Politique de confidentialité

Thank you for your interest in our website and our donaton form for 24guteTaten e.V. (24GoodDeeds). The protection of your privacy is important to us. In the following we will inform you about the processing and handling of your data.

Personal data (usually referred to just as “data” below) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there.

Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “processing” refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not.

The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under our own control or in conjunction with others. We also inform you below about the third-party components we use to optimize our website and improve the user experience which may result in said third parties also processing data they collect and control.

Our privacy policy is structured as follows:

  1. Information about us as controllers of your data
    II. The rights of users and data subjects
    III. Information about the data processing
  1. Information about us as controllers of your data
  2. Definition

The privacy statement of 24GoodDeeds is based on the terminology used by the European directive and regulatory authority in the adoption of the General Data Protection Regulation (DS-GVO). Our privacy policy should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain in advance the terminology used.

We use the following terms in this privacy policy, including but not limited to:

  1. a)    personal data

‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

  1. b)    data subject

Data subject is every identifiable natural person, whose personal data is used for processing.

  1. c)    processing

‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

  1. d)    Restriction of processing

means the marking of stored personal data with the aim of limiting their processing in the future.

  1. e)    Profiling

profiling’ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;

  1. f)     Pseudonymisation

‘pseudonymisation’ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;

  1. g)    controller

controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

  1. h)    processor

‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

  1. i)      Recipient

‘recipient’ means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.

  1. j)      Third party

‘third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

  1. k)    Consent

‘consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

  1. Name and address of the responsible controller

The party responsible for this website (the “controller”) for purposes of data protection law is:

24guteTaten e.V.

Friedrichstraße 246

10969 Berlin

Germany

Tel.: 0170 5416805

E-Mail: info@24gutetaten.de

Website: 24-gute-taten.de

The controller’s data protection officer is:

Sven Bratschke

  1. The right of users and data subjects

With regard to the data processing to be described in more detail below, users and data subjects have the right

  • to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);
  • to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);
  • to the immediate deletion of data concerning them (cf. also Art. 17 DSGVO), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
  • to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);
  • to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR).

In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.

Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller’s future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.

III. Information about the data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.

Server data

For technical reasons, the following data sent by your internet browser to us or to our server provider will be collected, especially to ensure a secure and stable website: These server log files record the type and version of your browser, operating system, the website from which you came (referrer URL), the webpages on our site visited, the date and time of your visit, as well as the IP address from which you visited our site.

The data thus collected will be temporarily stored, but not in association with any other of your data.

The basis for this storage is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.

The data will be deleted within no more than seven days, unless continued storage is required for evidentiary purposes. In which case, all or part of the data will be excluded from deletion until the investigation of the relevant incident is finally resolved.

Cookies

a) Session cookies

We use cookies on our website. Cookies are small text files or other storage technologies stored on your computer by your browser. These cookies process certain specific information about you, such as your browser, location data, or IP address.

This processing makes our website more user-friendly, efficient, and secure, allowing us, for example, to display our website in different languages or to offer a shopping cart function.

The legal basis for such processing is Art. 6 Para. 1 lit. b) GDPR, insofar as these cookies are used to collect data to initiate or process contractual relationships.

If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 Para. 1 lit. f) GDPR.

When you close your browser, these session cookies are deleted.

b) Third-party cookies

If necessary, our website may also use cookies from companies with whom we cooperate for the purpose of advertising, analysing, or improving the features of our website.

Please refer to the following information for details, in particular for the legal basis and purpose of such third-party collection and processing of data collected through cookies.

c) Disabling cookies

You can refuse the use of cookies by changing the settings on your browser. Likewise, you can use the browser to delete cookies that have already been stored. However, the steps and measures required vary, depending on the browser you use. If you have any questions, please use the help function or consult the documentation for your browser or contact its maker for support. Browser settings cannot prevent so-called flash cookies from being set. Instead, you will need to change the setting of your Flash player. The steps and measures required for this also depend on the Flash player you are using. If you have any questions, please use the help function or consult the documentation for your Flash player or contact its maker for support.

If you prevent or restrict the installation of cookies, not all of the functions on our site may be fully usable.

Order processing

The data you submit when ordering goods and/or services from us will have to be processed in order to fulfil your order. Please note that orders cannot be processed without providing this data.

The legal basis for this processing is Art. 6 Para. 1 lit. b) GDPR.

After your order has been completed, your personal data will be deleted, but only after the retention periods required by tax and commercial law.

In order to process your order, we will share your data with the shipping company responsible for delivery to the extent required to deliver your order and/or with the payment service provider to the extent required to process your payment.

The legal basis for the transfer of this data is Art. 6 Para. 1 lit. b) GDPR.

Data transfer for fulfilment of contract

For fulfilment of the contract, we will pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the order process, we will forward payment data collected to the credit institution commissioned with the payment and any payment service providers commissioned by us to process the payments or to the selected payment service. In part, the selected payment service providers also collect this data themselves, provided that you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. In this respect, the privacy policy of the respective payment service provider applies.

Newsletter

In order to subscribe to the newsletter offered on our website, you can register via our form. We use the so-called double-opt-in procedure. A confirmation email is sent to your specified email address, with a request for confirmation. Registration will not take effect until you click on the activation link contained in the confirmation email. We use your data transmitted to us exclusively for sending the newsletter, which may contain information or offer about the activities of the association 24GoodDeeds. This includes general information about the club and the 24GoodDeeds Advent calendar, the individual funded projects and organizations as well as updates and information to the ordering process of the new Advent calendar.

We use rapidmail to send our newsletter. Your data will therefore be transmitted to rapidmail GmbH. The rapidmail GmbH is not allowed to use your data for purposes other than sending the newsletter. A passing on or a sale of your data is not allowed to rapidmail GmbH. To optimize our newsletter distribution and design, rapidmail evaluates how many people have read and / or clicked on the newsletter and provides us with this information. rapidmail is a German, certified newsletter software provider, which was carefully selected according to the legal requirements of the European Union and the Federal Republic of Germany.

You can revoke your consent to the storage of the data and its use for newsletter dispatch at any time, e.g. via the unsubscribe link in the newsletter.

Confirmation E-Mails for Orders

We use Mailgun to send out confirmation E-Mails of your order or any other E-mails regarding the order you may have done for the advent calendar. Your data will therefore be transmitted to Mailgun Technologies, Inc. Mailgun stores recipient email addresses activity iinformation in a hashed (pseudonymization) format. This data allows Mailgun to more accuraely pre-validate email addresses, detect potential risky senders who may damage IP reputation and help customers optimize their delivery process. This recipient data is only used as part of the delivery of Mailgun services. Mailgun follows the EU data regulation of GDPR and further information can be found here: www.mailgun.com/gdpr

Google Analytics

We use Google Analytics on our website. This is a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 (hereinafter: Google).

Through certification according to the EU-US Privacy Shield

www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that it will follow the EU’s data protection regulations when processing data in the United States.

The Google Analytics service is used to analyse how our website is used. The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our site.

Usage and user-related information, such as IP address, place, time, or frequency of your visits to our website will be transmitted to a Google server in the United States and stored there. However, we use Google Analytics with the so-called anonymization function, whereby Google truncates the IP address within the EU or the EEA before it is transmitted to the US.

The data collected in this way is in turn used by Google to provide us with an evaluation of visits to our website and what visitors do once there. This data can also be used to provide other services related to the use of our website and of the internet in general.

Google states that it will not connect your IP address to other data. In addition, Google provides further information with regard to its data protection practices at

www.google.com/intl/de/policies/privacy/partners,

including options you can exercise to prevent such use of your data.

You can prevent Google’s collection of data generated by the cookie and your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link : tools.google.com/dlpage/gaoptout?hl=en
As an alternative to the browser plug-in, you can click on this link to prevent the collection by Google Analytics on this website in the future. An opt-out cookie is stored on your device. If you delete your cookies, you must click the link again.

Facebook Plug-In

Our website uses the plug-in of the Facebook social network. Facebook.com is a service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. In the EU, this service is also operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, hereinafter both referred to as “Facebook.”

Through certification according to the EU-US Privacy Shield

www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Facebook guarantees that it will follow the EU’s data protection regulations when processing data in the United States.

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website.

Further information about the possible plug-ins and their respective functions is available from Facebook at

developers.facebook.com/docs/plugins/

If the plug-in is stored on one of the pages you visit on our website, your browser will download an icon for the plug-in from Facebook’s servers in the USA. For technical reasons, it is necessary for Facebook to process your IP address. In addition, the date and time of your visit to our website will also be recorded.

If you are logged in to Facebook while visiting one of our plugged-in websites, the information collected by the plug-in from your specific visit will be recognized by Facebook. The information collected may then be assigned to your personal account at Facebook. If, for example, you use the Facebook Like button, this information will be stored in your Facebook account and published on the Facebook platform. If you want to prevent this, you must either log out of Facebook before visiting our website or use an add-on for your browser to prevent the Facebook plug-in from loading.

Further information about the collection and use of data as well as your rights and protection options in Facebook’s privacy policy found at

www.facebook.com/policy.php

Twitter plug-in

Our website uses the plug-in of the Twitter social network. The Twitter service is operated by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA (“Twitter”).

Through certification according to the EU-US Privacy Shield

www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active

Twitter guarantees that it will follow the EU’s data protection regulations when processing data in the United States.

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website.

If the plug-in is stored on one of the pages you visit on our website, your browser will download an icon for the plug-in from Twitter’s servers in the USA. For technical reasons, it is necessary for Twitter to process your IP address. In addition, the date and time of your visit to our website will also be recorded.

If you are logged in to Twitter while visiting one of our plugged-in websites, the information collected by the plug-in from your specific visit will be recognized by Twitter. The information collected may then be assigned to your personal account at Twitter. If, for example, you use the Twitter Tweet button, this information will be stored in your Twitter account and may be published on the Twitter platform. To prevent this, you must either log out of Twitter before visiting our site or make the appropriate settings in your Twitter account.

Further information about the collection and use of data as well as your rights and protection options in Twitter’s privacy policy found at

twitter.com/privacy

Privacy policy for usage of Instagram

The controller has integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform, allowing users to share photos and videos, and also disseminate such data to other social networks.

Instagram’s operating company is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.

Each visit to one of the pages of this website operated by the controller and on which an Instagram component (Insta-Button) has been integrated automatically causes the internet browser on the information technology system of the person concerned through the respective Instagram component causes to download a representation of the corresponding component of Instagram. As part of this technical process, Instagram is aware of which specific bottom of our website is visited by the person concerned.

If the data subject is logged in to Instagram at the same time, Instagram recognizes with each visit to our website and during the entire duration of the respective stay on our website which specific subpage the affected person visits. This information is collected through the Instagram component and assigned through Instagram to the affected person’s Instagram account. If the person concerned activates one of the Instagram buttons integrated on our website, the data and information transferred with it are assigned to the personal Instagram user account of the person concerned and saved and processed by Instagram.
Through the Instagram component, Instagram always receives information that the person concerned has visited our website if the person concerned is simultaneously logged into Instagram at the time of accessing our website; this happens regardless of whether the person clicks on the Instagram component or not. If the affected person does not want to transmit this information to Instagram, the latter can prevent the transmission from logging out of their Instagram account before calling our website.

Additional information and Instagram’s privacy policy can be found at help.instagram.com/155833707900388 and www.instagram.com/about/legal/privacy/.

„Shariff“-Social-Media-Buttons

Our website uses the plug-ins of the following social networks. To integrate this plug-ins, we use the Shariff plug-in.

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website.

Shariff is an open source program developed by c’t and heise. By integrating this plug-in, linked graphics prevent the following social network plug-ins from automatically establishing a connection to the respective social networks server when you visit website(s) on which the plug-ins is integrated. Only if you click on one of these linked graphics will you be forwarded to the service of the respective social network. Only then will information about your use of our site be recorded by the respective social network. This information may include your IP address, the date and time you visited our site, as well as the pages you viewed.

If you are logged in to one of the social network services while visiting one of our plugged-in websites, the information collected by the plug-in from your specific visit will be recognized by the provider of that social network and assigned to your personal user account there and/or publish information about your interaction with our site there. If, for example, you use the share button for the social network, this information may be stored in your user account there and published on the platform of the respective social network provider. To prevent this, you must either log out of the social network before clicking the graphic or make the appropriate settings in your social network account.

Further information about Shariff is available at

www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html

The following social networks are integrated into our website:

Google+ operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, 94043, USA.

Privacy information is available at policies.google.com/privacy

Through certification according to the EU-US Privacy Shield

www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that it will follow the EU’s data protection regulations when processing data in the United States.

Facebook operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, operated within the EU by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Privacy information can be found at www.facebook.com/policy.php

Through certification according to the EU-US Privacy Shield

www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Facebook guarantees that it will follow the EU’s data protection regulations when processing data in the United States.

Twitter operated by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA.

Privacy information can be found at twitter.com/privacy

Through certification according to the EU-US Privacy Shield

www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active

Twitter guarantees that it will follow the EU’s data protection regulations when processing data in the United States.

Instagram the Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.

Privacy information can be found at www.instagram.com/about/legal/privacy/

Through certification according to the EU-US Privacy Shield

www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active

Instagram guarantees that it will follow the EU’s data protection regulations when processing data in the United States.

Google AdWords with Conversion-Tracking

Our website uses Google AdWords. Google AdWords is an advertising program of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”).

Google AdWords uses the so-called conversion tracking. A cookie is placed on your computer when you click on one of our Google-switched ads.

These cookies lose their validity after 30 days. When you visit certain pages on our site, Google and we may recognize that you clicked on the ad and was redirected to this page.

The information obtained through the conversion cookie is used to compile statistics on the use of our website. For example, we’ll see the total number of users who clicked on an ad. However, we do not receive information that personally identifies users.

Legal basis: Conversion cookies are stored on the basis of Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in analysing user behaviour in order to optimize both our web site and our advertising.

Right of objection: You can prevent the setting of cookies at any time as described in the section above “Cookies”. If you do, you will not be included in the conversion tracking statistics. Please click on the following link to set an opt-out cookie that will prevent Google AdWords from entering this site in the future (this opt-out cookie works only in this browser and only for that domain, delete your Cookies in this browser, you must click the link again).

Facebook pixels

Within our online offer we do use the so-called “Facebook Pixel” of the social network Facebook, which is owned by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are located in the EU, Facebook Ireland Ltd. , 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland is operated (“Facebook”).

The Facebook Pixel is a 1×1 pixel transparent image that is implemented on websites outside of Facebook and is loaded by the Facebook servers.

Each time the Facebook pixel is displayed to a user, Facebook receives this information together with the browser used, the IP address and the time stamp. Facebook can determine which Facebook user has accessed a particular page with a Facebook pixel. In addition, it records what actions a user has performed on a page with a Facebook pixel (e.g., which products have been viewed, clicks on buttons).

On the one hand, with the help of the Facebook pixel, Facebook is able to designate you as a visitor to our online offer as a target group for the presentation of advertisements (so-called “Facebook ads”). Accordingly, we use the Facebook pixel to display the Facebook ads we have submitted only to those Facebook users who have also shown an interest in our online offer. With the help of the Facebook pixel, we also want to make sure that our Facebook ads are in line with the potential interest of users and are not annoying. With the help of the Facebook pixel, we can continue to understand the effectiveness of the Facebook ads for statistical and market research purposes, in which we see whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”).

Legal basis: The use of Facebook Pixel is based on Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in analyzing user behavior in order to optimize both our web site and our advertising.

Right of objection: Please click on the following link to set an opt-out cookie, which will prevent the collection by Facebook within this website in the future (this opt-out cookie only works in this browser and only for this domain, delete Your cookies in this browser, you must click the link again).


Right to information and contact

You have the right to free information on the data stored about us as well as a right to correct, block or delete this data. For questions about the collection, processing or use of your personal data, information, correction, blocking or deletion of data and revocation of granted consent or objection to a particular use of data, please contact us directly via the contact details in our imprint.

Privacy Policy has been developed with the Model Data Protection Statement for Anwaltskanzlei Weiß & Partner