Source: https://democracy-reporting.org/privacy-policy/
Timestamp: 2019-04-24 04:03:37+00:00

Document:
The following information provides an overview of how we process your personal data and your rights under the Data Protection Law.
3. Which data do we use and is it necessary to provide data?
When you send us an email or make use of our contact form, your message and email address will only be used in order to conduct correspondence with you. By responding to our job postings, it is necessary to process your personal data. This includes your contact information and the content of your application.
An email address must be provided to subscribe to the DRI newsletter or receive email updates. Additional data will be requested to verify the ownership of the email address as well as permission to receive the newsletter or updates. Further data will not be collected or only on a voluntary basis. Any data provided is used exclusively for the delivery of requested information and will not be passed on to third parties.
Processing of data submitted through the newsletter registration form is based solely on your consent. Consent to the storage of any contact information used to send the newsletter or updates may be withdrawn at any time. Cancellation can be done via the link “unsubscribe” in the newsletter or on the website. Information submitted to us for the purpose of obtaining the newsletter will be stored by us until a cancellation request is made and deleted upon removal from the mailing list.
This website uses services provided by MailChimp in order to send newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.
MailChimp is a service through which the dispatch of newsletters can be organised and analysed. Data provided to subscribe to the newsletter (e.g. email address) will be stored on MailChimp’s servers in the United States.
MailChimp is certified under the EU-US Privacy Shield. The Privacy Shield is an agreement between the European Union (EU) and the United States to ensure compliance with European privacy standards within the United States. With the help of MailChimp we can analyse our newsletter campaigns. When you open an e-mail sent by MailChimp, a file included in the e-mail (web beacon) connects to MailChimp’s servers in the United States. Doing so determines if a newsletter-related message has been opened and which links have been followed. Additionally, technical data (e.g. time of retrieval, IP address, browser type and operating system) is collected. This data cannot be assigned to the respective newsletter recipient and is used exclusively for statistical analysis of newsletter campaigns. Data from the analyses can be used to better tailor future newsletters to the interests of the recipient.
If you do not want your data to be analysed by MailChimp then you must unsubscribe from the newsletter. A link to unsubscribe is provided in every newsletter message. Additionally, you may unsubscribe from the newsletter directly on the website.
Date processing is based on your consent in accordance with Art. 6 para. 1 (a) EU GDPR. You can revoke consent at any time by unsubscribing from the newsletter. The legality of information processed prior to revocation of consent remains unaffected.
We have entered into a Data-Processing-Agreement with MailChimp, in which MailChimp commits to protecting the data of our visitors and to not sharing it with third parties. This agreement can be accessed through the following link: https://mailchimp.com/legal/forms/data-processing-agreement/sample-agreement/.
Democracy Reporting International gGmbH processes the personal data of job applicants in order to carry out the application and selection procedure in accordance with the employment standards of § 26 BDSG. Application documents will only be submitted to the employees of Democracy Reporting International gGmbH involved in the application process for the purpose of selecting a candidate.
If Democracy Reporting International gGmbH does not create an employment contract with the applicant, all application documents will be deleted after three months following the notification of rejection. Documents are not deleted immediately after notification due to legitimate interests in accordance with Art. 6 para. 1 f EU GDPR for the storage of documents.
Beyond the aforementioned three months, we only keep the documents longer if explicitly agreed upon with the applicant. In order to be considered for the recruiting process, an applicant necessarily shares their data.
4. For what purposes and on what legal basis do we use your information?
We process your personal data in accordance with the provisions of the General Protection Regulation (GDPR) and the German Bundesdatenschutzgesetz (BDSG). Please take note of information about the right to object under Article 21 EU GDPR.
The processing of personal data takes place in order to carry out pre-contractual measures, which are which are carried out at your request.
Insofar as you have consented to the processing of your personal data for specific purposes (e.g. subscribing to the newsletter), the legality of this process is based on your consent. Granted consent may be withdrawn at any time. Please note that the revocation only applies after the fact. Processing that occurred before the revocation is not affected.
Your application information is used to decide upon an offer of employment.
Only those within Democracy Reporting International who need to access your information to fulfil our contractual and legal obligations may do so. Our service providers may also process information for the same reasons so long as they maintain confidentiality and adhere to our data protection instructions.
6. Is data transmitted to a third country?
A transfer of data to countries outside the EU or the EEA, in so-called third countries, does not take place.
7. How long is my data saved?
We process and save your personal data as long as necessary for the fulfilment of our contractual and legal obligations. Data that is no longer necessary for the fulfilment of contractual or legal obligations is routinely deleted. An exception is when temporary, further processing is required in accordance with commercial and tax retention periods, such as the Commercial Code and the Tax Code. The time frame for storage and documentation specified therein is six to ten years.
You have the right to information under Article 15 EU GDPR, the right to rectification under Article 16 EU GDPR, the right to cancellation under Article 17 EU GDPR, the right to restriction of processing under Article 18 EU GDPR, the right to object under Article 21 EU GDPR and the right to data portability under Article 20 EU GDPR. Additionally, there is the right of appeal to a data protection supervisory authority (Article 77 GDPR; § 19 BDSG).
You may withdraw your consent to the processing of personal data at any time. Please note that the revocation only applies after the fact. Processing that occurred before the revocation is not affected. You can find more information about the right to object under Article 21 EU GDPR.
To exercise your rights, please use the contact for our data protection officer mentioned above.
9. Is it necessary to provide data?
Upon entering into a business partnership or providing a service, personal data necessary to conduct said business partnership or service and fulfil any related contractual obligations, or that we are required to collect by law, must be provided. Without this data, a contract or order will be rejected. In the case of an existing contract, it can no longer proceed and must be terminated.
In principle, we do not use fully automated decision-making, including profiling, in accordance with Article 22 EU GDPR.
You have the right to object to the processing of your personal data for reasons that may arise from your special circumstances. The prerequisite for this is that the data processing takes place in the public interest or on the basis of a balance of interests. This also applies to profiling. In the event of an objection, we will no longer process your personal data, unless we can provide compelling legitimate grounds for processing the data that outweigh your interests, rights and freedoms. Or if your personal data serves the assertion, exercise or defence of legal claims.
In individual cases, we may use your personal data for our direct mail. You have the right to object to this at any time. This also applies to profiling when it comes to direct mail. In the event of an objection we will no longer process your personal data for these purposes. The objection can be made form-free or through our objection form and should be directed to the above-mentioned data protection officer.
We receive data through use of our website. This includes information such as screen resolution, browser version, internet access, operating system, language, plugins used, country/region of origin and search engines used. The stored date will only be evaluated for statistical purposes. A transfer to third parties and a user-related evaluation does not take place.
Cookies are text files stored on your computer that allow us to facilitate navigation when accessing different pages on the website. Cookies expire at the end of the session and do not contain any personal information, meaning the contents of cookies are not used to evaluate users. You can set your browser so that you only allow cookies on a case-by-case basis or not at all.
Cookies that are required to carry out the electronic communication process or to provide certain functions (e.g. registration, payment processing) are processed according to Art. 6 par. 1 lit. f EU GDPR. In this case, cookies are stored to improve the usability of our website. Disabling cookies may limit the functionality of this website.
In order to protect the personal data of website users, we use a secure online transmission method called “Secure Socket Layer” (SSL) transmission. All information transmitted using this secure method is encrypted before being sent. Your personal data will be processed exclusively on security technologies using industry standards (e.g. firewalls, password protection, access control, etc.) data centres and computers.
14. Which plugins and tools are used on the website?
Google Analytics cookies are stored in accordance with Art. 6 Abs. 1 lit. f EU GDPR, wherein the website operator has a legitimate interest in analysing user behaviour in order to optimise both their website and advertising.
We have activated the IP anonymisation function on this website. As a result, IP addresses within member states of the European Union or other parties to the Agreement on the European Economic Area will be truncated by Google prior to transmission to the United States. Only in exceptional cases will the full IP address be sent to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website and internet usage to the website operator. The IP address obtained by Google Analytics will not be merged with other data provided by Google.
You can prevent the storage of cookies through the corresponding setting within your browser. However, please note that if you do so, you may not be able to use all the features of this website to the fullest extent possible. Additionally, you may prevent the collection by Google of cookie generated data based on your use of the website, including your IP address, and the processing of this data by Google by downloading the browser plugin available through the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
We have entered into a contract data processing agreement with Google and we fully implement the strict requirements of the German data protection authorities when using Google Analytics.
This website uses the demographics feature of Google Analytics. This allows for reports to be produced that contain information on the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google and third-party data. This data cannot be assigned to a specific person. You can disable this feature at any time through the ad settings in your Google Account, or prohibit the collection of your data by Google Analytics as outlined in the above section “Opposition to data collection”.

References: Art. 6
 § 26
 Art. 6
 § 19
 Art. 6
 Art. 6