Data protection notice
With this privacy policy we would like to inform you how we process personal data and explain your rights. We are aware of the importance that the processing of personal data has for you as an affected user and accordingly observe all relevant legal requirements. The protection of your privacy is of the utmost importance to us. The processing of your personal data by us is carried out in compliance with the General Data Protection Regulation as well as the applicable state data protection provisions.
Name and contact details of the controller and of its representative
BOROS Foundation gemeinnützige GmbH
Reinhardtstrasse 20
10117 Berlin
Phone: +49 30 27594065
E-mail: info@boros-foundation.de
Authorised managing directors: Karen and Christian Boros
Definitions
This privacy policy uses the terminology of the General Data Protection Regulation (GDPR).
“personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
“restriction of processing” means the marking of stored personal data with the aim of limiting their processing in the future.
“profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
“pseudonymisation” means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
“filing system” means any structured set of personal data which are accessible according to specific criteria, whether centralised, decentralised or dispersed on a functional or geographical basis;
“controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
“processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
“recipient” means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
“third party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
“consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
Processing operations
We collect and process the following personal data about you:
• contact and address information, insofar as you have provided us with your contact information or registered on our site,
• online identifiers (e.g. your IP address, browser type and browser version, the operating system used, the referrer URL, the IP address, the file name, the access status, the amount of data transferred, the date and time of the server request),
• social media identifiers.
Purposes of processing
We process your data for the following purposes:
• for the contact you have requested,
• for advertising purposes,
• to send the appointment reminder in connection with the guided tours,
• for quality assurance and
• for our statistics.
Legal basis of the data processing
The processing of your data takes place on the following legal bases:
• your consent pursuant to Art. 6(1)(a) GDPR,
• for the performance of a contract with you pursuant to Art. 6(1)(b) GDPR,
• for the fulfilment of legal obligations pursuant to Art. 6(1)(c) GDPR or
• on the basis of a legitimate interest pursuant to Art. 6(1)(f) GDPR.
Legitimate interests
Insofar as we base the processing of your personal data on legitimate interests within the meaning of Art. 6(1)(f) GDPR, these are
• the improvement of our offering,
• protection against misuse and
• the keeping of our statistics.
Data sources
We receive the data from you (including via the devices you use). Should we not collect the personal data directly from you, we will additionally inform you of the source from which the personal data originate and, where applicable, whether they come from publicly accessible sources.
Recipients or categories of recipients of the personal data
When processing your data, we work together with the following service providers who have access to your data:
• providers of web analytics tools,
• guided-tour leaders.
A transfer of data to third countries outside the European Union takes place. This is done on the basis of legally provided contractual arrangements intended to ensure an adequate level of protection of your data, which you may inspect on request.
Storage period
We store your personal data only for as long as is necessary to achieve the purpose of processing or for as long as the storage is subject to a statutory retention period. We store your data,
• if you have consented to the processing, at most until you revoke your consent,
• if we require the data for the performance of a contract, at most for as long as the contractual relationship with you exists or statutory retention periods are running,
• if we use the data on the basis of a legitimate interest, at most for as long as your interest in erasure or anonymisation does not prevail.
Your rights
You have – in part under certain conditions – the right,
• to request free of charge information about the processing of your data, as well as to receive a copy of your personal data. Among other things, you can request information about the purposes of the processing, the categories of personal data being processed, the recipients of the data (insofar as disclosure takes place), the duration of storage or the criteria for determining the duration;
• to have your data rectified. Should your personal data be incomplete, you have the right, taking into account the purposes of the processing, to have the data completed;
• to have your data erased or blocked. Reasons for the existence of a right to erasure/blocking may include, among others, the revocation of the consent on which the processing is based, the data subject objecting to the processing, the personal data having been unlawfully processed;
• to have the processing restricted;
• to object to the processing of your data;
• to revoke your consent to the processing of your data with effect for the future and
• to lodge a complaint with the competent supervisory authority about impermissible data processing.
Requirement or obligation to provide data
Unless expressly stated at the point of collection, the provision of data is not required or obligatory. Such an obligation may arise from legal requirements or contractual arrangements.
Further information on data protection
Appointment reminder
If you register for a guided tour, we will send you a reminder e-mail one week before the tour takes place. For this we use the necessary data or the data you have separately provided. After the tour has been carried out, you will receive no further notifications by e-mail from us.
Data security
We have taken extensive technical and organisational measures to secure your data against possible threats, such as unauthorised entry or access, unauthorised disclosure, alteration or dissemination, as well as against loss, destruction or misuse.
In order to protect your personal data from unauthorised access by third parties during transmission, we secure the data transfers where applicable by means of SSL encryption. This is a standardised encryption method for online services, in particular for the web.
Log files
Each time our web pages are accessed, usage data are transmitted by the respective internet browser and stored in log files, the so-called server log files. The data records stored in this process contain the following data: the domain from which the user accesses the website, the date and time of access, the IP address of the accessing computer, the website(s) the user visits within the scope of the offering, the amount of data transferred, the browser type and version, the operating system used, the name of the internet service provider, and a message as to whether the access was successful. These log file data records are evaluated in anonymised form in order to improve the offering and make it more user-friendly, to find and fix errors and to manage the load on servers.
Cookies
This website uses so-called cookies. A cookie is a text file with an identification number that is transmitted to the user’s computer together with the other data actually requested when using the website and stored there. The file is kept there for later access and serves to authenticate the user. Since cookies are only simple files and not executable programs, they pose no threat to the computer. Depending on the setting of the internet browser chosen by the user, the browser accepts cookies automatically. This setting can, however, be changed and the storage of cookies deactivated or set in such a way that the user is notified as soon as a cookie is set. In the event that cookie use is deactivated, some functions of the website may not be available or may be available only to a limited extent. You can prevent the setting of cookies by our website at any time by means of a corresponding setting of the internet browser used, and thereby object permanently to the setting of cookies. Already active cookies can be deleted at any time via an internet browser or other software programs. We may work together with advertising partners who help us to make our online offering more interesting for you. For this purpose, in this case, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we work together with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following paragraphs.
We use the following types of cookies:
First-party cookies: First-party cookies are transmitted by the platform currently being visited.
Third-party cookies: Third-party cookies are cookies that are transmitted by a provider other than that of the platform visited by the user. When a user calls up a platform and another entity transmits a cookie through this platform, this is a third-party cookie.
Strictly necessary cookies: These cookies are necessary for you to navigate through the platform and use its functions, such as accessing secure areas of the platform. Without them, certain services cannot be provided, such as the display of content adapted to your computer or device.
Performance cookies: These cookies collect information about how visitors use the platform, e.g. which pages are accessed most frequently and whether they receive error messages from web pages. However, these cookies do not collect any information identifying the visitor. All information that these cookies collect is aggregated and is therefore anonymous. It is used only to optimise the platform.
Functionality cookies: These cookies enable the platform to remember choices you make (e.g. language settings and your region) and to provide you with enhanced, more personal features. They can also be used to remember your settings regarding text size, font and other customisable parts of the website. They can likewise be used to provide services you have requested, such as displaying a video or the comment function within a blog. The information these cookies collect may be anonymised. Your browsing activities cannot be tracked on other platforms.
Social media cookies: These cookies are used when you click a button on the platform to share information on social media. The social network records this action and may use it for marketing or advertising purposes.
Marketing/advertising cookies: These cookies are used to show you advertisements that may be relevant to you based on your interests. They are also used to limit the frequency with which a particular advertisement is shown to you. We also use cookies to measure how effective an advertising campaign is. They are usually placed with our permission by advertising networks and record your visit to a platform. This information is passed on to other organisations, such as advertising providers. Marketing and advertising cookies are often linked to platform functions. Our advertising cookies also allow you to take part in customer surveys and thus provide us with your feedback so that we can improve your user experience with us.
Google Maps
On our website we use Google Maps (API) from Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Maps is a web service for displaying interactive maps in order to present geographical information visually. Through the use of this service, our location is shown to you and any journey there is made easier. As soon as you call up those subpages into which the Google Maps map is embedded, information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there. This takes place regardless of whether Google provides a user account through which you are logged in, or whether no user account exists. If you are logged in to Google, your data are assigned directly to your account. If you do not wish your data to be assigned to your profile with Google, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation takes place in particular pursuant to Art. 6(1)(f) GDPR on the basis of Google’s legitimate interests in displaying personalised advertising, market research and/or the demand-oriented design of its website. You have a right to object to the creation of these user profiles, whereby you must address Google to exercise it. Detailed information on data protection in connection with the use of Google Maps can be found on Google’s website (“Google Privacy Policy”): http://www.google.de/intl/de/policies/privacy/.
Matomo (formerly Piwik)
The web analytics service Matomo is used on our website. Matomo is an open-source software which evaluates the access of website visitors. The cookies used collect information regarding your use of our website. These are stored on a Matomo server in Germany. Your IP address is anonymised beforehand. You do, however, have the option of preventing cookies from Matomo being stored on your computer. To do so, you must modify the settings of your internet browser accordingly. This may result in you not being able to use our website to its full extent.
Status of this privacy policy: May 2018
We reserve the right to amend this privacy policy at any time with effect for the future.