We take the protection of your personal data very seriously. In the following, we inform you about the circumstances under which data is stored and how this data is used.
1. General informations
The website www.proasyl.de („website“) is an offer of the Förderverein PRO ASYL e.V. – Arbeitsgemeinschaft für Flüchtlinge (hereinafter „we“/„us“).
The following information provides a simple overview of what happens to your personal data when you visit our website. Our website can be used without entering personal data. Different regulations may apply to the use of individual services on this site, which are explained separately below (see, among other things, cookies).
Your personal data – if provided to us – such as first name, last name, address, e‑mail address, telephone number, will be processed by us exclusively in accordance with the provisions of the General Data Protection Rules (GDPR) and the German Federal Data Protection Act (BDSG-neu). Data is personal or personal-relatable if it can be clearly assigned to a specific natural person.
You can access this data protection information at any time under the heading „Data privacy“ on our website.
2. Name and address of the controller
The controller for the processing on this website is the
Förderverein PRO ASYL e.V. – Working Group for Refugees
P.B. 160624
60069 Frankfurt am Main
Tel.: 069/ 24 23 14 – 0
Fax: 069/24 23 14 – 72
E Mail: proasyl@proasyl.de
Legally represented by Dr. Beate Wagner (Chairman), Mr. Tim Kliebe (Treasurer) and Ms Helen Rezene & Mr. Karl Kopp (Managing Directors).
III. Data privacy officer
General inquiries regarding data protection, such as the exercise of your data subject rights, should be sent to the following e‑mail address, from which your inquiry will be redirected to the data protection officer and our data protection team:
If you have any questions about the protection of your data, you can contact our data privacy officer:
datenschutzbeauftragter@proasyl.de
Confidential data protection inquiries can be sent directly to our data protection officer by mail or you may call him. His name and contact details are:
Ronald Baranowski (DPO TÜV, external data privacy officer)
SIX Datenschutz GmbH
Kasseler Straße 30
61118 Bad Vilbel
T: +49 6101 982 94 22
M: +49 170 557 09 38
F: +49 6101 982 94 24
- processing of personal data
- PROVISION OF THE WEBSITE AND CREATION OF LOG FILES
- a) Description and scope of data processing
For technical reasons, the following data transmitted by your browser is automatically stored each time you visit our website:
- information about the type of browser and the version used
- your operating system
- your internet service provider
- your IP address
- date and time of access
- websites from which the user’s system accesses our website.
Our system stores your personal data in the log files. This data is not stored with other personal data concerning you.
- b) Legal basis for data processing
The legal basis for the temporary processing of the data and the log files is Art. 6 (1) lit. f GDPR, our legitimate interests.
- c) Purpose of the data processing
The temporary processing of your IP address by our system is necessary to enable the provision of the website on your terminal device. Furthermore, we use your personal data to optimise our website and to ensure the security of our IT systems. This also results in our legitimate interest in data processing. Your data will not be processed for marketing purposes.
- d) Duration of storage
The aforementioned personal data will be deleted as soon as they are no longer required to achieve the processing purpose. This is the case with data processing for the provision of the website when you end the respective session.
The log files are deleted after seven days. Longer storage is only possible if your IP address is deleted or alienated so that it is no longer possible to draw conclusions about your person.
- e) Possibility of objection and elimination
There is no possibility to object to this data processing, as the processing of the data is absolutely necessary for the provision of the website.
- COOKIES
cookie consent management
- Description and scope of data processing
To obtain, manage and optimise your consent to the use of cookies and other services to operate our website, we use the service of Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg (hereinafter “Borlabs”).
- b) Legal basis for data processing
We use the service on the legal basis of Art. 6 (1) lit. c GDPR, as we are legally obliged to ensure the data protection-compliant operation of our website and its functions. Processing outside the EU does not take place.
- c) Purpose of the data processing
Before the functions of the website can be fully used, Borlabs obtains the necessary consents from the user in accordance with data protection law. You have the option to give your consent for all services or only for certain services. Borlabs manages these and you have the right to revoke your consent at any time. You can adjust your consent yourself in the so-called privacy settings. The use of this service requires the processing of your IP address and the storage of your preferences regarding the services to be used.
- d) Duration of storage, possibility of objection and elimination
The data will be stored for the duration of your consent (until you revoke it).
Session-cookies
- a) Description and scope of data processing
We use so-called session cookies on our website, which serve to make our website more user-friendly for you. Cookies are small text files that your internet browser installs on your end device.
- b) Legal basis for data processing
The legal basis for the processing of your personal data using cookies is Art. 6 (1) lit. f GDPR.
- c) Purpose of data processing
We use these technically necessary cookies to optimise the use of the website for you. This is our legitimate interest. Otherwise, we would not be able to offer you some of the functions of our website, such as the shopping basket function, as these require your web browser to be recognised after a page change.
We do not use the personal data collected by technically necessary cookies to create user profiles.
- d) Duration of storage, possibility of objection and removal
Cookies are stored on the user’s computer and transmitted to our site by the user. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.
- NEWSLETTER
- a) Description and scope of data processing
On our website, we give you the option to subscribe to our free newsletter. In order to be able to send it to you, we need your email address when you register. Furthermore, we process your IP address, the date and time of your registration. During the registration process, your consent to the processing of your personal data is obtained and reference is made to this data protection declaration. Your email address will also be transmitted to our order processor, who will send the newsletter.
- b) Legal basis for data processing
The legal basis for the processing of personal data after registration for the newsletter is the existence of consent in accordance with Art. 6 (1) lit. a GDPR.
- c) Purpose of the data processing
The purpose of processing the email address is to send you the newsletter. In doing so, we check the email address you have provided to see whether you are actually the actual owner or whether the owner of the email address has consented to receiving the newsletter. We process your IP address as well as the date and time of your registration for our security in case a third party registers on our website without your knowledge or misuses your personal data.
- d) Duration of storage
Personal data is deleted when it is no longer required to achieve the purpose for which it was collected because you have unsubscribed. Your e‑mail address will be deleted immediately. Other data collected during the registration process, such as your IP address and the date and time of your registration, will be deleted after seven days as part of our internal technical deletion cycle.
- e) Right of withdrawal, Art. 7 GDPR
You can informally revoke your consent at any time. To do so, use the „unsubscribe“ function via the link contained in each newsletter.
After receipt of your revocation, your data used for sending the newsletter will be deleted immediately.
- NEWSLETTER-TRACKING
- a) Description and scope of data processing
So-called „web beacons“ (tracking pixels) are integrated in our e‑mail newsletter. This is a pixel-sized image file that records certain data when you open the newsletter, such as the time of retrieval, your IP address, details of the email programme used and which link you followed, and sends it to a server. The name of the image file is individualised for each newsletter recipient by appending a unique ID. This enables us to register which ID belongs to which e‑mail address and to determine which newsletter recipient has just opened or is reading the e‑mail.
- Legal basis for data processing
The legal basis for the use of „web-beacons“ is your consent in accordance with Art. 6 (1) lit. a GDPR.
- Purpose of data processing
The tracking pixels enable us to identify when an email was opened and which link the recipient followed. We use this information to continuously improve our newsletter and to adapt it to your personal wishes and needs. These purposes are also our legitimate interest in processing your personal data.
- d) Duration of storage
We store the data collected through tracking for a maximum of seven days. After that, the data will be deleted. Furthermore, all data collected in connection with the tracking will be deleted within seven days at the latest after you have revoked the tracking.
- e) Right of withdrawal, Art. 7 GDPR
You can informally revoke your consent at any time. To do so, use the „unsubscribe“ function via the link contained in each newsletter.
After receipt of your revocation, your data used for sending the newsletter will be deleted immediately.
- contact
- a) Description and scope of data processing
On our website, we offer you the opportunity to contact us via a corresponding form. For this purpose, the information you provide in the contact form will be transmitted to us and processed for the purpose of processing your request.
The following data will be collected at the time of your request:
- Your first and last name
- Your e‑mail address
- Subject and text of the enquiry
- Optional: address and telephone number
The following data is also processed at the time your request is sent:
- Your IP address
- Date and time of sending your request
- b) Legal basis for data processing
The legal basis for processing the data transmitted in the course of sending the contact form is Art. 6 (1) litt. b and f GDPR, as the data is necessary for the implementation of pre-contractual measures, which are carried out at the request of the data subject. In addition, we have the legitimate interest to secure ourselves in the event that the contact options granted or our IT systems are abused by the contact.
- c) Purpose of data processing
We process your personal data only for the purpose of processing your enquiry.
- d) Duration of storage
We delete your personal data when they are no longer required to achieve the purpose for which they were processed.
For personal data that has been sent to us in the context of your contact via the contact form, this is the case when the respective conversation with you has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been clarified.
The additional personal data processed during the sending process will be deleted after a period of seven days.
- e) Possibility of objection and removal in accordance with Art. 21 GDPR
You have the possibility at any time to object to the processing of your personal data in accordance with Art. 21 GDPR. In such a case, the conversation cannot be continued. Please send your objection to datenschutzbeauftragter(at)proasyl.de. In this case, the personal data processed during the communication will be deleted.
- tracking for analysis and optimisation purposes
GOOGLE ANALYTICS
- a) Description and scope of data processing
This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter: Google Analytics).
Google Analytics uses so-called „cookies“. These are text files that are stored on your computer and enable an analysis of your use of the website.
The information generated by the cookie about your use of the website, such as
- Browser type/version,
- operating system used,
- Referrer URL (the previously visited page),
- host name of the accessing computer (IP address),
- time of the server request,
are generally transferred to a Google server in the USA and stored there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. We have also extended Google Analytics on this website with the code „anonymizeIP“. This guarantees the masking of your IP address so that all data is collected anonymously. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=de).
- b) Legal basis for data processing
The legal basis for the processing of data is your consent in accordance with Art. 6 (1) lit. a GDPR.
We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
- c) Purpose of the data processing
We use the data obtained to determine how you have used our website. This helps us to optimise the website and to continually improve its user-friendliness. These purposes are also our legitimate interest for processing your personal data.
- d) Duration of storage
We delete your personal data when they are no longer required to achieve the purpose for which they were processed. This is the case after seven days.
- e) Possibility of objection and removal according to Art. 21 GDPR
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which will prevent the collection of your data during future visits to this website: Deactivate Google Analytics.
You can find more information on how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
GOOGLE TAG MANAGER
- a) Description and scope of data processing
This website uses the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
In this context, Google Tag Manager stores cookies on your computer and, insofar as web tracking tools are run using Google Tag Manager, analyses your surfing behaviour (so-called „tracking“). This data sent by individual tags integrated in Google Tag Manager is merged, stored and processed by Google Tag Manager under a uniform user interface. All integrated „tags“ are listed separately again in this data protection information. When using our website with activated integration of tags from Google Tag Manager, data, such as in particular your IP address and your user activities, are transmitted to servers of Google Ireland Limited and processed and stored outside the European Union, e.g. in the USA.
Google will use this information on our behalf for the purpose of evaluating your visit to this website, compiling reports on website activity and providing us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Tag Manager will be transmitted to Google Ireland Limited and will not be merged with any other data held by Google Ireland Limited.
- b) Legal basis for data processing
The storage and analysis of the data takes place on the basis of Art. 6 (1) lit. a GDPR (your consent), either in the context of registration with Google (opening of a Google account and acceptance of the data protection information implemented there) or, if you have not registered with Google, by explicit consent when opening our site. You can revoke your consent at any time.
- c) Purpose of data processing
Google Tag Manager provides a technical platform for executing and bundling other web services and web tracking programmes by means of so-called „tags“.
- d) Duration of storage
We delete your personal data when they are no longer required to achieve the purpose for which they were processed. This is the case after seven days.
- e) Possibility of objection and removal according to Art. 21 GDPR
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which will prevent the collection of your data during future visits to this website: Deactivate Google Analytics. More informations you may find here: https://support.google.com/analytics/answer/6004245?hl=de.
- TRACKING FOR MARKETING PURPOSES
Google Remarketing/Google AdWords/Doubleclick
- a) Description and scope of data processing
We have integrated Google Remarketing services on our website. Google Remarketing is a function of Google AdWords that enables a company to display advertisements to Internet users who have previously visited the company’s website. The integration of Google Remarketing thus allows a company to create user-related advertising and consequently to display interest-relevant advertisements to the Internet user.
The operating company of Google Remarketing/Google AdWords is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Remarketing sets a cookie on the information technology system of the data subject. What cookies are has already been explained above. The cookie enables Google to recognise the visitor to our website when he or she subsequently visits websites that are also members of the Google advertising network. Each time a website is accessed on which the Google Remarketing service has been integrated, the internet browser of the person concerned automatically identifies itself to Google. Within the scope of this technical procedure, Google obtains knowledge of personal data, such as the IP address or the user’s surfing behaviour, which Google uses, among other things, to display interest-relevant advertising.
By means of the cookie, personal information, such as the websites visited by the person concerned, is stored. Each time the data subject visits our website, personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the United States of America (USA). This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical procedure to third parties.
- b) Legal basis for data processing
The processing is carried out in accordance with your consent (Art. 6 (1) lit. a GDPR). If you have given your consent, you can revoke it at any time in the cookie settings.
- c) Purpose of the data processing
The purpose of Google Remarketing is the display of interest-relevant advertising. Google Remarketing enables us to display advertisements via the Google advertising network or to have them displayed on other Internet pages, which are tailored to the individual needs and interests of Internet users.
- d) Duration of storage
The storage period is XXXX months.
- e) Possibility of objection and removal according to Art. 21 GDPR
The data subject can prevent the setting of cookies by our website, as already described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the data subject. In addition, a cookie already set by Google Analytics can be deleted at any time via the internet browser or other software programmes.
Furthermore, the data subject has the option to object to interest-based advertising by Google. To do this, the data subject must call up the link www.google.de/settings/ads from any of the internet browsers he or she uses and make the desired settings there.
Further information and the applicable data protection provisions of Google can be found at www.google.de/intl/de/policies/privacy/.
- SCHRIFTARTEN
For the graphical uniform display of fonts, we use the fonts of the providers Adobe Systems Software Ireland, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland and Google Webfonts (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
Only static elements are used here. This means that the fonts are loaded and installed initially by us and that no personal data is required for the operation of this service and is not transmitted to the providers. If these services were not used statically but dynamically, technical data (e.g. your IP address) would be forwarded to the respective service provider for the construction of the page view and the display of the fonts in your browser.
The use of the above-mentioned services is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of the legal basis of Art. 6 (1) lit. f GDPR.
- SOCIAL MEDIA BUTTONS with „SHARIFF“
On our website we use the c’t project „Shariff“ developed by Heise.de. Through this, we want to avoid a comprehensive collection and evaluation of your visit by providers of social media/social sharing functions. Shariff replaces the usual share buttons of the social networks and thus protects your surfing behaviour. Shariff only integrates the share buttons of the social networks listed below as graphics into our website. The graphic contains a link to the corresponding social network.
Without the use of Shariff, the usual social media buttons would transmit your data to the social networks with every page view and provide them with information about your surfing behaviour, regardless of whether you are logged in or a member of the social network. A Shariff button, on the other hand, establishes direct contact between the social network and you only when you actively click on the Share button. Without clicking the Shariff button, no exchange takes place between the social network and you. In this way, Shariff prevents you from leaving a digital trail simply by visiting the website.
Further information about the c’t project „Shariff“ is available at http://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz2467514.html.
We integrate the following social networks with Shariff on our website:
- Facebook components
- Twitter recommendation components
- Instagram components
For the purpose and scope of the data collection and the further processing and use of the data by the providers on their pages, as well as your rights in this regard and setting options for protecting your privacy, please refer to the providers‘ data protection notices at:
- Facebook http://www.facebook.com/policy.php
- Twitter https://twitter.com/privacy
- Instagram https://help.instagram.com/155833707900388
- possibiltiy of online donation with “FUNDRAISINGBOX”
- a) Description and scope of data processing
On a subpage of our website, we give you the opportunity to donate to us by providing your personal data. For the transmission of your payment data, we use the „Fundraisingbox“ service of Wikando GmbH, Schießgrabenstr. 32, 86150 Augsburg, Germany. Personal data required for online donations via the online form are your first and last name, the desired form of address, your address, your e‑mail address and your credit card details or bank account details, if you choose direct debit, as well as the donation amount, the donation frequency and a keyword for allocating the donation. Optionally, you can enter your telephone number, ask for a donation receipt and/or state your company if you wish to donate on its behalf. This data is stored and processed for us on servers of Wikando GmbH so that we can view the donation data you entered in the online form and provide you with a donation receipt upon request. Your data will not be passed on to third parties. With the online donation on the website, we will also save your IP address and the date and time of submission of the donation form.
- b) Legal basis for data processing
The processing of the aforementioned personal data is necessary for the initiation and fulfilment of the donation contract that you conclude with us via the online form. The legal basis for the processing of your personal data is Art. 6 (1) lit. b GDPR.
The legal basis for the collection and storage of your IP address and the processing of your data by Wikando is based on Art. 6 (1) lit. f GDPR.
- c) Purpose of data processing
The personal data collected when entering the online form are necessary for the execution of the donation contract, within the framework of which the user commits to paying a donation amount chosen by him/herself.
We process your IP address for our security in case a third party registers on our website without your knowledge or misuses your personal data.
- d) Duration of storage
As soon as we no longer need your personal data for the aforementioned purpose, it will be deleted immediately. This is usually the case after the expiry of the three-year limitation period, beginning with the end of the year in which you donated to us.
As we are also subject to statutory retention obligations, your personal data will be blocked after the statute of limitations has expired and deleted after a total of ten years, beginning with the end of the calendar year in which the donation was made.
Your IP address will be deleted within seven days after the online donation has been made.
- e) Possibility of objection and removal according to Art. 21 GDPR
There is no possibility to object to this data processing, as the processing of the data is mandatory for abuse prevention and tracking.
- f) Consequences of not providing your personal data
You are not obliged to provide your data for the above-mentioned purposes. However, in the event that you refrain from providing it, we cannot guarantee that we will be able to offer you the benefits associated with a gift agreement in the desired form.
- possibility of membership
- a) Description and scope of data processing
On our website, we give you the opportunity to become a member by providing us with your personal data. Personal data that we process by means of the registration form are your first and last name, your address, your e‑mail address, your account details and the amount of your membership fee. Furthermore, you have the option to indicate whether you are a pupil or student and would like to take advantage of a reduced membership fee. In addition, you can request a donation receipt from us by entering the appropriate information.
Your data will not be passed on to third parties. By registering on this site, we will also store your IP address and the date and time of your registration.
- b) Legal basis for data processing
The processing of the aforementioned personal data is necessary for the initiation and fulfilment of the membership relationship that you enter into with us via the registration function. The legal basis for the processing of your personal data is Art. 6 (1) lit. b GDRP.
The collection and storage of your IP address is based on Art. 6 (1) lit. f GDPR.
- c) Purpose of data processing
The personal data collected during registration is necessary for the implementation of the membership relationship.
We process your IP address for our security in case a third party registers on our website without your knowledge or misuses your personal data. This is also our legitimate interest in processing. We do not pass on data to third parties or compare it with data collected by other website services.
- d) Duration of storage
As soon as we no longer need your personal data for the aforementioned purpose, it will be deleted immediately. This is usually the case after the expiry of the limitation period.
Since we are also subject to statutory retention obligations, your personal data will be blocked after the statute of limitations has expired and deleted after a total of ten years, beginning with the end of the calendar year in which your membership was terminated.
- e) Possibility of objection and removal in accordance with Art. 21 GDPR
There is no possibility to object to the processing of the IP address, as it is absolutely necessary for abuse prevention and tracking.
- f) Consequences of not providing your personal data
You are not obliged to provide your data for the above-mentioned purposes. However, in the event that you refrain from providing it, we cannot guarantee that we will be able to offer you the benefits associated with membership in the desired form.
- participation in the signature campaign
- a) Description and scope of data processing
We process your personal data for participation in our signature campaigns for the purpose of submission to the Bundestag. Your first and last name, your address and your e‑mail address are processed.
- b) Legal basis for data processing
The processing is based on Art. 6 (1) lit. f GDPR.
- c) Purpose of the data processing
The processing of your personal data is carried out to protect our legitimate interests, which result from our public mandate – the protection and safeguarding of refugee and human rights.
- d) Duration of storage
Your data will only be processed as long as it is necessary for the aforementioned purposes or as long as legal retention periods oblige us to process it. After submission of the list, the data will be deleted after 3 years.
- e) Right of objection and removal according to Art. 21 GDPR
You have the right to object to processing at any time.
- f) Consequences of not providing your personal data
You are not obliged to provide your data for the aforementioned purposes. If you do not provide the data, we will not be able to include you in the signature campaign.
- order of articles
- a) Description and scope of data processing
On our website, we give you the opportunity to order items from us by providing your personal data. Personal data that is processed when you make an online donation using the registration form is your first name and surname, your address, your e‑mail address and optional details such as your telephone number or company name if you are placing the order for your company.
Your data will not be passed on to third parties. When you register on this site, we will also store your IP address and the date and time of your registration.
- b) Legal basis for data processing
The processing of the aforementioned personal data is necessary for the initiation and fulfilment of the gift or purchase contract that you conclude with us via the registration function. The legal basis for the processing of your personal data is Art. 6 (1) lit. b GDPR.
The collection and storage of your IP address is based on Art. 6 (1) lit. f GDPR.
- c) Purpose of data processing
The personal data collected during registration are necessary for the execution of the gift or purchase contract.
We process your IP address for our security in case a third party registers on our website without your knowledge or misuses your personal data. This is also our legitimate interest in processing. We do not pass on data to third parties or compare it with data collected by other website services.
- d) Duration of storage
As soon as we no longer need your personal data for the aforementioned purpose, it will be deleted immediately. This is usually the case after the expiry of the limitation period.
Since we are also subject to statutory retention obligations, your personal data will be blocked after the statute of limitations has expired and deleted after a total of ten years, beginning with the end of the calendar year in which you placed your order with us.
- e) Possibility of objection and removal according to Art. 21 GDPR
There is no possibility to object to the processing of the IP address, as the processing of the data is mandatory for abuse prevention and tracking.
- f) Consequences of not providing your personal data
You are not obliged to provide your data for the above-mentioned purposes. However, in the event that you refrain from providing it, we cannot guarantee that we will be able to offer you the benefits associated with a gift or purchase contract in the desired form.
- your rights as a data subject
If your personal data is processed by us, you are a data subject within the meaning of the GDPR, so you have the following rights vis-à-vis us:
- RIGHT OF ACCESS
You have the right to request information about your personal data processed by us at any time. This also includes information about the origin, recipients or categories of recipients to whom we transfer your data, as well as the purposes for which we process your personal data.
- RIGHT TO RECTIFICATION
You have the right to request that we correct and/or complete your personal data without undue delay if your personal data is inaccurate or incomplete.
- RIGHT TO ERASURE OR RESTRICTION OF PROCESSING
You may request that we delete your personal data without delay. We are obliged to carry out the deletion without delay. Something else only applies if we are obliged to continue processing your personal data on the basis of contractual and/or legal regulations. This is the case, for example, if we are prohibited from deleting your data by tax law. In such a case, we restrict the processing and delete the personal data in question immediately after the expiry of the retention period.
- RIGHT TO DATA PORTABILITY
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format, provided that this is technically possible. You also have the right to transfer this data to another person responsible without hindrance from us, if you so wish.
- AUTOMATED DECISION-MAKING IN INDIVIDUAL CASES INCLUDING PROFILING
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
- RIGHT TO COMPLAIN TO A SUPERVISORY AUTHORITY
You have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR. The competent supervisory authority for us is:
The Hessian Data Protection Commissioner
Postfach 3163
65021 Wiesbaden
E Mail: Poststelle@datenschutz.hessen.de
Telephone: +49 611 1408 – 0, Fax: +49 611 1408 – 900.
We will be happy to provide you with information about the personal data we have stored about you at any time. Please send us your request by letter, e‑mail or fax to the postal address, e‑mail address or fax number given in the imprint. You will then receive written information immediately.
- UPDATE
We reserve the right to change our data protection measures as far as this becomes necessary due to technical development or due to changed legislation or jurisdiction. In these cases, we will also adapt our data protection information accordingly. Please therefore note the current version of our data protection information.
Status: April 3rd, 2023
- General informations
The website www.proasyl.de („website“) is an offer of the Förderverein PRO ASYL e.V. – Arbeitsgemeinschaft für Flüchtlinge (hereinafter „we“/„us“).
The following information provides a simple overview of what happens to your personal data when you visit our website. Our website can be used without entering personal data. Different regulations may apply to the use of individual services on this site, which are explained separately below (see, among other things, cookies).
Your personal data – if provided to us – such as first name, last name, address, e‑mail address, telephone number, will be processed by us exclusively in accordance with the provisions of the General Data Protection Rules (GDPR) and the German Federal Data Protection Act (BDSG-neu). Data is personal or personal-relatable if it can be clearly assigned to a specific natural person.
You can access this data protection information at any time under the heading „Data privacy“ on our website.
- Name and address of the controller
The controller for the processing on this website is the
Förderverein PRO ASYL e.V. – Working Group for Refugees
Moselstrasse 4
60329 Frankfurt am Main
Tel.: 069/ 24 23 14 – 0
Fax: 069/24 23 14 – 72
E Mail: proasyl@proasyl.de
Legally represented by Dr. Beate Wagner (Chairman), Mr. Tim Kliebe (Treasurer) and Ms Helen Rezene & Mr. Karl Kopp (Managing Directors).
III. Data privacy officer
General inquiries regarding data protection, such as the exercise of your data subject rights, should be sent to the following e‑mail address, from which your inquiry will be redirected to the data protection officer and our data protection team:
If you have any questions about the protection of your data, you can contact our data privacy officer:
datenschutzbeauftragter@proasyl.de
Confidential data protection inquiries can be sent directly to our data protection officer by mail or you may call him. His name and contact details are:
Ronald Baranowski (DPO TÜV, external data privacy officer)
SIX Datenschutz GmbH
Kasseler Straße 30
61118 Bad Vilbel
T: +49 6101 982 94 22
M: +49 170 557 09 38
F: +49 6101 982 94 24
- processing of personal data
- PROVISION OF THE WEBSITE AND CREATION OF LOG FILES
- a) Description and scope of data processing
For technical reasons, the following data transmitted by your browser is automatically stored each time you visit our website:
- information about the type of browser and the version used
- your operating system
- your internet service provider
- your IP address
- date and time of access
- websites from which the user’s system accesses our website.
Our system stores your personal data in the log files. This data is not stored with other personal data concerning you.
- b) Legal basis for data processing
The legal basis for the temporary processing of the data and the log files is Art. 6 (1) lit. f GDPR, our legitimate interests.
- c) Purpose of the data processing
The temporary processing of your IP address by our system is necessary to enable the provision of the website on your terminal device. Furthermore, we use your personal data to optimise our website and to ensure the security of our IT systems. This also results in our legitimate interest in data processing. Your data will not be processed for marketing purposes.
- d) Duration of storage
The aforementioned personal data will be deleted as soon as they are no longer required to achieve the processing purpose. This is the case with data processing for the provision of the website when you end the respective session.
The log files are deleted after seven days. Longer storage is only possible if your IP address is deleted or alienated so that it is no longer possible to draw conclusions about your person.
- e) Possibility of objection and elimination
There is no possibility to object to this data processing, as the processing of the data is absolutely necessary for the provision of the website.
- COOKIES
cookie consent management
- Description and scope of data processing
To obtain, manage and optimise your consent to the use of cookies and other services to operate our website, we use the service of Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg (hereinafter “Borlabs”).
- b) Legal basis for data processing
We use the service on the legal basis of Art. 6 (1) lit. c GDPR, as we are legally obliged to ensure the data protection-compliant operation of our website and its functions. Processing outside the EU does not take place.
- c) Purpose of the data processing
Before the functions of the website can be fully used, Borlabs obtains the necessary consents from the user in accordance with data protection law. You have the option to give your consent for all services or only for certain services. Borlabs manages these and you have the right to revoke your consent at any time. You can adjust your consent yourself in the so-called privacy settings. The use of this service requires the processing of your IP address and the storage of your preferences regarding the services to be used.
- d) Duration of storage, possibility of objection and elimination
The data will be stored for the duration of your consent (until you revoke it).
Session-cookies
- a) Description and scope of data processing
We use so-called session cookies on our website, which serve to make our website more user-friendly for you. Cookies are small text files that your internet browser installs on your end device.
- b) Legal basis for data processing
The legal basis for the processing of your personal data using cookies is Art. 6 (1) lit. f GDPR.
- c) Purpose of data processing
We use these technically necessary cookies to optimise the use of the website for you. This is our legitimate interest. Otherwise, we would not be able to offer you some of the functions of our website, such as the shopping basket function, as these require your web browser to be recognised after a page change.
We do not use the personal data collected by technically necessary cookies to create user profiles.
- d) Duration of storage, possibility of objection and removal
Cookies are stored on the user’s computer and transmitted to our site by the user. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.
- NEWSLETTER
- a) Description and scope of data processing
On our website, we give you the option to subscribe to our free newsletter. In order to be able to send it to you, we need your email address when you register. Furthermore, we process your IP address, the date and time of your registration. During the registration process, your consent to the processing of your personal data is obtained and reference is made to this data protection declaration. Your email address will also be transmitted to our order processor, who will send the newsletter.
- b) Legal basis for data processing
The legal basis for the processing of personal data after registration for the newsletter is the existence of consent in accordance with Art. 6 (1) lit. a GDPR.
- c) Purpose of the data processing
The purpose of processing the email address is to send you the newsletter. In doing so, we check the email address you have provided to see whether you are actually the actual owner or whether the owner of the email address has consented to receiving the newsletter. We process your IP address as well as the date and time of your registration for our security in case a third party registers on our website without your knowledge or misuses your personal data.
- d) Duration of storage
Personal data is deleted when it is no longer required to achieve the purpose for which it was collected because you have unsubscribed. Your e‑mail address will be deleted immediately. Other data collected during the registration process, such as your IP address and the date and time of your registration, will be deleted after seven days as part of our internal technical deletion cycle.
- e) Right of withdrawal, Art. 7 GDPR
You can informally revoke your consent at any time. To do so, use the „unsubscribe“ function via the link contained in each newsletter.
After receipt of your revocation, your data used for sending the newsletter will be deleted immediately.
- NEWSLETTER-TRACKING
- a) Description and scope of data processing
So-called „web beacons“ (tracking pixels) are integrated in our e‑mail newsletter. This is a pixel-sized image file that records certain data when you open the newsletter, such as the time of retrieval, your IP address, details of the email programme used and which link you followed, and sends it to a server. The name of the image file is individualised for each newsletter recipient by appending a unique ID. This enables us to register which ID belongs to which e‑mail address and to determine which newsletter recipient has just opened or is reading the e‑mail.
- Legal basis for data processing
The legal basis for the use of „web-beacons“ is your consent in accordance with Art. 6 (1) lit. a GDPR.
- Purpose of data processing
The tracking pixels enable us to identify when an email was opened and which link the recipient followed. We use this information to continuously improve our newsletter and to adapt it to your personal wishes and needs. These purposes are also our legitimate interest in processing your personal data.
- d) Duration of storage
We store the data collected through tracking for a maximum of seven days. After that, the data will be deleted. Furthermore, all data collected in connection with the tracking will be deleted within seven days at the latest after you have revoked the tracking.
- e) Right of withdrawal, Art. 7 GDPR
You can informally revoke your consent at any time. To do so, use the „unsubscribe“ function via the link contained in each newsletter.
After receipt of your revocation, your data used for sending the newsletter will be deleted immediately.
- contact
- a) Description and scope of data processing
On our website, we offer you the opportunity to contact us via a corresponding form. For this purpose, the information you provide in the contact form will be transmitted to us and processed for the purpose of processing your request.
The following data will be collected at the time of your request:
- Your first and last name
- Your e‑mail address
- Subject and text of the enquiry
- Optional: address and telephone number
The following data is also processed at the time your request is sent:
- Your IP address
- Date and time of sending your request
- b) Legal basis for data processing
The legal basis for processing the data transmitted in the course of sending the contact form is Art. 6 (1) litt. b and f GDPR, as the data is necessary for the implementation of pre-contractual measures, which are carried out at the request of the data subject. In addition, we have the legitimate interest to secure ourselves in the event that the contact options granted or our IT systems are abused by the contact.
- c) Purpose of data processing
We process your personal data only for the purpose of processing your enquiry.
- d) Duration of storage
We delete your personal data when they are no longer required to achieve the purpose for which they were processed.
For personal data that has been sent to us in the context of your contact via the contact form, this is the case when the respective conversation with you has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been clarified.
The additional personal data processed during the sending process will be deleted after a period of seven days.
- e) Possibility of objection and removal in accordance with Art. 21 GDPR
You have the possibility at any time to object to the processing of your personal data in accordance with Art. 21 GDPR. In such a case, the conversation cannot be continued. Please send your objection to datenschutzbeauftragter(at)proasyl.de. In this case, the personal data processed during the communication will be deleted.
- tracking for analysis and optimisation purposes
GOOGLE ANALYTICS
- a) Description and scope of data processing
This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter: Google Analytics).
Google Analytics uses so-called „cookies“. These are text files that are stored on your computer and enable an analysis of your use of the website.
The information generated by the cookie about your use of the website, such as
- Browser type/version,
- operating system used,
- Referrer URL (the previously visited page),
- host name of the accessing computer (IP address),
- time of the server request,
are generally transferred to a Google server in the USA and stored there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. We have also extended Google Analytics on this website with the code „anonymizeIP“. This guarantees the masking of your IP address so that all data is collected anonymously. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=de).
- b) Legal basis for data processing
The legal basis for the processing of data is your consent in accordance with Art. 6 (1) lit. a GDPR.
We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
- c) Purpose of the data processing
We use the data obtained to determine how you have used our website. This helps us to optimise the website and to continually improve its user-friendliness. These purposes are also our legitimate interest for processing your personal data.
- d) Duration of storage
We delete your personal data when they are no longer required to achieve the purpose for which they were processed. This is the case after seven days.
- e) Possibility of objection and removal according to Art. 21 GDPR
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which will prevent the collection of your data during future visits to this website: Deactivate Google Analytics.
You can find more information on how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
GOOGLE TAG MANAGER
- a) Description and scope of data processing
This website uses the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
In this context, Google Tag Manager stores cookies on your computer and, insofar as web tracking tools are run using Google Tag Manager, analyses your surfing behaviour (so-called „tracking“). This data sent by individual tags integrated in Google Tag Manager is merged, stored and processed by Google Tag Manager under a uniform user interface. All integrated „tags“ are listed separately again in this data protection information. When using our website with activated integration of tags from Google Tag Manager, data, such as in particular your IP address and your user activities, are transmitted to servers of Google Ireland Limited and processed and stored outside the European Union, e.g. in the USA.
Google will use this information on our behalf for the purpose of evaluating your visit to this website, compiling reports on website activity and providing us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Tag Manager will be transmitted to Google Ireland Limited and will not be merged with any other data held by Google Ireland Limited.
- b) Legal basis for data processing
The storage and analysis of the data takes place on the basis of Art. 6 (1) lit. a GDPR (your consent), either in the context of registration with Google (opening of a Google account and acceptance of the data protection information implemented there) or, if you have not registered with Google, by explicit consent when opening our site. You can revoke your consent at any time.
- c) Purpose of data processing
Google Tag Manager provides a technical platform for executing and bundling other web services and web tracking programmes by means of so-called „tags“.
- d) Duration of storage
We delete your personal data when they are no longer required to achieve the purpose for which they were processed. This is the case after seven days.
- e) Possibility of objection and removal according to Art. 21 GDPR
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which will prevent the collection of your data during future visits to this website: Deactivate Google Analytics. More informations you may find here: https://support.google.com/analytics/answer/6004245?hl=de.
- TRACKING FOR MARKETING PURPOSES
Google Remarketing/Google AdWords/Doubleclick
- a) Description and scope of data processing
We have integrated Google Remarketing services on our website. Google Remarketing is a function of Google AdWords that enables a company to display advertisements to Internet users who have previously visited the company’s website. The integration of Google Remarketing thus allows a company to create user-related advertising and consequently to display interest-relevant advertisements to the Internet user.
The operating company of Google Remarketing/Google AdWords is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Remarketing sets a cookie on the information technology system of the data subject. What cookies are has already been explained above. The cookie enables Google to recognise the visitor to our website when he or she subsequently visits websites that are also members of the Google advertising network. Each time a website is accessed on which the Google Remarketing service has been integrated, the internet browser of the person concerned automatically identifies itself to Google. Within the scope of this technical procedure, Google obtains knowledge of personal data, such as the IP address or the user’s surfing behaviour, which Google uses, among other things, to display interest-relevant advertising.
By means of the cookie, personal information, such as the websites visited by the person concerned, is stored. Each time the data subject visits our website, personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the United States of America (USA). This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical procedure to third parties.
- b) Legal basis for data processing
The processing is carried out in accordance with your consent (Art. 6 (1) lit. a GDPR). If you have given your consent, you can revoke it at any time in the cookie settings.
- c) Purpose of the data processing
The purpose of Google Remarketing is the display of interest-relevant advertising. Google Remarketing enables us to display advertisements via the Google advertising network or to have them displayed on other Internet pages, which are tailored to the individual needs and interests of Internet users.
- d) Duration of storage
The storage period is XXXX months.
- e) Possibility of objection and removal according to Art. 21 GDPR
The data subject can prevent the setting of cookies by our website, as already described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the data subject. In addition, a cookie already set by Google Analytics can be deleted at any time via the internet browser or other software programmes.
Furthermore, the data subject has the option to object to interest-based advertising by Google. To do this, the data subject must call up the link www.google.de/settings/ads from any of the internet browsers he or she uses and make the desired settings there.
Further information and the applicable data protection provisions of Google can be found at www.google.de/intl/de/policies/privacy/.
- SCHRIFTARTEN
For the graphical uniform display of fonts, we use the fonts of the providers Adobe Systems Software Ireland, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland and Google Webfonts (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
Only static elements are used here. This means that the fonts are loaded and installed initially by us and that no personal data is required for the operation of this service and is not transmitted to the providers. If these services were not used statically but dynamically, technical data (e.g. your IP address) would be forwarded to the respective service provider for the construction of the page view and the display of the fonts in your browser.
The use of the above-mentioned services is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of the legal basis of Art. 6 (1) lit. f GDPR.
- SOCIAL MEDIA BUTTONS with „SHARIFF“
On our website we use the c’t project „Shariff“ developed by Heise.de. Through this, we want to avoid a comprehensive collection and evaluation of your visit by providers of social media/social sharing functions. Shariff replaces the usual share buttons of the social networks and thus protects your surfing behaviour. Shariff only integrates the share buttons of the social networks listed below as graphics into our website. The graphic contains a link to the corresponding social network.
Without the use of Shariff, the usual social media buttons would transmit your data to the social networks with every page view and provide them with information about your surfing behaviour, regardless of whether you are logged in or a member of the social network. A Shariff button, on the other hand, establishes direct contact between the social network and you only when you actively click on the Share button. Without clicking the Shariff button, no exchange takes place between the social network and you. In this way, Shariff prevents you from leaving a digital trail simply by visiting the website.
Further information about the c’t project „Shariff“ is available at http://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz2467514.html.
We integrate the following social networks with Shariff on our website:
- Facebook components
- Twitter recommendation components
- Instagram components
For the purpose and scope of the data collection and the further processing and use of the data by the providers on their pages, as well as your rights in this regard and setting options for protecting your privacy, please refer to the providers‘ data protection notices at:
- Facebook http://www.facebook.com/policy.php
- Twitter https://twitter.com/privacy
- Instagram https://help.instagram.com/155833707900388
- possibiltiy of online donation with “FUNDRAISINGBOX”
- a) Description and scope of data processing
On a subpage of our website, we give you the opportunity to donate to us by providing your personal data. For the transmission of your payment data, we use the „Fundraisingbox“ service of Wikando GmbH, Schießgrabenstr. 32, 86150 Augsburg, Germany. Personal data required for online donations via the online form are your first and last name, the desired form of address, your address, your e‑mail address and your credit card details or bank account details, if you choose direct debit, as well as the donation amount, the donation frequency and a keyword for allocating the donation. Optionally, you can enter your telephone number, ask for a donation receipt and/or state your company if you wish to donate on its behalf. This data is stored and processed for us on servers of Wikando GmbH so that we can view the donation data you entered in the online form and provide you with a donation receipt upon request. Your data will not be passed on to third parties. With the online donation on the website, we will also save your IP address and the date and time of submission of the donation form.
- b) Legal basis for data processing
The processing of the aforementioned personal data is necessary for the initiation and fulfilment of the donation contract that you conclude with us via the online form. The legal basis for the processing of your personal data is Art. 6 (1) lit. b GDPR.
The legal basis for the collection and storage of your IP address and the processing of your data by Wikando is based on Art. 6 (1) lit. f GDPR.
- c) Purpose of data processing
The personal data collected when entering the online form are necessary for the execution of the donation contract, within the framework of which the user commits to paying a donation amount chosen by him/herself.
We process your IP address for our security in case a third party registers on our website without your knowledge or misuses your personal data.
- d) Duration of storage
As soon as we no longer need your personal data for the aforementioned purpose, it will be deleted immediately. This is usually the case after the expiry of the three-year limitation period, beginning with the end of the year in which you donated to us.
As we are also subject to statutory retention obligations, your personal data will be blocked after the statute of limitations has expired and deleted after a total of ten years, beginning with the end of the calendar year in which the donation was made.
Your IP address will be deleted within seven days after the online donation has been made.
- e) Possibility of objection and removal according to Art. 21 GDPR
There is no possibility to object to this data processing, as the processing of the data is mandatory for abuse prevention and tracking.
- f) Consequences of not providing your personal data
You are not obliged to provide your data for the above-mentioned purposes. However, in the event that you refrain from providing it, we cannot guarantee that we will be able to offer you the benefits associated with a gift agreement in the desired form.
- possibility of membership
- a) Description and scope of data processing
On our website, we give you the opportunity to become a member by providing us with your personal data. Personal data that we process by means of the registration form are your first and last name, your address, your e‑mail address, your account details and the amount of your membership fee. Furthermore, you have the option to indicate whether you are a pupil or student and would like to take advantage of a reduced membership fee. In addition, you can request a donation receipt from us by entering the appropriate information.
Your data will not be passed on to third parties. By registering on this site, we will also store your IP address and the date and time of your registration.
- b) Legal basis for data processing
The processing of the aforementioned personal data is necessary for the initiation and fulfilment of the membership relationship that you enter into with us via the registration function. The legal basis for the processing of your personal data is Art. 6 (1) lit. b GDRP.
The collection and storage of your IP address is based on Art. 6 (1) lit. f GDPR.
- c) Purpose of data processing
The personal data collected during registration is necessary for the implementation of the membership relationship.
We process your IP address for our security in case a third party registers on our website without your knowledge or misuses your personal data. This is also our legitimate interest in processing. We do not pass on data to third parties or compare it with data collected by other website services.
- d) Duration of storage
As soon as we no longer need your personal data for the aforementioned purpose, it will be deleted immediately. This is usually the case after the expiry of the limitation period.
Since we are also subject to statutory retention obligations, your personal data will be blocked after the statute of limitations has expired and deleted after a total of ten years, beginning with the end of the calendar year in which your membership was terminated.
- e) Possibility of objection and removal in accordance with Art. 21 GDPR
There is no possibility to object to the processing of the IP address, as it is absolutely necessary for abuse prevention and tracking.
- f) Consequences of not providing your personal data
You are not obliged to provide your data for the above-mentioned purposes. However, in the event that you refrain from providing it, we cannot guarantee that we will be able to offer you the benefits associated with membership in the desired form.
- participation in the signature campaign
- a) Description and scope of data processing
We process your personal data for participation in our signature campaigns for the purpose of submission to the Bundestag. Your first and last name, your address and your e‑mail address are processed.
- b) Legal basis for data processing
The processing is based on Art. 6 (1) lit. f GDPR.
- c) Purpose of the data processing
The processing of your personal data is carried out to protect our legitimate interests, which result from our public mandate – the protection and safeguarding of refugee and human rights.
- d) Duration of storage
Your data will only be processed as long as it is necessary for the aforementioned purposes or as long as legal retention periods oblige us to process it. After submission of the list, the data will be deleted after 3 years.
- e) Right of objection and removal according to Art. 21 GDPR
You have the right to object to processing at any time.
- f) Consequences of not providing your personal data
You are not obliged to provide your data for the aforementioned purposes. If you do not provide the data, we will not be able to include you in the signature campaign.
- order of articles
- a) Description and scope of data processing
On our website, we give you the opportunity to order items from us by providing your personal data. Personal data that is processed when you make an online donation using the registration form is your first name and surname, your address, your e‑mail address and optional details such as your telephone number or company name if you are placing the order for your company.
Your data will not be passed on to third parties. When you register on this site, we will also store your IP address and the date and time of your registration.
- b) Legal basis for data processing
The processing of the aforementioned personal data is necessary for the initiation and fulfilment of the gift or purchase contract that you conclude with us via the registration function. The legal basis for the processing of your personal data is Art. 6 (1) lit. b GDPR.
The collection and storage of your IP address is based on Art. 6 (1) lit. f GDPR.
- c) Purpose of data processing
The personal data collected during registration are necessary for the execution of the gift or purchase contract.
We process your IP address for our security in case a third party registers on our website without your knowledge or misuses your personal data. This is also our legitimate interest in processing. We do not pass on data to third parties or compare it with data collected by other website services.
- d) Duration of storage
As soon as we no longer need your personal data for the aforementioned purpose, it will be deleted immediately. This is usually the case after the expiry of the limitation period.
Since we are also subject to statutory retention obligations, your personal data will be blocked after the statute of limitations has expired and deleted after a total of ten years, beginning with the end of the calendar year in which you placed your order with us.
- e) Possibility of objection and removal according to Art. 21 GDPR
There is no possibility to object to the processing of the IP address, as the processing of the data is mandatory for abuse prevention and tracking.
- f) Consequences of not providing your personal data
You are not obliged to provide your data for the above-mentioned purposes. However, in the event that you refrain from providing it, we cannot guarantee that we will be able to offer you the benefits associated with a gift or purchase contract in the desired form.
- your rights as a data subject
If your personal data is processed by us, you are a data subject within the meaning of the GDPR, so you have the following rights vis-à-vis us:
- RIGHT OF ACCESS
You have the right to request information about your personal data processed by us at any time. This also includes information about the origin, recipients or categories of recipients to whom we transfer your data, as well as the purposes for which we process your personal data.
- RIGHT TO RECTIFICATION
You have the right to request that we correct and/or complete your personal data without undue delay if your personal data is inaccurate or incomplete.
- RIGHT TO ERASURE OR RESTRICTION OF PROCESSING
You may request that we delete your personal data without delay. We are obliged to carry out the deletion without delay. Something else only applies if we are obliged to continue processing your personal data on the basis of contractual and/or legal regulations. This is the case, for example, if we are prohibited from deleting your data by tax law. In such a case, we restrict the processing and delete the personal data in question immediately after the expiry of the retention period.
- RIGHT TO DATA PORTABILITY
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format, provided that this is technically possible. You also have the right to transfer this data to another person responsible without hindrance from us, if you so wish.
- AUTOMATED DECISION-MAKING IN INDIVIDUAL CASES INCLUDING PROFILING
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
- RIGHT TO COMPLAIN TO A SUPERVISORY AUTHORITY
You have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR. The competent supervisory authority for us is:
The Hessian Data Protection Commissioner
Postfach 3163
65021 Wiesbaden
E Mail: Poststelle@datenschutz.hessen.de
Telephone: +49 611 1408 – 0, Fax: +49 611 1408 – 900.
We will be happy to provide you with information about the personal data we have stored about you at any time. Please send us your request by letter, e‑mail or fax to the postal address, e‑mail address or fax number given in the imprint. You will then receive written information immediately.
- UPDATE
We reserve the right to change our data protection measures as far as this becomes necessary due to technical development or due to changed legislation or jurisdiction. In these cases, we will also adapt our data protection information accordingly. Please therefore note the current version of our data protection information.
Status: April 3rd, 2023