This data protec­tion decla­ra­tion informs you about the nature, scope and purpose of the process­ing of personal data (here­inafter referred to as “data”) within our online offer­ing and the websites, func­tions and content asso­ci­ated with it, as well as exter­nal online pres­ences, such as our social media profiles. (here­inafter collec­tively referred to as the “Online Offer”). With regard to the terms used, such as “process­ing” or “controller”, we refer to the defi­n­i­tions in Art. 4 of the General Data Protec­tion Regu­la­tion (GDPR).

Respon­si­ble

@fire - Inter­na­tionaler Katas­tro­phen­schutz e.V.
Brun­ings Kamp 8c
D-49134 Wallenhorst
Email address: info@​at-​fire.​de
Chair­man: Jan Südmersen
Link to imprint: http://​www​.at​-fire​.de/​i​m​p​r​e​s​sum

Types of data processed

- Inven­tory data (e.g., names, addresses).
- Contact infor­ma­tion (e.g., email, phone numbers).
- Content data (e.g., text input, photographs, videos).
- Usage data (e.g., web pages visited, inter­est in content, access times).
- Meta/communication data (e.g., device infor­ma­tion, IP addresses).

Purpose of processing

- Provi­sion of the online offer, its func­tions and contents.
- Respond to contact requests and commu­ni­cate with users.
- Safety measures.
- Reach measurement/marketing

Terms used

“Personal data” means any infor­ma­tion relat­ing to an iden­ti­fied or iden­ti­fi­able natural person (here­inafter “data subject”); an iden­ti­fi­able natural person is one who can be iden­ti­fied, directly or indi­rectly, in partic­u­lar by refer­ence to an iden­ti­fier such as a name, an iden­ti­fi­ca­tion number, loca­tion data, an online iden­ti­fier (e.g. cookie) or to one or more factors specific to the phys­i­cal, phys­i­o­log­i­cal, genetic, mental, economic, cultural or social iden­tity of that natural person.

“Process­ing” means any oper­a­tion or set of oper­a­tions which is performed upon Personal Data, whether or not by auto­matic means. The term is broad and encom­passes virtu­ally any handling of data.

Controller” means the natural or legal person, public author­ity, agency or other body which alone or jointly with others deter­mines the purposes and means of the process­ing of personal data.

Rele­vant legal bases

In accor­dance with Art. 13 DSGVO, we inform you about the legal basis of our data process­ing. If the legal basis is not stated in the privacy policy, the follow­ing applies: The legal basis for obtain­ing consent is Art. 6 para. 1 lit. a and Art. 7 DSGVO, the legal basis for process­ing for the fulfill­ment of our services and imple­men­ta­tion of contrac­tual measures as well as answer­ing inquiries is Art. 6 para. 1 lit. b DSGVO, the legal basis for process­ing to fulfill our legal oblig­a­tions is Art. 6 para. 1 lit. c DSGVO, and the legal basis for process­ing to protect our legit­i­mate inter­ests is Art. 6 para. 1 lit. f GDPR. In the event that vital inter­ests of the data subject or another natural person require the process­ing of personal data, Art. 6 para. 1 lit. d DSGVO as the legal basis.

Secu­rity measures

We ask you to regu­larly inform your­self about the content of our privacy policy. We will adapt the privacy policy as soon as the changes in the data process­ing carried out by us make this neces­sary. We will inform you as soon as the changes require an act of coop­er­a­tion on your part (e.g. consent) or other indi­vid­ual notification.

Coop­er­a­tion with proces­sors and third parties

If, in the course of our process­ing, we disclose data to other persons and compa­nies (proces­sors or third parties), trans­mit it to them or other­wise grant them access to the data, this will only be done on the basis of a legal permis­sion (e.g. if a trans­mis­sion of the data to third parties, such as to payment service providers, is required for the perfor­mance of the contract pursuant to Art. 6 (1) lit. b DSGVO), you have consented, a legal oblig­a­tion provides for this or on the basis of our legit­i­mate inter­ests (e.g. when using agents, web hosts, etc.).

If we commis­sion third parties with the process­ing of data on the basis of a so-called “order process­ing agree­ment”, this is done on the basis of Art. 28 DSGVO.

Trans­fers to third countries

If we process data in a third coun­try (i.e. outside the Euro­pean Union (EU) or the Euro­pean Economic Area (EEA)) or if this is done in the context of using third-party services or disclos­ing or trans­fer­ring data to third parties, this will only be done if it is done to fulfill our (pre-)contractual oblig­a­tions, on the basis of your consent, due to a legal oblig­a­tion or on the basis of our legit­i­mate inter­ests. Subject to legal or contrac­tual permis­sions, we process or allow the process­ing of data in a third coun­try only if the special require­ments of Art. 44 et seq. DSGVO are met. This means, for exam­ple, that process­ing takes place on the basis of special guar­an­tees, such as the offi­cially recog­nized deter­mi­na­tion of a level of data protec­tion that corre­sponds to that of the EU (e.g., for the USA through the “Privacy Shield”) or compli­ance with offi­cially recog­nized special contrac­tual oblig­a­tions (so-called “stan­dard contrac­tual clauses”).

Rights of the data subjects

You have the right to request confir­ma­tion as to whether data in ques­tion is being processed and to infor­ma­tion about this data, as well as further infor­ma­tion and a copy of the data in accor­dance with Art. 15 DSGVO.

You have accord­ingly. Art. 16 DSGVO the right to request the comple­tion of the data concern­ing you or the correc­tion of incor­rect data concern­ing you.

In accor­dance with Arti­cle 17 of the GDPR, you have the right to demand that the data in ques­tion be deleted with­out delay or, alter­na­tively, to demand restric­tion of the process­ing of the data in accor­dance with Arti­cle 18 of the GDPR.

You have the right to request to receive the data concern­ing you that you have provided to us in accor­dance with Arti­cle 20 of the GDPR and to request its trans­fer to other data controllers.

They have further pursuant to Arti­cle 77 DSGVO the right to lodge a complaint with the compe­tent super­vi­sory authority.

Right of withdrawal

You have the right to with­draw consent granted pursuant to. Art. 7 par. 3 DSGVO with effect for the future

Right of objection

You may object to the future process­ing of data concern­ing you in accor­dance with Art. 21 DSGVO at any time. The objec­tion can be made in partic­u­lar against the process­ing for purposes of direct advertising.

Cook­ies and right to object to direct advertising

Cook­ies” are small files that are stored on users’ comput­ers. Differ­ent infor­ma­tion can be stored within the cook­ies. The primary purpose of a cookie is to store infor­ma­tion about a user (or the device on which the cookie is stored) during or after his visit within an online offer. Tempo­rary cook­ies, or “session cook­ies” or “tran­sient cook­ies”, are cook­ies that are deleted after a user leaves an online offer and closes his browser. In such a cookie, for exam­ple, the contents of a shop­ping cart in an online store or a login jam can be stored. Perma­nent” or “persis­tent” cook­ies are those that remain stored even after the browser is closed. For exam­ple, the login status can be saved when users visit them after several days. Like­wise, such a cookie may store the inter­ests of users, which are used for reach measure­ment or market­ing purposes. Third-party cook­ies” are cook­ies that are offered by providers other than the respon­si­ble party that oper­ates the online offer (other­wise, if they are only its cook­ies, they are referred to as “first-party cookies”).

We may use tempo­rary and perma­nent cook­ies and explain this in our privacy policy.

If users do not want cook­ies to be stored on their computer, they are asked to disable the corre­spond­ing option in the system settings of their browser. Stored cook­ies can be deleted in the system settings of the browser. The exclu­sion of cook­ies can lead to func­tional restric­tions of this online offer.

A general objec­tion to the use of cook­ies used for online market­ing purposes can be made for a large number of the services, espe­cially in the case of track­ing, via the U.S. site http://​www​.aboutads​.info/​c​h​o​i​c​es/ or the EU side http://www.youronlinechoices.com/erklärtwill. Further­more, the stor­age of cook­ies can be achieved by means of their deac­ti­va­tion in the browser settings. Please note that in this case not all func­tions of this online offer can be used.

Data dele­tion

The data processed by us will be deleted or restricted in its process­ing in accor­dance with Arti­cles 17 and 18 DSGVO. Unless expressly stated within the scope of this data protec­tion decla­ra­tion, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the dele­tion does not conflict with any statu­tory reten­tion oblig­a­tions. If the data are not deleted because they are required for other and legally permis­si­ble purposes, their process­ing will be restricted. I.e. the data is blocked and not processed for other purposes. This applies, for exam­ple, to data that must be retained for reasons of commer­cial or tax law.

Accord­ing to legal require­ments in Germany, the stor­age takes place in partic­u­lar for 10 years accord­ing to §§ 147 Abs. 1 AO, 257 para. 1 No. 1 and 4, para. 4 HGB (books, records, manage­ment reports, account­ing vouch­ers, commer­cial books, docu­ments rele­vant for taxa­tion, etc.) and 6 years accord­ing to § 257 para. 1 No. 2 and 3, para. 4 HGB (Commer­cial Letters).

Accord­ing to legal require­ments in Austria, the stor­age is carried out in partic­u­lar for 7 years in accor­dance with § 132 para. 1 BAO (account­ing records, vouchers/invoices, accounts, receipts, busi­ness papers, state­ment of income and expenses, etc.), for 22 years in connec­tion with real prop­erty and for 10 years for records in connec­tion with elec­tron­i­cally provided services, telecom­mu­ni­ca­tions, radio and tele­vi­sion services provided to non-entre­pre­neurs in EU member states and for which the Mini-One-Stop-Shop (MOSS) is used.

Host­ing

The host­ing services used by us serve to provide the follow­ing services: Infra­struc­ture and plat­form services, comput­ing capac­ity, stor­age space and data­base services, secu­rity services and tech­ni­cal main­te­nance services, which we use for the purpose of oper­at­ing this online offering.

In doing so, we, or our host­ing provider, process inven­tory data, contact data, content data, contract data, usage data, meta data and commu­ni­ca­tion data of customers, inter­ested parties and visi­tors of this online offer on the basis of our legit­i­mate inter­ests in an effi­cient and secure provi­sion of this online offer in accor­dance with the German Data Protec­tion Act. Art. 6 par. 1 lit. f DSGVO in conjunc­tion with. Art. 28 DSGVO (conclu­sion of order process­ing contract).

Collec­tion of access data and log files

We, or rather our host­ing provider, collects data on the basis of our legit­i­mate inter­ests within the mean­ing of Art. 6 para. 1 lit. f. DSGVO data about each access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data trans­ferred, noti­fi­ca­tion of success­ful access, browser type and version, the user’s oper­at­ing system, refer­rer URL (the previ­ously visited page), IP address and the request­ing provider.

Log file infor­ma­tion is stored for secu­rity reasons (e.g. for the clar­i­fi­ca­tion of abuse or fraud) for a maxi­mum of 7 days and then deleted. Data whose further reten­tion is required for eviden­tiary purposes is exempt from dele­tion until final clar­i­fi­ca­tion of the respec­tive incident.

Provi­sion of our statu­tory and busi­ness services

We process the data of our members, support­ers, inter­ested parties, customers or other persons in accor­dance with Art. 6 para. 1 lit. b. DSGVO, inso­far as we offer contrac­tual services to them or act within the scope of exist­ing busi­ness rela­tion­ships, e.g. vis-à-vis members, or are ourselves recip­i­ents of services and bene­fits. In other respects, we process the data of data subjects pursuant to. Art. 6 par. 1 lit. f. DSGVO on the basis of our legit­i­mate inter­ests, e.g. when it concerns admin­is­tra­tive tasks or public relations.

The data processed in this context, the type, scope and purpose and the neces­sity of their process­ing are deter­mined by the under­ly­ing contrac­tual rela­tion­ship. In prin­ci­ple, this includes inven­tory and master data of the persons (e.g., name, address, etc.), as well as contact data (e.g., e-mail address, tele­phone, etc.), contract data (e.g., services used, content and infor­ma­tion provided, names of contact persons) and, if we offer payable services or prod­ucts, payment data (e.g., bank details, payment history, etc.).

We delete data that is no longer required to fulfill our statu­tory and busi­ness purposes. This is deter­mined accord­ing to the respec­tive tasks and contrac­tual rela­tion­ships. In the case of commer­cial process­ing, we retain the data for as long as it may be rele­vant for the trans­ac­tion of busi­ness, as well as with regard to any warranty or liabil­ity oblig­a­tions. The need to retain the data is reviewed every three years; other­wise, the statu­tory reten­tion oblig­a­tions apply.

Contact

When contact­ing us (e.g. by contact form, e-mail, tele­phone or via social media), the user’s details will be used to process the contact request and its handling in accor­dance with the German Data Protec­tion Act. Art. 6 par. 1 lit. b) DSGVO processed. User infor­ma­tion may be stored in a customer rela­tion­ship manage­ment system (“CRM System”) or simi­lar inquiry organization.

We delete the requests if they are no longer neces­sary. We review the neces­sity every two years; Further­more, the legal archiv­ing oblig­a­tions apply.

Newslet­ter

With the follow­ing infor­ma­tion we inform you about the contents of our newslet­ter as well as the regis­tra­tion, dispatch and statis­ti­cal eval­u­a­tion proce­dure and your rights of objec­tion. By subscrib­ing to our newslet­ter, you agree to receive it and to the proce­dures described.
Newslet­ter content: We send newslet­ters, e-mails and other elec­tronic noti­fi­ca­tions with promo­tional infor­ma­tion (here­inafter “newslet­ter”) only with the consent of the recip­i­ents or a legal permis­sion. Inso­far as the contents of the newslet­ter are specif­i­cally described in the course of regis­tra­tion, they are deci­sive for the user’s consent. For the rest, our newslet­ters contain infor­ma­tion about our services and us.
Double-Opt-In and logging: The regis­tra­tion for our newslet­ter takes place in a so-called double-opt-in process. I.e. after regis­tra­tion you will receive an email asking you to confirm your regis­tra­tion. This confir­ma­tion is neces­sary so that no one can log in with foreign e-mail addresses. Subscrip­tions to the newslet­ter are logged in order to be able to prove the subscrip­tion process in accor­dance with legal require­ments. This includes the stor­age of the login and confir­ma­tion time, as well as the IP address. Like­wise, changes to your data stored with the ship­ping service provider are logged.

Regis­tra­tion data: To sign up for the newslet­ter, it is suffi­cient to provide your e-mail address. Option­ally, we ask you to enter a name for the purpose of personal address in the newsletter.

Germany: The dispatch of the newslet­ter and the asso­ci­ated perfor­mance measure­ment is based on the consent of the recip­i­ents in accor­dance with. Art. 6 par. 1 lit. a, Art. 7 DSGVO in conjunc­tion with § 7 para. 2 No. 3 UWG or on the basis of the statu­tory permis­sion pursuant to § 2 No. 3 UWG. § 7 para. 3 UWG.

The logging of the regis­tra­tion process takes place on the basis of our legit­i­mate inter­ests in accor­dance with. Art. 6 par. 1 lit. f GDPR. We are inter­ested in using a user-friendly and secure newslet­ter system that serves our busi­ness inter­ests, meets the expec­ta­tions of users, and allows us to prove consent.

Cancellation/Revocation - You can cancel the receipt of our newslet­ter at any time, i.e. revoke your consents. You will find a link to cancel the newslet­ter at the end of each newslet­ter. We may store unsub­scribed email addresses for up to three years based on our legit­i­mate inter­ests before delet­ing them to prove consent was previ­ously given. The process­ing of this data is limited to the purpose of a possi­ble defense against claims. An indi­vid­ual dele­tion request is possi­ble at any time, provided that the former exis­tence of consent is confirmed at the same time.

Reach measure­ment with Matomo

Within the scope of the reach analy­sis of Matomo, the follow­ing data is processed on the basis of our legit­i­mate inter­ests (i.e. inter­est in the analy­sis, opti­miza­tion and economic oper­a­tion of our online offer within the mean­ing of Art. 6 para. 1 lit. f. DSGVO), the follow­ing data is processed: the browser type and version you use, the oper­at­ing system you use, your coun­try of origin, the date and time of the server request, the number of visits, the time you spend on the website and the exter­nal links you click. The IP address of the users is anonymized before it is stored.

Matomo uses cook­ies, which are stored on the user’s computer and which enable an analy­sis of the use of our online offer by the user. Thereby, pseu­do­ny­mous usage profiles of the users can be created from the processed data. The cook­ies have a stor­age period of one week. The infor­ma­tion gener­ated by the cookie about your use of this website is stored only on our server and is not shared with third parties.

Users can object to the anonymized data collec­tion by the Matomo program at any time with effect for the future by click­ing on the link below. In this case, a so-called opt-out cookie is stored in your browser, which means that Matomo no longer collects any session data. However, if users delete their cook­ies, this has the conse­quence that the opt-out cookie is also deleted and must there­fore be reac­ti­vated by the users.

The logs with the users’ data are deleted after 6 months at the latest.

Inte­gra­tion of third-party services and content

Within our online offer, we use content or service offers of third-party providers on the basis of our legit­i­mate inter­ests (i.e. inter­est in the analy­sis, opti­miza­tion and economic oper­a­tion of our online offer within the mean­ing of Art. 6 para. 1 lit. f. DSGVO) content or service offers from third-party providers in order to inte­grate their content and services, such as videos or fonts (here­inafter uniformly referred to as “content”).

This always assumes that the third-party providers of this content are aware of the IP address of the user, since with­out the IP address they would not be able to send the content to their browser. The IP address is thus required for the display of this content. We endeavor to use only such content whose respec­tive providers use the IP address only for the deliv­ery of the content. Third-party providers may also use so-called pixel tags (invis­i­ble graph­ics, also known as “web beacons”) for statis­ti­cal or market­ing purposes. The “pixel tags” can be used to eval­u­ate infor­ma­tion such as visi­tor traf­fic on the pages of this website. The pseu­do­ny­mous infor­ma­tion may also be stored in cook­ies on the user’s device and may contain, among other things, tech­ni­cal infor­ma­tion about the browser and oper­at­ing system, refer­ring websites, time of visit and other infor­ma­tion about the use of our online offer, as well as be combined with such infor­ma­tion from other sources.

Vimeo

We can embed the videos of the plat­form “Vimeo” of the provider Vimeo Inc, Atten­tion: Legal Depart­ment, 555 West 18th Street New York, New York 10011, USA. Privacy policy: https://​vimeo​.com/​p​r​i​v​acy. We point out that Vimeo may use Google Analyt­ics and refer to the privacy policy(https://​www​.google​.com/​p​o​l​i​c​i​e​s​/​p​r​i​v​acy) as well as opt-out options for Google Analyt­ics(http://​tools​.google​.com/​d​l​p​a​g​e​/​g​a​o​p​t​o​u​t​?​h​l​=de) or Google’s settings for data use for market­ing purposes(https://​adsset​tings​.google​.com/.).

Youtube

We inte­grate the videos of the plat­form “YouTube” of the provider Google LLC, 1600 Amphithe­atre Park­way, Moun­tain View, CA 94043, USA. Privacy Policy: https://​www​.google​.com/​p​o​l​i​c​i​e​s​/​p​r​i​v​a​cy/, opt-out: https://​adsset​tings​.google​.com/​a​u​t​h​e​n​t​i​c​a​ted.

Google Fonts

We inte­grate the fonts (“Google Fonts”) of the provider Google LLC, 1600 Amphithe­atre Park­way, Moun­tain View, CA 94043, USA. Privacy Policy: https://​www​.google​.com/​p​o​l​i​c​i​e​s​/​p​r​i​v​a​cy/, opt-out: https://​adsset​tings​.google​.com/​a​u​t​h​e​n​t​i​c​a​ted.

Open­StreetMap

We incor­po­rate the maps of the service “Open­StreetMap”(https://​www​.open​streetmap​.de), which are offered on the basis of the Open Data Commons Open Data­base License (ODbL) by the Open­StreetMap Foun­da­tion (OSMF). Privacy Policy: https://​wiki​.open​streetmap​.org/​w​i​k​i​/​P​r​i​v​a​c​y​_​P​o​l​icy ---). To our knowl­edge, user data is used by Open­StreetMap solely for the purposes of display­ing the map func­tions and caching the selected settings. This data may include, in partic­u­lar, IP addresses and loca­tion data of users, which, however, will not be collected with­out their consent (usually executed within the settings of their mobile devices). The data may be processed in the USA. For more infor­ma­tion, please see the Open­StreetMap privacy policy: https://​wiki​.open​streetmap​.org/​w​i​k​i​/​P​r​i​v​a​c​y​_​P​o​l​icy.

Twit­ter

Within our online offer, func­tions and contents of the service Twit­ter, offered by Twit­ter Inc., 1355 Market Street, Suite 900, San Fran­cisco, CA 94103, USA, may be inte­grated. This may include, for exam­ple, content such as images, videos or texts and buttons with which users can announce their liking of the content, the authors of the content or subscribe to our posts. If the users are members of the Twit­ter plat­form, Twit­ter can assign the call of the above-mentioned content and func­tions to the profiles of the users there. Twit­ter is certi­fied under the Privacy Shield agree­ment and thus offers a guar­an­tee of compli­ance with Euro­pean data protec­tion law (https://​www​.priva​cyshield​.gov/​p​a​r​t​i​c​i​p​a​n​t​?​i​d​=​a​2​z​t​0​0​0​0​0​0​0​T​O​R​z​A​A​O​&​s​t​a​t​u​s​=​A​c​t​ive). Privacy Policy: https://​twit​ter​.com/​d​e​/​p​r​i​v​acy, opt-out: https://​twit​ter​.com/​p​e​r​s​o​n​a​l​i​z​a​t​ion.

Created with Daten​schutz​-Gener​a​tor​.de by RA Dr. Thomas Schwenke