I. Name and address of responsible persons
Responsible for this website under the Basic Data Protection Regulation (DSGVO)
Co-Thinkers in Change
Auf dem Hilkenrath 11
II. General information on data processing
1. The scope of processing of personal data
We want to provide our users with a functional and comfortable website. We take data protection concerns into account. We only process your data to the extent that this is necessary for the functionality of the website and you as a user have given your prior consent. We only make exceptions if it is not technically possible for you to give prior consent to the processing of the necessary data – for example, when you visit the website for the first time. The legal regulations allow this procedure in the cases described.
In the following we explain
– the legal basis for processing personal data (see point 2), and
– the rules for the erasure and storage of data (see section 3).
2. The legal basis for processing personal data
is Article 6(1)(a)-(d) and 6(1)(f) of the EU Basic Regulation on Data Protection (DSGVO).
This concerns in detail: Where personal data are processed with the consent of the data subject: Article 6(1)(a);
In case of processing of personal data necessary for the performance of a contract with the data subject: Article 6(1)(b) of the FADP; this also applies to the implementation of pre-contractual measures;
In case of processing personal data to comply with a legal obligation on our part: Art. 6 para 1 lit. c DSGVO;
When vital interests of the data subject (or of another natural person) require the processing of personal data: 6(1)(d);
In the case of processing necessary to safeguard a legitimate interest of our company or of a third party and where the interests; fundamental rights and freedoms of the data subject do not prevail over the former interest: Art. 6, paragraph 1, lit. f.
3. Deleting and saving data
If the purpose of their storage no longer applies, the personal data collected will be deleted or blocked. However, they may be stored if this is provided for and necessary according to legal regulations, laws or other rules to which we are subject as a provider of this website. The conclusion or performance of a contract may also require that data be retained after the expiration of a storage period.
III. Data processing on our website in detail
In the following sections, we explain the different ways in which we use your data
Nature and scope of the processing;
Its legal basis;
The duration of storage;
as well as your objection and deletion options.
We explain this for the technologies used on our website to process user data, namely
Log files (IV.1);
Contact form and email (IV.3);
Web analytics (IV.4.).
IV-1 Data processing in the context of making the website available and creating log files
When you visit our website, our system automatically records certain data and information.
- Information about the type of browser and version you are using;
- Your operating system;
- Your internet service provider;
- Your IP address;
- The date and time of your access;
- Sites from which your system reaches our website;
- Websites that are accessible to you through our website.
Most of this data is also stored by our system in so-called log files. (For your IP address and other data that enables an assignment to you, see the section “Purpose” below). The data is not stored together with other personal data.
Legal Basis: Article 6(1)(f) of the DSGVO.
Purpose: The retrieval and temporary storage of the IP address for the duration of the session is technically necessary to deliver the website to your computer.
Duration of storage: The data necessary for making the website available is deleted when you end the respective session.
Possibility of objection and deletion: Since it is necessary for the function and use of the website to capture and temporarily store the above-mentioned data, you have no possibility of objection here. If you do not want the data to be collected and temporarily stored, please do not use the website.
We only use technically necessary cookies and cookies that enable the function of our offer – for example, for your language settings. Cookies are text files that are stored on your computer system. They contain a series of characters that allow your browser to be clearly identified the next time you visit our site. For example, your language settings are saved and sent.
Legal basis: As far as technically necessary cookies are concerned, Art. 6 (1) (f) of the DSGVO. For the processing of personal data based on cookies (after your prior consent), Art. 6 (1) lit. a DSGVO.
Purpose: We enable or facilitate the use of our website by means of technically necessary and functional cookies. We do not create user profiles with the stored data.
Other cookies are not technically necessary, but allow certain functions of our website. We only use technically non-necessary cookies with your prior consent. In this case, we must also justify a legitimate interest in processing the data, which is based on Article 6 (1) (f) of the DSGVO.
Duration of storage, possibility of objection and deletion: Cookies are stored on your own computer. You therefore have full control even after you have consented to the placement of cookies and can delete them at any time.
IV-3 Contact form and e-mail contact
If you use our contact form, the data you enter there will be transmitted to us and stored. This data is:
- Your email address;
- Date and time of registration;
- The content of the message (including names and other personal information);
- Your IP address.
You can also contact us via our email address. In this case, we also store the personal data you send us with the email.
We do not pass on the data from the e-mail traffic – either via the contact form or via the e-mail addresses – to third parties.
Legal basis: when using the contact form and with your consent Art. 6 para 1 lit. DSGVO. If you use our e-mail addresses, the legal basis is Art. 6(1)(f) of the DSGVO. If it concerns the conclusion of a contract, Article 6 (1) lit. b DSGVO is also the legal basis for processing your data.
Purpose: The purpose is only to process the contact. If you contact us by email, this also constitutes a legitimate interest in processing your data. In addition, the data collected may serve to prevent misuse of the contact form and to ensure the security of our information technology system.
Duration of storage: We delete personal data collected during the transmission of the form no later than seven days. We delete content and other data from correspondence with you when the relevant issue has been clarified.
Possibility of objection and deletion: You can withdraw your consent to the processing of personal data at any time. To object, simply send us an email or contact us in another way, indicating that you no longer wish us to use your personal data from email correspondence. All your personal data stored in the course of the contact with us will then be deleted.
In principle, you can already object to the storage of your personal data if you contact us by e-mail. However, in the case of a global objection, we are not allowed to use your e-mail address in advance, so that we cannot reply to you in this case.
V. Rights of the data subject
You have the following rights under the DSGVO against us as a user in connection with the use of your data.
V-1 Right to Information
You can request information on whether your personal data is being processed by us. If this is the case, we must inform you further upon request:
- The purposes of the processing;
- The categories of personal data processed;
- The (other) recipients of your personal data;
- The planned storage periods or the criteria for this;
- Your right to rectification or erasure of data and to restriction of their processing, as well as your right to object to the processing;
- Your right to appeal to a supervisory authority;
If we obtain data about you from other sources, any available information about the origin of the data;
The existence of automated decision-making, including profiling (according to Article 22(1) and (4) of the DSGVO). In this case, we would also have informed you of the logic involved, the scope and the intended effects of such processing on you;
A transfer of your personal data to a third country if that country provides appropriate safeguards in accordance with Article 46 DSGVO.
V-2 Right of rectification
You have the right to correct and/or supplement your personal data. We are obliged to carry out such correction without delay.
V-3 Right to restriction of processing
Under certain circumstances, you may request that the processing of your personal data be restricted. These circumstances are:
- If you dispute the accuracy of your personal data (for the period during which the accuracy of the data is being verified);
- If the processing of your data by us is unlawful, but you refuse to have your personal data deleted;
- If your data is no longer necessary for us, but you still need it to be able to object, or defend yourself against legal claims
- If you have objected to the processing on the basis of Art. 21 paragraph 1 DSGVO, but it has not yet been established whether justified reasons on our part outweigh the processing.
If the processing of your data is restricted, we may continue to store it if necessary, but otherwise only process it with your consent or for one of the following additional reasons:
- Objection, or defence of legal claims;
Protection of the rights of another natural or legal person;
- Justification of an important public interest of the EU or a Member State.
Should the restriction be lifted, we will inform you in advance.
V-4 Right of removal
You may request the immediate deletion of your personal data for the following reasons:
- If the data you provided is no longer necessary for the purposes for which it was collected or processed;
- If you have withdrawn the consent on which the processing is based in accordance with Article 6 (1) (a) or Article 9 (2) (a) and there is no other legal basis for the processing;
- If you object to the processing pursuant to Art. 21 (1) DSGVO, provided that there are no legitimate grounds for the processing which take precedence, or if you object to the processing pursuant to Art. 21 (2) DSGVO;
- If we have unlawfully processed your personal data;
- If it is necessary to delete your personal data to comply with a legal obligation under EU or national law;
- If the data has been collected in relation to information society services offered in accordance with Article 8(1) of the DSGVO.
In all these cases we are obliged to comply with your request immediately.
To the extent that we have made data about you available to third parties and are required to delete it in accordance with Art. 17 (1) DSGVO, we will take appropriate measures, including, if necessary, measures of a technical nature, to inform those who process your data other than us of your request to delete all links to such data and all copies or replications of the data.
There are exceptions to your right to request deletion. For example, the processing of your data may be necessary:
- To exercise the right to freedom of expression and information;
- To comply with an obligation under EU or national law that requires the processing of the data;
- To fulfil a task carried out in the public interest or in the exercise of official authority vested in us;
- Also for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) of the DSGVO;
- And for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes according to Art. 89 (1) DSGVO, provided that your right of deletion makes the fulfilment of these purposes impossible or seriously detrimental;
- And also for the establishment, exercise or defence of legal claims.
V-5 Right to information
If you have asserted against us your right to rectification, deletion or restriction of processing of your data, we must inform all persons to whom we have disclosed the data of their rectification, deletion or restriction of processing to the extent that this is possible with reasonable effort. You have the right to be informed by us of the recipients of the data relating to you.
V-6 Right to data transfer
Insofar as we process your data on the basis of consent in accordance with Art. 6 para. 1 lit. DSGVO or Art. 9 para. 2 lit. DSGVO or a contract pursuant to Art. 6 para. 1 lit. b DSGVO and this processing is carried out by automated procedures, you have the right to receive the data you provide in a structured, common and machine-readable format. Upon your request, the data must also be disclosed to third parties without hindrance. If you wish, this must also be done directly from us to these third parties, insofar as this is technically possible and the rights and freedoms of other persons are not affected.
The right to data transfer does not apply to the processing of personal data which is necessary for the performance of a task of general interest or for the exercise of public authority entrusted to us.
V-7 Right to object
You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data pursuant to Article 6(1)(e) or (f) of the FADP; this also applies to profiling based on these provisions.
In this case, we will no longer process your data, unless we can demonstrate compelling reasons for such processing that are worthy of protection and outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
If we process your personal data for direct marketing purposes, you can object to this at any time. This also applies to profiling, insofar as it is related to such direct marketing. If you object to the processing for direct marketing purposes, the personal data relating to you will no longer be processed for those purposes.
You have the possibility to exercise your right to object with regard to the use of information society services, without prejudice to Directive 2002/58/EC, by means of automated procedures with technical specifications.
V-8 Right to withdraw the declaration of consent under data protection legislation
You may revoke your consent statement(s) to us at any time under the Data Protection Act. The lawfulness of our processing of your data up to the point of revocation remains unaffected.
V-9 Automated decision-making in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you in a similar way. This does not apply if the decision is:
- Necessary for the conclusion or performance of a contract between you and the responsible person;
- Is permitted by EU legislation or by the legislation of the Member States to which the responsible person is subject, and that legislation provides for appropriate measures to protect your rights and freedoms and your legitimate interests;
- With your explicit consent.
However, these decisions may not be based on special categories of personal data according to Article 9(1) DSGVO, unless Article 9(2)(a) or (g) applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.
As far as the conclusion or performance of a contract is concerned, or the decision is based on your explicit consent, we will take appropriate measures to protect your rights and freedoms and your legitimate interests. This includes in any case the right to obtain the intervention of a person by us, to put forward our own point of view and to challenge the decision.
V-10 Right to appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data is in breach of the DSGVO.
If you lodge a complaint with a supervisory authority, you will be informed by that authority of the status and outcome of your complaint, including the possibility of a remedy.