Source: https://www.welthungerhilfe.org/privacy/
Timestamp: 2020-08-06 12:34:19
Document Index: 229728792

Matched Legal Cases: ['§ 4', '§ 9', '§ 6', '§ 6', '§ 6', '§ 6', '§ 28', '§ 12', '§ 8', '§ 6', '§ 6', '§ 6', '§ 6', '§ 6', '§ 15', '§ 16', '§ 17', '§ 18', '§ 21', '§ 77', '§ 257', '§ 147']

Privacy - Welthungerhilfe
We, Deutsche Welthungerhilfe e. V., take the protection of your personal data seriously. We treat your personal data confidentially and, naturally, in accordance with statutory data protection regulations and this Privacy Policy.
In principle, it is possible to use our website without providing personal data. Insofar as any personal data (e.g. name, address, or email address) are collected on our website, this occurs on a purely voluntary basis. These data will not be shared with third parties without your express consent.
Please note that online data transfer (e.g. in connection with email communication) is vulnerable to security flaws. It is not possible to fully secure data against third-party access.
These data cannot be connected to individual persons and will not be combined with other data sources.
Party responsible and contact information:
This Privacy Policy governs data processing by:
In this Privacy Policy, we explain the kind, scope, and purpose of the processing of personal data within the online services of Deutsche Welthungerhilfe e. V. and its related websites, functions, and content (hereinafter referred to as “Website”). This Privacy Policy applies regardless of the individual domains, systems, platforms, and devices (e.g. desktop or mobile devices) on which our online services are accessed.
Tel.: +49 (0)228-2288 176
Fax: +49 (0)228-2288 250
Terms such as "personal data" or the "processing" of the same are defined as per § 4 of the General Data Protection Regulation (GDPR). It is possible to use the Website—with the exception of social plugins—for informational purposes without providing personal data (see §§ 9, 10, 12).
We process our users’ personal data only in accordance with the relevant data protection regulations; this includes but is not limited to cases in which data processing is required to provide our online services, the user has consented, or our legitimate interests so require (i.e. interests of analysis, optimisation, and commercial operation and security of our online services as per § 6.1(f) GDPR—especially for measuring reach, creating “personas” for publicity and marketing purposes, capturing access data, and utilising the services of third-party providers).
In this context, the term “user” comprises all categories of persons affected by the data processing; this includes our donors, cooperative partners, interested parties, and others visiting our online services. The terms used, e.g. “user”, are gender neutral.
Please note that the legal basis for consent as per §§ 6.1(a), 7 GDPR constitutes the legal basis for processing personal data both for purposes of fulfilling our legal obligations (§ 6.1(c) GDPR) and for purposes of protecting our legitimate interests (§ 6.1(f) GDPR).
If you wish to donate, we will ask for your name and for additional personal informational relevant to the donation. Your data are sent to us via an SSL-encrypted connection and are stored on specially-protected servers in Germany. They can be accessed by only a few people with special clearance who are involved in the technical or commercial support of these servers. On no account will your data be shared with third parties without your express consent.
Please note that online data transfer (e.g. in connection with email communication) is vulnerable to security flaws. It is not possible to fully secure data against third-party access. Private data should therefore be transmitted only via a secure connection (SSL).
We take state-of-the-art organisational, contractual, and technical security measures in order to ensure compliance with the regulations of data protection laws and to protect the data we process against random or targeted manipulation, loss, destruction, or access by unauthorised persons.
Said security measures include but are not limited to the encrypted transmission of data between your browser and our server.
3. Sharing Your Data with Third Parties and Third-Party Providers
If we employ any external service providers to provide our services, this is done in accordance with the stipulations of § 28 GDPR. We have concluded a limited-processing contract with each data processing company to ensure that your personal data are processed according to their purpose and not shared. We also take appropriate technical and organisational measures to protect your personal data.
This applies to service providers including but not limited to the following:
i-gelb GmbH, Bruesseler Str. 89-93, 50672 Cologne: Website maintenance and development
micropayment GmbH, Scharnweberstrasse 69, 12587 Berlin: Online payment transactions for donations
Episerver GmbH, Wallstrasse 16, 10179 Berlin: Dispatch service provider for dispatch of newsletter (see § 12)
Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA: Website analysis and remarketing (see §§ 8, 9)
Falcon.io ApS, H.C. Andersens Boulevard 27, 1., 1553 Copenhagen V, Denmark – Software for social media communication and analysis
Trebbau direct media GmbH, Schönhauser Str. 21, 50968 Köln
Bonner Werkstätten Lebenshilfe Bonn gemeinnützige GmbH, Am Alten Stauwehr 14-16, 53340 Meckenheim
AZ Direct GmbH, Carl-Bertelsmann-Str. 161, 33311 Gütersloh
Acxiom Deutschland GmbH, Elsenheimerstr. 55a, 80687 München
cologne timing GmbH, Oskar-Jäger-Straße 173, 50825 Köln
Brakeley GmbH, Emil-Riedel-Straße 18, 80538 München
Ulrike Thonemann, Mommsenstr. 123, 50935 Köln
sia Media, Bayerstrasse 45, 53332 Bornheim
Insofar as contents, tools, or other materials are employed within the framework of this Privacy Policy by other providers (hereinafter collectively referred to as “Third-Party Providers”) registered in a third country, it must be assumed that data are being transferred to the Third-Party Provider's country of record. Third countries are countries in which the GDPR is not directly-applicable law—categorically, this includes countries outside of the European Union and the European Economic Area. Data may be transferred into third countries in the presence of the appropriate data protection level, user consent, or another form of statutory authorisation.
4. Making Contact via Contact Form
Our Website offers you multiple options to send your enquiries to us through a contact form via an encrypted SSL connection. In accordance with § 6.1(a) GDPR, exclusively the data and information required to process your enquiry will be processed.
If you leave comments at the applicable places on our Website, your IP address will be stored for seven days on the basis of our legitimate interests within the meaning of § 6.1(f) GDPR. This storage policy is for our security. Should someone leave illegal content in the comments (insults, prohibited political propaganda etc.), we can be prosecuted for the post ourselves and are therefore interested in the identity of the author.
6. Access Data and Logfiles
On the basis of our legitimate interests within the meaning of § 6.1(f) GDPR, we collect data every time the server hosting this service (Serverlogfiles) is accessed. Access data include but are not limited to:
The amount of data sent during the transmission of the page
Browser and operating system data
The website serving as the access point
For security reasons (e.g. to resolve cases of abuse or fraud), logfile information will be stored for a maximum of seven days and thereafter deleted. Data that must be retained for purposes of proof are exempt from deletion until the respective incident is fully resolved.
8. Using Google Analytics
10. Facebook, Custom Audiences, and Facebook Marketing Services
The following information explains the content of our newsletter; subscription, dispatch, and statistical assessment procedures; and your withdrawal rights. By subscribing to our newsletter, you consent to receiving the same and to said procedures.
Content of Newsletter: We send newsletters, emails, and other electronic messages with promotional material (hereinafter “Newsletter”) exclusively with the consent of the recipient. Our Newsletter contains information regarding our projects, campaigns, emergency aid efforts, actions, and our organisation.
Double Opt In and Logging: Subscribing to our Newsletter is done via a double opt in procedure. This means that, upon subscribing, you receive an email requesting confirmation of your subscription. This confirmation is necessary in order to prevent people from registering with an email address other than their own. Newsletter subscriptions are logged in order to document the subscription process in accordance with statutory requirements. This includes storing the times of subscription and confirmation as well as the IP address. Any changes to your data as stored by our dispatch service provider are also logged.
Subscription Data: In order to subscribe to our Newsletter, you only need to provide your email address. You may optionally also provide a name so that we can address you personally in our Newsletter.
Dispatch Service Provider: To dispatch the Newsletter, we employ the service provider Episerver GmbH, Wallstrasse 16, 10179 Berlin, which is under obligation to us to observe data protection laws and which ensures that your data are used exclusively to dispatch the WHH Newsletter. Your data are stored exclusively in European data centres.
You can view our dispatch service provider’s privacy policy here: https://www.episerver.com/legal/privacy-statement/.
Statistical Surveys and Analyses: The Newsletters contain a so-called “web beacon”, i.e. a pixel-sized file that is retrieved when opening the Newsletter on the dispatch service provider's server. For purposes of this retrieval, technical information—such as browser and system information, your IP address, and the time of retrieval—will be collected. This information will be used for the technical improvement of the services on the basis of the technical data, of the target groups and their reading habits based on their access locations (determined by means of the IP address), or of the access times. Our statistical data collection methods also include determining whether the Newsletter is opened, when it is opened, and which links are clicked. Although this information may be associated with individual Newsletter recipients for technical reasons, neither we nor the dispatch service provider desire to monitor individual users; rather, these evaluations help us to recognise the reading habits of our users in order to adjust our content to them or to distribute different content to different users depending on individual interests.
Unsubscription/Withdrawal: You can unsubscribe from—that is, withdraw your consent to receiving—our Newsletter at any time. This will terminate both your consent to receiving the same via the dispatch service provider and to the statistical analyses. It is unfortunately not possible to separately terminate either dispatch through the dispatch service provider or statistical evaluation. You can find a link to unsubscribe from the Newsletter at the end of each Newsletter. Should you have subscribed to the Newsletter and subsequently terminated said subscription, your personal data will be deleted.
12. Photographs, Video (Clips), ...
Pictures and video (clips),..., used on this Website were provided for publication by contracted photographers, photography agencies, or the depicted persons with their consent. Ownership of and credit for the photographs is provided in the copyright notice below the photograph or in the photograph’s metadata. The legal basis for this is § 6.1(f) GDPR.
13. Incorporating Third-Party Services and Content
We employ the contents and services of Third-Party Providers within our online services on the basis of our legitimate interests (i.e. interests of analysis, optimisation, and commercial operation of our online services within the meaning of § 6.1(f) GDPR) in order to incorporate their contents and services such as videos (hereinafter collectively referred to as “Contents”). This always requires the Third-Party Providers of these Contents to detect user IP addresses, since they cannot send the Contents to the users’ browsers without the IP address. The IP address is therefore required in order to display these Contents. We endeavour to use only the Contents of such Providers as use the IP address solely to deliver the Contents. Third-Party Providers may also use pixel tags (invisible graphics also known as “web beacons”) for statistical or marketing purposes. Using the pixel tags, information such as visitor traffic on the respective pages can be evaluated. Furthermore, the pseudonymous information can be stored in cookies on the users’ devices and may contain data including technical information about the browser and operating system, referring websites, access times, and additional data regarding the use of our online services; said information can also be connected with other such information from other sources.
The following outline offers an overview of Third-Party Providers and their Contents. It also provides links to their privacy policies which contain other information regarding data processing and opt-out options, some of which have already been described:
If you use third-party payment services (e.g. PayPal or Sofortüberweisung, an online payment system based in Munich), the terms and conditions as well as the privacy policy of the respective Third-Party Provider apply; these can be accessed on their respective websites or transaction applications.
Maps sourced from the “Google Maps” service of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt out: https://www.google.com/settings/ads/
Videos from the “YouTube” platform of third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt out: https://www.google.com/settings/ads/
Functions provided by Twitter may be integrated into our online services. Said functions are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the “retweet” function, the websites you visit are connected to your Twitter account and shared with other users. In the course of this, data are also transmitted to Twitter. Please note that we, as the provider of the Website, are not privy to the contents of the transmitted data nor to their use by Twitter. Twitter's privacy policy can be found at twitter.com/privacy. You can change your data protection settings on Twitter in your account settings at http://twitter.com/account/settings.
14. Our Users’ Rights
Upon request and authentication, we are happy to inform you in writing and in accordance with the applicable law if personal data concerning yourself have been processed. If this is the case, you are entitled to the disclosure of these personal data and of the information listed in detail in § 15 GDPR.
Should the personal data concerning yourself be incorrect, you have the right to immediately demand the rectification of inaccurate personal data or the completion of incomplete personal data (§ 16 GDPR).
You have the right to demand that personal data concerning yourself be immediately deleted insofar as one of the particular reasons listed in § 17 GDPR applies, for example if the data are no longer required for their intended purpose (right to erasure).
You also have the right to demand the restriction of processing if one of the prerequisites listed in § 18 GDPR applies; for example, if you have objected to processing, this will apply for the duration of examination by the controller.
You have the right to object at any time to the processing of personal data concerning yourself for reasons arising from your particular situation. Our company will then cease to process said personal data unless we can prove compelling grounds for the processing or the processing serves to establish, exercise, or defend legal claims (§ 21 GDPR).
Without prejudice to any other administrative or judicial remedy, you have the right to file a complaint with the supervisory authority if you believe that the processing of personal data concerning yourself infringes the GDPR (§ 77 GDPR). You may exercise this right through a supervisory authority in the member state of your place of residence, of your place of employment, or of the place in which the alleged infraction occurred. In North Rhine–Westphalia, the following person has jurisdiction:
The data protection officer for North Rhine–Westphalia (LDI)
15. Deleting Data
The data that we store are deleted as soon as they are no longer required for their intended purpose and erasure does not violate any statutory retention periods. Insofar as user data are not deleted because they are required for other legal purposes, the processing of the same is restricted. This means that the data are segregated and not processed for other purposes. This applies, for example, to user data that need to be stored for commercial or tax purposes.
In accordance with statutory regulations, data pursuant to § 257.1 HGB (German Commercial Code) must be retained for six years (annual financial statements, vouchers etc.), and data pursuant to § 147.1 AO (German Revenue Code) must be retained for ten years (books, records, management reports, vouchers, documentation relevant to taxation etc.).
Users can object to the future processing of their personal data, including processing for purposes of direct advertising. We respect your right to object provided that we are not legally obligated to process the data in question.
17. Liability for Links
We hereby expressly declare that no illegal Contents were identifiable on the linked pages at the time of the respective link’s creation. Deutsche Welthungerhilfe e.V. has no influence on the current and future design, Contents, or ownership of linked pages. Such being the case, we hereby expressly distance ourselves from all Contents on the linked pages that were changed after the link was created; this applies to all links and referrals contained in our own online services. Only the provider of the page receiving the referral and not the entity issuing the referral by way of link to the respective publication is liable for illegal, inaccurate, or incomplete Contents and particularly for damages arising from the use or disuse of information so provided.
18. Notice to Parents and Legal Guardians
Parents and legal guardians are responsible for protecting their children’s privacy. We ask that you talk with your children about how to handle personal data online in a safe and responsible manner.
19. Amendments to the Privacy Policy
We reserve the right to amend the Privacy Policy in order to accommodate changes to the law, to services, and to data processing. However, this applies only with regard to provisions regarding data processing. Insofar as user consent is required or components of the Privacy Policy contain regulations regarding the contractual relationship with the users, the amendments in question will only be made with the users’ consent.
We always upload amendments to our Privacy Policy here and recommend that you read this Policy on occasion.
20. Your Questions or Comments
You are welcome to contact our data protection officer with any questions, suggestions or complaints regarding our Privacy Policy. You can reach our data protection officer by email at datenschutz@welthungerhilfe.de or by post at our postal address with the addition of “To the data protection officer”. If you wish to receive information on your data, change or delete it, please contact the private donor service.