Privacy Policy of Änderwerk gemeinnützige GmbH

Hereinafter, we inform visitors of our website, our supporters, project members, participants of events, donors, job applicants and employees about the way Änderwerk gGmbH (Änderwerk) processes their personal data. Personal data is data that directly or indirectly allows conclusions to be made about your identity. In this way, we fulfill the duty to inform according to Article 13 of the General Data Protection Regulation (DSGVO).

1. Responsible party

The data controller within the meaning of Article 13 (1) a DSGVO is:
Änderwerk gemeinnützige GmbH
Pfarrstr. 5, 85221 Dachau
phone: +49 8131-7799437
Änderwerk is represented by Dr. Martin Modlinger

2. Purposes and legal bases of processing

Änderwerk processes the following personal data:

  • For donation management: name, first name, address, email address, if applicable bank details incl. IBAN and BIC of the donors. The legal basis for this is Art. 6 (1) sentence 1 lit. b DSGVO. Änderwerk deletes the data ten years after the last transaction.
  • For job applications: name, first name, address and all other data of the job applicants submitted with the job application and arising in the course of the job application process. The legal basis for this is Art. 26 BDSG. Änderwerk deletes the data at the latest six months after completion of the job application process, but in the case of employment only six months after the end of the employment. Personnel records and references are deleted within ten years after the end of employment in the case of employment. In order to document the diversity of the job applications received and meet documentation obligations required by funders, Änderwerk keeps an anonymized version of the job applicant information in both cases.
  • For payroll accounting: name, first name, address, religious affiliation if applicable, tax number, social security number, health insurance number, bank details incl. IBAN and BIC of the employees. The legal basis for this is Art. 6 (1) sentence 1 lit. c DSGVO. Änderwerk deletes the data ten years after termination of the employment relationship.
  • For external presentation: image and sound recordings of Änderwerk project members and staff as well as participants in the Änderwerk events on the website and accompanying publication formats on social networks as well as online and offline to document our work. The legal basis for this is Art. 6 (1) sentence 1 lit. f DSGVO. The legitimate interest is to provide public information about our activities. Änderwerk deletes the data as soon as its use is no longer necessary, for example because newer recordings are available. If you, as a participant in an event, do not wish to have any recordings made, please inform us in advance at
  • For the operation of the website data automatically transmitted to us is not stored. We delete security log data stored on the basis of Art. 6 (1) sentence 1 lit. f within six months.
  • For event management: information and personal data that you have provided to us in the course of registering for an event or online event, usually name, first name, email address and event-related information such as selection of event blocks or meal requests are stored for the duration of the event organization and follow-up. The data will be deleted no later than 24 months after the end of the event, unless there are legal reasons (esp. accounting) that require a longer storage of the list of participants for documentation purposes. The legal basis for this is Art. 6 (1) sentence 1 lit. b DSGVO.
  • For individual communication, e.g. via internet (e-mail): all data voluntarily submitted to us, such as name, first name, e-mail address and any other specified personal data or special categories of personal data, insofar as this is necessary to process your request. The legal basis for this is Art. 6 (1) sentence 1 lit. a DSGVO. Änderwerk deletes the data within 24 months after the end of the respective form of communication or, if the data is part of ongoing activities, 24 months after the conclusion of the activities.

You may revoke your consent at any time with effect for the future, in particular by sending an email to In the event of revocation, Änderwerk will delete the relevant data immediately.

3. Recipient of the data

We do not transmit any data to third parties without your express consent (Art. 6 (1) sentence 1 lit. a DSGVO), except for the purpose of accounting, managing wages or donations. If this is required or necessary, this is done within the framework of commissioned data processing. Our legitimate interest (Art. 6 (1) sentence 1 lit. f DSGVO) in commissioned data processing lies in the outsourcing of this resource-intensive processing. The data is transferred to DATEV eG.

When using the donation form on, necessary data will also be transmited to twingle GmbH, Berlin, exclusively for the purpose of processing the donation. twingle GmbH provides the technical platform for the donation process of the donation form.

4. Cookies

Internet pages partly use so-called cookies. Cookies are small text files that are stored on your computer and saved by your browser. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure; this is our legitimate interest (Art. 6 (1) sentence 1 lit. f DSGVO) in their use.

The cookies we use are so-called “session cookies”. They are automatically deleted after the end of your visit to our website.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed. If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of Internet pages may be limited.

5. Third country transfer

Änderwerk does not transmit any data outside the scope of the GDPR. The exception is communication via social media based in the USA, where personal data is only processed by third parties who are themselves customers of these networks.

6. Rights of the parties concerned

You have the right

  • in accordance with Art. 15 DSGVO to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
  • in accordance with Art. 16 DSGVO to immediately demand the correction of incorrect or completion of your personal data stored by us;
  • pursuant to Art. 17 DSGVO to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
  • to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO;
  • pursuant to Art. 20 DSGVO to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
  • to revoke your consent at any time in accordance with Art. 7 (3) DSGVO. This has the consequence that we may no longer continue the data processing based on this consent for the future, and
  • complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our club headquarters.

To exercise your data subject rights, please contact us by e-mail at or also by post at: Änderwerk gGmbH, Pfarrstr. 5, 85221 Dachau, Germany.

7. Changes to this privacy policy

We reserve the right to change this privacy policy at any time with effect for the future. A current version is available at this point. Please visit the website regularly and inform yourself about the applicable data protection declaration.
Status 08/2023