Source: https://www.tonigarrnfoundation.org/data-policy.html
Timestamp: 2018-12-16 20:33:19
Document Index: 336667954

Matched Legal Cases: ['Art. 4', 'Art. 4', 'Art. 4', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 17', 'Art. 21', 'Art. 20', 'Art. 7', 'Art. 6', 'Art. 9', 'Art. 77', '§ 19']

Toni Garrn Foundation - Data Policy
As the operator of the website "www.tonigarrnfoundation.org", we are committed to protecting your privacy. We collect and use the personal data of visitors to our website only to the extent necessary to make the website and our content and services functional and convenient for visitors to use. A processing of personal data takes place only after consent of the visitor. In addition, processing may take place if prior consent cannot be obtained for actual reasons and data processing is permitted by statutory provisions - in particular by the European Data Protection Regulation (DS-GVO) and the German Federal Data Protection Act (BDSG 2018).
According to Art. 4 No. 1 DS-GVO, "personal data" means all information relating to an identified or identifiable natural person ("data subject"). This includes, for example, the name, address, date of birth, e-mail address and telephone number.
According to Art. 4 No. 2 DS-GVO, "processing" means any operation or series of operations performed with or without the aid of automated procedures in connection with personal data (e.g. collection, storage, use or disclosure).
According to Art. 4 No. 7 DS-GVO, "data controller" is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of the processing of personal data.
With this data protection declaration, we first inform you about how you can contact us as the person responsible or our data protection officer (Section 1.).
Furthermore, we explain which data is processed when you visit or use our website, for what purposes and on what legal basis this takes place, whether there is an obligation to make it available and how long the data is stored (Section 2.).
In addition, we explain the extent to which data is transmitted, which security measures are maintained and whether automated decision-making takes place (Section 3. to 6.).
Finally, we would like to inform you about your rights with regard to the processing of your personal data (Section 7.).
1. The name and contact details of the resonsible party
Responsible for data processing when visiting and using this website is:
2. Processing of data when visiting and using our website
2.1. Storage of access data in protocol files ("log files")
Generally, you can visit and use our website without providing any personal information. When you visit our website, the Internet browser you are using automatically transmits certain access data to the server provided. This involves the following data:
•	browser software used as well as its version and language
•	operating system of the requesting computer,
•	name and URL of the page or file accessed,
•	Internet page from which the access takes place
•	amount of data transferred in each case.
This data is temporarily stored in a separate log file. This serves the purpose of permanently guaranteeing system security and stability and enabling technical administration to ensure trouble-free connection establishment and operation of our website as well as its comfortable use. In addition, this data is evaluated for internal administrative and statistical purposes in order to improve our online offering. A combination of this data with other data or data sources, which would allow conclusions to be drawn about your person, is not carried out.
Legal basis for this processing is Art. 6 Para. 1 P. 1 Letter f) DS-GVO. With this data processing, we pursue the legitimate interest of maintaining the operational security of our website in order to be able to provide this website and the information it contains in a trouble-free and convenient manner.
The data will be deleted as soon as it is no longer required to achieve the aforementioned purposes of its collection. If data is collected in order to provide our website, the data will therefore be deleted when the respective session has ended. Otherwise, the data will be deleted regularly after 31 days at the latest. A storage going beyond this is possible; in this case, however, the IP addresses are deleted or alienated so that an assignment to a natural person is no longer possible.
Type and purpose of data processing and storage period:
When you visit our website, so-called "cookies" are stored on your terminal device or data carrier. Cookies are text or information files that your Internet browser automatically saves on your terminal when you visit our website. They contain certain data or settings that are exchanged between your Internet browser and our system. This primarily involves information about which subpages of our Internet offer are called up how frequently.
The information generated or passed on by means of cookies is not personal data. Therefore, you cannot be personally identified on the basis of this information. Cookies also cannot execute programs or damage your end device. Rather, cookies serve the purpose of compiling statistics on the use of our website and thus optimizing it.
On the one hand, the use of cookies makes the use of our website more pleasant or easier for you. Some functions of our website cannot be offered without the use of cookies; for these it is necessary that the browser is recognized after a change of web page. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after leaving our website.
The following information is stored or transmitted by means of these cookies:
•	operating system of the requesting computer
•	name and URL of the page or file accessed
In addition, we use temporary cookies that are stored on your terminal for a specified period of time in order to optimize user-friendliness. If you visit our site again to make use of our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again.
In addition, we use cookies to record the use of our website statistically and to evaluate it for the purpose of optimizing our offer for you. These cookies allow us to automatically recognize that you have already visited our site when you visit it again. Such analysis cookies are used for the purpose of improving the quality of our website and its content. The analyses tell us how the website is used and enable us to continually optimize our services. These cookies are automatically deleted after a defined period of time.
The visitor data collected in this way is pseudonymized by technical precautions. The data is not stored together with other personal data of the visitors. It is therefore no longer possible to assign the data to the requesting visitor.
The legal basis for this processing is Art. 6 Para. 1 Sentence 1 Letter f) DS-GVO. With this data processing, we pursue the legitimate interest of optimizing the user-friendliness of our Internet pages.
Possibility to object to the storage of cookies:
Most Internet browsers automatically accept cookies. You can also use our website without cookies; however, we would like to point out that you may then no longer be able to fully use all the services or functionalities of our website.
You can prevent the use of cookies and thus object to their future use by configuring your browser settings in such a way that the storage of certain or all cookies is blocked or only carried out with your explicit consent. The specific steps required to make such an adjustment depend on the Internet browser used and its version; for more information, please refer to the help function of your browser.
If you wish to prevent the use of Flash cookies, you can install an appropriate add-on for the Internet browser you are using, e.g. "Better Privacy" for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy).
2.3. Processing data using Google Analytics and Google Tag Manager
Our website uses Google Analytics, a web analysis service of Google Inc. "("Google"). Google Analytics uses cookies, which are information files placed on your computer or other device, to enable an analysis of how the website is used. In this context, we also use Google Tag Manager for the purpose of better regulation of the Google Analytics Tool. The option to make IP addresses anonymous is managed by Google Tag Manager via an internal setting that is not visible in the source of this page. This internal setting is set in such a way that the IP addresses are made anonymous.
The Google Analytics information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, as IP anonymization is activated on this website, within member states of the European Union or in other states that are party to the Agreement on the European Economic Area, Google will shorten your IP address beforehand. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services to website operators relating to website activity and internet usage.
Google Analytics is used in accordance with the requirements on which the German data protection supervisory authorities have agreed with Google. We would like to point out that the extension "_anonymizeIp()" of Google Analytics has been activated on this website in order to guarantee the anonymous recording of IP addresses.
This means that IP addresses are further processed in a shortened form and direct personal references can thus be excluded
Google Analytics is not combined with other data from Google.
Objections Possibility
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plug-in or if you are accessing our website via a mobile device, you can prevent the aforementioned collection and processing of data by Google Analytics on our website in the future by clicking on the following link. This will set an opt-out cookie on your device that will prevent your data from being collected in the future when you visit this website. If you delete your cookies, you must click the link again: Deactivate Google Analytics
Information from Google as a third party:
Terms of use: https://policies.google.com/terms
The legal basis for the aforementioned data processing is Art. 6 Para. 1 Sentence 1 Letter f) DS-GVO. With the use of these measures, we pursue the legitimate interest of designing and continuously optimizing our service on the basis of the usage analyses carried out. Furthermore, data will only be transmitted in a pseudonymized form.
2.4. Processing of data when using Vimeo
For advertising purposes, our website includes videos from the "Vimeo" platform of the provider Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. More information about Vimeo's processing of personal data you finde here: Privacy Policy: https://vimeo.com/privacy.
Vimeo may use Google Analytics on its own pages.
The legal basis for the aforementioned data processing is Art. 6 Para. 1 Sentence 1 Letter f) DS-GVO. Our legitimate interest lies in the fulfillment of advertising purposes and an increase in the range and functionality of our offering. Due to the measures and settings described above, we make use of the options available to us to ensure that data processing is only carried out at the request of the person concerned or can be prevented by this person.
2.5. Processing of data using Social Media Bookmarks
We use Social Bookmarks on our website to refer and link to our profiles with the following third parties:
You can find more information about the third-party providers here:
These links refer to our respective profiles with the third party providers and our activities there to make our activities more known and our service more comfortable for the visitors of our website. The Social Bookmarks are displayed as buttons with the logo of the respective third-party provider and integrated into our website as links. You will therefore be forwarded to our profile or our page at the respective provider when you click on the relevant Bookmark; in this case, the data mentioned will be transmitted to the respective provider. For information on the handling of your personal data when using the services of the providers, please refer to the data protection information of the respective provider.
Legal basis for the integration of these Social Bookmarks is Art. 6 Para. 1 Sentence 1 Letter f) DS-GVO. Our legitimate interest is to make our profiles or activities at the respective third parties known and to advertise for them. Visitor data will only be forwarded to the respective third party provider when the visitor clicks on the respective Bookmark.
2.6. Processing of data in the handling of payments
We use Stripe, an offer of the American Stripe Inc. (hereinafter referred to as "Stripe") for the processing of payments (legal basis pursuant to the DSGVO, if and to the extent applicable: Art. 6 Para. 1 Letters b and f DSGVO). Stripe is certified in accordance with both the EU American and the Swiss-American Privacy Shield and thus guarantees adequate data protection. In particular, Stripe has published the following information on the type, scope and purpose of data processing: data protection declaration, entry in the Privacy Shield list. https://www.privacyshield.gov/list
2.7 Processing data when using our donation form
Our website contains a donation form. If you wish to make a donation via our website, you must use this donation form to provide certain information necessary for making a donation and issuing a donation receipt. This mandatory information includes your first and last name, e-mail address and address for the donation receipt (street, house number, postcode, city and country). Specifying the telephone number as well as filling in the comment field is voluntary. The data provided will be used to process the donation. Your name, address and e-mail address are required to provide you with a receipt for your donation..
If you are based in the USA and wish to donate from there and click on the respective button, you will be redirected to the website of the King Baudoin Foundation United States.
You will find more information about the protection of your data by the provider here:
Legal basis for this processing is Art. 6 Para. 1 Sentence 1 Letter f) DS-GVO. It is our legitimate interest to guarantee a user-friendly possibility to donate on our website and to carry out the donation process with you properly.
This data will be stored for as long as is necessary to process the donation in question. In addition, longer storage may be necessary due to legal obligations, in particular due to commercial or tax storage obligations under the German Commercial Code (HGB) and the German Tax Code (AO).
3. Obligation to provide data, necessity of provision for the closing of a contract, possible consequences of non-delivery
If you have decided to make a donation, we will need the data labeled as required in order to process your donation properly. We cannot process your donation request without this personal data.
4. Data transmissions and recipients of data
The transfer of your personal data to third parties will only take place for the purposes listed below.
•	if you have given your consent pursuant to Art. 6 Para. 1 Sentence 1 Letter a) DS-GVO or
•	if the disclosure is necessary pursuant to Art. 6 Para. 1 Sentence 1 Letter f) DS-GVO for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an interest worthy of protection in non-disclosure of your data, or
•	to the extent that there is a legal obligation pursuant to Art. 6 Para. 1 Sentence 1 Letter c) DS-GVO for the disclosure, or
•	if this is legally permissible and the disclosure is necessary pursuant to Art. 6 Para. 1 Sentence 1 Letter b) DS-GVO for the performance of a contract with you.
If you visit our website, data about this visit may be transmitted to companies based in the USA. This is done for analysis purposes and is exclusively anonymous data; more detailed information can be found under section 2.3. regarding the use of the web analysis service Google Analytics, under section 2.4. regarding Vimeo and under section 2.5. regarding the social media platforms Instagram, Facebook and Twitter.
Within the framework of an agreement with the USA (so-called "EU-US Privacy Shield" or "EU-US Data Protection Shield", https://www.privacyshield.gov/EU-US-Framework), the European Commission has taken a decision on adequacy according to which the guarantees for the transmission of data on the basis of this agreement correspond to the data protection standards in the EU. The American companies to which data is transferred via visits to our website have entered their names on a corresponding list and have committed themselves to comply with the obligations stipulated in the agreement (https://www.privacyshield.gov/list).
The agreement and further information can be found on the EU website for legal texts, currently available in German at http://eur-lex.europa.eu/homepage.html?locale=de.
The German full text of the agreement is currently available at
We make every effort to ensure the security of your data. In order to prevent the loss, misuse and alteration of personal data, we have set up appropriate physical, electronic and administrative procedures and adapted them to the current state of the art. This includes the training of personnel who have access to personal data. For the technically secure handling of personal data on our website, we use an SSL certificate.
6. No use of automated decision making, including profiling
We do not use any so-called profiling or other decision making which is based exclusively on automated data processing.
You have the right to request information about your personal data processed by us. In particular, you may request information on the processing purposes, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right of rectification, deletion, restriction of processing or objection, the existence of a right of complaint, the origin of your data if not collected from us, as well as the existence of an automated decision-making process including profiling and, if applicable, meaningful information on its details.
You have the right to immediately demand the correction of data concerning your person which are incorrectly stored with us or to demand their completion if they are incompletely stored with us.
Right to deletion (Art. 17 DS-GVO)
You have the right to demand the deletion of your personal data stored by us, unless processing is necessary to exercise the right of freedeom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
You have the right to demand the restriction of the processing of your personal data as far as the correctness of the data is disputed by you, as far as the processing is unlawful, but you refuse the deletion of the data as far as we no longer need the data, but you need it for the assertion, exercise or defence of legal claims, or as far as you have lodged an objection against the processing pursuant to Art. 21 DS-GVO.
Right to data transfer (Art. 20 DS-GVO)
You have the right to receive your personal data, which you have provided to us, in a structured, common and machine-readable format or to demand transmission to another responsible person.
(Art. 7 Para. 3 in conjunction with Art. 6 Para. 1 Sentence 1 Letter a) or Art. 9 Para. 2 Letter a) DS-GVO)You have the right to revoke your consent to us at any time. The consequence of this is that we may not continue the data processing based on this consent for the future unless it can be based on another legal basis.
Right of appeal to a supervisory authority (Art. 77 DS-GVO in conjunction with § 19 BDSG 2018)
You have the right to complain to a supervisory authority if you are of the opinion that the processing of your personal data violates the DS-GVO. Usually you can contact the supervisory authority of your place of residence or workplace or our company headquarters.
In addition, you have a
If we process your personal data on the basis of legitimate interests, you may object to this for reasons arising from your particular situation.
In addition, you can object to data processing if we carry this out for purposes of direct advertising. To exercise your rights, you can contact us via the contact details referred to in Item 1.