Data Privacy

 

1. NAME AND CONTACT DETAILS OF THE DATA CONTROLLER AND THE DATA PROTECTION OFFICER

This data protection information applies to data processing by:

Controller: fairplaid GmbH (hereinafter referred to as "We"), Sophienstraße 26, 70178 Stuttgart, Germany, Email: hello(at)fairplaid.org, Phone: +49 (0) 711 2172 597 0. The data protection contact person is Mr. Torsten Lührs, available at the above address and via t.luehrs(at)fairplaid.org. This privacy policy also applies to the partner platforms operated by fairplaid GmbH and the information portal www.crowdfunding-hilfecenter.de.

2. COLLECTION AND STORAGE OF PERSONAL DATA AND THE NATURE AND PURPOSE OF THEIR USE

a) When Visiting the Website

When you access this website, information is automatically sent to our website server by the web browser on your end device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion (after the purpose of collection has been fulfilled, but no later than 10 days):

  • The browser and version used, and the operating system of your computer.

  • IP address of the requesting computer.

  • Date and time of access.

  • Name and URL of the accessed file.

  • Website from which access is made (referrer URL).

We process the data mentioned for the following purposes:

  • Ensuring a smooth connection setup for the website.

  • Ensuring a comfortable use of our website.

  • Evaluation of system security and stability.

  • For other administrative purposes.

The legal basis for data processing is Art. 6(1)(f) GDPR. Our legitimate interest follows from the purposes of data collection listed above. In no case do we use the collected data to draw conclusions about your person. Furthermore, we use cookies and analysis services when you visit our website. Further explanations can be found in sections 4 and 5 of this privacy policy.

b) When Subscribing to Our Newsletter

If you have expressly consented to this in accordance with Art. 6(1)(a) GDPR, we will use your email address to send you our newsletter regularly. To receive the newsletter, providing an email address is sufficient. You can unsubscribe at any time, for example, via a link at the end of each newsletter. Alternatively, you can also send your request to unsubscribe at any time to projekte@fairplaid.org by email.

The data of newsletter subscribers are transferred to MailChimp and processed there.

c) When Using Our Contact Form

For any inquiries, we offer you the opportunity to contact us via a form provided on the website. Providing a valid email address is required so that we know who the request is from and can respond to it. Additional information can be provided voluntarily.

The data processing for the purpose of contacting us is carried out in accordance with Art. 6(1)(a) GDPR, based on your voluntarily given consent.

The personal data collected by us for the use of the contact form will be automatically deleted after your request has been processed.

d) When Using the Platform as a Starter

If you use the platform as a starter and register your own projects according to our terms and conditions, we process the personal information you provide as part of the contract as joint controllers together with the platform partner, who carries out the data processing to decide on the release of individual projects according to its guidelines. In addition, the platform partner is responsible for processing to decide on the release of additional optional funds from its funding pool for individual projects according to its funding guidelines.

The data processing described is carried out in accordance with Art. 6(1)(b) GDPR for the proper fulfillment of the contract.

We act as a comprehensive point of contact for all affected persons and, with this statement, provide them with the information required by Art. 13 and 14 of the GDPR. In addition, we will provide affected individuals with the information they are entitled to under Art. 15 of the GDPR upon request. However, you are free to contact the platform partner as the data controller. You can reach them [here](Link to the partner's contact information).

Hereby, we have provided you with the information required by Art. 26(2) of the GDPR.

e) When Using the Platform as a Supporter

If you use the platform as a supporter, we process the personal information you provide during the contract conclusion for the proper fulfillment of the contract in accordance with Art. 6(1)(b) GDPR.

 

3. WEITERGABE VON DATEN

We do not transmit your personal data to third parties for purposes other than those listed below.

We only disclose your personal data to third parties when:

  • You have given your express consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.

  • Disclosure is required under Art. 6(1) sentence 1 lit. f GDPR for the assertion, exercise, or defense of legal claims, and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data.

  • There is a legal obligation for disclosure under Art. 6(1) sentence 1 lit. c GDPR.

  • It is legally permissible and necessary for the performance of contractual relationships with you pursuant to Art. 6(1) sentence 1 lit. b GDPR.

  1. COOKIES

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not harm your device, do not contain viruses, trojans, or other malicious software.

The cookie stores information that is specific to the device you are using. However, this does not mean that we gain immediate knowledge of your identity.

The use of cookies serves, on the one hand, to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after you leave our site.

Furthermore, we also use temporary cookies to optimize user-friendliness, which are stored on your device for a specified period of time. If you visit our site again to use our services, it will automatically recognize that you have already been with us and what inputs and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you (see Section 5). These cookies enable us to automatically recognize that you have already visited our site when you visit it again. These cookies are automatically deleted after a defined period.

The data processed by cookies are necessary for the aforementioned purposes to protect our legitimate interests and those of third parties pursuant to Art. 6(1) sentence 1 lit. f GDPR.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer, or a notification appears before a new cookie is created. Nevertheless, fully disabling cookies can result in you not being able to use all the functions of our website.

ANALYSIS TOOLS

The tracking measures listed below and used by us are carried out based on Art. 6(1) sentence 1 lit. f GDPR. The tracking measures are implemented to ensure a needs-based design and continuous optimization of our website. We also use tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offering for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.

a) Google Analytics

For the purpose of customizing and continuously optimizing our pages, we use Google Analytics, a web analysis service of Google Inc. (https://www.google.com/intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymous user profiles are created, and cookies (see Section 4) are used. The information generated by the cookie about your use of this website, such as

Browser type/version,

Operating system used,

Referrer URL (the previously visited page),

Hostname of the accessing computer (IP address),

Time of the server request,

is transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activities, and to provide other services related to website usage and internet usage for market research and to tailor these websites to meet the needs of users. This information may also be transferred to third parties if required by law or if third parties process this data on behalf of Google. Under no circumstances will your IP address be merged with other Google data. IP addresses are anonymized, so an assignment is not possible (IP masking).

You can prevent the installation of cookies by setting your browser software accordingly; however, we would like to point out that in this case, you may not be able to fully use all functions of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).

In addition to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie will be set to prevent future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

For more information about data protection in connection with Google Analytics, please visit the Google Analytics Help Center (https://support.google.com/analytics/answer/6004245?hl=en).

b) Google AdWords Conversion Tracking

To statistically record the use of our website and to evaluate it for the purpose of optimizing our website for you, we also use Google Conversion Tracking. Google AdWords will set a cookie (see Section 4) on your computer if you have reached our website via a Google ad.

These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the AdWords customer's website and the cookie has not yet expired, Google and the customer can tell that the user clicked on the ad and was redirected to this page.

Each AdWords customer receives a different cookie. Cookies cannot be tracked through the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users.

If you do not want to participate in the tracking process, you can also reject the required setting of a cookie - for example, via browser settings that generally deactivate the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com". Google's privacy policy on conversion tracking can be found here (https://services.google.com/sitestats/en.html).

 

SOCIAL MEDIA PLUGINS

a) On our website, we use social media plugins from the social networks Facebook, Instagram, Twitter, and SnapChat based on Art. 6(1)(f) GDPR to make our website more visible. The underlying advertising purpose is considered a legitimate interest in the sense of the GDPR. The responsibility for the data protection-compliant operation lies with their respective providers. We integrate these plugins using a two-click solution to protect our website visitors as effectively as possible. This means that when you visit our site, no personal data is initially transferred to the plugin providers. You can identify the plugin provider by the marking on the box with its initial letter or logo. We give you the option to communicate directly with the plugin provider by clicking on the marked field. Only when you click on the marked field and activate it, the plugin provider receives the information that you have visited the respective website of our online offering. In addition, the data mentioned in section 2 a) of this declaration is transmitted. According to the information provided by the respective providers, the IP address is immediately anonymized after being collected in Germany in the case of Facebook and Xing. By activating the plugin, personal data is therefore transferred from you to the respective plugin provider and stored there (for US providers, in the USA). Since the plugin provider primarily collects data through cookies, we recommend that you delete all cookies in your browser's security settings before clicking on the grayed-out box.

b) We have no influence on the data collected and data processing operations, nor are we aware of the full extent of data collection, the purposes of processing, or the storage periods. We also do not have any information about the deletion of data collected by the plugin provider.

c) The plugin provider stores the data collected about you as user profiles and uses them for advertising, market research, and/or tailoring its website to your needs. Such an evaluation is carried out, especially for users who are not logged in, to display tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but you must contact the respective plugin provider to exercise this right. Through the plugins, we offer you the opportunity to interact with social networks and other users, so we can improve our offering and make it more interesting for you as a user. The legal basis for using the plugins is Art. 6(1)(f) GDPR.

d) Data is transferred regardless of whether you have an account with the plugin provider and are logged in. If you are logged in with the plugin provider, your data collected by us will be directly assigned to your existing account with the plugin provider. If you press the activated button and, for example, link the page, the plugin provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, especially before activating the button, to avoid association with your profile with the plugin provider.

e) Further information on the purpose and scope of data collection and its processing by the plugin provider can be found in the privacy policies of these providers, which are provided below. There, you can also find more information about your rights and options to protect your privacy.

f) Addresses of the respective plugin providers and URLs with their privacy policies: [insert the addresses and URLs of the respective plugin providers and their privacy policies here]

g) In addition, we have embedded YouTube videos into our online offering, which are stored on http://www.YouTube.com and can be played directly from our website. By visiting the website, YouTube receives information that you have accessed the respective subpage of our website. In addition, the data mentioned in section 2 a) of this declaration is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in with Google, your data is directly associated with your account. If you do not wish for this association with your YouTube profile, you must log out before activating the button. YouTube stores your data as user profiles and uses them for advertising, market research, and/or tailoring its website to your needs. Such an evaluation is carried out, especially for users who are not logged in, to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but you must contact YouTube to exercise this right. For further information on the purpose and scope of data collection and its processing by YouTube, please refer to their privacy policy. You can also find additional information about your rights and options for protecting your privacy here: https://www.google.com/intl/en/policies/privacy. Google processes your personal data in the United States and has submitted to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

7. DATA SUBJECT RIGHTS

You have the right:

in accordance with Art. 15 GDPR, to request information about the personal data we process about you. In particular, you can obtain information about the processing purposes, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectify, erase, restrict processing, or object, the existence of a right to lodge a complaint, the source of your data if it was not collected by us, and the existence of automated decision-making, including profiling, and meaningful information about its details;

in accordance with Art. 16 GDPR, to promptly request the correction of incorrect or completion of your personal data stored by us;

in accordance with Art. 17 GDPR, to request the deletion of your personal data stored by us, provided that the processing is not necessary for the exercise of the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims;

in accordance with Art. 18 GDPR, to request the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you oppose its erasure, and we no longer need the data, but you need it for the assertion, exercise, or defense of legal claims, or you have objected to processing in accordance with Art. 21 GDPR;

in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request its transmission to another controller;

in accordance with Art. 7(3) GDPR, to revoke your consent given to us at any time. This means that we may no longer continue processing data based on this consent in the future, and

in accordance with Art. 77 GDPR, to lodge a complaint with a supervisory authority. Usually, you can contact the supervisory authority at your habitual residence or workplace or our registered office for this purpose.

8. RIGHT TO OBJECT

If your personal data is processed based on legitimate interests according to Art. 6(1)(f) GDPR, you have the right, in accordance with Art. 21 GDPR, to object to the processing of your personal data, provided that there are reasons that arise from your specific situation or the objection is directed against direct marketing. In the latter case, you have a general right of objection that will be implemented by us without specifying a particular situation.

If you wish to exercise your right of revocation or objection, simply send an email to projekte(at)fairplaid.org.

  1. DATA SECURITY

We use the common SSL (Secure Socket Layer) method during website visits, in conjunction with the highest encryption level supported by your browser. In most cases, this is 256-bit encryption. If your browser does not support 256-bit encryption, we resort to 128-bit V3 technology instead. You can recognize whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser.

Furthermore, we employ suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

  1. DATA PROTECTION PROVISIONS REGARDING THE PAYMENT METHODS SECUPAY.DIRECTDEBIT, SECUPAY.INVOICE PURCHASE, AND SECUPAY.CREDITCARD

The data controller has integrated the components secupay.DIRECTDEBIT, secupay.INVOICE PURCHASE, and secupay.CREDITCARD of secupay AG (hereinafter 'secupay') on this website. secupay is a payment institution as defined by the Payment Services Supervision Act (ZAG) and is registered with the Federal Financial Supervisory Authority (BaFin), Graurheindorfer Str. 108, 53117 Bonn, under registration number 126737. secupay enables cashless payment for products and services on the internet. secupay reflects a procedure in which the purchase price claim is assigned to secupay. This allows a merchant to deliver goods, services, or downloads to the customer immediately after ordering.

If you, as a data subject, select 'Direct Debit,' 'Invoice Purchase,' or 'Credit Card' as the payment option during the order process in our online shop, data is automatically transmitted to secupay. By selecting one of these payment options, you consent to the transmission of personal data necessary for payment processing.

When processing payments through secupay, as a buyer, you transmit payment data to secupay. secupay then carries out a technical examination of the payment default risk. Subsequently, the transaction result is automatically communicated to the online merchant.

The personal data exchanged with secupay consists of first name, last name, address, email address, IP address, telephone number, or other data required for payment processing. The data is transmitted for the purpose of payment processing and fraud prevention. The data controller will also transfer other personal data to secupay if there is a legitimate interest in the transfer. The personal data exchanged between secupay and the data controller may be transmitted to credit reporting agencies by secupay. This transmission serves the purpose of identity and creditworthiness verification. secupay may also pass on personal data to affiliated companies and service providers or subcontractors, to the extent necessary to fulfill the contractual obligations or if the data is to be processed on behalf. The data subject has the option to revoke consent to the handling of personal data at any time, as stated by secupay. Revoking consent does not affect personal data that must be processed, used, or transmitted for (contractual) payment processing. The applicable data protection provisions of secupay can be found at https://www.secupay.com/de/datenschutz.

  1. UP-TO-DATE STATUS AND CHANGES TO THIS PRIVACY POLICY

This privacy policy is currently valid and is dated June 2020.

Due to the ongoing development of our website or changes in legal or regulatory requirements, it may be necessary to amend this privacy policy. The current privacy policy can be accessed and printed by you on the website at any time at https://www.fairplaid.org/datenschutz.

STATUS: June 2020"