Privacy Policy
§ 1 General Provisions
We process your personal data (e.g., title, first and last name, address, email address, phone number) only in accordance with the provisions of German data protection law and the data protection laws of the European Union (EU). The following provisions inform you not only about the purposes of processing, recipients, legal bases, and retention periods, but also about your rights and the controller responsible for your data processing. This Privacy Policy applies only to our websites. If you are redirected to other websites via links on our pages, please review the privacy policies of those sites to learn how they handle your data.
§ 2 Contacting Us
(1) Purpose of Processing
We process the personal data you provide to us via email, contact form, etc., in order to respond to and handle your inquiries. You are not required to provide us with your personal data. However, if you do not provide your email address, we will not be able to respond to you via email.
(2) Legal Basis
a) If you have given us your explicit consent to process your data, Article 6(1)(a) of the GDPR serves as the legal basis for such processing.
b) If we process your data to take steps prior to entering into a contract, the legal basis is Article 6(1)(b) of the GDPR.
c) In all other cases (in particular when using a contact form), the legal basis is Article 6(1)(f) of the GDPR.
RIGHT TO OBJECT: You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data that is based on Article 6(1)(f) of the GDPR and is not for the purpose of direct marketing.
In the case of direct marketing, however, you may object to the processing at any time without providing a reason.
(3) Legitimate Interest
Our legitimate interest in processing your data is to communicate with you quickly and respond to your inquiries cost-effectively. If you provide us with your address, we reserve the right to use it for direct mail advertising. You can protect your privacy by limiting the information you share (e.g., by using a pseudonym).
(4) Recipient Categories
Web hosting providers, shipping service providers for direct marketing
(5) Retention Period
Your data will be deleted once it is clear from the circumstances that your inquiry or the matter in question has been fully resolved.
However, if a contract is concluded, we will retain the data required under commercial and tax law for the periods specified by law, which is generally ten years (see § 257 HGB, § 147 AO).
(6) Right of Withdrawal
If your personal data is processed based on your consent, you have the right to withdraw your consent at any time.
§ 3 Information About Cookies
(1) Purpose of Processing
This website uses cookies that are technically necessary. These are small text files that are not permanently stored on your computer system by your web browser and are used solely to ensure the website functions properly. Other cookies are permanent and recognize your browser on your next visit to enhance the website’s user-friendliness.
(2) Legal Basis
The legal basis for the processing is Article 6(1)(f) of the GDPR.
(3) Legitimate Interest
Our legitimate interest is to ensure the functionality and user-friendliness of our website. The user data collected through technically necessary cookies and the long-term cookies described here is not used to create user profiles. This safeguards your interest in data protection.
(4) Retention Period
Technically necessary cookies are usually deleted when you close your browser. Persistent cookies have varying lifespans, ranging from a few minutes to several years.
(5) Right to Object
If you do not wish to have these cookies stored, please disable them in your web browser. However, this may result in limited functionality on our website. You can also delete persistent cookies at any time through your browser.
§ 4 Your Rights as a Data Subject
If we process your personal data, you are a data subject within the meaning of the GDPR, and you have the following rights with respect to us as the data controller:
1. Right to Access
Under Article 15 of the GDPR, you may request information about your personal data that we process.
2. Right to Rectification
If the information concerning you is not (or is no longer) accurate, you may request a correction pursuant to Article 16 of the GDPR. If your data is incomplete, you may request that it be completed.
3. Right to Erasure
You may request the erasure of your personal data in accordance with the provisions of Article 17 of the GDPR.
4. Right to Restriction of Processing
Under the provisions of Article 18 of the GDPR, you have the right to request that the processing of your personal data be restricted.
5. Right to Data Portability
Under Article 20 of the GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transferred to another controller.
6. Right to Withdraw Consent Under Data Protection Law
Pursuant to Article 7(3) of the GDPR, you have the right to withdraw your consent to the processing of your personal data at any time. This does not affect the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
7. Right to File a Complaint with a Supervisory Authority
If you believe that the processing of your personal data violates the GDPR, you have the right under Article 77 of the GDPR to lodge a complaint with a supervisory authority (in particular in the Member State where you reside, where you work, or where the alleged infringement occurred).
Please also note your right to object under Article 21 of the GDPR:
a) General: A substantiated objection is required
If the processing of your personal data is carried out
– to protect our overriding legitimate interest (legal basis under Art. 6(1)(f) of the GDPR) or
– in the public interest (legal basis under Article 6(1)(e) of the GDPR),
You have the right to object to the processing at any time on grounds relating to your particular situation; this also applies to profiling based on the provisions of the GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
b) Special Case: Direct Marketing—A Simple Objection Is Sufficient
If your personal data is processed for the purpose of direct marketing, you have the right to object to such processing at any time and without providing a reason; this also applies to profiling, to the extent that it is related to such direct marketing.
If you object to the processing of your personal data for direct marketing purposes, your personal data will no longer be processed for those purposes.
Data Controller:
Association of Contergan Victims in North Rhine-Westphalia e.V.
Maternusstr. 9
50996 Cologne
Phone: 0152–343 425 04
herterich@contergan-nrw.eu
Contact information for our Data Protection Officer:
Udo Herterich
Maternusstr. 9
50996 Cologne
Phone: 0152–343 425 04
herterich@contergan-nrw.eu
