PRIVACY POLICY

The English version is for convenience purposes only. Only the German version is binding.

The protection of your personal data is very important to us. To ensure that all data processing processes on our website and in our offers are transparent and comprehensible for you as a visitor and user (hereinafter referred to as “user“) of our website, we inform you in this data protection declaration about the type, scope and purpose of your personal data on our website.

You can save or print the privacy statement by choosing the commands “save page“ or “printing“ in your browser.

Timeliness and amendment of this data protection declaration

The English version is for convenience purposes only. Only the German version is binding. This data protection declaration is currently valid and as of May 2018. Due to further developments of our website, our offers, or due to changed legal or official requirements, it may be necessary to amend this data protection declaration. You can access the current data protection declaration at any time on our website www.madamfo-ghana.de/datenschutz.

Definitions

In the following we explain the terms according to Art. 4 EU General Data Protection Regulation (hereinafter referred to as “EU-GDPR“), which are mentioned in the data protection statement:

  • “Personal data“ means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject“); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data are e.g. name, address, email address, job description, date of birth, phone number, user behaviour, IP address, location data, genetic data, health data etc.
  • “Processing“ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organi¬sation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
  • “Restriction of processing“ means the marking of stored personal data with the aim of limiting their processing in the future.
  • “Pseudonymisation” means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
  • „Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
  • “Processor“ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
  • “Recipient“ means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not.
  • “Third party“ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
  • „Consent“ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

General Information

Controller

Responsible in the sense of the data protection laws and under inclusion of the EU-GDPR is:

Madamfo Ghana e.V.
Bettina Landgrafe
Voerder Straße 139a
58135 Hagen
GERMANY

Phone: 0049 (0) 2331 1278278
Mobile: 0049 (0) 163 7703867
E-Mail: mail@madamfo-ghana.de

Data protection inquiries

All enquiries regarding the processing of your personal data or the exercise of your rights as set out below should be sent by e-mail, fax or post to the following address:

Tanja Losch
Madamfo Ghana e.V.
Voerder Straße 139a
58135 Hagen
GERMANY

Tel.: 0049 (0) 2331 1278278
Mobil: 0049 (0) 163 7703867
E-Mail: mail@madamfo-ghana.de

 


General information on the processing of personal data

Types of processed data

On our website, we collect and process inventory data (e.g. names), contact data (e.g. e-mail addresses), usage data (e.g. clicked links, interest in content, access times, access locations) and meta- and communication data (e.g. electronic device information, browser information, IP addresses).

Donation-related, personal data

We collect and process your data in order to carry out the collection of the donations, sponsorships and memberships commissioned by you, to maintain the ongoing promotional relationship, and to send you information about our current projects. Participating credit institutions will only receive your data if it is necessary for the collection of the donation. To execute the technical implementation of the data we process, we work with fundraisingbox, a product of the external service provider Wikando GmbH, Schießgrabenstr. 32, 86150 Augsburg, GERMANY.

Categories of data subjects

The subjects affected by the processing of personal data are all visitors and users of our website.

Purpose of data processing

We collect and process the personal data of the users of our website in order to communicate with you and to inform you (e.g. contact requests), to carry out statistics, range measurements and analyses (e.g. by using analysis tools), to design and optimise content and functions, to technically administer the website, to optimise it and to close security gaps.

Legal basis for the processing of personal data

We only process personal data if we are qualified to do so according to law. In the following, we will individually name the legal bases by which we are entitled to do so. Otherwise, we are always entitled to process personal data, if the data subject has given consent to the processing of his or her personal data (Art. 6 para. 1 lit. a EU-GDPR), if processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6 para. 1 lit. b EU-GDPR), if processing is necessary for compliance with a legal obligation to which the controller is subject (Art. 6 para. 1 lit. c EU-GDPR), or if processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6 para. 1 lit. f EU-GDPR).

Recipients of personal data

We may transfer data to contract processors or other third parties with whom we work (e.g. payment service providers, hosting agencies, newsletter agencies, newsletter services, mail order companies, etc.). We are entitled to do so, if the data subject has given consent (Art. 6 para. 1 lit. a EU-GDPR), if it is necessary for the performance of a contract or prior to entering into a contract (Art. 6 para. 1 lit. b EU-GDPR), if we comply with a legal obligation (Art. 6 para. 1 lit. c EU-GDPR), or if we pursue our legitimate interests (Art. 6 para. 1 lit. f EU-GDPR). If processing is carried out on our behalf by a contract processor, there is a contract processing agreement in accordance with Art. 28 EU-GDPR which obligates the contractor to act in compliance with data protection.

Hosting

This website is hosted on the servers of 1&1 Internet SE, Elgendorfer Straße 57, 56410 Montabaur, GERMANY. The hosting services used by us serve the provision of the following services: infrastructure and platform services, computing capacity, storage space and database services, security and technical maintenance services that we use to operate this website. The legal basis for the use of the hosting service is the pursuit and protection of our legitimate interests in the analysis, optimisation, and safe and economic operation of our website (Art. 6 para. 1 lit. f EU-GDPR). Furthermore, the cooperation with the hosting service provider is based on a contract processing agreement which is in accordance with Art. 28 EU-GDPR.

We, or our hosting provider, process inventory data, contact data, usage data, meta data and communication data from all users on the basis.

The data is stored as long as there is a purpose for it. It will then be deleted, unless this is prevented by legal retention periods.

Processing of personal data in third countries

If we transfer data in a third country, e.g. because we commission a service provider there, we are entitled to do so if the data subject has given consent (Art. 6 para. 1 lit. a, Art. 7 EU-GDPR), if it is necessary for the performance of a contract or prior to entering into a contract (Art. 6 para. 1 lit. b EU-GDPR), if we comply with a legal obligation (Art. 6 para. 1 lit. c EU-GDPR), or if we pursue our legitimate interests (Art. 6 para. 1 lit. f EU-GDPR). A third country is any country outside the European Union (EU) or the European Economic Area (EEA). When transferring data to third countries, we ensure the compliance of Art. 44 et seq. EU-GDPR, we pay attention to existing EU guarantees or findings on an adequate level of data protection in the respective country, as well as to the conclusion of any necessary agreements, e.g. standard contractual clauses.

Establishment of contact

When you contact us by e-mail, fax, telephone or post (e.g. e-mail address, name, telephone number, fax number, address), we will process the data you provide in order to answer your enquiries. We are entitled to do so in accordance with Art. 6 para. 1 lit. b EU-GDPR. Furthermore, user data can also be stored in a customer relationship management system (CRM-System) or in comparable databases.

If storage is no longer necessary, we delete all data or limit its processing if there are legal retention periods.


Contact form

When you contact us via our contact form, we will process the data provided (e.g. e-mail address, name, telephone number, fax number, address) in order to answer your enquiries. We are entitled to do so in accordance with Art. 6 para. 1 lit. b EU-GDPR. Furthermore, user data can also be stored in a customer relationship management system (CRM-System) or comparable databases.

The minimum data required to enable us to answer your enquiries is requested in required fields in the contact form. It is optional to provide further data. The transmission of your data is encrypted according to the state of the art.

If storage is no longer necessary, we delete all data or limit its processing if there are legal retention periods.

Erasure / restriction / blocking of your personal data

We will only store your personal data for as long as necessary in relation to the purposes stated here. In addition to that, we will only store your data if this is required by legal retention periods or for the establishment, exercise or defence of legal claims (e.g. 6 years according to § 257 para. 1 German-HGB and 10 years according to § 147 para. 1 German-AO for commercial and business letters, offers etc.). After discontinuation of the respective purpose or expiration of the retention periods, the data are erased or restricted in accordance with Art. 17, 18 EU-GDPR.

Encrypted transmission of your data

All personal data that you enter on our website and send to us are transmitted encrypted according to the current state of the art.

Furthermore, we protect and secure our website and the EDV-systems that come along with it via technical and organisational measures against the loss, destruction, access, change or dissemination of your personal data by unauthorised persons.


Collection of access data and web server log files

On the basis of our legitimate interests in the optimisation and economic operation of our website in accordance with Art. 6 para. 1 lit. f EU-GDPR, we collect the following data each time our website is accessed:

  • IP address of the user
  • name of the website accessed
  • file, date and time of access
  • transferred data volume (Body Bytes Sent)
  • notification of successful retrieval
  • browser type and browser version
  • Htaccess user
  • domain name of the requesting internet service provider
  • protocol (e.g. http 2.0)
  • Status
  • referrer URL (previously visited website)
  • user agent
  • operating system of the user

The data are used for statistical evaluations for the purpose of operation, security and optimisation of the website. The data are stored for security reasons (e.g. for fraud or abuse related investigations). If a longer period of storage is necessary for evidence purposes, the data shall be deleted after the matter has been finally resolved.

Your rights as data subject

You have the right to obtain information on or a copy of your personal data which is stored by us – at any time and free of charge (Art. 15 EU-GDPR).

You have the right of rectification and actualisation of inaccurate personal data (Art. 16 EU-GDPR).

You have the right to restrict the processing of your data (Art. 18 EU-GDPR) and the right to erasure of your personal data (Art. 17 EU-GDPR). An erasure of your personal data is not possible, if we are obliged to continue to store your data for the execution of contracts or due to legal retaining periods. Instead of erasing your data, we then block your data.

You have the right to data portability; to receive the personal data which you have provided to us and to transmit those data to another controller through us or by yourself (Art. 20 EU-GDPR).

You have the right to object at any time to future processing of your personal data (Art. 21 EU-GDPR).

Furthermore, you have the right to withdraw your consent at any time for the future (Art. 7 para. 3 EU-GDPR).

For the exercise of the above rights, please contact:

Tanja Losch
Madamfo Ghana e.V.
Voerder Straße 139a
58135 Hagen
GERMANY

Tel.: 0049 (0) 2331 1278278
Mobil: 0049 (0) 163 7703867
E-Mail: mail@madamfo-ghana.de

 

Furthermore, you can lodge a complaint with the responsible data protection supervisory authority (Art. 77 EU-GDPR).

Cookies

In addition, when using our website, cookies are stored on your computer. Cookies are small text files that enable the storage of specific, device-related information on the user’s electronic device (e.g. smartphones, computers). They are used to make a website more user-friendly, to collect statistical data on the website usage, and for analyses to improve the website. Cookies cannot execute programmes or transfer malware on your computer.

You can prevent the storage of any cookies or of specific cookies via the security settings of your browser. Cookies that were already stored in your browser can be deleted. In case of deletion the use and the functionality of the website can be impaired.

This website uses the following types of cookies:

  • persistent cookies
  • transient cookies

Persistent cookies are automatically deleted after a certain period of time. That period of time may vary between the different cookies. You can delete the cookies at any time via the security settings of your browser.

Transient cookies are automatically deleted if you close the browser of log off – session cookies are included here particularly. The store a so called session-ID, with which different requests of your browsers are connected with the current and joint session. By that, we can recognize your computer when you come back to our website.

General objection to cookies for marketing purposes

In general, you can object to the use of cookies which serve advertising purposes and/or to measure the range via the deactivation page of the network initiative (http://optout.networkadvertising.org/) and in addition to that via the US-American website (http://www.aboutads.info/choices), or via the European website (http://www.youronlinechoices.com/uk/your-ad-choices).

Furthermore, the storage of cookies can be prevented by adjusting the settings in the security settings of your browser accordingly. In that case, some functions of the website may be impaired. These possibilities apply to all cookies or analysing tools that we use for marketing purposes on our website. The cookies or analysing tools we use on our website are listed below.


Google Analytics

This website uses Google Analytics, a web-analysing tool by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (“Google“). The legal basis for the processing of the data are our legitimate interests in analysing, optimising and economically operating our website (Art. 6 para. 1 lit. f EU-GDPR).

We use Google Analytics with active IP-anonymisation, only. Which means, that IP-addresses are shortened for further processing to exclude the direct relation to a person. In order to do so, you IP-address is shortened within the member states of the EU and the EEA. The full IP-address will only in exceptional cases be transmitted to a Google-server in the USA and shortened there.

Google Analytics saves cookies on your computer to collect and analyse data which is is generated by using our website. In general, these data are transferred to and stored on a Google-server in the USA.

Google is certified under the Privacy Shield Agreement and is therefor committed to complying with European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google processes the collected data on our behalf to analyse your use of our website, to compile reports on your activities on our website and to provide further services related to the use of the website and the internet. The data of the users are stored for a period of 14 months. After that the data are erased or anonymised.

The IP address transmitted by your browser under Google Analytics is not combined with other data from Google. You can prevent the storage of cookies via the respective settings of your browser-software; but, in that case, some functions of the website may be impaired.

Furthermore, you can object to the collection of data generated by the cookie and the use of website related data (including your IP address) and to the future processing of that data by downloading and installing the browser plug-in, which is available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de or https://www.google.com/settings/ads/plugin.

Alternatively, (or when using the website via a mobile browser) you can prevent the processing of your data by Google Analytics by clicking on the following link (deactivate Google Analytics). When you click on the link, an opt-out-cookie is placed on your computer. If you delete cookies on your electronic device, you must click on the link again. Alternatively, you can generally deactivate marketing cookies by third parties by using the options for “general objection to cookies for marketing purposes“, which was mentioned above.

For more information about Google Analytics’ privacy practices, please visit https://policies.google.com/technologies/ads, https://policies.google.com/privacy or https://adssettings.google.com/.

You can view Google’s privacy policy at: https://policies.google.com/privacy/update?hl=de or https://policies.google.com/privacy?hl=de.

More information about Google’s privacy policy and terms of use can be found here: https://policies.google.com/?hl=de.


Integration of third-party services and content

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our website in accordance with Art. 6 para. 1 lit. f EU-GDPR), we use content or service offers from third parties within our website, in order to integrate their content and services – such as videos and fonts (hereinafter uniformly referred to as “content“).

In general, that requires the third-party providers to perceive of these contents to perceive the user’s IP address, because the content cannot be transmitted to their browser without it. The IP address is required for the presentation of these contents. We strive to exclusively use contents whose respective offerers use the IP address for the distribution of contents, only. Third-party providers may also use so called pixel-tags (invisible graphics, also known as “web beacons“) for statistical or marketing purposes. “Pixel tags“ can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may include technical information about the browser and its operating system, referring websites, time of the visit, and further information on the use of our website. Furthermore, the pseudonymous information may be linked to such information from other sources.


Google Fonts

This website uses script libraries and font libraries with fonts provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google Fonts“, https://www.google.com/webfonts/) to display the content of the website in a graphically appealing way. The legal basis for data processing within the scope of this application is the protection of our legitimate interests in analysing, optimising and economically operating our website in a safe and secure way (Art. 6 para. 1 sentence 1 lit. f EU-GDPR).

Within the framework of this application, the browser of the user visiting our website automatically calls up the Google-server, which is usually located in the USA. The Google Fonts are then transferred to the memory (cache) of the browser in order to be able to use them for display. If the browser does not support Google Fonts or does not support the access, the text on our website will then be displayed in a standard font. In addition, the following data is collected when the Google-server is called up: name of the browser used, version of the browser used, referring website, operating system of the user, screen resolution of the user, IP address of the user, language settings of the browser or operating system used by the user.

The data which are transmitted to Google by entering the website are sent to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. No cookies will be stored on your device. The data stored by Google are not connected with data that may have been collected via the parallel use of other Google services such as Gmail.

You can set your browser, so that the fonts are not loaded from the Google-servers, e.g. by installing add-ons such as NoScript (www.noscript.net) or Ghostery for Firefox (https://addons.mozilla.org/de/firefox/addon/ghostery/). You can also set your advertising settings for Google applications here: https://adssettings.google.com/authenticated.

You can find out more about the Google Fonts library here: https://fonts.google.com/about or https://developers.google.com/fonts/faq#Privacy.

The privacy policy of the library operator Google can be found here: http://www.google.com/intl/de-DE/privacy/ or https://policies.google.com/privacy/update?hl=de.


YouTube

This website embeds YouTube videos. The operator of the corresponding plugins is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. The legal basis for data processing within the scope of this application is the protection of our legitimate interests in analysing, optimising and economically operating our website (Art. 6 para. 1 sentence 1 lit. f EU-GDPR).

Every time you visit a page with the YouTube plug-in, a connection to the servers of YouTube is generated, telling YouTube which pages you are visiting. If you are logged-in to your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent that if you log-out of your YouTube account beforehand. If a YouTube video is started, YouTube cookies are activated and used to collect information about the user behaviour.

If you have deactivated the storage of cookies for the Google-Ad-Prgramme, you do not have to fear such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent that, you have to block the storage of cookies in your browser. You also have the possibility to set an opt-out cookie: https://adssettings.google.com/authenticated.

For more information about YouTubes privacy practices, please read their privacy policy: https://www.google.de/intl/de/policies/privacy/.


Google Maps

This website uses maps by Google Maps, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The legal basis for data processing within the scope of this application is the protection of our legitimate interests in analysing, optimising and economically operating our website (Art. 6 para. 1 sentence 1 lit. f EU-GDPR).

Whilst using Google Maps, Google collects, processes and uses data on the user’s usage of the map-functions, e.g. IP addresses and location data. In general, these data are processed on Google-servers in the USA. The transmission of these data can usually be prevented by respective settings in the electronic devices or the browser.

Google is certified under the Privacy Shield Agreement and is therefor committed to complying with European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

You can find Google’s privacy policy here: https://policies.google.com/privacy?hl=de.

You can customize your advertising preferences regarding Google services here: https://adssettings.google.com/authenticated.