III. Processing of personal data
As a rule, you can use our website without specifying personal data. If you would like to donate, contact us or use our information offers, you are asked to enter the necessary data for processing. We ask you, for example, for your name and for some other personal information relevant to the respective type of use. Mandatory information is marked as such. Your data are sent to us via an SSL-secured connection and are stored on specially protected servers in Germany. Access to the data is only possible by a few specially authorized persons who deal with the technical or commercial support of these servers or who are commissioned with internal work processes. These persons have been instructed about data protection law and are committed to data secrecy. In no case will your personal data be passed on to third parties without your express consent. When entering personal data, you will be informed about the use thereof, and you must consent to such use.
In addition, we would like to point out that data transmission on the Internet (e.g. when communicating via email) may have security gaps. A complete protection of data against access by third parties is not possible. Protected data should therefore only be transmitted via a secure connection.
In the following we would like to give you an overview of how we guarantee the protection of your personal data when you access our website and what types of personal data we process for what purposes and to what extent.
Processing of data when accessing our website – log files
When you access our website, information is automatically collected. This information (server log files) includes the type of web browser, the operating system used, the domain name of your Internet service provider and similar information. In addition, the IP address is transmitted. This information is technically necessary in order to correctly deliver the content you have requested from websites and is mandatory when using the Internet.
These logfile data will be made anonymous or deleted by us within 36 hours after the end of the usage process. The legal basis for data processing is Art. 6 para. 1 p. 1 f) GDPR.
According to our IT security concept, we store the log file data for this period in order to detect and analyse any attacks against our website.
Processing of data when using the website – your requests
If you send us an enquiry by e-mail or via the contact form, we collect the data you provide for processing and responding to your request. We store this information for verification purposes for a period of up to two years. Legal basis for data processing Art. 6 para. 1 sentence 1 letter f GDPR.
Subscription to an e-mail newsletter
For the registration to our newsletter, we use the so-called double opt-in procedure. This means that we will send you a confirmation e-mail to the specified e-mail address, in which we ask you to confirm that you would like the newsletter to be sent. If you do not confirm this within 24 hours, your registration will be automatically deleted. If you confirm your wish to receive the newsletter, we will store your registration data until you unsubscribe from the newsletter. The storage serves the purpose of being able to send you the newsletter.
Furthermore, we store your IP addresses and the time of your registration at registration and confirmation in order to prevent misuse of your personal data and to provide proof of correct delivery. The legal basis for the processing of your personal data is Art. 6 para. 1 sentence 1 letter a GDPR.
You have the right to revoke your consent to receive the newsletter at any time. Your revocation does not affect the legality of the processing of your personal data until revoked. You can declare your revocation by clicking on the link provided in every newsletter e-mail or by sending a message to the contact details given in the imprint.