Data privacy policy

1. DATA PRIVACY AT A GLANCE

GENERAL INFORMATION

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data are all data which can be used to identify you personally. Detailed information on the issue of data privacy can be found in the Data Privacy Policy below this text.

DATA COLLECTION ON THIS WEBSITE

Who is the responsible controller for data collected on this website?
The website operator processes data on this website. The website operator’s contact data can be found under “Information about the controller” in this Data Privacy Policy.

How do we collect your personal data?
Your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form or when registering for the newsletter.

Other data are collected automatically by our IT systems or after we receive your consent when you visit the website. These data are primarily technical data (e.g. Internet browser, operating system or time at which a page is called up). These data are collected automatically as soon as you enter this website.

What do we use your data for?
We collect some of your data to ensure that we can provide the website without any errors. Other data may be used to analyse the way you use the website.

The data collected when registering for the newsletter or in the contact form will be used exclusively for sending the newsletter or for processing and answering your request from the contact form and will not be passed on to third parties without your consent.

What are your rights concerning your data?
You have the right to receive information about the source, recipients, and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to request the rectification or erasure of these data. If you have consented to our processing of your data, you can withdraw this consent at any time with effect for the future. You additionally have the right under certain circumstances to obtain restriction of the processing of your personal data. You also have the right to lodge a complaint with the responsible supervisory authority.
You may contact us at any time if you have any other questions about data privacy.

2. Hosting

We host the content of our website with the following provider:

Strato

The provider is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin (hereinafter “Strato”). When you visit our website, Strato records various logfiles, including your IP addresses.

For more information, please consult the Strato Data Privacy Policy:
https://www.strato.de/datenschutz/.

Strato is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in a depiction of our website that is as reliable as possible. Insofar as corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1) (a) GDPR and Section 25(1) of the German Telecommunications and Telemedia Act (TTDSG), provided that the consent includes the storage of cookies or access to information on the user’s end device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent may be revoked at any time.

3. GENERAL AND MANDATORY INFORMATION

DATA PRIVACY POLICY

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Privacy Policy explains which data we collect and what we use them for. It also explains how and for what purpose this is done.

We draw your attention to the fact that security gaps may affect the transfer of data on the internet (e.g. when communicating by email). It is not possible to guarantee absolute protection of data against access by third parties.

INFORMATION ABOUT THE CONTROLLER

The controller responsible for data processing on this website is:

BB Stiftung gGmbH
Rusenschloßstraße 29
D - 70469 Stuttgart

Telephone: +49 (0)711 88 79 99 77
E-mail: hallo@bb-stiftung.org

The controller is the natural or legal person who alone or together with others decides on the purposes for and means by which personal data (e.g. names, e-mail addresses and similar) are processed.

STORAGE PERIOD

Unless a more specific storage period is specified in this privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you assert a legitimate request for erasure or revoke consent to data processing, your data will be erased unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be erased once these reasons no longer apply.

GENERAL INFORMATION ON THE LEGAL BASIS FOR THE DATA PROCESSING ON THIS WEBSITE

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if special categories of data are processed according to Art. 9 (1) GDPR. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49 (1)(a) GDPR. If you have consented to the storage of cookies or to the access to information in your end device (e.g., via device fingerprinting), the data processing is additionally based on Section 25 (1) TTDSG. You may revoke your consent at any time. If your data are required for the fulfilment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, if your data are required for the fulfilment of a legal obligation, we process the data on the basis of Art. 6(1)(c) GDPR. Furthermore, the data processing may be carried out on the basis of our legitimate interest according to Art. 6(1)(f) GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this privacy policy.

RECIPIENTS OF PERSONAL DATA

In the scope of our business activities, we cooperate with various external parties. In some cases, this also requires the transfer of personal data to these external parties. We only disclose personal data to external parties if this is required as part of the fulfilment of a contract, if we are legally obligated to do so (e.g., disclosure of data to tax authorities), if we have a legitimate interest in the disclosure pursuant to Art. 6 (1)(f) GDPR, or if another legal basis permits the disclosure of these data. When using processors, we only disclose personal data of our customers on the basis of a valid contract on data processing. In the case of joint processing, a joint processing agreement is concluded.

REVOCATION OF YOUR CONSENT TO DATA PROCESSING

Many data processing operations are only possible with your explicit consent. You may revoke any consent you have already given at any time. Withdrawal of consent does not affect the lawfulness of any processing based on consent before its withdrawal.

RIGHT TO OBJECT TO THE COLLECTION OF DATA IN SPECIAL CASES; RIGHT TO OBJECT TO DIRECT ADVERTISING (ART. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6(1) (E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE LEGAL BASIS ON WHICH PROCESSING IS CARRIED OUT CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS CONNECTED WITH SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21(2) GDPR).

RIGHT TO LODGE A COMPLAINT WITH THE RESPONSIBLE SUPERVISORY AUTHORITY

In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

RIGHT TO DATA PORTABILITY

You have the right to have data which we automatically process, either on the basis of your consent or to perform contract, released either to you or to a third party in a structured, commonly used machine-readable format. Any request to have personal data transmitted directly from one controller to another will only be complied with where this is technically feasible.

INFORMATION, CORRECTION AND ERASURE

Within the scope of the applicable statutory provisions, you have the right to at any time demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time.

RIGHT TO RESTRICT PROCESSING

You have the right to request the restriction of processing of your personal data. To do so, you may contact us at any time. The right to restrict processing exists in the following cases:

If you dispute the accuracy of your personal data held by us, we will usually need time to verify this. For the duration of this verification procedure, you have the right to request restriction of the processing of your personal data.
If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data in lieu of demanding the erasure of these data.
If we no longer need your personal data, but you need them to exercise, defend or enforce legal claims, you have the right to request restriction of the processing of your personal data instead of erasure.
If you have raised an objection pursuant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not yet been determined whose interests prevail, you have the right to demand restriction of the processing of your personal data.

If you have restricted the processing of your personal data, apart from being stored such data may only be processed with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

4. RECORDING OF DATA ON THIS WEBSITE

CONTACT FORM

If you send us enquiries via the contact form, the information you provide on the enquiry form, including the contact details you specify there, will be stored by us for the purpose of processing the enquiry and for any follow-up queries. We do not pass on these data without your consent.

These data are processed on the basis of Art. 6(1) (b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effective handling of the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested; consent may be revoked at any time.

The data you enter on the contact form are retained by us until you request us to erase the data, revoke your consent to their storage or the purpose for storing the data no longer applies (e.g. when we have finished processing your enquiry). Statutory provisions – in particular retention periods – remain unaffected.

ENQUIRY BY EMAIL, TELEPHONE OR FAX

If you contact us by email, telephone or fax, your enquiry including all resulting personal data (name, content of the enquiry) is stored and processed by us for the purpose of dealing with your request. We do not pass on these data without your consent.

These data are processed on the basis of Art. 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effective handling of the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested; consent may be revoked at any time.

The data you send to us via contact requests are retained by us until you request us to erase them, revoke your consent to its storage or the purpose for storing the data no longer applies (e.g. when we have finished processing your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
Source: https://www.datenschutzerklaerung.de