Privacy policy

Privacy policy

Privacy policy for the website citizen-conservation.org

1. Collection and Use of Personal Data

1.1. This privacy policy informs you about the collection of personal data when you use our website. Personal data means any information that identifies you or can be used to identify you, e.g. name, address, e-mail addresses, user behaviour.

1.2. The controller pursuant to Article 4 (7) General Data Protection Regulation (GDPR) is:

Citizen Conservation Foundation gGmbH
Reichenbergerstr. 88
10999 Berlin
Phone: +49 30 92 10 13-223
Email: office |at| citizen-conservation.org

1.3. If, to provide individual functions of our offer, we make use of any contracted service providers or if we wish to use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also specify criteria for how long we store your data.

2. Your Rights

2.1. You are entitled to the following rights towards us regarding your personal data:

  • Right to information,
  • Right to rectification or deletion,
  • Right to restriction of processing,
  • Right to object to the processing,
  • Right to data portability.

To exercise your rights, you can contact the controller using the above contact details.

2.2. You also have the right to complain to the data protection supervisory authorities about our processing of your personal data.

3. Objection Against the Processing of Your Data or Withdrawal of Consent

3.1. If you have consented to the processing of your data, you may withdraw such consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

3.2. Where we base the processing of your personal data on the balancing of interests, you may object to such processing. This is the case if it’s processing is not required for fulfilling a contract to which you are a party, but for other purposes, details of which we will provide in the description of those processes below. When exercising such an objection, we ask you to give the reasons why we should not process your personal data in the manner we intend. In the event of your justified objection, we will examine the situation and either cease to process your data, or adjust data processing, or point out to you our compelling legitimate grounds for continuing to process your data.

4. Collection of Personal Data When You Visit Our Website

4.1. When you visit our website for information purposes only, i.e. if you do not register or otherwise provide information to us, we only collect the personal data that your browser transmits to our server. When you visit our website we will collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (the legal basis being Article 6 (1) lit. f GDPR):

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Websites accessed by the user’s system via our website
  • Websites accessed by the user’s system via our website
  • Bytes downloaded
  • Browser
  • Operating system and interface
  • Language and version of the browser software.

The above data will be stored in line with industry standard for a maximum of 7 days. Afterwards IP addresses will be anonymized.

4.2. In addition to the aforementioned data, cookies are stored on your computer when you visit our website. Cookies are small text files that your browser stores on your hard drive which transmit certain information back to the party that has set the cookie (in this case, us). Cookies cannot run programs or transfer viruses to your computer. They are widely used in order to make websites function properly as well as to make them more user-friendly and effective.

4.3. Use of cookies:

4.3.1. This website uses the following types of cookies; the scope and functionality of which are explained below:

  • Transient cookies (see 4.3.2)
  • Persistent cookies (see 4.3.3).

4.3.2. Transient cookies are automatically deleted when you close your browser. They include, in particular, session cookies. They store a so-called session ID, which allows separate requests of your browser to be assigned to the same session. This will enable us to recoginse your computer when you return to our website. Session cookies also include the cookies that we use to ensure the correct display of our website on the device used by you. Session cookies will be deleted when you log out or close the browser.

4.3.3. Persistent cookies will automatically be deleted after a specified period of time, which may vary depending on the cookie. You may delete cookies at any time in the security settings of your browser.

4.3.4. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. However, if you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

5. Contacting us by e-mail

5.1. When you contact us by e-mail, we will store the data you provide (your email address and – where applicable – your name, telephone number and your message) in order to answer your query. Once storage is no longer necessary, we will delete all data collected with regard to your query or we will restrict its processing if statutory retention obligations exist.

5.2. We process this data to respond to your request or queries. Said processing takes place for the purposes of our legitimate interests (Article 6 (1) lit. f GDPR), as it enables us to communicate with you in a satisfactory manner.

6. Donations and Sponsorship

6.1. You can send us donations via our website. For this we cooperate with the payment service provider Paypal. If you click on the button “Donate” you will automatically be redirected to the Paypal Website.

6.2. The applicable privacy policy of PayPal can be found at https://www.paypal.com/us/webapps/mpp/ua/privacy-full

6.3. You can acquire a sponsorship for citizen conservation. If you send us your postal address by mail tooffice |at| citizen-conservation.org we process your data in order to be able to send you the desired products. The legal basis is Article 6 (1) lit. b GDPR.

7. Newsletter

7.1. If you consent to receiving our newsletter, we will keep you posted about our new projects.

7.2. We use the so-called double opt-in procedure for our newsletter subscription. This means that we will send you a confirmation e-mail after receiving your registration. In this e-mail we will ask you to confirm that you do in fact want to receive our newsletter. If you do not confirm your subscription, your e-mail address will not be added to our list. In addition, we will store the IP addresses used for and the time and date of your registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data. Our legitimate interests result from the aforementioned purpose. The legal basis is Article 6 (1) lit. f GDPR.

7.3. After receiving confirmation from you, we will store your e-mail address and, if voluntarily given, your name, for the purpose of sending you the newsletter. The legal basis is Article 6 (1) lit. a GDPR.

7.4. With your consent we will track your user behaviour in relation to our newsletter. This means that we can track whether you open the newsletter e-mails we send and how often and on which links you have clicked in the newsletter e-mails we send. We do this to optimise the content of the newsletter and to provide you with information and offers which may be of interest to you. This is a legitimate interest, the legal basis is Article 6 (1) lit. f GDPR.

7.5. You may withdraw your consent and cancel your subscription of our newsletter at any time. Simply click on the appropriate link provided in every newsletter e-mail, or write to us at office |at| citizen-conservation.org or by sending a message to the contact details stated in the imprint.

7.6. We will delete your consent details, your e-mail address and any other corresponding user data when you withdraw your consent.

7.7. We use MailChimp to administer and send our newsletter. MailChimp is a service of The Rocket Science Group LLC and a provider from the USA. The Rocket Science Group has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. When you access the registration site for our newsletter and consent to receiving it, the data you provide will be transferred to MailChimp. In addition, the IP address used for registering as well as the time and place of your registration will be stored. This integration of MailChimp takes place so that we can provide you with the possibility to consent to receiving our newsletter and to therefore the above-mentioned content, as well as to document your consent and, if necessary, to trace how this was granted in the case of any queries. Our interests arise from the aforementioned purpose. The legal basis is Article 6 (1) lit. f GDPR. The obligation of MailChimp to handle your data according to the GDPR and to take suitable technical and organisational measures for data security has been specified in a data processing agreement. For any further information we kindly ask you to refer to the data protection regulations provided by MailChimp: https://mailchimp.com/legal/privacy/.

8. Google Analytics

8.1. This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, i.e. text files that are stored on your computer, to help analyse how users use the website. The information generated by the cookie about your use of this website is generally transferred to a Google server in the US and stored there. However, if IP anonymization is enabled on this website, your IP address will first be truncated by Google within European Union member states and other signatories to the Treaty on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the US and truncated there. Google will use this information on our behalf to evaluate your usage of our website, to compile reports on website activity and to provide us with other services relating to website and internet usage.

8.2. The IP address supplied by your browser within the scope of Google Analytics will not be combined with any other Google data.

8.3. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. However, if you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. You can also prevent Google from collecting and processing data relating to your use of our website (including your IP address) by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

8.4. Opt-out cookies will prevent the future collection of your data when you visit this website. To prevent Google Analytics from collecting your data across different devices, you must opt-out on all systems used. If you click here, the opt-out cookie will be set:

Deactivate Google Analytics

8.5. Diese Website verwendet Google Analytics mit der Erweiterung „_anonymizeIp()“. This website uses Google Analytics with the extension “_anonymizeIp()”. As a result, IP addresses are processed in truncated form, so that any personal traceability is ruled out. As far as any data collected can be attributed to you, any such personal reference will be excluded immediately, resulting in this personal data being deleted.

8.6. The data collected by Google Analytics will be deleted after 14 months.

8.7. We use Google Analytics to analyse and continually improve the use of our website. The resulting insights and statistics help us to provide you, the user, with better and more interesting content and service. For those exceptions where personal data is transmitted to the US, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Article 6 (1) lit. f GDPR, in as much as our legitimate interests arise from the pursuit of the aforementioned purposes.

8.8. Third party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Terms of Service: https://www.google.com/analytics/terms/us.html
Privacy overview: https://support.google.com/analytics/answer/6004245?hl=en
Privacy policy: https://policies.google.com/privacy

9. Matomo Web Analytics (formerly PIWIK)

9.1. Scope of the processing of personal data
We use the open source software tool Matomo (formerly PIWIK) on our website to analyse the browsing behaviour of our users. The software places a cookie on the user’s computer (see above for more details of cookies). The following data will be saved if individual pages are visited on our website:

  • Two bytes of the IP address of the user’s accessing system
  • The accessed website
  • The website from which the user reached the accessed website (referrer)
  • The sub-pages accessed from the website
  • How long the user remained on the website
  • How often the website was accessed

In this instance, the software only runs on our servers. The user’s personal data is only stored there. This data will not be forwarded to third parties.

9.2. The legal basis for processing the user’s personal data is Article 6 (1) lit. f GDPR.

9.3. Purpose of data processing
Processing the user’s personal data allows us to analyse the browsing behaviour of our users. We are able to compile information about how individual components of our website are used by analysing the collected data. This helps us to constantly improve our website and its user-friendliness. We will not use your data to create user profiles. These purposes justify our legitimate interests in processing data pursuant to Article 6 (1) lit. f GDPR. By anonymising the IP address, the interest of users in their protection of personal data is sufficiently taken into account.

9.4. Duration of storage
The software has been configured in a way that the IP addresses will be truncated. Two bytes of the IP address will be masked (e.g.: 192.168.xxx.xxx). Because of this, the shortened IP address can no longer be assigned to any specific computer.

9.5. Right to objection and removal (opt-out option)
Cookies are stored on the user’s computer and then sent to our page from there. This is why you as a user have full control over the use of cookies. You can deactivate or restrict the transfer of cookies by changing the settings in your Internet browser. Any cookies stored on your computer can be deleted at any time. This can be done automatically. However, if you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

We offer users the option to opt out of the analytics on our website. As a result, a further cookie will be placed on your system that tells our system not to save the user’s data. Note that you will have to reset the opt-out cookie if for any reason you delete it from your machine. Click the following link for more information about the privacy settings for the Matomo software: https://matomo.org/docs/privacy/

10. Embedded YouTube Videos

10.1. We have embedded YouTube videos within our website. These are stored on http://www.youtube.com and can be viewed directly from our website.

10.2. Upon visiting the webpage YouTube will receive information about your visit on the corresponding subpage of our website. Furthermore, the following data will be transferred:

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Website transmitting the request
  • Websites accessed by the user’s system via our website
  • Browser
  • Operating system and interface
  • Language and version of the browser software

This takes place regardless of whether YouTube provides a user account that you are logged in with or whether no such user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the function. YouTube will store your data within a usage profile and will use it for purposes of advertising, market research and/or demand-oriented design of its website. Your data will thus be evaluated (even that of users who are not logged in), notably to provide demand-oriented advertising and to inform other users of Google’s social network about your activities on our website. You have the right to object to the creation of such user profiles, however you must contact YouTube to exercise this right.

10.3. The integration of these videos allows us to provide these videos to you, whereby this provision is deemed to be in our legitimate interest. The legal basis for the provision of these videos is Article 6 (1) lit. f GDPR.

10.4. Regarding the purpose and scope of said data collection and further processing and use of this data by YouTube, as well as your rights and optional settings with regard to the protection of your privacy, please consult the Google privacy policy: http://www.google.de/intl/de/policies/privacy/. Google will partially process your data in the US and has submitted to the EU-US Privacy Shield framework, https://www.privacyshield.gov/EU-US-Framework.

11. Use of Social Media Plugins

11.1. We use the following Social Media Plug-ins: Facebook, Twitter. When you visit our site, the plug-in providers are informed that you have accessed the corresponding website of our online offering. In addition, the data mentioned under point 4.1 of this declaration are transmitted. In the case of Facebook, the IP address is made anonymous immediately after it has been collected, according to the provider in Germany. By activating the plug-in, personal data is transferred from you to the respective plug-in provider and stored there (for US providers in the USA).

11.2. We have no influence on the data collected and data processing processes, nor are we aware of the full extent of data collection, the purposes of processing, the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.

11.3. The plug-in provider stores the data collected about you as user profiles and uses these for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation takes place in particular (also for not logged in users) for the representation of demand-fair advertisement and in order to inform other users of the social network about your activities on our website. You have the right of objection to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins we offer you the possibility to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Article 6 (1) 1 lit. f GDPR.

11.4. This takes place regardless of whether the plug-in provider provides a user account that you are logged in with or whether no such user account exists. If you are logged in to Facebook, your information will be directly associated with your account. If you do not wish to be associated with your profile on Facebook, we recommend you log out before visiting our website.

11.5. Regarding the purpose and scope of said data collection and further processing and use of this data, as well as your rights and optional settings with regard to the protection of your privacy, please consult the Providers privacy policy:

11.6. Addresses of the plugin providers and URL of their Privacy Policies:

– Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; additional information for data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications andhttp://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

12. Social Media Profiles

We maintain a company profile on the following social networks and platforms: Facebook, Instagram, Twitter, Youtube. We maintain these profiles in order to communicate with our customers, users and interested parties and in order to provide further information about our products and activities. In the case of any messages or contributions we receive on these profiles, we will process your data to enable us to communicate with you. This is a legitimate interest; the legal basis is Article 6 (1) lit f GDPR. No further storage of this communication takes place outside of these networks on our part. The terms and conditions of the platform operators apply. Regarding the purpose and scope of said data collection and further processing and use of this data by the operators of these social platforms, as well as your rights and optional settings with regard to the protection of your privacy, please refer to the respective privacy statements:

https://www.facebook.com/about/privacy
https://help.instagram.com/519522125107875?helpref=page_content
https://twitter.com/de/privacy
https://policies.google.com/privacy?hl=de