Thank you for visiting our website. The protection of your data is of particular concern to us. We will only ever use your data within the limits of the Federal Data Protection Act and the General Data Protection Regulation. If you access another website via a link, please use the information on data protection provided there. We have no influence on the data protection practices of other website operators.

Unless otherwise stated in detail, our service providers and partners mentioned here process your personal data transmitted when using our website in third countries either on the basis of an adequacy decision of the EU Commission pursuant to Art. 45 GDPR (see ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_de) or on the basis of an order processing contract using the EU standard contractual clauses pursuant to Art. 46 II lit. c) and d) GDPR; the provider has undertaken to comply with EU data protection standards in this contract.

 

Responsible for the processing of your personal data is

Society for Threatened Peoples (GfbV)
P.O. Box 2024, 37010 Göttingen, Germany
Telephone: +49 (0)551 499 06 0
Fax: +49 (0)551 580 28
E-mail: info@gfbv.de
Register court: Göttingen local court
Register number: VR 1804

Authorised representative board 
Burkhard Gauly and Michaela Böttcher

Our data protection officer is
Lawyer Johanna Feuerhake
Law firm Feuerhake
Obere Masch-Strasse 22
37073 Göttingen
feuerhake@anwaltskanzlei-feuerhake.de
www.anwaltskanzlei-feuerhake.de

 

1. Your Rights

 

You have the following rights towards us 

a) Right to information
You have the right to request confirmation from us as to whether personal data concerning you is being processed by us. You also have the right to information about your personal data processed by us in accordance with Art. 15 GDPR.

b) Right to rectification
You have the right to rectification but also to completion of your data in accordance with Art. 16 GDPR.

c) Right to erasure
You have the right to the immediate erasure of your personal data ("right to be forgotten") in accordance with Art. 17 GDPR, 
- if they are no longer required, 
- if you have objected to processing on grounds relating to your particular situation and our legitimate interests do not override yours 
- if the data is processed unlawfully, 
- the deletion is necessary to fulfil a legal obligation
- if you have withdrawn the consent necessary for the processing of the data.

d) Right to restriction
You have the right to restrict the processing of your personal data in accordance with Art. 18 GDPR,
- if you contest the accuracy of your personal data while we are verifying the accuracy of your personal data
- if the processing of your personal data is unlawful.
- if your data is no longer required by us, but you need it for the establishment, exercise or defence of legal claims
- if you have objected to the processing of your data and it is still unclear whether our legitimate interest prevails.

e) Portability
You have the right to data portability in accordance with Art. 20 GDPR. 

f) Revocation of processing based on consent
If we process your personal data for certain purposes on the basis of your consent, you have the right to withdraw your consent at any time with effect for the future. 

g) Right to object Article 21 GDPR

RIGHT TO OBJECT TO PROCESSING BASED ON LEGITIMATE INTERESTS
YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA IF THE PROCESSING IS BASED ON OUR LEGITIMATE INTERESTS AND THERE ARE GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

RIGHT TO OBJECT TO DIRECT MARKETING
if your personal data is processed for the purpose of direct marketing, you have the right to object at any time in accordance with art. 21 II GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU.

YOU CAN SEND YOUR OBJECTION AT ANY TIME AND INFORMALLY TO THE CONTACT DETAILS PROVIDED.

h) How do I exercise my rights?
You can exercise all your rights, for example, by sending an e-mail to our contact details above, but you can also contact us by post, telephone or in person.

i) Right to lodge a complaint
You also have the right to lodge a complaint with a supervisory authority, in particular with the state data protection officer responsible for us:

State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hanover
Phone: 0511 1204500
Fax: 0511 1204599
E-mail: poststelle@lfd.niedersachsen.de

You are also free to lodge a complaint with the supervisory authority of your place of residence. You can find a list of the state data protection officers here:

www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

2. Data collection and processing when visiting our website

 

Every time you visit our website, the following data is stored in log files

- Date and time of access, 
- Amount of data transferred, 
- Notification of successful retrieval, 
- operating system, 
- the website from which you accessed our site (referrer) 
- the sub-websites that you visit on our website,
- IP addresses of the requesting computers.

This data is not merged and therefore does not allow any conclusions to be drawn about specific persons. The log files are deleted after 14 days. 

We use these log files for anonymised statistical evaluation in order to optimise our website and its content and to ensure the functionality and protection of our IT systems and thus the protection of the data we process and, if necessary, to provide law enforcement authorities with the necessary information in the event of attacks on our IT systems. These are our legitimate interests within the meaning of Art. 6 I lit. f) GDPR. We store our server log file data separately from any other personal data. They are deleted as soon as they are no longer required to fulfil the purpose for which they were stored or if their storage is inadmissible for other legal reasons. 

The data collected from you when you visit our website and use our forms (contact enquiry, registration, customer account login, search terms, etc.) is processed on the servers of our host provider on our behalf. 

Our current host provider is:

Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany

The servers are located within the EU. To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

Our legitimate interest in the use of this service within the meaning of Art. 6 I lit. f) GDPR is the error-free output and presentation of our website, as well as the protection of information security.
 

2.1. Information about cookies

 

We use cookies to optimise our website. These are small text files that are stored on your computer via your browser. Cookies contain a unique identifier, the so-called cookie ID. This enables the websites and servers visited to recognise and assign the specific Internet browser. This enables us to provide you with better access to our website. This is because recognition prevents you from having to re-enter login data, for example, or the shopping basket in online shops being deleted when you surf other pages. Our legitimate interest in the use of cookies within the meaning of Art. 6 I lit. f) GDPR is to make the use of our website intuitive and to make it easier for you to access it. If we have obtained your consent, which can be revoked at any time (e.g. consent to the storage of cookies), the processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR. 

You do not want this?

You can prevent the storage of cookies from our website by selecting "Block cookies" in your browser settings. However, this may restrict the functionality of our website for you. 

All common browsers also offer you options for customised handling of cookies. You can install appropriate add-ons or set them so that only third-party cookies are blocked, all cookies are deleted after closing the browser or websites are generally not allowed to track user activities (do-not-track).

Information can be found for the respective browsers under the following links

Chrome support.google.com/chrome/answer/95647
Microsoft Edge support.microsoft.com/de-de/help/4027947/microsoft-edge-delete-cookies
Safari support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/
Firefox support.mozilla.org/de/products/firefox/protect-your-privacy/cookies
Opera help.opera.com/de/latest/web-preferences/
 

2.2. Google Services

 

(1) General information about Google services
We use various "Google" services on our website. "Google" consists of the companies Google Ireland Ltd (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and other affiliated companies of Google LLC. We have concluded an order processing contract with Google for the use of the respective services in accordance with Art. 28 GDPR. 

You can find more information on data protection and advertising at Google at: policies.google.com/privacy or 
policies.google.com/technologies/ads 
marketingplatform.google.com/about/
policies.google.com/privacy

We cannot rule out the possibility that American authorities, such as intelligence agencies, could possibly gain access to personal data that is inevitably exchanged with Google when integrating Google services on the basis of the Internet Protocol (TCP) due to American laws such as the Cloud Act.

 

(2) Cookies from Google services
You can prevent Google services from setting cookies.
You can do this by selecting "Block cookies" in your browser settings. You can also install so-called AdBlocker add-ons or plugins. 
You can deactivate Google tracking and the use of cookies and device identifiers here www.google.com/settings/ads/onweb;
Cookies from www.googleadservices.com are generally blocked. Alternatively, you can manage the use of device identifiers in your settings as described here: support.google.com/ads/answer/1660762;

However, this may restrict the functionality of our website for you. 

All common browsers also offer you options for customised handling of cookies. You can install appropriate add-ons or set them so that only cookies from third-party providers are blocked, so that all cookies are deleted after closing the browser (ATTENTION this also applies to opt-out cookies) or so that websites are generally not allowed to track user activities (do-not-track). 

You can deactivate interest-based adverts from providers that are part of the "About Ads" self-regulation campaign via the link www.aboutads.info/choices. You can also deactivate cookies for interest-based advertising via the advertising network initiative by following the instructions at: www.networkadvertising.org/managing/opt_out.asp. 
 

(3) Google Ads 

If you have reached our website via an advertisement in Google search or on other websites, Google would like to set "cookies" in your browser in order to recognise it. Google uses cookies to measure the success of the adverts by recording the number of hits (frequency). This data is also transmitted to Google servers in the USA and, in addition to the unique cookie ID, may contain opt-out information from your browser to prevent further advertising. 

This can be done across devices so that, for example, advertising can be displayed in your smartphone browser according to your interests, which were determined on the basis of your surfing behaviour in browsers of other devices, such as PCs or tablets, if you have consented to Google linking the information from the browser history of your respective devices to your Google account in accordance with Art. 6 I lit. a) GDPR. Google uses your data to create user profiles for the purpose of target group-oriented advertising and market research and also analyses them for the purpose of designing its own offers. You can revoke your consent to Google by, for example, deactivating Google's cross-device, personalised advertising: www.google.com/settings/ads/onweb/ Here you can find more information: support.google.com/ads/answer/7395996 

Our legitimate interest in the use of these services within the meaning of Art. 6 I lit. f) GDPR is to assess the success of our advertising campaigns and to increase their use in the future. Furthermore, we want to show you the advertising that interests you. If we have obtained your consent, which can be revoked at any time (e.g. consent to the storage of cookies), the processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR. 

 

(4) Google Adsense

We use Google AdSense to integrate third-party adverts on our website.

Google AdSense analyses the use of our website with the help of "cookies" that are stored on your device. Google AdSense also uses "web beacons". These are transparent image files that are loaded when our pages are accessed and the download is registered. Google may also use other tools with which you or your browser can be "recognised", e.g. device identifiers, whereby the IP address is anonymised according to Google. This enables Google to analyse the use and visitor flow of our website. The information generated in this way, including your IP address, your provider and therefore your country of origin, may also be transmitted to Google servers in the USA in addition to the placement of the advertising formats: That you have accessed our site and clicked on Google Ads there. Google uses unique IDs to recognise which ads are or have been displayed in your browser so that they are not displayed more than once. Google also records conversions (see Google Ads in detail) and can recognise when you have first seen an ad from your browser and then accessed the corresponding website. This requires that your activities are tracked across different websites (3rd party tracking). The data can be passed on by Google to contractual partners.

This can be done across devices so that, for example, advertising can be displayed to you in your smartphone browser according to your interests, which have been determined based on your surfing behaviour in browsers on other devices, such as PCs or tablets, if you have consented to Google linking the information from the browser history of your respective devices to your Google account in accordance with Art. 6 I lit. a) GDPR. Google uses your data to create user profiles for the purpose of target group-oriented advertising and market research and also analyses them for the purpose of designing its own offers. You can revoke your consent to Google by deactivating Google's cross-device, personalised advertising, for example: www.google.com/settings/ads/onweb/ 
Further information can be found here: support.google.com/ads/answer/7395996 

Our legitimate interest in the use of this service within the meaning of Art. 6 I lit. f) GDPR is to customise our offer and advertising according to your use and to generate advertising revenue.

 

(5) Google Maps 

We use the map service Google Maps on our website.

When you visit one of our pages that displays Google Maps, a direct connection is established between your browser and, if applicable, not only with the Google servers in Ireland, but also with those in the USA. The date and time of your visit, the URL of the website accessed and your IP address are transmitted to Google and may also be stored there in the USA. If you use the route planning function, the starting address you enter will also be transmitted and processed. The map/route is transmitted by Google directly to your browser and integrated into the website. If you are logged into your Google account, this data may be merged with other personal data of yours. Google uses your data to create user profiles for the purpose of target group-oriented advertising and market research and also analyses these for the purpose of designing its own offers.

Even if you are not logged in, Google may use your data in conjunction with other data (e.g. browser history) for these purposes. This can be done across devices so that, for example, advertising can be displayed in your smartphone browser according to your interests, which have been determined on the basis of your surfing behaviour in browsers on other devices, such as PCs or tablets, if you have consented to Google linking the information from the browser history of your respective devices to your Google account in accordance with Art. 6 I lit. a) GDPR. Google uses your data to create user profiles for the purpose of target group-oriented advertising and market research and also analyses them for the purpose of designing its own offers. You can revoke the consent you have given to Google by deactivating Google's cross-device, personalised advertising, for example: www.google.com/settings/ads/onweb/ You can find more information here: support.google.com/ads/answer/7395996 

Our legitimate interest within the meaning of Art. 6 I lit. f) GDPR in the use of the map service is the display and convenient findability of our location. 


(6) Google Fonts 

We use fonts from Google (Google Fonts) on our website.

When you visit one of our pages, a direct connection is established between your browser and, if necessary, not only with the Google servers in Ireland, but also with those in the USA in order to integrate the fonts. In addition to the date and time of your access and the URL of the website accessed, your IP address is also transmitted to Google and processed there. Our legitimate interest within the meaning of Art. 6 I lit. f) GDPR in the use of Google Fonts is the compatible output of our texts on all devices and the fast integration when setting up the website.


(7) Google search

We use the Google search function on our website. 

When you access one of our pages, a direct connection is established between your browser and Google servers in the USA to enable the search. In addition to the search query, the date and time of your access and the URL of the website accessed, your IP address is also transmitted to Google and processed there. 

If you are logged into your Google account, this data may be merged with other personal data of yours. Google uses your data to create user profiles for the purpose of target group-oriented advertising and market research and also analyses these for the purpose of designing its own offers.

Even if you are not logged in, Google may use your data in conjunction with other data (e.g. browser history) for these purposes. This can be done across devices so that, for example, advertising can be displayed in your smartphone browser according to your interests, which have been determined on the basis of your surfing behaviour in browsers on other devices, such as PCs or tablets, if you have consented to Google linking the information from the browser history of your respective devices to your Google account in accordance with Art. 6 I lit. a) GDPR. Google uses your data to create user profiles for the purpose of target group-oriented advertising and market research and also analyses them for the purpose of designing its own offers. You can revoke your consent to Google by deactivating Google's cross-device, personalised advertising, for example: www.google.com/settings/ads/onweb/ You can find more information here: support.google.com/ads/answer/7395996 

Our legitimate interest within the meaning of Art. 6 I lit. f) GDPR in the use of this service is to offer you convenient search entries also from our website. You can find more information on Google's terms of use and data protection at: www.google.de/intl/de/policies/privacy/
 

2.3. Matomo (formerly Piwik) web analysis

 

We use the web analysis service Matomo, operated by Innocraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. 

Matomo analyses how the website is used by you. For this purpose, cookies (see above) may be set on the system you use when you visit our website. With the help of the cookie, your IP address, time, location and frequency of visits to our website are transmitted to our servers and processed there for the purpose of analysing website usage. Your IP address is anonymised immediately.  Pseudonymised user profiles are created using the information collected. This data will not be merged with any other personal data stored about you without your express consent and will not be used to identify you.
Our legitimate interest in the use of this service within the meaning of Art. 6 I lit. f) GDPR is to analyse our offer and the reach of our website and to optimise it for our visitors.

You do not want this?

You can object to the collection and processing of your data. 

Your visit to this website is currently recorded by Matomo web analytics. Deselect this checkbox for opt-out.

If you tick the checkbox, a deactivation (opt-out) cookie will be set in your browser. Matomo will then not collect any data from you when you visit our website. Please note: The opt-out cookie will no longer work the next time you visit our website if you have activated the deletion of all cookies after the end of the session in your browser settings. Alternatively, you can also set in all common browsers that websites are generally not allowed to track user activities (do-not-track).

You can find more information in Matomo's privacy policy at: matomo.org/privacy-policy/

2.4 Social plugins

 

Our legitimate interest within the meaning of Art. 6 I lit. f) GDPR in the use of social media plugins is to optimise the reach and distribution of our website. 
In order to better protect your data when you visit our website, the plugins are only integrated into our pages to a limited extent using an HTML link ("Shariff solution" from c't). The plugins do not yet establish a connection between the provider's servers and the browser or device you are using when you visit our website. Only when you click on one of the plugins will the page of the social network be called up, where you can click on the corresponding buttons after logging in. Only then will the information that and when you have visited this page be assigned to your social media profile and linked there or shared with your contacts.

 

(1) Facebook

We use Facebook plugins operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. 

The plugin establishes a connection between Facebook servers and the browser or device you are using. It thereby transmits the information that you have visited this page and when, and assigns this to your Facebook profile, even if you do not click on the plugins. If you click one of the Facebook plugins such as the Like button or other plugins with the Facebook logo on our site while you are logged into your Facebook account or were logged into your Facebook account during the current browser session, you can link our pages to your Facebook profile. 

This allows Facebook to associate your visit to our pages with your Facebook account. If you want to prevent this assignment, please log out of your Facebook account before visiting our site. However, Facebook tracks your activity on our site even if you are not logged in or do not have a Facebook account and can create a so-called shadow profile. This data can be assigned to your profile when you log in again. All data collected in this way may be processed and stored on Facebook servers in non-EU countries. If you want to prevent this: Extensions are offered for all common browsers to prevent tracking, especially Facebook tracking.

We would like to point out that we have no knowledge of the content or use of your transmitted data to and by Facebook. Further information can be found in Facebook's privacy policy at: de-de.facebook.com/policy.php

What data do the servers process? 

- Name of the retrieved file, 
- Date and time of access, 
- Amount of data transferred, 
- Notification of successful retrieval, 
- Web browser identifier (name and version number of your browser) 
- Type of encryption
- IP addresses of the requesting devices

This data is not merged and therefore does not allow any conclusions to be drawn about specific persons. These logs are deleted after 7 days. 

They are used to ensure the functionality and protection of the IT systems, and thus the protection of the processed data, and to provide law enforcement authorities with the necessary information in the event of attacks on our IT systems.

What happens to the data during interactions? 

If you have an account yourself and follow, comment on or interact with various instances on a server, your account name, account address, profile and/or background image and your interaction on the respective profile that you follow will be displayed, for example. This is stored on the servers and, if necessary, exchanged between servers and instances, e.g. to remove a link if its destination on a server is changed or deleted. 

If you share and publish content via your account, third parties can interact with this content by reblogging, replying, commenting, etc. Your content is then also displayed in their profiles. Your content is then also displayed in their profiles, allowing third parties to interact with it. 

The legal basis is the express consent you may have given when registering, Art. 6 I lit. a) GDPR. Our legitimate interest within the meaning of Art. 6 I lit. f) GDPR in the use of Mastodon is to enable the exchange of information in the sense of public opinion-forming in a data protection-friendly and simple manner. 

Further information can be found in the privacy policy of your server. 

 

(2) Twitter plugins

We use Twitter plugins operated by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. 

The plugin transmits data to Twitter servers. As soon as you call up one of our pages with a Twitter plugin, this is loaded by Twitter servers and the download is registered. This tells Twitter which of our pages you have visited. According to Twitter, the data transmitted in the process, e.g. IP address and page accessed, is only processed to display the Twitter plugin and not for other purposes. Your visit to our website will not be merged with any other personal data of yours.

If you click "Re-Tweet" or another Twitter plugin, you link our pages to your Twitter account and disclose this information to other users, in particular your followers.

We would like to point out that we have no knowledge of the content or use of your transmitted data to and by Twitter. Further information can be found in Twitter's privacy policy at: twitter.com/de/privacy

You can adjust your data protection settings on Twitter in your account settings at: https://twitter.com/account/settings

 

(3) YouTube

We use YouTube plugins operated by Google. Please also note our information on Google services above in the data protection information. We use the no-cookie option when embedding YouTube videos. You can find more information at youtube-nocookie.com .

The video plugin establishes a direct connection between YouTube servers and the web browser you are using. As soon as you call up one of our pages with YouTube videos, this is loaded from YouTube servers and the download is registered, regardless of whether you are watching a video. As a result, YouTube knows which of our pages you have visited and, if you are logged into your YouTube profile, combines this with other personal data already stored there and assigns your surfing behaviour to your account. 

If you are logged into your Google account, this data may be merged with other personal data of yours. Google uses your data to create user profiles for the purpose of target group-oriented advertising and market research and also analyses these for the purpose of designing its own offers. 

This can be done across devices so that, for example, advertising can be displayed to you in your smartphone browser according to your interests, which were determined on the basis of your surfing behaviour in browsers on other devices, such as PCs or tablets, if you have consented to Google linking the information from the browser history of your respective devices to your Google account in accordance with Art. 6 I lit. a) GDPR. Google uses your data to create user profiles for the purpose of target group-oriented advertising and market research and also analyses them for the purpose of designing its own offers. You can revoke the consent you have given to Google by, for example, deactivating Google's cross-device, personalised advertising: www.google.com/settings/ads/onweb/ You can find more information here: support.google.com/ads/answer/7395996 

Furthermore, YouTube can store various cookies on your end device after starting a video; we have chosen a variant of the integration in which this does not happen. 

You can also actively prevent the storage of cookies yourself by selecting "Block cookies" in your browser settings. You can also install so-called AdBlocker add-ons or plugins. You can deactivate Google tracking and the use of cookies and device identifiers here www.google.com/settings/ads/onweb Cookies from www.googleadservices.com are generally blocked. Alternatively, you can manage the use of device identifiers in your settings as described here: support.google.com/ads/answer/1660762;

However, this may restrict the functionality of our website for you. 

All common browsers also offer you options for customised handling of cookies. You can install appropriate add-ons or set them so that only cookies from third-party providers are blocked, so that all cookies are deleted after closing the browser (ATTENTION this also applies to opt-out cookies) or so that websites are generally not allowed to track user activities (do-not-track). 

The legal basis is your express consent given when accessing the page, if applicable, Art. 6 I lit. a) GDPR. Our legitimate interest within the meaning of Art. 6 I lit. f) GDPR in the use of YouTube is the convenient and simple user experience for playing videos on our website. 

You can find more information on data protection and advertising at Google at: policies.google.com/privacy or policies.google.com/technologies/ads 
 

 

3. data processing for enquiries via our contact form or by email

 

If you use the contact form on our website or send us an email, we will process the personal data you voluntarily provide there (e.g. your name and email address) in order to respond to your enquiry. 

If you send us an e-mail, we process the personal data you voluntarily provide there (e.g. your name and e-mail address) in order to answer your enquiry.

We delete or block your data if it is no longer required to fulfil the purpose for which it was stored, if its storage is inadmissible for other legal reasons or if you request the deletion or blocking of your data. Our legitimate interest within the meaning of Art. 6 I lit. f) GDPR is to make it easier for visitors to our website to contact us. We process the data on a server within the EU. To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
 We would like to point out that complete data security cannot be guaranteed when communicating by email. In the case of unencrypted e-mails, despite transport encryption, there is a possibility that unauthorised third parties may take note of them. 
 

4. Data processing for campaigns, appeals and petitions

 

We enable you to participate in campaigns, appeals and petitions on our website. To do so, you can enter your first name, surname, email address and postcode as mandatory fields. We process this information in order to verify the authenticity of the supporting persons. We only pass on the first name and surname to the recipients. What the recipients do with the supporter lists is beyond our control.

In individual cases, it is possible that you may also publicly support our campaigns, appeals and petitions with your name. In this case, you must expressly declare your consent by ticking a checkbox. We publish these lists in the following media: Through posters at vigils and similar human rights actions, also in creative forms of protest.

Our legitimate interest in campaigns, appeals and petitions is also to draw attention to human rights violations in this form and thus give the public an active form of participation in protesting against human rights violations. We also use this to pursue our statutory purpose. The legal basis is Art. 6 f) GDPR (legitimate interest) and Art. 6 a) GDPR (consent).
 

5. Fundraising Box

 

We use a donation form and administration tool from fundraisingbox.com on our website.  This is a service provided by Wikando GmbH, Schießgrabenstr. 3, 86150 Augsburg, with whom we have concluded an order data processing contract in accordance with Art. 28 GDPR.

You can also find more information at fundraisingbox.com/privacy/datensicherheit/

Our legitimate interest is the use of a professional tool that enables you to make a convenient and secure donation. The legal basis is Art. 6 f) GDPR (legitimate interest) and Art. 6 a) GDPR (consent).
 

6. Registration for our Newsletter

 

You can subscribe to our newsletter to regularly receive current offers, dates, advertising or similar information about us by email. 

This requires your express consent. We use the double opt-in procedure: You first enter your name and e-mail address, with optional interests if applicable, and after registering you will receive an e-mail informing you that you have registered for the newsletter and asking you to confirm this by clicking on the link provided. One of the purposes of this is to prevent the misuse of third-party e-mail addresses. Registration, confirmation or cancellation are logged by us, i.e. your IP address and the time of registration, confirmation or cancellation are stored so that we can prove that your consent complies with the legal requirements, which corresponds to our legitimate interests within the meaning of Art. 6 I lit. f) GDPR. The legal bases are: Art. 6 I lit. a) GDPR and Section 7 II No. 3 and III UWG. 

We transmit the email address you provide and, if applicable, your name and optionally your interests to a newsletter mailing service provider rapidmail GmbH. Wentzingerstraße 21 79106 Freiburg im Breisgau Germany 


The provider evaluates the data statistically for its own purposes in order to optimise the dispatch and presentation of the newsletter as well as its own offers. The data will not be contacted directly or passed on to third parties. You can find out more in the provider's privacy policy: www.rapidmail.de/datenschutz 

Your declaration of consent is completely voluntary and can be revoked by you at any time. To do so, click on the "Unsubscribe" link in one of the newsletters or inform us of your cancellation by other means using the contact details provided. If you unsubscribe, we will delete your data or restrict processing by entering it in a blacklist.
 

6. Processing of data for contract fulfilment

 

7.1 General information on data processing for purchases

If you conclude a contract with us, e.g. for the delivery of goods, the provision of a service or the creation of a work, we process the data you provide (e.g. name, address, date of birth, e-mail address, telephone number, fax number and bank details) to fulfil the contract. Mandatory fields marked as such must be completed by you, as we are unable to fulfil the contract without this information. The data is transmitted in SSL (Secure Socket Layer) encrypted form and processed in our customer database within the EU. The legal basis for data processing is Art. 6 I lit. b) GDPR.

In order to protect us against fraud, we may process this data to identify atypical order transactions (e.g. if the same addresses are given in a large number of simultaneous orders using different customer accounts). This serves to safeguard legitimate interests within the meaning of Art. 6 I lit. f) GDPR. 

If you order goods, we transmit the data required for delivery to a transport company in encrypted form for the purpose of delivery and notification.

We transmit the payment data provided for contract processing, such as name and address, account and credit card numbers, checksums or TANs, in encrypted form to the payment service provider selected by you or commissioned by us or to the credit institution commissioned with the payment. In some cases, the payment service providers process this data on their own responsibility. The payment service provider may forward your data to credit agencies for identity verification and fraud prevention, e.g. to prevent payment with blocked credit cards. You can find more information on this in the privacy policy of the respective payment service provider. If you already have a customer account with a payment service provider, you will be asked to register with them during the ordering process. In this case, the payment service provider will process your data and the privacy policy of the respective payment service provider will apply.

Our payment service providers are: 

- PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

The legal basis for data processing is Art. 6 I lit. b) GDPR, as well as Art.6 I lit. f) GDPR, because we have a legitimate interest in offering our customers secure and simple payment options.

In the event that you are in arrears with the payment of the invoice amount, we reserve the right to pass on your above-mentioned data to a debt collection agency or a law firm, if necessary to courts and public authorities, in order to enforce our claims on the basis of legitimate interests within the meaning of Art. 6 I lit. f) GDPR.

Furthermore, we transmit your data contained in the invoice to a tax office for the purpose of financial accounting. Our legitimate interest in this is effective and competent accounting by specialists and the streamlining of administrative work within our company. 

Due to a legal obligation within the meaning of Art. 6 I lit. c) GDPR, we transmit your data contained in the invoice to the tax authorities to be able to assert or defend against claims in connection with the contract.

We reserve the right to further legally permitted use of your data after fulfilment of the contract on the basis of legitimate interests within the meaning of Art. 6 I lit. f) GDPR. In particular, this is to increase customer loyalty through advertising. For this purpose, we may send you offers and information by post and - insofar as we are permitted to do so under Section 7 III UWG - direct advertising for our own similar goods or services by email. We may transfer the data required for this (name and address) to a service provider who processes it on our behalf in order to send the advertising mailings. You can object to the storage and use of your data for this purpose at any time using the contact details provided. After objecting to the use of your data for advertising purposes, we will restrict the processing of your data for further use and delete it after expiry of the retention obligations under tax and commercial law.

 

7.2 Purchase via provider login

You can register and complete your purchase in our shop via simplified logins through various providers. 

We use the services of:
- PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

After clicking the respective provider button, you will be redirected to the provider's login page. This establishes a connection between their servers and the browser or device you are using. Your account there and our offer will be linked. This provides us with the information we need to identify you and complete the order, such as your name, your email address, your billing and delivery address, your payment details, e.g. your credit card details and, if applicable, your date of birth. 

Our legitimate interest within the meaning of Art. 6 I lit. f) GDPR in the use of this service is to simplify the purchasing process and thus increase user-friendliness.

We would like to point out that we have no further knowledge of the content or use of your transmitted data to and by the providers. 

Further information can be found in the provider's privacy policy. 

www.paypal.com/de/webapps/mpp/ua/privacy-full


7.3 Purchase via Paypal login

You can register in our shop via "PayPal Login". This is a service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. 

After clicking the PayPal button, you will be redirected to the PayPal login page. The plugin establishes a connection between Paypal servers and the browser or device you are using. Your PayPal account and our website are linked. As a result, we receive the information from PayPal that we need to identify you and complete the order, such as your name, your email address, your billing and delivery address, your payment details, e.g. your credit card details and, if applicable, your date of birth. 

Our legitimate interest within the meaning of Art. 6 I lit. f) GDPR in the use of this service is to simplify the registration process and thus increase user-friendliness.

We would like to point out that we have no further knowledge of the content or use of your transmitted data to and by Paypal. Further information can be found in Paypal's privacy policy at: www.paypal.com/de/webapps/mpp/ua/privacy-full
 

8. Data protection declarations for our social media presences and messengers

 

8.1 Facebook 

When you visit our Facebook page, Facebook, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, processes at least the following data about you: (1) your IP address, which, according to Facebook, is anonymised if you are from the EU and deleted after 90 days (2) the device from which you visit the page. 
If you are logged in to Facebook during your visit to our Facebook page, Facebook assigns this visit and your use of our page (like, share, comment, message, etc.) to your profile. As our posts are public, your interactions with our page are also public. This data can be used to tailor content or advertising to you. If you want to avoid this, you should log out of Facebook or deactivate the "stay logged in" function, delete the cookies on your device and close and restart your browser. This will allow you to use our Facebook page without this being directly associated with your Facebook account.  
Even if you are not logged in but have a Facebook account, Facebook processes the data collected when you visit our site and your activities on our Facebook page to create a so-called shadow profile, which is assigned to your Facebook account the next time you log in from the same device or browser. This happens on all Facebook pages and also when surfing other pages that have a Facebook plugin integrated (Like button etc.). If you want to prevent this, you should also delete the cookies on your device and close and restart your browser. Extensions are also available for all common browsers to prevent tracking, especially Facebook tracking.
Facebook also uses the data collected when you visit our Facebook page (Insights data) to provide us with statistical information about the activities on our page. This includes, for example, the number of page views, the reach, whether and how often the page or a post was "liked", shared, recommended, commented on or even hidden or reported as spam; whether route planners or telephone numbers were used, as well as the gender, age, place of residence and language of our fans.  Our legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR in the use of Insights data is to make our posts more interesting for you as a user and to better customise them for you.  
We are jointly responsible with Facebook for the use of the data collected on our Facebook page within the meaning of Art. 26 GDPR. We have therefore concluded a corresponding Page Controller Addendum with Facebook, which you can view here: www.facebook.com/legal/controller_addendum
Facebook uses the data for its own purposes and also passes it on to third parties. We do not know in what form and to what extent or for how long Facebook stores the data; Facebook provides general information about this at de-de.facebook.com/about/privacy. There you will also find information on how to contact Facebook and on the settings options for adverts. The complete data policy and a contact option for asserting your rights against Facebook can be found here de-de.facebook.com/full_data_use_policy 
 

8.2 Instagram

When you visit our Instagram profile, Instagram, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, processes the following data about you
- Your IP address, according to Instagram, IP addresses originating from the EU are anonymised and deleted after 90 days
- the device and, if applicable, the location from which you visit our profile
If you are logged in to Instagram, Instagram assigns this visit and your use of our profile (likes, shares, comments, messages, etc.) to your profile using a cookie stored on your device with your Instagram ID. This data can be used to offer you customised content or advertising. If you want to avoid this, you should log out of Instagram, delete the cookies stored on your device and close and restart your browser. This will allow you to use our Instagram page without this being directly associated with your Instagram account.  
Even if you are not logged in but have an Instagram account, Instagram processes the data collected when you visit our site and your interactions with our profile using cookies stored on your device to create a so-called shadow profile, which is assigned to your Instagram account the next time you log in from the same device or browser. This happens with all Instagram profiles and also when browsing other sites that have an Instagram plugin integrated. If you want to prevent this, you should also delete the cookies on your device and close and restart your browser Extensions are also available for all common browsers that are designed to prevent tracking, especially Instagram tracking.

Instagram also uses the data collected when you visit our Instagram profile to provide us with statistical information about the activities on our site.
.
Instagram uses the data for its own purposes and may also pass it on to third parties, e.g. to other Facebook companies and external partners. The data is also processed on servers in third countries. According to its own information, the data is processed there on the basis of an order processing contract using the EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c), d), in which the provider has undertaken to comply with EU data protection standards. 
We do not know in what form and to what extent or for how long Instagram stores the data; Instagram provides general information about this at help.instagram.com/155833707900388/. There you will also find information about contact options for asserting your rights listed under 1. against Instagram. 

 

8.3 YouTube and Google

When you use our YouTube channel or our Google Page, YouTube or Google processes the following data from you: See also our information on Google services above.

The provider sets cookies in your browser. If you are logged in to YouTube or Google, your actions will be merged with other personal data already stored there and assigned to your profile. Information that you have visited this page and when, as well as your approximate location for language settings, browser and device are recorded. This can be done across devices so that, for example, advertising can be displayed to you in your smartphone browser according to your interests, which were determined based on your surfing behaviour in browsers of other devices, such as PCs or tablets, if you have consented to Google within the meaning of Art. 6 I lit. a) GDPR that the information from the browser history of your respective devices is linked to your Google account. You can revoke your consent to Google by deactivating Google's cross-device, personalised advertising, for example: www.google.com/settings/ads/onweb/ You can find more information here: support.google.com/ads/answer/7395996 Google uses your data to create user profiles for the purpose of target group-oriented advertising and market research and also evaluates them for the purpose of designing its own offers.

Even if you are not logged in, you will receive a unique identifier that Google can use to recognise you and analyse your surfing behaviour.

 

8.4 LinkedIn

When you visit our LinkedIn page, operated by LinkedIn Ireland Unlimited Company
Wilton Place, Dublin 2, Ireland, which is part of LinkedIn Corporation. 1000 W. Maude Ave, Sunnyvale, CA 94085, USA, LinkedIn processes the following data about you:

The provider sets cookies in your browser. If you are logged in to LinkedIn, your actions will be merged with other personal data already stored there and assigned to your profile. Information is collected that you have visited this page and when, as well as your approximate location for language settings, browser and device.
The data may also be processed on servers in the USA for this purpose. According to its own information, the data is processed in third countries on the basis of an order processing contract using the EU standard contractual clauses in accordance with Art. 46 Para. 2 lit. c), d), in which the provider has undertaken to comply with EU data protection standards.

Further information can be found in LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

 

8.5 Twitter channel

When you visit our Twitter channel, operated by Twitter International Unlimited Company, One Cumberland Place,Fenian Street,Dublin 2,D02 AX07,Ireland, Twitter processes the following data from you:

The provider sets cookies in your browser. If you are logged in to Twitter, your actions will be merged with other personal data already stored there and assigned to your profile. Information is collected that you have visited this page and when, as well as your approximate location for language settings, browser and device.
The data may also be processed on servers in the USA for this purpose. According to its own information, the data is processed in third countries on the basis of an order processing contract using the EU standard contractual clauses in accordance with Art. 46 Para. 2 lit. c), d), in which the provider has undertaken to comply with EU data protection standards.

Further information can be found in Twitter's privacy policy at twitter.com/de/privacy . You can adjust your data protection settings on Twitter in your account settings at twitter.com/account/settings.