Data protection
Data protection information in accordance with the General Data Protection Regulation (GDPR)
1. Responsible body
Biodiversity Bridge e.V.
Ilsensteinweg 26a
14129 Berlin
Email: info@biodiversity-bridge.org
Register court: Charlottenburg district court
Register of Associations: VR 41378 B
Contact: Dr. Tobias Raffel, CEO
Email: tobias.raffel@biodiversity-bridge.org
2. Data protection at a glance
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. Detailed information can be found below. What data do we collect from you and why? Data is automatically collected by our IT systems as soon as you visit this site. This is primarily technical data (e.g. internet browser, operating system or time of page view). Some of this data is important to ensure that the website is provided without errors. Other data can be used to analyze your user behavior. What rights do you have with regard to your data? You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the rectification of this data and, under certain conditions, the restriction of processing or erasure. You also have the right to data portability. You also have the right to object to the processing of your personal data at any time. In all cases, please contact us informally (see contact above or legal notice).
3. General information
The protection of personal data is an important concern of Biodiversity Bridge e.V. and our legal obligation. We handle your data with care and only pass it on to third parties with the appropriate legal basis or with your consent. It is also important for us to point out that, as a non-profit organization, we do not use your data for commercial advertising or other commercial activities. Unless otherwise stated below, no personal data is collected, processed or used when you use our website. If personal data is collected via the website, this is done on a voluntary basis and in accordance with the principle of data minimization. We would like to point out that data transmission over the Internet may be subject to security vulnerabilities. Together with contractors, we implement technical and organizational security measures to protect your data. Our measures are continuously improved in line with technical developments. Our privacy policy will be updated as necessary and adapted to new requirements. We therefore recommend that you read this privacy policy again regularly.
4. Lawfulness of data processing
We process personal data on the basis of Art. 6 para. 1 lit. a GDPR if the data subject has given their consent to this processing for one or more specific purposes. In particular in the case of membership in our association, Art. 6 para. 1 lit. b GDPR also forms the legal basis, as the processing of contact persons' data is necessary for admission as a member, the fulfillment of the legal obligation, the pursuit of the association's objectives and the support of members. We keep an association archive - partly electronically and partly as a paper file (see the explanations below on “Duration of processing or duration of data storage”). The storage is based on Art. 6 para. 1 lit. f GDPR on a legitimate interest in an association chronicle and proof of our activities.
5. Processing purposes of data use
Informational use of our website: If you visit our website purely for informational purposes, without registering for special purposes or providing us with information in any other way, we only collect the personal data that your web browser automatically transmits to our provider's server. The so-called access logs of the web servers record which pages have been accessed and when. This data is technically necessary to enable you to view our website and to ensure stability and security. The following data is recorded: IP, directory protection user, date, time, pages accessed, logs, status code, data volume, referrer (website from which you accessed our website), user agent, host name accessed. The IP addresses are stored anonymously. The last three digits are removed for this purpose. IPv6 addresses are also anonymized. Information on the directory protection user used is anonymized after one day. The aforementioned data is not stored together with other personal data about you. When using this general data and information, no conclusions are drawn about the data subject.
6. Recipients or categories of recipients of the data
By default, data is processed on a day-to-day basis by a small number of authorized employees of the association's head office. The Executive Board also has access as a body of the association. The log files that your web browser automatically transmits when you visit the site are briefly stored on the server of our internet provider. We have integrated YouTube videos on our website. These are embedded in the so-called extended data protection mode. This means that YouTube does not store any information about visitors to our website unless they watch the video. When you watch a video, device-related information, log data and possibly other data are automatically transmitted to Google Inc (Mountainview, CA/USA). We have no influence over this. Further information can be found in the Google/YouTube privacy policy at http://www.youtube.com/t/privacy_at_youtube
7. Duration of processing or duration of data storage
Biodiversity Bridge e.V. will not process and store your data for longer than is necessary for the purposes stated in this Privacy Policy. IP addresses are only stored for the duration of the visit to our website and are deleted when the session has ended. Error logs, which record incorrect page views, are deleted after seven days. In addition to the error messages, these contain the accessing IP address and, depending on the error, the website accessed. We keep - partly electronically, partly as a paper file - an association archive. The storage is based on a legitimate interest in a club chronicle and proof of our activities. The archive may also contain personal data that is no longer required for active use (e.g. archived lists of participants, names of contact persons in connection with past activities, archived applications for competitions). Access to this data is restricted to the association's board of directors and a small group of authorized employees of the office.
8. Right of access, right to rectification, right to restriction of processing and right to erasure, right to data portability
You have a right of access free of charge, a right to rectification and, under certain conditions, a right to restriction of processing and erasure of your personal data. You also have the right to data portability. Please contact us at any time if you would like to find out what personal data we store about you. Please also contact us if you wish to have data corrected, deleted or transferred or if you wish to exercise your right to restrict processing (see point 1 above for the responsible body).
9. Right of revocation
You have the right to withdraw your consent to data processing at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
10. Right to object
You have the right to object to the processing of your personal data at any time. Please contact us for this purpose (see point 1 above for the responsible body).
11. Right to lodge a complaint
You have the right to lodge a complaint with the supervisory authority.