Source: http://www.dubnow.de/1/metadaten/data-protection/
Timestamp: 2019-04-21 16:50:44+00:00

Document:
• browser used and potentially the operating system of your computer as well as the name of your access provider.
The legal basis for our data processing is Art. 6 Abs. 1 S. 1 lit. f DSGVO. Our legitimate interest follows from the purposes for the acquisition of data outlined above. Under no circumstances do we use the acquired data to make inferences related to your person.
• a disclosure is legally permissible and necessary for the implementation of contractual agreements with you according to Art. 6 Abs. 1 S. 1 lit. b DSGVO.
Insofar as we process data in a third-party country (meaning outside of the European Union [EU] or the European Economic Area [EEA]) or that this occurs in the framework of the use of the services of third parties or in the disclosure or transfer of data to third parties, this only occurs in cases that serve the fulfillment of our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation, or on the basis of our legitimate interests. In accordance with legal or contractual stipulations, we only allow data to be processed in a third-party country when the special conditions of Art. 44 ff. DSGVO are fulfilled. This means that processing occurs for example on the basis of special guarantees such as the officially recognized ascertainment of a level of data protection meeting the standards of the EU (e.g. in the USA through the »Privacy Shield«) or through compliance with officially recognized special contractual obligations (so-called standard contractual clauses).
We process the data of our members, supporters, interested parties, and other persons according to Art. 6 Abs. 1 lit. b. DSGVO, insofar as we are offering you contractual services or are active in the context of existing business relationships, for example in relation to members, or when we are ourselves the recipients of services and contributions. We moreover process data of persons according to Art. 6 Abs. 1 lit. f. DSGVO on the basis of our legitimate interests, for example in relation to our administrative tasks or public outreach. The data processed in these cases and the manner, scope, purpose, and necessity of their processing are determined by the underlying contractual relationship. This includes basic inventory and reference data of persons (e.g. name, address, etc.) as well as contact details (e.g. email address, phone number, etc.), contractual data (e.g. services used, content and information shared, or names of contacts), and payment details in cases where we offer fee-based services or products (e.g. bank details, payment history, etc.). We delete data that is no longer necessary for the fulfillment of our purposes according to our statutes and business. This is determined according to the respective tasks and contractual relationship. In the case of business processing, we keep data as long as necessary for the completion of the business and as long as any guarantees or liabilities remain relevant. Otherwise, the legal responsibilities concerning data storage apply.
We process data in the framework of the administrative duties and organization of our company, of financial accounting, and of the fulfillment of legal responsibilities, for example archiving. We here process the same data as we do in the rendering of our contractual services. The basis for this processing is Art. 6 Abs. 1 lit. c. DSGVO, Art. 6 Abs. 1 lit. f. DSGVO. The concerned parties include clients, interested persons, business partners, and website visitors. Our purpose and interest in processing concerns administration, financial accounting, office management, and the archiving of data, in other words tasks that serve the maintenance of our business activities, the perception of our activities, and the rendering of our services. The deletion of data relating to contractual services and contractual communication corresponds to the tasks cited in relation to these processing activities. In this context, we disclose or transfer data to the financial administration, financial consultants such as tax consultants or auditors, as well as further financial offices and payment service providers. We moreover store data relating to suppliers, event organizers, and other business partners on the basis of our business interests, for example for the purpose of taking up contact at a later date. We generally store such predominantly company-related data permanently.
The data processed by us is either deleted according to the provisions of Art. 17 und 18 DSGVO or its processing is limited. Unless explicitly stated otherwise in this data protections statement, the data stored by us is deleted as soon as it is no longer required for its original purpose and there are no legal storage requirements barring its deletion. Insofar as data is not deleted because it is necessary for other legally permissible purposes, its processing is limited. This means that this data is locked and not used for other purposes. This concerns for example data that needs to be stored for reasons relating to business or tax law. According to German legal provisions, data storage occurs for 6 years according to § 257 Abs. 1 HGB (account books, inventories, opening balance sheets, annual financial statements, business letters, booking receipts, etc.) and for 10 years according to § 147 Abs. 1 AO (books, records, management reports, booking receipts, business letters, documents relevant to taxation, etc.).
We maintain an online presence within social media and platforms in order to communicate with the clients, interested persons, and users active in these domains and to inform them within these domains about our services. The viewing of the respective network or platform is subject to the terms and conditions and data processing guidelines of the respective provider. Where nothing further is stipulated in the framework of our data protection statements, we process user data insofar as these users communicate with us within these social networks and platforms, for example writing contributions to our online presence or sending us messages.
• according to Art. 77 DSGVO to complain to a regulating authority. You can usually turn to the regulating authority of your place of residence in this regard.
You have the right to revoke your prior consent for the future according to Art. 7 Abs. 3 DSGVO.
Insofar as your personal data is processed on the basis of legitimate interests according to Art. 6 Abs. 1 S. 1 lit. f DSGVO, you have the right according to Art. 21 DSGVO to object to the processing of your personal data if there are reasons arising from your particular circumstances or if the objection is against direct advertising. In the latter case, you have a general right of objection that will be acted on by us without further reference to your particular circumstances. If you wish to invoke your right to revocation or objection, you can simply send an email to info(at)dubnow.de.
We employ technical and organizational security measures suited to us in order to protect your data from accidental or deliberate manipulation, partial or total loss, destruction, or unlawful access by third parties. Our security measures are continually improved in accordance with technological developments.
Through the further development of our website and the services we offer thereby or on the basis of changed legal or official stipulations, it may become necessary to change this data protection declaration. This data protection declaration is valid as of May 2018.

References: Art. 6
 Art. 6
 Art. 44
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 17
 § 257
 § 147
 Art. 77
 Art. 7
 Art. 6
 Art. 21