Privacy policy for the website

Privacy policy for the website of Help - Hilfe zur Selbsthilfe e.V. (www.help-ev.de)

Thank you for your interest in using our website. The protection of personal data is a top priority for us. Below you will find information about the processing of your personal data and about your rights when using our website.

This privacy policy refers to our German website. The following services are not available on the English site (www.help-ev.de/en): 6.5, 6.7 - 6.11.

1. Responsible person

The controller responsible for data processing is:

Help – Hilfe zur Selbsthilfe e.V.
Adenauerallee 131a
53113 Bonn
Germany
Phone: +49 228 915290
ContaCt: datenschutz[at]help-ev.de

2. Data protection officer

You can contact our data protection officer as follows: 

Boris Reibach
Scheja und Partner Rechtsanwälte mbB
Adenauerallee 136 
53113 Bonn 
Germany 
Phone: 0228/2272260 
Contact:https://www.scheja-partner.de/kontakt/kontakt.html

3. Your rights as a data subject

As a data subject, you have the following rights under the General Data Protection Regulation (GDPR), provided that the respective legal requirements are met:

  • Information (Art. 15 GDPR): You have the right to obtain information about the personal data processed about you.
  • Rectification (Art. 16 GDPR): You can request the rectification of inaccurate personal data concerning you. You can also request the completion of incomplete data.
  • Erasure (Art. 17 GDPR): In certain cases, you can request the erasure of your personal data.
  • Restriction of processing (Art. 18 GDPR): In certain cases, you can request that the processing of your data be restricted.
  • Data portability (Art. 20 GDPR): If you have provided data on the basis of a contract or consent and the processing is carried out using automated procedures, you may request that you receive the data you have provided in a structured, commonly used and machine-readable format or that it be transmitted to another controller.

Right to object on a case-by-case basis:

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(1)(e) GDPR (performance of tasks carried out in the public interest or in the exercise of official authority) or Article 6(1)(1)(f) GDPR (balancing of interests); this also applies to profiling based on these provisions.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

Objection to data processing for the purpose of direct advertising:

Where we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

Withdrawal of consent (Art. 7 para. 3 GDPR): If you have given your consent to the processing of your data, you can withdraw this at any time with effect for the future. This does not affect the lawfulness of the processing of your data until you withdraw your consent.

You can revoke your consent to cookies in the Cookie-Center. If you give your consent for individual services on our website, you will receive further information on revocation options when giving your consent and under section 6 ("Exercise of revocation")..

Assertion of your rights: To exercise all your aforementioned rights, please contact us at datenschutz(at)help-ev.de or by post at the address given in section 1 above. Please ensure that we are able to clearly identify you.

If you believe that the processing of your personal data violates data protection law, you can also lodge a complaint with a supervisory authority, in particular in the EU member state or federal state of your habitual residence, place of work or the place of the alleged violation you are complaining about.

This also applies to the supervisory authority responsible for us:

State Commissoner for Data Protection and Freedom of Information North Rhine-Westphalia
P.O. Box  20 04 44
40102 Düsseldorf
Germany 
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de

4. Automated individual decision-making including profiling

Automated decisions in individual cases, including profiling within the meaning of Article 22 of the GDPR, do not take place in connection with the use of our service.

5. Third country transfers

If, in connection with the use of our service, your personal data is transferred to bodies whose registered office or place of data processing is not located in a member state of the European Union or in another state party to the Agreement on the European Economic Area, we will ensure before the transfer that, outside of legally permitted exceptional cases, the recipient either has an adequate level of data protection (e.g. through an adequacy decision by the European Commission, through suitable guarantees such as the agreement of so-called EU standard data protection clauses of the European Commission with the recipient) or your express consent.

You can obtain a copy of the specific guarantees to ensure an adequate level of data protection from us. To do so, please use the contact details provided in section 1.

6. Details on integrated services and functionalities

6.1. Provision of the website

Processed personal data:

Date and time of access, duration of the visit, type of end device, operating system used, functions used, amount of data sent, type of event, IP address, domain name, origin of the visitor

Purpose(s):

Provision of the website

Legal basis(s):

Art. 6 para. 1 subpara. 1 f) GDPR (balancing of interests). In doing so, we pursue the legitimate interest of providing our website.

Recipient of the personal data: 

Hosting provider, internal departments, external service provider for technical support

Speicherdauer der personenbezogenen Daten: 

Deletion immediately after delivery by the web server

6. 2. Log files

Processed personal data:

URL accessed, IP address, time and date of access, amount of data transferred, website from which the user came to the requested page (so-called "referrer"), website accessed by the user's system via our website, http status, information about the browser type and version used, user's operating system, user's Internet service provider  

Purpose(s): 

Statistical evaluations, improvement of the website, system security (e.g. prevention of misuse), error diagnosis  

Legal basis(s): 

  • Art. 6 para. 1 subpara. 1 f) GDPR (balancing of interests). In doing so, we pursue the legitimate interest in improving the website, system security (e.g. preventing misuse) and error diagnosis.

  • Art. 6 para. 1 subpara. 1 c) GDPR (fulfillment of a legal obligation). This includes disclosures to government agencies upon request.

Recipient of the personal data: 

Hosting provider, internal departments, external service provider for technical support, government agencies on request 

Storage period of personal data:

Deletion 7 days after creation 

6.3. Contact form

Processed personal data: 

Name of the person seeking contact, e-mail address, content of the message 

Purpose(s): 

Receiving and processing inquiries, complaints or other feedback and fulfilling legal obligations 

Legal basis(s): 

Art. 6 para. 1 subpara. 1 b) (contract), Art. 6 para. 1 subpara. 1 c) (compliance with a legal obligation) in conjunction with the relevant standard on which this obligation is based and Art. 6 para. 1 subpara. 1 f) GDPR (balancing of interests). If we process data on the basis of a balancing of interests, we pursue the legitimate interest in receiving and processing inquiries, complaints or other feedback. 

Recipient of the personal data: 

Hosting providers, internal departments 

Storage period of personal data: 

Deletion after final processing of the request and if no other legal basis (e.g. fulfillment of a legal obligation) applies. If the latter is the case, we will delete the data once this other legal basis no longer applies. 

Obligation to provide personal data and consequences of non-provision: 

Mandatory information in the contact form marked with "*", other information is not mandatory.

6.4. E-mail contact

Processed personal data: 

E-mail address, content of the message 

Purpose(s): 

Receiving and processing inquiries, complaints or other feedback and fulfilling legal obligations 

Legal basis(s):

Art. 6 para. 1 subpara. 1 b) (contract), Art. 6 para. 1 subpara. 1 c) (compliance with a legal obligation) in conjunction with the relevant standard on which this obligation is based and Art. 6 para. 1 subpara. 1 f) GDPR (balancing of interests). If we process data on the basis of a balancing of interests, we pursue the legitimate interest in receiving and processing inquiries, complaints or other feedback. 

Recipient of the personal data: 

Hosting providers, internal departments, processors 

Storage period of personal data: 

Deletion after final processing of the request and if no other legal basis (e.g. fulfillment of a legal obligation) applies. If the latter is the case, we will delete the data once this other legal basis no longer applies. 

Obligation to provide personal data and consequences of non-provision: 

No obligation to provide; if not provided, another contact channel must be selected.

6.5. Newsletter: Registration and analysis

Processed personal data: 

Salutation, first and last name, e-mail address, IP address, date and time of registration and confirmation (registration), opening rates, click rates in recipient profiles 

Purpose(s): 

Sending the newsletter to donors and interested parties, proof of consent as well as analysis and individual measurement, storage and evaluation of opening rates and click rates in recipient profiles for the purpose of designing future newsletters 

Legal basis(s): 

  • Art. 6 para. 1 subpara. 1 a) GDPR (consent), 
  • Art. 6 para. 1 subpara. 1 c) in conjunction with Art. 5 para. 1 lit. a, para. 2, 
  • Art. 7 para. 1 GDPR (fulfillment of legal obligation) 
  • Art. 6 para. 1 subpara. 1 f) GDPR (balancing of interests). In doing so, we pursue the legitimate interest of being able to prove that consent has been given. 

Recipient of the personal data: 

Processors for sending newsletters, internal departments, especially marketing, government agencies on request 

Storage period of personal data: 

  • Deletion after unsubscribing from the newsletter: title, surname, first name, e-mail address 
  • Deletion 3 years after unsubscribing from the newsletter or discontinuation of our newsletter service: Date and time of registration and confirmation (registration) 
  • Information on opening and click rates is deleted after 400 days 

Obligation to provide personal data and consequences of non-provision: 

Unfortunately, we cannot provide the service without the information declared as mandatory. 

Exercise of the revocation: 

Revocation can be declared via the unsubscribe link in each newsletter or by e-mail to newsletter@help-ev.de

6.6. Online donations / becoming a sponsor

Processed personal data: 

  • Mandatory information: Title, first and last name, e-mail address, details of the payment method and the data required in this regard, which vary depending on the payment method (direct debit: account holder, IBAN; credit card: card holder, credit card number, verification number, validity of the credit card; company (for company donations); donation amount, donation frequency, donation project 
  • Voluntary information: Title, birthday, wish to receive a donation receipt, message 
  • Voluntary information for campaign donations: Public name and message 

Purpose(s): 

Processing and implementation of the donation and fulfillment of legal obligations 

Legal basis(s): 

Art. 6 para. 1 subpara. 1 b) (contract) and Art. 6 para. 1 subpara. 1 c) GDPR (fulfillment of a legal obligation) in conjunction with the relevant standard justifying this obligation 

Recipient of the personal data: 

Processors, financial service providers for processing donation payments, internal departments 

Storage period of personal data: 

10 years after the end of the year of the last donation 

Obligation to provide personal data and consequences of non-provision: 

Unfortunately, we cannot process the donation without the mandatory information.

6.7. Donation service form

Processed personal data: 

  • Mandatory information: Donor number 
  • Voluntary information: Old and new salutation, old and new title, old and new first name, old and new last name, old and new street and house number, old and new postal code and city, old and new country, old and new e-mail address, old and new telephone and fax number 

Purpose(s): 

Receipt and processing of changes to donor data and fulfillment of legal obligations 

Legal basis(s): 

Art. 6 para. 1 subpara. 1 b) (contract) and Art. 6 para. 1 subpara. 1 c) GDPR (fulfillment of a legal obligation) in conjunction with the relevant standard justifying this obligation 

Recipient of the personal data: 

Processors, hosting providers, internal departments 

Storage period of personal data: 

10 years after the end of the year of the last donation 

Obligation to provide personal data and consequences of non-provision: 

Unfortunately, we cannot process the request without the information declared as mandatory.

6.8. Fundraisers

Processed personal data: 

  • Mandatory information: Title, first name, last name, e-mail address 
  • Voluntary information: address, action picture 

Purpose(s): 

Creation of a fundraising campaign to collect donations and fulfill legal obligations; 

Note: the donation itself is made using the donation form, see 5.1.6. Online donations / becoming a sponsor 

Legal basis(s): 

Art. 6 para. 1 subpara. 1 b) (contract) and Art. 6 para. 1 subpara. 1 c) GDPR (fulfillment of a legal obligation) in conjunction with the relevant standard justifying this obligation 

Recipient of the personal data: 

Processors, internal departments 

Storage period of personal data: 

10 years after the end of the year of the last donation 

Obligation to provide personal data and consequences of non-provision: 

Unfortunately, we cannot start the campaign without the mandatory information.

6.9. Donation store

Processed personal data: 

  • Mandatory information: Name of donor, name of recipient, e-mail address, title, first name and surname, details of the payment method and the data required for this, which vary depending on the payment method (direct debit: account holder, IBAN; credit card: card holder, credit card number, verification number, validity of the credit card; company (for company donations); donation amount, donation frequency, donation project 
  • Voluntary information: Title, birthday, wish to receive a donation receipt 

Purpose(s): 

Issue of the donation certificate, processing and execution of the donation and fulfillment of legal obligations 

Legal basis(s): 

Art. 6 para. 1 subpara. 1 b) (contract) and Art. 6 para. 1 subpara. 1 c) GDPR (fulfillment of a legal obligation) in conjunction with the relevant standard justifying this obligation 

Recipient of the personal data: 

Processors, financial service providers for processing donation payments, internal departments 

Storage period of personal data: 

10 years after the end of the year of the last donation; the donation certificates are deleted after 60 days 

Obligation to provide personal data and consequences of non-provision: 

Unfortunately, we cannot process the donation or issue a donation certificate without the mandatory information.

6.10. Press distribution list

Processed personal data: 

Mandatory information: Title, first name, last name, editor, e-mail address

Purpose(s): 

Sending press releases to interested parties

Legal basis(s): 

Art. 6 para. 1 subpara. 1 f) GDPR (balancing of interests). In doing so, we pursue the legitimate interest of sending press releases to interested parties.

Recipient of the personal data:

Internal departments, processors

Storage period of personal data:

Until you unsubscribe from the press mailing list

Obligation to provide personal data and consequences of non-provision:

We cannot include you in the press distribution list without the information declared as mandatory

6.11. Order form for wills brochure

Processed personal data: 

Title, first and last name, e-mail address, street, house number, postal code, city, birthday, IP address, date and time of the order 

Purpose(s): 

Ordering a will brochure

Legal basis(s): 

Art. 6 para. 1 subpara. 1 b) GDPR (contract)

Recipient of the personal data:

Processors, internal departments, in particular marketing

Storage period of personal data:

Deletion takes place after processing the request

Obligation to provide personal data and consequences of non-provision:

  • Mandatory information: Title, first and last name, e-mail address
  • Voluntary information: Street, house number, postal code, city, date of birth

We cannot send you the will brochure without the information declared as mandatory.

7. Cookies and comparable technologies

Information on cookies and similar technologies can be found here.