Information on data protection
for the use of the website https://www.gynformation.de including the handling of interested parties data.
Status: March 2020
1. Controller
Controller for the data processing on this website within the meaning of Art. 4 No. 7 GDPR is:
Gynformation c / o
femrep eV
Schäferstrasse 26
20355 Hamburg
kontakt@gynformation.de
- hereinafter referred to as Gynformation -
2. Subject of data processing
The subject of data processing is personal data. According to Art. 4 No. 1 GDPR, this is all information relating to an identified or identifiable person. This includes, for example, information such as name, postal address, e-mail address or telephone number, but possibly also usage data such as the IP address or content data such as inquiries from interested parties.
3. Scope and purpose of data collection and storage
In the following we explain the scope of data collection, storage and use (hereinafter "data processing", used in the sense of Art. 4 No. 2 GDPR) and the purpose of the respective data processing within the scope of the website.
4. Processing of personal data in the context of website use
In principle, this website can be used without providing personal data. The IP address is an exception. We need it for a short period of time (please read section 4.1).
4.1. IP addresses
In computer networks, an IP address represents an address via which the web server and / or individual end devices can be reached. Without an IP address, the web server and the end devices cannot communicate - and thus cannot display anything. The web server on which the website is hosted is addressed with a data request - from you, as you want to use the website. In order to deliver the data, the web server must know the IP address. Therefore, the web server has to process your IP address at the moment of the data request. To do this, the web server receives information about which website or file was accessed, which browser and which operating system was used. Normally, this data is completely stored in the so-called web server log files for a long time. Gynformation saves the log files with the IP addresses of the users for a period of 7 days. This storage period is required for the general security analysis of the systems. A further evaluation of this data does not take place. The legal basis for this data processing is regularly Art. 6 Para. 1 b) GDPR, as we need your IP address in order to be able to transmit the website and the information contained therein to you at all.
4.2. Cookies
We use cookies on our website. Cookies are small text files that are stored on your computer by websites. Gynformation only uses cookies that are absolutely necessary for the technical presentation of our website. We only use session cookies to correctly forward a server request and to identify multiple requests using a session ID. These cookies do not collect any personal data. You can prevent the installation of cookies by preventing them with a corresponding setting in the browser software (to be found under "Settings" in most browsers); However, it should be pointed out that in this case you may not be able to use all functions of our website to their full extent.
5. Data processing on contact
If you contact us by email, phone or letter, we will process your data. The legal basis for this data processing is regularly Art. 6 Para. 1 lit. b) GDPR, since we would not be able to get back to you and your concerns if we did not receive any personal contact details from you.
If you would like to contact us, you must leave at least the following personal data or transmit it to us:
- Contact name
- Your request
- Depending on the communication channel:
- Your e-mail address
- Your phone number
- Your postal address
We use this data exclusively to process your request and then to be able to get back to you about this request.
6. Data processing of prospect data
If you show interest in our services with your message or other contact, we will process your data as interested parties data. This means that we process the contact details and the reason for your request beyond the direct contact. This processing takes place on the basis of Art. 6 I f) GDPR. We have a legitimate interest in maintaining and intensifying contact with interested parties. This is only possible if we do not delete the data. A conflicting interest on your part is not evident in this case, as you yourself provided us with the data as part of an expression of interest.
7. Purpose limitation in use of data, recipient of data, transfer of data
We comply with the principle of the use of data for a specific purpose. We collect, save and use all of the aforementioned data only for the purposes already mentioned.
The IT systems of Gynformation are partly managed by external IT service providers. In this context, these IT service providers become recipients of data to the extent necessary for support.
If necessary, the recipients are obliged to use order processing contracts. Upon request, you can receive a list of specific recipients at any time. For reasons of our own IT and data security, however, we would like to publicly name the recipients of the data at this point.
A transfer of personal data to third parties outside of the scope described here does not take place without express consent. The transmission to state institutions and authorities entitled to receive information only takes place within the framework of the statutory information obligations or if we are obliged to provide information by a court decision.
8. Duration of processing
8.1. Deletion periods in the context of website use
Your IP address is only stored in the web server log files for a period of 7 days after the connection has been established. The expiry date of the cookies is limited to the time of the website visit, so that the data is never stored any longer. You can also delete the cookies at any time (under "Settings" in the browser).
8.2. Deletion periods in the context of contact inquiries via e-mail, telephone or post
The data that you transmit to us as part of a contact request will be deleted by us immediately after your request has been dealt with. This does not apply if your request and the associated data are classified as prospect data.
8.3. Deletion deadlines for interested parties data
Interested parties data will be deleted two years after a last contact point.
A contact point means, for example, the interaction with a member of the collective via social media, e-mail or telephone, or participation in an event. If retention periods according to § 257 HGB have to be met, the data will be kept for up to 6 years and then deleted. In this case, the use of the data will be limited to the fulfillment of the retention obligation after the two years have elapsed in accordance with Art. 18 GDPR and will be deleted after the above deadlines have expired.
If the deletion of individual data and data records is only possible with a disproportionate effort in relation to the extraction and separation with regard to different deletion periods, this data will be limited uniformly after the issue has been dealt with and deleted 6 years after the last contact point.
The period begins at the end of the calendar year in which the respective date was recorded.
9. Rights of data subjects (including rights of information, revocation, objection and deletion rights)
You have the right to request information about the data we process about you.
You can object to the processing of your data at any time, provided that the requirements of Art. 21 GDPR are met, and you can revoke any consent you may have given to the processing of the data at any time. If the consent to data processing is revoked or the use of the data is contradicted, this does not affect the legality of the data processing up to the time of revocation or objection. You can also have the data processed by us corrected, restricted or deleted at any time. We expressly point out that there may be legal obligations - such as retention obligations - to continue saving data. In this case, the data can only be restricted in use. This means that the data are processed exclusively for the purpose of complying with legal obligations and are otherwise not used. In addition, you also have the right to data portability according to Art. 20 GDPR and the right to lodge a complaint with a supervisory authority within the meaning of Art. 77 GDPR.
If you have any questions, please do not hesitate to contact us at kontakt [at] gynformation.de .
10. Data protection declaration for our social media pages
In the following, we would like to inform you about how your data is handled in accordance with Article 13 of the General Data Protection Regulation (GDPR).
10.1 Controller
We, the Kollektiv für gynäkologische Selbstbestimmung, operate the following social media sites:
https://www.facebook.com/gynformation/
https://www.instagram.com/gynformation/
https://twitter.com/gynformation
You can find our contact details in our legal notice .
In addition to us, there is also the operator of the social media platform itself. In this respect, this party is also common controller who carries out data processing, over which we have only limited influence. At the points where we can influence and parameterize the data processing, we work towards the data protection-compliant handling by the operator of the social media platform within the scope of the possibilities available to us. In many places, however, we cannot influence the data processing by the operator of the social media platform and we also do not know exactly which data they are processing.
10.2 Data processing by us
The data you enter on our social media pages, such as B. Comments, videos, pictures, likes, public messages etc. are published by the social media platform and are never used or processed by us for other purposes. We only reserve the right to delete content if we consider it necessary. If necessary, we will share your content on our site if this is a function of the social media platform and communicate with you via the social media platform. The legal basis is Art. 6 Para. 1 S. 1 lit. The data processing takes place in the interest of our public relations and communication.
If you would like to object to certain data processing over which we have an influence, please contact us. If you want to exercise your right to object to the platform, you must contact them directly. If you send us a request on the social media platform, depending on the required response, we may also refer you to other, secure communication channels that guarantee confidentiality. You always have the option of sending confidential inquiries to our contact address.
As already mentioned, we pay attention to the places where the provider of the social media platform gives us the opportunity to make our social media pages as data protection compliant as possible. With regard to statistics that the provider of the social media platform makes available to us, we have only limited influence and cannot switch them off. However, we make sure that no additional optional statistics are made available to us.
10.3 Data processing by the operator of the social media platform
The operators of the social media platforms use web tracking methods. The web tracking can also take place regardless of whether you are logged in or registered with the social media platform. As already shown, we can unfortunately hardly influence the web tracking methods of the social media platform. We cannot switch this off, for example
Please be aware of this: We cannot rule out that the provider of the social media platform will use your profile and behavioral data, e.g. to evaluate your habits, personal relationships, preferences, etc. In this respect, we have no influence on the processing of your data by the provider of the social media platform.
For more information on data processing by the provider of the social media platform, you can find further options for objection in the provider's privacy policy:
Facebook