Data protection in accordance with Article 13 GDPR

Name and address of the responsible body

The responsible body in accordance with the General Data Protection Regulations (GDPR) is:

KO – Kein Opfer e.V.

Anglerstr. 10
80339 Munich
Germany

E-Mail: info@ko-ev.de

General information on data processing

Lawfulness of processing personal data

In accordance with Article 13 GDPR, we are informing you of the lawfulness of our data processing. Unless the lawful basis is specified in the privacy policy, the following shall apply:
The lawful basis for obtaining consent is Art. 6 (1)(a) in conjunction with Art. 7 GDPR. The lawful basis for processing in order to perform our services, meet contractual obligations and reply to enquiries is Art. 6 (1)(b) GDPR. The lawful basis for processing in order to meet our legal obligations is Art. 6 (1)(c) GDPR. Art. 6 (1)(f) GDPR is the lawful basis for processing if processing is necessary in order to safeguard the legitimate interests of our organisation or those of a third party, except where such interests are overridden by the interests and fundamental rights and freedoms of the data subject. Art. 6 (1)(d) GDPR shall apply as the lawful basis if processing is necessary to protect the vital interests of the data subject or of another natural person.

Data deletion and retention period

We abide by the principles of data minimisation in accordance with Art. 5 (1)(c) GDPR and storage limitation in accordance with Art. 5 (1)(e) GDPR. We store your personal data only for as long as it is needed to achieve the purposes for which it was collected or for the statutory retention period. The data will be deleted as soon as possible after these retention periods have expired or if the respective purpose no longer applies.

Information on data transfer to third countries

Our website includes tools from companies based in third countries (notably the USA). If these tools are active, your personal data may be transferred to the servers of those companies. The level of data protection in third countries does not normally match the level afforded by the EU GDPR. There is therefore a risk that your data will be passed on to the authorities of those countries. We have no influence on those activities.

External links

This website may contain links to third-party websites or to other websites for which we are not responsible. If you intend to follow a link to one of the websites outside of our responsibility, you should bear in mind that such websites have their own privacy policies. We assume no responsibility or liability for these third-party websites or their privacy policies. Before using such websites, always check whether you agree to their privacy policies.

External links are either shown in a different colour from the rest of the text or are underlined. You will see the address if you hover your cursor over the link. Your personal data will not be transferred to the link destination until you click on the external link. The operator of the other website will receive your IP address, the time when you clicked on the link, the page on which you clicked on the link and further information which will be specified in the privacy policy of the respective provider.

Please also note that individual links may lead to data being transferred outside the European Economic Area. This could give foreign authorities access to your data. You may not be entitled to any legal remedies against such access to your data. If you do not want your personal data to be transferred to link destinations or exposed to access by foreign authorities, please do not click on any links.

Rights of data subjects

You can assert various rights as a data subject as defined in the GDPR. The rights of data subjects arising from the GDPR are the right of access (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21), the right to lodge a complaint with a supervisory authority and the right to data portability (Article 20).

Right of withdrawal:

Some data processing activities are only possible with your explicit consent. You can withdraw your consent at any time. However, this has no impact on the lawfulness of data processing up to withdrawal of consent.

Right to object:

If processing is based on Art. 6 (1)(e) or (f) GDPR, you as the data subject may object to processing of your personal data at any time on grounds relating to your particular situation. This right is also available to you in the case of profiling as defined in Art. 4 (4) GDPR, based on those provisions. If you object to processing, we shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. Here, too, we will stop processing your personal data as soon as you object.

Right to lodge a complaint with a supervisory authority:

If you believe that processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, specifically in the member state of your place of residence, your place of work or the place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

Right to data portability:

If your data is processed automatically on the basis of consent or fulfilment of a contract, you have the right to receive this data in a structured, commonly used and machine-readable format. You also have the right to request that your data be transferred and made available to another controller, insofar as this is technically feasible.

Right to information, rectification and erasure:

You have the right to obtain information about your processed personal data, specifically the purpose of the processing, the categories, the recipients and the retention period. If you have any questions about this or any other aspect of personal data processing you can of course get in touch with us. Contact details are given in the imprint.

Right to restriction of processing:

You have the right to have processing of your personal data restricted. One of the following must apply:

• You contest the accuracy of the personal data. You have the right to demand restriction of processing for the period during which the accuracy of the data is verified.
• If processing is unlawful, you can apply for restricted use of the data as an alternative to erasure.
• If we no longer need your personal data for the purposes of processing, but you need the data for the establishment, exercise or defence of legal claims, you can apply for restriction of processing as an alternative to erasure.
• If you object to processing in accordance with Art. 21 (1) GDPR, checks will be carried out to ascertain whether our interests override yours. Until these checks have been completed you have the right to request restriction of processing.

Restriction of processing has the effect that, with the exception of storage, your data may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a member state.

Website hosting

Our website is hosted by:

Alfahosting GmbH
Ankerstrasse 3b, 06108 Halle (Saale), Germany

When you access our website, we automatically collect and store information in server log files. Your browser automatically transmits this information to our server or to the server of our hosting company.

This information comprises the following:

• IP address of the website visitor’s device
• Device used
• Host name of the accessing computer
• Visitor’s operating system
• Browser type and version
• Name of the file retrieved
• Time of server request
• Volume of data
• Information as to whether data retrieval was successful

This data is not merged with other data sources.

The lawful basis for processing this data is Art. 6 (1)(f) GDPR. Our legitimate interest is the error-free presentation and optimisation of this website.

Instead of running this website on its own server, we can run it on the server of an external service provider (hosting company). In this case, the personal data collected on this website will be stored on the servers of the hosting company. In addition to the above-mentioned data, it may include contact requests, contact data, names, website access data, meta and communication data, contract data and other data generated via a website.

Another lawful basis is for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6 (1)(b) GDPR). If we have commissioned a hosting company, there will be a contract for order processing with this service provider.

Use of cookies

Our website uses “cookies”. Cookies are small text files that a web server (a server that provides web content) stores on your device in order to identify that device. They are stored on your device either temporarily for the duration of a session (session cookies) and then deleted at the end of your visit to the website, or permanently (permanent cookies) until you delete them yourself or your web browser automatically deletes them.

Cookies from third-party companies may also be stored on your device when you go on our site (third-party requests). This enables us (we as the operator of this website and you as a visitor) to use certain services from third parties installed on this website. Examples include cookies for processing payments and cookies for playing videos.

Cookies have a wide range of uses. They can improve the functionality of a website, control shopping basket functions, increase the security and convenience of website visits and analyse visitor flows and visitor behaviour. In view of their functions, cookies serve data protection purposes. They are necessary for operating the website and for providing certain functions (e.g. the shopping basket function) or help to optimise the website (e.g. cookies for measuring visitor behaviour). Their use then falls under the provisions of Art. 6 (1)(f) GDPR. As the website operator, we have a legitimate interest in storing cookies to ensure smooth, optimised delivery of our services. In all other cases, cookies are stored only with your express consent (Art. 6 (1)(a) GDPR).

If cookies are used by third-party companies or for analysis purposes, we will inform you about this separately as part of this privacy policy. Your necessary consent will be requested and can be withdrawn at any time.

Use of external services

We use external services on our website. External services are services from third parties that are installed on our website. They are used for a variety of reasons, such as embedding videos or enhancing the safety of the website. When these services are used, personal data is passed to the relevant providers of these external services. If we do not have a legitimate interest in using these services, we will obtain your consent in advance of their use when you visit our website. Your consent can be withdrawn at any time (Art. 6 (1)(a) GDPR).

Analytics

We process the personal data of website visitors in order to analyse user behaviour. By analysing the data collected, we are able to compile information about how the individual components of our website are being used. This will then enable us to make our website more user-friendly. For example, the analysis tools may help us to create user profiles for targeting advertising based on interests, to identify our website visitors the next time they visit the website, to measure their click/scroll behaviour and their downloads, to create heat maps, to detect page views, to measure dwell time or bounce rate, and to track where visitors to the website come from (city, country, previous website visited). With analysis tools we can improve our market research and marketing activities.

The data is processed on the lawful basis of consent (Article 6 (1)(a) GDPR). As a visitor to the website, you have agreed to the processing of your personal data with your voluntary, explicit and prior consent. Without separate consent, your personal data will not be processed in the manner described above, on condition that there is no other lawful basis in accordance with Art. 6 (1) GDPR, on which we base the processing. That also applies if you withdraw your consent. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

Sentry

We use the Sentry service on our website. The service provider is FUNCTIONAL SOFTWARE, INC., 45 Fremont Street, 8th Floor, CA 94105, San Francisco, USA. Use of the service may result in data transmission to a third country (USA).

Use of the service may result in data transmission to a third country (USA).

For more information see the provider’s privacy policy at https://sentry.io/privacy/.

Consent Management

To comply with data protection requirements we use a consent management tool on our website. This tool enables us to obtain the necessary consents for using cookies and external services. Consents are saved.

Processing is necessary to meet a legal obligation imposed on the controller (operator of the website). Art. 6 (1)(c) GDPR is therefore the lawful basis for processing.

Complianz GDPR/CCPA Cookie Consent

We use the Complianz GDPR/CCPA Cookie Consent service on our website. The service provider is Complianz B.V., Kalmarweg 14-5,9723 JG Groningen, Netherlands.

Because this service is hosted locally on the web server, no data is transferred to third parties.

Forms and surveys

We use tools on our website that allow us to create surveys and forms and integrate them on our website. We use forms to post questions and create information on any topic and integrate it on the website. The forms and surveys can be completed or answered by visitors to the website. When you visit the website and complete or reply to surveys or forms your personal data will be processed. This specifically includes your IP address in addition to information that you enter either in a form or in answers to a survey. This personal data is processed by the website operator and the provider of the survey or form tool (our data processor) and stored on their servers.
The data is processed on the lawful basis of consent (Article 6 (1)(a) GDPR). As a visitor to the website, you have agreed to the processing of your personal data with your voluntary, explicit and prior consent. Without separate consent, your personal data will not be processed in the manner described above, on condition that there is no other lawful basis in accordance with Art. 6 (1) GDPR, on which we base the processing. That also applies if you withdraw your consent. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

The data is processed on the lawful basis of consent (Article 6 (1)(a) GDPR). As a visitor to the website, you have agreed to the processing of your personal data with your voluntary, explicit and prior consent. Without separate consent, your personal data will not be processed in the manner described above, on condition that there is no other lawful basis in accordance with Art. 6 (1) GDPR, on which we base the processing. That also applies if you withdraw your consent. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

twingle

We use the twingle service on our website. The service is provided by twingle GmbH, Prinzenallee 74, 13357 Berlin, Germany.

For more information see the provider’s privacy policy at https://www.twingle.de/datenschutz/.

Interface software

Business processes are more cost-effective, faster and less error-prone when they are automated via interfaces with the aid of software. These interfaces can be efficiently integrated in business processes via the website itself or via social networks. We use interface software on our website to link different applications and to securely transfer personal data from one application to another.
The data is processed on the lawful basis of consent (Article 6 (1)(a) GDPR). As a visitor to the website, you have agreed to the processing of your personal data with your voluntary, explicit and prior consent. Without separate consent, your personal data will not be processed in the manner described above, on condition that there is no other lawful basis in accordance with Art. 6 (1) GDPR, on which we base the processing. That also applies if you withdraw your consent. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

The data is processed on the lawful basis of consent (Article 6 (1)(a) GDPR). As a visitor to the website, you have agreed to the processing of your personal data with your voluntary, explicit and prior consent. Without separate consent, your personal data will not be processed in the manner described above, on condition that there is no other lawful basis in accordance with Art. 6 (1) GDPR, on which we base the processing. That also applies if you withdraw your consent. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

Google APIs

We use the Google APIs service on our website. The provider of the service is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
Use of the service may result in data transmission to a third country (USA).
For more information see the provider’s privacy policy at https://policies.google.com/privacy.

Use of the service may result in data transmission to a third country (USA).

For more information see the provider’s privacy policy at https://policies.google.com/privacy.

Video/music service

Audio and video files are integrated on our website. They are retrieved from our provider’s server, referred to as the audio or video platform. When you play any of the audio or video files your device connects to the audio or video platform and sends personal data to it. This data specifically includes your IP address, any location data and information about your browser and device.
The data is processed on the lawful basis of consent (Article 6 (1)(a) GDPR). As a visitor to the website, you have agreed to the processing of your personal data with your voluntary, explicit and prior consent. Without separate consent, your personal data will not be processed in the manner described above, on condition that there is no other lawful basis in accordance with Art. 6 (1) GDPR, on which we base the processing. That also applies if you withdraw your consent. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

The data is processed on the lawful basis of consent (Article 6 (1)(a) GDPR). As a visitor to the website, you have agreed to the processing of your personal data with your voluntary, explicit and prior consent. Without separate consent, your personal data will not be processed in the manner described above, on condition that there is no other lawful basis in accordance with Art. 6 (1) GDPR, on which we base the processing. That also applies if you withdraw your consent. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

Spotify

We use the Spotify service on our website. The provider of the service is Spotify, Regeringsgatan 19, Stockholm, 111 53, Sweden.

Use of the service may result in data transmission to a third country (USA).

Use of the service may result in data transmission to a third country (USA).
For more information see the provider’s privacy policy at https://www.spotify.com/at/legal/privacy-policy/.

YouTube

We use the YouTube service on our website. The provider of the service is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Use of the service may result in data transmission to a third country (USA).

For more information see the provider’s privacy policy at https://policies.google.com/privacy.

Webfonts

This site uses web fonts to ensure that fonts are displayed uniformly. The web fonts are made available by an external provider and loaded by your browser when you visit the website. The provider of the web fonts is notified that our website has been accessed from your IP address, as your browser establishes a direct connection to the provider of the web fonts.

The data is processed on the lawful basis of consent (Article 6 (1)(a) GDPR). As a visitor to the website, you have agreed to the processing of your personal data with your voluntary, explicit and prior consent. Without separate consent, your personal data will not be processed in the manner described above, on condition that there is no other lawful basis in accordance with Art. 6 (1) GDPR, on which we base the processing. That also applies if you withdraw your consent. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

Google Fonts

We use the Google Fonts service on our website. The provider of the service is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Use of the service may result in data transmission to a third country (USA).

For more information see the provider’s privacy policy at https://policies.google.com/privacy.

Contact form

Our website contains a contact form that you can use to send us a message. To use this form we need your contact details.

The lawful basis for this is processing for the purpose of contract performance and pre-contractual measures in accordance with Art. 6 (1)(b) GDPR. There may also be a legitimate interest for maintaining business relationships or responding to your query for other reasons.

The lawful basis for processing your data in this case is Art. 6 (1)(f) GDPR.

Your data will be erased once we have conclusively answered your query and there are no other retention obligations to prevent erasure.

Phone contact or email contact

We have provided a phone number and email address on our website in accordance with statutory requirements. The data transferred by these means will be automatically stored by us so we can process relevant enquiries or contact the person making the enquiry. We will not pass on this data to third parties without your permission.

If contact by phone or via our e-mail address is for contractual or pre-contractual purposes, the lawful basis for processing the personal data is Art. 6 (1)(b) GDPR. For all other forms of contact made by you, the lawful basis for processing personal data is our legitimate interest in accordance with Art. 6 (1)(f) GDPR.

Handling of applicant data

You can send in an application to us (e.g. by post, an online application form or by email). The personal data we receive in this way will be stored and processed by us for the purposes of processing your application.

The lawful basis for processing is Art. 6 (1)(b) GDPR and Art. 6 (1)(a) GDPR, provided you have provided your consent. Insofar as German law is applicable, § 26 BDSG (Federal Data Protection Law) in particular is used as the lawful basis for processing. You can withdraw your consent at any time. The lawfulness of the processing carried out up to the time of withdrawal remains unaffected.

If the application results in employment the data collected for processing this employment relationship will be stored on the basis of Art. 6 (1)(b) GDPR. If your application does not result in employment your data will be stored on the basis of Art. 6 (1)(f) GDPR for the duration of legal claims, in particular in respect of discrimination in the application process. This is necessary to defend against any complaints or allegations. If consent has been given, the data will be stored for an extended period of time on the basis of Art. 6 (1)(a) GDPR. You can withdraw your consent at any time. The lawfulness of the processing carried out up to the time of withdrawal remains unaffected.

If an application does not result in employment the applicant can be placed in our applicant pool. All details contained in the application will be stored so that the applicant can be contacted in the event of a suitable post becoming available.

The data will be stored in the applicant pool only after consent has been given on the basis of Art. 6 (1)(a) GDPR. This consent can be withdrawn at any time, whereupon the relevant data will be erased unless there are lawful reasons for retention. The data will be erased automatically no later than two years after consent has been given. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

Applicant pool

If an application does not result in employment the applicant can be placed in our applicant pool. All details contained in the application will be stored so that the applicant can be contacted in the event of a suitable post becoming available.

The data will be stored in the applicant pool only after consent has been given on the basis of Art. 6 (1)(a) GDPR. This consent can be withdrawn at any time, whereupon the relevant data will be erased unless there are lawful reasons for retention. The data will be erased automatically no later than two years after consent has been given. The lawfulness of the processing carried out up to the withdrawal remains unaffected.