The responsible party according to Art. 4 Para. 7 of the General Data Protection Regulation (GDPR) is:

Planet Bambi - Theo & Gisela Grabowski Foundation

Ursbergerstrasse 31

86470 Thannhausen

Phone: 49 179 5150211

Email: info@planetbambi.foundation / Internet: www.planetbambi.foundation

2. Data Protection Officer

The protection of your personal data is very important to us. We process and store personal data confidentially and in accordance with the statutory data protection regulations. In general, this website can be used without providing personal data. You have the right at any time to obtain information about your personal data that we store for the purposes stated below free of charge and to request that this data be corrected, blocked or deleted. Any consent you have already given to data processing can be revoked at any time without any formalities. In the event of violations of data protection law, you have the right to lodge a complaint with the Bavarian State Office for Data Protection Supervision.

3. What are personal data?

Personal data are individual details about the personal or factual circumstances of a specific or identifiable natural person (data subject). This includes, for example, information such as your name, address, telephone number, date of birth or email address. Information that we cannot relate to you (or can only do so with disproportionate effort), e.g. by anonymizing the information, is not personal data.

4. General information on data processing

4.1. Scope

We only collect and use personal data of our users to the extent that this is necessary to provide a functional website and our content and services. We use your personal data to carry out online donations, to set up personal fundraising campaigns, to answer your questions, to operate and improve our websites and applications, and to provide further information about the work or use of donations of thePlanet Bambi Foundation. AWe also collect personal data from applicants within the framework of the requested aid projects.

Otherwise, your data will only be passed on to other third parties if we are legally obliged to do so.

The personal data mentioned here will be deleted after the statutory retention periods have expired.

4.2. Legal basis

If we obtain consent from the data subject for processing personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.

When processing personal data that is necessary to fulfill a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis.

If processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) (f) GDPR serves as the legal basis for processing.

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies and there are no statutory retention periods to the contrary. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or fulfillment of a contract.

5. Individual processing operations

You can use a large part of our website without providing any personal data. For informational use of our websites, we only collect the personal data that your Internet browser automatically transmits to us, such as:

IP address

Date and time of the request

Time zone difference to Greenwich Mean Time (GMT)

Content of the request (specific page)

the amount of data transferred and the access status (file transferred, file not found, etc.)

Website from which the request comes

Browser type / version / language

Operating system and its interface

Language and version of the browser software.

This data is evaluated solely to improve our offering and does not allow any conclusions to be drawn about you personally.

However, if you wish to use the services offered by us on our website, such as ordering a newsletter, etc., you will need to provide additional data. Details can be found below in the description of the specific data processing procedures. In particular, personal data is used as follows:

Provision of the website and creation of log files

Our provider automatically collects and stores information in so-called server log files within the framework of the legal requirements, which your browser automatically transmits to its server. This includes the browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and the anonymized IP address. This data cannot be assigned to specific people. This data is not merged with other data sources. Nor is it passed on to third parties. We reserve the right to check this data if we become aware of concrete indications of illegal use of our website. If the storage purpose no longer applies or if a legally prescribed storage period expires, this data is routinely deleted in accordance with the legal regulations. The legal basis for the temporary storage of the data is Art. 6 Para. 1 lit. f GDPR.

Completion of online donations / payment services and payment procedures

On our website we offer users the opportunity to make donations online. If a user takes advantage of this opportunity, the data entered in the associated form is transmitted to us and stored. The form is provided by Bank für Sozialwirtschaft AG, Konrad-Adenauer-Ufer 85, 50668 Cologne ("BFS"). In order to execute the donation order, the data entered is therefore passed on directly via an encrypted SSL connection to the BFS and the technical service providers used by the BFS to provide the form. The data is not passed on to other third parties. The following data is collected using the form:

Full name (last name, first name) with salutation (optional title and company name); address (street, house number, city, postal code, country); email address (optional); bank details (IBAN); donation details (donation recipient, amount, donation/purpose, donation receipt requested)

Additionally for donations via credit card: card type, card number, CVV/CVC verification number, validity period of the credit card.

If a donation receipt is requested, we will process the data in order to issue and send a corresponding donation receipt.

The data collected is required to process and carry out the donation order. The voluntarily provided email address of the user is used for donation-related communication. The data is not used for any other purposes. The legal basis for the processing of the data is Art. 6 Para. 1 lit. b GDPR.

When the form is sent, the user's IP address is also saved. We use the IP address to prevent misuse of the donation form. The IP address is used for the purpose of fraud prevention and to prevent unauthorized transactions that harm third parties. The legal basis for processing the IP address is Art. 6 Para. 1 lit. f GDPR.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For bank details, this is the case after the donation amount has been collected, and in the case of a direct debit donation, after the end of the recurring donation order. After a donation receipt has been created and sent (if requested), the address details are stored like all other data entered in accordance with tax retention requirements, but are blocked for any other use. The IP address additionally collected during the sending process is deleted after a period of seven days at the latest.

The user has the option to object to the processing of data at any time. However, it should be noted that if an objection is made, the donation order can no longer be carried out as desired.

We use the data you provide regarding your donation to process your donation, for internal statistical market research only and to send you donation receipts, unless you expressly object to this.

Newsletter

In order to register for our email newsletter service, we need your consent to data protection and at least your email address to which the newsletter should be sent. Any other information is voluntary and will be used to address you personally, to design the content of the newsletter and to clarify any queries regarding your email address.

You can unsubscribe from a newsletter you have subscribed to at any time by clicking on the corresponding link at the end of the newsletter.

Contact form

When you contact us by email or via a contact form, the data you provide (your email address, if applicable your name and your telephone number) will be stored by us in order to answer your questions. We delete the data collected in this context once storage is no longer required or restrict processing if there are statutory retention periods.

Otherwise, your data will only be passed on to other third parties if we are legally obliged to do so.

6. Use of cookies, web analysis, videos

Our website uses so-called session cookies, small text files that are stored on your device and automatically deleted at the end of your visit, to display content in a user-friendly and secure manner. You can prevent cookies from being stored by selecting the appropriate browser settings. If cookies are deactivated, the functionality of this website may be restricted. The legal basis for the use of session cookies is Art. 6 Para. 1 lit. f GDPR.

7. Security measures to protect the data stored by us

We are committed to protecting your privacy and treating your personal data confidentially. To avoid loss or misuse of the data stored by us, we take extensive technical and organizational security precautions that are regularly reviewed and adapted to technological progress. However, we would like to point out that due to the structure of the Internet, it is possible that the data protection rules and the above-mentioned security measures are not observed by other persons or institutions that are not our responsibility. In particular, data disclosed unencrypted - e.g. if this is done by email - can be read by third parties. We have no technical influence on this. It is the user's responsibility to protect the data they provide against misuse by encrypting or in some other way.

8. Hyperlinks to third-party websites

Our website contains so-called Hyperlinks to websites of other providers. At A If you activate these hyperlinks, you will be redirected from our website directly to the website of the other provider. You will recognize this by the change in the URL, among other things. We cannot accept any responsibility for the confidential handling of your data on these third-party websites, as we have no influence on whether these companies adhere to data protection regulations. Please find out about how these companies handle your personal data directly on these websites.

9. Consent and revocation / objection

You may have expressly granted the following consents.

We would like to point out that you can revoke your consent at any time with effect for the future and object to the processing and use of your data for advertising purposes at any time: Please contact the following person: info@planetbambi.foundation

a) Permission for email advertising/newsletter

By entering my data and clicking the button, I declare my consent to receive the newsletter regularly. I can unsubscribe from the newsletter service at any time by clicking on the "Unsubscribe" link at the end of the newsletter.

I can revoke my consent to the collection of other personal data collected during the registration process at any time.

b) Consent when sending a contact form

By entering your personal data, you agree that we may use your details to process your request and for information purposes. You can object to the use of your data by sending an email to info@planetbambi.foundation. Your data will only be used by us and our service providers.

10. Your rights as a data subject

If your personal data is processed, you are a data subject within the meaning of the General Data Protection Regulation (GDPR) and you have the following rights vis-à-vis the controller.

According to Art. 15 of the General Data Protection Regulation, you have the right to request information about the processing of your personal data ("right of information of the data subject").

According to Art. 16 of the General Data Protection Regulation, you have the right to request the rectification and erasure of inaccurate personal data concerning you ("right to rectification").

According to Art. 17 of the General Data Protection Regulation, you can request the deletion of personal data concerning you if one of the reasons listed therein applies ("right to be forgotten").

Likewise, according to Art. 18 of the General Data Protection Regulation, you have the right to request the restriction of the processing of personal data concerning you if one of the conditions listed therein applies ("right to restriction of processing").

According to Art. 20 of the General Data Protection Regulation, you have the right to have personal data concerning you made available to you and to have this data transmitted to another controller ("right to data portability").

Information to third parties

If the controller has made the personal data concerning you public and is obliged to erase them pursuant to Art. 17 Para. 1 GDPR, the controller shall take appropriate measures, including technical ones, taking into account the available technology and the implementation costs, to inform data controllers which process the personal data that you, as the data subject, have requested the erasure by them of all links to these personal data or of copies or replications of these personal data.

Exceptions

The right to erasure does not exist if processing is necessary

to exercise the right to freedom of expression and information;

to fulfill a legal obligation required by Union or Member State law to which the controller is subject or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;

for reasons of public interest in the area of public health pursuant to Art. 9 (2)(h) and (i) and Art. 9 (3) GDPR;

for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the right referred to in section a) is likely to make the achievement of the objectives of this processing impossible or seriously compromises it, or

to assert, exercise or defend legal claims.

Right to information

If you have asserted your right to rectification, erasure or restriction of processing vis-à-vis the responsible party, this party is obliged to inform all recipients to whom the personal data concerning you were disclosed of said rectification, erasure or restriction of processing, unless doing so should prove impossible or involve disproportionate expenditure.

You have the right to be informed by the controller about these recipients.

Right of objection

You have the right to object at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) (e) or (f) GDPR, for reasons related to your particular situation; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

Right to revoke the declaration of consent under data protection law

You have the right to revoke your consent to data protection at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

11. Legal basis for data processing

Here you will find an overview of the legal basis for data protection for the processing of your data.

Informational use

The processing of your data, which your browser automatically communicates to us, is carried out in the context of our interest in being able to display the websites to you at all.

Art. 6 para. 1 lit. f) General Data Protection Regulation (GDPR)

Contact form

The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

Art. 6 para. 1 lit. b) General Data Protection Regulation (GDPR)

Newsletter

Our newsletter is delivered based on your personal consent.

Art. 6 para. 1 lit. a) General Data Protection Regulation (GDPR)

You can revoke your consent at any time and thus unsubscribe from the newsletter, see also chapter Newsletter.

Web analysis, usage-based online advertising and integration of external services

For the purposes of advertising, market research or to design the websites to meet needs, we analyze the user behavior of our visitors in our own interest.

Art. 6 para. 1 lit. f) GDPR

12. Changes to our privacy policy

We reserve the right to adapt this privacy policy so that it always complies with the current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

13. Right to lodge a complaint with a supervisory authority

You can contact a supervisory authority at any time with a complaint, for example the competent supervisory authority in the federal state in which you live or the authority responsible for us as the controller.

A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschrift_Links/anschrift_links-node.html .