Privacy Policy

Privacy Policy: ‘Team Rynkeby’ Fundraising Campaign

Dear supporters of the Deutsche Kinderkrebsstiftung,

1. We protect your personal data!

We, the Deutsche Kinderkrebsstiftung (hereinafter ‘we’ or ‘DKS’), are delighted that you are interested in the TEAM RYNKEBY fundraising campaign, an international cycling initiative operating in Germany in aid of the DKS. As part of this, amateur cyclists, organized by TEAM RYNKEBY, compete for the good cause of the DKS and collect your donations for seriously ill children and their families. You can purchase individual kilometer packages from an amateur cyclist and donate for the kilometers they have covered.

Further details about TEAM RYNKEBY are available at: http://www.team-rynkeby.de/.

Your privacy is very important to us. We take the protection of your personal data and its confidential handling very seriously. Your personal data will be processed exclusively in accordance with the applicable legal provisions of data protection law, in particular the General Data Protection Regulation (hereinafter ‘GDPR’). With this privacy policy, we inform you about the processing of your personal data and your data protection rights in connection with your support for the fundraising campaign.

2. Controller and Data Protection Officer

Controller:

Deutsche Kinderkrebsstiftung

Geschäftsführung: Herr Martin Spranck

Godesberger Allee 140

D-53175 Bonn

Tel.: + 49 (0)228-68 84 60

Fax: + 49 (0)228-68 84 644

info@kinderkrebsstiftung.de

If you have any questions or suggestions regarding data protection, please do not hesitate to contact us.

Data Protection Officer:

Herr Florian Reichert

Scheja und Partners GmbH & Co. KG

Adenauerallee 136

D-53113 Bonn

Tel.: +49 (0) 228-227 226-0

Fax: +49 (0) 228-227 226-26

https://www.scheja-partners.de/kontakt/kontakt.html

3. Scope of data protection

The scope of data protection covers personal data. This refers to any information relating to an identified or identifiable natural person (known as a ‘data subject’). This includes, for example, details such as name, postal address, email address or telephone number, as well as information that is necessarily generated during our relationship with you as a donor or during your supporting membership.

3. Purposes and legal bases for data processing

Below is an overview of the purposes and legal bases for data processing in the context of our relationship with donors.

3.1    Preparing and processing your donation

We process personal data where this is necessary for the preparation and processing of your donation. To this end, we process your first name and surname, your postal address, your email address, the amount of your donation and the name of the athlete, any request you may have for a donation receipt, and details of your preferred payment method (direct debit, credit card, PayPal).

As part of the fundraising campaign, we will pass on to TEAM RYNKEBY Germany the amount of your donation, the relevant section of the route, as well as your name and email address. TEAM RYNKEBY uses this data to organize the cycling initiative, specifically to allocate the relevant section of the route and to send you a personalized thank-you message. Data processing is carried out on the basis of Article 6(1)(b) of the GDPR. You must provide the personal data necessary for the processing of your support. Without this data, we will not be able to process your enquiries or your donation.

We will erase the data once it is no longer required for the purposes of preparing and carrying out your support, provided that no other legal basis applies. If the latter applies, we will erase the data once the other legal basis ceases to apply. We will erase your data no later than 10 years after your last donation.

3.2    Compliance with legal obligations

We also process your personal data in order to comply with legal obligations to which we are subject. These obligations may arise, for example, from commercial, tax or financial law, or from the law governing foundations or the Lobbying Register Act. The purposes of the processing are determined by the relevant legal obligation. The processing generally serves the purpose of complying with state-imposed obligations regarding supervision and the provision of information.

Data processing is carried out on the basis of Article 6(1)(c) of the GDPR in conjunction with the relevant legal obligation. Where we collect data on the basis of a legal obligation, you must provide the personal data necessary to fulfil that legal obligation. Without this information, we may not be able to process your enquiry.

We will delete the data once the legal obligation no longer applies, provided no other legal basis applies. If the latter is the case, we will delete the data once the other legal basis no longer applies.

3.3 Protection of legitimate interests

We also process your personal data to protect our legitimate interests or those of third parties.

In doing so, we pursue the interest – which is also the purpose – of establishing and maintaining a good relationship with you and, in some cases with the assistance of and using additional information from service providers and platforms, sending you promotional information about our work (e.g. newsletters) via various channels (including post and email), provided you have not objected to this. This also includes analyses and evaluations of relevant information from our donor relationship or your supporting membership (e.g. donation amount, frequency, trends) that serve these purposes or are preparatory to them.

We also have an interest in continuously developing and optimizing our internal processes for managing and communicating with our supporters, for which purpose we likewise analyse and evaluate relevant information from our donor relationship. Data processing is carried out on the basis of Article 6(1)(f) of the GDPR. In cases where you are required to provide data for this purpose, we will expressly draw your attention to this.

We will erase the data once it is no longer necessary for the purposes we pursue and no other legal basis applies. If the latter applies, we will erase the data once the other legal basis ceases to apply. In the event that you object, we will erase the data without delay, provided that no other (in particular statutory) retention obligations apply.

3.4  Consent

Should you have given your consent for specific purposes, these purposes are set out in the content of the consent you have provided (e.g. to receive our email newsletter).

Data processing is carried out on the basis of Article 6(1)(a) of the GDPR. In cases where you are required to provide data for this purpose, we will expressly draw your attention to this. Without the provision of such data, we would be unable to fulfil your request covered by the consent. You may withdraw your consent at any time, without this affecting the lawfulness of the processing carried out on the basis of your consent up to the point of withdrawal. We will erase the data when it is no longer necessary for the purposes we pursue, or if you have withdrawn your consent and no other legal basis applies. If the latter applies, we will erase the data once the other legal basis ceases to apply.

4.       Recipients

We will only disclose your personal data to external recipients outside DKS if this is necessary to process or handle your enquiry, if there is another legal basis for doing so, or if we have your consent to do so.

External recipients may include:

a) Data processors or external service providers, whom we engage to provide services, for example in the areas of technical infrastructure and maintenance for DKS’s services or the provision of contract-related content. We also rely on the support of data processors for internal analyses and evaluations aimed at optimizing and further developing internal processes, as well as for carrying out and preparing promotional communications, e.g. in the form of fundraising appeals (including by post and online). We carefully select these data processors and review them regularly to ensure that your privacy is protected. The service providers may only use the data for the purposes specified by us.

b) Public bodies

Public authorities and state institutions, such as public prosecutors’ offices, courts, tax authorities or the German Bundestag, in its capacity as the body responsible for maintaining the lobby register, to which we are required by law to transfer personal data.

c) Cooperation partners

We provide TEAM RYNKEBY Germany, on a legal basis (see section 4.1.), with information regarding the amount of your donation, the associated route section, as well as your name and email address. TEAM RYNKEBY Germany uses this data exclusively for the organization of the fundraising campaign – namely, the allocation of the route section – and to send you a thank-you message.

5. Transfers to third countries

Where your personal data is transferred to organizations whose registered office or place of data processing is not located in a Member State of the European Union or in another State party to the Agreement on the European Economic Area, we ensure, prior to the transfer, that – except in cases permitted by law – the recipient either maintains an adequate level of data protection (e.g. through an adequacy decision by the European Commission, or through appropriate safeguards such as the agreement of the European Commission’s so-called EU Standard Data Protection Clauses with the recipient) or that your express consent has been obtained. You may obtain a copy of the specific safeguards in place to ensure an adequate level of data protection from us. To do so, please use the contact details of the data controller provided in section 2.

6. Sources and categories of data in third-party collection

In the course of the above-mentioned fundraising campaign, we only process personal data that we receive directly from you.

7. Automated decision-making and profiling

We do not use automated decision-making, but we do use measures that could be classified as profiling. We filter and analyze our data by donor, taking into account factors such as minimum donation amount, donation frequency and trends, as well as place of residence, in order to then target these donors with specific communications. Once the relevant mailing has been sent, we delete the filtered data immediately. In this regard, we draw your attention to the specific right to object, which is set out in detail in section in 11.

8. Retention period

Please refer to the relevant section on data processing for information on the retention period for personal data.

In addition, the following generally applies: We only store your personal data for as long as is necessary to fulfil the purposes for which it was collected or – in the case of consent – for as long as you have not withdrawn your consent. In the event of an objection, we will erase your personal data unless its further processing is permitted under the relevant legal provisions. We will also erase your personal data if we are obliged to do so for legal reasons.

9. Data subject rights

As a data subject, you have a number of rights. Specifically:

Right of access: You have the right to obtain information about the personal data we hold about you.

Right to rectification and erasure: You may request that we rectify any inaccurate data and – provided the legal requirements are met – erase your data.

Restriction of processing: You may request that we restrict the processing of your data, provided that the legal requirements are met.

Data portability: If you have provided us with data on the basis of a contract or consent, you may, provided that the legal requirements are met, request to receive the data you have provided in a structured, commonly used and machine-readable format, or that we transfer this data to another data controller.

Withdrawal of consent: If you have given us your consent to process your data, you may withdraw this consent at any time with effect for the future. The lawfulness of the processing of your data up to the point of withdrawal remains unaffected.

Right to lodge a complaint with the supervisory authority: You may also lodge a complaint with a supervisory authority if you believe that the processing of your data infringes applicable law. To do so, you may, for example, contact the data protection authority responsible for your place of residence or your country, or the data protection authority responsible for us. This is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen,  PO Box 20 04 44, 40102 Düsseldorf , Tel.: 0211/38424-0 · Fax: 0211/38424-10, Email: poststelle@ldi.nrw.de

Contacting us and exercising your rights: You may contact us free of charge if you have any questions regarding the processing of your personal data, your rights as a data subject, or any consent you may have given. To exercise any of the rights mentioned above, please contact info@kinderkrebsstiftung.de or write to us at the address given in section 2 above. Please ensure that we are able to identify you clearly. When withdrawing your consent, you may also choose the same method of contact that you used when giving your consent.