Source: https://dgfs.de/en/info/privacy-policy.html
Timestamp: 2019-04-18 12:37:12+00:00

Document:
We are very delighted that you have shown interest in our society. Data protection is of a particularly high priority for the management of the DGfS e. V.. The use of the Internet pages of the DGfS e. V. is possible without any indication of personal data; however, if a data subject wants to use special services via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no statutory basis for such processing, we generally obtain consent from the data subject.
The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to the DGfS e. V.. By means of this data protection declaration, our society would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.
As the controller, the DGfS e. V. has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. For this reason, every data subject is free to transfer personal data to us via alternative means, e.g. by telephone.
The data protection declaration of the DGfS e. V. is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our data protection declaration should be legible and understandable for the general public, as well as our customers and business partners. To ensure this, we would like to first explain the terminology used.
The website of the DGfS e. V. collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files. Collected may be (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites, (5) the date and time of access to the Internet site, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) any other similar data and information that may be used in the event of attacks on our information technology systems.
When using these general data and information, the DGfS e. V. does not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver the content of our website correctly, (2) optimize the content of our website as well as its advertisement, (3) ensure the long-term viability of our information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. Therefore, the DGfS e. V. analyzes anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our society, and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.
On the website of the DGfS e. V., users are given the opportunity to subscribe to our society's newsletter. The input mask used for this purpose determines what personal data are transmitted, as well as when the newsletter is ordered from the controller.
The DGfS e. V. informs its members regularly by means of a newsletter about it's activities. The society's newsletter may only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers for the newsletter shipping. A confirmation e-mail will be sent to the e-mail address registered by a data subject for the first time for newsletter shipping, for legal reasons, in the double opt-in procedure. This confirmation e-mail is used to prove whether the owner of the e-mail address as the data subject is authorized to receive the newsletter.
The newsletter of the DGfS e. V. contains so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such e-mails, which are sent in HTML format to enable log file recording and analysis. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, the DGfS e. V. may see if and when an e-mail was opened by a data subject, and which links in the e-mail were called up by data subjects.
Such personal data collected in the tracking pixels contained in the newsletters are stored and analyzed by the controller in order to optimize the shipping of the newsletter, as well as to adapt the content of future newsletters even better to the interests of the data subject. These personal data will not be passed on to third parties. Data subjects are at any time entitled to revoke the respective separate declaration of consent issued by means of the double-opt-in procedure. After a revocation, these personal data will be deleted by the controller. The DGfS e. V. automatically regards a withdrawal from the receipt of the newsletter as a revocation.
The website of the DGfS e. V. contains information that enables a quick electronic contact to our society, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties.
If one of the aforementioned reasons applies, and a data subject wishes to request the erasure of personal data stored by the DGfS e. V., he or she may, at any time, contact any employee of the controller. An employee of DGfS e. V. shall promptly ensure that the erasure request is complied with immediately.
Where the controller has made personal data public and is obliged pursuant to Article 17(1) to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers processing the personal data that the data subject has requested erasure by such controllers of any links to, or copy or replication of, those personal data, as far as processing is not required. An employees of the DGfS e. V. will arrange the necessary measures in individual cases.
If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored by the DGfS e. V., he or she may at any time contact any employee of the controller. The employee of the DGfS e. V. will arrange the restriction of the processing.
In order to assert the right to data portability, the data subject may at any time contact any employee of the DGfS e. V..
The DGfS e. V. shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
If the DGfS e. V. processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing. This applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to the DGfS e. V. to the processing for direct marketing purposes, the DGfS e. V. will no longer process the personal data for these purposes.
In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her by the DGfS e. V. for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
In order to exercise the right to object, the data subject may contact any employee of the DGfS e. V.. In addition, the data subject is free in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to use his or her right to object by automated means using technical specifications.
If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) it is based on the data subject's explicit consent, the DGfS e. V. shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision.
If the data subject wishes to exercise the rights concerning automated individual decision-making, he or she may, at any time, contact any employee of the DGfS e. V..
If the data subject wishes to exercise the right to withdraw the consent, he or she may, at any time, contact any employee of the DGfS e. V..
On this website, the controller has integrated components by Saferpay. Saferpay is an online payment service provider. Saferpay offers the possibility to make payments via credit cards.
The operating company of Saferpay is Concardis GmbH (Concardis), Helfmann Park 7, D-65760 Eschborn.
If the data subject chooses "Online payment using Visa or Mastercard" as the payment option, the data will be transmitted automatically to Saferpay. By selecting this payment option, the data subject agrees to the transmission of personal data required for payment processing.
The personal data exchanged with Saferpay is the purchase sum, first- and last name, street address and number, area code, city, country, e-mail address, which are necessary for payment processing. The transmission of data is aimed at payment processing and fraud prevention. The controller will also provide Saferpay with other personal data in the case, if a legitimate interest in the transmission exists. The personal data exchanged between Saferpay and the data subject shall be transmitted by Saferpay to the economic agencies. This transmission is intended for identity and creditworthiness checks.
If necessary, Saferpay will pass on personal data to affiliates and service providers or subcontractors to the extent necessary to fulfill contractual obligations or to process the data in the order.
The data subject has the possibility to revoke the consent to the handling of personal data at any time from Saferpay. A revocation shall not have any effect on personal data which must be processed, used or transmitted in accordance with (contractual) payment processing.
The applicable data protection provisions of Saferpay may be retrieved under https://www.concardis.com/fileadmin/redakteur/documents/Produktinformationen/DE/Datenschutzrechtliche_Information.PDF.

References: V. 
 V. 
 V. 
 V. 
 V. 
 V. 
 V. 
 V. 
 V. 
 V. 
 V. 
 V. 
 V. 
 V. 
 V. 
 V. 
 V. 
 V. 
 V. 
 V.