Data Privacy Statement.

With this statement we inform you about the processing of your personal data by the sponsoring association B.U.D. e.V. and the rights you are entitled to according to the current data protection law.

Body responsible for data processing

B.U.D. e.V.
Postfach 44 01 53
D-90206 Nuremberg
Phone: +49 (0)151 / 216 53 187
Association Register No.: VR200956 [Amtsgericht] Fürth District Court
Tax number: 218/107/30738 Fürth Tax Office [Finanzamt]
E-mail: datenschutz@bud-bayern.de

Our Data Protection Officer
Mr Mario Heiß
MH-IT-Services
Am Wagnersberg 7
D-91056 Erlangen
Phone: +49 (0)9131/926739
Fax: +49 (0)9131/9267753
E-mail: datenschutz@mh-it-services.de

Purpose and legal bases of data processing

We process your personal data in compliance with the EU General Data Protection Regulation (DSGVO), the new German Federal Data Protection Act (BDSG-neu) and all other applicable laws.

If you are a (sponsoring) member of the association or if you make use of the (consulting) services of B.U.D. e.V. as a client or if such a relationship is imminent, we require the information provided by you for the (sponsoring) membership or in the context of the (consulting) services. In case a consulting relationship is established, we process the data exclusively within the framework of the consulting relationship.

In addition, we need your personal data to compile anonymised statistics.

The legal basis for this processing of personal data is Art. 6 (1) d) – f) GDPR. In the case of Art. 6 ( 1) f), the legitimate interest of the processing lies in the consulting relationship in matters of victim protection from right-wing violence. Insofar as special categories of personal data (e.g., your ethnic origin, political, religious or ideological beliefs) are collected for this purpose (such as in the case of victim counselling), the legal basis is Art. 9 (2) a) f) GDPR.

If we compile statistics with these categories of data, this is done on the basis of Art. 9 (2) j) GDPR in conjunction with Section 27 of the German Federal Data Protection Act [BDSG].

Insofar as special categories of personal data are required for services outside the (sponsoring) membership/ the use of our consulting services, we will seek your consent in accordance with Art. 9 (2) a) and d) GDPR.

Consent given for this purpose may be revoked at any time. This also applies to the revocation of declarations of consent that may have been given to us before the GDPR came into force, i.e., before 25 May 2018.

We also process your data in order to protect legitimate interests of us or of third parties (Art. 6 para. 1 f GDPR). This may be necessary in particular:

to ensure IT security and IT operation within the association,
to inform you about our consulting service

In addition, we process your personal data to fulfil legal obligations such as commercial and tax retention obligations. In this case, the respective legal regulations in conjunction with Art. 6 (1) c) GDPR serve as the legal basis for the processing.

In case we wish to process your personal data for a purpose not mentioned above, we will inform you of this in advance within the framework of the legal provisions and seek your consent.

Categories of recipients of personal data

Data processing/ External service providers:
We make use of specialised companies in some cases to fulfil our obligations under association, contractual and legal obligations.

Other recipients:
In addition, we may transfer your personal data to other recipients, such as to authorities for the fulfilment of legal notification obligations.

Duration of data storage

We delete/anonymise your personal data as soon as it is no longer required for the above-mentioned purposes. It may happen that personal data is stored for the time during which claims can be asserted against the association (statutory limitation period of three or up to thirty years). We also store your personal data insofar as we are legally obliged to do so. Corresponding obligations to provide proof and to store data result, among other things, from the German Fiscal Code (Abgabenordnung) and the German Money Laundering Act (Geldwäschegesetz). The storage periods are then up to ten years.

Data subject rights

You can request information about the data stored about you at the above address. In addition, you can request the correction or deletion of your data under certain conditions. If you ask us verbally for information, please understand that we may require proof from you that you are the person you claim to be. You may also have the right to restrict the processing of your data and the right to receive the data you have provided in a structured, common and machine-readable format.

Right of objection

In case we process your data to protect legitimate interests, you can object to this processing if reasons arise from your particular situation that speak against the data processing.

Right of complaint

You have the option of contacting the above-mentioned data protection officer or a data protection supervisory authority with a complaint. The competent data protection supervisory authority is:

Landesamt für Datenschutzaufsicht (State Office for Data Protection Supervision)
Address: Postfach 606, D-91511 Ansbach
Promenade 27 (Schloss), D-91522 Ansbach
Phone: +49(0)981 53 – 1300
Fax: +49(0)981 53 – 5300
E-mail: poststelle@lda.bayern.de
Internet: https://www.lda.bayern.de

Data Protection Website

We collect and use your personal data exclusively in accordance with the provisions of the data protection laws of the Federal Republic of Germany. In the following, we inform you about the type, scope and purpose of the collection and use of personal data. You can access this information on our website at any time.

Data transmission and logging for internal system and statistical purposes

When you access our website, your Internet browser automatically transmits data to our web server for technical reasons. This data includes the date and time of access, the URL of the referring website, the file accessed, the amount of data sent, the browser type and version, the operating system and your IP address. This data is stored separately from other data that you enter when using our website. It is not possible for us to assign this data to a specific person. This data is evaluated for statistical purposes and deleted afterwards.

Inventory data

In case a contractual relationship is to be established between you and us, or its content is to be developed or changed, we collect and use personal data from you to the extent necessary for these purposes. By order of the competent authorities, we may provide information about this data (inventory data) in individual cases insofar as this is necessary for the purposes of criminal prosecution, to avert danger, to fulfil the statutory tasks of the constitution protection authorities or the Military Counter-Intelligence Service or to enforce intellectual property rights.

Usage data

We collect and use personal data from you to the extent necessary to enable or invoice you for the use of our website (usage data). This includes, in particular, features for your identification and information on the beginning and end as well as the extent of the use of our offer.

For the purposes of advertising, market research and the needs-based design of our internet offer, we may create usage profiles when using pseudonyms. You have the right to object to this use of your data. We may not merge the usage profiles with data about the bearer of the pseudonym.

By order of the competent authorities, we may provide information about this data (inventory data) in individual cases, insofar as this is necessary for the purposes of criminal prosecution, to avert danger, to fulfil the statutory tasks of the constitution protection authorities or the Military Counter-Intelligence Service or to enforce intellectual property rights.

Legal basis for data processing

The legal basis for the data processing and temporary storage of the data and the log files is Art. 6 para. 1 lit. f GDPR.

Purpose of data processing

The temporary storage of the IP address by the system is necessary in order to enable delivery of the website to the user’s computer. For this purpose, the IP addresses of the users must remain stored for the duration of the respective session.

The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f GDPR.

Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

In the case of the collection of data for the provision of the website, this is the case when the respective session is terminated.

In the case of storage of data in log files, this is the case after seven days at the latest. Any storage beyond this period will only take place by deleting or alienating the IP addresses of the users so that it is no longer possible to identify the browser that called up the website.

Possibility of objection and removal

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for users to object.

Cookies

In order to expand the range of functions of our website and to make it more convenient for you to use, we use so-called “cookies”. With the help of these “cookies”, data can be stored on your computer when you call up our website. You have the option of preventing cookies from being stored on your computer by making the appropriate settings in your browser. However, this could restrict the range of functions offered by our website.

Borlabs cookie

The plugin Borlabs Cookie is used for the essential function of the website. The duration of the cookie is one year.

You can change your settings at any time. To do so, use the button in the footer of the website or click directly on the following link: Change cookie settings

Do not track function

You can individually manage cookies and tracking of many companies and features that are used for advertising. To do this, use the appropriate user tools such as “aboutads infochoices” or “Your online choices” or “Ghostery”. Most browsers also offer a so-called “do not track function” with which you can indicate that you do not want to be “tracked” by websites. When this feature is enabled, the browser tells ad networks, websites and applications that you do not want to be tracked for behavioural advertising and the like. Information and instructions on how to edit this feature can be found at the following links, depending on your browser provider:

Google Chrome

MozillaFirefox

Microsoft Internet Explorer

No Consent display appears for “do not track”. The option “refuse cookies” is automatically selected.

Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA, processed there and deleted after 24 months. However, in the event that IP anonymisation is activated on this website, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You may avoid cookies being used by selecting the appropriate settings on your browser; however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the appropriate browser plugin here.

We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield. The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f GDPR..

Information of the third-party provider:

Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Opt-out cookie

An opt-out cookie will be set to prevent future collection of your data when you visit this website. For more information on the terms of use and data protection, please refer to the Google Analytics terms and conditions or the Google Analytics overview. We would like to point out that on this website Google Analytics has been extended by the code “gat._anonymizeIp();” in order to ensure anonymised collection of IP addresses (so-called IP masking).

reCAPTCHA

To protect your enquiries via Internet forms, we use the reCAPTCHA service of the company Google Inc. (Google). The query serves to distinguish whether the input is made by a human being or abusively by automated, machine processing. The query includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google. For this purpose, your input will be transmitted to Google, further used there and deleted after 180 days. However, within member states of the European Union or in other contracting states of the Agreement on the European Economic Area, your IP address will be shortened beforehand by Google. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operators of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCaptcha will not be merged with other Google data. The deviating data protection regulations of the Google company apply to this data. You can find more information on Google’s privacy policy here.

Online counselling

The purpose of data collection is online counselling. For this purpose, we use the external system aygonet of the company Die Medialen GmbH, Colmantstraße 39, D-53115 Bonn. The privacy policy can be found after accessing the aygonet homepage via the registration or log-in button or using this link.

Use of Social Media Plug-ins

(1) We currently use the following social media plug-ins: [Facebook, Instagram, Twitter]. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognise the provider of the plug-in by marking the box with its initial letter or logo. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the marked box and thereby activate it, the plug-in provider receives the information that you have called up the corresponding website of our online offer. In addition, the data mentioned under § 3 of this declaration is transmitted. In the case of Facebook, Instagram and Twitter, the IP address is anonymised immediately after collection, according to the respective providers in Germany. By activating the plug-in, your personal data is therefore transmitted to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects the data in particular via cookies, we recommend that you delete all cookies via your browser’s security settings before confirming in the newly opening box.

(2) We have neither influence on the collected data and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider

(3) The plug-in provider stores the data collected about you as usage profiles and uses them for the purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is conducted in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these usage profiles, whereby you must contact the respective plug-in provider to exercise this right. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 p. 1 lit. f GDPR..

(4) The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, your data collected from us will be directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link to the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will help you to avoid an assignment to your profile with the plug-in provider.

(5) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers stated below. There you will also receive further information on your rights in this regard and setting options for protecting your privacy.

(6) Addresses of the respective plug-in providers and URL with their data protection information:

1. Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; Information on data collection.

Facebook has submitted to the EU-US Privacy Shield.

2. Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Information on data collection.

Note on data transfer to the USA

Among others, tools from companies based in the USA are integrated on our website. If these tools are active, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country within the meaning of EU data protection law. US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g., intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities.

Cookies

Social Media

B.U.D. e.V. offers individual pages on the internet of the platforms Twitter, Facebook and Instagram. These are social networks. A social network is a social meeting place operated on the internet, an online community that usually enables users to communicate with each other and interact in virtual space. A social network can serve as a platform for the exchange of opinions and experiences or enable the internet community to provide personal or company-related information.

Data protection regulations relating to the application and use of Facebook

The Facebook page offered by B.U.D. e.V. can be found here.

The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. In case a data subject lives outside the USA or Canada, the competent authority of personal data is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Facebook’s privacy policy can be found here.

Data protection regulations relating to the application and use of Instagram

The Instagram page operated by B.U.D. e.V. can be found here.

The operating company of Instagram is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. In case a data subject lives outside the USA or Canada, the competent authority of personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Instagram’s privacy policy can be found here.

Data protection regulations relating to the application and use of Twitter

The Twitter page operated by B.U.D. e.V. can be found here.

The operating company of Twitter is Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA

Twitter’s privacy policy can be found here.