Datenschutz | FEA e.V.

We are very pleased about your interest in our company. Data protection is of particular importance to the management of Future.Empowerment.Africa e.V.. The use of the internet pages of Future.Empowerment.Africa e.V. is generally possible without any indication of personal data. However, if a data subject wants to use special services of our company through our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.

The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject, always takes place in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to Future.Empowerment.Africa e.V.. By means of this privacy policy, our company would like to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. Furthermore, data subjects are informed, by means of this privacy policy, of the rights to which they are entitled.

As the controller, Future.Empowerment.Africa e.V. has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. For this reason, every data subject is free to transfer personal data to us via alternative means, such as by telephone.

1. Definitions

The privacy policy of Future.Empowerment.Africa e.V. is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our privacy policy should be legible and understandable for the general public, as well as our customers and business partners. To ensure this, we would like to explain the terminology used in advance.

In this privacy policy, we use, among other things, the following terms:

a) Personal data

Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

b) Data subject

Data subject is any identified or identifiable natural person whose personal data is processed by the controller.

c) Processing

Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure or destruction.

d) Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of limiting their processing in the future.

e) Profiling

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

f) Pseudonymization

Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.

g) Controller

Controller refers to the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data. If the purposes and means of this processing are determined by Union law or the law of the Member States, the controller or the specific criteria for their appointment may be provided for by Union law or the law of the Member States.

h) Processor

Processor refers to a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.

i) Recipient

Recipient refers to a natural or legal person, public authority, agency, or other body to whom personal data is disclosed, whether or not it is a third party. However, authorities that may receive personal data in the framework of a particular inquiry in accordance with Union law or the law of the Member States shall not be considered recipients.

j) Third party

Third party refers to a natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor, and the persons who, under the direct authority of the controller or processor, are authorized to process personal data.

k) Consent

Consent refers to any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

2. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation (GDPR), as well as other data protection laws applicable in the European Union member states and other provisions related to data protection, is:

Future.Empowerment.Africa e.V.

Krefelder Wall 28-30

50670 Cologne

Germany

Tel.: +491782067141

Email: team@fea-ev.com

Website: www.fea-ev.com

3. Cookies

The website of Future.Empowerment.Africa e.V. uses cookies. Cookies are text files that are stored on a computer system via an internet browser.

Many websites and servers use cookies. Many cookies contain a unique identifier called a cookie ID. A cookie ID is a string of characters that can be used to identify the internet browser associated with a specific user. This enables visited websites and servers to distinguish the individual browser of the data subject from other internet browsers that contain different cookies. A specific internet browser can be recognized and identified by its unique cookie ID.

By using cookies, Future.Empowerment.Africa e.V. can provide users of this website with more user-friendly services that would not be possible without the cookie setting.

Cookies allow us to optimize the information and offers on our website in the user's favor. As mentioned above, cookies enable us to recognize users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, a user of a website that uses cookies does not have to enter their access data each time they visit the website because this is taken over by the website and the cookie stored on the user's computer system. Another example is a cookie used in an online shop to remember the items that a customer has placed in the virtual shopping cart.

The data subject can prevent the setting of cookies by our website at any time by adjusting the settings of the internet browser used and thereby permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time using an internet browser or other software programs. This is possible in all common internet browsers. If the data subject disables the setting of cookies in the internet browser used, not all functions of our website may be fully usable.

4. Collection of general data and information

The website of Future.Empowerment.Africa e.V. collects a range of general data and information with each access to the website by an affected person or an automated system. These general data and information are stored in the server's log files. The following data may be collected: (1) types and versions of browsers used, (2) operating system used by the accessing system, (3) website from which an accessing system reaches our website (referrer), (4) subpages accessed through an accessing system on our website, (5) date and time of access to the website, (6) internet protocol (IP) address, (7) internet service provider of the accessing system, and (8) other similar data and information used for the purpose of defending against threats to our information technology systems.

Future.Empowerment.Africa e.V. does not draw any conclusions about the affected person when using this general data and information. Instead, this information is needed to (1) deliver the contents of our website correctly, (2) optimize the contents of our website and its advertising, (3) ensure the permanent functionality of our information technology systems and the technology of our website, and (4) provide law enforcement authorities with the necessary information for prosecution in the event of a cyber attack. These anonymously collected data and information are evaluated statistically by Future.Empowerment.Africa e.V. to increase data protection and data security within our company, ultimately ensuring an optimal level of protection for the personal data we process. The anonymous data from the server log files is stored separately from any personal data provided by an affected person.

5. Subscription to our newsletter

On the website of Future.Empowerment.Africa e.V., users are given the opportunity to subscribe to our company's newsletter. The personal data transmitted to the data controller for processing when ordering the newsletter is determined by the input mask used for this purpose.

Future.Empowerment.Africa e.V. regularly informs its customers and business partners about company offers through newsletters. The newsletter of our company can only be received by the affected person if (1) the affected person has a valid email address and (2) the affected person registers for newsletter delivery. To comply with legal requirements, a confirmation email is sent in the double opt-in procedure to the email address initially registered for newsletter delivery. This confirmation email serves to verify whether the owner of the email address, as the affected person, has authorized the receipt of the newsletter.

During newsletter registration, we also store the IP address assigned by the internet service provider (ISP) to the computer system used by the affected person at the time of registration, as well as the date and time of registration. The collection of this data is necessary to trace any potential misuse of the email address of an affected person at a later time and serves as legal protection for the data controller.

The personal data collected as part of a newsletter subscription is used exclusively for sending our newsletter. Subscribers to the newsletter may also be informed by email if this is necessary for the operation of the newsletter service or registration, such as in the case of changes to the newsletter offering or technical circumstances. The personal data collected as part of the newsletter service will not be passed on to third parties. The subscription to our newsletter can be canceled by the affected person at any time. The consent to the storage of personal data given by the affected person for the purpose of newsletter delivery can be revoked at any time. A corresponding link for revoking consent is included in each newsletter. Additionally, it is possible to unsubscribe from the newsletter directly on the website of the data controller or to inform the data controller of the decision through other means.

6. Newsletter Tracking

The newsletters of Future.Empowerment.Africa e.V. contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such emails that are sent in HTML format to enable log file recording and analysis. This allows for a statistical evaluation of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, Future.Empowerment.Africa e.V. can determine if and when an email was opened by an individual and which links contained in the email were clicked on by the individual.

Personal data collected through these tracking pixels in the newsletters is stored and analyzed by the data controller to optimize the newsletter delivery and customize the content of future newsletters to better suit the interests of the individual. This personal data is not shared with third parties. Individuals have the right to revoke their separate consent given through the double opt-in process at any time. After revocation, the personal data will be deleted by the data controller. Unsubscribing from the newsletter is automatically interpreted as a revocation by Future.Empowerment.Africa e.V.

7. Contact Option via the Website

The website of Future.Empowerment.Africa e.V. contains information that enables quick electronic contact with our company as well as direct communication with us, including a general email address. If an individual contacts the data controller via email or through a contact form, the personal data transmitted by the individual will be automatically stored. Such personal data voluntarily provided by an individual to the data controller will be stored for the purpose of processing the request or contacting the individual. This personal data will not be disclosed to third parties.

8. Comment Function on the Blog on the Website

Future.Empowerment.Africa e.V. offers users the opportunity to leave individual comments on specific blog posts on the data controller's website. A blog is a publicly accessible portal, typically hosted on a website, where one or more individuals, known as bloggers or web bloggers, can post articles or express their thoughts in blog posts. Typically, these blog posts can be commented on by third parties.

If an individual leaves a comment on the blog published on this website, the comments left by the individual, along with information about the time of the comment and the chosen username (pseudonym) by the individual, will be stored and published. Furthermore, the IP address assigned by the internet service provider (ISP) of the individual will be logged. This storage of the IP address is done for security reasons and in case the comment violates the rights of third parties or contains unlawful content. The storage of this personal data is in the data controller's legitimate interest, as it may serve as a defense in case of legal violations. This collected personal data will not be disclosed to third parties unless required by law or necessary for the legal defense of the data controller.

9. Subscription to Comments on the Blog on the Website

The comments posted on Future.Empowerment.Africa e.V.'s blog can be subscribed to by third parties. In particular, it is possible for a commentator to subscribe to follow-up comments on a specific blog post.

If an individual chooses the option to subscribe to comments, the data controller will send an automatic confirmation email to verify, through the double opt-in process, whether the owner of the provided email address has indeed chosen this option. The option to subscribe to comments can be terminated at any time.

10. Routine Erasure and Blocking of Personal Data

The data controller processes and stores personal data of individuals only for the period necessary to achieve the purpose of storage or as required by the European legislator or another legislator in laws or regulations to which the data controller is subject.

When the purpose of storage ceases to exist or a storage period prescribed by the European legislator or another competent legislator expires, the personal

data will be routinely blocked or deleted in accordance with legal provisions.

11. Rights of the data subject

a) Right to confirmation

Every data subject has the right, granted by the European legislator, to obtain confirmation from the data controller as to whether or not personal data concerning them is being processed. If a data subject wishes to exercise this right to confirmation, they can contact an employee of the data controller at any time.

b) Right to information

Every data subject affected by the processing of personal data has the right, granted by the European legislator, to obtain free information from the data controller at any time about the personal data stored about them and a copy of this information. Furthermore, the European legislator has granted the data subject access to the following information:

the purposes of the processing
the categories of personal data that are processed
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations
if possible, the envisaged duration for which the personal data will be stored, or, if not possible, the criteria used to determine that duration
the existence of the right to rectification or erasure of personal data concerning the data subject, or to restriction of processing by the data controller, or to object to such processing
the right to lodge a complaint with a supervisory authority
if the personal data are not collected from the data subject, any available information as to their source

the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject

Furthermore, the data subject has the right to be informed whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards relating to the transfer.

If a data subject wishes to exercise this right to information, they can contact an employee of the data controller at any time.

c) Right to rectification

Every data subject affected by the processing of personal data has the right, granted by the European legislator, to request the immediate rectification of inaccurate personal data concerning them. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data, including by means of a supplementary statement.

If a data subject wishes to exercise this right to rectification, they can contact an employee of the data controller at any time.

d) Right to erasure (Right to be forgotten)

Every data subject affected by the processing of personal data has the right, granted by the European legislator, to demand from the controller the erasure of personal data concerning them without undue delay if one of the following reasons applies and the processing is not necessary:

The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
The data subject withdraws consent on which the processing is based according to Article 6(1)(a) or Article 9(2)(a) of the GDPR, and where there is no other legal ground for the processing.
The data subject objects to the processing pursuant to Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.
The personal data has been unlawfully processed.
The erasure of personal data is necessary for compliance with a legal obligation in Union or Member State law to which the controller is subject.
The personal data has been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.

If any of the reasons mentioned above apply and an affected person wants to request the deletion of personal data stored by Future.Empowerment.Africa e.V., they can contact an employee of the data controller at any time. The employee of Future.Empowerment.Africa e.V. will ensure that the deletion request is promptly complied with.

If the personal data has been made public by Future.Empowerment.Africa e.V. and our company, as the data controller, is obligated to delete the personal data in accordance with Article 17(1) of the GDPR, Future.Empowerment.Africa e.V. will take reasonable steps, including technical measures, taking into account available technology and implementation costs, to inform other data controllers processing the published personal data that the affected person has requested the deletion of all links to, copies, or replications of this personal data, unless the processing is required. The employee of Future.Empowerment.Africa e.V. will arrange the necessary measures on a case-by-case basis.

e) Right to restriction of processing

Any person affected by the processing of personal data has the right, granted by the European legislator, to request the data controller to restrict the processing if one of the following conditions applies:

The accuracy of the personal data is contested by the data subject, for a period enabling the data controller to verify the accuracy of the personal data.
The processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of its use instead.
The data controller no longer needs the personal data for processing purposes, but the data subject requires it for the establishment, exercise, or defense of legal claims.
The data subject has objected to processing pursuant to Article 21(1) of the GDPR, pending the verification whether the legitimate grounds of the data controller override those of the data subject.

If any of the above conditions are met and an affected person requests the restriction of personal data stored by Future.Empowerment.Africa e.V., they can contact an employee of the data controller at any time. The employee of Future.Empowerment.Africa e.V. will arrange the restriction of processing.

f) Right to data portability

Any person affected by the processing of personal data has the right, granted by the European legislator, to receive the personal data concerning them, which was provided to a data controller, in a structured, commonly used, and machine-readable format. They also have the right to transmit this data to another data controller without hindrance from the data controller to which the personal data was provided, where the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, or on a contract pursuant to Article 6(1)(b) of the GDPR, and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.

Furthermore, when exercising their right to data portability under Article 20(1) of the GDPR, the data subject has the right to have the personal data transmitted directly from one data controller to another, where technically feasible and provided it does not adversely affect the rights and freedoms of others.

To exercise the right to data portability, the data subject can contact an employee of Future.Empowerment.Africa e.V. at any time.

g) Right to object

Any person affected by the processing of personal data has the right, granted by the European legislator, to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them, which is based on Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.

Future.Empowerment.Africa e.V. will no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the affected person, or the processing serves the assertion, exercise, or defense of legal claims.

If Future.Empowerment.Africa e.V. processes personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data for such marketing. This also applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to Future.Empowerment.Africa e.V. processing the personal data for direct marketing purposes, Future.Empowerment.Africa e.V. will no longer process the personal data for these purposes.

In addition, the data subject has the right, on grounds relating to their particular situation, to object to the processing of personal data concerning them by Future.Empowerment.Africa e.V. for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

To exercise the right to object, the data subject can directly contact any employee of Future.Empowerment.Africa e.V. or another employee. The data subject is also free to exercise their right to object in connection with the use of information society services, notwithstanding Directive 2002/58/EC, using automated means using technical specifications.

h) Automated individual decision-making, including profiling

Any person affected by the processing of personal data has the right, granted by the European legislator, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, unless the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the data controller, or (2) is authorized by Union or Member State law to which the data controller is subject and which also lays down suitable measures to safeguard the data subject's rights, freedoms, and legitimate interests, or (3) is based on the data subject's explicit consent.

If the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the data controller or (2) is based on the data subject's explicit consent, Future.Empowerment.Africa e.V. shall implement suitable measures to safeguard the data subject's rights, freedoms, and legitimate interests, including at least the right to obtain human intervention on the part of the data controller, to express their point of view, and to contest the decision.

If the data subject wishes to exercise rights relating to automated decision-making, including profiling, they can contact an employee of the data controller at any time.

i) Right to withdraw consent for data processing

Any person affected by the processing of personal data has the right, granted by the European legislator, to withdraw consent to the processing of personal data at any time.

If the data subject wishes to exercise their right to withdraw consent, they can contact an employee of the data controller at any time.

12. Data Protection in Applications and Application Process

The data controller collects and processes personal data from applicants for the purpose of handling the application process. The processing can also be done electronically. This is particularly the case when an applicant submits corresponding application documents to the data controller electronically, for example, via email or through a web form on the website. If the data controller enters into an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with legal requirements. If no employment contract is concluded between the data controller and the applicant, the application documents will be automatically deleted two months after the decision of rejection has been communicated, unless deletion conflicts with other legitimate interests of the data controller. Other legitimate interests in this sense may include, for example, the need for evidence in a procedure under the General Equal Treatment Act (AGG).

13. Data Protection provisions regarding the use of Google Analytics (with anonymization function)

The data controller has integrated the Google Analytics component (with anonymization function) on this website. Google Analytics is a web analytics service that involves the collection, gathering, and analysis of data about the behavior of visitors to websites. A web analytics service collects, among other things, data about the website from which a data subject has accessed a particular website (known as the referrer), which subpages were accessed on the website, how often and for what duration a subpage was viewed. Web analytics is primarily used for optimizing a website and conducting cost-benefit analysis of internet advertising.

The operating company of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.

The data controller uses the "_gat._anonymizeIp" add-on for web analysis through Google Analytics. By means of this add-on, the IP address of the internet connection of the data subject is shortened and anonymized by Google when accessing our website from a member state of the European Union or from another contracting state of the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze the traffic on our website. Google uses the collected data and information, among other things, to evaluate the use of our website, compile online reports that show the activities on our websites, and provide other services related to the use of our website.

Google Analytics places a cookie on the information technology system of the data subject. The use of cookies has been explained above. By setting the cookie, Google enables the analysis of the use of our website. Each time one of the individual pages of this website, which is operated by the data controller and on which a Google Analytics component has been integrated, is called up, the internet browser on the information technology system of the data subject is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google gains knowledge of personal data, such as the IP address of the data subject, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently enable commission settlements.

The cookie stores personal information, such as the access time, the location from which access was made, and the frequency of visits to our website by the data subject. Each time our website is visited, this personal data, including the IP address of the internet connection used by the data subject, is transferred to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected through the technical process to third parties.

The data subject can prevent the setting of cookies through our website, as explained above, at any time by adjusting the settings of the internet browser used and thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Google from setting a cookie on the information technology system of the data subject. In addition, a cookie already set by Google Analytics can be deleted at any time via the internet browser or other software programs.

Furthermore, the data subject has the option to object to the collection of data generated by Google Analytics that is related to the use of this website and the processing of this data by Google. To do this, the data subject must download and install a browser add-on available at the following link: https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information regarding website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered an objection by Google. If the information technology system of the data subject is deleted, formatted, or reinstalled at a later point in time, the data subject must reinstall the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or disabled by the data subject or any other person within their control, there is an option to reinstall or reactivate the browser add-on.

Additional information and the applicable data protection provisions of Google can be found at https://www.google.com/intl/en/policies/privacy/ and https://www.google.com/analytics/terms/us.html. Google Analytics is explained further at https://www.google.com/intl/en_de/analytics/.

14. Data Protection Provisions on the Use and Application of Google AdWords

The data controller has integrated Google AdWords on this website. Google AdWords is an internet advertising service that allows advertisers to display ads in Google search engine results and the Google advertising network. Google AdWords enables advertisers to predefine certain keywords through which an ad will be displayed in Google search engine results only when a user retrieves keyword-relevant search results using the search engine. In the Google advertising network, ads are distributed on topic-relevant websites based on an automated algorithm and the predefined keywords.

The operating company for Google AdWords services is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.

The purpose of Google AdWords is to promote our website by displaying ads relevant to the user's interests on third-party websites and in the Google search engine results, as well as displaying external ads on our website.

If a data subject reaches our website via a Google ad, a conversion cookie is placed on the data subject's information technology system by Google. The use of cookies has been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. The conversion cookie is used to determine whether certain subpages, such as the shopping cart of an online shop system, were accessed on our website. Through the conversion cookie, both we and Google can track whether a data subject who reached our website through an AdWords ad generated revenue, i.e., completed or canceled a purchase.

The data and information collected through the use of the conversion cookie are used by Google to generate visit statistics for our website. We use these visit statistics to determine the total number of users who were referred to us through AdWords ads, i.e., to determine the success or failure of each AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other advertisers using Google AdWords receive information from Google that could personally identify the data subject.

Personal information, such as the web pages visited by the data subject, is stored via the conversion cookie. Therefore, each time our web pages are visited, personal data, including the IP address of the data subject's internet connection, is transferred to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personal data collected through the technical process with third parties.

The data subject can prevent the setting of cookies by our website, as described above, at any time by adjusting the settings of the internet browser used and thereby permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Google from setting a conversion cookie on the data subject's information technology system. Additionally, cookies already set by Google AdWords can be deleted at any time via the internet browser or other software programs.

Furthermore, the data subject has the option to opt-out of interest-based advertising by Google. To do this, the data subject must access the link www.google.de/settings/ads from each internet browser they use and make the desired settings.

Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/en/policies/privacy/.

15. Data Protection Provisions on the Use and Application of Instagram

The data controller has integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform, allowing users to share photos and videos and distribute such data in other social networks.

The operating company for Instagram services is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Each time an individual page of this website, operated by the data controller and containing an Instagram component (Insta button), is accessed, the internet browser on the data subject's IT system is automatically prompted by the respective Instagram component to download a representation of the corresponding Instagram component. As part of this technical process, Instagram becomes aware of which specific subpage of our website is visited by the data subject.

If the data subject is simultaneously logged into Instagram, Instagram recognizes with each visit to our website by the data subject, and for the entire duration of their stay on our website, which specific subpage of our website is visited by the data subject. This information is collected by the Instagram component and assigned by Instagram to the respective Instagram account of the data subject. If the data subject clicks on one of the Instagram buttons integrated on our website, the data and information transmitted with it are assigned to the personal Instagram user account of the data subject and stored and processed by Instagram.

Instagram receives information through the Instagram component whenever the data subject visits our website, provided that the data subject is logged into Instagram at the time of accessing our website; this occurs regardless of whether the data subject clicks on the Instagram component or not. If such transmission of this information to Instagram by the data subject is not desired, the data subject can prevent the transmission by logging out of their Instagram account before accessing our website.

Further information and the applicable data protection provisions of Instagram can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.

16. Data Protection Provisions on the Use and Application of LinkedIn

The data controller has integrated components of LinkedIn Corporation on this website. LinkedIn is an internet-based social network that enables users to connect with existing business contacts and establish new business contacts. Over 400 million registered individuals use LinkedIn in more than 200 countries. Currently, LinkedIn is the largest platform for business contacts and one of the most visited websites in the world.

The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible for privacy matters outside the USA.

Each time our website is accessed, which contains a LinkedIn component (LinkedIn plug-in), this component prompts the web browser used by the data subject to download a corresponding display of the LinkedIn component. Further information about the LinkedIn plug-ins can be found at https://developer.linkedin.com/plugins. As part of this technical process, LinkedIn becomes aware of which specific subpage of our website is visited by the data subject.

If the data subject is simultaneously logged into LinkedIn, LinkedIn recognizes with each visit to our website by the data subject, and for the entire duration of their stay on our website, which specific subpage of our website the data subject visits. This information is collected by the LinkedIn component and assigned by LinkedIn to the respective LinkedIn account of the data subject. If the data subject clicks on a LinkedIn button integrated on our website, LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores and processes this personal data.

LinkedIn receives information through the LinkedIn component whenever the data subject visits our website, provided that the data subject is logged into LinkedIn at the time of accessing our website; this occurs regardless of whether the data subject clicks on the LinkedIn component or

not. If such transmission of this information to LinkedIn by the data subject is not desired, the data subject can prevent the transmission by logging out of their LinkedIn account before accessing our website.

LinkedIn offers the possibility to unsubscribe from email messages, SMS messages, and targeted ads, as well as manage ad settings, at https://www.linkedin.com/psettings/guest-controls. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame, which may set cookies. Such cookies can be rejected at https://www.linkedin.com/legal/cookie-policy. The applicable data protection provisions of LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy. LinkedIn's cookie policy can be found at https://www.linkedin.com/legal/cookie-policy.

17. Payment Method: Data Protection Provisions for PayPal as a Payment Method

The data controller has integrated components of PayPal on this website. PayPal is an online payment service provider. Payments are processed through so-called PayPal accounts, which represent virtual private or business accounts. Additionally, PayPal offers the option to process virtual payments using credit cards for users who do not maintain a PayPal account. A PayPal account is managed via an email address, so there is no traditional account number. PayPal allows for initiating online payments to third parties or receiving payments. PayPal also acts as a trustee and provides buyer protection services.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal L-2449, Luxembourg.

If the data subject selects "PayPal" as the payment option during the ordering process in our online shop, data of the data subject will be automatically transmitted to PayPal. By selecting this payment option, the data subject agrees to the transfer of personal data necessary for payment processing.

The personal data transmitted to PayPal is usually first name, last name, address, email address, IP address, telephone number, mobile phone number, or other data necessary for payment processing. Personal data required for the processing of the purchase agreement are also transferred, which are in connection with the respective order.

The purpose of transmitting the data is payment processing and fraud prevention. The data controller will transfer personal data to PayPal, particularly when there is a legitimate interest for the transfer. The personal data exchanged between PayPal and the data controller may be transmitted by PayPal to credit agencies. This transmission is intended for identity and credit checks.

PayPal may disclose personal data to affiliated companies and service providers or subcontractors to the extent necessary for fulfilling contractual obligations or processing the data on behalf of the data controller.

The data subject has the possibility to revoke consent to the handling of personal data at any time vis-à-vis PayPal. Revocation does not affect personal data that must be processed, used, or transmitted for (contractual) payment processing.

The applicable data protection provisions of PayPal can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

18. Stripe

The payment processing of your donation is carried out by the payment service provider Stripe of Stripe Payments Europe Ltd. (Ireland/EU), to whom we disclose the information you provided us, along with the information about your donation (name, address, account number, bank code, if applicable, credit card number, amount, and transaction number) in accordance with Art. 6(1)(b) GDPR. The disclosure of your data is solely for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary for this purpose.

The plugin from Stripe on our website is controlled through our consent management. The setting of cookies is therefore based on your consent in accordance with § 15(3) TMG or Art. 6(1)(a) GDPR.

For more information on the data protection of Stripe, please refer to https://stripe.com/de/privacy#translation.

19. Legal Basis for Processing

Art. 6(1)(a) GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations necessary for the delivery of goods or the provision of other services or consideration, the processing is based on Art. 6(1)(b) GDPR. The same applies to processing operations that are necessary for carrying out pre-contractual measures, for example, in the case of inquiries regarding our products or services. If our company is

subject to a legal obligation by which processing of personal data is required, such as for the fulfillment of tax obligations, the processing is based on Art. 6(1)(c) GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data, or other vital information would have to be passed on to a doctor, hospital, or other third party. Then the processing would be based on Art. 6(1)(d) GDPR. Finally, processing operations could be based on Art. 6(1)(f) GDPR. This legal basis is used for processing operations that are not covered by any of the aforementioned legal grounds if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a customer of the data controller (Recital 47 Sentence 2 GDPR).

20. Legitimate interests pursued by the data controller or a third party

If the processing of personal data is based on Article 6(1)(f) of the GDPR, our legitimate interest is the conduct of our business activities for the benefit of the well-being of all our employees and shareholders.

21. Duration for which the personal data will be stored

The criterion for the duration of the storage of personal data is the respective statutory retention period. After the expiration of the period, the corresponding data will be routinely deleted, provided they are no longer necessary for the fulfillment or initiation of a contract.

22. Legal or contractual provisions regarding the provision of personal data; necessity for the contract conclusion; obligation of the data subject to provide personal data; possible consequences of non-provision

We would like to inform you that the provision of personal data is partly required by law (e.g., tax regulations) or may also result from contractual provisions (e.g., information about the contractual partner). It may be necessary for the conclusion of a contract that a data subject provides us with personal data that must subsequently be processed by us. The data subject is, for example, obliged to provide us with personal data when our company enters into a contract with them. Failure to provide personal data would mean that the contract with the data subject could not be concluded. Before providing personal data, the data subject must contact one of our employees. Our employee will inform the data subject on a case-by-case basis whether the provision of personal data is legally or contractually required, whether there is an obligation to provide the personal data, and what consequences the non-provision of personal data would have.

23. Existence of automated decision-making

As a responsible company, we do not engage in automated decision-making or profiling.

This privacy policy was created with the assistance of the privacy policy generator from DGD Deutsche Gesellschaft für Datenschutz GmbH, working as an external data protection officer in Hamburg, in cooperation with IT and data protection lawyer Christian Solmecke from Cologne.