Data Protection Declaration |
|---|
|
|
We are pleased that you are visiting our website and thank you for your interest in the work of our Stiftung Pro Artenvielfalt (SPA) and in our projects for the protection and restoration of biodiversity in Germany and along bird migration routes in the EU countries of Southern Europe. The protection and security of your personal data are a high priority for us. We handle your data confidentially. Compliance with the applicable legal provisions is a matter of course for us. The legal framework for data protection is provided by the EU General Data Protection Regulation (GDPR / DSGVO), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG) for the storage of and access to information on end-user devices (e.g. cookies).
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data are any data by which you can be personally identified. Detailed information on data protection can be found in our privacy policy set out below.
The website operator carries out data processing on this website. The operator’s contact details can be found in the “Information on the controller” section of this privacy policy.
On the one hand, your data are collected when you provide them to us. This may, for example, include data that you submit to us when contacting us.
Other data are collected automatically by our IT systems when you visit the website, or after you have given your consent. These are primarily technical data (e.g. internet browser, operating system or time of page access). These data are collected automatically as soon as you enter this website.
Some of the data are collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, donation processing or other enquiries.
Within the framework of the applicable legal provisions, you have the following rights at any time concerning your personal data:
For this and for further questions on the subject of data protection, you may contact us at any time using the contact details given in the section “Information on the controller”.
When visiting this website, your browsing behaviour may be statistically analysed. This is done primarily using so-called analysis programs.
Further information on the analysis tools used can be found in section “5. Analysis Tools and Advertising”. Information on other integrated third-party services/tools can be found in section “6. Plugins and Tools” and, for the donation form, in section “4. Data Collection on this Website”.
We host the content of our website with the following provider:
ALL-INKL.COM - Neue Medien Münnich,
Hauptstraße 68,
02742 Friedersdorf,
Germany
(hereinafter “ALL-INKL”).
Details can be found in ALL-INKL’s data protection information: https://all-inkl.com/datenschutzinformationen/.
ALL-INKL is used for contract fulfilment towards our potential and existing supporters/donors (Art. 6(1)(b) GDPR / DSGVO) and in the interest of secure, fast and efficient provision of our online offering (Art. 6(1)(f) GDPR / DSGVO).
We have concluded a data processing agreement (DPA) with ALL-INKL. This is a contract required under data protection law, which ensures that ALL-INKL processes personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR / DSGVO.
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data are collected. Personal data are data by which you can be personally identified. This privacy policy explains which data we collect and what we use them for. It also explains how and for what purpose this is done.
Please note that data transmission on the internet (e.g. when communicating by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
The controller responsible for data processing on this website is:
Stiftung Pro Artenvielfalt
Meisenstraße 65
33607 Bielefeld
Telephone: 0049 (0) 521 2997-883
E-Mail: service@stiftung-pro-artenvielfalt.org
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).
Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a justified request for erasure or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, deletion will take place once those grounds no longer apply.
If you have consented to data processing, we process your personal data based on Art. 6(1)(a) GDPR / DSGVO or Art. 9(2)(a) GDPR / DSGVO, if special categories of data pursuant to Art. 9(1) GDPR / DSGVO are processed. In the event of explicit consent to the transfer of personal data to third countries, data processing is also carried out based on Art. 49(1)(a) GDPR / DSGVO. If you have consented to the storage of cookies or to access to information on your end device, data processing is also carried out based on Section 25(1) TDDDG. Consent may be withdrawn at any time. If your data are required for contract fulfilment or for carrying out pre-contractual measures, we process your data based on Art. 6(1)(b) GDPR / DSGVO. Furthermore, we process your data if this is necessary for compliance with a legal obligation based on Art. 6(1)(c) GDPR / DSGVO. Data processing may also be carried out based on our legitimate interest pursuant to Art. 6(1)(f) GDPR / DSGVO. Information on the relevant legal bases in each individual case is provided in the following paragraphs of this privacy policy.
As part of our business activities, we work with various external parties. In some cases, this also requires the transfer of personal data to these external parties. We only pass on personal data to external parties if this is necessary in the context of contract fulfilment, if we are legally obliged to do so (e.g. passing on data to tax authorities), if we have a legitimate interest in the transfer pursuant to Art. 6(1)(f) GDPR / DSGVO, or if another legal basis permits the transfer of data. When using processors, we only pass on personal data based on a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.
As a rule, we use services and auxiliary programs (“tools”) on this website in such a way that personal data are processed within the EU or EEA. However, for certain integrated services, particularly in connection with the donation form (e.g. payment service providers such as PayPal), processing or transfer to third countries cannot be ruled out. In such cases, personal data may be transferred to providers based in the USA or another third country and processed there.
Please note that in third countries a level of data protection comparable to that in the EU may not be guaranteed. In particular, companies in the USA may be obliged to disclose personal data to security authorities without data subjects being able to take legal action against this in the same way as in the EU. We have no influence over official access in the third country.
If we use services for which a transfer to third countries cannot be ruled out, such transfer will only take place in compliance with the legal requirements (in particular Art. 44 et seq. GDPR / DSGVO), e.g. based on an adequacy decision or appropriate safeguards (e.g. EU standard contractual clauses) and – where required – with your consent.
Many data processing operations are only possible with your explicit consent. You may withdraw consent already given at any time. The lawfulness of the data processing carried out until the withdrawal remains unaffected by the withdrawal.
IF DATA PROCESSING IS CARRIED OUT BASED ON ART. 6(1)(E) OR (F) GDPR / DSGVO, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH ANY PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY.
IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR / DSGVO).
IF YOUR PERSONAL DATA ARE PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21(2) GDPR / DSGVO).
In the event of infringements of the GDPR / DSGVO, data subjects have a right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedies.
The supervisory authority responsible at our registered office is in particular:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Telephone: 0211 38424-0
Email: poststelle@ldi.nrw.de
Alternatively, you may also contact the data protection supervisory authority at your place of residence.
You have the right to receive data that we process automatically based on your consent or in fulfilment of a contract, either for yourself or for a third party, in a commonly used, machine-readable format. If you request direct transfer of the data to another controller, this will only be done where technically feasible.
For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address line changes from “http://” to “https://” and by the padlock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, their origin and recipients and the purpose of the data processing and, where applicable, a right to rectification or erasure of these data. For this and for further questions on the subject of personal data, you may contact us at any time.
You have the right to request restriction of the processing of your personal data. You may contact us at any time for this purpose. The right to restriction of processing exists in the following cases:
If you have restricted the processing of your personal data, these data – apart from their storage – may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
To ensure that our privacy policy always complies with the current legal requirements, we reserve the right to make changes at any time. This also applies if the privacy policy needs to be adapted due to new or revised services. The new privacy policy will then take effect upon your next visit to our website.
On this website, we only use cookies or similar technologies that are technically necessary or that store a setting you requested. Consent-requiring tracking or marketing cookies are not currently used.
At present, the following cookies are used on our website, or may be set under certain circumstances:
mtm_consent / mtm_consent_removed (Matomo)
This cookie is set in connection with the Matomo privacy setting (opt-out/opt-in) and stores your selection so that it can be taken into account during future visits. Depending on the setting, either mtm_consent or mtm_consent_removed may be stored. Duration: browser-dependent (e.g. until manually deleted).
MATOMO_SESSID (Matomo)
A temporary session cookie that Matomo may set for security purposes. Duration: usually deleted when the browser is closed.
The legal basis for technically necessary cookies and comparable technologies is Section 25(2) no. 2 TDDDG. Insofar as personal data are processed in this context, this is done based on Art. 6(1)(f) GDPR / DSGVO (legitimate interest in the technically error-free provision and security of the website) or Art. 6(1)(b) GDPR / DSGVO, insofar as processing is necessary for the fulfilment of a contract or for carrying out pre-contractual measures.
Note: Depending on the functionality used (e.g. when integrating additional services or further developing the website), additional cookies or comparable technologies may be used. Where cookies/technologies are used that are not technically necessary (e.g. for reach measurement), this will only take place with your consent based on Section 25(1) TDDDG; subsequent processing will then take place based on Art. 6(1)(a) GDPR / DSGVO. Consent may be withdrawn at any time.
You can configure your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate automatic deletion of cookies when closing the browser. If you disable cookies, the functionality of this website may be restricted (e.g. an opt-out selection may then not be saved permanently).
We have configured our Matomo web analytics service so that no analytics cookies are set. In connection with the Matomo privacy setting (opt-out/opt-in), a technically necessary cookie may be stored to save your selection.
The provider of the pages (ALL-INKL) automatically collects and stores information in so-called server log files, which your browser automatically transmits. In particular, the following data may be processed:
These data are not merged with other data sources.
Processing is carried out based on Art. 6(1)(f) GDPR / DSGVO. We have a legitimate interest in the technically error-free presentation, stability and security of our website.
The server log files are deleted after 7 days, unless longer retention is required for evidential or security purposes.
This website uses the donation form of twingle GmbH, Prinzenallee 74, 13357 Berlin. twingle GmbH provides the technical platform for the donation process for this donation form. The data you enter when donating (e.g. name, address, email address and – depending on the payment method – payment data) are processed by twingle for the purpose of processing the donation and stored on servers in Germany.
If you expressly select in the donation form that you wish to receive our newsletter, we also use the contact data provided for this purpose (in particular your email address and, where applicable, name/salutation) for sending the newsletter. Subscription is voluntary and not a prerequisite for donating. The legal basis is your consent (Art. 6(1)(a) GDPR / DSGVO). You may withdraw this consent at any time with effect for the future, e.g. via the unsubscribe link in the newsletter or by sending a message to the contact details given in the section “Information on the controller”.
The following payment methods are available for donations via the donation form:
Our online donation form is provided as an iFrame by twingle GmbH. Depending on the payment method you choose, payment services are integrated within the donation form. Depending on the payment method and the configuration of the donation form, PayPal, credit card payments and Google Pay may be provided via services of the PayPal platform.
The transaction data required for payment processing (e.g. amount, currency, transaction identifier) as well as technically necessary usage/device data (e.g. IP address, browser/device information) are transmitted to the respective payment service provider. twingle processes the data within the scope of commissioned processing; payment service providers such as PayPal process data for payment processing and, where applicable, fraud prevention under their own responsibility in accordance with their data protection information.
Provider PayPal:
PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.
PayPal privacy information:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Information on data transfers (e.g. standard contractual clauses):
https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full
For payments via Google Pay, Google processes data as the wallet provider in accordance with its own privacy policy; payment processing is carried out within the donation form via the integrated payment service provider.
Google privacy information: https://policies.google.com/privacy
Note: When the integrated donation form is accessed, it may be technically necessary for information to be stored on or read from your end device, or for requests to be made to third-party domains (e.g. PayPal), insofar as this is necessary for payment processing and security.
We have concluded a data processing agreement with twingle and fully implement the strict requirements of the EU General Data Protection Regulation and the German data protection authorities when using twingle’s donation form. Your data are processed for the handling of the donation based on Art. 6(1)(b) GDPR / DSGVO (processing for the performance of a contract) and – where required – based on Art. 6(1)(a) GDPR / DSGVO (consent, e.g. for optional information or newsletter selection).
You have the option to withdraw consent once granted for data processing at any time. A withdrawal does not affect the validity of data processing operations carried out in the past.
When a donation is made, we collect and use your personal data only insofar as this is necessary for the fulfilment and processing of your donation and, where applicable, for handling your enquiries. Providing the data is necessary for processing the donation. Failure to provide the data means that your donation cannot be received.
Your data will not be passed on to third parties without your express consent. Exceptions are only service providers that we require for processing the donation or which we use within the scope of commissioned processing. In addition to the recipients named in the respective clauses of this privacy policy, these include, for example, recipients from the following categories: payment service providers, credit institutions and service providers for sending donation receipts.
In all cases, we strictly comply with the statutory provisions. The scope of the data transfer is limited to a minimum.
We store donation-related data (e.g. booking and verification data) within the framework of statutory retention and verification obligations, in particular under tax and commercial law. The data are then deleted unless further legal grounds prevent deletion.
If you send us a donation by bank transfer, we process the data transmitted in connection with the transfer (e.g., account holder’s name, IBAN, amount, booking/value date, and payment reference) to allocate and record the donation and, where applicable, issue a donation receipt.
The legal basis is Art. 6(1)(b) GDPR / DSGVO (processing of the donation) and Art. 6(1)(c) GDPR / DSGVO insofar as we are subject to legal retention obligations (e.g. tax and commercial law requirements).
Recipients of the data also include the respective credit institution involved in payment processing. The storage period is based on the statutory retention periods.
We regularly inform existing supporters by post about our projects, our work and opportunities to support our foundation.
In addition, within the legally permissible framework, we may use personal data of potential supporters to inform them by post about our charitable work and support opportunities. For this purpose, addresses may be rented in individual cases from authorised address service providers for one-time use. The processing is carried out in compliance with the applicable data protection provisions.
Further information can be found on our Plain terms page.
Postal and delivery service providers may be used for dispatch. Only the data required for delivery are transmitted.
You may object to the use of your data for postal project and fundraising mailings at any time with effect for the future.
If you contact us by email, telephone or fax, your enquiry, including all resulting personal data (name, enquiry), will be stored and processed by us for the purpose of handling your request. We do not pass these data on without your consent.
These data are processed based on Art. 6(1)(b) GDPR / DSGVO if your enquiry is related to the fulfilment of a contract or is necessary for carrying out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR / DSGVO) or on your consent (Art. 6(1)(a) GDPR / DSGVO), if this has been requested.
The data sent to us by you via contact enquiries remain with us until you request deletion, withdraw your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been fully processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
We use the open-source web analytics service Matomo on this website. We operate Matomo as a self-hosted installation on our hosting environment, so that all analytics data remain with us and are not passed on to third parties.
To protect your privacy as effectively as possible, we have taken the following measures:
192.168.xxx.xxx). Clear assignment to an individual visitor is therefore no longer possible.disableCookies setting so that no cookies are set for visitor recognition. However, in connection with the Matomo privacy setting (opt-out/opt-in), a technically necessary cookie/entry may be stored to save your selection.disableBrowserFeatureDetection setting. As a result, browser features (e.g. screen resolution) are no longer recorded for identification purposes.Matomo may set the following technically necessary cookies:
mtm_consent or mtm_consent_removed: These first-party cookies store your choice for the Matomo privacy setting (opt-out/opt-in). Duration: browser-dependent (e.g. until manually deleted).
MATOMO_SESSID: A temporary session cookie for security purposes. Duration: usually deleted when the browser is closed.For web analytics with Matomo, we have configured the following retention periods in line with data minimisation principles:
Matomo is used based on Art. 6(1)(f) GDPR / DSGVO. The website operator has a legitimate interest in the anonymised analysis of user behaviour to optimise its web offering.
Our balancing of interests takes into account, in particular, the data-minimising configuration (IP anonymisation, no analytics cookies) and the possibility to object at any time (opt-out).
You may object to data collection by Matomo at any time (opt-out). The following checkbox shows you whether Matomo is currently recording your visit. If you untick the checkbox, your objection (opt-out) is activated.
Your selection is stored in your browser (technically necessary cookie/entry) so that it is also taken into account during future visits. Depending on the setting, a corresponding cookie may remain in place or be updated. If you delete this storage (e.g. by deleting cookies/website data), the setting may need to be made again.
We use the donation form of twingle GmbH, Prinzenallee 74, 13357 Berlin, for online donations. The donation form is integrated as an iFrame. Detailed information on the processing of personal data in connection with the donation form, the payment methods and the payment service providers used can be found in the section “4. Data Collection on this Website” under “Tool for Online Donations (twingle)”.
We use the JAWG service to display maps. The provider is Jawg, 152 Avenue Aristide Briand, 92220 Bagneux, France. Further information: https://www.jawg.io/en/
When pages with embedded maps are accessed, technically necessary data are transmitted to JAWG and/or processed there to deliver map content. This may include, in particular, the IP address, technical information about the browser/end device, and the time of access.
To the best of our knowledge, JAWG does not set cookies or comparable identifiers on your end device in connection with map provision on our website. Regardless, JAWG may process technical log data on the server side when providing the maps. Details can be found in JAWG’s privacy policy: https://www.jawg.io/en/confidentiality.
JAWG is used in the interest of an appealing presentation of our online offering and easy discoverability of the places we indicate (Art. 6(1)(f) GDPR / DSGVO)
A volunteer-led species survey carried out on our newly acquired meadow plot on Hiddensee has documented numerous rare plant species and confirmed the great conservation importance of our salt marshes... more information
Only consistently protected areas can guarantee that the breeding grounds of the Greater Flamingo, Little Tern, Black-winged Stilt, Stone Curlew and Skylark in our Pantani Migratory Bird Sanctuary in Sicily remain undisturbed. However, new threats are increasingly emerging: for example, areas of our migratory bird sanctuary that have not yet been fenced off are being misused for illegal rubbish dumping ... to the project
Postbank Hannover IBAN: DE47 2501 0030 0905 9063 07 BIC: PBNKDEFF