Source: https://www.erjch2019.com/data-protectiondatenschutz/
Timestamp: 2019-04-24 22:00:22+00:00

Document:
Thank you very much for your interest in our non-profit organization. Data protection is particularly important to us. It is possible to use the Internet pages of the Essen Rowing Regatta Association without providing any personal data. However, if a person concerned wishes to make use of special services provided by our association via our website, personal data may have to be processed. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the person concerned.
We have implemented numerous technical and organisational measures to ensure the complete protection of personal data processed via this website. Nevertheless, Internet-based data transmissions can in principle have security gaps, so that absolute protection cannot be guaranteed. For this reason, each person concerned is free to transmit personal data to us by alternative means, such as telephone.
Our data protection declaration is based on the terms used by the European directive and regulation giver when the data protection basic regulation (DS-GVO) was issued. Our data protection declaration should be easy to read and understand for the public as well as for our members, supporters and interested persons. In order to guarantee this, we would like to explain the terms used in advance.
Our website collects a series of general data and information each time the website is accessed by a data subject or an automated system. These general data and information are stored in the log files of the server. The (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrer), (4) the sub-sites which are accessed via an accessing system on our website can be recorded, (5) the date and time of access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information used to avert dangers in the event of attacks on our information technology systems.
When using this general data and information, we do not draw any conclusions about the person concerned. This information is required to (1) correctly deliver the content of our website, (2) optimize the content and advertising of our website, (3) ensure the long-term functionality of our information technology systems and the technology of our website, and (4) provide law enforcement authorities with the information they need to prosecute a cyber attack. This anonymously collected data and information is therefore evaluated by us both statistically and with the aim of increasing data protection and data security in our association to ultimately ensure an optimal level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by the person concerned.
Due to legal regulations, our website contains information that enables us to contact our association quickly by electronic means and to communicate directly with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the data controller by e-mail or via a contact form, the personal data transmitted by the data subject is automatically stored. Such personal data transmitted voluntarily by a data subject to the data controller will be stored for the purposes of processing or contacting the data subject. This personal data will not be passed on to third parties.
* The personal data have been collected or otherwise processed for purposes for which they are no longer necessary.
* The data subject withdraws his consent on which the processing was based pursuant to Art. 6 para. 1 letter a DS-GVO or Art. 9 para. 2 letter a DS-GVO and there is no other legal basis for the processing.
* The data subject objects to the processing under Article 21(1) DS Block Exemption Regulation and there are no overriding legitimate reasons for the processing or the data subject objects to the processing under Article 21(2) DS Block Exemption Regulation.
* The personal data have been processed unlawfully.
* The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.
* The personal data were collected in relation to information society services offered pursuant to Art. 8 para. 1 DS-GVO.
If one of the above reasons applies and a person concerned wishes to have personal data stored by us deleted, he or she can contact us at any time to ensure that the request for deletion is complied with immediately.
If the personal data have been made public by us and if our association is obliged to delete the personal data in accordance with Art. 17 para. 1 DS-GVO, taking into account the available technology and implementation costs, we shall take appropriate measures, including technical measures, to inform other persons responsible for data processing who process the published personal data that the data subject has requested the deletion of all links to this personal data or copies or replications of this personal data from these other persons responsible for data processing, insofar as the processing is not necessary. We will take the necessary steps in individual cases.
* The accuracy of the personal data is contested by the data subject for a period of time which allows the controller to verify the accuracy of the personal data.
* The processing is unlawful and the data subject refuses to erase the personal data and instead requests that the use of the personal data be restricted.
* The controller no longer needs the personal data for the purposes of processing, but the data subject needs them for the assertion, exercise or defence of legal rights.
* The data subject has lodged an objection to the processing pursuant to Art. 21 (1) DS-GVO and it is not yet clear whether the legitimate reasons of the data controller outweigh those of the data subject.
If one of the above conditions is met and a data subject wishes to request the restriction of personal data stored by us, he or she can contact an employee of the data controller at any time. The employee will arrange for the processing to be restricted.
The person concerned can contact us at any time to assert the right to data transfer.
In the event of objection, we will no longer process the personal data unless we can prove compelling grounds for processing worthy of protection which outweigh the interests, rights and freedoms of the person concerned, or the processing serves to assert, exercise or defend legal claims.
If we process personal data for the purpose of direct advertising, the data subject has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling as far as it is connected with such direct advertising. If the data subject objects to the processing for direct marketing purposes, we will no longer process the personal data for these purposes.
In addition, the data subject has the right to object to the processing of personal data relating to him or her which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 DS-GVO for reasons arising from his or her particular situation, unless such processing is necessary for the performance of a task in the public interest.
In order to exercise the right to object, the data subject may contact us directly. The data subject is also free to exercise his or her right of objection in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.
Where the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the data controller or (2) is taken with the express consent of the data subject, we shall take appropriate measures to safeguard the rights and freedoms and the legitimate interests of the data subject, including at least the right to have the data controller intervene, to present his or her point of view and to contest the decision.
Art. 6 I lit. a DS-GVO serves our association as a legal basis for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the person concerned is a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of other services or consideration, the processing is based on Art. 6 I lit. b DS-GVO. The same shall apply to such processing operations which are necessary for the implementation of pre-contractual measures, for example in cases of inquiries regarding our products or services. If our association is subject to a legal obligation which requires the processing of personal data, such as for the fulfilment of tax obligations, the processing is based on Art. 6 I lit. c DS-GVO. In rare cases, the processing of personal data may become necessary in order to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our site were injured and his name, age, health insurance information or other vital information would have to be disclosed to a doctor, hospital or other third party. Then the processing would be based on Art. 6 I lit. d DS-GVO. Ultimately, processing operations could be based on Art. 6 I lit. f DS-GVO. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our association or a third party, provided that the interests, fundamental rights and fundamental freedoms of the data subject do not predominate. Such processing operations are permitted to us in particular because they have been specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the data controller (recital 47 sentence 2 DS-GVO).
We will inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may result from contractual provisions (e.g. information on the contractual partner). Sometimes it may be necessary for a contract to be concluded that a person concerned makes personal data available to us which must subsequently be processed by us. For example, the person concerned is obliged to provide us with personal data if our association concludes a contract with him or her. Failure to provide personal data would mean that the contract could not be concluded with the data subject. The data subject must contact one of our employees before personal data is provided by the data subject. Our employee will inform the data subject on a case-by-case basis whether the provision of personal data is required by law or contract or is necessary for the conclusion of a contract, whether there is an obligation to provide the personal data and what the consequences of not providing the personal data would be.
As a responsible association, we refrain from automatic decision-making or profiling.
This data protection declaration was created by the data protection declaration generator of the data protection officers in cooperation with RC GmbH, which recycles used notebooks and the file sharing lawyers of WBS-LAW.
We do not send newsletters. Information will only be sent on request.
This website does not use any etracker analysis service.
This website does not use any open source web analysis service Piwik.
On these pages functions of the service Facebook are integrated.
There are no functions of the Twitter service included on these pages.
These pages do not use any functions of Google +1.
No functions of the Instagram service are included on these pages.
This website does not use any functions of the LinkedIn network.
On this page we do not use social plugins of the social network Pinterest.
This website does not use any functions of the XING network.
These pages do not use any buttons of the Tumblr service.
Our website uses plugins from the YouTube site operated by Google.
Wir freuen uns sehr über Ihr Interesse an unserer gemeinnützigen Organisation. Datenschutz hat einen besonders hohen Stellenwert bei uns. Eine Nutzung der Internetseiten des Essener Ruder-Regattavereins ist grundsätzlich ohne jede Angabe personenbezogener Daten möglich. Sofern eine betroffene Person besondere Services unseres Vereins über unsere Internetseite in Anspruch nehmen möchte, könnte jedoch eine Verarbeitung personenbezogener Daten erforderlich werden. Ist die Verarbeitung personenbezogener Daten erforderlich und besteht für eine solche Verarbeitung keine gesetzliche Grundlage, holen wir generell eine Einwilligung der betroffenen Person ein.
Auf dieser Seiten sind Funktionen des Dienstes Facebook eingebunden.

References: Art. 6
 Art. 9
 Art. 8
 Art. 17
 Art. 21
 Art. 89

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6