Source: https://www.tonigarrnfoundation.org/data-policy.html
Timestamp: 2019-04-19 08:55:46+00:00

Document:
As the operator of the website "www.tonigarrnfoundation.org", we are committed to protecting your privacy. We collect and use the personal data of visitors to our website only to the extent necessary to make the website and our content and services functional and convenient for visitors to use. A processing of personal data takes place only after consent of the visitor. In addition, processing may take place if prior consent cannot be obtained for actual reasons and data processing is permitted by statutory provisions - in particular by the European Data Protection Regulation (DS-GVO) and the German Federal Data Protection Act (BDSG 2018).
According to Art. 4 No. 1 DS-GVO, "personal data" means all information relating to an identified or identifiable natural person ("data subject"). This includes, for example, the name, address, date of birth, e-mail address and telephone number.
According to Art. 4 No. 2 DS-GVO, "processing" means any operation or series of operations performed with or without the aid of automated procedures in connection with personal data (e.g. collection, storage, use or disclosure).
According to Art. 4 No. 7 DS-GVO, "data controller" is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of the processing of personal data.
With this data protection declaration, we first inform you about how you can contact us as the person responsible or our data protection officer (Section 1.).
Furthermore, we explain which data is processed when you visit or use our website, for what purposes and on what legal basis this takes place, whether there is an obligation to make it available and how long the data is stored (Section 2.).
In addition, we explain the extent to which data is transmitted, which security measures are maintained and whether automated decision-making takes place (Section 3. to 6.).
Finally, we would like to inform you about your rights with regard to the processing of your personal data (Section 7.).
•	amount of data transferred in each case.
This data is temporarily stored in a separate log file. This serves the purpose of permanently guaranteeing system security and stability and enabling technical administration to ensure trouble-free connection establishment and operation of our website as well as its comfortable use. In addition, this data is evaluated for internal administrative and statistical purposes in order to improve our online offering. A combination of this data with other data or data sources, which would allow conclusions to be drawn about your person, is not carried out.
Legal basis for this processing is Art. 6 Para. 1 P. 1 Letter f) DS-GVO. With this data processing, we pursue the legitimate interest of maintaining the operational security of our website in order to be able to provide this website and the information it contains in a trouble-free and convenient manner.
The data will be deleted as soon as it is no longer required to achieve the aforementioned purposes of its collection. If data is collected in order to provide our website, the data will therefore be deleted when the respective session has ended. Otherwise, the data will be deleted regularly after 31 days at the latest. A storage going beyond this is possible; in this case, however, the IP addresses are deleted or alienated so that an assignment to a natural person is no longer possible.
When you visit our website, so-called "cookies" are stored on your terminal device or data carrier. Cookies are text or information files that your Internet browser automatically saves on your terminal when you visit our website. They contain certain data or settings that are exchanged between your Internet browser and our system. This primarily involves information about which subpages of our Internet offer are called up how frequently.
The information generated or passed on by means of cookies is not personal data. Therefore, you cannot be personally identified on the basis of this information. Cookies also cannot execute programs or damage your end device. Rather, cookies serve the purpose of compiling statistics on the use of our website and thus optimizing it.
In addition, we use temporary cookies that are stored on your terminal for a specified period of time in order to optimize user-friendliness. If you visit our site again to make use of our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again.
The visitor data collected in this way is pseudonymized by technical precautions. The data is not stored together with other personal data of the visitors. It is therefore no longer possible to assign the data to the requesting visitor.
The legal basis for this processing is Art. 6 Para. 1 Sentence 1 Letter f) DS-GVO. With this data processing, we pursue the legitimate interest of optimizing the user-friendliness of our Internet pages.
Most Internet browsers automatically accept cookies. You can also use our website without cookies; however, we would like to point out that you may then no longer be able to fully use all the services or functionalities of our website.
If you wish to prevent the use of Flash cookies, you can install an appropriate add-on for the Internet browser you are using, e.g. "Better Privacy" for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy).
The Google Analytics information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, as IP anonymization is activated on this website, within member states of the European Union or in other states that are party to the Agreement on the European Economic Area, Google will shorten your IP address beforehand. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services to website operators relating to website activity and internet usage.
Google Analytics is used in accordance with the requirements on which the German data protection supervisory authorities have agreed with Google. We would like to point out that the extension "_anonymizeIp()" of Google Analytics has been activated on this website in order to guarantee the anonymous recording of IP addresses.
Google Analytics is not combined with other data from Google.
The legal basis for the aforementioned data processing is Art. 6 Para. 1 Sentence 1 Letter f) DS-GVO. With the use of these measures, we pursue the legitimate interest of designing and continuously optimizing our service on the basis of the usage analyses carried out. Furthermore, data will only be transmitted in a pseudonymized form.
Vimeo may use Google Analytics on its own pages.
The legal basis for the aforementioned data processing is Art. 6 Para. 1 Sentence 1 Letter f) DS-GVO. Our legitimate interest lies in the fulfillment of advertising purposes and an increase in the range and functionality of our offering. Due to the measures and settings described above, we make use of the options available to us to ensure that data processing is only carried out at the request of the person concerned or can be prevented by this person.
These links refer to our respective profiles with the third party providers and our activities there to make our activities more known and our service more comfortable for the visitors of our website. The Social Bookmarks are displayed as buttons with the logo of the respective third-party provider and integrated into our website as links. You will therefore be forwarded to our profile or our page at the respective provider when you click on the relevant Bookmark; in this case, the data mentioned will be transmitted to the respective provider. For information on the handling of your personal data when using the services of the providers, please refer to the data protection information of the respective provider.
Legal basis for the integration of these Social Bookmarks is Art. 6 Para. 1 Sentence 1 Letter f) DS-GVO. Our legitimate interest is to make our profiles or activities at the respective third parties known and to advertise for them. Visitor data will only be forwarded to the respective third party provider when the visitor clicks on the respective Bookmark.
Our website contains a donation form. If you wish to make a donation via our website, you must use this donation form to provide certain information necessary for making a donation and issuing a donation receipt. This mandatory information includes your first and last name, e-mail address and address for the donation receipt (street, house number, postcode, city and country). Specifying the telephone number as well as filling in the comment field is voluntary. The data provided will be used to process the donation. Your name, address and e-mail address are required to provide you with a receipt for your donation..
If you are based in the USA and wish to donate from there and click on the respective button, you will be redirected to the website of the King Baudoin Foundation United States.
Legal basis for this processing is Art. 6 Para. 1 Sentence 1 Letter f) DS-GVO. It is our legitimate interest to guarantee a user-friendly possibility to donate on our website and to carry out the donation process with you properly.
This data will be stored for as long as is necessary to process the donation in question. In addition, longer storage may be necessary due to legal obligations, in particular due to commercial or tax storage obligations under the German Commercial Code (HGB) and the German Tax Code (AO).
If you have decided to make a donation, we will need the data labeled as required in order to process your donation properly. We cannot process your donation request without this personal data.
The transfer of your personal data to third parties will only take place for the purposes listed below.
•	if this is legally permissible and the disclosure is necessary pursuant to Art. 6 Para. 1 Sentence 1 Letter b) DS-GVO for the performance of a contract with you.
If you visit our website, data about this visit may be transmitted to companies based in the USA. This is done for analysis purposes and is exclusively anonymous data; more detailed information can be found under section 2.3. regarding the use of the web analysis service Google Analytics, under section 2.4. regarding Vimeo and under section 2.5. regarding the social media platforms Instagram, Facebook and Twitter.
Within the framework of an agreement with the USA (so-called "EU-US Privacy Shield" or "EU-US Data Protection Shield", https://www.privacyshield.gov/EU-US-Framework), the European Commission has taken a decision on adequacy according to which the guarantees for the transmission of data on the basis of this agreement correspond to the data protection standards in the EU. The American companies to which data is transferred via visits to our website have entered their names on a corresponding list and have committed themselves to comply with the obligations stipulated in the agreement (https://www.privacyshield.gov/list).
The agreement and further information can be found on the EU website for legal texts, currently available in German at http://eur-lex.europa.eu/homepage.html?locale=de.
We make every effort to ensure the security of your data. In order to prevent the loss, misuse and alteration of personal data, we have set up appropriate physical, electronic and administrative procedures and adapted them to the current state of the art. This includes the training of personnel who have access to personal data. For the technically secure handling of personal data on our website, we use an SSL certificate.
We do not use any so-called profiling or other decision making which is based exclusively on automated data processing.
You have the right to request information about your personal data processed by us. In particular, you may request information on the processing purposes, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right of rectification, deletion, restriction of processing or objection, the existence of a right of complaint, the origin of your data if not collected from us, as well as the existence of an automated decision-making process including profiling and, if applicable, meaningful information on its details.
You have the right to immediately demand the correction of data concerning your person which are incorrectly stored with us or to demand their completion if they are incompletely stored with us.
You have the right to demand the deletion of your personal data stored by us, unless processing is necessary to exercise the right of freedeom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
You have the right to demand the restriction of the processing of your personal data as far as the correctness of the data is disputed by you, as far as the processing is unlawful, but you refuse the deletion of the data as far as we no longer need the data, but you need it for the assertion, exercise or defence of legal claims, or as far as you have lodged an objection against the processing pursuant to Art. 21 DS-GVO.
You have the right to receive your personal data, which you have provided to us, in a structured, common and machine-readable format or to demand transmission to another responsible person.
(Art. 7 Para. 3 in conjunction with Art. 6 Para. 1 Sentence 1 Letter a) or Art. 9 Para. 2 Letter a) DS-GVO)You have the right to revoke your consent to us at any time. The consequence of this is that we may not continue the data processing based on this consent for the future unless it can be based on another legal basis.
You have the right to complain to a supervisory authority if you are of the opinion that the processing of your personal data violates the DS-GVO. Usually you can contact the supervisory authority of your place of residence or workplace or our company headquarters.
If we process your personal data on the basis of legitimate interests, you may object to this for reasons arising from your particular situation.
In addition, you can object to data processing if we carry this out for purposes of direct advertising. To exercise your rights, you can contact us via the contact details referred to in Item 1.

References: Art. 4
 Art. 4
 Art. 4
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 6
 Art. 9