DE EN
Donate

Privacy Policy

1. Why this state­ment?

Below, we provide inform­a­tion on the collec­tion of personal data when you use our website. Personal data refers to any data that can be linked to you person­ally, such as your name, address, email address and user beha­viour. We are obliged to do so in accord­ance with Articles 12 and 13 of the EU General Data Protec­tion Regu­la­tion (Regu­la­tion (EU) 2016/679, or GDPR for short).

2. Who is the data controller?

The data controller pursuant to Article 4(7) of the GDPR and the provider of this website is the asso­ci­ation KLIMA° vor acht e.V.

You can contact the data protec­tion officer at KLIMA° vor acht using the following details:

KLIMA° vor acht c/o Norman Schu­mann
Stein­ring 49
44789 Bochum
Tele­phone: +49 (0)178 4086086
Email address: datenschutz@klimavoracht.de

3. What personal data we store and why we store it

3.1. Server logs (What data is collected and stored?)

When you use this website purely for inform­a­tion purposes, we do not collect any personal data, with the excep­tion of the data trans­mitted by your browser to enable you to visit and use the site. ‘Inform­a­tional use only’ means that you do not subscribe to a news­letter or register for an event, nor do you other­wise provide us with any inform­a­tion (for example, via a contact form). Your browser trans­mits the following data:

  • IP address
  • Date and time of the request
  • Time zone differ­ence from Green­wich Mean Time (GMT)
  • Content of the request (specific web page)
  • Access status/HTTP status code
  • Amount of data trans­ferred in bytes
  • Website from which the request origin­ates (link)
  • Browser used
  • Oper­ating system and its user inter­face
  • Language and version of the browser soft­ware

The legal basis for data processing is Article 6(1), first sentence, point (f) of the GDPR. Our legit­imate interest arises from the afore­men­tioned purposes of data collec­tion and the preven­tion of cyber-attacks. Under no circum­stances do we use the data collected for the purpose of drawing conclu­sions about your iden­tity. We delete this data after three months.

3.2. YouTube videos

We use the YouTube.com plat­form to upload our own videos and make them publicly avail­able. YouTube is a service provided by a third party not affil­i­ated with us, namely YouTube LLC.

Some web pages on our website contain links to the YouTube service. As a general rule, we are not respons­ible for the content of websites to which links are provided. However, should you follow a link to YouTube, please note that YouTube stores its users’ data (for example, personal inform­a­tion and IP addresses) in accord­ance with its own data usage policies and uses this data for commer­cial purposes.

We also embed videos stored on YouTube directly into some of our web pages. When this is done, sections of the YouTube website are displayed within parts of a browser window. However, the YouTube videos are only accessed by clicking on them separ­ately. This tech­nique is also known as ‘framing’. When you visit a page or sub-page on our website where YouTube videos are embedded in this way, a connec­tion is estab­lished with the YouTube servers and the content is displayed on the webpage via a message sent to your browser.

YouTube content is embedded only in ‘enhanced privacy mode’. YouTube provides this mode itself and thereby ensures that YouTube does not initially store any cookies on your device. However, when you access the relevant pages, your IP address and the addi­tional data mentioned in section 3.1 are trans­mitted, thereby revealing, in partic­ular, which of our web pages you have visited. However, this inform­a­tion cannot be linked to you unless you have logged in to YouTube or another Google service before visiting the page, or are perman­ently logged in.

As soon as you start playing an embedded video by clicking on it, YouTube’s enhanced privacy mode ensures that only cookies that do not contain any person­ally iden­ti­fi­able data are stored on your device, unless you are currently logged in to a Google service. These cookies can be prevented by adjusting your browser settings or using browser exten­sions. As YouTube is a service provided by Google Ireland Limited (Ireland) or Google LLC (USA), accessing embedded videos may result in data being trans­ferred to third coun­tries, in partic­ular the USA. This transfer takes place on the basis of the European Commission’s adequacy decision regarding the EU-US Data Privacy Frame­work (Article 45 of the GDPR).

3.3. Matomo

Our website uses Matomo (formerly Piwik), an open-source programme for the stat­ist­ical analysis of visitor traffic. Matomo uses cookies that are stored on your computer and enable an anonymised analysis of your use of the website. It is not possible to trace this back to a specific indi­vidual, as your IP address is anonymised imme­di­ately after processing and before storage. The analysis takes place on our own servers; no data is passed on to third parties. The legal basis for this processing is your consent (Article 6(1)(a) of the GDPR); the analytics cookies are only set if you give your consent via our cookie notice. You may with­draw your consent at any time with effect for the future.

3.4. Integ­ra­tion of Twingle

On some sub-pages, dona­tion forms provided by Twingle (Twingle GmbH, Prin­zenallee 74, 13357 Berlin) are made avail­able. Your data entered in the dona­tion form is passed on to Twingle so that your dona­tion can be processed in accord­ance with Article 6(1)(b) of the GDPR. The data is processed by Twingle exclus­ively in ISO 27001-certi­fied data centres in Germany using 100% green elec­tri­city and is trans­mitted via a secure connec­tion using state-of-the-art data encryp­tion. The following payment methods are avail­able on the dona­tion form: SEPA direct debit, credit card (Amer­ican Express, Master­card, VISA), PayPal, Google Pay and manual bank transfer. Payment processing is handled by the payment service provider you have selected; the neces­sary payment details are sent directly to them via an encrypted connec­tion. Neither Twingle nor we store your payment details. The privacy policies of the respective providers also apply: PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxem­bourg), Google Ireland Limited (Dublin) for Google Pay, and Amer­ican Express, Master­card and VISA for card payments.

You can find the latest inform­a­tion on the security proced­ures used and data processing here: https://www.twingle.de/datenschutz/.

3.5. News­letter and email distri­bu­tion via Brevo

We use Brevo Germany GmbH (Brevo GmbH; formerly Send­in­blue GmbH; Köpenicker Straße 126, 10179 Berlin, Germany) to send our news­letter and noti­fic­a­tions (for example, double opt-in emails). Only your email address is trans­mitted; no other personal data, such as your name or tele­phone number, is collected or passed on to Brevo. Your email address is processed on Brevo’s servers within the European Union.
Regis­tra­tion takes place via a double opt-in process: After you have registered, we will send you a confirm­a­tion email containing an activ­a­tion link. Only once you have clicked on this link will your email address be added to our news­letter mailing list. The legal basis for this is your consent (Article 6(1)(a) of the GDPR).
We have entered into a data processing agree­ment with Brevo in accord­ance with Article 28 of the GDPR. You may with­draw your consent at any time with future effect – for example, via the unsub­scribe link at the end of every news­letter email or by sending a message to datenschutz@klimavoracht.de. Further inform­a­tion on Brevo’s data processing can be found here: https://www.brevo.com/de/legal/privacypolicy/.

4. What auto­mated decision-making and/or profiling do we carry out using user data?

The data is used solely for general stat­istics (number of visitors, time of visit, data volume used, etc.), and is there­fore not used for profiling or tracking.

5. Your rights

You have the following rights in rela­tion to your personal data held by us:

  • Right of access to the data being processed (Art. 15 GDPR)
  • Right to recti­fic­a­tion of inac­curate data (Art. 16 GDPR)
  • Right to erasure (Art. 17 of the GDPR)
  • Right to restric­tion of processing (Art. 18 GDPR)
  • Right to data port­ab­ility (Art. 20 GDPR)
  • Right to object to processing (Article 21 of the GDPR)
  • Right to with­draw consent with effect for the future (Article 7(3) of the GDPR)

You also have the right to lodge a complaint with a data protec­tion super­visory authority (Article 77 of the GDPR). The competent authority for us is the State Commis­sioner for Data Protec­tion and Freedom of Inform­a­tion in North Rhine-West­phalia (https://www.ldi.nrw.de
).

Do you have any further ques­tions about our privacy policy? Please feel free to email us with any ques­tions or sugges­tions!