Privacy Policy

1. Name and Contact Details of the Controller

This privacy policy provides information about the processing of personal data on the association website of:

Controller:
h2-netzwerk-ruhr e. V.
Doncaster-Platz 5
45699 Herten
Phone: 02366 / 305 300
Email: info@h2-netzwerk-ruhr.de

2. Scope and Purpose of Processing Personal Data

2.1 Accessing the Website

When accessing this website (https://h2-netzwerk-ruhr.de/), data is automatically sent to the server of this website by the internet browser used by the visitor and stored for a limited period in a log file. Until automatic deletion, the following data is stored without further input from the visitor:

• IP address of the visitor’s device,
• date and time of access by the visitor,
• name and URL of the page accessed by the visitor,
• website from which the visitor reached the association website (so-called referrer URL),
• browser and operating system of the visitor’s device as well as the name of the access provider used by the visitor.

The processing of this personal data is justified pursuant to Art. 6 (1) sentence 1 lit. f) GDPR. The association has a legitimate interest in data processing for the purpose of

• establishing the connection to the association’s website promptly,
• enabling user-friendly application of the website,
• identifying and ensuring the security and stability of the systems, and
• facilitating and improving the administration of the website.

The processing is expressly not carried out for the purpose of gaining insights about the person of the website visitor.

2.2 Use of Web Fonts

External fonts, Google Fonts, are used on these web pages. Google Fonts is a service of Google Inc. (“Google”). The integration of these web fonts is carried out through a server call, typically a Google server in the USA. This transmits the IP address of the browser of the visitor’s device to Google. Further information can be found in Google’s privacy policy, which can be accessed here:

www.google.com/fonts#AboutPlace:about

www.google.com/policies/privacy/

3. Disclosure of Data

Personal data is transmitted to third parties if

• the data subject has given explicit consent pursuant to Art. 6 (1) sentence 1 lit. a) GDPR,
• the disclosure is necessary pursuant to Art. 6 (1) sentence 1 lit. f) GDPR for the establishment, exercise, or defense of legal claims and there is no reason to assume that the data subject has an overriding legitimate interest in not disclosing their data,
• there is a legal obligation for data transmission pursuant to Art. 6 (1) sentence 1 lit. c) GDPR, and/or
• this is necessary pursuant to Art. 6 (1) sentence 1 lit. b) GDPR for the fulfillment of a contractual relationship with the data subject.

In other cases, personal data is not disclosed to third parties.

4. Your Rights as a Data Subject

Insofar as your personal data is processed when visiting our website, you have the following rights as a “data subject” within the meaning of the GDPR:

4.1 Access

You may request information from us as to whether personal data concerning you is being processed by us. The right to access is excluded if the data is stored only because it may not be deleted due to statutory or regulatory retention periods or serves exclusively for purposes of data backup or data protection control, provided that providing the information would require disproportionate effort and processing for other purposes is excluded by appropriate technical and organizational measures. If the right to access is not excluded in your case and your personal data is processed by us, you may request information from us about the following:

• purposes of processing,
• categories of personal data processed concerning you,
• recipients or categories of recipients to whom your personal data has been or will be disclosed, in particular recipients in third countries,
• if possible, the planned duration for which your personal data will be stored or, if this is not possible, the criteria for determining the storage period,
• the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by us or a right to object to such processing,
• the existence of a right to lodge a complaint with a data protection supervisory authority,
• if the personal data was not collected from you as the data subject, the available information about the data source,
• the existence of automated decision-making including profiling and meaningful information about the logic involved as well as the scope and intended effects of automated decision-making,
• in the case of transmission to recipients in third countries, if there is no decision by the EU Commission on the adequacy of the level of protection pursuant to Art. 45 (3) GDPR, information about which appropriate safeguards pursuant to Art. 46 (2) GDPR are provided to protect the personal data.

4.2 Rectification and Completion

If you determine that we hold inaccurate personal data concerning you, you may request that we rectify such inaccurate data without delay. In the case of incomplete personal data concerning you, you may request completion.

4.3 Erasure

You have a right to erasure (“right to be forgotten”), provided that processing is not necessary for exercising the right to freedom of expression, the right to information, or for compliance with a legal obligation or for the performance of a task carried out in the public interest, and one of the following grounds applies:

• The personal data is no longer necessary for the purposes for which it was processed.
• The legal basis for processing was exclusively your consent, which you have withdrawn.
• You have objected to the processing of your personal data that we have made public.
• You have objected to the processing of personal data not made public by us and there are no overriding legitimate grounds for processing.
• Your personal data has been processed unlawfully.
• The erasure of personal data is necessary for compliance with a legal obligation to which we are subject.

There is no right to erasure if, in the case of lawful non-automated data processing, erasure is not possible or only possible with disproportionate effort due to the special nature of storage and your interest in erasure is minimal. In this case, restriction of processing takes the place of erasure.

4.4 Restriction of Processing

You may request that we restrict processing if one of the following grounds applies:

• You contest the accuracy of the personal data. The restriction may be requested in this case for the period that enables us to verify the accuracy of the data.
• The processing is unlawful and you request restriction of use of your personal data instead of erasure.
• Your personal data is no longer needed by us for the purposes of processing, but you require it for the establishment, exercise, or defense of legal claims.
• You have lodged an objection pursuant to Art. 21 (1) GDPR. The restriction of processing may be requested as long as it has not yet been determined whether our legitimate grounds override your grounds.

Restriction of processing means that the personal data may only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest. Before we lift the restriction, we are obliged to inform you.

4.5 Data Portability

You have a right to data portability, provided that processing is based on your consent (Art. 6 (1) sentence 1 lit. a) or Art. 9 (2) lit. a) GDPR) or on a contract to which you are a party and processing is carried out by automated means. The right to data portability includes the following rights in this case, provided that this does not adversely affect the rights and freedoms of others: You may request that we provide you with the personal data you have provided to us in a structured, commonly used, and machine-readable format. You have the right to transmit this data to another controller without hindrance from us. Where technically feasible, you may request that we transmit your personal data directly to another controller.

4.6 Objection

If processing is based on Art. 6 (1) sentence 1 lit. e) GDPR (performance of a task in the public interest or in the exercise of official authority) or on Art. 6 (1) sentence 1 lit. f) GDPR (legitimate interest of the controller or a third party), you have the right to object at any time to the processing of personal data concerning you on grounds relating to your particular situation. This also applies to profiling based on Art. 6 (1) sentence 1 lit. e) or lit. f) GDPR. Following the exercise of the right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

You may object at any time to the processing of personal data concerning you for purposes of direct marketing. This also applies to profiling insofar as it is related to such direct marketing. Following the exercise of this right to object, we will no longer use the personal data concerned for purposes of direct marketing.

You have the option to communicate the objection informally by telephone, email, or to the association’s postal address listed at the beginning of this privacy policy.

4.7 Withdrawal of Consent

You have the right to withdraw consent given at any time with effect for the future. The withdrawal of consent may be communicated informally by telephone, email, or to our postal address. The withdrawal does not affect the lawfulness of data processing carried out on the basis of consent until receipt of the withdrawal. Following receipt of the withdrawal, data processing that was based exclusively on your consent will be discontinued.

4.8 Complaint

If you believe that the processing of personal data concerning you is unlawful, you may lodge a complaint with a data protection supervisory authority responsible for your place of residence or workplace or for the place of the alleged infringement.

5. Status and Update of This Privacy Policy

This privacy policy is dated July 4, 2018. We reserve the right to update the privacy policy when appropriate to improve data protection and/or to adapt to changed regulatory practice or case law.