Privacy policy

With this privacy policy, we would like to inform you about the nature, scope and purpose of the processing of personal data (hereinafter also referred to as “data”). Personal data is any data that has a personal reference to you, e.g. name, address, e-mail address or your user behavior. The data protection declaration applies to all data processing operations carried out by us both within the scope of our core activities and for the online media provided by us.

Processing of your data within the scope of the core activity of our organization

If you are a member or support us, have a business relationship with us or are interested in our activities, the type, scope and purpose of the processing of your data depends on the existing membership, contractual or pre-contractual relationship between us. The data we process includes all the data we need to administer or manage the membership or business relationship we have with you, or to process your request or support service.

The processing of your data is limited to those data that are necessary and appropriate for the aforementioned purposes. We will inform you which data this is before or in the course of data collection.

Your data will only be passed on to third parties if this is necessary for the purpose of financial accounting within the framework of our organization and to comply with legal obligations. Insofar as we use third-party providers to provide our services, the terms and conditions and data protection notices of the respective third-party providers shall apply.

Data concerned:

• Inventory data (e.g. names, addresses)
• Payment data (e.g. bank details, invoices)
• Contact data (e.g. e-mail address, telephone number, postal address)
• Contract data (e.g. subject matter of the contract, duration of the contract)

Affected persons: Interested parties, members, business and contractual partners

Purpose of processing: administrations of members and support services, handling of contractual relations, communication as well as answering contact requests, office and organization procedures.

Legal basis: Contract fulfillment and pre-contractual requests, Art. 6 para. 1 lit. b DSGVO, legal obligation, Art. 6 para. 1 lit. c DSGVO, legitimate interest, Art. 6 para. 1 lit. f GDPR

Your rights under the GDPR

According to the GDPR, you are entitled to the rights listed below, which you can exercise at any time by contacting the controller named in section 1. of this privacy policy:

• Right to information: You have the right to request information from us about whether and what data we process from you.
• Right to rectification: You have the right to request the rectification of inaccurate or completion of incomplete data.
• Right to erasure: You have the right to request the erasure of your data.
• Right to restriction: In certain cases, you have the right to request that we only process your data in a restricted manner.
• Right to data portability: You have the right to request that we transfer your data to you or another responsible party in a structured, common and machine-readable format.
• Right to complain: You have the right to complain to a supervisory authority. The supervisory authority of your usual place of residence, your workplace or our company headquarters is responsible.

Right of withdrawal

You have the right to revoke your consent to data processing at any time.

Right of objection

You have the right to object at any time to the processing of your data, which we base on our legitimate interest pursuant to Art. 6 para. 1 lit. f DSGVO, to object to the processing of personal data. If you exercise your right to object, please explain the reasons. We will then no longer process your personal data unless we can prove to you that compelling reasons worthy of protection for the data processing outweigh your interests and rights.

Notwithstanding the foregoing, you have the right to object at any time to the processing of your personal data for the purposes of advertising and data analysis.

Please address your objection to the contact address of the responsible person indicated above.

When do we delete your data?

We delete your data when we no longer need it or when you instruct us to do so. This means that – unless otherwise stated in the individual data protection notices of this privacy policy – we will delete your data,

• if the purpose of the data processing has ceased to exist and thus the respective legal basis stated in the individual data protection notices no longer exists, for example.
  • after termination of the contractual or membership relations existing between us (Art. 6 para. 1 lit. a DSGVO) or
  • after our legitimate interest in the further processing or storage of your data has ceased to exist (Art. 6 para. 1 lit. f DSGVO),
• if you exercise your right of withdrawal and there is no other legal basis for processing within the meaning of Art. 6 para. 1 lit. b-f GDPR intervenes,
• if you exercise your right to object and there are no compelling reasons worthy of protection against the deletion.

However, if we have to retain (certain parts of) your data for other purposes, for example because tax retention periods (generally 6 years for business correspondence or 10 years for accounting records) or the assertion, exercise or defense of legal claims arising from contractual relationships (up to four years) make this necessary, or if the data is needed to protect the rights of another natural person or legal entity, we will delete (that part of) your data only after these periods have expired. However, until these periods expire, we limit the processing of this data to these purposes (fulfillment of retention obligations).

Security measures

We also take state-of-the-art technical and organizational security measures to comply with the provisions of data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized third-party access.

Actuality and change of this privacy policy

This privacy policy is currently valid and has the status April 2023. Due to changes in legal or regulatory requirements, it may become necessary to adapt this privacy policy.

This privacy policy was created with the help of the data protection generator of SOS Recht. SOS Recht is a service provided by Mueller.legal Rechtsanwälte Partnerschaft, based in Berlin.