Thank you for visiting our website. The protection of your data is of particular concern to us. We will use your data in compliance with the german Bundesdatenschutzgesetz (BDSG) and the EU General Data Protection Regulation. If you access another website via a link, please use the information on data protection and privacy provided there. We have no influence on the data protection practices of other site operators.

Controller of your personal data is:

Gesellschaft für bedrohte Völker e.V. (GfbV) 
Postfach 2024 
37010 Göttingen, Germany
Phone: +49 (0)551 499 06 0 
Fax: +49 (0)551 580 28 
E-Mail: info@gfbv.de

Authorized representative:

Burkhard Gauly und Eytan Celik
Registergericht: Amtsgericht Göttingen
Registernummer: VR 1804

Our external data protection officer is:

(Attorney at Law, German Bar)

Rechtsanwältin Johanna Feuerhake
Anwaltskanzlei Feuerhake
Obere Masch-Strasse 22
37073 Göttingen, Germany
feuerhake@anwaltskanzlei-feuerhake.de
www.anwaltskanzlei-feuerhake.de

1. Your rights

2. Data collection and processing when visiting our website
2.1 Cookie Policy
2.2 Google Analytics
2.3 Social plugins
2.4 Google Maps
2.5 Google Fonts

3. Contact Form

4. Campaigns, Appeals and Petitions

5. Commentary function and abonnement of coments

6. Subscription to our Newsletter

7. Data processing for contract performance/Direct Advertising

8. Payment via Paypal

You have the right of access, the right to rectification, to erasure ("right to be forgotten") and the right to restriction of processing of your personal data in accordance with Art. 15- 18 GDPR. You have the right to data portability in accordance with Art. 20 GDPR. You have the right to object, in particular to the processing of your data for the purposes of direct marketing and to processing which we carry out on the basis of legitimate interests in accordance with Art. 21 GDPR. You also have the right to lodge a complaint with a supervisory authority, for us this is Die Landesbeauftragte für den Datenschutz Niedersachsen Barbara Thiel, Prinzenstraße 5, 30159 Hannover, Germany, Phone: +49 (0511) 120 45 00, Fax: +49 (0511) 120 45 99, E-Mail: poststelle@lfd.niedersachsen.de.

When you visit our website we store in log files:

• IP adress
• Date and time oft he request
• the amount of data transferred,
• notification of successful access,
• web browser.

These data are not linked to certain persons. In addition, we log your IP address. The log files will be deleted after 14 days. We use these data for anonymous statistical evaluation in order to optimize our website and its contents and to ensure the functionality and protection of our IT systems. This serves the protection of the data processed by us. In the event of attacks on our IT systems, we are able to provide the law enforcement authorities with the necessary. These are our legitimate interests within the meaning of Art. 6 para. 1 letter f) GDPR. We store our server log files separately from any other personal data. We will erase your personal data or restrict the processing, if they are no longer necessary in relation to the purposes for which they were collected, if there is no other legal ground for the processing

The data collected from you when you visit our website and use our forms (contact request, customer account registration, etc.) are processed on the servers of our host provider on our behalf. The servers are located within the EU.

Our legitimate interest in the use of this service within the meaning of Art. 6 Para. 1 lit f) GDPR is the trouble-safe output and presentation of our website, as well as the maintenance of information security.

We use cookies to optimize our website. These are small text files stored on your computer via your browser. Cookies contain a unique identifier (cookie ID).  This enables the visited websites and servers to recognize and assign the specific Internet browser. Cookies are used, for example, to keep your items in your shopping cart when you continue shopping. This allows you to use our website intuitively and helps us to provide better performance. This is our legitimate interest in the sense of Art. 6 para. 1 lit. f) GDPR.

You can prevent cookies from being saved by selecting "Block cookies" in your browser settings. However, this may result in a functional limitation of our website.  All common browsers also offer options for individual handling. You can install appropriate add-ons or block only third party cookies, delete all cookies at the end of the session. You can also completely disable tracking of user activity. (Do-not-Track).

We only use session cookies, which are automatically deleted after leaving our website.

Our website uses the web analysis tool GoogleAnalytics, operated by von Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland und der Google LLC. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. ?When you visit our website, Google Analytics uses cookies (see above) to analyse how you use our website. Your IP address, time, place and frequency of your visit are transferred to and processed by Google servers in the USA. Since we use the anonymisation function, your IP address is only stored anonymously by Google; the last octet of the IP address is set to zero. Our legitimate interest in the use of this service in accordance with Art. 6 para. 1 lit f) GDPR is to analyse the reach of our website and to optimize it for our visitors.

Google evaluates your use of the site and creates reports on user activities. We use this service for statistical evaluation in order to optimize our website and its contents for you and to increase the site's reach. Furthermore, Google uses the data to optimize its own services. The information is transferred by Google to third parties who process data on behalf of Google or if a transfer is required by law or ordered by court order.

You can use one of the deactivation options offered by Google. According to Google in this case no information will be processed by Google Analytics. More information about this option can you find here https://tools.google.com/dlpage/gaoptout?hl=en.

You can also set an opt out cookie, particularly in browsers on mobile devices, by clicking on this [LINK]. Notice: this opt out cookie will not be working anymore when you visit our site again, if you have set your browser settings to delete all cookies after a session end.

For more information on terms of use and Privacy Policy, please visit https://www.google.com/analytics/terms/de.html or https://policies.google.com/ and https://policies.google.com/privacy.

(1) Facebook

We use Facebook plugins operated by Facebook Inc 1601 Willow Road, Menlo Park, California 94025, USA, responsible for data processing within the EU: Facebook Ireland Ltd, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland.

In order to better protect your data when you visit our website, the plugins are only integrated into our pages to a limited extent using an HTML link (“Shariff solution” from c't). The plugins do not establish a connection between provider servers and the browser or device you are using when you visit our website. Only if you click one of the plugins, the social network page will be opened, where you can log in and click the buttons. Only then will the information that and when you visited this site be associated with your social media profile and linked or shared with your contacts.

More Facebook plugins can be found here: http://developers.facebook.com/docs/plugins/.

Notice: We have no knowlede about the content or usage of your data that has been transfered to and by facebook.

For more information, please see Facebook's privacy policy at http://de-de.facebook.com/policy.php.

 (2) Twitter-Plugins

We use Twitter plugins operated by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

In order to better protect your data when you visit our website, the plugins are only integrated into our pages to a limited extent using an HTML link (“Shariff solution” from c't). The plugins do not establish a connection between provider servers and the browser or device you are using when you visit our website. Only if you click "Re-Tweet" or another Twitter plugin, you can link our pages to your Twitter account and share this information with your followers.

Notice: We have no knowlede about the content or usage of your data that has been transfered to and by twitter.

Further information can be found in the Twitter privacy policy at https://twitter.com/de/privacy. You can change your privacy settings on Twitter in your account settings at https://twitter.com/account/settings.

(3) Google +1 -Plugin und weitere Google+ Buttons

We use Google + 1 plugins, powered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland und der Google LLC. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

In order to better protect your data when you visit our website, the plugins are only integrated into our pages to a limited extent using an HTML link (“Shariff solution” from c't). The plugins do not establish a connection between provider servers and the browser or device you are using when you visit our website. Only if you click one of the plugins, the social network page will be opened, where you can log in and click the buttons. Only then will the information that and when you visited this site be associated with your social media profile and linked or shared with your contacts.

What happens when clicking the Google +1 plugin after redirecting to Google+1 ?

• Worldwide publication of shared information
• Your shared content may be displayed along with your profile name and photo in Google search services or on other web pages and in advertisements.
• Google associates interaction with our offerings with other data stored in your Google profile.
• Receive personalized content from Google and partners

What information does Google process?

• that you have shared a specific content with Google +1
• Information about the page on which the Google +1 button was clicked
• Your IP address and other browser-related information, which allow conclusions to be drawn regarding language and location.
• Ongoing information/progress of your +1 activities to improve the Google services and presumably to publish statistics about the +1 activities of users that are passed on to users and partners.

We would like to point out that we have no further knowledge of the content or use of your transmitted data by Google. Further information can be found in Google's privacy policy at https://policies.google.com/privacy and in the buttons policy at https://policies.google.com/privacy.

(4) YouTube- Plugins

We use YouTube plugins operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, YouTube belongs to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland und der Google LLC. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

The plugin establishes a direct connection between YouTube servers and the browser you are using. As soon as you access one of our pages with YouTube plugin, this is loaded from YouTube servers and the download is registered, regardless of whether you are watching a video. If you are logged in to your YouTube profile, YouTube can combine your user activity with other personal data you may have provided and link it to your account.

If you are logged into your Google account these data might be linked to other personal data. Google creates user profiles from this data in order to target group oriented advertising and market research and they analyse this data to design their offers accordingly.

If you are not logged into your Google or YouTube account, according to YouTube, your visit to our website will not be linked to any other personal data you may have provided.

Further information can be found in Google's privacy policy at https://policies.google.com/privacy

(5) Hinweis zu Social Media

It is our legitimate interest according to Art 6 Para. 1 lit f) GDPR to use social media plugins to increase the reach of our offers and services.

The US providers are – if not specified otherwise – certified by the EU-US Privacy Shield, and are thereby obligated to act in accordence  with the EU data protection standards. The data are being proessed on the basis of international treaties and the decision of reasonableness by the EU-Commission according to Art. 45 GDPR.

2.4. Google Maps

We use Google Maps, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland und der Google LLC. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

When you visit one of our pages that displays Google Maps, a direct connection is established between your browser and Google servers in the USA. The date and time of your visit, the URL of the website accessed and your IP address are transferred to and processed by Google. If you use route planning, the start address entered is also transferred and processed. Google transfers the map/route directly to your browser and integrates it into the website. The data will be processed on the basis of international agreements and on the basis of an adequacy decision of the EU Commission in accordance with Art. 45 GDPR. The provider is certified according to the EU-US Privacy-Shield and is thus obliged to comply with EU data protection standards.

If you are logged into your Google account, this data may be merged with other personal data about you. Google uses your data to create user profiles for the purpose of target-group-oriented advertising and market research and also evaluates these for the purpose of designing its own offers.

Even if you are not logged in, Google may use your data in connection with other users (e.g. browser history) for these purposes. You may object to the creation of your user profile by Google; in particular, you may deactivate Google's cross-device, personalised advertising here https://support.google.com/ads/answer/7395996.

Our legitimate interest in the use of the map service within the meaning of Art. 6 para. 1 lit. f) GDPR is to make it easy for you to find us.

You can prevent this by deactivating Java Script in your browser settings. All common browsers also offer you options for blocking embedded content. You can install appropriate add-ons. However, in this case the map displays will not work. For more information on Google's Terms of Use and Privacy Policy, please visit https://www.google.de/intl/de/policies/privacy/

2.5. Google Fonts

We use Google Fonts, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland und der Google LLC. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

When you visit one of our pages, a direct connection is established between your browser and Google servers in the USA to integrate the fonts. The date and time of your visit, the URL of the website accessed and your IP address are transferred to and processed by Google. The data will be processed on the basis of international agreements and on the basis of an adequacy decision of the EU Commission in accordance with Art. 45 GDPR. The provider is certified according to the EU-US Privacy-Shield and is thus obliged to comply with EU data protection standards.

It is our legitimate interest according to Art 6 Para. 1 lit f) GDPR to use Google Fonts to ensure that our texts are quickly integrated and displayed compatible on all devices.

For more information on Google's Terms of Use and Privacy Policy, please visit https://www.google.de/intl/de/policies/privacy/.

If you use the contact form on our website or send us an e-mail, we process your freely given personal data (e.g. your name and e-mail address) in order to answer your request. We will erase your personal data or restrict the processing, if they are no longer necessary in relation to the purposes for which they were collected, if there is no other legal ground for the processing or if you request the erasure or restriction of your data. Our legitimate interest within the meaning of Art. 6 para. 1 lit f) GDPR  is to make it easier for you to contact us. We process the data within the EU.

We would like to point out that complete data security cannot be guaranteed when communicating by e-mail. In the case of unencrypted e-mails, it is possible that unauthorised third parties may take note of these despite transport encryption.

 
 
We allow you to participate in campaigns, appeals and petitions on our website. To do this, we ask for first name, last name, email and zip code as required fields. We process this information to prove the authenticity of the supporting persons. We only pass on the first name and surname to the recipients. What the recipients do with the supporter lists is beyond our control.
 
In individual cases, it is possible that you also publicly support our campaigns, appeals and petitions with your name. In this case, you must explicitly declare your consent by checking a box. We publish these lists in the following media: Through posters on vigils and similar human rights actions also in creative protest forms.
 
Our legitimate interest in campaigns, appeals and petitions is also in this form to draw attention to human rights violations and thus give the public an active form of participation in protest against human rights violations. Furthermore, we also pursue our statutory purpose with this. The legal basis is Art. 6 f) DSGVO (legitimate interest) and Art. 6 a) DSGVO (consent).

You can give public comments on our websites. In addition to your freely given information - name or nickname - we temporarily store your IP address. Our legitimate interest within the meaning of Art. 6 para. 1 letter f) GDPR is to enable identification by law enforcement authorities if an author violates criminal law norms or the rights of third parties (e.g. through insults, hate speech, etc.).

You can subscribe to the following comments.

This requires your freely given consent. We proceed according to the Double-Opt-In- procedure: First you enter your name and e-mail address. After registration you will receive an e-mail informing you of your subscription to the newsletter and asking you to confirm it via the link provided. To prove that your consent meets the legal requirements Registration, confirmation or deregistration are recorded by us, i.e. your IP address and the time of registration, as well as confirmation or deregistration. to keep a record of this is our legitimate interest (Art. 6 Para. 1 lit f) GDPR).

Legal bases are: Art 6 para. 1 lit a) GDPR.

Your declaration of consent is freely given and you can withdraw your consent at any time. To do so, click on the "unsubscribe" link in one of the newsletters or inform us of your withdrawal by other means using the contact details provided. If you unsubscribe, we will delete your data or restrict processing by adding you to a blacklist.

You can subscribe to our newsletter to receive current offers, dates, advertising or similar information about us by e-mail.

This requires your freely given consent. We proceed according to the Double-Opt-In- procedure: First you enter your name and e-mail address, if applicable with optional interests. After registration you will receive an e-mail informing you of your subscription to the newsletter and asking you to confirm it via the link provided. Among other things, this serves the purpose of preventing the misuse of external e-mail addresses. To prove that your consent meets the legal requirements Registration, confirmation or deregistration are recorded by us, i.e. your IP address and the time of registration, as well as confirmation or deregistration.

Legal bases are: Art 6 para. 1 lit a) GDPR and § 7 para. 2 no. 3 and para. 3 UWG.

Your declaration of consent is freely given and you can withdraw your consent at any time. To do so, click on the "unsubscribe" link in one of the newsletters or inform us of your withdrawal by other means using the contact details provided. If you unsubscribe, we will delete your data or restrict processing by adding you to a blacklist.

If we conclude a contract, e.g. for the delivery of goods, the provision of a service or the creation of a work, we process the data provided by you (e.g. name, address, date of birth, e-mail address, telephone number, fax number, bank details) for contract performance. You have to fill out the marked mandatory fields. Without these details we are not in a position to fulfil the contract.  The data will be transfered with SSL-(Secure Socket Layer) encryption and processed in our customer database within the EU.

The Data are processed there on the basis of a order data processing contract in accordance with Art. 46 para. 2 lit. c), d) GDRP. The provider is thereby obligated to act in accordence with the EU data protection standards.

In order to protect ourselves against fraud, we may process these data to identify atypical order transactions (e.g. if the same address is given in a large number of simultaneous orders using different customer accounts).  This serves the protection of legitimate interests within the meaning of Art. 6 para. 1 lit f) GDPR.

When you order goods, we transfer the data required for delivery to a transport company for the purpose of delivery and notification.

We transfer the payment data to the payment service provider selected by you or commissioned by us or to the bank commissioned with the payment. If you already hold an account with a payment service provider, you will be asked to log in during ordering process. In this case it processes your data and its privacy policy applies.

The legal basis for data processing is Art. 6 para. 1 lit. b) GDPR.

We reserve the right to use your data beyond the end of the contract on the basis of legitimate interests within the meaning of Art. 6 para. 1 lit. f) GDPR.

This is in particular to increase customer loyalty through advertising. For this purpose, we may send you offers and information by letter post, as well as - insofar as we are permitted within the scope of § 7 para. 3 UWG - direct advertising for our own similar goods or services by e-mail. If necessary, we transfer your data (name and address) to a service provider, who processes them on our behalf in order to send the advertising mailings. You can object to the processing of your data for this purpose at any time under the given contact information.

Furthermore, we transfer the invoice data to a tax office for the purpose of financial accounting. Our legitimate interest is the reduction of administrative expenses within our company and effective and professional accounting by specialists.

Due to legal obligation we transmit your data contained in the invoice to the tax authorities Art. 6 para. 1 lit. c) GDPR.

After the contract has been completed, we restrict the processing of your data for further use and erase them after expiry of the retention periods under tax and commercial law, unless you have freely given your consent for further use.

You can use  "Paypal-Login". This is a service of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

After clicking the Paypal button you will be redirected to the Paypal login page. The plugin establishes a connection between Paypal servers and the browser or device you are using. Your Paypal account and our shop are linked. We receive from Paypal the information we need to identify you and complete your order, such as your name, e-mail address, billing and shipping address, payment information, such as your credit card information and, if applicable, your date of birth.

Our legitimate interest in the use of this service is the simplification of the registration process for our offers and thus the increase of user convenience.

We point out that we have no further knowledge of the content or use of your transferred data. Further information can be found in Paypal's privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_DE