Data Protection Policy
Below, we will inform you about how we collect and process your personal data, e.g. name, address, e-mail addresses, user behavior, which you - knowingly or unknowingly - provide when you visit our website and, if applicable, how long the data is stored, as well as the rights that you, as data subject, have.
If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we will also state the defined criteria for the storage period.
The party responsible for the processing of personal data during your visit to our website according to Art. 4 No. 7 GDPR is
Stiftung Neue Verantwortung e. V.
Berliner Freiheit 2
T. +49(0)30 81 45 03 78 80
F. +49(0)30 81 45 03 78 97
2. Data protection officer
You can reach our data protection officer via firstname.lastname@example.org.
3. Purpose, legal basis, and duration of data processing
3.1 Access data/ Server log files
Stiftung Neue Verantwortung e. V. collects data on every access to this website - access data (so-called server log files). This access data includes in particular:
- IP address
- File, date, and time of the request
- Content of the request (specific page)
- Access status/ HTTP status code
- Amount of data transferred in each case
- Website from which the request comes
- Operating system and its interface
- Language and version of the browser software
The legal basis for the collection of server log files is the legitimate interest of the Stiftung Neue Verantwortung e. V. according to Art. 6 para. 1 p. 1 lit. f) GDPR. The legitimate interest, in this case, is to provide you with a technically functioning and user-friendly website and to ensure the security of our systems.
The server log files are stored for 14 days and will be then deleted.
3.2 Get in contact
If you send us inquiries, your message including the contact data you have provided will be stored and processed accordingly for processing and answering the inquiry as well as for follow-up questions. We do not share this data with third parties, unless this is necessary for the context of processing and responding to your contact request or if you have given us your consent to do so.
If you contact us in the course of an existing contractual relationship or contact us in advance for information about an offer, the data and information you provide will be processed for processing and responding to your contact request according to Art. 6 para. 1 sentence 1 lit. b GDPR. Moreover, for the protection of our legitimate interests according to Art. 6 para. 1 p. 1 lit. f GDPR for the proper response to customer/contact inquiries.
You can subscribe to a Stiftung Neue Verantwortung newsletter. We will send this to the e-mail address you provide. The newsletter will inform you about SNV and our activities.
Mandatory data for receiving the newsletter are:
- Choice of topic
- First name
- Last name
- Email address
The provision of further data is voluntary and is used to address you personally. The legal basis for this process is your consent according to Art. 6 para. 1 p. 1 lit. a GDPR. You can withdraw your consent at any time and unsubscribe from the newsletter. You can withdraw your consent by clicking on the link provided in each newsletter e-mail, by sending an email to email@example.com, or by sending a message to the contact details provided in the imprint.
With the registration for the newsletter, we additionally store your IP address and the date of registration. Furthermore, we store the time of the first opt-in email (i.e. the first email requesting you to confirm your registration). With the confirmation of your e-mail address, we store the IP address used to send the confirmation and the time of the confirmation. Finally, we store the registration and confirmation texts as the content of your declaration of consent. This backup is based on a legitimate interest (Art. 6 para. 1 p. 1 lit. f DSGVO) and serves both as evidence in the case that a third party misuses an email address and subscribes to the newsletter without the knowledge of the authorized person and as evidence of the content of your declaration of consent.
The information will be stored as long as you are subscribed to the newsletter.
3.4 Visitor Statistics
The Stiftung Neue Verantwortung occasionally compiles and evaluates visitor statistics for internal purposes in order to improve the online services (website, newsletter mailing). The collection of this data is in our legitimate interest (Art. 6 para. 1 p. 1 lit. f DSGVO).
Therefore, SNV uses the open source web analytics platform Matomo to collect aggregated visitor statistics.
Matomo saves one pseudonymous identification number (HTTP cookie) in your browser to distinguish between different users. In this context, your IP address is used for evaluation but is shortened in such a way that it is no longer possible to link it to you. The data collected is stored on the servers of the SNV website. The data is not passed on to third parties.
If you disagree that your page views are included in the statistics, you have several options:
- You can set via an opt-out cookie that your visit and your actions on the website are not included in the data collection of Matomo:
- You can block and delete the cookies that Matomo uses for this purpose using the browser settings.
3.5 Processing of data for research purposes
The Stiftung Neue Verantwortung e.V. occasionally processes personal data for research purposes. Depending on the type and scope of the data processing, the legal basis is your consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR or a legitimate interest pursuant to Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest in this case is to carry out our research activities. In the case of a collaborative research project, your personal data may be shared with other project participants or transferred to recipients in third countries or international organizations. If we process your personal data for research purposes, we will inform you comprehensively at the time of the data collection.
Within the Stiftung Neue Verantwortung e. V., access to your data is granted to those units that need it in order to fulfill their tasks. Service providers and vicarious agents employed by us (e.g. technical service providers, shipping companies, waste disposal companies) may also receive data for these purposes. We limit the transfer of your personal data to what is necessary, taking into account the requirements of data protection law. In some cases, the recipients may receive your personal data as order processors and are then strictly bound by our instructions when handling your personal data. In some cases, the recipients act independently in their own data protection responsibility and are also obliged to comply with the requirements of the GDPR and other data protection regulations.
Finally, in individual cases, we transmit personal data to our consultants in legal or tax matters, whereby these recipients are obligated to special confidentiality and secrecy due to their professional status.
5. Data Subject Rights
You have the following rights concerning the personal data concerning you:
- Right to information according to Art. 15 GDPR,
- Right to rectification according to Art. 16 GDPR,
- Right to erasure according to Art. 17 GDPR,
- Right to restriction of processing according to Art. 18 GDPR,
- Right to data portability according to Art. 20 GDPR.
- Right to object to the processing of your personal data according to Art. 21 GDPR.
Furthermore, you have the right to complain to a supervisory authority of your choice in accordance with Art. 77 (1) GDPR about the data processing taking place.
This includes the data protection supervisory authority responsible for us:
Berlin’s Commissioner for Data Protection and Freedom of Information, T. +49 (0)30 13889-0, F. +49 (0)30 2155050, e-mail: firstname.lastname@example.org
5.1 Right of revocation
If you have given your consent to the processing of your data, you may revoke this consent at any time with effect for the future in accordance with Art. 7 (3) GDPR. Processing operations that took place before the revocation are not affected and remain lawful. Such revocation will affect the lawfulness of the processing of your personal data after you have expressed it to us.
You have the right to revocate to the use of your personal data by sending a message to email@example.com or by sending a message to the contact details provided above.
5.2 Right to object
Insofar as we base the processing of your personal data on the balancing of interests according to Art. 6 (1) p. 1 lit. f) GDPR, you may object to the processing according to Art. 21 GDPR. If you make use of your right to object, we will no longer process your personal data unless there are compelling legitimate grounds for the processing which override your interests, rights, and freedoms as a data subject, or the processing serves to assert, exercise, or defend legal claims. After exercising your right to object, we will review the situation and either stop the data processing or show you our compelling legitimate grounds based on which we will continue the processing. The collection of data to provide the website and the storage of log files are mandatory for the operation of the website.
6. Mandatory provision of data
In principle, you are not obliged to provide us with your personal data. However, if you choose not to do so, we will not be able to provide you with unrestricted access to our website or respond to your inquiries to us. Personal data that we do not absolutely need for the above-mentioned processing purposes are marked accordingly as voluntary information.
7. Automated decision-making/profiling
We do not use automated decision-making or profiling (an automated analysis of your personal circumstances).