PRIVACY INFORMATION

I. Terms used

This Privacy Policy uses the following terms, among others.

Personal data

Personal data means any information relating to an identified or identifiable natural person (hereinafter "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Cookies

Cookies are small text files or similar technologies that are stored in your browser by the websites you have visited and can be read by these and other websites. They are used to make websites optimally usable or to provide the operator with certain information about the website, for example, to design advertising according to your interests. Cookies may contain personal data, such as a personal ID.

Processing

Processing is any operation or set of operations, whether or not by automatic means, which is performed upon personal data, such as collection, recording, organization, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Legal basis

A permission to process personal data for specific purposes.

Recipient

Recipient means a natural or legal person, public authority, agency or other body to whom Personal Data is disclosed.

Controller

Controller or controller is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law.

Web Hosting

Web hosting is the provision of web space and the hosting of websites on the web server of an Internet service provider.

Consent

Consent shall mean any indication of intention given voluntarily by the data subject for the specific case in an informed and unambiguous manner in the form of a declaration or any other unambiguous confirmatory act by which the data subject indicates that he or she consents to the processing of personal data relating to him or her.

Third Country

Any country outside the European Union.

Profiling

Any type of automated processing of personal data that consists of using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person's job performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.

II. Mandatory information pursuant to Art. 12-14, 21 DSGVO.

In the following, we would like to inform you in accordance with the General Data Protection Regulation (DSGVO) and other data protection regulations. In particular, we hereby inform you about which personal data we collect for which purposes when you use our websites as well as when you communicate with us electronically, how we use it, to whom we pass it on and what rights you have with regard to your personal data.

1. who is responsible for the processing of personal data?

The responsible party within the meaning of Art. 4 (7) DS-GVO, other provisions with data protection character is.

Institute for Vocational Training and Social Management (IBS) gemeinnützige GmbH
Thüringer Fachstelle für Flüchtlinge in Arbeit und Ausbildung
Represented by: Katja Glybowskaja (Managing Director)

Juri-Gagarin-Ring 160
99084 Erfurt
Phone: 0361 511500-10
E-mail: fachstelle@ibs-thueringen.de

You can reach our data protection officer at the above address or by e-mail at: datenschutz@awo-thueringen.de.

2. what rights do i have?

You have the following rights vis-à-vis all data controllers designated above with regard to personal data concerning you:

Right to confirmation and information (Art. 15 DSGVO).
Right to rectification (Art. 16 DSGVO) or deletion (Art. 17 DSGVO).
Right to restriction of processing (Art. 18 DSGVO),
Right to withdraw your consent (Art. 7(3) DSGVO). Consent can be revoked at any time. The lawfulness of the processing that took place before the revocation remains unaffected by it.
Right to receive the data in a structured, common, machine-readable format ("data portability") as well as the right to have the data transferred to another controller if the requirements of Art. 20 (1) a, b DSGVO are met,
Right to object to processing (Art. 21 DSGVO), if this is based on our legitimate interests (Art. 6 para. 1 p. 1 lit. f DS-GVO). Your right to object exists for reasons arising from your particular situation. You have no right to object if we or our service providers can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms. You also do not have the right to object if the processing serves the assertion and exercise of or defense against legal claims (Article 21 (1) DSGVO). In the event of your objection, we will review the factual situation and either discontinue or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

Information on the existence of a right of objection or revocation when integrating the respective services of third-party providers is provided below.

You can inform us about the exercise of your rights at: fachstelle@ibs-thueringen.de.

You have, without prejudice to any other administrative or judicial remedy, the right to lodge a complaint with a data protection supervisory authority. You can find an overview of all German supervisory authorities for data protectionhere. For us, the supervisory authority of the Free State of Saxony is primarily responsible.

3 How is personal data processed?

Below you will find the legal information about data categories, purposes, legal bases, deletion periods, recipients, third country transfer, profiling, revocation and objection rights per processing activity.

a. Website visit / usage statistics

Data categories

The following data is automatically sent to us by your computer when you visit the website.

browser type / browser version
Operating system used
language / version browser software
IP address (anonymized)
date / time of server request
Screen resolution
Time zone difference to GMT
Access status / HTTP status code
Referrer URL (previously visited website)
Frequency of page views
Use of website functions

Purpose of processing and obligation to provide

These data are technically necessary for us to display our website to you (e.g. connection establishment of the website) and to ensure stability and security (e.g. tracking of attacks on the website and load distribution). Without it, you cannot access the website, so theoretically there is an obligation to provide the data.

We also use the data to compile and analyze anonymized usage statistics (number of visitors and browser languages) and to improve our website based on these statistics, as well as to prove the use of funds to our grantors. This data is not merged with other data sources. The data is not used to identify website visitors. The data will not be used for marketing purposes.

Storage period

This data is stored for a period of seven days. Longer processing is possible in individual cases, e.g. as long as and to the extent necessary to block abusive use of the website. The storage can last up to five years. The anonymized usage statistics do not contain any personal data and therefore do not have to be deleted.

Recipients

This data is technically collected and stored by our hosting service provider (Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen) and further processed by Afeefa Kollektiv (Weise, Struwe, Schönfeld GbR, Böhmische Straße 14,
01099 Dresden), which provides technical support for our website, on our behalf for the purposes stated above.

This data is also transferred to Mapbox Inc (750 15th St NW, Washington, District of Columbia, USA) in order to load the map material.

Legal basis

The automatic collection of data takes place on the basis of Section 25 (2) No. 2 TTDSG. The storage and further processing is done on the basis of Art. 6 para. 1 p. 1 lit. f DSGVO, as the purposes of the processing reflect our legitimate interests.

You can object to the storage and further processing at any time. Please note the above information on your right to object. You can declare your objection to the processing of access data to us. You can also contact Mapbox.

Third country transfer and legal basis

When loading the map material, data is transmitted to the USA. The USA is assessed by the European Court of Justice as a country with an insufficient level of data protection according to EU standards. In particular, there is a risk that your data will be processed by U.S. authorities for control and for monitoring purposes, possibly also without any legal remedy.

The adequate level of data protection for the transfer to the USA is basically guaranteed by the conclusion of so-called standard data protection clauses according to Art. 46 (2) lit. c DSGVO as well as the additional measures taken by Mapbox to protect the data. The standard data protection clauses are available here.

b. Contacting us

When contacting us , e.g. by email or via the contact form on the website, the personal data you provide will be processed by us in order to respond to your request.

Data categories

Your name / pseudonym
E-mail address or telephone number
Date and time of contact (collected automatically)
Content of the personal message
Subject for e-mails, if applicable

Purpose of processing and obligation to provide

We use the data to receive and respond to your request. Only the content of the message is mandatory information. All other information is voluntary or collected automatically.

Storage period

Your data will be processed during contract negotiations or during the contractual relationship, if your request leads to a contract with us and / or the processing is necessary for the establishment, implementation or termination of the contract. The legal basis in this respect is Art. 6 para. 1 p. 1 lit. b DSGVO.

Otherwise, we delete your data after the processing is no longer necessary to process and respond to your request, or store them in a limited and separate manner for the duration of the legally mandatory retention periods, which may be a maximum of 10 years. The legal basis for this storage of data is Art. 6 para. 1 sentence 1 lit. c DSGVO in conjunction with § 147 AO, § 257 HGB.

Recipients

The information from your inquiry lands in our electronic mailbox by e-mail. The e-mails are processed on the server of AWO Alten-, Jugend- und Sozialhilfe (AJS) gGmbH.

Legal basis

The legal basis for the processing is Art. 6 (1) p. 1 lit. f DSGVO, i.e. our predominantly legitimate interests in providing and using a way to contact you electronically and achieve our organizational and project goals.

You can object to the processing at any time.

When contacting us to carry out pre-contractual measures (e.g. request for a service) or in the context of an existing contract, the processing of data is based on Art. 6 para. 1 p. 1 lit. b DSGVO.

c. Displaying an interactive map from Mapbox

The full privacy information of Mapbox can be found here.

Data categories and cookies

The following data is automatically sent to Mapbox by your computer when you visit our website.

browser type / browser version
Operating system used
language / version browser software
IP address
date / time of server request
screen resolution
Time zone difference to GMT
Access status / HTTP status code
Referrer URL (previously visited website)
Frequency of page views

In addition, a so-called Universally Unique Identifier (UUID for short) is stored on your computer. What a UUID is, you can read here.

Purposes of processing and obligation to provide

This data is technically necessary to display the interactive map to you. The UUID is necessary for the Mapbox server to quickly recognize our website and load the correct map design. Without this data and without UUID, the map cannot be loaded, so theoretically there is an obligation to provide the data.

Storage period

This data is stored by Mapbox for a limited duration for security and accounting purposes. The UUID has an unlimited storage period. You can delete it at any time via your browser settings.

Recipients

This data is transferred to Mapbox Inc (750 15th St NW, Washington, District of Columbia, USA) in order to load the map material.

Legal basis

The automatic collection of the data as well as the storage of the UUID on your computer is based on § 25 paragraph 2 No. 2 TTDSG.

You can object to the processing of the data by Mapbox directly at Mapbox. You can delete the UUID from your computer in the settings of your browser.

Third country transfer and legal basis

d. Use of the internal cloud and the ColloCall video conferencing solution.

Data categories

The following data is automatically sent to us by your computer when you access the cloud or use ColloCall.

browser type / browser version
Operating system used
language / version browser software
IP address (anonymized)
date / time of server request
Screen resolution
Time zone difference to GMT
Access status / HTTP status code
Referrer URL (previously visited website)
Frequency of page views
Use of website functions

In order to log in or participate in a video call, you must also provide an e-mail address and, if applicable, your user name and password.

In the case of video calls, the following data is also processed:

First names, surnames, employer, professional function, e-mail addresses, telephone numbers (depending on the type of participation), audio, video and textual content of the communications including files, time, duration and location of the participations, profile picture.

Purposes of processing and obligation to provide

This data is technically necessary for us to provide you with the Services (e.g., establishing a connection to the website, conducting a video call), to identify you, and to ensure stability and security (e.g., tracking attacks on the Services and load balancing). Without it, you will not be able to access the services, so theoretically there is an obligation to provide the data.

Storage period

The contents of the communication via ColloCall are only processed for the duration of the call. The login data is stored as far as and as long as you use the services. Device data is stored for a period of seven days. Longer processing is possible in individual cases, e.g. as long as and to the extent necessary to block abusive use of the website.

Recipients

This data is collected and processed by Datenkollektiv (datenkollektiv.net GbR, Florian Rasch und Carsten Ungewitter GbR, Frühlingstr. 14, 01099 Dresden), which provides technical support for our website, on our behalf for the purposes stated above.

Legal basis

The automatic collection of data takes place on the basis of § 25 paragraph 2 No. 2 TTDSG. The storage and further processing is done on the basis of Art. 6 para. 1 p. 1 lit. f DSGVO, as the purposes of the processing reflect our legitimate interests.

You can object to the storage and further processing at any time. Please note the above information on your right of objection. You can declare your objection to the processing of the data to us.

e. Dispatch of circulars

We send newsletters with useful information to project partners and other stakeholders at irregular intervals. For this purpose, the e-mail address is processed. The legal basis is either your consent according to Art. 6 para. 1 p. 1 lit. DSGVO or § 7 para. 3 UWG or Art. 6 para. 1 p. lit. f DSGVO, whereby the creation of transparency and information for the project partners and stakeholders about the internal development of the project represent our legitimate interests. The newsletter is sent with the help of our e-mail provider AWO AJS gGmbH.

You can object or revoke the sending of the newsletter at any time by telephone, mail or e-mail or, if applicable, via an unsubscribe link in the newsletter.

f. Up-to-dateness

This privacy information may be changed from time to time. The last update was made on 17.01.2022.