Privacy Policy
- For donation administration: surname, first name, address, email address, contact and activity history, and where applicable bank details including IBAN and BIC or other payment options of the donors. The legal basis for this is Art. 6 (1) (1) (b) GDPR (performance of a contract). Änderwerk deletes the data ten years after the last transaction.
- For donations via our form on aenderwerk.de: For donations we provide and use the donation form of twingle GmbH, Prinzenallee 74, 13357 Berlin. twingle GmbH provides the technical platform for the donation process for this donation form. The data you enter when making a donation (e.g. address, bank details, etc.) are stored by twingle on behalf of Änderwerk on servers in Germany in order to process the donation. We have concluded a data processing agreement with twingle. Depending on the chosen payment method, twingle uses further payment service providers. With the direct debit procedure, the data required for this (name, IBAN, payment amount) are transmitted to GLS Gemeinschaftsbank eG, Christstraße 9, 44789 Bochum. If you select PayPal as the payment method, you will be redirected to the payment provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. For more information about PayPal’s privacy policy, please visit PayPal.
- For job applications: surname, first name, address, email address and all other data of the job applicants submitted with the job application and arising in the course of the job application process. The legal basis for this is Art. 26 BDSG. Änderwerk deletes the data at the latest six months after completion of the job application process, but in the case of employment only six months after the end of the employment. Personnel records and references are deleted within ten years after the end of employment in the case of employment. In order to document the diversity of the job applications received and meet documentation obligations required by funders, Änderwerk keeps an anonymized version of the job applicant information in both cases.
- For participation in funding programs: surname, first name, address, email address, phone number, bank account information, and all other data submitted by participants during the digital application process and arising in the course of the funding process. The processing of personal data provided through the application form is performed solely for the purpose of ensuring a proper digital application process and to implement the program, as well as, where applicable, for public reporting regarding the program. The data, in particular, the name and location of the applicant, the details of the project and the purpose of the funding, as well as the duration and amount of the funding, may be published, analyzed for statistical purposes and disclosed to third parties, e.g., to the program’s funder. The legal basis for this is Art. 6 (1) (a) GDPR. Furthermore, subparagraphs (b), (c), and (e) of paragraph 2 of the GDPR, in conjunction with § 3 of the BDSG, constitute additional legal bases for data processing.
- For external presentation and public relations: image and sound recordings of project members and staff of Änderwerk as well as of the participants in Änderwerk events on the website aenderwerk.de and accompanying publication formats on social networks and online as well as offline, to document our work. The legal basis for this is Art. 6 (1) (1) (f) GDPR. The legitimate interest lies in informing the public about our activities. Änderwerk deletes the data as soon as their use is no longer necessary, for example because more recent recordings are available. If, as a participant in an event, you do not wish to be recorded, please inform us in advance at kontakt@aenderwerk.de. You may also subsequently object to future processing (see below).
- For the operation of the website aenderwerk.de: When you visit our websites, our web server records so-called usage data. The usage data consist of the name and address of the requested content, the date and time of the request, the volume of data transferred, the access status (content transferred, content not found), the description of the web browser and operating system used, the referral link indicating the page from which you reached our websites, and the IP address of the requesting computer. The legal basis for processing the usage data is Art. 6 (1) (1) (f) GDPR. The processing takes place in the legitimate interest of providing the content of the website and ensuring a device- and browser-optimised presentation.
- For event management: information and personal data that you have provided to us in the course of registering for an event or online event, generally surname, first name, email address and event-related information such as the selection of event blocks or meal preferences, are stored for the duration of the event organisation and follow-up. The data are deleted at the latest two years after the end of the event, unless there are legal grounds (in particular accounting or external auditing) that require longer storage of the participant list for documentation purposes. The legal basis for this is Art. 6 (1) (1) (b) GDPR (performance of a contract)
- For individual communication, e.g. via the internet (email): all data voluntarily transmitted to us, such as surname, first name, email address and any other personal data provided or special categories of personal data, insofar as this is necessary to deal with your request. The legal basis for this is Art. 6(1)(1)(f) GDPR (safeguarding legitimate interests, based on our interest in fulfilling our statutory purposes, dealing with your enquiries and communicating with you in this context). Änderwerk deletes the data within two years of the end of the respective form of communication, unless they take place within the framework of donation communication (see above).
- pursuant to Art. 15 GDPR to request information about your personal data processed by us. In particular, you may request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if they were not collected by us, as well as the existence of automated decision-making including profiling and, where applicable, meaningful information about its details;
- pursuant to Art. 16 GDPR to request the immediate rectification of incorrect personal data stored by us or the completion of your personal data stored by us;
- pursuant to Art. 17 GDPR to request the erasure of your personal data stored by us, insofar as the processing is not necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
- pursuant to Art. 18 GDPR to request the restriction of the processing of your personal data, insofar as the accuracy of the data is contested by you, the processing is unlawful but you refuse its erasure and we no longer need the data, but you require it for the establishment, exercise or defence of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR;
- pursuant to Art. 20 GDPR to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or to request the transmission to another controller;
- pursuant to Art. 21 GDPR, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6 (1) (1) (e) or (f) GDPR (see above);
- pursuant to Art. 7 (3) GDPR to revoke at any time the consent you have once given to us. The consequence of this is that we may no longer continue the data processing that was based on this consent for the future; and
- pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority. As a rule, you can turn to the supervisory authority of your usual place of residence or workplace or of our association’s registered office for this purpose.