The operational data protection officer of MIND Foundation gGmbH is reachable under the aforementioned address, to Mr. Maximilian von Heyden, or under firstname.lastname@example.org.
COLLECTION AND STORAGE OF PERSONAL DATA AS WELL AS THE NATURE AND PURPOSE OF THEIR USE
a) When visiting the website
When you visit our website mind-foundation.org the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information will be collected without your intervention and stored until automated deletion:
– IP address of the requesting computer,
– Date and time of access,
– Name and URL of the retrieved file,
– Website from which access is made (referrer URL),
– Used browser and, if applicable, the operating system of your computer as well as the name of your access provider.
The data mentioned are processed by us for the following purposes:
– Ensuring a smooth connection of the website,
– Ensuring comfortable use of our website,
– Evaluation of system security and stability as well for further administrative purposes.
The legal basis for data processing is Art. 6 (1) p. 1 GDPR. Our legitimate interest follows from the data collection purposes listed above. In no case we use the collected data for the purpose of drawing conclusions about you.
b) When registering for our newsletter
If you have expressly consented, we will use your e-mail address to send you our newsletter on a regular basis. For the receipt of the newsletter the indication of an e-mail address is sufficient. The use of the mail service provider ActiveCampaign, carrying out the statistical surveys and analyzes as well as logging the registration process, are based on our legitimate interests in accordance with. Art. 6 (1) GDPR. We are interested in using a user-friendly and secure newsletter system that serves both our business interests and the expectations of our users.
The deregistration is possible at any time, for example via a link at the end of each newsletter. Alternatively, you can send your unsubscribe request at any time to Info@mind-foundation.org via e-mail.
Mail order company Active Campaign
Active Campaign is a service of ActiveCampaign, LLC 1 North Dearborn Street, 5th floor Chicago, IL 60602
Your data stored in the newsletter registration (e-mail address, name, if necessary, IP address, date and time of your registration) will be transferred to a server of ActiveCampaign, LLC in the USA and there under the “Safe Harbor Agreement “.
Subscribing to this newsletter and consenting to the storage of your data may be terminated or revoked at any time in the future. Details can be found in the confirmation e-mail as well as in each individual newsletter.
c) By using our contact form
For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. It is necessary to provide a valid e-mail address so that we know who the request came from and to answer it.
Further information can be provided voluntarily. The data processing for the purpose of contacting us takes place in accordance with Art. 6 (1) sentence 1 GDPR on the basis of your voluntarily granted consent.
The personal data collected by us for the use of the contact form will be deleted after the request has been made.
e) Event registration (customer and contract data)
We collect, process and use personal data only insofar as they are necessary for the establishment, content or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 (1) GDPR, which allows the processing of data for the performance of a contract or precontractual measures. We collect, process and use personal data on the use of our website (usage data) only insofar as this is necessary in order to enable or charge the user for the use of the service.
The collected customer data will be deleted after termination of the business relationship. Legal retention periods remain unaffected.
f) Data transmission
We only transfer personal data to third parties if this is necessary in the course of the contract, for example to the companies entrusted with the delivery of the goods or the bank responsible for processing the payment. A further transmission of the data does not take place or only if you have expressly consented to the transmission. A transfer of your data to third parties without explicit consent, such as for advertising purposes, does not occur.
The basis for data processing is Article 6 (1) GDPR, which permits the processing of data for the purpose of fulfilling a contract or precontractual measures.
DISCLOSURE OF DATA
A transfer of your personal data to third parties for purposes other than those listed below does not take place.
We only share your personal information with third parties if:
-You have given your express consent in accordance with Art. 6 (1) sentence 1 of the GDPR,
-The disclosure pursuant to Art. 6 (1) sentence 1 GDPR is required to assert, exercise or defend legal claims and there is no reason to assume that you have a predominantly legitimate interest in not disclosing your data,
-In the event that there is a legal obligation to disclose pursuant to Art. 6 (1) sentence 1 GDPR,
-As well as this is legally permissible and, according to Art. 6 (1) sentence 1 GDPR, is required for the settlement of contractual relationships with you.
In the cookie information is stored, each resulting in connection with the specific terminal used. However, this does not mean that we are immediately aware of your identity.
In addition, to improve usability, we also use temporary cookies that are stored on your device for a specified period of time. If you visit our site again to take advantage of our services, it will automatically recognize that you have already been with us and what inputs and settings you have made, so you do not have to re-enter them.
The data processed by cookies are required for the purposes stated above to safeguard our legitimate interests as well as third parties pursuant to Art. 6 (1) sentence 1 GDPR.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a note always appears before a new cookie is created. However, disabling cookies completely may mean that you can not use all features of our website.
a) Tracking tools
The tracking measures listed below and used by us are based on Art. 6 para. 1 sentence 1 lit. f GDPR. With the tracking measures to be used, we want to ensure a needs-based design and the continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and evaluate it for the purpose of optimizing our offer for you. These interests are to be regarded as justified within the meaning of the aforementioned provision.
The respective data processing purposes and data categories can be found in the corresponding tracking tools.
I) Google Analytics
For the purpose of customizing and continually optimizing our pages, we use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.com/intl/en/about/) (1600 Amphitheater Parkway, Mountain View, CA 94043, USA, hereafter “Google”). In this context, pseudonymised usage profiles are created and cookies (see point 4) are used. The information generated by the cookie about your use of this website such as
– Browser type / version,
– used operating system,
– Referrer URL (the previously visited page),
– Host name of the accessing computer (IP address),
– Time of server request,
are transmitted to a Google server in the US and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for the purposes of market research and tailor-made website design.
This information may also be transferred to third parties if required by law or if third parties process this data in the order. Under no circumstances will your IP address be merged with any other data provided by Google. The IP addresses are anonymized, so that an assignment is not possible (IP masking).
You can prevent the installation of cookies by setting the browser software accordingly; however, we point out that in this case not all features of this website may be fully exploited.
You can also prevent Google Analytics tracking by clicking this link: insert slider button
An opt-out cookie will be set that will prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
For more information about privacy related to Google Analytics, see the Google Analytics Help Center (https://support.google.com/analytics/answer/6004245?hl=en).
II) newsletter tracking
Our newsletters contain so-called “web bugs”, which allow us to detect if and when an email was opened and which links in the email were followed by the personalized recipient.
These data are stored by us, so that we can optimally align our newsletters to the wishes and interests of our subscribers. Accordingly, the data thus collected are used to send personalized newsletters to the respective recipient.
We ask you for your consent in this regard as follows:
“I agree that my data and my usage behavior will be electronically saved by the newsletter tracking in order to send me an individualized newsletter. With the revocation of the consent to receive the newsletter, the consent to the aforementioned tracking will also be revoked. ”
By revoking the consent to receive the newsletter, the consent to the aforementioned tracking is revoked.
III) Facebook pixels, custom audiences and Facebook conversion
Due to legitimate interests in analysis, optimization and economic operation of our online offer and for these purposes, the so-called “Facebook pixel” of the social network Facebook, by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025 , USA, or, if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (“Facebook”) is used on our website. Facebook is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active. With the help of the Facebook pixel, it is on the one hand possible for Facebook to determine the visitors to our online offer as a target group for the display of advertisements (so-called “Facebook ads”). Accordingly, we use the Facebook pixel to display the Facebook ads we have been sent only to those Facebook users who have shown an interest in our online offer or who have certain features (e.g. interests in specific topics or products that are determined by the websites visited), which we transmit to Facebook (so-called “Custom Audiences”). With the help of the Facebook pixel, we also want to make sure that our Facebook ads are in line with the potential interest of users and are not annoying. With the help of the Facebook pixel we can also understand the effectiveness of the Facebook ads for statistical and market research purposes, in which we see whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”). The processing of the data by Facebook is part of Facebook’s data usage policy. Accordingly, general notes on how to display Facebook Ads, in Facebook’s Data Usage Policy: https://www.facebook.com/policy.php. For specific information and details about the Facebook Pixel and how it works, visit the help section of Facebook: https://www.facebook.com/business/help/651294705016616. You may object to the capture by the Facebook Pixel and use of your data to display Facebook Ads. To set which types of ads you see within Facebook, you can go to the page set up by Facebook and follow the instructions for the usage-based advertising settings: https://www.facebook.com/settings?tab=ads.
On our website we offer u.a. Payment via PayPal. Provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).
If you choose to pay via PayPal, the payment details you enter will be sent to PayPal.
The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing to fulfill a contract). You have the option to revoke your consent to data processing at any time. Revocation does not affect the effectiveness of historical data processing operations.
On our website we offer u.a. Payment by “Klarna”. Provider of this payment service is the Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter “Sofort GmbH”).
With the help of the procedure “Sofortüberweisung” we receive a payment confirmation from Sofort GmbH in real time and can immediately start to fulfill our obligations.
If you have decided to use the “Sofortüberweisung” method of payment, please forward the PIN and a valid TAN to Sofort GmbH, with which you can log in to your online banking account. Sofort GmbH automatically checks your account balance after logging in and transfers the money to us using the TAN you have submitted. Afterwards it will send us a transaction confirmation without delay. After logging in, your sales, the credit line of the credit line and the existence of other accounts as well as their stocks are also checked automatically.
In addition to the PIN and the TAN, the payment data entered by you as well as personal data will be transmitted to Sofort GmbH. The personal data are first name, surname, address, telephone number (s), e-mail address, IP address and possibly further data required for payment processing. The transmission of this data is necessary to establish your identity beyond doubt and to prevent fraud.
The transmission of your data to Sofort GmbH is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing to fulfill a contract). You have the option to revoke your consent to data processing at any time. Revocation does not affect the effectiveness of historical data processing operations.
Details on payment with Sofortüberweisung can be found on the following links: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.
PLUGINS AND TOOLS
Our website uses plugins from the Google-powered YouTube page. Site operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When you visit one of our YouTube plug-in-enabled sites, you will be connected to the servers of YouTube. It tells the YouTube server which of our pages you’ve visited.
If you’re logged into your YouTube account, YouTube will allow you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
The use of YouTube is in the interest of an attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
This site uses so-called web fonts, provided by Google, for the uniform representation of fonts. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.
To do this, the browser you use must connect to Google’s servers. As a result, Google learns that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
If your browser does not support web fonts, a default font will be used by your computer.
This site uses the mapping service Google Maps via an API. Provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
To use the features of Google Maps, it is necessary to save your IP address. This information is usually transmitted to and stored on a Google server in the United States. The provider of this site has no influence on this data transfer.
The use of Google Maps is in the interest of an attractive presentation of our online offers and an easy findability of the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.
You have the right:
– In accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can provide information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, the right to rectification, deletion, limitation of processing or opposition, the existence of a The right to complain, the source of their data, if not collected from us, and the existence of automated decision-making including profiling and, where appropriate, meaningful information about their details;
– Pursuant to Art. 16 GDPR, to demand the correction of incorrect or completed personal data stored by us immediately;
– In accordance with Art. 17 GDPR, to demand the deletion of your personal data stored by us, except where the processing is for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims is required;
– In accordance with Art. 18 GDPR to demand the restriction of the processing of your personal data, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you reject their deletion and we no longer need the data, but you this to assert, exercise or defense of legal claims or you have objected to processing in accordance with Art. 21 GDPR;
– Pursuant to Art. 20 GDPR to obtain your personal data provided to us in a structured, common and machine-readable format or to request the transfer to another person responsible;
– Pursuant to Art. 7 para. 3 GDPR your once granted consent to revoke against us at any time. As a result, we are not allowed to continue the data processing based on this consent for the future and
– According to Art. 77 GDPR to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.
RIGHT TO OBJECT
If your personal data are based on legitimate interests in accordance with Art. 6 para. 1 sentence 1 GDPR are processed, you have the right to file an objection against the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct mail. In the latter case, you have a general right of objection, which is implemented by us without specifying any particular situation.