Privacy

As part of our obligations according to Regulation (EU) 2016/679 (General Data Protection Regulation, referred to below as “GDPR”), our Data Privacy Statement provides you with information about the processing of your personal data and your rights in this respect.

We only process personal data (referred to below as “data”) when necessary or for the purpose of providing a functional, user-friendly website, including content and services.

According to GDPR Article 4(2), “processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

The statement below provides you with information about the type, scope, purpose, duration and legal basis of our data processing, to the extent that we determine, either alone or jointly with others, the purpose and means of this processing. It also provides information about the third-party components we use to optimise our website and enhance the quality of its usage, to the extent that data is used by these third parties, who are then responsible for their use of the data.

The Privacy Statement is structured as follows:

I. Information about us

II. Information about data processing

III. Your rights

I. Information about us

We are the “controller” of our data processing as defined by GDPR Article 4(7).

Our contact details are as follows:

Animal Welfare Foundation e.V.
Basler Straße 115
79115 Freiburg
Germany
T.: +49 (0) 761 4787 340
info@animal-welfare-foundation.org

II. Information about data processing  

In principle, the legal bases for the processing of your data by us result from

• Article 6 lit a) GDPR: If you have given your consent to this.

• Article 6 lit b) GDPR: If the data is required for contract initiation or contract execution

• Article 6 lit f) GDPR: If we have a legitimate interest in processing your data

Please see below for details.

1. When you visit our website

a) Cookies

We use cookies on our website. Cookies are small files that are stored, via your web browser, on the computer you use to visit our website. Cookies give us your location data and let us know what browser you are using, as well as specifying the IP address of the Internet connection you are using to visit our website.

We use cookies to optimise our website because the information they provide enables us to design a more effective and secure site.

The legal basis for the processing of your data is GDPR Article 6(1)(b), provided that these cookies process data for contract initiation or contract execution.

If the processing of your data does not serve to initiate or execute a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then GDPR Article 6(1)(f).

Cookies are deleted from our servers when you exit your browser.

You can use your browser settings to prevent or restrict the storage of cookies on your computer. You can also delete cookies stored on your computer at any time. How you do so depends on the browser you are using. You can usually find answers to any questions you may have by using your browser's Help function.

b) Server files

When you visit the website of Animal Welfare Foundation e.V. (referred to below as “AWF”), your web browser will transmit the following information to AWF, where it will be stored in the form of server log files:

• Type and version of your web browser
• Your operating system
• The page(s) on our website that you visited
• Date and time of your access to our website
• IP address of the Internet connection you are using to visit our website

This data is sent to us and stored by us for purely technical reasons, in particular to ensure and improve the stability and security of our website. As such, we have a legitimate interest in the collection and storage of this data.

The legal basis for this is GDPR Article 6(1)(f).   

The data is deleted after a period of no more than 14 days, provided that there is no legal obligation to store it for a longer period. 

c) Third-party cookies

Our website may also use cookies from partner companies with whom we collaborate for the purpose of advertising, analysis or the functioning of our website.

For details, please refer to the following information on the purposes of and legal basis for processing third-party cookies.

2. Registering on our website

You have the option of registering on the website of AWF in order to take part in petitions. When you do so, the information you enter, such as your name, address, phone number(s) and e-mail address, will be stored permanently. The exact data that is stored is based on the input screen used for registration.

During the registration process, you will be asked for your consent to the collection and storage of this data.

Your data is collected and stored so that you can take part in petitions. If you register to take part in a petition, you will also be added to the distribution list for our newsletter. For more information, refer to Item 3 of this statement.

The data is deleted as soon as you delete your customer account by selecting the “Delete profile” menu option, provided that we are not legally obliged to keep a record of it.

The legal basis for the collection and storage of data following your consent is based on GDPR Article 6(1)(a).

In addition, the legal basis for the permanent storage of your data is Article (6)(1)(f) GDPR. Since our organisation is exclusively financed by donations, we have a legitimate interest in fundraising. The permanent storage of your data is required for this.

You can object to the processing, and particularly the permanent storage, of your data any time; see no. III below.

3. Newsletter

You can register with us to receive our free newsletter. You will also receive our newsletter if you take part in petitions as described under Item 2 of this statement.

We use CleverReach to organise and distribute our newsletter. CleverReach is a service provided by CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany (referred to below as “CleverReach”).

Information on data security from CleverReach is available at www.cleverreach.com/de/datensicherheit/. You can find CleverReach's privacy policy at www.cleverreach.com/de/datenschutz/

In addition to the data, you are asked to provide during the process of registering for our newsletter (e-mail address and additional contact details if applicable), which is processed by CleverReach, your IP address and the date and time of your registration are also stored.

As a subsequent step in the registration process, you will be asked to consent to having the newsletter sent to you. At this point, the content of the newsletter is described in detail and reference is made to this Privacy Statement.

CleverReach will then send you newsletters containing a tracking pixel (or “web beacon”). This tracking pixel lets us know whether and when you have read the newsletter and whether you have clicked on links contained in the newsletter to take you to other web pages. Further technical details, such as details of your IT system and your IP address, will be stored so that we can optimise our newsletter offering and tailor it to the interests of our readers. As such, our intention in processing this data is to improve the quality of our newsletter offering and make it more attractive.

The legal basis for the sending of the newsletter and the data analysis is GDPR Article 6(1)(a).

You may withdraw your consent to receiving the newsletter at any time with immediate effect in accordance with GDPR Article 7(3). To do you, simply inform us of your withdrawal of consent or click on the link for unsubscribing from the newsletter that is contained in each issue.

We permanently save the data you provide to us. In addition to your consent, (Article 6 Paragraph 1 lit a)) Article 6 Paragraph 1 lit f) GDPR, is the legal basis for the permanent storage of your data. Since our organisation is exclusively financed by donations, we have a legitimate interest in acquiring donations. The permanent storage of your data is used for this.

You can object to the processing of your data, and particularly the permanent storage of your data, any time; see no. III below.

4. Campaign form (protest mail)

You can take part in our campaigns to send protest e-mails. You participate by entering your data on the form provided. The personal data you enter, such as name, company name, address, e-mail address, etc., are transmitted to us and stored permanently via a secure SSL-connection. Our legitimate interest in storing this data is to optimise political consensus-building, animal welfare, the organisation of future campaigns and education on animal welfare issues.

The legal basis is thus GDPR Article 6(1)(f).

In addition, our organisation is exclusively funded by donations, which is why we have a legitimate interest in fundraising. The permanent storage of your data is used for this.

Moreover, the legal basis for the collection and permanent storage of your data also results after your consent from Article 6 Paragraph 1 lit a) GDPR.

You can object to the processing, and particularly the permanent storage of your data any time; see no. III below.

5. data protection provisions on the use and application of Facebook

We have integrated plugins from the social networking company Facebook on this website.

As a social network, Facebook enables users to communicate with each other and interact on the internet. In this context, Facebook can be used to exchange opinions and experiences and enables users to provide personal and company-related information.

The social network Facebook is operated by Facebook, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. The controller of personal data where a data subject lives outside the US or Canada is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Facebook is certified under the EU-US Privacy Shield ("EU-US Privacy Shield"), which can be viewed with the following link:

www.privacyshield.gov/participant

This guarantees that Facebook complies with the EU's data protection requirements when processing data in the USA.

Each time you call up a page of our website on which a Facebook plugin has been integrated, your internet browser is caused to download a representation of the corresponding Facebook plugin from Facebook. A complete overview of all Facebook plug-ins can be found at developers.facebook.com/docs/plugins/. This tells Facebook which specific sub-page of our website you are visiting.

If you are logged in on Facebook at the same time, Facebook recognises which specific sub-pages of our website you are visiting each time you call up our website for the entire duration of your respective stay on our website. This information is collected by the respective Facebook plugin and assigned to your Facebook account by Facebook.

If you click on one of the Facebook buttons integrated on our websites, for example the "Like" button, or if you post a comment, Facebook assigns this information to your personal Facebook user account and stores this data.

Facebook always receives information via the respective Facebook plugin that you have visited our Internet pages if you are logged into Facebook at the same time as calling up our Internet pages, regardless of whether you click on a Facebook button or not. You can prevent this transmission of your data to Facebook by logging out of your Facebook account before visiting our websites.

At de-de.facebook.com/about/privacy/ you will find detailed information about the collection, processing and use of your data by Facebook. It also explains which settings options Facebook offers you to protect your privacy.

We use the Facebook plugin to analyse our online offering and to optimise the operation of our online offering.

The use is based on our legitimate interest, therefore it finds its legal basis in Art. 6 para. 1 lit. f. DSGVO.

You can prevent the use of the Facebook plugin at any time by removing the check mark next to "Statistics" in the selection of cookies used (cookie banner) or by not setting any check mark there. 

6. Google Analytics

Our website uses Google Analytics. This is a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (referred to below as “Google”).

Google is certified in accordance with the EU-US Privacy Shield, which you can view here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active This means that Google guarantees compliance with the EU’s data protection regulations even when data is processed in the US.

We use Google Analytics to analyse usage behaviour on our website.

The legal basis for this is GDPR Article 6(1)(f). Our legitimate interest lies in the analysis, optimisation and operation of our website.

Your usage behaviour and user-related information, such as your IP address, location, time and frequency of your visit to our website, are transferred to a Google server in the US and stored there. However, as we use Google Analytics with an anonymisation function, Google shortens your IP address within the EU or European Economic Area.

Google itself then uses the data collected in this way to analyse your visit to our website and your usage activities. This analysis is then provided to us by Google. We also use this data to provide you with additional services where relevant in connection with the use of our website and of the Internet.

Google guarantees that it will not link your IP address to other data. For more information about Google’s data privacy policies, see https://www.google.com/intl/de/policies/privacy/partners. These policies detail, in particular, how you can prevent the use of your data.

Google also provides the following deactivation add-on. This add-on can be installed with all standard browsers. The add-on provides you with additional options for controlling the data that is collected by Google when you access our website. The add-on prevents the Google Analytics JavaScript (ga.js) from sharing information with Google Analytics about your visit to our website. However, it does not prevent data from being sent to us or to other web analysis services.

7. Points to note in relation to job applications and the application process

We collect and process data from applicants for the purpose of completing the application process, including by electronic means, in particular when applicants submit their application documents via electronic channels (e.g. by e-mail or using our online application form). If a contract of employment is concluded between us and an applicant, the data sent to us for the purpose of concluding the employment relationship will be stored in accordance with legal provisions. Otherwise, data provided to us by the applicant over the course of the application process will be deleted no later than 14 days from the date on which our rejection of the application is communicated to the applicant, provided that this deletion is not in conflict with any other legitimate interest on our part.

To the extent that processing is necessary for the performance of (pre-)contractual services, the legal basis for the processing of your data is GDPR Article 6(1)(b).

To the extent that processing is necessary in order for us to pursue a legitimate interest, such as the submission of evidence in a legal case heard by the labour court, the legal basis for the processing of your data is GDPR Article 6(1)(f).

You can object to the processing of your data any time; see no. III below.

8. Privacy policy on using PayPal as a payment method

You can make payments to us using the payment service provider PayPal.

The payments are processed using virtual PayPal accounts. PayPal also offers the option of processing virtual payments via credit card if you do not have your own PayPal account.

Payments via PayPal account are made exclusively using your e-mail address. PayPal allows you to make payments to third parties and to receive payments. PayPal also assumes the function of a custodian of funds and offers buyer protection services.

PayPal is operated by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal L-2449, Luxembourg.

If you use PayPal to make a payment, your data is stored permanently and transmitted to PayPal automatically. By selecting this payment option, you consent to having your data transmitted as necessary for the purpose of payment processing.

The data transmitted to PayPal usually comprises your first name, last name, address, e-mail address, IP address, phone number, mobile phone number and other data necessary for payment processing.

Under certain circumstances, data exchanged between us and PayPal may be passed on to credit references agencies. This data is transferred for the purpose of checking your identity and your credit rating.

PayPal may share your data with associated companies and service providers or subcontractors, to the extent that this is required in order to fulfil contractual obligations or that the data is to be processed by these parties on behalf of PayPal.

You may withdraw your consent for PayPal to handle your data at any time. However, this withdrawal of consent shall not affect data that must be processed, used or shared for the purpose of (contractual) payment processing. 

To view PayPal's current data privacy policy, see https://www.paypal.com/ie/webapps/mpp/ua/privacy-full.

We store this data permanently in pursuit of the legitimate interest of the swift and smooth processing of donation payments. Since our organisation is exclusively funded by donations, we also have a legitimate interest in fundraising. The permanent storage of your data is used for this.

The legal basis for this is GDPR Article 6(1)(f).

You can object to the processing of your data, and particularly the permanent storage of your data at any time; see no. III below.

9. Data protection regulations for Stripe as a payment method

If you want to make payments to us, this can be done via the payment service provider Stripe (Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland).

The data that you provide during the payment process, such as name, address, account number, bank code, credit card number (if necessary), donation amount, currency and transaction number, will be processed in accordance with GDPR Article 6(1)(b) and passed on to Stripe.

Your data is transferred to Stripe for the sole purpose of processing your payment and only to the extent that is necessary. You can find more information about Stripe's data protection policy here: https://stripe.com/de/privacy#translation.

The data you provide during the payment process, such as your name, address, donation amount, currency and transaction number (but not your bank details) will be saved permanently by us. In addition to your consent (Article 6 Paragraph 1 lit a)) Article 6 Paragraph 1 lit f) GDPR, is the legal basis for the permanent storage of your data. Since our organisation is exclusively funded by donations, we have a legitimate interest in fundraising. The permanent storage of your data is used for this.

In this respect, this also represents our legitimate interest in processing the data, which has its legal basis in GDPR Article 6(1)(f).

You can object to the processing, and particularly the permanent storage of your data at any time; see no. III below.

10. Online donations with Spendino

For our donation form we use the web-based online solution "Spendino" of GRÜN Software Group GmbH, Pascalstraße 6, 52076 Aachen. GRÜN Software Group GmbH has contractually assured us of compliance with the relevant data protection guidelines and laws. GRÜN Software Group GmbH may only process personal data for the purpose of processing your donation.

When donating online via "Spendino", the personal data you enter in the donation form, such as name, company name, your address, e-mail address, are transmitted to us via an SSL-secured connection and stored permanently. Your payment data is forwarded in encrypted form to the payment provider used by us or selected by you.

Our legitimate interest in processing your data is based on GDPR Article 6(f) and consists in the proper processing of donation payments and, if necessary, the issuing of a donation receipt and the optimisation of our donation process. Since our organisation is exclusively funded by donations, we have a legitimate interest in fundraising. The permanent storage of your data is used for this.

You can object to the processing, and particularly to the permanent storage of your data at any time; see no. III below.

11. Payment by bank transfer or direct debit

You can also make donation payments via bank transfer or direct debit. In addition to your IBAN, we save all other data that is made available to us during the payment process permanently, such as your name, home address, donation amount, purpose, time of donation and, if applicable, donation rhythm.

Our legitimate interest in processing your data is based on GDPR Article 6(f) and consists in the processing you your donation and the improvement of our donation process in general. Since our organisation is exclusively funded by donations, we have a legitimate interest in fundraising. The permanent storage of your data is used for this.

You can object to the processing, and the permanent storage of your data at any time; see no. III below.

12. Cash donations

You can also donate in cash. If you provide us with personal data, such as name, address, etc., we will store this information permanently.

Our legitimate interest in processing your data is based on GDPR Article 6(f) and consists in the proper processing your donation and the improvement of our donation process in general. Since our organisation is exclusively funded by donations, we have a legitimate interest in fundraising. The permanent storage of your data is used for this.

You can object to the processing, and the permanent storage of your data at any time; see no. III below.

13. Kilometre donation form

If you use the donation option we offer with the kilometre donation form (“Kilometerspende”), the personal data you enter on this form, such as name, name of the company, your address, e-mail address, donation amount, donation date, etc. will be transmitted to us via an SSL-secured connection and will be saved permanently. Donation payments using this form are only possible via PayPal or by bank transfer. Information on payments via PayPal can be found under no. 11 of this data privacy statement.

Our legitimate interest in the processing of your data is based on GDPR Article 6(f) and consists in the proper processing of donation payments and, if necessary, the issuing of a donation receipt and the optimisation of our donation processing. Since our organisation is exclusively funded by donations, we have a legitimate interest in fundraising. The permanent storage of your data is used for this.

You can object to the processing, and the permanent storage of your data at any time; see no. III below.

14. Google reCAPTCHA

We use the Google reCaptcha service to determine whether a person or a computer is making a certain entry on our campaign or newsletter forms. Google uses the following data to check whether you are a person or a computer: IP address of the device used, the page on our website that you visit and on which the captcha is used, the date and duration of the visit, the identification data of the device used, browser and operating system type, Google account if you are logged in to Google, mouse movements on the reCaptcha areas and tasks in which you are required to identify images.

There is a legitimate interest on our part in this data processing to ensure the security of our website and to protect us from automated inputs (attacks).

The legal basis for the processing of this data is described in GDPR Article 6(1)(f).

III. Your rights

You have the following rights in relation to the data processing outlined above:

If you have given us your consent to process your data, you can revoke this consent at any time with effect for the future, see Article 7 Paragraph 3 GDPR. The contact details for the revocation can be found in section I. of this data privacy statement.

You have the right to object to the future processing of data concerning you, provided that the data is processed by us in accordance with GDPR Article 6(1)(f). In particular, an objection can be raised in relation to the processing of data for the purpose of direct marketing. This right is based on GDPR Article 21.

You have the right to demand confirmation from us as to whether we are processing data concerning you. You also have the right to obtain information detailing which specific data is being processed and the right to receive further information in accordance with GDPR Article 15(1)(a-h).

If the data concerning you that is being processed by us is inaccurate or incomplete, you have the right to complete and/or rectify this data in accordance with GDPR Article 16.

In addition, you have the right to obtain from us the immediate erasure of data concerning you in accordance with GDPR Article 17, provided that processing of the data is not required in accordance with GDPR Article 17(3). In this case, you have the right to restrict processing in accordance with GDPR Article 18.

You have the right to receive from us data concerning you that has been provided by you. You also have the right to have this data transmitted by us to another supplier/controller in accordance with GDPR Article 20.

In addition, you have the right to lodge a complaint with a relevant supervisory authority if you consider that our processing of data concerning you infringes on data protection regulations. This is based on GDPR Article 77.

In addition, we are obliged to inform all recipients to whom we have disclosed data of any correction or deletion of data or of any restriction on processing in accordance with GDPR Article 16, Article 17(1) and Article 18, unless doing so would be impossible or would involve disproportionate effort. Notwithstanding the above, the user is entitled to obtain information about these recipients.

End of Data Privacy Statement