We take the protection of your personal data very seriously and comply strictly with the regulations laid down in data protection law, as dictated largely by the provisions of the EU’s General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The following statement provides an overview of how we ensure the protection of your data, in particular which type of data is collected, processed and used for what purpose, and of your legal rights.
Controller responsible for data processing, including contact details:
Responsibility within the meaning of Article 4 No. 7 GDPR lies with
Friedrich Naumann Foundation for Freedom
Karl-Marx-Straße 2, 14482 Potsdam-Babelsberg, Germany
+49 331 7019 0
service@freiheit.org
You can contact the in-house Data Protection Officer of the Friedrich Naumann Foundation for Freedom, Dr. Georg Wronka, at the following email address:
rawronka@web.de
You have the right to submit complaints to the data protection supervisory authorities. Body responsible for the Friedrich Naumann Foundation for Freedom:
Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany
Table of Contents
-
Personal Data and Purposes of Processing
-
Collection of Log Data
-
Cookies
-
Web Analytics
-
Social Media
-
Storage Periods and Erasure
-
Your Rights
- Personal Data and Purposes of Processing
Data relating to you that you provide in electronic form to the Friedrich Naumann Foundation for Freedom, such as your name, postal address or email address, will be stored and used by us for the purpose of fulfilling the requested service (participation in an event, delivery of publications, scholarship enquiries) (point (b) of the first sentence of Article 6(1) GDPR). We will also use such data to notify you of other events, publications and other activities undertaken by the Foundation if the relevant legal conditions are met (points (a) and (f) of the first sentence of Article 6(1) GDPR); we will usually request your consent to do so.
Your data will only be disclosed to third parties (e.g. public awarding authorities, supervisory authorities or organisations that cooperate with the Foundation) if we have a legal obligation to do so or you have given us your consent. If we engage service providers for technical assistance relating to data processing, this is done in strict compliance with the rules relating to commissioned data processing (Article 28 GDPR).
2. Collection of Log Data
Unless you provide us with other information when visiting our website, we will only collect the personal data that your browser transmits to our server. This information will be stored temporarily in a so-called log file. In the process, the following information will be collected, without any action on your part, and stored until it is automatically deleted:
- IP address
- Date and time of the query
- Time zone difference to Coordinated Universal Time (UTC)
- Request transmitted by the web browser, consisting of the request method (e.g. GET), the requested page or resource, protocol version (e.g. HTTP/1.1)
- Access status/HTTP status code (e.g. 404 for “Not Found”)
- The volume of data transferred in each case
- The website from which the currently displayed page was called up or from which the resource was integrated (provided that your web browser transmits such information)
- Browser identifier, consisting of the name, manufacturer, version and language of your browser software, as well as the operating system and its version (provided that your web browser transmits this information)
The data mentioned will be collected for the purpose of showing you our website, and of ensuring stability and security. The legal basis for this is point (f) of Article 6(1) GDPR. Our legitimate interest follows from the aforementioned purpose of data collection.
3. Cookies
In addition to the aforementioned log data, cookies will also be saved on your computer when you visit our website. Cookies are small text files that are created automatically by your browser and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Information generated in connection with the specifically used end device is stored in the cookie. However, this does not mean that this information gives us direct knowledge of your identity. In addition, cookies are unable to execute programs or to transmit viruses to your computer. Cookies are used to make our internet services more user-friendly and effective.
This website uses the following types of cookie:
- Transient cookies: transient cookies are erased automatically once you exit your browser. These include, in particular, session cookies. Session cookies save a so-called session ID, which can be used to assign different queries from your browser to the current session. This enables your computer to be recognised when you return to our website.
- Persistent cookies: persistent cookies are automatically erased after a predefined time interval, which may differ from cookie to cookie. We use persistent cookies to compile statistics on the use of our website and to optimise our services. When you return to our website, these cookies enable use to automatically recognise that you have already visited our website in the past.
You can configure your browser settings to your requirements, e.g. by accepting third-party cookies or declining all cookies. Please note that you may not be able to use the full functionality of this website.
The data processed by cookies is required for the specified purposes of pursuing our legitimate interests and those of third parties in accordance with point (f) of Article 6(1) GDPR.
4. Web Analytics
Use of Google Analytics:
- This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies (see Section 4 of this Privacy Policy) that are stored on your computer and help us analyse your use of our website. The information generated by the cookie about your use of our website, such as
- IP address
- Date and time of the query
- Website from which the request came
- Browser
- Operating system
is usually sent to a Google server in the USA, where it is stored. We use Google Analytics with the extension “_anonymizeIp()”; this means that, before this occurs, Google will shorten your IP address within EU Member States and in other countries that have signed the Agreement on the European Economic Area. Only in exceptional cases will your full IP address be transmitted to a Google server in the USA first and then shortened. Google will use this information on our behalf to analyse your use of our website, to compile reports about website activities and to provide additional services relating to website and internet usage for the website operator.
- The IP address transmitted from your browser using Google Analytics will not be associated with any other data held by Google.
- You can prevent cookies from being saved by changing the appropriate setting in your browser software; please note, however, that this may mean you are not able to use the full functionality of the website. You can also prevent the data generated by the cookie relating to your use of the website (including your IP address) from being recorded and used by Google by downloading and installing the browser plugin available from this link.
- We use Google Analytics to be able to analyse the use of our website and to carry out regular improvements. The statistics obtained enable us to improve our services and to make them more interesting to you as a user. For the exceptional cases in which personal data is transmitted to the USA, Google has committed to the EU-US Privacy Shield. The legal basis for the use of Google Analytics is point (f) of Article 6(1) GDPR.
Use of Matomo (formerly Piwik):
- Our website uses the web analytics service Matomo. Matomo uses cookies that are stored on your computer and help us analyse your use of our website. We only store the information generated in this way on our server in Germany. We use Matomo with the extension “AnonymizeIP”. This means that IP addresses are shortened before processing, preventing them from being directly linked to a particular individual.
- The IP address transmitted from your browser using Matomo will not be associated with any other data collected by us.
- You can prevent such evaluation by deleting existing cookies and disabling the use of cookies. Please note that if you prevent the use of cookies, you may not be able to use the full functionality of our website. You can prevent the use of cookies by means of an appropriate setting in your browser.
- We use Matomo to be able to analyse the use of our website and to carry out regular improvements. The statistics obtained enable us to improve our services and to make them more interesting to you as a user. The legal basis for the use of Matomo is point (f) of Article 6(1) GDPR.
- The Matomo program is an open source project. Information by the third-party provider concerning data protection is available here.
Use of the Facebook pixel (Facebook Custom Audiences):
- Our website also uses the “Facebook pixel” of Facebook Inc. (“Facebook”). This enables interest-based advertisements (“Facebook ads”) to be displayed to users of our website when visiting the social network Facebook or other websites that use this method. The Facebook pixel enables your browser to automatically create a direct link to the Facebook server. We have no influence on the scope and further use of data collected by Facebook through the use of this tool, and therefore provide you with information based on our current knowledge: by integrating the Facebook pixel, Facebook is informed that you have clicked on one of our ads or called up the relevant page on our website. If you have registered with a Facebook service, Facebook may assign the visit to your account. Even if you are not registered with or logged on to Facebook, there is still the possibility that the provider will be able to find out and save your IP address and other identifiers.
- The purpose of using the Facebook pixel is to ensure that Facebook ads we have placed are only displayed to Facebook users who have shown an interest in our internet services. By using the Facebook pixel, we therefore wish to ensure that our Facebook ads are tailored to the user’s potential interests and are not perceived to be annoying. We can also use the Facebook pixel to determine the effectiveness of Facebook ads for statistical purposes by seeing whether users were directed to our website after clicking on a Facebook ad. The legal basis for the use of the Facebook pixel is point (f) of Article 6(1) GDPR.
5. Social Media
- We currently use the following social media plugins: Facebook, Twitter, Instagram. In the process, we use the so-called two-click solution. This means that when you visit our website, no personal data will generally be shared with the plugin providers. You will recognise the provider of the plugin from the logo on the relevant button. We give you the opportunity to communicate directly with the provider of the plugin by using the button. The plugin provider will only be informed that you have called up the relevant page of our website if you click on the marked box, which activates it. By activating the plugin, therefore, personal data concerning you will be transmitted to the relevant plugin provider and saved there (in the case of US providers, in the USA) (in the case of Facebook, according to information provided by the provider, the IP address will be anonymised immediately after collection in Germany). Since the plugin provider undertakes data collection primarily by way of cookies, we recommend that you delete all cookies via the security settings of your browser before clicking on the greyed out box.
- We have no influence on the data collected and any data processing operations, nor are we aware of the full scope of data collection, the purposes of their processing or storage periods. Nor do we have any information about the erasure of data collected by the plugin provider.
- The plugin provider saves the data collected about you as user profiles, which it uses for the purposes of advertising, market research and/or to tailor its website to needs. Such an analysis takes place in particular (also for users who are not logged on) in order to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to refuse the creation of such user profiles; to assert this right, you must contact the relevant plugin provider. By using the plugins, we give you the opportunity to interact with the social networks and other users so that we can improve our services and make them more interesting to you as a user. The legal basis for the use of these plugins is point (f) of Article 6(1) GDPR.
- Your data will be shared irrespective of whether or not you have an account with the plugin provider and are logged on to this account. If you are logged on to the plugin provider, the data we collect about you will be assigned directly to your account with the plugin provider. If you click on the activated button and, for example, link the page, the plugin provider will also save this information in your user account and will share it with your contacts. We recommend that you regularly log off after using a social network, in particular, however, before activating the button. This way, you will be able to prevent the plugin provider from assigning such data to your profile.
- For more information about the purpose and scope of data collection and how it is processed by the plugin provider, please consult the privacy policies of these providers stated below. They will also be able to give you further information about your rights concerning this, and about setting options for ensuring your right to privacy.
- Addresses of the relevant plugin providers and the URL with their data protection notices:
- Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; here; more information about data collection: here , here and here. Facebook has committed to the EU-US Privacy Shield.
- Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; here. Twitter has committed to the EU-US Privacy Shield.
- Instagram LLC, represented by Kevin Systrom and Mike Krieger, 1601 Willow Rd, Menlo Park CA 94025, USA here
- We have incorporated YouTube videos in our website, which are saved at http://www.YouTube.com and can be played directly from our website.
- By visiting the website, YouTube will be informed that you have called up the relevant page of our website. This will occur irrespective of whether YouTube provides a user account that you have logged on to, or whether you do not have such as user account. If you are logged on to Google, your data will be directly assigned to your account. If you do not want your data to be assigned to your YouTube profile, you must log off before activating the button. YouTube saves your data as user profiles and uses it for purposes of advertising, market research and/or to tailor its website to needs. Such an analysis takes place in particular (also for users who are not logged on) in order to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to refuse the creation of such user profiles; to assert this right, you must contact YouTube.
- For more information about the purpose and scope of data collection and how it is processed by YouTube, please consult their Privacy Policy, which also contains further information about your rights and setting options to ensure the protection of your privacy. Google also processes your personal data in the USA, and has committed to the EU-US Privacy Shield.
- Our website uses the Google Maps This way we can directly display interactive maps on our website, enabling you to make convenient use of the map function.
- By visiting the website, Google is informed that you have called up the relevant page of our website. This will occur irrespective of whether Google provides a user account that you have logged on to, or whether you do not have such as user account. If you are logged on to Google, your data will be directly assigned to your account. If you do not want your data to be assigned to your Google profile, you must log off before activating the button. Google saves your data as user profiles and uses it for purposes of advertising, market research and/or to tailor its website to needs. Such an analysis takes place in particular (also for users who are not logged on) in order to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to refuse the creation of such user profiles; to assert this right, you must contact Google.
- For more information about the purpose and scope of data collection and how it is processed by the plugin provider, please consult the provider’s Privacy Policy, which also contains further information about your rights and setting options to ensure the protection of your privacy. Google also processes your personal data in the USA, and has committed to the EU-US Privacy Shield.
-
Storage Periods and Erasure
The Foundation stores and uses your personal data for as long as it is necessary to fulfil the requested service or to achieve the purpose for which it was stored or until any consent given has been revoked.
If these conditions no longer apply, the data will be erased, subject to statutory retention requirements. Data will also be erased in the other cases listed under Article 17 GDPR.
-
Your Rights
You may withdraw your consent to the processing and use of your data at any time (Article 7(3) GDPR); to do so, please send an email to: service@freiheit.org
Your data will then be erased without undue delay. This also applies in the case of the withdrawal of a declaration of consent granted to the Foundation before GDPR came into force, i.e. before 25 May 2018.
You have the right to obtain information about the data concerning you that the Foundation has saved as set out in further detail under Article 15 GDPR and Section 34 BDSG. Concerning this matter, please contact the Data Protection Officer of the Friedrich Naumann Foundation for Freedom.
You have the right to request the rectification of inaccurate personal data concerning you, Article 16 GDPR.
You also have the right to the erasure of your personal data under the conditions referred to in Article 17 GDPR and supplemented by Section 35 BDSG. Please send any such request to: service@freiheit.org
You have the right to the restriction of processing in accordance with Article 18 GDPR, the right to object under Article 21(1) GDPR and the right to data portability in accordance with Article 20 GDPR. Where we use your data to send you information (direct marketing), you may object to its use for such purposes. We will then no longer process your data for such purposes, Article 21(2) and (3) GDPR.
You can object by sending a simple email with the heading “Objection”, stating your name and address, to service@freiheit.org