Privacy Policy for our website

and Privacy Policy for our social media profiles

Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to our privacy policy set out below this text.

Data collection on this website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the legal notice section of this website.

How do we collect your data?

Your data is collected, on the one hand, when you provide it to us. This may include, for example, data that you enter into a contact form.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This consists primarily of technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you access this website.

What do we use your data for?

Some of the data is collected to ensure the website functions correctly. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right at any time to obtain, free of charge, information about the source, recipients and purpose of your stored personal data. You also have the right to request the rectification or erasure of this data. If you have given your consent to data processing, you may withdraw this consent at any time with effect for the future. Furthermore, you have the right, under certain circumstances, to request the restriction of the processing of your personal data. You also have the right to lodge a complaint with the relevant supervisory authority.

For this and any further questions regarding data protection, you can contact us at any time at the address given in the legal notice.

Analytics tools and third-party tools

This website does not use any third-party analytics tools. Please refer to this privacy policy for information on how your data is used for our own purposes.

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may primarily include IP addresses, contact enquiries, meta and communication data, contractual data, contact details, names, website visits and other data generated via a website.

The use of the hosting provider is for the purpose of fulfilling our contractual obligations towards our potential and existing customers (Article 6(1)(b) of the GDPR) and in the interests of ensuring the secure, fast and efficient provision of our online services by a professional provider (Article 6(1)(f) of the GDPR).

Our hosting provider will only process your data to the extent necessary to fulfil its service obligations and will comply with our instructions regarding this data.

We use the following hosting provider:

Strato AG
Pascalstraße 10
10587 Berlin

Conclusion of a data processing agreement

To ensure that data is processed in accordance with data protection regulations, we have entered into a data processing agreement with our hosting provider.

General information and mandatory details

Data protection

The operator of this website takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various types of personal data are collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this is done.

Please note that data transmission over the internet (e.g. when communicating by email) may be subject to security vulnerabilities. It is not possible to guarantee complete protection of data against access by third parties.

Information on the data controller

The data controller for data processing on this website is:

Verein Kulturheimat Haldensleben e.V.
, represented by:
Ulf Dreyer
, Chairperson
, Gerikesstraße 3a
, 39340 Haldensleben

, Telephone: +49 3904 479 2230
, Email: ulf.dreyer@haldensleben.de

The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

Retention period

Unless a more specific retention period is stated in this privacy policy, your personal data will remain with us until the purpose for which it is processed no longer applies. If you make a valid request for erasure or withdraw your consent to data processing, your data will be erased, provided we have no other legally permissible grounds for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these grounds no longer apply.

Data collection on this website

Cookies

Our website uses so-called ‘cookies’. Cookies are small text files and do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser deletes them automatically.

In some cases, cookies from third-party companies may also be stored on your device when you visit our site (third-party cookies). These enable us or you to use certain services provided by the third-party company (e.g. cookies for processing payment services).

Cookies serve various purposes. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or the display of videos). Other cookies are used to analyse user behaviour or to display advertising.

Cookies that are required to carry out the electronic communication process (essential cookies) or to provide specific functions requested by you (functional cookies, e.g. for the shopping basket function) or to optimise the website (e.g. cookies for measuring website traffic) are stored on the basis of Article 6(1)(f) of the GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies to ensure the technically fault-free and optimised provision of its services. Where consent to the storage of cookies has been requested, the relevant cookies are stored exclusively on the basis of this consent (Article 6(1)(a) of the GDPR); consent may be withdrawn at any time.

You can configure your browser so that you are notified when cookies are set and can choose to allow cookies only on a case-by-case basis, to block the acceptance of cookies in specific cases or generally, and to enable the automatic deletion of cookies when you close your browser. If you disable cookies, the functionality of this website may be restricted.

Where cookies are used by third parties or for analytical purposes, we will inform you of this separately within this privacy policy and, where necessary, seek your consent.

Server log files

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.

These include:
browser type and version
, operating system
used, referrer URL
, hostname of the accessing computer
, time of the server request
, and IP address
. This data is not combined with other data sources.

The collection of this data is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in ensuring the technically fault-free display and optimisation of its website – to this end, the server log files must be collected.

Contact form

If you send us enquiries via the contact form, the details you provide in the enquiry form – including the contact details you enter there – will be stored by us for the purpose of processing your enquiry and in the event of any follow-up questions. We will not pass on this data without your consent.

The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your enquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR), provided that this has been requested.

The data you enter in the contact form will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

Enquiries by email or telephone

If you contact us by email, telephone or fax, your enquiry, including all personal data contained therein (name, enquiry), will be stored and processed by us for the purpose of dealing with your request. We will not pass on this data without your consent.

The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your enquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR), provided that this has been requested.

The data you send to us via contact enquiries will remain with us until you request its erasure, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.

Registration on this website

You can register on this website to use additional features on the site. We use the data you provide for this purpose solely for the purpose of using the specific offer or service for which you have registered. The mandatory details requested during registration must be provided in full. Otherwise, we will reject the registration.

In the event of important changes, such as to the scope of our services or technically necessary changes, we will use the email address provided during registration to inform you accordingly.

The data entered during registration is processed for the purpose of fulfilling the user relationship established by the registration and, where applicable, to initiate further contracts (Article 6(1)(b) of the GDPR).

We will store the data collected during registration for as long as you remain registered on this website, after which it will be deleted. Statutory retention periods remain unaffected.

Comment function on this website

For the comment function on this site, in addition to your comment, details of the time the comment was posted and, if you do not post anonymously, the username you have chosen are stored.

Storage of IP addresses

Our comments function stores the IP addresses of users who post comments. As we do not moderate comments on this website before they are published, we require this data to be able to take action against the author in the event of legal infringements such as insults or propaganda.

Subscribing to comments

As a user of the site, you can subscribe to comments once you have logged in. You will receive a confirmation email to verify that you are the owner of the email address provided. You can unsubscribe from this service at any time via a link in the notification emails. In this case, the data entered when subscribing to comments will be deleted; however, if you have provided this data to us for other purposes or elsewhere (e.g. when subscribing to a newsletter), we will retain this data.

Retention period for comments

Comments and the associated data (e.g. IP address) are stored and remain on this website until the content to which the comment relates has been completely deleted or the comments must be deleted for legal reasons (e.g. offensive comments).

Legal basis

Comments are stored on the basis of your consent (Article 6(1)(a) of the GDPR). You may withdraw any consent you have given at any time. To do so, simply send us an informal email. The lawfulness of any data processing operations that have already taken place remains unaffected by the withdrawal of consent.

Newsletter

Newsletter data

If you wish to subscribe to the newsletter offered on the website, we require your email address and information that enables us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter. No further data is collected, or is collected only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of data entered into the newsletter subscription form is carried out solely on the basis of your consent (Article 6(1)(a) of the GDPR). You may withdraw your consent to the storage of your data and email address, and to their use for sending the newsletter, at any time, for example via the ‘Unsubscribe’ link in the newsletter. The lawfulness of any data processing operations that have already taken place remains unaffected by this withdrawal.

The data you have provided to us for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter, and will be deleted from the newsletter distribution list once you have unsubscribed. Data stored by us for other purposes remains unaffected by this.

After you unsubscribe from the newsletter distribution list, your email address may be stored on a blacklist by us or the newsletter service provider to prevent future mailings. The data on the blacklist is used solely for this purpose and is not combined with any other data. This serves both your interests and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Article 6(1)(f) of the GDPR). There is no time limit on storage on the blacklist. You may object to this storage provided that your interests override our legitimate interest.

We maintain publicly accessible profiles on social media platforms. The specific social media platforms we use are listed below.

Social media platforms such as Facebook, Twitter, etc. can generally analyse your user behaviour in detail when you visit their website or a website featuring integrated social media content (e.g. ‘Like’ buttons or advertising banners). Visiting our social media pages triggers numerous data-processing operations relevant to data protection.

Specifically:

If you are logged into your social media account and visit our social media presence, the operator of the social media portal may associate this visit with your user account. However, your personal data may also be collected even if you are not logged in or do not have an account with the relevant social media portal. In this case, data is collected, for example, via cookies stored on your device or by recording your IP address.

Using the data collected in this way, the operators of the social media platforms can create user profiles that record your preferences and interests. In this way, interest-based advertising may be displayed to you both on and off the respective social media platform. If you have an account with the relevant social network, interest-based advertising may be displayed on all devices on which you are logged in or have previously been logged in.

Please also note that we are not able to track all data processing activities on the social media platforms. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media platforms. For details, please refer to the terms of use and privacy policies of the respective social media platforms.

Legal basis

Our social media presence is intended to ensure the most comprehensive online presence possible. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. The analysis processes initiated by the social networks may be based on different legal grounds, which must be specified by the operators of the social networks (e.g. consent within the meaning of Article 6(1)(a) of the GDPR).

Data controller and exercising your rights

When you visit one of our social media pages (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered by that visit. You may, in principle, exercise your rights (right of access, rectification, erasure, restriction of processing, data portability and the right to lodge a complaint) both against us and against the operator of the relevant social media platform (e.g. against Facebook).

Please note that, despite our joint responsibility with the social media platform operators, we do not have full control over the data processing operations carried out by the social media platforms. Our options depend largely on the corporate policy of the respective provider.

Retention period

Data collected directly by us via our social media presence is deleted from our systems as soon as the purpose for which it was stored no longer applies, you request its deletion, you withdraw your consent to its storage, or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.

We have no influence over the retention period of your data stored by the operators of social networks for their own purposes. For further details, please contact the operators of the social networks directly (e.g. via their privacy policy, see below).

Social networks in detail

Facebook

We have a profile on Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the data collected is also transferred to the USA and other third countries.

We have entered into a joint processing agreement (Controller Addendum) with Facebook. This agreement sets out which data processing operations we or Facebook are responsible for when you visit our Facebook page.
You can view this agreement via the following link:
https://www.facebook.com/legal/terms/page_controller_addendum.

You can adjust your advertising settings yourself in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads.

For further details, please refer to Facebook’s Privacy Policy: https://www.facebook.com/about/privacy.

Twitter

We use the short-message service Twitter. The provider is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.

You can adjust your Twitter privacy settings yourself in your user account. To do so, click on the following link and log in: https://twitter.com/personalization.

For further details, please refer to Twitter’s privacy policy: https://twitter.com/de/privacy.

YouTube

We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For details on how they handle your personal data, please refer to YouTube’s privacy policy: https://policies.google.com/privacy?hl=de.