We appreciate your interest in using our website (www.kinderkrebsstiftung.de). Protecting your personal data is our highest priority. Below, you will find information about how we process your personal data and your rights when using our website.
The controller responsible for data processing is:
German Children’s Cancer Foundation
Martin Spranck (Managing Director)
Godesberger Allee 140
53175 Bonn
Germany
Phone: +49 (0)228 68846-0
Fax: +49 (0)228 68846-44
Email: info@kinderkrebsstiftung.de
You can contact our Data Protection Officer as follows:
Scheja & Partners GmbH & Co. KG
Florian Reichert
Adenauerallee 136
53113 Bonn
Germany
Phone: +49 (0)228 227226-0
Fax: +49 (0)228 227226-26
https://www.scheja-partner.de/kontakt/kontakt.html
As a data subject, you have the following rights under the General Data Protection Regulation (GDPR), provided that the relevant legal requirements are met:
You have the right to obtain information about the personal data we process concerning you.
You have the right to request the correction of inaccurate personal data concerning you and to have incomplete personal data completed.
In certain circumstances, you have the right to request the deletion of your personal data.
In certain circumstances, you have the right to request the restriction of the processing of your personal data.
Where processing is based on your consent or on a contract and carried out by automated means, you have the right to receive the personal data you have provided in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(e) or Article 6(1)(f) GDPR. This also applies to profiling based on these provisions.
If you object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.
Where your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing. This also applies to profiling insofar as it is related to direct marketing.
If you object, your personal data will no longer be processed for direct marketing purposes.
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The withdrawal does not affect the lawfulness of processing carried out before the withdrawal. You may withdraw your consent using the methods described under „Exercising Your Rights“ below or as explained in Section 5 and in our Cookie Centre.
To exercise any of the rights listed above, please contact us at info@kinderkrebsstiftung.de or by post using the address provided in Section 1. Please ensure that we are able to clearly identify you.
You have the right to lodge a complaint with a supervisory data protection authority, particularly in the Member State of your habitual residence, place of work or the place of the alleged infringement, if you believe that the processing of your personal data violates applicable data protection laws.
We do not carry out automated individual decision-making, including profiling, within the meaning of Article 22 GDPR in connection with the use of our services.
This website uses the Google Maps mapping service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
To use the Google Maps features, your IP address must be processed. This information is generally transmitted to and stored on a Google server in the United States. We have no control over this data transfer.
When Google Maps is activated, Google may load Google Web Fonts to ensure a consistent display of fonts. Your browser downloads the required web fonts into its browser cache in order to display text and fonts correctly.
The use of Google Maps is based on our legitimate interest in providing an attractive presentation of our online services and making the locations specified on our website easy to find (Art. 6(1)(f) GDPR).
Where your consent has been obtained, processing is based exclusively on Art. 6(1)(a) GDPR in conjunction with Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG), insofar as the consent includes the storage of cookies or access to information on your device (e.g. device fingerprinting). You may withdraw your consent at any time with future effect.
Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses (SCCs).
For further information on how Google processes personal data, please refer to Google’s Privacy Policy.
Categories of data processed
Date and time of access
Duration of the visit
Type of end device
Operating system used
Features used
Amount of data transferred
Type of event
IP address
Domain name
Purpose of processing
Providing the website and ensuring its technical functionality.
Legal basis
Art. 6(1)(f) GDPR (legitimate interests). Our legitimate interest is to ensure the technical operation of the website.
Recipients
Hosting provider
Internal departments
External technical support providers
International data transfer
None.
Retention period
The data is deleted immediately after delivery by the web server.
Categories of data processed
Requested URL
User IP address
Date and time of access
Amount of data transferred
Referring website
Websites accessed via our website
HTTP status code
Browser type and version
Operating system
Internet service provider
Purpose of processing
Statistical analysis
Improvement of the website
System security (e.g. prevention of misuse)
Error diagnosis
Legal basis
Art. 6(1)(f) GDPR (legitimate interests).
Recipients
Hosting provider
Internal departments
External technical support providers
International data transfer
None.
Retention period
Server log files are deleted 7 days after they are created.
Categories of data processed
First and last name
Email address
Optional telephone number of the contact person
Information required to verify participation requirements
Purpose of processing
Receiving and processing enquiries relating to the Kinderhaus Kleine Helden project.
Legal basis
Art. 6(1)(f) GDPR (legitimate interests).
Recipients
Hosting provider
Internal departments
International data transfer
None.
Retention period
Personal data will be deleted once your enquiry has been fully processed.
Mandatory information
Fields marked with an asterisk (*) are mandatory. Any additional information is voluntary and helps us process your enquiry more efficiently.
Source of the data
Collected directly through the contact form.
Categories of data processed
Email address
Date and time of registration
First and last name
IP address
Purpose of processing
Sending our newsletter
Documenting your consent
Legal basis
Art. 6(1)(a) GDPR (consent)
Art. 6(1)(c) GDPR in conjunction with Art. 5(1)(a), Art. 5(2) and Art. 7(1) GDPR
Art. 6(1)(f) GDPR (legitimate interest in demonstrating that consent has been obtained)
Recipients
Internal departments (especially Marketing)
Hosting provider
Newsletter service provider
Public authorities where legally required
International data transfer
None.
Retention period
Your personal data will be deleted after you unsubscribe from the newsletter.
Certain data (first name, last name and email address) may be retained for up to three years after your unsubscribe request solely for the purpose of proving that valid consent was obtained.
Mandatory information
Fields marked with an asterisk (*) are mandatory. Any additional information is voluntary.
Withdrawal of consent
You may unsubscribe at any time by clicking the unsubscribe link included in every newsletter.
Source of the data
Collected directly through the newsletter registration form.
Categories of data processed
First and last name (optional: title)
Postal address (street, house number, postcode, city, country)
Email address
Donation details (recipient, amount, purpose, donation frequency, request for donation receipt, payment method)
Optional telephone number for follow-up questions
Optional date of birth (to receive birthday greetings)
If you choose to make your donation public as part of a fundraising campaign: your name or alias, comment and donation amount
Additional data depending on the payment method
Direct debit: IBAN
Credit card: Card type, card number, CVV/CVC security code and expiry date
Purpose of processing
Processing and administering your donation.
Legal basis
Art. 6(1)(b) GDPR (performance of a contract)
Art. 6(1)(f) GDPR for publishing your name or alias, comment and donation amount where you have chosen to make these details public. Our legitimate interest is to support fundraising campaigns and thereby improve our charitable projects.
Art. 6(1)(f) GDPR for sharing your public name or alias, comment and donation amount with the organiser of the fundraising campaign, where applicable.
Recipients
Data processors (Wikando GmbH – FundraisingBox; Stripe Inc. for credit card payments)
Payment service providers
Commerzbank (direct debit)
PayPal (Europe) S.à r.l. et Cie, S.C.A.
Credit card providers
Internal departments
Fundraising campaign organisers (where public information is provided)
International data transfer
None.
Retention period
Up to 10 years after the donation has been processed.
Mandatory information
Mandatory fields are marked accordingly. Without this information, we cannot process your donation.
Source of the data
Collected directly from you.
Categories of data processed
Public information
Campaign title
Public display name
Purpose of the campaign
Fundraising target
Category
Optional campaign image
Non-public information
First and last name (optional: title)
Postal address
Email address
Telephone number
Optional date of birth (to receive birthday greetings)
Purpose of processing
Administration and operation of your fundraising campaign.
Legal basis
Art. 6(1)(b) GDPR (performance of a contract)
Art. 6(1)(f) GDPR for publishing your campaign image. Our legitimate interest is to support your fundraising campaign and improve our charitable projects.
Recipients
Wikando GmbH (FundraisingBox)
Stripe Inc.
Payment service providers
Internal departments
International data transfer
None.
Retention period
Up to 10 years after completion of the fundraising campaign.
Mandatory information
Without the required information, we cannot create or manage your fundraising campaign.
Categories of data processed
First and last name (optional: title)
Postal address
Email address
Donation details
Optional telephone number
Optional date of birth
Name of the gift recipient
Personal message to appear on the donation certificate
Additional payment information
Direct debit: IBAN
Credit card: Card type, card number, CVV/CVC security code and expiry date
Purpose of processing
Processing and administering your gift donation.
Legal basis
Art. 6(1)(b) GDPR.
Recipients
Wikando GmbH (FundraisingBox)
Stripe Inc.
Payment service providers
Internal departments
International data transfer
None.
Retention period
Up to 10 years after the donation has been processed.
Mandatory information
Without the required information, we cannot process your gift donation.
Source of the data
Donor information is collected directly from you. The recipient’s name is provided by the donor.
Categories of data processed
Company name
Salutation (optional)
Title (optional)
First and last name
Email address
Optional company logo
Purpose of processing
Processing banner set orders and, where requested, listing your organisation in the supporter gallery including your logo.
Legal basis
Art. 6(1)(b) GDPR.
Recipients
Internal departments only.
International data transfer
None.
Retention period
Four years.
Mandatory information
Providing your data is voluntary. However, without the required information we cannot process your order.
Source of the data
Collected directly from you.
Categories of data processed
First and last name
Optional salutation
Optional company name
Postal address
Optional telephone number
Email address
Purpose of processing
Processing and fulfilling your order.
Legal basis
Art. 6(1)(b) GDPR (performance of a contract).
Recipients
Internal departments.
International data transfer
None.
Retention period
We delete personal data relating to your order as soon as it is no longer required for processing the order or once statutory retention periods under tax and commercial law have expired (currently 10 years).
Mandatory information
Fields marked with an asterisk (*) are mandatory. Additional information is voluntary. Without the required information, we are unable to process your order.
Source of the data
Collected directly from you.
Categories of data processed
Mandatory information
First and last name of the participant
Email address
Selected camp date
Telephone number
Optional information
Age
Postal address
Additional comments
Preferred alternative camp date
Purpose of processing
Registration for camps held at the Waldpiraten Camp.
Legal basis
Art. 6(1)(f) GDPR (legitimate interests). Our legitimate interest is to collect the personal information required to organise and administer camp registrations.
Recipients
Hosting provider
Internal departments
International data transfer
None.
Retention period
Your personal data will be deleted once the event has concluded.
Mandatory information
Fields marked with an asterisk (*) are mandatory. Optional information helps us prepare the event more effectively.
Source of the data
Collected directly through the registration form.
Categories of data processed
Mandatory information
First and last name
Postal address
Email address
Order confirmation
Optional information
Salutation
Country
Purpose of processing
Processing and fulfilling your order.
Legal basis
Art. 6(1)(b) GDPR.
Recipients
Internal departments.
International data transfer
None.
Retention period
Personal data relating to your order will be deleted once it is no longer required for processing or after the applicable statutory retention periods have expired (currently 10 years).
Mandatory information
Mandatory fields are marked with an asterisk (*). Optional fields are voluntary. Without the required information, we cannot process your order.
Source of the data
Collected directly from you.
Categories of data processed
Mandatory information
First and last name
Postal address
Email address
Order confirmation
Optional information
Salutation
Country
Purpose of processing
Processing and fulfilling your order.
Legal basis
Art. 6(1)(b) GDPR.
Recipients
Internal departments.
International data transfer
None.
Retention period
Personal data relating to your order will be deleted once it is no longer required for processing or after the applicable statutory retention periods have expired (currently 10 years).
Mandatory information
Mandatory fields are marked with an asterisk (*). Optional fields are voluntary. Without the required information, we cannot process your order.
Source of the data
Collected directly from you.
Last updated: 21 October 2025
Sie sehen gerade einen Platzhalterinhalt von Vimeo. Um auf den eigentlichen Inhalt zuzugreifen, klicken Sie auf die Schaltfläche unten. Bitte beachten Sie, dass dabei Daten an Drittanbieter weitergegeben werden.
Mehr InformationenSie sehen gerade einen Platzhalterinhalt von YouTube. Um auf den eigentlichen Inhalt zuzugreifen, klicken Sie auf die Schaltfläche unten. Bitte beachten Sie, dass dabei Daten an Drittanbieter weitergegeben werden.
Mehr InformationenSie sehen gerade einen Platzhalterinhalt von Instagram. Um auf den eigentlichen Inhalt zuzugreifen, klicken Sie auf die Schaltfläche unten. Bitte beachten Sie, dass dabei Daten an Drittanbieter weitergegeben werden.
Mehr InformationenSie sehen gerade einen Platzhalterinhalt von Google Maps. Um auf den eigentlichen Inhalt zuzugreifen, klicken Sie auf die Schaltfläche unten. Bitte beachten Sie, dass dabei Daten an Drittanbieter weitergegeben werden.
Mehr InformationenSie sehen gerade einen Platzhalterinhalt von Instagram. Um auf den eigentlichen Inhalt zuzugreifen, klicken Sie auf die Schaltfläche unten. Bitte beachten Sie, dass dabei Daten an Drittanbieter weitergegeben werden.
Mehr Informationen