Source: https://www.francke-halle.de/privacy-policy-a-12457.html
Timestamp: 2019-04-23 17:59:26+00:00

Document:
The legislator understands the term ‘processing’ in connection with personal data acc. to Art. 4(2) of the GDPR to mean the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination erasure or destruction.
If you have any questions on the protection of data at Franckesche Stiftungen or on your rights, please contact our data protection officer.
Where a business and/or contractual relationship between you and us has been established, should be substantively arranged or altered, we process personal data about you, to the extent necessary for such purposes.
We process and use your data to implement the contract. Point (a) of Art. 6(1) of the GDPR serves us as a legal basis for processing operations for which we obtain consent for a specific processing purpose. Where processing of personal data is necessary to perform a contract, processing is based on point (b) of Art. 6(1) of the GDPR. The same applies to processing operations necessary for the implementation of measures prior to entering into a contract, for ex. in cases of requests regarding services. Where we are subject to a legal obligation due to which processing of personal data becomes necessary, for example to meet tax obligations, processing is based on point (c) of Art. 6(1) of the GDPR i.c.w. Section 147 AO [German Fiscal Code].
Finally, processing operations can be based on point (f) of Art. 6(1) of the GDPR. This legal basis applies to processing operations not covered by any of the aforementioned legal bases, where processing is necessary to safeguard our legitimate interests or the ones of a third party, unless this the interests, fundamental rights and freedoms of the data subject override such interests. We are allowed to carry out such processing operations, in particular, because they have been specifically mentioned by the European legislator. Usually, a legitimate interest is to be assumed where the data subject is a customer of the controller. Our interest in this case is our ability to offer you services even after the end of our contractual relationship. Dispatching publishing brochures is based on point (f) of Art. 6(1) of the GDPR, where we send you advertising material as part of your order. Another interest on our part is to inform you of publications.
Franckesche Stiftungen does not disclose your personal data to third parties, except if it is necessary to execute business transactions. Data transfer is limited to the required minimum.
No such data transfer takes place.
We retain data obtained from you only for the duration of its purpose.
You have the right to access at any time your personal data processed by us.
You have the right to obtain from us confirmation as to whether or not personal data concerning you is processed. You may obtain free information from us about the personal data on your identity we store.
The purpose for which personal data was processed has ceased to apply.
You withdraw your consent on which the processing is based and there is no other legal ground for the processing.
You object to the processing pursuant to Art. 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing according to Art. 21(2) of the GDPR.
The processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead.
We no longer need the personal data for the purposes of the processing, but it is required by you for the establishment, exercise or defence of legal claims.
You have objected to processing pursuant to Art. 21(1) of the GDPR pending the verification whether our legitimate grounds override yours.
If you have given us consent, you have the right to withdraw your consent at any time. In this case, any data processing performed by us until such withdrawal will remain lawful. You can send us a message to datenschutz@francke-halle.de in that regard.
We do not apply automated decision-making incl. profiling (Art. 22 of the GDPR).
We protect your personal data by taking all technical and organisation measures possible to us to meet the protection goals.
We are unable to guarantee data security when communicating by e-mail so we recommend communication of confidential information by mail.
You are not obliged to communicate data to us at any time. If you do not provide us with your data specified above for the respective processing, however, we might not be able to conclude a contract with you or, where already concluded, to perform such contract in some circumstances.

References: Art. 4
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 21
 Art. 21