Source: https://www.betterplace.org/c/rules/privacy-policy
Timestamp: 2019-04-22 06:22:06+00:00

Document:
2. What data is recorded?
4. What data is recorded for what purposes?
8. Who will receive my data?
10. Will my data be processed outside the EU or the EEA (third country transfer)?
11. What data privacy rights do I have?
12. From what source does the data stem?
13. To what extent does an automated decision-making process exist?
14. Is profiling carried out?
(hereinafter referred to as “betterplace.org”) is responsible for the processing of your data on this website. betterplace.org processes personal data in accordance with the provisions of the GDPR and the New Federal Data Protection Act (hereinafter referred to as “BDSG-neu”).
You can contact the data protection officer of betterplace.org at the above-mentioned postal address, with the addition “To the data protection officer” or at the e-mail address: datenschutz@betterplace.org.
When you visit the website, the accessing computer automatically collects information (hereinafter referred to as “access data”). This access data includes server log files, which usually consist of information about the browser type and browser version, the operating system, the Internet service provider, the date and time of use of the website, the previously visited websites and those newly accessed via the website, and the IP address of the computer. With the exception of the IP address, the server log files cannot be linked to a person. An IP address can be traced to a person if it is permanently assigned when the Internet connection is used and the Internet provider can match it with a person.
If you continue to use the services of the website, pseudonymous user profiles and the data you enter on the website (e.g. search words, login data, comments, submissions on forms or for registration) will be processed.
User data such as e-mail address and name details for the dispatch of the newsletter (depending on the type of newsletter).
Under no circumstances will personal bank account information be saved or displayed on betterplace.org during the donation process.
Generally, cookies only serve online identification purposes and are not mapped to a specific person. Cookies are mapped to a person when the information generated by the cookies is merged with other data. There is a difference between cookies which are required to provide the website and cookies which are required for other purposes such as analysis of user behaviour, or advertising.
cookies which store data to ensure the error-free playback of video or audio content.
advertising cookies of third parties which are used to create profiles of usage behaviour (e.g. clicked advertising banners, sub-pages visited, search queries made) and which enable the controller and the third party to display advertisements or offers to the user that are tailored to the user’s interests (hereinafter referred to as “third party cookies”).
The purposes for which data is processed may result from technical, contractual or legal requirements and, where applicable, from consent given.
for the forwarding of data to the organisations so that they can then send their own newsletters.
For the functionality of the website, the performance of security analyses and the prevention of attacks, the server log files are automatically written on the computer server host when the website is accessed and used before they are stored for a short time as a component of the server access data defined in Section 2. The server log files are not stored together with other data. betterplace.org uses the server log files for statistical evaluations in order to analyse and remedy technical faults, fend off attacks and fraud attempts, and optimise the functionality of the website.
The legal basis for the recording of server log files is Art. 6 para. 1 letter f GDPR. The functionality of the website, the performance of security analyses, and the prevention of attacks are the legitimate interests of betterplace.org.
After the websites have been accessed, the server log files are stored on the web server, and the IP address they contain is deleted after 7 days at the latest. The data is only evaluated during this storage period in the event of an attack.
You have the right to object to the processing of your data in the context of server logfiles, if there are reasons for this which arise from your particular situation. If you wish to exercise your right of objection, please contact us at the address given under Section 1.
On the website you can contact betterplace.org via an e-mail address or a telephone number. If you do so, your e-mail address, your telephone number and your request will be transmitted to betterplace.org. Depending on your request (e.g. questions about the usage functionalities of betterplace.org, assertion of your rights as a data subject, e.g. access to information), your contact data will be processed further. If it is necessary for the processing of your request, your contact data may be forwarded to third parties (e.g. other organisations).
The legal basis for the processing of your contact data is Art. 6 para. 1 letter f GDPR. Our legitimate interests are the processing of your request and further communication. If the reason for your contacting us is to enter into a contract with betterplace.org, then the legal basis for the processing of your contact data is Art. 6 para. 1 letter b GDPR.
After your request has been completely processed and further communication has ended, the contact data will be deleted, unless statutory retention periods prevent such deletion. The contact data will also not be deleted if your contacting us is aimed at concluding a contract with betterplace.org or if you assert your rights as a data subject, such as your right to access information. In this case, the data will be stored until the contractual and/or legal obligations have been fulfilled and statutory retention periods do not oppose deletion.
You have the right to object to the processing of your contact data, if there are reasons for this which arise from your particular situation. If you wish to exercise your right of objection, please contact us at the address given under Section 1. If you object, communication can no longer be continued. Other conditions apply if the storage of your contact data is necessary for the initiation of a contract, or fulfilment of a contract, or assertion of your rights as a data subject.
On the website you can subscribe to the free betterplace.org newsletter as part of the donation or registration process. Your name and e-mail address from the donation or registration form will be processed further (with the aid of service providers) for the dispatch of the newsletter.
Furthermore, you can subscribe to the free betterplace.org newsletter on the online donation platform outside of the donation or registration process. Only your e-mail address from the registration screen will be transmitted to betterplace.org and further processed (with the aid of service providers) for the dispatch of the newsletters.
Please note that betterplace.org will evaluate your user behaviour when you receive the betterplace.org newsletter. For this analysis, the e-mails sent will contain so-called web beacons or tracking pixels, which are single-pixel image files stored on the website. For the analyses, betterplace.org will link your data and web beacons with your individual ID. The data is collected in a pseudonymised form only, i.e. the IDs are not linked to your other personal data; a direct connection to a person is thereby ruled out. You can object to this tracking at any time by unsubscribing from the newsletter via the unsubscribe link.
After making the donation, you may receive news by e-mail about the organisation of the respective aid project in the form of a newsletter from betterplace.org. Your name and e-mail address from the donation form will be processed further (with the aid of service providers) for the dispatch of the newsletter. Your data will not be passed on to third parties.
The purpose of the betterplace.org newsletter is to keep you informed by e-mail about current topics and other general news at betterplace.org. The legal basis for the processing of the data when you subscribe to the newsletter is your consent pursuant to Art. 6 para. 1 letter a GDPR.
The purpose of this processing is only to inform you about the progress of the aid project you selected when making your donation.
The legal basis for the processing of your data is Art. 6 para. 1 letter f GDPR.
In the case of newsletters that are sent independently of a donation, we erase the data when you unsubscribe from the newsletter. In the case of newsletters to which you have subscribed as part of the donation or registration process, we will delete the data if you unsubscribe from the newsletter and if there are no contractual or legal retention periods to prevent deletion.
In the case of these newsletters, we will delete the data if you unsubscribe from the newsletter and if there are no contractual or legal retention periods to prevent deletion.
You can object to the data processing relating to the newsletter (betterplace.org-newsletter and project newsletter following a donation) any time by unsubscribing via the link in the newsletter or by using the contact option mentioned under Section 1. It will then no longer be possible to receive the newsletter.
When you make a donation, the person in charge of the charity project you have chosen to donate to may send you an email with a one-off thank-you note. Such messages will always be sent through our donation platform.
When such a note is sent, your name and email address will be processed as part of the process of creating and sending the thank-you note. However, the person in charge of the charity project sending the note will not be able to see your email address when doing so. This is because the thank-you note will be processed and sent using third-party service providers.
The purpose of this thank-you note and the processing of personal data is to give the person in charge of the charity project an opportunity to thank you for having chosen their project for your donation and personally express their gratitude or provide feedback to you. For betterplace.org, this is an important part of our endeavors to make our donation process transparent.
The legal basis for processing this data is Art. 6 (1) f), with respect to which the legitimate interest pursued by betterplace.org is to provide donors with support and information.
When a thank-you note is sent, we will store the message until the person in charge of the charity projects ends all communications and follow-up activities concerning your donation, unless we are required to store this data for a specific duration for legal reasons.
Services that optimise user-friendliness and measure the reach of the website are built into the website. Your access data (see Section 2) is recorded and your usage behaviour is evaluated with the help of analysis cookies (see Section 3). Personal identification is generally not necessary for web-tracking, so that when your access data is recorded, the stored IP address is either not used or only used in truncated form, and pseudonymous user profiles are created. This data is not merged with other data and you have the possibility of revocation at any time. Personal user profiles are only created in exceptional cases and only if you have given your consent.
The web-tracking services are usually offered by service providers who process the data in accordance with the controller’s instructions only and not for their own purposes, as so-called processors. This is ensured by means of contracts for processing. If the service providers process your data outside of the European Union or the European Economic Area (hereinafter referred to as “EU or EEA”), a so-called third country transfer takes place. This is permissible if you have given your consent, betterplace.org has given guarantees for a level of data protection that meets European standards, or the EU Commission has classified the relevant third country as a safe third country. The third country transfer of the relevant service is identified below.
The individual web-tracking services of the website are described in more detail below.
The website uses the services of Google Analytics. Google Analytics is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics creates a pseudonymous user profile to optimise the user-friendliness of the website. Pseudonymity is ensured by Google truncating your IP address prior to any further processing and storage of data, and it is not possible to draw any conclusions about you as a person. The pseudonymous user profile is evaluated after transmission in order to optimise user-friendliness. The data is not merged with any other Google data. By means of a contract for processing, betterplace.org ensures that Google only processes the data in accordance with its instructions.
Through the use of Google Analytics, a third country transfer takes place (see Section 6). However, with its certification in accordance with the EU-US Privacy Shield, Google ensures that the third country transfer meets the European data protection standards.
The legal basis for the recording and evaluation of pseudonymous user profiles is Art. 6 para. 1 letter f GDPR. The legitimate interests of betterplace.org consist of optimising the user-friendliness of the website and measuring its reach.
As regards the use of Google Analytics on this website, the data is stored for a maximum of 14 months or until you object to its further use.
You can prevent cookies from being saved via the appropriate settings in your browser software. However, under certain circumstances not all of the functions of this website might then be available to you.
Opt-out cookies will prevent your data from being recorded in the future when you visit this website.
The website uses the services of Hotjar Analytics from Hotjar Ltd. The provider is Hotjar Ltd, Level 2 St Julians Business Centre, 3, Elia Zammit Street St Julians STJ 1000, Malta, Europe.
Hotjar Analytics creates a pseudonymous user profile to optimise the user-friendliness of the website. Pseudonymity is ensured by Hotjar abbreviating your IP address prior to any further processing and storage of data, so that it is not possible to draw any conclusions about you as a person. The pseudonymous user profile is evaluated after transmission in order to optimise user-friendliness. The data is not merged with any other data. By means of a contract for processing, betterplace.org ensures that Hotjar only processes the data in accordance with its instructions.
The purpose is to improve the betterplace.org website. The legal basis for the recording and evaluation of pseudonymous user profiles is Art. 6 para. 1 letter f GDPR. The legitimate interests of betterplace.org consist of optimising the user-friendliness of the website.
With regard to the use of Hotjar on this website, the data will be evaluated and anonymised by Hotjar immediately after its transmission to Hotjar.
You can activate the “Do-Not-Track” setting in your browser if your browser has this feature. Hotjar respects this setting.
A so-called widget from Outbrain UK Limited, 5 New Street Square, EC4A 3TW, London, United Kingdom, is contained in some pages of the offer. The Outbrain service is designed to provide you with information that is thematically related to the content you are reading.
If you wish to object to the use of data by Outbrain: Please call up Outbrain’s Privacy page and opt out there. – Please note that the opt-out must be performed on every device that you use.
The content recommendations in the widget are no longer controlled on the basis of Outbrain’s usage data after the opt-out.
betterplace.org is offering the embedded betterplace.org donation form (Iframe) on websites other than betterplace.org. Fundraising goals (projects) may also be selected via Iframe for support on websites other than betterplace.org. In these cases, your information will be processed directly by betterplace.org as the data controller.
You also have the option of authenticating yourself on our website by providing your Facebook profile information from your Facebook user account (‘Facebook login’). An additional registration is then no longer necessary. You will then be forwarded to Facebook’s website for registration/login. By doing so, your Facebook profile will be linked to our service.
If you decide to register and/or log in using your Facebook user account, betterplace.org will receive access, from Facebook, to your first and last name, your email address, your profile photo, your gender, your language via this interface. Betterplace.org will also save this information in your user profile where you can edit this information in your user profile.
For more information on Facebook logins and privacy settings, please refer to Facebook’s Data Policy and Statement of Rights and Responsibilities.
If you do not agree to the sharing of your information in this fashion, you should not use the Facebook login.
On this website Google reCAPTCHA is integrated. Google reCAPTCHA is a CAPTCHA service which protects this website from spam and automated abuse by computer systems, e.g. bots.
The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the security of our website and in the defense against unwanted, automated access in the form of spam or the like. Google provides further information on the general handling of your website at https://policies.google.com/privacy User data.
Within betterplace.org, those parties receive access to your data who need it for the purposes described in Section 4. Service providers used by betterplace.org may also be given access to your data (so-called “processors”, e.g. computer centres, dispatch of newsletters, customer services or debtor management). Contracts for processing ensure compliance with instructions, data security and confidential handling of your data by these service providers.
credit institutions that collect your data via the website, receive it from us and process it further on their systems for the purposes of payment handling and for fraud prevention.
charity organisations which inform you about the progress of their respective aid project and other work via their own newsletter, provided you have agreed to your data being shared for such purposes (Art. 6 (1) a) GDPR).
You will find more information about the forwarding of data to the respective third parties in section 4, which specifies the individual purposes.
For credit card: Stripe Payments Europe Ltd, Block 4, Harcourt Center, Harcourt Road, Dublin 2, Ireland and Stripe Payments UK, Ltd, 7th Floor, The Bower Warehouse, 211 Old Street, London EC1V 9NR, United Kingdom (“Stripe”) , For more information on Stripe’s privacy, please visit the URL stripe.com/privacy.
For direct debit, credit card: Wirecard AG, Einsteinring 35, 85609 Aschheim, Germany (“Wirecard”). For more information on data protection by Wirecard, see the URL wirecardbank.de/DSGVO.
paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt, Germany ( “Paydirekt”). For more information on data protection by Wirecard, please visit the URL paydirekt.de/agb.
The payment service provider is responsible for the processing of data in the course of payment processing.
In addition, we will provide Stripe with your personal data (first and last name, e-mail address and address) for the purpose of fraud prevention.
The legal basis for this data transmission is Art. 6 para. 1 lit. f DSGVO. The legitimate interest here lies in the prevention of economic damage through crime and in the protection of donors.
Web-tracking services are provided by service providers which have their computer centres in a third country or which can access the computer centres within the European Union or the EEA from a branch in a third country. With certification in line with the EU-US Privacy Shield, the services ensure that the third country transfer meets the European data protection standards.
For the dispatch of newsletters, service providers are employed which have their computer centres in a third country or which can access the computer centres within the European Union or the EEA from a branch in a third country. With certification in line with the EU-US Privacy Shield, the services ensure that the third country transfer meets the European data protection standards.
For the handling of customer enquiries, service providers are employed which have their computer centres in a third country or which can access the computer centres within the European Union or the EEA from a branch in a third country. With certification in line with the EU-US Privacy Shield, the services ensure that the third country transfer meets the European data protection standards.
You have the right to access, at any time, the personal data about you which we have stored. Should any data about your person be wrong or no longer up-to-date, you have the right to demand their correction. You also have the right to demand the erasure or restriction of the processing of your data in accordance with Art. 17 and Art. 18 GDPR. You may also have the right to have the data that you supplied released in a commonly used and machine-readable format (right to data portability).
If you have given your consent to the processing of personal data for certain purposes, you can withdraw your consent at any time with effect for the future. The declaration of withdrawal should be sent to betterplace.org at the contact address specified in Section 1. You can also withdraw any consent which you gave on the website under datenschutz@betterplace.org.
Pursuant to Art. 21 GDPR you have the right, for reasons which arise from your particular situation, to object any time to the processing of your data which takes place on the legal basis of Art. 6 para. 1 letter f GDPR. You also have the right to object at any time to the processing of your personal data for the purposes of direct advertising. The same applies to the automated procedures that take place when some cookies are used, unless they are absolutely necessary for the provision of the website.
You may, however, also approach the data protection authority responsible for your place of residence.
All data is collected directly from the data subjects.
For the purposes mentioned in Section 4, we do not use any fully automated decision-making processes.
Profiling as defined in Art. 22 (1) and (4) GDPR is not carried out.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 17
 Art. 18
 Art. 21
 Art. 6
 Art. 22