Source: https://www.stiftungen.org/en/home/meta/privacy-statement.html
Timestamp: 2019-04-19 13:03:51+00:00

Document:
We appreciate your visiting the website of Bundesverband Deutscher Stiftungen e.V. and thank you for your interest in our association. The protection of your personal data which we collect, process and use when you visit our website and when you use our products and services is of great concern to us. Your data are protected within the framework of the statutory provisions. Below you will find information on what kinds of data are collected and on what legal basis when you visit the website and use our products and services, and how they are processed. We moreover inform you about your rights in connection with the processing of your personal data.
Subject of the data protection is personal data. Pursuant to art. 4(1) GDPR this is all information relating to an identified or identifiable natural person. This encompasses, e.g., your name, postal address, email address or telephone number, but may also include such usage data as your IP address.
We always process personal data in compliance with the pertinent data protection provisions. This means that data are only processed when this is legally permissible or with your consent. The legal basis of data processing for which we solicit your consent for a specific purpose is art. 6 (1a) GDPR. If the processing of personal data is required for the performance of a contract, such as membership or a purchase, the processing is based on art. 6 (1b) GDPR. The same applies to processing which is required for the performance of pre-contractual measures, such as queries regarding membership or products. The legal basis for a legal obligation to process data, especially storage to meet tax obligations, is art. 6 (c) GDPR. Finally, processing may be based on art. 6 (1f) GDPR. This constitutes the legal basis for processing activities which are not covered by any of the above-mentioned legal grounds when the processing is necessary for the protection of our legitimate interests or the interests of a third party unless they are overridden by the interests, basic rights and fundamental freedoms of the data subject. If the processing of personal data is based on art. 6 (1f) GDPR, our legitimate interest is the performance of our activities as an association.
We take organizational, contractual and technical security measures in order to ensure compliance with the provisions of the data privacy laws and to protect the data we manage against any coincidental or intentional manipulation, loss, destruction or access by unauthorized persons.
The Bundesverband Deutscher Stiftungen (Association of German Foundations) processes the data you supply when visiting our website and using our products and services (e.g. name, address, telephone number, for instance when participating in surveys, ordering publications, registering for an event or subscribing to our newsletter). The data processing specifically comprises the collection, recording, organization, arrangement, storage, adjustment or modification, use, disclosure via transfer and storage of personal data through automated methods.
When you visit our website, the device with which you access the site automatically sends log data (connection data) to our servers. Log data include, e.g., the IP address of the device with which you access the website. We only store IP addresses inasmuch as this is necessary for performing the Foundation Panel and to document and prevent improper use. The IP addresses are deleted within an appropriate time period.
When you commission us to provide a service or send you publications, your personal data are only used to the extent necessary to perform the service or contract unless special consent has been given. This specifically includes the disclosure of your data to transport companies, credit companies or other services used for the performance of the service or contract. Once the performance of the contract is completed, your data are blocked for further use and deleted after expiry of tax and commercial law obligations unless you have expressly consented to their further use.
The Association of German Foundations discloses data to authorities or third parties only in accordance with the legal provisions or a court order. Information can only be given to authorities based on a legal provision for purposes of danger prevention or criminal prosecution. Third parties receive information only when stipulated by a legal provision. The stored personal data are erased if you withdraw your consent to their storage, if knowledge of the data is no longer necessary for achieving the purpose that was the reason behind their storage, or when their storage is impermissible for other legal reasons.
If you wish to subscribe to our newsletter, we need your email address as well as confirmation that you are the owner of the email address you have given us and agree to receiving the newsletter. These data are only collected so that we can send you the newsletter and to document our pertinent authorization. The data are not transmitted to third parties. You can cancel your subscription to the newsletter and your consent to the storage of your email address at any time.
Data which you supply to us via the Online Questionnaire are stored and processed in our Database of German Foundations. They are published by the Association in the Index of German Foundations at www.stiftungssuche.de for the purposes of establishing contact as well as the generation of statistics and analyses if you have released them.
The Association of German Foundations processes and uses your data in order to perform the Foundation Panel, send you messages concerning the Foundation Panel and for technical administration.
At events of the Association of German Foundations, such as the German Foundation Day, photos and videos are produced for documentation purposes. The Association of German Foundations uses these in the context of its reporting, for its general publicity work, especially in the social media, on the website of the Foundation and in other Association media. Additionally they may be transmitted to other media as press and publicity material of the Association of German Foundations. You have the right to object to the production of photos and videos concerning you and to their use. The data we have stored will be erased as soon as they are no longer required for their intended purpose unless there is a legal obligation to keep such data.
For security reasons, the entrance area of the head office, the House of German Foundations, Mauerstrasse 93, 10117 Berlin, is video-monitored. The recordings are erased after 24 hours.
Our website uses social plug-ins ("plug-ins") of the social network www.facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plug-ins can be recognized by one of the Facebook logos (white "f" on a blue tile, the terms "Like", "Gefällt mir" or a "thumbs up" sign) or they are marked by a "Facebook Social Plugin" widget. A list and the look of the Facebook social plug-ins are available for inspection here: developers.facebook.com.
When a user accesses a function of our website which contains such a plug-in, his or her device establishes a direct connection to the servers of Facebook. Facebook transmits the content of the plug-in directly to the user’s terminal, where it is incorporated into the website. Usage profiles of the users may be generated from the data processed during this procedure. We have no influence over the extent of the data which Facebook collects via this plug-in and therefore inform the users according to our level of knowledge.
The integration of the plug-ins tells Facebook that a user has accessed the pertinent Web page. If the user is logged into Facebook, Facebook can link the visit to his or her Facebook account. When users interact with the plug-ins, for instance by pressing the Like button or sending a comment, the respective information is transmitted directly from their terminal to Facebook and stored there. If the user is not a member of Facebook, there is still the possibility that Facebook finds out and stores his or her IP address. According to Facebook, only an anonymized IP address is stored in Germany.
Purpose and extent of the data collection and the further processing and use of the data by Facebook as well as the pertinent rights and setting options for the protection of the user’s privacy are explained in Facebook’s Data Policy at www.facebook.com.
Users who are members of Facebook and do not want Facebook to collect data about them and link them to the member data stored at Facebook must log out of Facebook and delete their cookies prior to using our website. Further settings and objections to the use of data for advertising purposes can be made within the Facebook Profile Settings at www.facebook.com, or via the US website www.aboutads.info or the EU website www.youronlinechoices.com. The settings are platform independent, i.e. they apply to all terminals such as desktop computers or mobile devices.
Our website uses the buttons of the Twitter service. These buttons are provided by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. They are recognizable by terms such as "Twitter" or "Follow" in combination with a stylized blue bird. The buttons allow users to share an article or page of the Twitter website or to follow the provider on Twitter.
When a user accesses a page of this website which contains such a button, his or her browser establishes a direct connection to the Twitter servers. The content of the Twitter buttons is transmitted directly to the user’s browser by Twitter. The provider therefore has no influence over the extent of the data which Twitter collects via this plug-in and informs the users according to its level of knowledge. As far as the provider knows, only the user’s IP address and the URL of the respective website is transmitted when the button is pressed, and it is not used for purposes other than the display of the button.
Functions of the Instagram service are incorporated in our Web pages. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged on to your Instagram account, you can link the content of our Web pages to your Instagram profile by clicking the Instagram button. This allows Instagram to link the visit to our website to your user account. Please note that we as the website provider are neither informed of the content of the transmitted data nor of their use by Instagram.
We process the data which are submitted during the application process. The legal basis for this is art. 88 GDPR in conjunction with section 26 German Data Protection Act (new).
This website uses Google Analytics, a Web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files which are stored on your computer and make it possible to analyze the way you use the website. The information generated by the cookie concerning your use of this website is usually sent to a server of Google in the USA and stored there. If the IP anonymization on this website is activated, however, your IP address is shortened beforehand by Google within member states of the European Union or in other signatories of the Treaty on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. Google will use this information at the behest of the operator of this website to analyze your use of the website in order to compile reports about the website activities and to provide additional services for the website operator in connection with the use of the website and the Internet. Within the scope of Google Analytics, Google will not link your IP address to other data stored by Google. You may prevent the storage of the cookies by making the appropriate settings in your browser software; however, we wish to point out that in this case you may not be able to make full use of all the features of this website. You can moreover prevent the collection of the data which was generated by the cookie and which concerns your use of the website (incl. your IP address) and its processing by Google by downloading and installing the browser plug-in that is available from the link below.
Users have the right to be informed free of charge about the personal data concerning them which are stored by us.
Additionally the users have the right to the rectification of incorrect data, withdrawal of consent, blocking and deletion of their personal data as well as the right to lodge a complaint with the competent supervising authority when they assume that data have been processed unlawfully.
The data we have stored will be erased as soon as they are no longer required for their intended purpose unless there is a legal obligation to keep such data.

References: art. 4
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 88