Privacy Policy

General information about the processing of your data

This privacy statement provides you with details of the processing of your data, and accordingly of your rights. The legal definitions of terms, such as "personal data" or "processing" are considered binding, as per Art. 4 of the General Data Protection Regulation (GDPR). We reserve the right to adapt the privacy statement with prospective effect, in particular if the website is developed further, new technologies are used, the statutory bases are changed, or if the relevant previous case law is overruled.

Controller

Controller for the processing of personal data within the scope of this privacy statement:

Bundesverband Frauenberatungsstellen und Frauennotrufe
Frauen gegen Gewalt e.V.
Petersburger Straße 94
10247 Berlin
Germany

Telephone: +49 (0)30 / 322 99 500
Telefax: +49 (0)30 / 322 99 501
Email: info@bv-bff.de

Questions regarding data protection

If you have any questions about data protection regarding our organisation and/or our website, please get in touch with our data protection officer:

datenschutz@bv-bff.de

Scope of application

The privacy statement applies to all pages of https://www.frauen-gegen-gewalt.de, https://www.suse-hilft.de and https://www.aktiv-gegen-digitale-gewalt.de. It does not cover any linked websites and/or online presences of other providers.

Your rights

You are entitled to exercise the following rights against us, in relation to any personal data concerning you:

  • The right to access: You may request information about any of your personal data that we are processing, in accordance with Art. 15 of the GDPR.
  • The right to rectification: If the information concerning you is not (or is no longer) accurate, you may request rectification in accordance with Art. 16 of the GDPR. If your data is incomplete, you may ask for it to be completed.
  • The right to erasure: You may request the erasure of your personal data in accordance with Art. 17 of the GDPR.
  • The right to restrict processing: You have the right to request restriction of your personal data in accordance with Article 18 of the GDPR.
  • The right to object to processing: You have the right to object, on grounds relating to your particular situation, at any time and in accordance with Art. 21 (1) of the GDPR, to processing of your personal data which is based on point (e) or (f) of Article 6(1) of the GDPR. In this case, we shall no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if processing serves the establishment, exercise or defence of legal claims (Art. 21 (1) of the GDPR).
  • The right to withdraw your consent: Insofar as you have given your consent for processing, you are entitled to withdraw, as per Art. 7 (3) of the GDPR.
  • The right to data portability: You have the right to receive any personal data related to you, which you have provided to us, in a structured, commonly used and machine-readable format ("data portability"), and are entitled to have this data transmitted to other controllers if the prerequisites of Art. 20 (1) points (a) and (b) of the GDPR are met (Art. 20 of the GDPR).

You may exercise your rights by sending a note to the contacts listed in the "controller" paragraph, or to the data protection officer appointed by us.

If you consider that the processing of personal data relating to you infringes data protection law, you shall also have the right to lodge a complaint with a data protection supervisory authority of your choosing, in accordance with Article 77 of the GDPR. This includes the data protection supervisory authority to which the controller responds:

Data Protection and Freedom of Information Commissioner of the State of Berlin, Friedrichstraße 219, 10969 Berlin, telephone: +49 (0)30/138 89-0, email: mailbox@datenschutz-berlin.de, https://www.datenschutz-berlin.de.

Use of this website

In principle, you can use this website purely for information purposes without disclosing your identity. When you access the individual pages of the website, only the access data is transmitted to our web space provider, so that the website can be displayed to you. In such circumstances, the following data is processed:

  • browser type/browser version;
  • operating system used;
  • language and version of the browser software;
  • date and time of access;
  • host name of the accessing terminal;
  • IP address;
  • content of the request (specific web page);
  • access status/HTTP status code;
  • websites accessed via the website;
  • referrer URL (the previously visited website);
  • message as to whether the visit was successful and
  • data volume transferred.

It is necessary to process this data temporarily in order to allow the visitor to access the website, and to make delivery of the website to your terminal technically possible. Access data is not used to identify individual users, and is not combined with other data sources. Data is stored further in log files in order to ensure the website functions, and to guarantee the security of the information technology systems. The legal basis for the processing is point (f) of Art. 6(1) of the GDPR. It is in our legitimate interests to safeguard the functionality, integrity and security of the website. Storing access data in log files for a longer period of time (particularly the IP address) makes it possible for us to detect and counteract misuse. This includes, by way of example, countering queries that overload the service, or any bot use. Access data is deleted as soon as it is no longer required to achieve the purpose it was processed for and no more than fourteen days after. As a matter of principle, protocol data is stored directly and so it can only be accessed by administrators, and is deleted no more than fourteen days later.

Statistics

We use the Matomo statistics tool to analyse coverage on the website. The tool is configured in such a way as to minimise data use, ensuring your data cannot be merged (e.g. across provider or device boundaries), and that no data is disclosed to third parties. In respect of any visits to our websites, we can only read anonymised data.

The legal basis for processing is point (f) of Art 6(1) of the GDPR, i.e. our legitimate interest.

Getting in touch with the bff

When you contact our organisation, e.g. by telephone, by post or by email, we process the personal data you provide in order to answer your enquiry. When processing enquiries by email, we process your email address as well as any other information you provide. The legal basis for the processing is point (f) of Art. 6(1) of the GDPR (legitimate interest), and/or point (b) of Art. 6(1) of the GDPR if contacting us is for the purpose of concluding a contract.

In such circumstances, the data is not disclosed to third parties. We delete the data once processing is no longer required or, where applicable, restrict processing to comply with the existing legally mandatory retention obligations.

You may object to processing. You have the right to object on grounds relating to your particular situation. You can send us your objection by using the contact details provided under the "controller" paragraph.

Processing for contractual purposes

We process your personal data if and insofar as it is necessary to initiate, substantiate, execute and/or terminate a legal transaction with our organisation. The legal basis is point (b) of Art. 6(1) of the GDPR. Supplying your data is necessary to conclude the contract, and you are under a contractual obligation to provide your data. Failure to provide your data will render it impossible to conclude and/or perform a contract. Once the purpose has been achieved (e.g. fulfilment of the contract), the personal data shall be blocked for further processing and/or deleted, unless we are authorised to process it further on the basis of consent granted by you (e.g. consent to the processing of the email address for our newsletter), or on the basis of legitimate interests (e.g. retention required for the enforcement of rights).

Your personal data shall be disclosed to third parties insofar as

  • it is necessary to substantiate, execute and/or terminate legal transactions with our organisation (e.g. in the case of data being transferred to a payment service/mail-order firm for processing a contract with you), (point (b) of Art. 6(1) of the GDPR), or
  • a subcontractor or vicarious agent, whom we use exclusively to supply the offers or services requested by you, needs this data (unless you are explicitly informed otherwise, said agents are only authorised to process the data to the extent that it is necessary for providing the offer or service), or
  • there is an enforceable administrative order (point (c) of Art. 6(1) of the GDPR), or
  • there is an enforceable judicial order (point (c) of Art. 6(1) of the GDPR), or
  • we are obliged to do so by law (point (c) of Art. 6(1) of the GDPR), or
  • processing is necessary in order to protect the vital interests of the data subject or of another natural person (point (d) of Art. 6(1) of the GDPR), or
  • it is necessary for fulfilling a task carried out in the public interest, or in the exercise of official authority (point (e) of Art. 6(1) of the GDPR), or
  • we may avail ourselves of legitimate prevailing interests pursued by us or by a third party for disclosure (point (f) of Art. 6(1) of the GDPR).

Your personal data will not be disclosed to any other persons, companies or bodies unless you have effectively consented to such a transfer. In such a case, the legal basis for the processing is point (a) of Art. 6(1) of the GDPR. Within the scope of this data protection information, we call your attention to the respective recipients with regard to the relative processing procedure.

Processing of personal data in connection with a donation

If you support us with a donation we process your data, such as first and last names, address, email address, purpose of donation, amount in EUR and donation frequency, as well as bank details. If you donate via the form on our website, we process your IP address and the date and time when the donation is made. The purpose of processing is to handle donations and, if applicable, issue a donation receipt for tax purposes (along with a thank-you note). If you do not wish to use the direct debit option, you can transfer your donation to the bank account indicated on our website. We process the data sent to us by your credit institution as part of the of processing the payment and/or bank transfer for auditing purposes and/or to assign the amount transferred by you.

We also offer you the option of donating via "direct debit". In this case, we forward any data you supply to your bank for payment processing purposes. The legal basis is point (b) of Art. 6(1) of the GDPR. It is necessary and mandatory to provide your data in order to fulfil the payment process. Failure to provide your data means that the donation cannot be processed, and a donation receipt cannot be issued. Due to mandatory tax provisions, we are obliged to keep your address and payment data for a period of up to ten years. We restrict processing two years after the donation has been processed, and limit processing to comply with the existing statutory obligations.

Processing personal data for “help nearby”

On our website, you can search for support services in your area by entering your postcode or address. The data is processed to carry out an area search, in order to locate practical assistance in your vicinity. The data is not disclosed to third parties in establishing this connection. The legal basis is point (f) of Art. 6(1) of the GDPR. It is in our legitimate interests to provide an additional service that helps us offer you the best practical assistance. Any filters you enter (such as areas of expertise and accessibility) cannot be linked to you. We delete your data once you have left the page or closed your browser.

Customer account

In order to place an order with our online shop, you need to register with the following details:

  • company/organisation (optional)
  • first and last names
  • address (optional)
  • email address
  • username of your own choice
  • password of your own choice

In addition, when you register, your IP address and the date and time of registration are processed. You can also log in with your member access data. We use the double opt-in process for registration. After you have submitted the data required to register, you will receive an email containing an activation link. Only after the link has been activated by clicking on it will the access to your customer account be created and registration be successfully completed. For subsequent registrations (logins), you must enter the access details (user ID and password) you selected when you first registered. If the link you are sent is not confirmed within 24 hours, we will block the information transmitted to us, and automatically delete it within a maximum of three days. Furthermore, your data will be deleted as soon as it is no longer required for the purpose for which it was processed. This is the case for any data collected during the registration process if registration on the website is cancelled or modified.

You can use the following functions in the login area:

  • edit profile data;
  • view orders placed;
  • manage, change or delete your address book.

When you use the login area of the website, e.g. to edit your profile data or view orders placed, we also process your personal data required to initiate or fulfil the contract, especially address data and details on the method of payment.

The legal basis for the processing is point (b) of Art. 6(1) of the GDPR. It is necessary and mandatory to provide your data for the purposes of concluding and/or performing the contract. Failure to provide your data will render it impossible for you to either register or use the login area, i.e. it is impossible to conclude and/or perform the contract. Your data will be deleted as soon as it is no longer necessary in relation to the purpose of the processing. This is the case after the customer account has been deleted, unless we are obliged to store the data due to legal provisions. In such circumstances, we restrict the processing. We are obliged to store your address, payment details and order data for a period of up to ten years, due to mandatory commercial laws and tax regulations.

Online shop

When you place an order in our online shop, we process the data you provided when creating your customer account. In particular, we process your data, such as first and last names, company/organisation, address and email address and/or your member access data.

By using the shopping cart, you agree to the use of a cookie which renders your orders in the shopping cart traceable for 24 hours. The cookie has been designed to ensure optimal use of our shopping cart service.

You may pay for your order by bank transfer after having received the invoice. We process the data transmitted to us by your credit institution as part of the payment processing, for auditing purposes or to assign the amount transferred by you.

The legal basis for the processing is point (b) of Art. 6(1) of the GDPR. Providing your data and giving your consent to use of the cookie, storage of which lasts for one day, is necessary and mandatory to conclude and/or perform the contract. Failure to provide your data or give consent will render it impossible to conclude and/or fulfill a contract. We are obliged to store your address, payment details and order data for a period of up to ten years, due to mandatory commercial laws and tax regulations. We restrict processing two years after the order was placed, and limit the processing to comply with the existing statutory obligations.

Newsletter

You have the option of subscribing to our email newsletter on the website, which keeps you up-to-date with these contents:

  • interesting offers from our portfolio, especially on new specialist publications, such as brochures and flyers on the topic of violence against women;
  • information on events organised by our association;
  • expert information on the topic of violence against women.

To receive the newsletter, you must provide a valid email address. We process the email address to send you our email newsletter, and for as long as you subscribe to the newsletter. Sendinblue GmbH has been commissioned to send out the newsletter, and any data is processed on their servers. As our service provider, Sendinblue is under the contractual obligation not to use your data for any other purposes.

The legal basis for the processing is your consent, as per point (a) of Art. 6(1) of the GDPR.

You may withdraw your consent to process your email address for receiving the newsletter at any time. Either click directly on the unsubscribe link in the newsletter, or send us a message using the contact details provided under the "controller" paragraph. This shall not affect the lawfulness of processing based on consent before its withdrawal.

In order to document your newsletter registration and prevent misuse of your personal data, registration for our email newsletter adopts what is known as a double opt-in process. Once you have entered any data marked as mandatory, we will send an email to the address you provided, in which we ask you to explicitly confirm your subscription to the newsletter by clicking on a confirmation link. In so doing, we process your IP address, the date and time on which you subscribed to the newsletter, and the time of your confirmation. In this way, we ensure that you actually want to receive our email newsletter. We are legally obliged to demonstrate your consent to the processing of your personal data in registering for the newsletter (Art. 7(1) of the GDPR). The data is processed on the basis of point (c) of Art. 6(1) of the GDPR by virtue of this legal obligation.

If confirmation of the newsletter subscription is not received within 24 hours, we will block the information transmitted to us and delete it automatically. After your confirmation, your data will be processed for as long as you subscribe to the newsletter.

If you should unsubscribe by withdrawing the declaration of consent, we process your data, in particular your email address, to ensure that you do not receive any further newsletters from us. For this purpose, we add your email address to a so-called "blocking list", which ensures you do not receive any further newsletters from us. The legal basis for the data processing is point (c) of Art. 6(1) of the GDPR to comply with our obligation to provide proof, or else point (f) of Art. 6(1) of the GDPR. In this case, it is in our legitimate interests to comply with our legal obligations to make sure we no longer send you any newsletters.

You may object to the processing. You have the right to object, on grounds relating to your particular situation. You can send us your objection using the contact details provided under the "controller" paragraph.

In addition, we process the aforementioned data to establish, exercise or defend legal claims. The legal basis for the processing is point (c) of Art. 6(1) of the GDPR and point (f) of Art. 6(1) of the GDPR. In these cases, it is in our legitimate interest to assert or defend claims.

You may object to the processing. You have the right to object, on grounds relating to your particular situation. You can send us your objection using the contact details provided under the "controller" paragraph.

Press distribution list

You may subscribe to our press distribution list on the website, which keeps you up to date with the association’s latest press releases. To receive the press distribution list, you must provide your first and last names and a valid email address. Alternatively, you can provide the details of your publishing office and telephone number. We process the email address for the purpose of sending our press distribution list. The press distribution list is sent via "Microsoft Outlook". The legal basis for the processing is your consent, as per point (a) of Art. 6 (1) of the GDPR.

You may withdraw your consent to process your email address for receiving the press distribution list at any time by sending a message to the contacts provided under the "controller" paragraph. This shall not affect the lawfulness of processing based on consent before its withdrawal.

Applications

When you submit an application, you agree that your data will be stored until the end of the application and, if applicable, recruitment procedure. The application is processed for the purpose of the procedure being conducted. The legal basis is point (f) of Art. 6(1) of the GDPR.

Your data will only be disclosed to bff personnel managers involved in the application process. Your data will not be disclosed to third parties.

Upon completion of the application process, all documents will be destroyed after a period of three months. Your data will only be stored for any future vacancies advertised once your explicit consent has been obtained.

Registration for events

If you want to register for one of our events as a guest or a speaker the following data is required:

  • first and last names;
  • organisation;
  • address of the institution (optional);
  • email address;
  • special needs (such as accessibility);
  • membership;
  • selection of workshop, where applicable;
  • prior knowledge (training), where applicable.

In the case of face-to-face events, we will also process your catering information (such as allergies, vegan or vegetarian diet). In order to receive a discount as a member of the association for events subject to a charge, your membership details are also required. If the event is a so-called hybrid event (an event that can be attended both on-site and online), you are required to indicate in which manner you wish to take part.

We process your data to register for events, and to allow us to organise them. The legal basis for processing your data to take part in events is point (b) of Art. 6(1) of the GDPR. Your data is necessary and mandatory to conclude the contract. Failure to provide your data will render it impossible to conclude and/or perform a contract in the form of registration or participation in the event. The bff e.V. deletes the data as soon as the purposes have been fulfilled. Data falling under the record-keeping obligations of funding bodies and tax authorities will be retained for 10 years for this purpose.

Where any special categories of personal data (such as accessibility or allergies) are processed, the legal basis is your consent in accordance with point (a) of Art. 9(2) of the GDPR in conjunction with point (a) of Art. 6(1) of the GDPR.

You may withdraw your consent to the processing of special categories of personal data at any time by sending us a message using the contact details provided under the "controller" paragraph. This shall not affect the lawfulness of processing based on consent before its withdrawal.

In the case of online events (possibly also hybrid), the video service provider Zoom receives data from yourself for technical implementation purposes. Data is processed under the responsibility of Zoom and in accordance with their conditions, which you may find in Zoom's data protection provisions: https://explore.zoom.us/gdpr/

Event photos

We take photos and make videos during our events. Accordingly, people who are recognisable in the pictures and recordings (photos and/or video) are those affected. The pictures and recordings (photo and/or video) are used for distributing information to the public and/or event documentation of the bff e.V. (see selection in the on-site consent). The legal basis of the processing is point (a) of Art. 6(1) of the GDPR, i.e. your consent to this processing. This consent can only be given freely and in addition to registration. The pictures and recordings will be published by bff e.V. through several channels (see selection in the consent). They will also be made available for publication in other media as part of press work. In principle, the publication of pictures and recordings on the Internet means that they also reach countries outside the scope of the GDPR, and may be seen and reproduced there.

The bff e.V. shall delete the pictures and recordings as soon as the purposes have been fulfilled.

You may withdraw your consent at any time by sending us a message using the contact details provided under the "controller" paragraph. This shall not affect the lawfulness of processing based on consent before its withdrawal.

Surveys on our website

Every once in a while, members of the association are asked to voluntarily participate in surveys conducted by the bff on counselling activities and legislative procedures or reforms. The members receive a link from the bff via email. By clicking on it they can enter data in a separate area of our website and send it to us. It is not possible for the bff to match the information with the individual participating counselling centres.

In order to create, evaluate and integrate the surveys on our website, we not only process the survey answers, but also the IP address and the date and time of participation when the answers are submitted.

In addition, participants usually take part in the surveys without providing any further personal data. However, there is the possibility of entering an email address so we can send you a notification pertaining to any answers given.

The legal basis is point (f) of Art. 6(1) of the GDPR. It is in our legitimate interests to conduct the surveys in such a way that the association may provide customised services, and support our members in their counselling activities, in a way that ensures their needs are met.