As a data subject, you have various rights under the General Data Protection Regulation (GDPR), which are set out in particular in Articles 15 to 21 GDPR:

• Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) GDPR; This also applies to profiling based on these provisions. If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
• Right to withdraw consent: You have the right to withdraw your consent at any time.
• Right to information: You have the right to request confirmation as to whether data concerning you is being processed and to obtain information about this data, as well as further information and a copy of the data in accordance with the statutory provisions.
• Right to rectification: In accordance with the statutory provisions, you have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you.
• Right to erasure and restriction of processing: In accordance with legal requirements, you have the right to request that data concerning you be erased immediately or, alternatively, in accordance with legal requirements, to request a restriction on the processing of the data.
• Right to data portability: You have the right to receive data concerning you that you have provided to us in a structured, commonly used and machine-readable format in accordance with legal requirements, or to request that it be transferred to another controller.
• Complaint to supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the provisions of the GDPR.

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Unless a more specific storage period is specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, deletion will take place once these reasons no longer apply.

We process your personal data on the basis of Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, insofar as special categories of data are processed in accordance with Art. 9 (1) GDPR. In the event of express consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your end device (e.g. via device fingerprinting), data processing is also carried out on the basis of Section 25(1) TTDSG. Consent can be revoked at any time. If your data is necessary for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 (1) lit. b GDPR. Furthermore, we process your data if it is necessary to fulfil a legal obligation on the basis of Art. 6 (1) lit. c GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. The relevant legal basis in each individual case is explained in the following paragraphs of this privacy policy.

As part of our business activities, we work with various external parties. In some cases, this requires the transfer of personal data to these external parties. We only pass on personal data to external parties if this is necessary for the fulfilment of a contract, if we are legally obliged to do so (e.g. passing on data to tax authorities), if we have a legitimate interest in passing on the data in accordance with Art. 6 (1) lit. f GDPR, or if another legal basis permits the transfer of data. When using processors, we only pass on our customers' personal data on the basis of a valid contract for data processing. In the case of joint processing, a contract for joint processing is concluded.

If you contact us by email or telephone, your enquiry, including all resulting personal data (name, enquiry), will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.

This data is processed on the basis of Art. 6 (1) (b) GDPR, provided that your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested; consent can be revoked at any time.

The data you send us via contact enquiries will remain with us until you request us to delete it, revoke your consent to its storage or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.

On our website, we offer you the opportunity to subscribe to an email newsletter. To do this, we process your first and last name, your email address, IP address, browser type, information about your operating system, time of access or retrieval, and company name. The processing serves the purpose of sending and managing our newsletter. The legal basis is your consent in accordance with Art. 6 (1) (a) GDPR. We process your data until you unsubscribe from our newsletter, revoke your consent or request that we delete it.

The recipient of the data is ‘Brevo’ (formerly Sendinblue), Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, a processor for the creation and dispatch of the newsletter. As a processor, Brevo is obliged to process the data only in accordance with our instructions.

Within the scope of the service, personal data may occasionally be transferred to third countries such as Canada, the USA and India. For transfers to Canada, there is an adequacy decision by the EU Commission pursuant to Art. 45 GDPR, which stipulates that Canada has a level of data protection comparable to that of the EU.

The transfer to the USA is based on your consent in accordance with Art. 49 (1) (a) GDPR in the event that the US company Sendinblue Inc., to which Brevo transfers the data, has not yet been certified under the Data Privacy Framework.

In the context of the transfer of personal data to India, Brevo has committed itself to complying with adequate safeguards in accordance with Art. 44 et seq. GDPR and has concluded the standard contractual clauses approved by the EU Commission.

If you no longer wish to receive newsletters from us in the future and/or wish to object to the evaluation of your data by such newsletters, please use the ‘unsubscribe’ link contained in each newsletter or send us an email to presse@fonds-soziokultur.de.

Youtube
Provider: Google LCC
Purpose: We use Youtube on this website with the data-saving method "no-cookies". Youtube sets cookies during the playback of a video to store information about the visitors of the website.
Cookies: CONSENT (11 months). If you are logged in with your Google account at the time of playing the video in the browser, the cookies 1P_JAR, AEC, APISID, CONSENT, DV, HSID, NID, OTZ, SAPISID, SEARCH_SAMESITE, SID, SIDCC, SOCS, SSID, __Secure-1PAPISID, __Secure-1PSID, __Secure-3PAPISID, __Secure-3PSID, __Secure-3PSIDCC (13 months) are also set.
External privacy policy: https://policies.google.com/privacy

Google Analytics
Provider: Google LCC
Purpose: Google Analytics sets cookies to create usage statistics. These help us to improve our website. Cookies can distinguish individual users from each other by means of a randomly generated ID to prevent multiple counts.
Cookies: _ga (2 years), _gat, _gat_UA <property ID> (1 minute), _gid (1 day)
External privacy policy: https://policies.google.com/privacy

Provider: Fonds Soziokultur 
Purpose: Storage of individual user settings for language selection, cookie consent, browser session
Cookies: sessionid (13 days), trackingPermissions (1 year), csrftoken (1 year), cookie_consent_settings (50 years), browserId (1 year)
 

Depending on the event, we process the following personal data: first name, last name, email address, organisation. The processing serves the organisation and delivery of the registered event. The legal basis is Article 6(1)(b) GDPR.

Typeform also processes technical usage data such as IP address, device information, operating system, browser settings and the time of use. This processing is required to provide and stabilise the service and is based on Article 6(1)(f) GDPR. Further information is available in the Typeform Help Centre: https://help.typeform.com/hc/en-us/articles/360029581691-What-happens-to-my-data

We store registration data for the preparation and delivery of the respective event and delete it afterwards unless statutory retention duties apply. Technical data processed by Typeform is deleted by Typeform in accordance with its own retention rules. Information is available at: https://admin.typeform.com/to/dwk6gt

As an alternative to registering via Typeform, you can contact us by email at: events@fonds-soziokultur.de 

When you visit a Wonderlink page, Wonderlink processes personal data such as your IP address, device data, operating system, browser settings and the time you visited the page. Wonderlink is responsible for this data processing. We do not receive any personal data about visits to Wonderlink pages.

Wonderlink states that it provides its services in compliance with the GDPR. Further information on data processing and the rights of data subjects can be found in Wonderlink's privacy policy: https://wonderlink.de/privacy