PLEASE NOTE: The following translation has been created automatically for orientation and is not checked legally. In a court of law, only the German version applies.
Thank you for your interest in my online offer. The following information is intended to inform you about how, to what extent and for what purposes personal data is processed during your visit and what rights data subjects are entitled to.
1 General section
1.1 Scope of application
This data protection declaration applies to all pages accessible under the domain .sven-giegold.de, including its subdomains and subpages (hereinafter: “Website”).
1.2 Legal basis
The legal basis for data protection can be found in the General Data Protection Regulation (DS-GVO) and the Federal Data Protection Act (BDSG).
1.3 Name and address of the person responsible
The person responsible within the meaning of the DS-GVO and other national data protection laws of the member states as well as other provisions of data protection law is:
Sven Giegold MEP
European Office NRW
Oststrasse 41-43
D-40211 Düsseldorf
Telephone: +49 (0) 211/936530-11
Fax: +49 (0) 211/936530-19
E-mail: sven.giegold@europarl.europa.eu
– hereinafter: “the responsible person”.
1.4 Contact details of the competent supervisory authority
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Kavalleriestr. 2-4
40213 Düsseldorf
Telephone: +49 (0) 211/38424-0
Fax: +49 (0) 211/38424-10
E-mail: poststelle@ldi.nrw.de
1.5 Data protection principles and your rights
1.5.1 Definitions
This data protection declaration is based on the terms used by the European Directive and Regulation Maker when adopting the General Data Protection Regulation (DS-GVO). You can consult the definitions in the Official Journal of the European Union.
1.5.2 Principles for processing personal data
The following principles apply to all processing operations about which information is provided in this privacy statement:
1.5.2.1 Purpose and scope of the processing of personal data.
Personal data will only be collected for the specified purposes. The scope of processing is limited to what is necessary for the purposes of the processing. The controller reserves the right to process personal data if and to the extent necessary to protect its legitimate interest in asserting, exercising or defending legal claims.
1.5.2.2 Legal basis for the processing of personal data
Personal data may be processed if at least one of the following conditions is met:
Consent (Art. 6 para. 1 lit. a DS-GVO)
Fulfilment of contract or pre-contractual measures (Art. 6 para. 1 lit. b DS-GVO)
Legal obligation (Art. 6 para. 1 lit. c DS-GVO)
Safeguarding a legitimate interest on our part or on the part of a third party, insofar as the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest (Art. 6 para. 1 lit. f DS-GVO)
1.5.2.3 Storage period of personal data
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may take place beyond this if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a necessity for the continued storage of the data for the conclusion or fulfilment of a contract.
1.5.2.4 Recipients of personal data
Recipients of personal data of data subjects are, in principle, only the responsible party and processors employed by it in compliance with data protection law. Data may also be passed on to third parties if the data controller is entitled to do so by virtue of a permission norm or is obliged to do so on the basis of statutory provisions, administrative law or court orders.
1.5.2.5 Transfer of personal data to third countries
Should personal data of data subjects be transferred to countries outside the European Union (EU) or outside the European Economic Area (EEA), this will only take place if an adequate level of protection exists (Art. 45 DS-GVO) or if suitable guarantees exist (Art. 46 DS-GVO) or under the conditions of Art. 49 DS-GVO for exceptions in certain cases.
1.5.2.6 Existence of automated decision making
As a responsible company, we do not use automated decision-making or profiling.
1.5.3 Rights of data subjects
Data subjects have the following rights:
1.5.3.1 Right to withdraw consent (Art. 7(3) DS-GVO).
You may revoke your consent to the processing of data at any time with effect for the future.
1.5.3.2 Right to information (Art. 15 DS-GVO)
You can request information about whether personal data about you is being processed. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period or criteria for this, the existence of a right to rectification, erasure, restriction of processing, objection or the existence of the right of appeal. Furthermore, you can request information about the origin of data that has not been collected from you. You can also ask to be informed whether automatic decision-making is used, whether data is transferred to a third country or to an international organisation and on what basis this is done. You may request a copy of the personal data concerning you, provided that this does not affect the rights and freedoms of other persons.
1.5.3.3 Right to rectification (Art. 16 DS-GVO)
You may request the immediate correction of inaccurate or, taking into account the purposes of the processing, the completion of your stored personal data.
1.5.3.4 Right to erasure (Art. 17 DS-GVO)
You may request the erasure of your stored personal data if the purpose of the processing has ceased to exist due to the passage of time or other reasons, you have withdrawn your consent or objected to the processing and there are no overriding reasons for the processing or other legal grounds, the legal basis for the data processing is missing or has ceased to exist and the processing is not necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims. If we have made your data public, we are obliged to take reasonable steps to inform any recipient that you have requested the erasure of any links to or copies of the personal data concerned.
1.5.3.5 Right to restriction of processing (Art. 18 DS-GVO)
You have a right to restriction of processing if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data; the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data; we no longer need the personal data for the purposes of processing but you need them for the establishment, exercise or defence of legal claims; or if you have objected to the processing pursuant to Art. 21 DS-GVO and it is not yet clear whether our legitimate grounds override your grounds.
1.5.3.6 Right to data portability (Art. 20 DS-GVO)
You have a right to receive the personal data you have provided on the basis of your consent or a contract concluded with us, which is processed with the help of automated procedures, in a structured, common and machine-readable format or to demand that it be transferred to another controller, insofar as this does not affect the rights and freedoms of other persons and it is technically feasible.
1.5.3.7 Right to object (Art. 21 DS-GVO)
You have the right to object, on grounds relating to your particular situation, to processing carried out by us for the purposes of protecting our legitimate interests, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. At any time, you have the right to object to processing that we carry out for direct marketing purposes. Your data may then no longer be processed for these purposes.
1.5.3.8 Right of appeal (Art. 77 DS-GVO)
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes data protection rules.
1.6 Information on cookies and similar technologies
Cookies are text files that are created by the browser when a page is accessed in order to store data about a browser during and after a page visit. As a rule, unique character strings are stored in the cookie by means of which a server can recognise a browser. Cookies can be stored by the visited site (first-party) or by third-party providers (third-party) if their services are used on the visited site. If a third-party service is used on several websites, the third-party provider can store information about user activity in cookies and track it across several pages. The cookie stores the domain of the page from which the cookie originates and restricts access to that domain. Cookies are valid either for the duration of a browser session (session cookies) or until a point in time noted in the cookie (persistent cookies). Expired cookies are no longer loaded by the browser when you visit the site and, depending on the browser, are deleted or overwritten directly.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. However, if you deactivate cookies, you may not be able to use all the functions of our website to their full extent. You can find information on your browser’s cookie settings in the browser’s help section or under the following links:
To Google Chrome
To Mozilla Firefox
To Safari
To Microsoft Edge
To Internet Explorer
To Opera
In addition, data may be stored for the same purposes in the so-called local storage or local session storage of your browser.
For information on the use of cookies or similar technologies when visiting our website, please refer to the information on individual processing operations in the special section of the data protection declaration and the Consent banner:
<a href=”#” class=”borlabs-cookie-preference”>Open Settings</a>.
1.7 Changes to this Privacy Policy
We reserve the right to adapt this data protection declaration so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration. The new data protection declaration will then apply to your next visit.
2 Special section
2.1 Necessary processing when visiting the website
2.1.1 Provision of the website
Within the framework of commissioned processing, the controller commissions an external service provider to provide the website. The service provider is obligated to comply with the data protection regulations to the same extent as the controller and provides the guarantee for reliable and secure handling of the data on our website. Personal data of data subjects collected via the website is stored on the servers of the service provider within the European Economic Area (EEA). The data is stored separately from other applications. The processing of personal data by the service provider is only carried out in accordance with the instructions of the data controller and to the extent necessary for the fulfilment of its service obligations.
2.1.2 Collection of access and connection data
Each time our website is accessed, our system automatically collects information from the computer system of the accessing computer.
2.1.2.1 Scope of processing
The following data is collected:
Browser type and version used,
operating system,
IP address,
name of the Internet service provider,
date and time of access,
Address of the website from which a browser accesses our website,
address of the page of our website accessed by the browser.
The data is stored in log files. This data is not stored together with other personal data of data subjects.
2.1.2.2 Legal basis for processing
The legal basis for the processing is Art. 6 para. 1 lit. f DS-GVO.
2.1.2.3 Purpose of the processing
The processing of the IP address by the system is necessary to enable delivery of the website to the computer of the data subject. The storage in log files is carried out in order to protect the legitimate interests of the responsible party in ensuring comfortable use of the website, monitoring system security and stability, as well as preserving evidence and enabling prosecution in the event of a cyber attack, which prevail after a balancing of interests. The data may be used to compile anonymised statistics.
2.1.2.4 Storage period
Data in log files will be anonymised after 7 days unless the aforementioned purposes require longer storage.
2.1.2.5 Possibility of objection and removal
The regulations of Art. 21 DS-GVO apply to the right to object to processing that takes place on the basis of a balance of interests. As this processing is absolutely necessary to ensure the functionality and security of the information technology systems used, there is generally no possibility to object to the processing.
2.1.3 Website settings
This website stores your selected settings or the status of your consents for services used on the website. The settings options are displayed in the settings banner when you visit the website.
2.1.3.1 Scope of processing
The resources for managing user preferences are provided by servers of the controller. When you confirm your selected setting in the settings banner, the following data is stored in a cookie:
Validity period of the settings,
Unique identifier of the confirmation,
Setting or consent that was confirmed,
Domain of the page for which the settings were confirmed.
2.1.3.2 Storage and access to data in the browser
The following cookie can be stored and read in your browser to manage your setting or consent. If you delete this cookie, all stored settings will be deleted and any consent given will be revoked. The website will then use the respective default settings for the respective services.
Designation Functional duration Access to third-party pages Domain type
borlabs-cookie 1 year no sven-giegold.de First-Party Cookie
2.1.3.3 Legal basis of processing
The legal basis of the processing is Art. 6 para. 1 lit. f DS-GVO.
2.1.3.4 Purpose of the processing
The purpose of the processing is to provide data subjects with an effective way of controlling automated processing and granting consent when calling up the website. The storage of the data in the browser is necessary for the cross-page application of the setting or consent.
2.1.3.5 Storage period
No personal data is stored on the server as part of the administration of user settings. The storage period of the pseudonymised identifier depends on the cookie function duration.
2.1.3.6 Possibility of objection and removal
The regulations of Art. 21 DS-GVO apply to the right to object to processing that takes place on the basis of a weighing of interests. Since the processing is absolutely necessary to ensure the function of our website, there is generally no possibility to object to the processing.
<a href=”#” class=”borlabs-cookie-preference”>Open Settings</a>
2.2 Optional processing when visiting our website
2.2.1 YouTube videos
On this website, videos are embedded that are loaded from servers of the YouTube platform. YouTube is a platform of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”). Google acts as a third party in this service relationship.
2.2.1.1 Scope of processing
If you have consented to the display of videos from the YouTube platform and call up a page of this website that embeds videos from the YouTube platform, your browser establishes connections to Google servers in the USA in order to load resources for the video component, thumbnails and fonts. In the process, your IP address, the address of the page you visited and information about the browser and operating system used are transmitted. Google can associate this information with your personal Google account, provided you are logged in at the time of the page view. Configuration data is stored on your device, which the YouTube platform can use to recognise the browser you are using and apply any user settings you have made.
On this website, videos from the YouTube platform are embedded in the so-called extended data protection mode. This instructs YouTube not to store cookies with advertising profile identifiers or data on user behaviour. This setting only applies to the videos from the YouTube platform that we embed and has no effect on other videos or links that you may be able to access via a displayed video. You can find more information on the Google pages:
To the extended data protection mode
Google’s privacy policy and terms of use
2.2.1.2 Storage and access to data in the browser
By embedding videos from the YouTube platform, the following data can be stored and read in your browser:
Designation Function duration Access to third-party pages Domain type
yt-player-bandwith Permanent yes .youtube-nocookie.com Local Storage
yt-player-headers-readable Persistent yes .youtube-nocookie.com Local Storage
yt-remote-connected-devices Persistent yes .youtube-nocookie.com Local Storage
yt-remote-device-id Persistent yes .youtube-nocookie.com Local Storage
yt-remote-fast-check-period Session yes .youtube-nocookie.com Session Storage
yt-remote-session-app Session yes .youtube-nocookie.com Session Storage
yt-remote-session-name Session yes .youtube-nocookie.com Session Storage
2.2.1.3 Legal basis for processing
The legal basis of the processing is Art. 6 para. 1 lit. a DS-GVO.
2.2.1.4 Purpose of the processing
The purpose of the processing is to display videos from the YouTube platform on the website. YouTube provides the necessary storage space and technical infrastructure for the provision of the video content. By publishing the video content via the YouTube platform or retrieving it from the platform, a higher reach can be achieved.
2.2.1.5 Data transfer to third countries
Google also transfers and processes your data in third countries, such as the USA, for which there is no EU Commission adequacy decision. There are no equivalent guarantees for the transfer of your IP address, so that compliance with the data protection laws applicable in the EU and your rights cannot be guaranteed. If you nevertheless consent to the display of videos from the YouTube platform, the processing is carried out on the basis of your consent to the transmission without guarantee as defined in Art. 49 (1) lit. a DS-GVO.
2.2.1.6 Storage period
The controller does not store any personal data in the context of embedding videos from the YouTube platform. For information on Google’s criteria for storing connection data that is generated, please refer to Google’s data storage policy.
2.2.1.7 Possibility of objection and removal
You can view the status of your consent via the Consent Manager and revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out until the revocation. Your decision to use the service is stored in a cookie. It is only valid for this browser and must be renewed after the stated period of validity has expired.
<a href=”#” class=”borlabs-cookie-preference”>Open settings</a>.
2.2.2 Vimeo videos
Videos from the Vimeo platform, which is operated by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA (hereinafter: “Vimeo”), are embedded on this website. Vimeo acts as a third party in this service relationship.
2.2.2.1 Scope of processing
If you call up a page of our website on which videos from Vimeo are embedded and have consented to the embedding of Vimeo videos, your browser establishes a connection to Vimeo servers in order to load resources for the video component or thumbnails. In the process, your IP address, the address of the visited page and technical connection data are transmitted to a Vimeo server in the USA. In addition, when the videos are activated, a cookie is saved to your browser, by means of which Vimeo can recognise your browser and collect data on your use of the Vimeo platform.
2.2.2.2 Storage and access to data in the browser
By embedding videos from the Vimeo platform, the following data can be stored and read in your browser. For further information, please refer to Vimeo’s information on cookies used.
Designation Functional duration Access to third-party pages Domain type
vuid 2 years yes vimeo.com Third-Party Cookie
2.2.2.3 Legal basis of processing
The legal basis of the processing is Art. 6 para. 1 lit. a DS-GVO.
2.2.2.4 Purpose of the processing
The purpose of the processing is to display videos from the Vimeo platform on the website. Vimeo provides the necessary storage space and technical infrastructure for the provision of the video content.
2.2.2.5 Data transfer to third countries
Vimeo also transmits and processes your data in third countries such as the USA, for which no adequacy decision of the EU Commission exists. There are no equivalent guarantees for the transfer of your IP address, so that compliance with the data protection laws applicable in the EU and your rights cannot be guaranteed. If you nevertheless consent to the display of videos from the Vimeo platform, the processing is carried out on the basis of your consent to the transmission without guarantees as defined in Art. 49 (1) lit. a DS-GVO.
<a href=”#” class=”borlabs-cookie-preference”>Open settings</a>.
2.2.2.6 Storage period
The controller does not store any personal data in the context of embedding videos from the Vimeo platform. Information on Vimeo’s criteria for storing accruing connection data can be found in the information on Vimeo’s data storage.
2.2.2.7 Possibility of objection and removal
You can view the status of your consent via the Consent Manager and revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out until the revocation. Your decision to use the service is stored in a cookie. It is only valid for this browser and must be renewed after the stated period of validity has expired.
<a href=”#” class=”borlabs-cookie-preference”>Open settings</a>.
2.2.3 SoundCloud audio content
This website integrates audio content from the SoundCloud platform, which is operated by SoundCloud Global Limited & Co. KG, Rheinsberger Str. 76/77, 10115 Berlin (hereinafter: “SoundCloud”). SoundCloud acts as a third party in this service relationship.
2.2.3.1 Scope of processing
When you access a page of our website on which audio content from SoundCloud is embedded and have consented to the embedding of SoundCloud content, your browser establishes a connection to SoundCloud servers in order to load the necessary resources for the audio player. In the process, your IP address, the address of the visited page and technical connection data are transmitted to a SoundCloud server in the USA. SoundCloud can assign this information to your personal SoundCloud account, provided you are logged in at the time of the page view.
2.2.3.2 Storage and access to data in the browser
By embedding content from the SoundCloud platform, the following data can be stored and read in your browser. For further information, please refer to SoundCloud’s information on cookies used.
Designation Functional duration Access possibility to third-party pages Domain type
WIDGET::local::assignments persistent yes .soundcloud.com local storage entry
WIDGET::local::broadcast persistent yes .soundcloud.com Local-Storage entry
sclocale 1 year yes .soundcloud.com Third-Party Cookie
2.2.3.3 Legal basis of processing
The legal basis of the processing is Art. 6 para. 1 lit. a DS-GVO.
2.2.3.4 Purpose of the processing
The purpose of the processing is the playback of content from the SoundCloud platform on the website. SoundCloud provides the necessary storage space and technical infrastructure for the provision of the audio content.
2.2.3.5 Data transfer to third countries
SoundCloud also transfers and processes your data in third countries such as the USA, for which there is no adequacy decision by the EU Commission. In these cases, SoundCloud bases the transfer on standard contractual clauses with the recipient, which oblige the recipient to ensure European data protection law in the third country as well and thus provide an appropriate guarantee for the protection of personal data within the meaning of Art. 46 (2) lit. c DS-GVO.
2.2.3.6 Storage period
The controller does not store any personal data in the context of embedding content from the SoundCloud platform. For more information on the storage of data by SoundCloud, please refer to the provider’s privacy policy.
2.2.3.7 Possibility of objection and removal
You can view the status of your consent via the Consent Manager and revoke a granted consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out until the revocation. Your decision to use the service is stored in a cookie. It is only valid for this browser and must be renewed after the stated period of validity has expired.
<a href=”#” class=”borlabs-cookie-preference”>Open settings</a>.
2.2.4 Google Maps
This website uses the Google Maps service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”). Google acts as a third party in this service relationship.
2.2.4.1 Scope of processing
If you have consented to the display of maps from the Google Maps platform and call up a page of the website that embeds maps from Google Maps, your browser will establish connections to Google servers in the USA in order to load map data. In the process, your IP address, the address of the visited page and information on the browser and operating system used will be transmitted. Google also stores a cookie with a unique identifier in your browser at the time of embedding maps from the Google Maps platform, which is used by Google to recognise your browser and apply user settings, as well as for advertising purposes. The use of the map content provided by Google on the Google Maps platform is subject to Google’s terms of use and the additional terms of use for the Google Maps service. In this respect, visitors enter into a direct usage relationship with Google when using Google Maps. Further information can be found on the Google website:
To the terms of use for Google Maps
Google’s privacy policy and terms of use
2.2.4.2 Storage and access to data in the browser
By embedding maps from the Google Maps platform, the following cookies can be stored and read in your browser. For further information, please refer to the information provided by Google on the types of cookies used.
Designation Functional duration Access to third-party pages Domain type
NID 6 months yes .google.com Third-party cookie
2.2.4.3 Legal basis of processing
The legal basis of the processing is Art. 6 para. 1 lit. a DS-GVO.
2.2.4.4 Purpose of the processing
The purpose of the embedding is the display of geographical maps of the Google Maps platform on the website. The display of the maps in combination with location information serves to improve the user-friendliness of our offer.
2.2.4.5 Data transfer to third countries
Google also transmits and processes your data in third countries such as the USA, for which there is no adequacy decision by the EU Commission. Google has committed itself to the responsible party in standard contractual clauses to guarantee European data protection law in the third country as well and thus offers a suitable guarantee for the protection of personal data within the meaning of Art. 46 (2) lit. c DS-GVO.
2.2.4.6 Storage period
The controller does not store any personal data in the context of embedding maps from the Google Maps platform. For information on Google’s criteria for the storage of accruing connection data, please refer to Google’s data storage guidelines.
2.2.4.7 Possibility of objection and removal
You can view the status of your consent via the Consent Manager and revoke consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out until the revocation. Your decision is stored in a cookie. It is only valid for this browser and must be renewed after the specified period of validity has expired.
<a href=”#” class=”borlabs-cookie-preference”>Open Settings</a>
2.2.5 Content from Twitter
This website includes content from the Twitter platform, which is operated by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (hereinafter: “Twitter “). Twitter acts as a third party in this service relationship.
2.2.5.1 Scope of processing
If you call up a page of our website on which content from Twitter is embedded and have consented to the embedding of Twitter content, your browser establishes a connection to Twitter servers in order to load the necessary resources for embedding the content. In the process, your IP address, the address of the visited page and technical connection data are transmitted to a Twitter server in the USA. In addition, configuration data is stored in your browser. Any further processing of your data is governed by Twitter’s data protection regulations.
2.2.5.2 Storage and access to data in the browser
By embedding content from the Twitter platform, the following data can be stored and read in your browser:
Designation Functional duration Access to third-party pages Domain type.
__widgetsettings Permanent yes platform.twitter.com Local-Storage entry
local_storage_support_test Permanent yes platform.twitter.com Local-Storage entry
2.2.5.3 Legal basis for processing
The legal basis of the processing is Art. 6 para. 1 lit. a DS-GVO.
2.2.5.4 Purpose of the processing
The purpose of the processing is the integration of content from the Twitter platform in order to inform visitors to the website about activities and the topics of the controller as well as relevant activities of others.
2.2.5.5 Data transfer to third countries
Twitter also transfers and processes your data in third countries, such as the USA, for which there is no EU Commission adequacy decision. In these cases, Twitter bases the transfer on standard contractual clauses with the recipient, which oblige the recipient to ensure European data protection law in the third country as well and thus provide a suitable guarantee for the protection of personal data as defined in Art. 46 (2) lit. c DS-GVO.
2.2.5.6 Storage period
The controller does not store any personal data in the context of embedding content from the Twitter platform. Further information on the storage of data by Twitter can be found in the privacy policy of the provider. The data stored in log files will be deleted by Twitter after 18 months at the latest.
2.2.5.7 Possibility of objection and removal
You can view the status of your consent via the Consent Manager and revoke a granted consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out until the revocation. Your decision to use the service is stored in a cookie. It is only valid for this browser and must be renewed after the specified period of validity has expired.
<a href=”#” class=”borlabs-cookie-preference”>Open Settings</a>
2.3 Processing when using our offer
2.3.1 Information on links to social media platforms
On this page you will find links to the social media platforms Facebook and Twitter. The responsible party for the Facebook platform is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: “Facebook”). The responsible party for the Twitter platform is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (hereinafter: “Twitter”).
The links to Facebook or Twitter may contain parameters that transfer different information when called up, depending on the platform, in order to be able to use interactive functions. When merely calling up pages of our website, no data is transmitted to social media providers.
If you call up such an interactive link (“share on Facebook” or “share on Twitter”), Facebook or Twitter receive the information that you have visited the corresponding sub-page of our website, regardless of whether you are registered or logged in with the service provider. If you are logged in to the respective service provider at the time of the visit, this information is assigned to your user account and may be displayed publicly. Furthermore, the provider will process your IP address, information on the browser and device used and data collected on the respective platform and possibly store cookies on your device and process your data in third countries. We have no influence on the type and scope of the processing of personal data on the pages of the service provider and merely link to their offer. For further information on data processing by the respective provider, please refer to the data protection information of Facebook or the data protection information of Twitter.
2.3.2 Newsletter subscription
You have the option of subscribing to a newsletter via the website. The delivery of the newsletter emails and administration of subscriptions is carried out within the framework of order processing by SYSTOPIA Organisationsberatung GmbH, Adenauerallee 12-14, 53113 Bonn (hereinafter: “SYSTOPIA”) and in certain cases by the association Europe Calling e.V. Artilleriestr. 6 – 27283 Verden / Aller.
2.3.2.1 Scope of processing
The scope of processing depends on the respective purpose of processing:
2.3.2.1.1 Subscriptions
If you subscribe to a newsletter via our website, the data entered in the subscription form (title, first name, surname, e-mail address) as well as other voluntary data are processed in order to prepare the subscription and for the purpose of sending an e-mail confirming the subscription. The confirmation e-mail contains a link which, when called up, transmits the information that the recipient has confirmed the registration. Confirmed e-mail addresses are transferred to a subscription management system. All subscriptions and unsubscriptions are stored by our system. In the process, your e-mail address and IP data are recorded for the times of registration, confirmation and unsubscription.
2.3.2.1.2 Newsletter tracking
The e-mails sent may contain so-called web beacons or tracking pixels which are loaded by our system when a newsletter e-mail is opened. In the process, your IP address and information on the device used are transmitted. The links contained in the e-mails transmit the information that the link from the respective newsletter e-mail has been opened to our system when it is called up.
2.3.2.2 Legal basis of processing
The legal basis of the processing of registration data is Art. 6 para. 1 lit f. DS-GVO. The processing for the delivery of newsletters, the administration of subscriptions and the analysis of user behaviour is based on your consent pursuant to Art. 6 para. 1 lit. a DS-GVO. The declaration of consent is made by calling up the confirmation link sent. Reference is made to this data protection declaration in the confirmation e-mail. The legal basis for storing the registration, confirmation and unsubscription data is Art. 6 para. 1 lit. f DS-GVO.
2.3.2.3 Purpose of processing
The purpose of processing data from the newsletter registration form is to send a confirmation email and our legitimate interest in providing a registration option for the newsletter. Confirmed email addresses are used to send the newsletter emails and manage subscriptions. The processing of data transmitted when newsletters are opened or when links contained therein are called up is carried out in order to compile reports on the opening and click-through rates. Registration, confirmation and unsubscription data are stored to protect our legitimate interest in providing evidence to defend against possible legal claims.
2.3.2.4 Storage period
After unsubscribing from the newsletter or in the event of revocation of your declaration of consent, we retain registration, confirmation and unsubscription data for 3 years.
2.3.2.5 Possibility of objection and removal
You can cancel the subscription or your declaration of consent at any time using the unsubscribe option provided in the newsletter or by sending an e-mail to us with effect for the future. The revocation of the consent does not affect the lawfulness of the processing carried out until the revocation. Furthermore, the regulations of Art. 21 DS-GVO apply to the right to object to processing that takes place on the basis of a balancing of interests. As far as the provision of evidence for the defence against possible legal claims is concerned, there is generally no possibility to object to the processing.
2.3.2.6 Joint responsibility for the newsletter
Sven Giegold and Europe Calling e.V. are jointly responsible for the processing of the data and addresses collected in the Europe Calling webinars. Europe Calling e.V. is responsible for the technical administration, including the sending of messages as well as the administration, maintenance and further development of the software used and thus also of the users’ data. In addition, Europe Calling e.V. will in future also be responsible for part of the content of the newsletter and will send it out under sole or joint responsibility. Sven Giegold also takes care of part of the content of the newsletter and sends messages in sole or joint responsibility. This division of responsibility makes it possible to ensure that the newsletter is sent out in the usual quality. This is in the legitimate interest of Sven Giegold as well as Europe Calling e.V. and ultimately also of all users (Art. 6 para. 1 lit. f) DSGVO) and justifies the necessary processing of personal data.
Of course, this does not result in any disadvantage for the users. Users can declare all rights as data subjects – including revocation – both to the association and to Sven Giegold, whereby we ask you to primarily contact the association.
Privacy policy of Sven Giegold: https://europe-calling.de/en/privacy/
2.3.3 Offers via the Action Network platform
The data controller uses the Action Network platform of Action Squared Inc, 1900 L Street NW, Suite 900, Washington, USA (hereinafter: “Action Squared”). Action Squared acts as a processor in this service relationship.
2.3.3.1 Scope of processing
When you register for an event or use other offers on the Action Network platform, a contact record is stored for the data collected in the form (usually first name, surname, email address, postcode and country, and postal address if applicable). Your consent to receive general e-mail messages is also obtained in the form and the subscription status is stored in the contact entry. Irrespective of your consent to receive general e-mail messages, you may receive messages by e-mail relating to the specific offer used, e.g. in the case of events, a registration confirmation or date reminder.
Depending on your continued use of the offers for which the responsible party uses the Action Network platform, additional data will be added to your contact record if you reuse the previously provided email address in the form of the offer or if the use of the offer is connected to this email address:
Name and date of the action for which you filled in a form;
Emails sent to the email address and whether emails were opened or links contained therein were accessed;
Letters sent to a postal address, if any;
Name of a fundraising campaign, date of a donation and donation amount.
The collection of data for opening e-mail messages is carried out by means of so-called web beacons or tracking pixels, which are loaded when an e-mail message is opened. An encrypted identifier is transmitted, which can be used to assign the opening to an e-mail address. This identifier is also transmitted when the links contained in the e-mail messages are called up.
2.3.3.2 Legal basis of processing
The legal basis of the processing of your data for the use of the offers for which the controller uses the Action Network platform is your consent pursuant to Art. 6 (1) lit. a DS-GVO. The delivery of general e-mail messages is based on your consent in this regard. If the processing is aimed at the initiation or fulfilment of a contract, the legal basis is Art. 6 (1) lit. b DS-GVO.
2.3.3.3 Purpose of the processing
The data controller processes your data for the purposes of the offer you use in each case. This may be the preparation and implementation of an event, the creation of petitions, the subscription to e-mail information or the implementation of fundraising campaigns. Another purpose of the processing is to track past interactions with you so that the data controller can inform you about offers that are of interest to you or where your engagement is desired from the moment you opt-in to receive general email communications.
2.3.3.4 Data transfer to third countries
Action Squared also transfers and processes your data in third countries such as the USA, for which there is no adequacy decision by the EU Commission. Action Squared has committed itself in standard contractual clauses to ensure European data protection law in the third country as well and thus offers a suitable guarantee for the protection of personal data as defined in Art. 46 (2) lit. c DS-GVO.
2.3.3.5 Storage period
Your data will be deleted if you revoke your consent to the processing of your data for the use of the offers for which the controller uses the Action Network platform and there is no other legal basis for the processing of your data.
2.3.3.6 Possibility of objection and removal
You can revoke any consent you have given at any time. The revocation of consent does not affect the lawfulness of the processing carried out until the revocation. To withdraw your consent to receive general e-mail messages, you can use the unsubscribe option provided in the e-mail messages at any time. To withdraw your consent to the processing of your data for the use of the offers for which the controller uses the Action Network platform, you can reach us at the contact details provided.
2.4 Processing in case of contact with you
2.4.1 WhatsApp channel
The data controller provides an information service that is not automated but manually operated by employees, for which the messenger service WhatsApp Business of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter: “WhatsApp”) is used. WhatsApp is a subsidiary of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: “Facebook”). WhatsApp acts as a third party in this service relationship.
2.4.1.1 Scope of processing
If you subscribe to the WhatsApp channel as described at https://sven-giegold.de/whatsapp/, your mobile phone number registered with WhatsApp as well as your first and last name and profile picture, if any, together with other data you send to the WhatsApp channel will be processed. Your mobile number will be included in a so-called “broadcast” list of a maximum of 256 persons, by means of which messages can be sent to several channel subscribers at the same time. Your mobile phone number and any messages you send to the WhatsApp channel are not visible to other channel subscribers – in any case, the communication remains 1:1 between the person responsible or his/her employees and the subscriber. If WhatsApp itself processes address, communication or other personal data for its own purposes and/or sends it to third parties such as Facebook, this processing is governed exclusively by the terms of use and data protection provisions of WhatsApp, to which WhatsApp users have agreed when creating a WhatsApp user account. The controller has no influence on the processing of your data by WhatsApp.
2.4.1.2 Legal basis for processing
The legal basis for the processing of personal data by the controller in the context of communication with you is Art. 6 (1) lit. f DS-GVO.
2.4.1.3 Purpose of processing
The purpose of the processing is to enable direct communication between the controller and channel subscribers. WhatsApp channel subscribers receive information on the activities and topics of the controller. If data subjects provide a postcode or country when subscribing, this information is used to display region-specific content. The processing for these purposes constitutes a legitimate interest on the part of the controller after a balancing of interests, as only data of data subjects who have in turn expressed an interest in receiving this information by registering for the channel are processed. The data collected will not be processed by the data controller for other purposes and will not be passed on to third parties.
2.4.1.4 Data transfer to third countries
WhatsApp will process your personal data in countries outside the European Economic Area. According to WhatsApp, the transfer of personal data to third countries takes place on the basis of adequacy decisions of the European Commission regarding specific countries or standard contractual clauses approved by the European Commission.
2.4.1.5 Storage period
Your data will be stored by the data controller for the duration of the existing channel subscription. Your data will also be deleted if you send a message to the channel with the content “Delete all data”. Please note that the responsible party has no influence on WhatsApp possibly storing the data beyond this.
2.4.1.6 Possibility of objection and removal
The provisions of Art. 21 DS-GVO apply to object to processing that takes place on the basis of a balance of interests. If you no longer wish to subscribe to the channel or object to the processing of your data, please send a message to the channel with the content “stop” or “please unsubscribe”.
2.4.2 Contacting us
On this website, contact details such as addresses, telephone numbers and e-mail addresses are provided to enable you to quickly contact and communicate directly with the data controller and the contact persons working for the data controller.
2.4.2.1 Scope of processing
The personal data you provide, depending on the chosen means of communication, will be processed. This may include your full name, address, the telephone number used, the e-mail address used and other personal data that you provide in the course of the communication.
2.4.2.2 Legal basis for processing
The legal basis for the processing of personal data in the course of communication with you is Art. 6 (1) lit. f DS-GVO. If the purpose of contacting you is to initiate or fulfil a contract, the additional legal basis for processing is Art. 6 (1) lit. b DS-GVO.
2.4.2.3 Purpose of processing
We process your data for processing the purpose of contacting you, for communicating with you and for the purpose of following up on communications that have taken place. These purposes also constitute our legitimate interest in processing.
2.4.2.4 Storage period
The data is deleted as soon as it is no longer required to achieve the purpose for which it was stored. The assessment of this depends on the circumstances of the individual case. In all other respects, the general provisions on the storage period shall apply.
2.4.2.5 Possibility of objection and removal
The provisions of Art. 21 DS-GVO apply to the objection to processing that takes place on the basis of a balancing of interests. The objection may be opposed by the necessity of processing the data to initiate a contract, fulfil a contract or provide evidence.
2.4.3 Applications
When you send your application to the data controller, your data will be processed as described below:
2.4.3.1 Scope of processing
In the application process, your personal data from your sent application documents, such as contact details, information on your education, qualifications, work experience and skills, as well as telephone or verbal information, if applicable, will be processed. Your personal data will only be disclosed by the person responsible to persons within his or her area of responsibility who are involved in the decision to establish an employment relationship. Insofar as administrators necessarily have access to the data processed, they are bound to secrecy and may not process the data for other purposes.
Your data will only be disclosed to third parties if and insofar as this is necessary to fulfil contractual and legal obligations of the data controller or to protect its legitimate interests (e.g. in a legal dispute) or your consent has been given. Your consent is voluntary and is not related to the current application process.
2.4.3.2 Legal basis for processing
The legal basis for the processing of personal data in the current application procedure or in the event of the establishment of an employment relationship is Art. 88 DS-GVO in conjunction with. § Section 26 para. 1 sentence 1 BDSG-neu and Art. 6 para. 1 lit. b DS-GVO. The storage of personal data after the end of the application procedure without the establishment of an employment relationship is Art. 6 para. 1 lit. f DS-GVO. If processing is based on your consent, Art. 6 para. 1 lit. a DS-GVO is the legal basis for the processing.
2.4.3.3 Purpose of processing
Your data will be processed for the purpose of deciding whether to establish an employment relationship with you. If your application is successful, the personal data already received from you will be further processed for the purposes of the employment relationship. If you cannot be offered employment, reject a job offer or withdraw your application, your data may be retained to protect the data controller’s legitimate interest in retaining evidence for the purpose of asserting, exercising or defending against legal claims and may be further processed in the event of litigation.
2.4.3.4 Storage period
Your personal data will be stored as long as it is necessary for the decision on your application. If no employment relationship is established, your personal data will be deleted 6 months after the end of the application process. Longer storage without your express consent will only take place if it is necessary for the assertion, exercise or defence against legal claims for the duration of a legal dispute. If you have consented to longer storage, the duration will depend on the content of your consent. If an employment relationship, apprenticeship or trainee relationship is established following the application process, your data will be transferred to the personnel file and deleted in accordance with the regulations applicable to personnel files.
2.4.3.5 Possibility of objection and removal
Consent given can be revoked at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out until the revocation. You can reach the responsible person for this purpose under the contact details provided.
2.4.4 Online meetings with Zoom
The data controller uses the Zoom service of the operating company Zoom Video Communications Inc, 55 Almaden Blvd, Suite 600, San Jose, CA 95113 (hereinafter: “Zoom”). Zoom is a communication service for online meetings and video telephony. Zoom acts as a processor in this service relationship.
2.4.4.1 Scope of processing
It is also possible to use Zoom to participate in online meetings without downloading the Zoom app or browser extension. To do so, access the invitation link and then decline to download the Zoom app and click on “launch it from your browser”.
If you use the Zoom app or Zoom browser extension, Zoom is solely responsible for the processing of your data associated with these applications.
The extent of the processing of personal data depends on the data you provide before or when participating in an online meeting. To participate, you must provide a name.
The following personal data may be processed:
User details: first name, last name, phone (optional), email address, profile picture (optional), department (optional).
Meeting metadata: Topic, description (optional), participant IP addresses, device/hardware information.
For recordings (optional): MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of online meeting chat.
For dial-in with the telephone: information on incoming and outgoing call number, country name, start and end time.
Text, audio and video data: Text content, if applicable, from chat, question or poll function, video or audio data, if applicable, from shared video camera or microphone of your terminal, additional content, if applicable, in case of screen sharing or file sharing.
You can switch off or mute the camera or microphone at any time during an online meeting in the Zoom user interface. It is possible to record online meetings. If a recording is to take place, the consent of the participants is obtained beforehand. A running recording is displayed in the online meeting. In addition, text content in chats or surveys can be recorded. In addition, usage logs are created with meeting metadata. We do not use attention tracking technology in online meetings.
As a matter of principle, your data will not be disclosed to third parties unless it is intended for disclosure. Please note that content from online meetings, as well as face-to-face meetings, is often used to communicate information with interested parties or third parties and is therefore intended for disclosure.
2.4.4.2 Legal basis of processing
Insofar as the processing is necessary for the establishment, implementation or termination of an employment relationship, Section 26 (1) sentence 1 BDSG serves as the legal basis. If the purpose of conducting the online meetings is to otherwise initiate or fulfil a contract, the legal basis is Art. 6 para. 1 lit. b DS-GVO. In all other cases or in addition to the aforementioned cases, Art. 6 para. 1 lit. f DS-GVO is the legal basis for the processing. If video or audio recordings of online meetings are made, your consent pursuant to Art. 6 para. 1 lit. a DS-GVO serves as the legal basis.
2.4.4.3 Purpose of processing
The purpose of the processing is to conduct online meetings. This requires the use of effective communication software. This purpose also constitutes the controller’s legitimate interest in the processing. The logging of chat content or questions and answers in the case of online seminars may be necessary in individual cases for documentation purposes. The logging of meeting metadata is done for internal tracking of the conduct of or participation in online meetings. If recordings are to be made, you will be informed of the exact purpose before you give your consent.
2.4.4.4 Data transfer to third countries
Zoom also transfers and processes your data in third countries such as the USA, for which there is no adequacy decision by the EU Commission. Zoom has committed itself in standard contractual clauses to ensure European data protection law in the third country as well and thus offers a suitable guarantee for the protection of personal data within the meaning of Art. 46 para. 2 lit. c DS-GVO.
2.4.4.5 Storage period
Reports of online meetings (meeting metadata, telephone dial-in data) may be stored at Zoom for up to one year. If recordings of online meetings are made, the storage period depends on the purpose of the recording.
2.4.4.6 Possibility of objection and removal
The provisions of Art. 21 DS-GVO apply to the objection to processing that takes place on the basis of a balancing of interests. The objection may be opposed by the necessity to process the data for the performance of the contract or the provision of evidence. In the case of the creation of records, you have the possibility to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing that took place until the revocation.
2.4.5 Zoom Webinars
The Controller uses the Zoom Webinars service of the operating company Zoom Video Communications Inc, 55 Almaden Blvd, Suite 600, San Jose, CA 95113 (hereinafter: “Zoom”). Zoom acts as a processor in this service relationship.
2.4.5.1 Scope of Processing
Depending on the role you have been assigned in a Zoom webinar, you will have access to different features and information. The following terms are used below:
Host: Persons with this role are the organisers of the seminar and have access to administrative functions;
Discussants: Persons with this role are appointed by the organiser and actively participate in the content of the seminar;
Visitors: Persons with this role are spectators;
Participants: All persons who have one of the above roles.
2.4.5.1.1 Participation, registration
It is also possible to participate in Zoom webinars without downloading the Zoom app or browser extension. To do so, access the invitation link and then decline to download the Zoom app and click “launch it from your browser”. If you use the Zoom app or Zoom browser extension, Zoom is solely responsible for the processing of your data associated with these applications.
The webinars generally only require you to provide your name and email address to participate. Only if it is necessary for the implementation of a specific seminar will further data be collected from you in the participation form. Only the host has access to all data collected in the participation form. The list of participants, which contains the name of all participants, is only shown to the host and the discussion participants. If webinars are organised in cooperation with other persons or organisations, they will also receive the list of participants. This will be pointed out separately during registration.
In some cases, special participation links are used for publicly advertised seminars, which contain an encrypted identifier. The calls to these links are summarised in reports containing the following data:
Identifier of the link;
details in the participation form after calling up the link
date and time of registration.
2.4.5.1.2 Seminar chat, questions and answers
Depending on whether a chat or a question and answer function is permitted for the seminar, you can send text messages or questions. In the case of text messages, your name text message will be displayed to the circle of recipients. Questions from visitors can also be sent anonymously, depending on the settings for the webinar. Depending on the setting, the text messages or questions from visitors are only visible to the host or the discussion participants or to all visitors. In addition, the host may have allowed the possibility for private messages between visitors.
2.4.5.1.3 Video and audio data, recordings
As a rule, only the host and the discussion participants have the possibility to transmit their own video and audio data during the seminar. However, the host may also enable individual visitors to activate the microphone for the transmission of audio content. In this case, the audio data is transmitted to all participants. The microphone is always activated by the person concerned.
If a recording is to take place, the consent of the persons whose video or audio transmissions are to be recorded is obtained beforehand. In addition, surveys or questions and answers can be recorded.
2.4.5.1.4 E-mail messages before and after the seminar
Participants may be sent the following e-mail messages as part of their registration for or participation in a seminar:
Invitation e-mail for panellists
Registration confirmation for visitors
Appointment reminder
Notification after the end of the seminar to participants and registered persons who did not participate
2.4.5.2 Legal basis of processing
Insofar as the processing is necessary for the establishment, implementation or termination of an employment relationship, Section 26 (1) sentence 1 BDSG serves as the legal basis. If the implementation of the online seminars aims to otherwise initiate or fulfil a contract, the legal basis is Art. 6 para. 1 lit. b DS-GVO. In all other cases or in addition to the cases mentioned, Art. 6 para. 1 lit. f DS-GVO is the legal basis for the processing. If video or audio recordings of online seminars are made, your consent pursuant to Art. 6 para. 1 lit. a DS-GVO serves as the legal basis.
2.4.5.3 Purpose of the processing
The purpose of the processing is the effective implementation of online seminars. This requires the use of effective communication software. This purpose also constitutes the controller’s legitimate interest in the processing. The logging of information in participation forms, surveys or questions and answers is done for documentation purposes, improvement of seminar content and follow-up of seminars. Insofar as recordings of audio and video data are to be made, you will be informed of the exact purpose prior to your consent. The measurement of the used participation links is carried out for the analysis, evaluation and improvement of the range of the offer.
2.4.5.4 Data transfer to third countries
Zoom also transfers and processes your data in third countries such as the USA, for which there is no adequacy decision by the EU Commission. Zoom has committed itself in standard contractual clauses to ensure European data protection law in the third country as well and thus offers a suitable guarantee for the protection of personal data within the meaning of Art. 46 para. 2 lit. c DS-GVO.
2.4.5.5 Storage period
Reports on online seminars (participation link or participation form data, questions and answers, surveys) can be stored at Zoom for up to one year. If recordings are made of you during online seminars, the storage period depends on the purpose of the recording.
2.4.5.6 Possibility of objection and removal
The provisions of Art. 21 DS-GVO apply to the objection to processing that takes place on the basis of a balancing of interests. The objection may be opposed by the necessity to process the data for the performance of the contract or the provision of evidence. In the case of the creation of records, you have the possibility to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out until the revocation.