PRIVACY POLICY AND DATA PROTECTION

This data protection declaration regulates the collection, processing and storage of data that arise when using our website. When dealing with the data collected, we observe the valid legal regulations of the Federal Republic of Germany and the European General Data Protection Regulation (GDPR) as well as the following obligations.

The following table of contents takes you directly to the corresponding data protection passages.

1. Data protection at a glance

General information on data collection on this website

The following information provides a simple overview of what personal data is collected and what happens to it when you visit our website. Personal data is all data with which you can be personally identified (e.g. name, address, email addresses, user behavior and IP address).

Detailed information on the subject of data protection and further details can be found in the following texts.

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. You can find their contact details in this data protection declaration under point 2.1.

How do we collect your data?

On the one hand, your data is collected by you communicating it to us. This can e.g. are data that you enter in a contact form, send us by email or communicate by phone.

Otherwise our IT systems automatically collect data when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page access). This data is recorded automatically as soon as you enter our website.

What do we use your automatically collected data for?

This data is collected to ensure that the website is provided correctly.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request that this data be corrected, blocked or deleted. You can contact us at any time at the address given in the imprint if you have any further questions about data protection. You also have the right to lodge a complaint with the responsible supervisory authority.

2. General information, mandatory information and your rights

We as the operator of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

When you use this website, various personal data are collected. Personal data is data with which you can be personally identified (e.g. name, address, email addresses, user behavior and IP address). This data protection declaration explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet can generally have security gaps (e.g. when communicating by email).

2.1 Note on the responsible body

The responsible body for data processing on this website is:

Jugend- & Kulturprojekt e.V.

Stefan Kiehne

Hechtstrasse 17

01097 Dresden

Telephone: +49 0351 8104 766

Email: info@jkpev.de

The responsible body is the natural or legal person who, alone or together with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).

2.2 Revocation of your consent to data processing and right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)

Right of withdrawal

Many data processing operations are only possible with your expressed consent or a legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR possible.

You can withdraw your consent at any time. All you need to do is send an informal email to info@jkpev.de. The legality of the data processing carried out before the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and direct advertising (Art. 21 GDPR)

If data processing is based on Art. 6 Para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons that arise from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data protection declaration. If you file an objection, we will no longer process your personal data concerned, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims ( Objection according to Art. 21 Para. 1 GDPR).

If your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is connected to such direct advertising. If you object, your personal data will then no longer be used for direct marketing purposes (objection under Art. 21 Para. 2 GDPR).

If you would like to exercise your right to object, just send an email to info@jkpev.de.

2.3 Right to lodge a complaint with the competent supervisory authority

In the event of violations of data protection law, the person concerned has the right to lodge a complaint with the responsible supervisory authority. The responsible supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based.

Specifically, this is for the federal state of Saxony:

The Saxon data protection officer

Andreas Schurig

Bernhard-von-Lindenau-Platz 1

01067 Dresden

Telephone: 03 51/49 3-5401

Fax: 03 51/49 3-5490

Email: saechsdsb@slt.sachsen.de

Homepage: http://www.datenschutz.sachsen.de

2.4 Right to data portability

You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another person responsible, this will only take place if it is technically feasible.

2.5 SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses an SSL or. TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http: //” to “https: //” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

2.6 Information, correction, blocking and deletion

Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient and the purpose of data processing and, if necessary, the right to correct, block or delete this data. You can contact us at any time at the address given above regarding this as well as further questions on the subject of personal data.

2.7 Right to restriction of processing

You have the right to request that the processing of your personal data be restricted. You can contact us at any time at the address given in the imprint. The right to restrict processing exists in the following cases:

If you contest the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the examination, you have the right to request that the processing of your personal data be restricted.

If the processing of your personal data happened / happens unlawfully, you can request the restriction of the data processing instead of the deletion.

If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request that the processing of your personal data be restricted instead of being deleted.

If you have filed an objection in accordance with Art. 21 Para. 1 GDPR, you and our interests must be weighed up. As long as it is not clear whose interests outweigh the rights, you have the right to request that the processing of your personal data be restricted.

If you have restricted the processing of your personal data, this data - apart from its storage - may only be obtained with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest the European Union or a Member State.

2.8 Disclosure of data in general

Your personal data will not be passed on to third parties for purposes other than those listed below.

We only pass on your personal data if:

You have given your express consent to this (Art. 6 Para. 1 lit. a GDPR),

the disclosure according to Art. 6 Para. 1 lit. f GDPR is required to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,

in the event that for the transfer pursuant to Art. 6 para. 1 lit. c GDPR there is a legal obligation, as well

this is legally permissible and according to Art. 6 Para. 1 lit. b GDPR is required for the processing of contractual relationships with you.

In cases where data processing in accordance with Art. 6 Para. 1 lit. f GDPR is operated, our legitimate interest is stated.

2.9 Objection to the use of the published contact details on this website

We would like to point out that we object in advance to the use of the contact data published on this website for commercial purposes, unless we have expressly consented to this. These include in particular: storage in data processing systems for the purpose of data trading and use for general advertising purposes (e.g. unsolicited sending of information material and advertising brochures by post or email). The operator of this website expressly reserves the right to take legal action in the event of unsolicited sending of advertising information, such as spam e-mails.

3. Data collection on our website

3.1 Cookies

Some websites use so-called cookies. Cookies do no damage to your computer and contain no viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

In general, cookies enable your browser to be recognized the next time you visit the website. So-called session cookies are automatically deleted as soon as you close your browser. You can find out which cookies we use for which purpose in the following text.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.

Cookies that are required to carry out the electronic communication process or to provide certain functions you require (e.g. shopping cart function, remain logged in or remember function or settings) are set on the basis of Art. 6 Para. 1 lit. f GDPR saved. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services.

The following cookies are stored by our website:

A session cookie

This cookie is generated when you visit this website. It is automatically deleted as soon as you close your browser after visiting the website.

The session ID of your browser is stored in our cookie on our web server. As a result, data can be stored on the server side in the session, which enables the website to operate optimally. These data are e.g.

Technical data for your browser (e.g. troubleshooting mode, suspected malicious bot)

Data from security graphics (e.g. from contact forms)

Recent commands (random IDs) executed on the website to prevent accidental duplication

Data on the previously visited page on this website

The session cookie generally does not contain any personal data.

The basis for the storage and processing of this cookie is a legitimate interest of the website operator in accordance with Art. 6 para. 1 lit. f GDPR for the technically error-free provision of its services.

A permanent cookie

This cookie is generated when you visit this website. It remains on your computer for 365 days and is then automatically deleted. After deletion, the next time you visit this website, this cookie will be created again.

Your visit preferences and website settings are stored in this cookie. These settings are e.g.

the status of knowledge of the general cookie notice (if available),

the selected font size (zoom level),

Individual privacy settings selected separately by you (prevention of the integration of e.g. Google Maps, Facebook plugins, tracking plugins, YouTube videos, etc. in this website)

your registration status if this website has an internal or protected area.

If this cookie is deleted, your selected data protection settings will also be deleted. In this case, you must therefore make the settings again using this data protection notice.

This permanent cookie does not contain any personal data.

The basis for the storage and processing of this cookie is a legitimate interest of the website operator in accordance with Art. 6 para. 1 lit. c and lit. f GDPR. Because it serves the technically error-free provision of the information on this website. Furthermore, we enable you to use convenience functions and also offer the legal option to deactivate individual third-party plugins on this website.

Other cookies

Insofar as other cookies (e.g. cookies for analyzing your surfing behavior) are stored, these are mentioned separately in this data protection declaration.

3.2 Logging script crashes and attacks on this website

The host of this website automatically collects and stores information about script crashes and attacks on this website in a database. This data is transmitted from your browser. The following data is saved:

IP address

User agent (string that provides information about the requesting browser and the operating system)

internal categorization of the client (robot yes or no?)

Referrer URL

Request destination including sent parameters (fields marked as password in the system are made unrecognizable)

Date and time of the server request

Access method to the web server

in the event of script crashes, the script environment and the affected point in the source code

This data is automatically deleted after 7 days.

This data is not merged with other data sources.

The basis for the storage and processing of this data is a legitimate interest of the website operator and the host in accordance with Art. 6 para. 1 lit. b and lit. f GDPR. The host is contractually obliged to the website operator to provide the website technically. To do this, the hoster will evaluate this protocol if necessary to ensure the stability and security of the website. Possible legal or technical measures in response to an attack cannot be excluded at this point. We also reserve the right to report the attack to early warning systems. In addition, the website operator has a legitimate interest in the technically error-free provision of its content and services.

3.3 Server log files

The host of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and version

Operating system used

Referrer URL

Host name of the accessing computer

Time of the server request

IP address

This data is not merged with other data sources.

The purpose of this data collection is

for the automated creation of simple usage statistics of the website by the web server (no tracking) and

to evaluate attacks on this website in order to get an overall picture of techn. Providing inquiries (evaluation only takes place if necessary).

These log files are saved for 30 days and then automatically deleted.

The basis for data processing is Art. 6 Para. 1 lit. b GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures. In addition, according to Art. 6 para. 1 lit. f DSGVO a legitimate interest of the website operator and the host to collect data about attacks on this website and to determine possible load peaks in order to ensure the security and stability of this website in the future.

3.4 Collection of personal data, use of (contact) forms

We observe the principle of data avoidance and data economy when collecting personal data, when contacting us, for example via a corresponding form, personal data is only collected and stored to the extent necessary.

If you send us inquiries using the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent.

The processing of the data entered in the contact form takes place exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can withdraw this consent at any time. All you need to do is send an informal email to info@jkpev.de. The legality of the data processing operations carried out before the revocation remains unaffected by the revocation.

The data entered by you in the contact form remains with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - especially retention periods - remain unaffected.

3.5 Processing of data (customer and contract data)

We collect, process and use personal data only insofar as they are necessary for the establishment, content or change of the legal relationship (inventory data). This is done on the basis of Art. 6 Para. 1 lit. b GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures. We only collect, process and use personal data about the use of our website (usage data) insofar as this is necessary to enable or bill the user for the use of the service.

The customer data collected will be deleted after the order has been completed or the business relationship has ended. Statutory retention periods remain unaffected.

4. Final notes

Up-to-dateness and change of this data protection declaration

This data protection declaration is currently valid from May 30, 2018.

We reserve the right to adapt this data protection declaration to new circumstances and changed framework conditions (legal or factual). You can call up and print out the current data protection declaration at any time on the website.