Privacy policy for the website

The controller responsible for data processing is:

Help – Hilfe zur Selbsthilfe e.V.
Adenauerallee 131a
53113 Bonn
Germany
Phone: +49 228 915290
ContaCt: datenschutz[at]help-ev.de

You can contact our data protection officer as follows: 

Boris Reibach
Scheja & Partners GmbH & Co. KG
Adenauerallee 136 
53113 Bonn 
Germany 
Phone: 0228/2272260 
Contact:https://www.scheja-partner.de/kontakt/kontakt.html

As a data subject, you have the following rights under the General Data Protection Regulation (GDPR), provided that the respective legal requirements are met:

• Information (Art. 15 GDPR): You have the right to obtain information about the personal data processed about you.
• Rectification (Art. 16 GDPR): You can request the rectification of inaccurate personal data concerning you. You can also request the completion of incomplete data.
• Erasure (Art. 17 GDPR): In certain cases, you can request the erasure of your personal data.
• Restriction of processing (Art. 18 GDPR): In certain cases, you can request that the processing of your data be restricted.
• Data portability (Art. 20 GDPR): If you have provided data on the basis of a contract or consent and the processing is carried out using automated procedures, you may request that you receive the data you have provided in a structured, commonly used and machine-readable format or that it be transmitted to another controller.

Automated decisions in individual cases, including profiling within the meaning of Article 22 of the GDPR, do not take place in connection with the use of our service.

If, in connection with the use of our service, your personal data is transferred to bodies whose registered office or place of data processing is not located in a member state of the European Union or in another state party to the Agreement on the European Economic Area, we will ensure before the transfer that, outside of legally permitted exceptional cases, the recipient either has an adequate level of data protection (e.g. through an adequacy decision by the European Commission, through suitable guarantees such as the agreement of so-called EU standard data protection clauses of the European Commission with the recipient) or your express consent.

You can obtain a copy of the specific guarantees to ensure an adequate level of data protection from us. To do so, please use the contact details provided in section 1.

Processed personal data:

Date and time of access, duration of the visit, type of end device, operating system used, functions used, amount of data sent, type of event, IP address, domain name, origin of the visitor

Purpose(s):

Provision of the website

Legal basis(s):

Art. 6 para. 1 subpara. 1 f) GDPR (balancing of interests). In doing so, we pursue the legitimate interest of providing our website.

Recipient of the personal data: 

Hosting provider, internal departments, external service provider for technical support

Speicherdauer der personenbezogenen Daten: 

Deletion immediately after delivery by the web server

Processed personal data:

URL accessed, IP address, time and date of access, amount of data transferred, website from which the user came to the requested page (so-called "referrer"), website accessed by the user's system via our website, http status, information about the browser type and version used, user's operating system, user's Internet service provider  

Purpose(s): 

Statistical evaluations, improvement of the website, system security (e.g. prevention of misuse), error diagnosis  

Legal basis(s): 

• Art. 6 para. 1 subpara. 1 f) GDPR (balancing of interests). In doing so, we pursue the legitimate interest in improving the website, system security (e.g. preventing misuse) and error diagnosis.

• Art. 6 para. 1 subpara. 1 c) GDPR (fulfillment of a legal obligation). This includes disclosures to government agencies upon request.

Recipient of the personal data: 

Hosting provider, internal departments, external service provider for technical support, government agencies on request 

Storage period of personal data:

Deletion 7 days after creation 

Processed personal data: 

Name of the person seeking contact, e-mail address, content of the message 

Purpose(s): 

Receiving and processing inquiries, complaints or other feedback and fulfilling legal obligations 

Legal basis(s): 

Art. 6 para. 1 subpara. 1 b) (contract), Art. 6 para. 1 subpara. 1 c) (compliance with a legal obligation) in conjunction with the relevant standard on which this obligation is based and Art. 6 para. 1 subpara. 1 f) GDPR (balancing of interests). If we process data on the basis of a balancing of interests, we pursue the legitimate interest in receiving and processing inquiries, complaints or other feedback. 

Recipient of the personal data: 

Hosting providers, internal departments 

Storage period of personal data: 

Deletion after final processing of the request and if no other legal basis (e.g. fulfillment of a legal obligation) applies. If the latter is the case, we will delete the data once this other legal basis no longer applies. 

Obligation to provide personal data and consequences of non-provision: 

Mandatory information in the contact form marked with "*", other information is not mandatory.

Processed personal data: 

E-mail address, content of the message 

Purpose(s): 

Receiving and processing inquiries, complaints or other feedback and fulfilling legal obligations 

Legal basis(s):

Art. 6 para. 1 subpara. 1 b) (contract), Art. 6 para. 1 subpara. 1 c) (compliance with a legal obligation) in conjunction with the relevant standard on which this obligation is based and Art. 6 para. 1 subpara. 1 f) GDPR (balancing of interests). If we process data on the basis of a balancing of interests, we pursue the legitimate interest in receiving and processing inquiries, complaints or other feedback. 

Recipient of the personal data: 

Hosting providers, internal departments, processors 

Storage period of personal data: 

Deletion after final processing of the request and if no other legal basis (e.g. fulfillment of a legal obligation) applies. If the latter is the case, we will delete the data once this other legal basis no longer applies. 

Obligation to provide personal data and consequences of non-provision: 

No obligation to provide; if not provided, another contact channel must be selected.

Processed personal data: 

Salutation, first and last name, e-mail address, IP address, date and time of registration and confirmation (registration), opening rates, click rates in recipient profiles 

Purpose(s): 

Sending the newsletter to donors and interested parties, proof of consent as well as analysis and individual measurement, storage and evaluation of opening rates and click rates in recipient profiles for the purpose of designing future newsletters 

Legal basis(s): 

• Art. 6 para. 1 subpara. 1 a) GDPR (consent), 
• Art. 6 para. 1 subpara. 1 c) in conjunction with Art. 5 para. 1 lit. a, para. 2, 
• Art. 7 para. 1 GDPR (fulfillment of legal obligation) 
• Art. 6 para. 1 subpara. 1 f) GDPR (balancing of interests). In doing so, we pursue the legitimate interest of being able to prove that consent has been given. 

Recipient of the personal data: 

Processors for sending newsletters, internal departments, especially marketing, government agencies on request 

Storage period of personal data: 

• Deletion after unsubscribing from the newsletter: title, surname, first name, e-mail address 
• Deletion 3 years after unsubscribing from the newsletter or discontinuation of our newsletter service: Date and time of registration and confirmation (registration) 
• Information on opening and click rates is deleted after 400 days 

Obligation to provide personal data and consequences of non-provision: 

Unfortunately, we cannot provide the service without the information declared as mandatory. 

Exercise of the revocation: 

Revocation can be declared via the unsubscribe link in each newsletter or by e-mail to newsletter@help-ev.de

Processed personal data: 

• Mandatory information: Title, first and last name, e-mail address, details of the payment method and the data required in this regard, which vary depending on the payment method (direct debit: account holder, IBAN; credit card: card holder, credit card number, verification number, validity of the credit card; company (for company donations); donation amount, donation frequency, donation project 
• Voluntary information: Title, birthday, wish to receive a donation receipt, message 
• Voluntary information for campaign donations: Public name and message 

Purpose(s): 

Processing and implementation of the donation and fulfillment of legal obligations 

Legal basis(s): 

Art. 6 para. 1 subpara. 1 b) (contract) and Art. 6 para. 1 subpara. 1 c) GDPR (fulfillment of a legal obligation) in conjunction with the relevant standard justifying this obligation 

Recipient of the personal data: 

Processors, financial service providers for processing donation payments, internal departments 

Storage period of personal data: 

10 years after the end of the year of the last donation 

Obligation to provide personal data and consequences of non-provision: 

Unfortunately, we cannot process the donation without the mandatory information.

Processed personal data: 

• Mandatory information: Donor number 
• Voluntary information: Old and new salutation, old and new title, old and new first name, old and new last name, old and new street and house number, old and new postal code and city, old and new country, old and new e-mail address, old and new telephone and fax number 

Purpose(s): 

Receipt and processing of changes to donor data and fulfillment of legal obligations 

Legal basis(s): 

Art. 6 para. 1 subpara. 1 b) (contract) and Art. 6 para. 1 subpara. 1 c) GDPR (fulfillment of a legal obligation) in conjunction with the relevant standard justifying this obligation 

Recipient of the personal data: 

Processors, hosting providers, internal departments 

Storage period of personal data: 

10 years after the end of the year of the last donation 

Obligation to provide personal data and consequences of non-provision: 

Unfortunately, we cannot process the request without the information declared as mandatory.

Processed personal data: 

• Mandatory information: Title, first name, last name, e-mail address 
• Voluntary information: address, action picture 

Purpose(s): 

Creation of a fundraising campaign to collect donations and fulfill legal obligations; 

Note: the donation itself is made using the donation form, see 5.1.6. Online donations / becoming a sponsor 

Legal basis(s): 

Art. 6 para. 1 subpara. 1 b) (contract) and Art. 6 para. 1 subpara. 1 c) GDPR (fulfillment of a legal obligation) in conjunction with the relevant standard justifying this obligation 

Recipient of the personal data: 

Processors, internal departments 

Storage period of personal data: 

10 years after the end of the year of the last donation 

Obligation to provide personal data and consequences of non-provision: 

Unfortunately, we cannot start the campaign without the mandatory information.

Processed personal data: 

• Mandatory information: Name of donor, name of recipient, e-mail address, title, first name and surname, details of the payment method and the data required for this, which vary depending on the payment method (direct debit: account holder, IBAN; credit card: card holder, credit card number, verification number, validity of the credit card; company (for company donations); donation amount, donation frequency, donation project 
• Voluntary information: Title, birthday, wish to receive a donation receipt 

Purpose(s): 

Issue of the donation certificate, processing and execution of the donation and fulfillment of legal obligations 

Legal basis(s): 

Art. 6 para. 1 subpara. 1 b) (contract) and Art. 6 para. 1 subpara. 1 c) GDPR (fulfillment of a legal obligation) in conjunction with the relevant standard justifying this obligation 

Recipient of the personal data: 

Processors, financial service providers for processing donation payments, internal departments 

Storage period of personal data: 

10 years after the end of the year of the last donation; the donation certificates are deleted after 60 days 

Obligation to provide personal data and consequences of non-provision: 

Unfortunately, we cannot process the donation or issue a donation certificate without the mandatory information.

Processed personal data: 

Mandatory information: Title, first name, last name, editor, e-mail address

Purpose(s): 

Sending press releases to interested parties

Legal basis(s): 

Art. 6 para. 1 subpara. 1 f) GDPR (balancing of interests). In doing so, we pursue the legitimate interest of sending press releases to interested parties.

Recipient of the personal data:

Internal departments, processors

Storage period of personal data:

Until you unsubscribe from the press mailing list

Obligation to provide personal data and consequences of non-provision:

We cannot include you in the press distribution list without the information declared as mandatory

Processed personal data: 

Title, first and last name, e-mail address, street, house number, postal code, city, birthday, IP address, date and time of the order 

Purpose(s): 

Ordering a will brochure

Legal basis(s): 

Art. 6 para. 1 subpara. 1 b) GDPR (contract)

Recipient of the personal data:

Processors, internal departments, in particular marketing

Storage period of personal data:

Deletion takes place after processing the request

Obligation to provide personal data and consequences of non-provision:

• Mandatory information: Title, first and last name, e-mail address
• Voluntary information: Street, house number, postal code, city, date of birth

We cannot send you the will brochure without the information declared as mandatory.