General information and mandatory notices
It is generally possible to use our website without providing any personal data. However, should a data subject wish to make use of specific services via our website, the processing of personal data may be required. If the processing of personal data is required and there is no legal basis for such processing, we generally seek the consent of the data subject.
The processing of personal data – such as a data subject’s name, address, email address or telephone number – is always carried out in accordance with the General Data Protection Regulation and in compliance with the country-specific data protection regulations applicable to ECCOFORT e.V. Through this privacy policy, we provide information on the nature, scope and purpose of the personal data we collect, use and process. Furthermore, this privacy policy informs data subjects of their rights.
As the data controller, ECCOFORT e.V. has implemented numerous technical and organisational measures to ensure the most comprehensive possible protection of the personal data processed via this website. Nevertheless, internet-based data transmissions may, in principle, be subject to security vulnerabilities, meaning that absolute protection cannot be guaranteed. For this reason, any data subject is free to provide us with personal data via alternative means, such as by telephone.
Identification of the data controller
The data controller responsible for data processing on this website is:
FORTE CULTURA e.V.
Dirk Röder
c/o ECCOFORT e.V.
Albertinenstr. 1
13086 Berlin
The data controller determines, either alone or jointly with others, the purposes and means of processing personal data (e.g. names, contact details, etc.).
Withdrawal of your consent to data processing
Certain data processing operations are only possible with your explicit consent. You may withdraw any consent you have already given at any time. An informal notification by email is sufficient for the withdrawal. The lawfulness of the data processing carried out up to the point of withdrawal remains unaffected by the withdrawal.
Right to lodge a complaint with the competent supervisory authority
As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a breach of data protection law. The competent supervisory authority for data protection matters is the State Data Protection Commissioner of the federal state in which our company is based. The following link provides a list of data protection commissioners and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to have data which we process automatically on the basis of your consent or in fulfilment of a contract transferred to you or to a third party. The data will be provided in a machine-readable format. If you request the direct transfer of the data to another data controller, this will only take place to the extent that it is technically feasible.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content that you send to us as the website operator, our website uses SSL or TLS encryption. This ensures that data you transmit via this website cannot be read by third parties. You can recognise an encrypted connection by the ‘https://’ in your browser’s address bar and by the padlock icon in the browser bar.
Collection of general data and information
Our website collects a range of general data and information each time it is accessed by a data subject or an automated system. This general data and information is stored in the server’s log files. The following may be recorded: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (known as the referrer), (4) the sub-pages on our website accessed via an accessing system, (5) the date and time of access to the website, (6) an Internet Protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) other similar data and information used for security purposes in the event of attacks on our information technology systems.
ECCOFORT e.V. does not draw any conclusions about the data subject when using this general data and information. Rather, this information is required in order to (1) deliver the content of our website correctly, (2) optimise the content of our website and the advertising displayed on it, (3) ensure the long-term functionality of our IT systems and the technology underpinning our website, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber-attack. This anonymously collected data and information is therefore analysed by ECCOFORT e.V. for statistical purposes and, furthermore, with the aim of enhancing data protection and data security within our organisation, ultimately to ensure an optimal level of protection for the personal data we process. The anonymous data from the server log files is stored separately from any personal data provided by a data subject.
Cookies
Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us to make our website more user-friendly, effective and secure.
Some cookies are ‘session cookies’. These cookies are automatically deleted at the end of your browsing session. Other cookies, however, remain on your device until you delete them yourself. These cookies help us to recognise you when you return to our website.
With a modern web browser, you can monitor, restrict or prevent the setting of cookies. Many web browsers can be configured so that cookies are automatically deleted when the programme is closed. Disabling cookies may result in limited functionality on our website.
The setting of cookies that are necessary for the performance of electronic communications or the provision of specific functions requested by you (e.g. shopping basket) is based on Article 6(1)(f) of the GDPR. As the operator of this website, we have a legitimate interest in storing cookies to ensure the technically error-free and seamless provision of our services. Where other cookies (e.g. for analytics functions) are set, these are dealt with separately in this privacy policy.
Google Analytics
Our website uses features of the web analytics service Google Analytics. The provider of the web analytics service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses ‘cookies’. These are small text files that your web browser stores on your device and which enable an analysis of website usage. Information generated by cookies regarding your use of our website is transmitted to a Google server and stored there. The server is usually located in the USA.
Google Analytics cookies are set on the basis of Article 6(1)(f) of the GDPR. As the operator of this website, we have a legitimate interest in analysing user behaviour in order to optimise our website and, where applicable, our advertising.
IP anonymisation
We use Google Analytics in conjunction with the IP anonymisation feature. This ensures that Google truncates your IP address within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area before it is transmitted to the USA. There may be exceptional cases in which Google transmits the full IP address to a server in the USA and truncates it there. On our behalf, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide us with other services relating to website and internet usage. The IP address transmitted by Google Analytics is not merged with any other data held by Google.
Browser plugin
You can prevent your web browser from setting cookies. However, this may restrict some of the functions of our website. You can also prevent the collection of data relating to your use of the website, including your IP address, and the subsequent processing of this data by Google. You can do this by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set, which will prevent your data from being collected during future visits to our website: Disable Google Analytics.
Details on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Data processing on behalf of the controller
To ensure full compliance with statutory data protection requirements, we have entered into a data processing agreement with Google.
Demographic features in Google Analytics
Our website uses the ‘demographic features’ function of Google Analytics. This allows reports to be generated that provide information on the age, gender and interests of website visitors. This data is derived from Google’s interest-based advertising and from visitor data provided by third parties. It is not possible to link this data to a specific individual. You can disable this feature at any time. You can do this via the ad settings in your Google Account or by generally preventing Google Analytics from collecting your data, as explained in the section ‘Objection to data collection’.
Sources:
Privacy Policy Configurator from mein-datenschutzbeauftragter.de
Privacy Policy Generator from DGD Deutsche Gesellschaft für Datenschutz GmbH