PRIVACY INFORMATION
I. Terms used
This privacy policy uses the following terms, among others
Personal data
Personal data is any information relating to an identified or identifiable natural person (hereinafter "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Cookies
Cookies are small text files or similar technologies that are stored in your browser by the websites you have visited and can be read by these and other websites. They are used to make websites optimally usable or to provide the operator with certain information about the website, e.g. to tailor advertising to your interests. Cookies may contain personal data, such as a personal ID.
Processing
Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Legal basis
Permission to process personal data for specific purposes.
Recipient
Recipient is a natural or legal person, public authority, agency or other body to whom personal data is disclosed.
Controller
Controller or controller responsible for the processing is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
Web hosting
Web hosting is the provision of web space and the hosting of websites on the web server of an Internet service provider.
Consent
Consent means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
Third country
All countries outside the European Union.
Profiling
Any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.
II Mandatory information pursuant to Art. 12-14, 21 GDPR
In the following, we would like to inform you in accordance with the General Data Protection Regulation (GDPR) and other data protection regulations. In particular, we hereby clarify which personal data we collect for which purposes when you use our websites and communicate with us electronically, how we use this data, to whom we pass it on and what rights you have with regard to your personal data.
1 Who is responsible for the processing of personal data?
The controller within the meaning of Art. 4 (7) GDPR and other provisions of a data protection nature is
Institut für Berufsbildung und Sozialmanagement (IBS) gemeinnützige GmbH
Thüringer Fachstelle für Flüchtlinge in Arbeit und Ausbildung
Represented by Katja Glybowskaja (Managing Director)
Juri-Gagarin-Ring 160
99084 Erfurt
Phone: 0361 511500-10
Email: fachstelle@ibs-thueringen.de
You can contact our data protection officer at the above address or by email at: datenschutz@awo-thueringen.de
2 What rights do I have?
You have the following rights vis-à-vis all the controllers named above with regard to the personal data concerning you:
Right to confirmation and information (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR),
Right to withdraw your consent (Art. 7 para. 3 GDPR). Consent can be withdrawn at any time. The lawfulness of the processing that took place before the revocation remains unaffected by this.
Right to receive the data in a structured, commonly used, machine-readable format ("data portability") and the right to transmit the data to another controller if the requirements of Art. 20 para. 1 lit. a, b GDPR are met,
Right to object to processing (Art. 21 GDPR) if this is based on our legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR). You have the right to object on grounds relating to your particular situation. You have no right to object if we or our service providers can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. You also have no right to object if the processing serves to assert, exercise or defend against legal claims (Art. 21 para. 1 GDPR). In the event of your objection, we will examine the situation and either cease or adapt the data processing or point out to you our compelling legitimate grounds on the basis of which we will continue the processing.
Information on the existence of a right of objection or revocation when integrating the respective services of third-party providers can be found below.
You can inform us about exercising your rights at: fachstelle@ibs-thueringen.de
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority. You can find an overview of all German data protection supervisory authoritieshere. The supervisory authority of the Free State of Saxony is primarily responsible for us.
3 How is personal data processed?
Below you will find the legal information on data categories, purposes, legal bases, deletion periods, recipients, third country transfers, profiling, rights of revocation and objection for each processing activity.
a. Visiting the website / usage statistics
Data categories
The following data is automatically sent to us by your computer when you visit the website
Browser type / browser version
Operating system used
Language / version of browser software
IP address (anonymized)
Date / time of the server request
Screen resolution
Time zone difference to GMT
Access status / HTTP status code
Referrer URL (previously visited website)
Frequency of page views
Use of website functions
Purposes of processing and obligation to provide
This data is technically necessary for us to display our website to you (e.g. establishing a connection to the website) and to ensure stability and security (e.g. tracking attacks on the website and load balancing). Without it, you will not be able to access the website, which means that you are theoretically obliged to provide the data.
We also use the data for the creation and analysis of anonymized usage statistics (number of visitors and browser languages) and to improve our website based on this, as well as to prove the use of funds to our funding providers. This data is not merged with other data sources. The data is not used to identify website visitors. The data is not used for marketing purposes.
Storage period
This data is stored for a period of seven days. Longer processing is possible in individual cases, e.g. for as long as and to the extent necessary to block abusive use of the website. Data may be stored for up to five years. The anonymized usage statistics do not contain any personal data and therefore do not have to be deleted.
Recipients
This data is technically collected and stored by our hosting service provider (Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen) and further processed by Afeefa Kollektiv (Weise, Struwe, Schönfeld GbR, Böhmische Straße 14,
01099 Dresden), which provides technical support for our website, on our behalf for the above-mentioned purposes.
This data is also transferred to Mapbox Inc (750 15th St NW, Washington, District of Columbia, USA) in order to load the map material.
Legal basis
The automatic collection of data takes place on the basis of Section 25 (2) No. 2 TDDDG. The storage and further processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, as the purposes of the processing reflect our legitimate interests.
You can object to the storage and further processing at any time. Please note the above information on your right to object. You can declare your objection to the processing of access data to us. You can also contact Mapbox.
Third country transfer and legal basis
When loading the map material, data is transferred to the USA. The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection by EU standards. In particular, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes, possibly without any legal recourse.
The adequate level of data protection for the transfer to the USA is generally guaranteed by the conclusion of so-called standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR and the additional measures taken by Mapbox to protect the data. The standard data protection clauses are available here.
b. Making contact with us
When you contact us, e.g. by email or via the contact form on the website, the personal data you provide will be processed by us in order to respond to your inquiry.
Data categories
Your name / pseudonym
E-mail address or telephone number
Date and time of contact (collected automatically)
Content of the personal message
Subject of e-mails, if applicable
Purposes of processing and obligation to provide
We use the data to receive and respond to your request. Only the content of the message is mandatory. All other information is voluntary or is collected automatically.
Storage period
Your data will be processed during the contractual negotiations or during the contractual relationship if your request leads to the conclusion of a contract with us and / or the processing is necessary for the establishment, execution or termination of the contract. The legal basis in this respect is Art. 6 para. 1 sentence 1 lit. b GDPR.
Otherwise, we delete your data after the processing is no longer necessary for processing and answering your request, or we store it in a restricted and separate manner for the duration of the legally mandatory retention periods, which can be a maximum of 10 years. The legal basis for this storage of data is Art. 6 para. 1 sentence 1 lit. c GDPR in conjunction with § 147 AO, § 257 HGB.
Recipient
The information from your request is sent to our electronic mailbox by email. The emails are processed on the server of AWO Alten-, Jugend- und Sozialhilfe (AJS) gGmbH.
Legal basis
The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR, i.e. our predominantly legitimate interests in providing and using a means of electronic contact and achieving our organizational and project goals.
You can object to the processing at any time.
When contacting us to carry out pre-contractual measures (e.g. request for a service) or in the context of an existing contract, the data is processed on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR.
c. Displaying an interactive map from Mapbox
You can find Mapbox's complete data protection information here.
Data categories and cookies
The following data is automatically sent to Mapbox by your computer when you visit our website
Browser type / browser version
Operating system used
Language / version of browser software
IP address
Date / time of the server request
Screen resolution
Time zone difference to GMT
Access status / HTTP status code
Referrer URL (previously visited website)
Frequency of page views
In addition, a so-called Universally Unique Identifier (UUID for short) is stored on your computer. You can find out what a UUID is here.
Purposes of processing and obligation to provide
This data is technically necessary in order to display the interactive map to you. The UUID is necessary so that the Mapbox server can quickly recognize our website and load the correct map design. Without this data and without the UUID, the map cannot be loaded, so that there is a theoretical obligation to provide the data.
Storage period
This data is stored by Mapbox for a limited period for security and accounting purposes. The UUID has an unlimited storage period. You can delete it at any time via your browser settings.
Recipient
This data is transferred to Mapbox Inc (750 15th St NW, Washington, District of Columbia, USA) to load the map material.
Legal basis
The automatic collection of the data and the storage of the UUID on your computer takes place on the basis of Section 25 (2) No. 2 TDDDG.
You can object to the processing of the data by Mapbox directly at Mapbox. You can delete the UUID from your computer in your browser settings.
Third country transfer and legal basis
When loading the map material, data is transmitted to the USA. The USA is considered by the European Court of Justice to have an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without any legal recourse.
The adequate level of data protection for the transfer to the USA is generally guaranteed by the conclusion of so-called standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR and the additional measures taken by Mapbox to protect the data. The standard data protection clauses are available here.
d. Use of the internal cloud and the ColloCall video conferencing solution
Data categories
The following data is automatically sent to us by your computer when you access the cloud or use ColloCall
Browser type / browser version
Operating system used
Language / version of browser software
IP address (anonymized)
Date / time of the server request
Screen resolution
Time zone difference to GMT
Access status / HTTP status code
Referrer URL (previously visited website)
Frequency of page views
Use of website functions
In order to log in or participate in a video call, you must also provide an e-mail address and, if applicable, your user name and password.
The following data is also processed for video calls:
First names, surnames, employer, professional function, e-mail addresses, telephone numbers (depending on the type of participation), audio, video and textual content of the communications including files, time, duration and location of the participations, profile picture.
Purposes of processing and obligation to provide
This data is technically necessary for us to provide you with the services (e.g. establishing a connection to the website, making a video call), to identify you and to ensure stability and security (e.g. tracking attacks on the services and load distribution). Without it, you cannot access the services, so that there is a theoretical obligation to provide the data.
Storage period
The content of communication via ColloCall is only processed for the duration of the call. Registration data is stored for as long as you use the services. The device data is stored for a period of seven days. Longer processing is possible in individual cases, e.g. for as long as and to the extent necessary to block abusive use of the website.
Recipients
This data is collected and processed by Datenkollektiv (datenkollektiv.net GbR, Florian Rasch und Carsten Ungewitter GbR, Frühlingstr. 14, 01099 Dresden), which provides technical support for our website, on our behalf for the above-mentioned purposes.
Legal basis
The automatic collection of data takes place on the basis of Section 25 (2) No. 2 TDDDG. The storage and further processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, as the purposes of the processing reflect our legitimate interests.
You can object to the storage and further processing at any time. Please note the above information on your right to object. You can declare your objection to the processing of the data to us.
e. Dispatch of newsletters
We send newsletters containing useful information to project partners and other stakeholders at irregular intervals. The e-mail address is processed for the purpose of sending the newsletter. The legal basis is your consent in accordance with Art. 6 para. 1 sentence 1 lit. GDPR or § 7 para. 3 UWG or Art. 6 para. 1 sentence lit. f GDPR, whereby the creation of transparency and information for the project partners and stakeholders about the project's internal development represent our legitimate interests. The newsletter is sent with the help of our e-mail provider AWO AJS gGmbH.
You can object to the sending of the newsletter at any time by telephone, post or e-mail or, if applicable, via an unsubscribe link in the newsletter.
f. Up-to-dateness
This data protection information may be amended from time to time. The last update was made on 29.08.2024.