Europäische Jugendbildungs- und Jugendbegegnungsstätte Weimar · Kontakt

Data Protection Policy

Last update: 25 May 2018

We at the foundation »European Youth Education and Meeting Centre in Weimar« (EJBW) take privacy matters very seriously and ensure that your personal data is safeguarded in all our business processes. In the following, we outline the data protection measures that are relevant to our online services, specifically the data we process when you visit and use the website of the EJBW.

Reasons for collecting and processing your personal data.
Your rights and options concerning data processing.
Contact information for questions on data protection matters.

§ 1 Information on the processing of personal data

In the following, we provide information about the personal data processed during your visit to our website. Personal data is defined as all data which can be associated to you as an individual, e.g. your name, address, email addresses and user behaviour.

The responsible controller in accordance with Art. 4 (7) of the General Data Protection Regulation (GDPR) is:

Stiftung »Europäische Jugendbildungs- und Jugendbegegnungsstätte Weimar«
European Youth Education and Meeting Centre in Weimar
Jenaer Straße 2/4
99425 Weimar (Germany)
Tel: +49 (0) 3643 827–0
Email: kontakt@ejbweimar.de (also see our legal notice).

If you have any questions or concerns on data protection matters, please contact our internal data protection officer Dr Frank König via email at koenig@ejbweimar.de or by letter to our postal address with the added line »der Datenschutzbeauftragte« (Data Protection Officer).

§ 2 Personal data processed when visiting our website

When visiting our website for exclusively informational purposes, i.e. as long as you do not register nor intentionally send us your personal information, we only collect data which is automatically transferred to our server via your browser. This data is technically necessary for rendering the content of our website and ensuring its stability and security (in accordance with Art. 6 (1f) GDPR). This includes the following data:

visited webpage
time of query
amount of transmitted data in bytes
source/reference page (i.e. the page from which you accessed our website)
identification data of the user’s browser type and operating system
IP address, shortened to the last two octets

It is not possible to directly identify the user based on the information saved in the log files. The log files are deleted from our server after 30 days.

In addition to the data listed above, we also save cookies onto your computer when you visit our website. Cookies are small text files which your browser saves to your hard drive and which contain information that we specifically provide. Cookies are not capable of running programmes, nor can they transfer viruses to your computer. Their purpose is to make the online features and services generally more user-friendly and effective.

Usage of cookies:

a) This website uses temporary cookies with the following scope and function:
b) Temporary cookies are automatically deleted when you close your browser. This applies to so-called »session cookies« which store a »session ID« to which your browser assigns the various queries elicited during a user’s visit (session) to a website. The cookie allows us to recognise your computer when your revisit our website. Session cookies are deleted as soon as you logout of or close your browser.
c) You can configure your browser settings according to your personal preferences, e.g. if you wish to opt-out of cookies. However, if you do opt-out, you may not be able to use all the functions offered on our website.

§ 3 Personal data, purposes and legal basis of processing

If you have any general questions, you can contact us at kontakt@ejbweimar.de, and for questions about reservations and booking, you can contact: rezeption@ejbweimar.de. When contacting us via email, we save the data you provide (e.g. first name, last name, address, email address and phone number), so that we can answer your questions or send you an offer. This data is collected in accordance with Art. 6 (1b) GDPR, which allows the controller to collect data for the purpose of fulfilling a contract or arranging pre-contractual measures. We erase all data collected in this manner after its storage is no longer necessary for the purpose provided, or we restrict processing of the data if we are obliged us to keep the data stored in accordance with legal statutes.

In addition to visiting our website for purely informational purposes, you may choose to take advantage of additional services offered on our website. As a rule, we ask you to provide additional personal information, for example when completing registration forms for seminars and events. In these cases, we request the following data:

first and last name
gender
school/institution
email address
postal and/or billing address
date of birth (to verify whether a guest is underage).

Providing your phone number and institution is optional. If applicable, we may ask you to provide reasons for a requested discount and further details when booking accommodation and meals. The legal basis for processing this data is provided by Art. 6 (1b) GDPR.

Sometimes we contract external service providers to process your data for us. We have carefully selected these providers who are contractually bound to comply with our policies and who are monitored on a regular basis. The legal basis for concluding data processing agreements with external service providers is provided by Art. 28 GDPR.

Furthermore, we may forward your personal data to third parties if our contracts are concluded or programmes are offered in conjunction with partners or in cooperation with national or European funding providers. Data is also forwarded in anonymised form for reasons of statistical analysis. Whenever you provide personal information or receive programme descriptions from us, you will find further information about third-party forwarding in the attached information on data protection.

If our service providers or partners are headquartered outside the European Economic Area (EEA), we shall inform you of the resulting consequences in the description of the respective programme.

You can subscribe to receive our newsletter which provides information on current and upcoming seminars and events. To subscribe, we normally require just your email address. We have also integrated the newsletter subscription option into the registration process for seminars and events.

A protocol is created when changes are made to data stored via Mailchimp. No other data is collected. When you sign up for our newsletter, we save your IP address and the date of registration and confirmation. Storage is necessary to substantiate the possible misuse of your email address at the time of registration. The legal basis for data processing in this case is Art. 6 (1a) GDPR and § 7 (2,3) and (3) UWG. Your email address is saved on our servers until you cancel your subscription. We use the so-called »opt-in« procedure; after registration, you are sent an email containing a link with which you confirm your newsletter subscription. Your data is not processed until you click the confirmation link.

You may unsubscribe from our newsletter at any time by clicking the respective link provided in the newsletter. You can also unsubscribe by sending an email to this effect to the contact address listed above. By unsubscribing, you simultaneous withdraw your consent to receiving communication via Mailchimp, statistical analyses and the use of the distribution service provider »Mailchimp«.

For the distribution of the newsletter, we use the services of »Mailchimp«, provided by Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

Your email address is stored on the Mailchimp servers in the USA for the purpose of email delivery. This information is processed for the delivery and analysis of the newsletter on our behalf.

According to its privacy policy, Mailchimp uses this information to improve its services, as well as optimise the delivery and rendering of the newsletter. Mailchimp also uses the data for business purposes in order to determine the recipients’ countries of residence. According to its own information, Mailchimp will neither contact you nor forward your data to third parties.
Mailchimp has proven to be reliable provider. It is a certified member of the US-EU »Privacy Shield« framework and has pledged to comply with EU data protection regulations. We have also concluded a data processing agreement with Mailchimp.

You can view Mailchimp’s privacy policy by clicking the following link: https://mailchimp.com/legal/privacy/. The legal basis for concluding data processing agreements is provided by Art. 28 GDPR.

§ 4 Duration of storage

We store your personal data for as long as is required for the purpose in question. Furthermore, we are legally obliged to store personal data for purposes of documentation and retention (e.g. in compliance with commercial code, tax code, money laundering act). The legally mandated duration of storage can last up to ten years, after which the data is erased.

§ 5 Use of Matomo (formerly Piwik)

We use the web analytics software Matomo to analyse the usage of our website and continuously improve its functionality. Based on the resulting statistics, we can improve our services and make them more interesting to our users. The legal basis for using Matomo is provided by Art. 6 (1f) GDPR.

The analysis requires the use of cookies which are saved onto your computer. The responsible controller stores the information collected in this manner only on its server. You can prevent Matomo from analysing this data by deleting existing cookies and blocking their further use. Please bear in mind that blocking cookies may prevent you from taking advantage of the full range of features available on our website. You can prevent cookies from being saved on your computer by adjusting the default settings in your browser. You can also prevent the use of Matomo by clicking the box below to activate the opt-out plug-in:

Our website uses the Matomo add-on »AnonymiseIP« which abbreviates the user’s IP address so that it cannot be used to directly identify the user. The IP address collected by Matomo from your browser is not aggregated with any other data processed by us.

Matomo is an open-source software package. For more information on its privacy policy, visit https://matomo.org/privacy/

§ 6 Social media

Facebook

Our website does not contain »plugins« to the social network »Facebook« of Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA. Consequently, none of Facebook’s code is active on our web pages.

However, our website does provide a button with a Facebook link. When you click on the button »Share on Facebook«, the address of the page you are currently on or the news item you are currently viewing is sent to a Facebook sharing web app. The next time you log onto Facebook, this information will be shown on your timeline for further sharing. When you share our pages on Facebook, your identity can be deduced from your visit on our website. When you press the »Like« button or submit a comment, this information is also processed and saved by Facebook.

We emphasise that we have no knowledge whatsoever of the content and scope of data processed and stored by Facebook and therefore we recommend consulting the current privacy policy of Facebook at: https://www.facebook.com/policy.php.

YouTube

YouTube is a registered trademark of Google Inc. (»Google«) 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Our website features YouTube videos which are embedded with the www.youtube-nocookie.com/ option (»privacy-enhanced mode«). This means that no cookies are saved onto your computer unless you click on a video. However, certain data may be saved in your browser’s »local storage« cache even after the session has concluded. This includes so-called »device ID« information, the purpose of which is unclear. When you access our website again, a link is established with YouTube and the DoubleClick network.

When you click on a YouTube video, a link is established to the servers of YouTube. This may result in further processing of your personal data, over which we have no influence.
For more information on YouTube’s data protection and privacy policy, visit: https://policies.google.com/privacy?hl=en-GB&gl=de.

§ 7 Your rights

In accordance with the GDPR, you have the following rights with regard to your personal data:

right to information (Art. 15 GDPR)
right to rectification (Art. 16 GDPR)
right to erasure (Art. 17 GDPR)
right to restricted processing (Art. 18 GDPR)
right to object (Art. 21 GDPR)
right to data portability (Art. 20 GDPR)

You also have the option of contacting the responsible supervisory authority:

Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit
Postfach 900455
99107 Erfurt
Häßlerstraße 8
99096 Erfurt

Tel. (front office): +49 361–3771900
Fax: +49 361–3771904
Email: poststelle@datenschutz.thueringen.de

§ 8 Objection or withdrawal of consent to the processing of your personal data

If you have granted consent to having your data processed, you may withdraw your consent at any time. Withdrawing your consent after having granted it may detrimentally impact our ability to process your personal data.

If we determine that processing your personal data is vital to our interests, you may lodge an objection to further processing. This applies when processing is not absolutely essential to fulfilling the terms of a contract with you, the functions of which we would subsequently describe in detail. If you lodge an objection, we may ask you to explain your reasons why you wish to revoke your consent. Should your objection be justified, we will review the case and either discontinue or modify the data processing, or inform you of our protection-relevant reasons for continuing the data processing.

Of course, you may object at any time to having your personal data processed for marketing purposes. For more information on objecting to marketing measures, please contact us at the following address:

If you have any questions or concerns on data protection matters, please contact our internal data protection officer Dr Frank König via koenig@ejbweimar.de or by letter to our postal address with the added line »der Datenschutzbeauftragte« (Data Protection Officer).

§ 9 Changes

We reserve the right to make changes to the terms of this data protection policy as required.

share on Facebook