Data Privacy

I. Name and address of the person responsible

The person responsible within the meaning of the General Data Protection Regulation (DS-GVO) and other national data protection laws of the member states as well as other data protection regulations is: Toleranz-Tunnel e.V. Lange Str. 65 32756 Detmold https://www.toleranzraeume.org District Court Detmold │ Association number 1700 Chairman of the Board: Dr. Jarek Nikolaus Korczynski

II. Name and address of the data protection officer

The data protection officer of the responsible person is:

Dr. Martin Anduschus
Lange Straße 65
32756 Detmold

III. General information on data processing

1. Scope of the processing of personal data

We process personal data of the users of our website only to the extent necessary to provide a functional website and our content and offers. The processing of personal data of the users of our website only takes place if the processing of the data is permitted by legal regulations. The processing of personal data is based on the objective of protecting fundamental rights and freedoms (Article 1 (2) DS-GVO).

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) (a) of the GDPR serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DS-GVO serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is required to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c DS-GMO serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d DS-GMO serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of the association or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 para. 1 lit. f DS-GVO serves as the legal basis for processing.

3. Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage beyond this period is possible if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Every time our website is accessed, our system automatically collects data and information from the accessing computer system.

The following data is collected:

  • The IP address of the accessing computer
  • Information about the browser type and version used (user agent
  • The operating system of the accessing computer
  • Date and time of access
  • Websites from which the user’s system accesses our website (referrer)
  • Websites accessed by the user’s system via our website
  • Status codes
  • Amount of data
  • Protocols used

The data is also stored in our system’s log files and deleted after 60 days. This data is not stored together with other personal data of the user.
The website is operated by our technical service provider on the company’s servers in accordance with the provisions of the GDPR. In detail, the following information is recorded in a log file:

  • The IP address of the accessing computer
  • Date and time of access
  • Access address
  • Website from which our site was accessed (referrer)
  • Information about the browser type and version used (user agent)
  • Status code & number of bytes sent

This data is deleted after seven days.

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Article 6 (1) (f) of the GDPR.

3. Purpose of data processing

The system needs to store the IP address temporarily to enable the website to be delivered to the user’s computer. To do this, the user’s IP address must be stored for the duration of the session.

The data is stored in log files to ensure the functionality of the website. In addition, the data helps us to optimize the website and to ensure the security of our information technology systems. No analysis of the data for marketing purposes is carried out in this context.

4. Duration of storage, right to object and right to erasure

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after 60 days at the latest.

The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Pursuant to Art. 21 (1) sentence 2 1. Alt. DS-GVO, there is consequently no right of objection on the part of the user.

V. Improvement of the user experience

1. Description and scope of data processing

We use procedures to make our website more user-friendly and to increase the security of the website. Some elements of our website require that the accessing browser can be identified even after a page change.
For this purpose, we use cookies, among other things, in which the following data is stored and transmitted:

  • Language settings
  • Log-in information
  • Search terms entered

We also integrate external fonts from Google Fonts and media, including sound recordings and videos, for example from YouTube or Twitter’s Periscope, as well as map material from Google Maps.
The data is not stored together with other personal data of the users.

2. Legal basis for data processing

The legal basis for the processing of personal data to improve the user experience is Art. 6 para. 1 lit. f DS-GVO.

3. Purpose of data processing

The purpose of the processing is to simplify the use of websites for users and to ensure the protection of the website. Some of our website’s functions cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

This website uses Google Analytics, a web analytics service provided by Google, Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to analyze how users use the site. The service uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States.

This website uses IP anonymization. The IP address of users within the member states of the EU and the European Economic Area is shortened. This abbreviation eliminates the personal reference to your IP address. As part of the agreement on the order data agreement, which the website operators have concluded with Google Inc., the latter uses the collected information to create an evaluation of website use and website activity and provides services associated with internet use.

You have the option of preventing cookies from being stored on your device by making the appropriate settings in your browser. If your browser does not accept cookies, there is no guarantee that you will be able to access all the functions of this website without restriction.

Furthermore, you can use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. The following link will take you to the corresponding plug-in:

https://tools.google.com/dlpage/gaoptout?hl=de

4. Duration of storage, right of objection and removal

Cookies are stored on the user’s computer and transmitted by it to our site. Therefore, you also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies, either directly in the browser or with the help of uBlock Origin or Privacy Badger. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it is possible that not all of the website’s functions can be used to their full extent.

When embedded content is accessed, personal data, among other things, is transmitted to the provider of this content. Accessing this content is subject to the full control of the users. By changing the settings in your browser, you can disable or restrict the access to external content, either directly in the browser or with the help of uBlock Origin or NoScript.

The integration of Google ReCaptcha is mandatory for the security of the website if you wish to comment on the website or register. In accordance with Art. 21 para. 1 sentence 2 1. Alt. DS-GVO, there is consequently no possibility for you to object.

VI. Usage analysis

1. description and scope of data processing

We use the web analytics tool Google Analytics to improve the quality of our website and its content.
If you have activated ‘Do Not Track’ in your browser or set the following opt-out cookie, no personal data about you will be collected, stored or used for the usage analysis.
Otherwise, we collect, store and use the following data:

  • Web analytics cookie with a unique ID
  • The IP address of the accessing computer (anonymized to 2 bytes)
  • Information about the browser type, the underlying engine and the version used, as well as existing plugins
  • The operating system of the accessing computer
  • The screen resolution of the accessing computer
  • The likely country from which access is made
  • The language set in the browser
  • Date and time of access
  • Websites from which the user’s system accesses our website (referrer)
  • Websites that are accessed by the user’s system via our website
  • The IP address is shortened to 2 bytes directly upon collection and thus anonymized.

2. Legal basis for data processing

The legal basis for the processing of personal data for usage analysis is Art. 6 para. 1 lit. f DS-GVO..

3. Purpose of data processing

The use of the analytics tool is for the purpose of improving the quality of our website and its contents. This tells us how the website is used and enables us to constantly optimize our services.

4. Duration of storage, right of objection and removal

The web analytics cookie with a unique ID is valid until the end of the browser session. The IP address is shortened to 2 bytes immediately upon collection and thus anonymized. This means that at the latest after the end of your browser session, the data is no longer personal.

You can activate ‘Do Not Track’ in your browser or set the following opt-out cookie to prevent the collection, storage and use of personal data for usage analysis. The opt-out cookie is valid for two years.

VII. Integration of offers from third-party services

1. Donation forms/twingle

This website uses the donation form of twingle GmbH, Prinzenallee 74, 13357 Berlin. Twingle GmbH provides the technical platform for the donation process for this donation form. The data you enter when making a donation (e.g. address, bank details, etc.) is stored by twingle solely for the purpose of processing the donation on servers in Germany.

We have concluded a contract with twingle for the processing of order data and, when using the twingle donation form, we fully implement the strict requirements of the EU General Data Protection Regulation and the German data protection authorities.

The transmission of your data is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing to fulfill a contract). You have the option to revoke your consent to data processing at any time. A revocation has no effect on the effectiveness of past data processing operations.

Use of Matomo

Data is collected and stored in the twingle donation form using the web analysis service software Matomo (www.matomo.org), a service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, (“Matomo”) on the basis of twingle’s legitimate interest in the statistical analysis of user behavior for optimization purposes in accordance with Art. 6 (1) point f GDPR. Pseudonymized user profiles can be created and evaluated from this data for the same purpose. Cookies can be used for this. Cookies are small text files that are stored locally in the cache of the site visitor’s Internet browser. Among other things, cookies enable the Internet browser to be recognized. The data collected using Matomo technology (including your pseudonymized IP address) is processed on twingle servers.

The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this website and is not merged with personal data about the pseudonym holder.

If you do not agree with the storage and evaluation of this data from your visit, you can object to the storage and use at any time by clicking below. In this case, a so-called opt-out cookie is stored in your browser, which means that Matomo does not collect any session data. Please note that if you delete all of your cookies, the opt-out cookie will also be deleted and you may have to reactivate it.

As we continue to develop our website, it may be necessary to amend this data protection notice. We therefore recommend that you re-read this data protection notice from time to time.