by us unless you sign in and choose to save them. When you close the browser tab, the data are discarded.

Legal basis: Art. 6(1)(b) GDPR (provision of the service you requested).

Member accounts

To save results, export PDFs, share a result or invite colleagues, you sign in with your work e-mail address. When you register, we process your e-mail address, your name (if provided), your organisation (derived from your e-mail domain or entered by you), the date of registration and technical login data (time of login, IP address). Authentication is handled by the Lovable Cloud authentication service on our behalf.

Legal basis: Art. 6(1)(b) GDPR (user agreement for the Toolbox).

Purpose: providing you with a personal workspace, assigning you to your organisation's workspace and securing the account.

Saved results

If you save a result as a signed-in member, we store the content you entered: your Assessment answers and the resulting maturity profile, the financial figures you entered in the Business Case tool (such as revenue, EBIT, CapEx, insurance premiums and your payback expectation) and the resulting investment case, and the solution categories you selected in the Adaptation Stack. These data are linked to your account and, where applicable, to your organisation's workspace. The financial figures relate to your organisation, not to you personally; they are treated as confidential business information.

Legal basis: Art. 6(1)(b) GDPR.

Purpose: allowing you to return to, refine and compare your results over time.

Organisation workspaces and sharing

Members of the same organisation, identified by the same e-mail domain, may see results that a colleague has explicitly shared into the organisation's workspace. Results are private to you until you share them.

If you invite a colleague by entering their work e-mail address, we process that address only to send a single invitation e-mail on your behalf; the address is not stored by us once the e-mail has been sent. By entering a colleague's address you confirm that you are entitled to do so within your organisation.

Legal basis: Art. 6(1)(b) GDPR for the inviting member and Art. 6(1)(f) GDPR (legitimate interest in enabling collaboration within your organisation) for the invited person.

PDF export and reports

PDF reports are generated on request and delivered to your browser. We do not retain a copy of the generated PDF beyond the data already saved to your account.

Aggregated and anonymised use

We may use saved results in aggregated and anonymised form, with no reference to any person or organisation, to improve the tools, to calibrate benchmarks and to report on the state of corporate climate adaptation, for example how many organisations reach a given maturity level. Individual results are never published, shared with third parties or attributed to an organisation without its written consent.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in developing the tools); anonymised data are no longer personal data.

Transactional e-mails

We send you e-mails that are necessary for the service: registration confirmation, login links, invitations you triggered, and notices about material changes to the Toolbox or these terms. They are sent through the e-mail service of the Lovable platform on our behalf. These are not marketing e-mails and cannot be unsubscribed from while the account exists. Marketing e-mails are sent only if you subscribe to the newsletter separately.

Processors and recipients

Your data are processed by the following service providers on our behalf. No data are sold or passed to third parties for their own purposes.

Wix.com Ltd. – Hosting of the website, contact form, newsletter – Israel – EU adequacy decision

Lovable Labs Incorporated – Application platform, authentication, database, usage telemetry and transactional e-mails of the Toolbox (Lovable Cloud) – Sweden (EU), database in EU region – Art. 28 GDPR data processing agreement

Cloudflare, Inc. – Content delivery network, TLS termination, DDoS protection for the Toolbox – USA, with EU edge locations – EU-US Data Privacy Framework, Standard Contractual Clauses

Retention

Account data and saved results are stored for as long as your account exists. You can delete individual saved results at any time in the Toolbox. If you delete your account, or if an account has not been used for 24 months, the account and all saved results are deleted within 30 days, unless statutory retention obligations apply. Server log files are deleted after 30 days at the latest. Invitation e-mail addresses are not retained.

Security

All data are transmitted with TLS encryption (HTTPS with HSTS). Access to the database is restricted to the operator and the processors named above. Login is passwordless: members sign in with a one-time link sent to their work e-mail address, so no passwords are stored.

No automated decision-making

The results of the tools are calculated from your inputs according to a published methodology. They do not involve automated decision-making with legal or similarly significant effects on you within the meaning of Art. 22 GDPR.

YOUR RIGHTS

Under the GDPR you have the right to access your personal data (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future.

To exercise these rights, e-mail info@adaptation-exchange.org. Signed-in members can view, export and delete their saved results and delete their account directly in the Toolbox.

You also have the right to lodge a complaint with a supervisory authority. The competent authority for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, LDI NRW), Kavalleriestr. 2-4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

1. Scope

These Terms of Use govern the use of the website www.adaptation-exchange.org and of the Corporate Adaptation Toolbox at toolbox.adaptation-exchange.org (together "the Services"), provided by DSR partners GmbH ("we"). By using the Services you accept these terms. The Services are directed at companies, public bodies and other organisations and their staff, not at consumers.

2. Free use and member accounts

The Services are free of charge. The three tools of the Toolbox can be used without registration. Saving, exporting, sharing and inviting colleagues require a member account, which is opened by signing in with a work e-mail address. You are responsible for keeping your login secure and for all activity under your account. We may close accounts that violate these terms or that have been unused for 24 months.

Membership of the Adaptation Exchange as a network, including working groups and events, is governed by separate written agreements and is not created by opening a Toolbox account.

3. Nature of the results

The results of the Assessment, the Business Case tool and the Adaptation Stack are indicative outputs for internal discussion. They are calculated from your own inputs using a general methodology developed with the working groups of the Adaptation Exchange. They do not constitute investment, financial, legal, engineering, insurance or other professional advice, replace no site-level climate risk analysis and no project appraisal, and must not be relied on as the sole basis for a decision.

The Adaptation Stack is a catalogue for orientation; listing a solution or provider is not a recommendation, and we do not verify providers' claims.

4. Your inputs

You keep all rights to the data you enter. You grant us the right to process and store them as described in the Privacy Policy, and to use them in aggregated and anonymised form to improve the tools and to report on corporate climate adaptation. You confirm that you are entitled to enter the data, in particular financial figures of your organisation and e-mail addresses of colleagues, and that no confidentiality obligation towards third parties is breached by doing so.

5. Intellectual property

The Services, including the questionnaire, the methodologies, the Adaptation Stack taxonomy, texts, graphics and software, are protected by copyright and remain the property of DSR partners GmbH or its licensors. You may use reports and exports generated with the tools for the internal purposes of your organisation, including sharing them with your management, advisors and auditors. Any other reproduction, distribution, commercial use, reverse engineering or systematic extraction of content requires our prior written consent.

6. Acceptable use

You may not use the Services to enter unlawful, infringing or harmful content, to attempt unauthorised access to accounts, data or systems, to overload or disrupt the Services, or to invite persons who are not members of your organisation. Automated access (scraping, bots) is not permitted without our written consent.

7. Availability and changes

We provide the Services as they are and as available. We do not guarantee uninterrupted availability and may modify, suspend or discontinue the Services or individual tools at any time. We will give members reasonable notice by e-mail before discontinuing the possibility to access saved results.

8. Liability

We are liable without limitation for intent and gross negligence, for injury to life, body or health, and under the German Product Liability Act. For slight negligence we are liable only for breach of essential contractual obligations, and then limited to the foreseeable damage typical for this kind of free service. Any further liability, in particular for decisions taken on the basis of the results, for loss of data or for indirect and consequential damage, is excluded.

9. Data protection

The processing of personal data is described in the Privacy Policy above, which forms part of these terms.

10. Changes to these terms

We may amend these terms with effect for the future. Members will be informed of material changes by e-mail at least 30 days before they take effect; continued use after that date constitutes acceptance.

11. Governing law and venue

German law applies, excluding the UN Convention on Contracts for the International Sale of Goods. If you are a merchant, a legal entity under public law or a special fund under public law, the exclusive place of jurisdiction is Mönchengladbach, Germany. Should any provision of these terms be invalid, the remaining provisions remain unaffected.

EU ONLINE DISPUTE RESOLUTION

The European Commission provides a platform for online dispute resolution (ODR):
https://ec.europa.eu/consumers/odr/

We are neither obliged nor willing to participate in dispute resolution proceedings before a consumer arbitration board.