Privacy Policy

Controller for data processing (hereinafter: “we”)

KRASS e.V.
Ludwig Beck Straße 14
D- 40237 Düsseldorf
info@krass-ev.de

Further details can be found in the provider identification (legal notice):
https://krass-ev.de/de/impressum/

Contact details of the Data protection officer
datenschutz@krass-ev.de

Personal data, purposes of its processing and legal bases

This privacy policy informs you about the type, scope and purposes of the collection and use of personal data when using our website, as well as about your rights.

Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

The purpose of processing personal data on our website is to operate a website with information about the promotion of education, primarily for children from socially disadvantaged and/or educationally deprived families, and about us.

Personal data is processed on our website when this is necessary for the following purposes:

  • For the use of the website (legal basis: Article 6 paragraph 1 sentence 1 a) and/or Article 6 paragraph 1 sentence 1 b) General Data Protection Regulation),
  • to protect our interest in improving the user experience, promoting our club activities or maintaining the security of use (legal basis: Article 6 paragraph 1 sentence 1 f) General Data Protection Regulation),
  • for the use of the services offered on the website and for pre-contractual measures, in particular for funding and contact requests (legal basis: Article 6 paragraph 1 sentence 1 a) and/or Article 6 paragraph 1 sentence 1 b) General Data Protection Regulation),
  • for the conclusion and performance of a contract (legal basis: Article 6 paragraph 1 sentence 1 a) and/or b) General Data Protection Regulation) and/or
  • to fulfill a legal obligation to which we are subject (such as tax regulations).

Further details on data processing can be found below under the corresponding headings:

Access data/server log files

When you visit our website, the servers automatically store the information that your Web Browser sends, so-called. Server log filesThe information collected includes the following: the request, the IP address, the browser type, the operating system and language, as well as the date and time of your request. The temporary storage of the IP address by the system is necessary to enable delivery of the website to your device. For this purpose, the IP address must be stored for the duration of the session. This data is not combined with other data sources. The information is used exclusively for the analysis and maintenance of the technical operation of the servers and the network. The legal basis for this is Article 6 Paragraph 1 Sentence 1 f) of the General Data Protection Regulation (GDPR).

Cookie policy

Our website uses cookies in some areas, but only to a very limited extent. Cookies are small text files that are stored on your device and saved by your browser. Cookies help make our website more user-friendly, effective, and secure. The legal basis for this is Article 6 Paragraph 1 Sentence 1 a) of the General Data Protection Regulation (GDPR) if you have consented to the use of cookies; otherwise, it is based on our legitimate interest as described above, pursuant to Article 6 Paragraph 1 Sentence 1 f) of the GDPR.

Some of the cookies used are so-called session cookies. These are automatically deleted after your visit ends. Other cookies remain stored on your device until you delete them.

You can configure your browser so that you are informed about the setting of cookies and can allow cookies only in individual cases, accept cookies for specific cases or generally exclude them, as well as activate the automatic deletion of cookies when closing the browser. You can manage cookies used by us via Google here: [https://policies.google.com/technologies/managing?hl=de](https://policies.google.com/technologies/managing?hl=de)

Furthermore, you can prevent Google from collecting and processing data generated by the cookie and related to your use of the website by downloading and installing the browser plugin available at the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

If cookies are deactivated, the functionality of this website may be restricted.

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google"), to analyze website usage and improve its design so that we can optimally promote our club activities. The legal basis for this is Article 6 Paragraph 1 Sentence 1 f) of the General Data Protection Regulation (GDPR).

Google is certified under the US–EU data protection agreement “Privacy Shield” ([https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active](https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active)) and thereby commits to complying with EU data protection requirements. In addition, we have concluded a data processing agreement with Google. This is a contract in which Google undertakes to protect users’ data, to process it on our behalf in accordance with our privacy policy, and in particular not to pass it on to third parties.

Google Analytics uses cookies, text files that are stored on your computer and enable an analysis of your use of the website (see section b above). The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

However, on our website the IP anonymizationactivatedYour IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services relating to website activity and internet usage. The legal basis for this is Article 6(1)(f) of the General Data Protection Regulation (GDPR).

You can prevent the storage of cookies by adjusting your browser settings; however, please note that in this case you may not be able to fully utilize all the functions of our website, see section b above. Furthermore, you can prevent Google from collecting and processing data generated by the cookie and related to your use of the website (including your IP address) by clicking the link provided below. Browser pluginalternatively.and install: Install browser plugin (https://tools.google.com/dlpage/gaoptout?hl=de).

More information on terms of use and data protection can be found at [https://www.google.com/analytics/terms/de.html](https://www.google.com/analytics/terms/de.html) and at [https://www.google.de/intl/de/policies/](https://www.google.de/intl/de/policies/).

Contact via email

When you send us inquiries via email, your information from the email, including the contact details you provide, will be processed for the purpose of handling your inquiry and for any follow-up questions. The legal basis for this is Article 6 Paragraph 1 Sentence 1 a) and/or Article 6 Paragraph 1 Sentence 1 b) of the General Data Protection Regulation (GDPR). Furthermore, we have a legitimate interest in processing this data to prevent misuse and ensure the security of our systems; the legal basis for this is Article 6 Paragraph 1 Sentence 1 f) of the GDPR.

Integration of third-party services and content

It is possible that third-party content from other websites may be integrated into our online services. This always requires that the providers of this content (hereinafter referred to as "third-party providers") are aware of the users' IP addresses. Without the IP address, they would be unable to send the content to the respective user's browser. The IP address is therefore necessary for displaying this content. We strive to use only content from providers who use the IP address solely for delivering the content. Third-party providers may store the IP address for other purposes, such as statistical analysis. You can prevent such data transmission by disabling JavaScript in your browser or by using the opt-out options provided below. However, in this case, such third-party services and content will not be displayed.

We partially integrate the following third-party services and content:

Videos from the platform YouTube of the third-party provider Google.

Privacy policy: [https://www.google.com/policies/privacy/](https://www.google.com/policies/privacy/) and [https://support.google.com/youtube/answer/7671399?hl=de&ref_topic=2803240](https://support.google.com/youtube/answer/7671399?hl=de&ref_topic=2803240)

Opt-Out: https://www.google.com/settings/ads/

We use YouTube's so-called "enhanced privacy mode" to embed videos. With this mode, a cookie is only stored on your computer when you play the video. According to YouTube, no personally identifiable cookie information is stored for playbacks of embedded videos using enhanced privacy mode.

Donation form and function of Altruja GmbH

Data protection statement: https://www.altruja.de/datenschutz.html

The legal basis for processing your data is, with your consent, Article 6(1)(a) and/or Article 6(1)(b) of the General Data Protection Regulation (GDPR), if the processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract. Furthermore, the legal basis is Article 6(1)(f) GDPR, as the processing serves our legitimate interest in improving the user experience, promoting and supporting our association's activities, or maintaining the security of this website.

Newsletter

Enter your email address to subscribe to our newsletter and we will send you information and invitations about our club activities and projects (art, music, dance, theatre, new media) at irregular intervals. 

After registering with your email address, you will first receive a confirmation message from us at that address. This email will ask you to confirm your registration by clicking on a link. This is necessary to prevent unauthorized individuals from adding your email address to our mailing list without your consent. To document this registration process, it is logged by recording the time of registration and confirmation, as well as the IP addresses – a so-called double opt-in procedure. We also process your email address for sending you messages. The emails are sent via the mailchimp service. 

The legal basis for this is Article 6(1)(a) and/or (b) of the General Data Protection Regulation (GDPR). Furthermore, we have a legitimate interest in processing this data to prevent misuse and ensure the security of our systems; the legal basis for this is Article 6(1)(f) of the GDPR.

You can unsubscribe at any time via a link included in every email or by contacting us using the contact details provided above. You can therefore withdraw your consent at any time with effect for the future.

Our social media presence and social media plugins

We use social media plugins on our website based on our legitimate interest in analyzing and improving the user experience, as well as promoting and advancing our association's activities. The legal basis for this is Article 6, paragraph 1, sentence 1 f) of the General Data Protection Regulation (GDPR).

When you use our website with a plugin, a direct connection is established between your device and the third-party internet platform. We have no insight into the data processing practices of the third-party provider. Plugins can display content or functional elements from and establish direct connections with:

YouTube

The website at www.youtube.com is operated by Google.

Privacy policy: [https://www.google.com/policies/privacy/](https://www.google.com/policies/privacy/) and [https://support.google.com/youtube/answer/7671399?hl=de&ref_topic=2803240](https://support.google.com/youtube/answer/7671399?hl=de&ref_topic=2803240)

Opt-Out: https://www.google.com/settings/ads/

Facebook

The website at [www.facebook.com](http://www.facebook.com) is operated in Europe by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The purpose and scope of data processing by Facebook, as well as users’ rights and settings options for protecting their privacy, can be found in Facebook’s privacy policy: [https://www.facebook.com/about/privacy/](https://www.facebook.com/about/privacy/)

If a user is a member of Facebook and does not want Facebook to collect data about them via this website and link it to their stored Facebook membership data, they must log out of Facebook and delete their cookies before visiting the website. Further settings and opt-out options regarding the use of data for advertising purposes can be found in Facebook’s profile settings: [https://www.facebook.com/settings?tab=ads](https://www.facebook.com/settings?tab=ads), or via the US-based page [https://www.aboutads.info/choices/](https://www.aboutads.info/choices/), or the EU page [https://www.youronlinechoices.com/](https://www.youronlinechoices.com/).

Instagram

The website at [www.instagram.com](http://www.instagram.com) is operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA (“Instagram”). The purpose and scope of data processing by Instagram, as well as users’ rights and options for protecting their privacy, can be found in Instagram’s privacy policy: [https://help.instagram.com/155833707900388](https://help.instagram.com/155833707900388).

If a user is a member of Instagram and does not want Instagram to collect data about them via this website and link it to their stored Instagram account data, they must log out of Instagram and delete their cookies before visiting the website. Further settings and opt-out options regarding the use of data can be found in Instagram’s profile settings: [https://help.instagram.com/284802804971822?helpref=page_content](https://help.instagram.com/284802804971822?helpref=page_content)

Recipients of personal data

Personal data will be disclosed to the following categories of recipients:

To our employees and our data processors, in particular the host of our website (AIGES oHG) and Google; we have concluded data processing agreements with our data processors.

Furthermore, your personal data will not be passed on to third parties without your express consent, unless we are legally obliged to do so or the data transfer is absolutely necessary for the performance of a contract.

Duration of storage

We will delete your personal data immediately after the purpose has been fulfilled.

Stored Server log filesIP addresses are automatically deleted at least every four weeks.

If the data is collected to provide the website, this is the case when the respective session has ended. Session cookiesThey will therefore be automatically deleted after the session ends.Cookie policy They are stored on your device, and you have control over the use and deletion of cookies, so

We have for Google Analytics dataa deletion cycle of 14 Monaten preset.

Your data from your Contact requestsvia E-mailWe process your data until your request has been fully processed and resolved. Afterwards, the data will be deleted. Please note, however, that due to legal transactions with you, certain data may be subject to commercial and tax law retention obligations of at least six (§ 257 HGB) or ten (§ 147 AO) years, which may also apply to the content of contact requests and emails.

Newsletter data Your data will be processed for the duration of your mailing list subscription and deleted after you unsubscribe or withdraw your consent. To be able to prove your previously existing consent and to defend against claims, we store your address for up to three years after you unsubscribe.

Furthermore, it is reviewed annually whether data can be deleted. This is the case when the purpose of the processing and the conditions of the legal basis for the processing no longer exist, and there is no longer a legal obligation to retain the data.

Provision of personal data and rights of data subjects 

You are not legally obligated to provide your personal data. However, providing this data may be necessary for entering into a contract or for using certain website functions. Therefore, if you do not provide this data, a contract or a website function may not be available. There is no automated decision-making or profiling on the website.

The rights of data subjects arise in particular from Articles 15 to 23 and Article 77 of the General Data Protection Regulation and from Sections 32 to 37 of the new Federal Data Protection Act.

You have the right to [access to] your personal data vis-à-vis us.

  • Information desk,
  • Correction,
  • Deletion,
  • Restriction of processing and
  • Transferability.

You also have the right to object to the processing of personal data Contradiction to collect. If you have given your consent to the processing of personal data, you have the right to... Revocation Effective for the future. Please address all inquiries, requests, and communications to us, see above under point 1.

If you are of the opinion that the processing of your personal data violates data protection law, you always have that Right to complain with the competent supervisory authority, cf. Article 77 GDPR. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The contact details of the data protection officers in the federal states, the supervisory authorities for the non-public sector, broadcasting authorities, churches, in Europe and other countries, as well as the Virtual Data Protection Office, can be found here: [https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html](https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html)

The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf.