Donate
Donate

Privacy Policy

Dear visitors to our website,

We are delighted that you have visited our website. To ensure that you feel safe and comfortable while browsing, we would like to inform you about how we handle your data and which types of data we may collect, in full compliance with the provisions of the German Federal Data Protection Act (BDSG).

Data protection of the Association

The registered association DERTOUR Foundation e.V. collects personal data of its members and donors for the association’s work. The collection and processing is conducted exclusively in compliance with the legal requirements, in particular the General Data Protection Regulation (GDPR). 
For more information, please see our privacy policy below. 

Duty to provide information when collecting personal data pursuant to Art. 13 GDPR

Name and contact details of the controller and, if applicable, their representative

Controller within the meaning of Article 13 (1) lit. a) GDPR is:

DERTOUR Foundation e.V. 
Emil-von-Behring-Straße 6 
60439 Frankfurt am Main 
Germany 

Authorised representative of the Management Board: 

Sören Hartmann (Chairman), Leif Vase Larsen (Deputy Chairman),  Sebastian Spratte (Treasurer) 

Purposes and legal basis of processing

DERTOUR Foundation e.V. processes the following personal data: 

  • For the purpose of managing the associate members, the surname, first name, address, date of birth, telephone, mail address and entry/exit date are processed. The legal basis for this is Art. 6 (1) lit b) etc. GDPR.
  • The surname, first name, email address and address are processed for the purpose of managing donations and contributions. The legal basis for this is Art. 6 (1) lit b) etc. GDPR.
  • The surname, first name and address/email address are processed for the purpose of communication with donors and members. The legal basis for this is Art. 6 (1) lit b) etc. GDPR. 
  • For the purpose of external presentation, photos of the association’s work are published, on which individual persons may be depicted. The legal basis for this is Art. 6 (1) lit b) etc. GDPR.

Recipients of the personal data

As part of donor and member management, personal data is hosted by DERTOUR Deutschland GmbH.

The protection of your privacy is very important to us. We have therefore designed our website in such a way that it can be used anonymously. We use the information we receive and store during your visit to our website exclusively for internal purposes and to improve the design of the website. We only store the IP address transmitted by your web browser for a certain period of time in order to detect, limit and eliminate malfunctions or errors (e.g. attacks on our servers). After this period has expired, we delete or anonymise the IP address. We use the IP address strictly for the above-mentioned security purposes. Further information on the processing of IP addresses can be found in the following section ‘Usage data’.

Usage data/log files

When you visit our website, our web server temporarily stores so-called usage data in a log file for statistical purposes in order to improve the quality of our website. This data record consists of:

  • the page from which the file was requested,
  • the name of the file,
  • the date and time of the request,
  • the amount of data transferred,
  • the access status,
  • a description of the type of web browser used,
  • the IP address of the requesting computer (see above, anonymised after the above-mentioned period).

We use this information to enable access to our website, to monitor and administer our systems, and to improve the design of our web pages. The stored data is anonymised in accordance with applicable legal requirements. This prevents the creation of personal user profiles. No data about individuals or their individual behaviour is collected.

Third country transfer

In order to realize your donation, your IP address must be transmitted to the subcontractor MaxMind, Inc., 51 Pleasant Street # 1020, Malden MA 02148 in the USA. For the country in which the aforementioned subcontractor is based and processes the personal data, there is currently no adequacy decision by the EU Commission as defined in Art. 45 (1), (3) GDPR. This means that the EU Commission has not yet positively determined that the country-specific level of data protection in the USA corresponds to that of the European Union on the basis of the GDPR. The GDPR requires so-called “appropriate safeguards” for a data transfer to a third country or to international organizations, Art. 46 (2), (3) GDPR. These can be, for example, internal company data protection regulations or standard data protection contracts, that have been approved by a supervisory authority. However, such are not currently used by the subcontractor. Therefore, there is a risk that the state (U.S.) authorities may direct requests for information against this company as a data recipient and thus the state (U.S.) authorities may see your personal data. In principle, this also corresponds to the European legal regulations, e.g. for the purpose of danger prevention. However, the permissibility threshold for such data processing is higher in the EU than in the country of the data recipient. In this context, we would like to point out that there are practically no effective legal remedies available against this. The transmission of your IP address to the subcontractor MaxMind, Inc. is therefore only legitimized by your consent pursuant to Art. 49 (1) lit. a GDPR. 

Storage period

  • The data required for membership administration (see under point 2) will be deleted four years following termination of the association membership. 
  • The data necessary for donor management (see under point 2) will be deleted after ten years. 
  • In the event of revocation of consent, the data will be immediately deleted, provided that there are no other legal obligations to the contrary.

Data subjects’ rights

    • Members of the association or donors have a right to information (Art. 15 GDPR) as well as a right to correction (Art. 16 GDPR) or deletion (Art. 17 GDPR) or to restriction of processing (Art. 18 GDPR) or a right to object to processing (Art. 21 GDPR) as well as a right to data portability (Art. 20 GDPR). 
    • Members of the Association and donors have the right to revoke any declaration of consent granted under data protection law at any time. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation. 
    • The association member is also entitled to lodge a complaint with a data protection supervisory authority.

Obligation to provide the data

The association exclusively collects data required for administrative purposes. If these are not provided, membership and the proper issuance of donation receipts are not possible. 

General Data Protection Information

Website analysis and tracking

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as ‘Google’), depending on your consent decision. Google Analytics uses cookies that are stored on your computer and enable an analysis of your use of this website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

We would like to point out that on this website, Google Analytics has been extended by the code ‘gat._anonymizeIp();’ in order to ensure anonymous collection of IP addresses (so-called IP masking). If IP anonymisation is activated on our websites, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information to evaluate your use of our websites, to compile reports on website activity for us and to provide us with other services relating to website activity and internet usage.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Google will only transfer this data to third parties on the basis of legal regulations or within the scope of order data processing. Under no circumstances will Google merge your data with other data collected by Google.

We only use this cookie–based service on our portal after obtaining your prior consent, based on the legal basis of Section 25 (2) No. 2 TTDSG in conjunction with Art. 6 (1) (a) GDPR (consent for the subsequent data processing). You can give your consent in our consent management system either on your first visit to the portal via the consent banner or at any time in the cookie settings, which can be accessed via a link at the bottom of each page of the portal, and you can adjust or revoke your consent with effect for the future. Your choice will be documented for your browser, thereby fulfilling the data protection requirements of the documentation obligation.

You can also prevent Google from collecting and processing data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. Please note that if you use this option, it will not be possible to document your decision and your settings may conflict with your decisions in the consent management system.

Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/.

Embedding third-party content

Integration of Google Maps

The map service Google Maps (MyMaps) is linked to our website. The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Your IP address is not stored.

We use Google Maps on our website to display the location of a partner turtle and to show you its exact location. For more information on how your data is handled, please refer to Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

Integration of YouTube

Our website uses links to the YouTube website operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. Such integration takes place exclusively in YouTube’s extended data protection mode (more information at: https://support.google.com/youtube/answer/171780?hl=de), in which no cookies are used. As long as there is no interaction with the video, no data is collected by the service. If a user clicks on an embedded YouTube video, data is collected and further data processing for analysis purposes is carried out by Google LLC and its affiliated companies. The extended data protection mode prevents YouTube from connecting to Google’s DoubleClick advertising network. When videos are played, the service collects browser and device settings, IP address, browser ID, date, time and referral URL of the request to play the video, name of the video and playback duration, as well as system activity and crash reports for the purposes of providing, maintaining and improving the services and measuring performance. If you have a Google account and are logged in to it when using a video, the usage data may be merged with your profile data.

This depends on the privacy settings you have made in your account. If you have a YouTube account and are logged in, YouTube will be able to assign your user behaviour to your personal profile. You can prevent this by logging out of your YouTube account. The information is usually transferred to Google servers in the USA and stored there. As the website operator, we have no influence on these processes. Google’s privacy policy and terms of use can be found here: https://policies.google.com/privacy?hl=de&gl=de. We use YouTube on our website to present our project videos in an appealing way. This data processing may also take place outside the EU or the EEA. As a suitable guarantee for the legality of these data transfers, we have concluded EU standard contracts in accordance with Art. 46 (2) lit. c GDPR with the processor, among other things.

The service will only be used after you have given your prior consent. You can give your consent via our consent management system either on your first visit to the portal via the consent banner or via the layer that is displayed above a YouTube integration without consent. In addition, you can give your consent at any time via the cookie settings, which can be accessed via a link at the bottom of each page of the portal, and adjust or revoke it with effect for the future. Your choice will be documented for your browser, thereby fulfilling the data protection requirements of the documentation obligation.

Our website contains links to our partners‘ websites, where you can find further information and services relating to foundations. When you use these links, you will be redirected to the respective partner website without any user data being transferred from our website to that of the partner. After using the link, you will find yourself on the portal of the respective partner, which is the responsibility of the partner.

Data security

To protect your data from unauthorised access, we use an encryption procedure. You can recognise this process through the closed lock which appears in the status bar of your browser, and the address line which begins with “https://”.

Further information on data protection when contacting us for business purposes or our use of social media is available on the DERTOUR Group website.