Source: https://profilia.eu/index.php/privacy-policy.html
Timestamp: 2019-04-21 06:22:16+00:00

Document:
This privacy statement explains the nature, scope and purpose of the processing of personal data (hereinafter referred to as "data") within our online offering and the related websites, functions and content, as well as external online presence, such as our Social Media Profile. (collectively referred to as "online offer"). With regard to the terms used, such as “processing" or “responsible”, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
Answering contact requests and communication with users.
processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means. The term is comprehensive and covers practically all handling of data.
In accordance with Art. 13 GDPR, we inform you about the legal basis of our data processing. Unless the legal basis in the data protection declaration is mentioned, the following applies: The legal basis for obtaining consent is Article 6 (1) lit. a and Art. 7 GDPR, the legal basis for the processing for the performance of our services and the execution of contractual measures as well as the response to inquiries is Art. 6 (1) lit. b GDPR, the legal basis for processing in order to fulfill our legal obligations is Art. 6 (1) lit. c GDPR, and the legal basis for processing in order to safeguard our legitimate interests is Article 6 (1) lit. f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 section 1 lit. d GDPR is classified as legal basis.
Measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as their access, input, disclosure, availability and separation. In addition, we have established procedures that ensure the exercise of data subject rights, data erasure and reaction to data being compromised. Furthermore, we consider the protection of personal data already in the development, or selection of hardware, software and procedures, according to the principle of data protection by technology design and by privacy-friendly default settings considered (Article 25 DSGVO).
If, in the context of our processing, we disclose data to other persons and companies (contract processors or third parties), transmit them to them or otherwise grant access to the data, this will only be done on the basis of a legal permission (eg if a transmission of the data to third parties, as to payment service providers, in accordance with Art. 6 section 1 lit. b DSGVO is required to fulfill the contract), you have consented to a legal obligation or on the basis of our legitimate interests (eg the use of agents, webhosters, etc.).
In accordance with Art. 17 DSGVO, you have the right to demand that the relevant data be deleted immediately, or, alternatively, to require a restriction of the processing of data in accordance with Art. 18 DSGVO.
You have the right to withdraw consent in accordance with. Art. 7 section 3 DSGVO with effect for the future.
"Cookies" are small files that are stored on users' computers. Different information can be stored within the cookies. A cookie is primarily used to store the information about a user (or the device on which the cookie is stored) during or after his visit to an online offer. Temporary cookies, or "session cookies" or "transient cookies", are cookies that are deleted after a user leaves an online service and closes his browser. In such a cookie, e.g. the contents of a shopping cart are stored in an online store or a login status. The term "permanent" or "persistent" refers to cookies that remain stored even after the browser has been closed. Thus, e.g. the login status will be saved if users visit it after several days. Likewise, in such a cookie the interests of the users can be stored, which are used for range measurement or marketing purposes. A "third-party cookie" refers to cookies that are offered by providers other than the person who manages the online offer (otherwise, if it is only their cookies, this is called "first-party cookies").
According to German legal requirements, the storage is effected in particular for 10 years according to §§ 147 section 1 AO (books, records, management reports , accounting documents, commercial and business letters, documents relevant to taxation, etc.) and for 6 years according to § 257 sections 1 numbers 2 and 3, section 4 HGB (trade letters).
According to Austrian legal requirements, the storage is effected in particular for 7 years according to §132 section 1 BAO (accounting documents, relevant documents/invoices, accounts, business papers, income and expenditure figures etc), for 22 years in context with property plots and for 10 years for documents in in context with electronically supplied services, telecommunication, broadcast and television services that are provided to non-business individuals in EU member states and for which the Mini-One-Stop-Shop (MOSS) is used.
We process the data of our members, supporters, interested parties, and other persons according to Art. 6 Abs. 1 lit. b. DSGVO, insofar as we are offering them contractual services or are active in the context of existing business relationships, for example in relation to members, or when we are ourselves the recipients of services and contributions. We moreover process data of persons according to Art. 6 Abs. 1 lit. f. DSGVO on the basis of our legitimate interests, for example in relation to our administrative tasks or public outreach.
The data processed in these cases and the manner, scope, purpose, and necessity of their processing are determined by the underlying contractual relationship. This includes basic inventory and reference data of persons (e.g. name, address, etc.) as well as contact details (e.g. email address, phone number, etc.), contractual data (e.g. services used, content and information shared, or names of contacts), and payment details in cases where we offer fee-based services or products (e.g. bank details, payment history, etc.).
We delete data that is no longer necessary for the fulfillment of our purposes according to our statutes and business. This is determined according to the respective tasks and contractual relationship. In the case of business processing, we keep data as long as necessary for the completion of the business and as long as any guarantees or liabilities remain relevant. The necessity of storage of these data is reviewed every three years; otherwise, the legal responsibilities concerning data storage apply.
Content of the newsletter: We send newsletters, e-mails and other electronic notifications with advertising information (hereinafter "newsletter") only with the consent of the recipient or a legal permission. Insofar as the contents of a newsletter are concretely described, they are authoritative for the consent of the users. Incidentally, our newsletters contain information about our achievements and us.
Subscription data: Your email address is sufficient to subscribe to the newsletter. We also give you the option to provide us with your name so that we can address you personally in the newsletter.
The sending of the newsletter and the performance assessment connected to this occurs with the consent of the recipient in accordance with art. 6 par. 1 lit. a, art. 7 DSGVO i.V.m § 7 par. 2 no. 3 UWG and in accordance with the legal permission outlined in § 7 par. 3 UWG.
The subscription process is recorded based on our entitled interests in accordance with art. 6 par. 1 lit. f DSGVO. We are interested in providing a user-friendly and secure newsletter system which not only serves our commercial interests and meets users’ expectations, but also allows us to verify consent.
Unsubscribing / withdrawing consent – You can unsubscribe from our newsletter at any time, i.e. withdraw your consent. A link to unsubscribe from the newsletter can be found at the bottom of every newsletter. We can save the provided email address for up to three years on the basis of our entitled interests before deleting it for the purpose of newsletter distribution in order to verify previously given consent. The processing of this data is restricted to the possible defense against any arising claims. An individual request to delete this data can be made at any time, if the previous giving of consent is confirmed.
The hosting services we utilise are intended for the provision of the following services: infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we employ to operate the website.
We and/or our hosting provider hereby process inventory data, contact data, content data, contract data, usage data, metadata and communication data from customers, interested parties and visitors to this website on the basis of our legitimate interests in an efficient and secure provision of our website in accordance with Article 6 § 1 S. 1 f) GDPR in connection with Article 28 GDPR.

References: Art. 4
 Art. 13
 Art. 7
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 17
 Art. 18
 Art. 7
 § 257
 §132
 Art. 6
 Art. 6
 art. 6
 art. 7
 § 7
 § 7
 art. 6
 § 1