PRIVACY POLICY
- For donation management: name, first name, address, email address, if applicable bank details incl. IBAN and BIC of the donors. The legal basis for this is Art. 6 (1) sentence 1 lit. b DSGVO. Änderwerk deletes the data ten years after the last transaction.
- For job applications: name, first name, address and all other data of the job applicants submitted with the job application and arising in the course of the job application process. The legal basis for this is Art. 26 BDSG. Änderwerk deletes the data at the latest six months after completion of the job application process, but in the case of employment only six months after the end of the employment. Personnel records and references are deleted within ten years after the end of employment in the case of employment. In order to document the diversity of the job applications received and meet documentation obligations required by funders, Änderwerk keeps an anonymized version of the job applicant information in both cases.
- For payroll accounting: name, first name, address, religious affiliation if applicable, tax number, social security number, health insurance number, bank details incl. IBAN and BIC of the employees. The legal basis for this is Art. 6 (1) sentence 1 lit. c DSGVO. Änderwerk deletes the data ten years after termination of the employment relationship.
- For external presentation: image and sound recordings of Änderwerk project members and staff as well as participants in the Änderwerk events on the website aenderwerk.de and accompanying publication formats on social networks as well as online and offline to document our work. The legal basis for this is Art. 6 (1) sentence 1 lit. f DSGVO. The legitimate interest is to provide public information about our activities. Änderwerk deletes the data as soon as its use is no longer necessary, for example because newer recordings are available. If you, as a participant in an event, do not wish to have any recordings made, please inform us in advance at kontakt@aenderwerk.de.
- For the operation of the website www.aenderwerk.de: data automatically transmitted to us is not stored. We delete security log data stored on the basis of Art. 6 (1) sentence 1 lit. f within six months.
- For event management: information and personal data that you have provided to us in the course of registering for an event or online event, usually name, first name, email address and event-related information such as selection of event blocks or meal requests are stored for the duration of the event organization and follow-up. The data will be deleted no later than 24 months after the end of the event, unless there are legal reasons (esp. accounting) that require a longer storage of the list of participants for documentation purposes. The legal basis for this is Art. 6 (1) sentence 1 lit. b DSGVO.
- For individual communication, e.g. via internet (e-mail): all data voluntarily submitted to us, such as name, first name, e-mail address and any other specified personal data or special categories of personal data, insofar as this is necessary to process your request. The legal basis for this is Art. 6 (1) sentence 1 lit. a DSGVO. Änderwerk deletes the data within 24 months after the end of the respective form of communication or, if the data is part of ongoing activities, 24 months after the conclusion of the activities.
- in accordance with Art. 15 DSGVO to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
- in accordance with Art. 16 DSGVO to immediately demand the correction of incorrect or completion of your personal data stored by us;
- pursuant to Art. 17 DSGVO to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
- to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO;
- pursuant to Art. 20 DSGVO to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
- to revoke your consent at any time in accordance with Art. 7 (3) DSGVO. This has the consequence that we may no longer continue the data processing based on this consent for the future, and
- complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our club headquarters.