Data protection

As the operator of the website https://gedenkbuch-gardelegen.de/, the Saxony-Anhalt Memorials Foundation (hereinafter referred to as “We”) is responsible for the personal data of the website users (hereinafter referred to as “You”) within the meaning of the General Data Protection Regulation (GDPR).

We protect your privacy and your private data. We collect, process and use your personal data in accordance with the content of this privacy policy and the applicable data protection regulations, in particular the GDPR. In the following data protection information, we inform you about which personal data we collect about you, how we process it and what rights you have in this regard. We recommend that you read the following information carefully.

Personal data within the meaning of this data protection notice refers to any information relating to an identified or identifiable natural person (hereinafter “data subject”). This includes in particular your name, your address, your e-mail address and your telephone number, but also information about how you use our website, such as your IP address.

1. Contact details of the controller

We are responsible for the processing of your personal data within the meaning of Art. 4 No. 7 GDPR:

Stiftung Gedenkstätte Sachsen-Anhalt
Umfassungsstraße 76
39124 Magdeburg

Tel.: +49 (0) 391 244 55 930
Fax.: +49 (0) 391 244 55 998
E-Mail: info-geschaeftsstelle@erinnern.org

2. Processing of your personal data

2.1 Web host
We use an external web host (hereinafter referred to as “host”) to provide our website:

netcup GmbH
Daimlerstraße 25
76185 Karlsruhe

The assignment of our host is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the reliable provision of our website.

We have concluded an order processing contract with our host. This contract ensures that our host only processes your personal data in accordance with our instructions and in compliance with the GDPR.

On our behalf, our host processes your personal data that is collected when you use our website (see Item 2.2).

2.2 Visiting the website
As soon as you visit our website, the browser used on your device automatically sends information to the server of our website, so-called server log files (hereinafter referred to as “log files”). The following information is stored in these log files:

Time/date of your visit to our website

Operating system and browser used on your end device

URL from which you access our website (Referrer)

Your IP address

Your access to our website with your full IP address is logged administratively by our host to detect and defend against cyberattacks. We cannot access this data. The processing of this data is based on Art. 6 para. 1 lit. f GDPR. The legitimate interest of our host lies in the secure and trouble-free provision of our website. The log files are automatically deleted by our host after seven (7) days at the latest.

You are not obliged to provide us with your personal data. If you do not provide us with this data, however, you will not be able to use our website (fully).

2.3 Contacting us by e-mail
You can contact us via the e-mail addresses published on our website. In this case, we process the personal data you provide, in particular your e-mail address, the date and time of your e-mail, information from your message and any attachments.

We use this data for the purpose of processing your enquiry and contacting you to respond to your enquiry.

This data processing is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in a frictionless communication with you.

Your personal data will only be received by those persons within our foundation who are authorised to access the respective e-mail inbox and who need this data to respond to your enquiry.

We will only store your personal data for as long as is necessary to respond to your enquiry and for as long as there are no statutory retention periods to which we are legally bound that prevent deletion.

You are not obliged to provide us with your personal data. If you do not provide us with this data, we will not be able to communicate with you (fully) by e-mail.

2.4 Contacting us by post
You can contact us using the postal address published on our website. In this case, we process the personal data provided by you, in particular your surname, first name, any name affixes, address, date of receipt and information from your letter and any enclosures.

We use this data for the purpose of processing your enquiry and contacting you to respond to your enquiry.

This data processing is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in a frictionless communication with you.

Your personal data will only be received by those persons within our foundation who are authorised to open the letter and who need this data to respond to your enquiry.

We only store your personal data for as long as is necessary to respond to your enquiry and for as long as there are no statutory retention periods to which we are legally bound that prevent deletion.

You are not obliged to provide us with your personal data. If you do not provide us with this data, however, we will not be able to communicate with you (fully) by e-mail.

2.5 Contacting us by telephone
You can contact us using the telephone number published on our website. In this case, we process the personal data provided by you, in particular your telephone number, your surname, first name, name affixes, date and time of your call and information gathered from the telephone call.

We use this data for the purpose of processing your enquiry and contacting you to respond to your enquiry.

This data processing is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in a frictionless communication with you.

Your personal data will only be received by those persons within our foundation who speak with you on the phone and who need this data to respond to your enquiry.

You are not obliged to provide us with your personal data. If you do not provide us with this data, however, we will not be able to communicate with you (fully) by telephone.

3. Disclosure of your personal data
We only pass on your personal data to third parties if:

you have given us your consent to disclose this data in accordance with Art. 6 para. 1 lit. a GDPR;
this is necessary to fulfil a contract or implement pre-contractual measures with you in accordance with Art. 6 para. 1 lit. b GDPR
there is a legal obligation to disclose this data pursuant to Art. 6 para. 1 lit. c GDPR to which we are subject.

The disclosure of this data may only be processed by third parties for the purposes arising from the consent, contract fulfilment or implementation of pre-contractual measures or legal obligations.

We do not intend to disclose your personal data to a third country or an international organisation.

4. Cookies
Cookies are small text files that are automatically stored on your end device by your browser. When you visit our website again with the same end device, the browser you are using sends the information stored in the cookies to our website or another website to which the cookie belongs. This enables the respective website to recognise you and be displayed optimally according to your settings.

We use technically necessary cookies to ensure that our website functions properly. The information stored in the cookies is sent only to our website. The processing of this data is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in providing an optimised website free of technical errors.

Most cookies are stored temporarily for the duration of a session (so-called session cookies) and are automatically deleted at the end of your visit to the website.

Other cookies are stored permanently on your end device until you delete them or they are automatically deleted by your browser after a specified period of time.

You are not obliged to accept the use of cookies. If you do not want cookies to be set on your device, you can view and adjust the cookie settings on our website at any time and deactivate them in the settings of the browser you are using. You can also delete stored cookies in your browser settings at any time. If you do not accept or deactivate cookies, you may encounter functional limitations on our website.

5. Your rights as a data subject
You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have a right to information about this personal data and to the information listed in Art. 15 GDPR.

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).

You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to erasure).

You have the right to demand that we restrict processing for the duration of our review if one of the conditions listed in Art. 18 GDPR applies, e.g. if you have objected to processing.

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and to transmit those data to another controller (Art. 20 GDPR - right to data portability).

You have the right to withdraw your consent to the processing of your personal data at any time (Art. 7 (3) GDPR). The legality of the processing of your personal data, which was carried out on the basis of your consent until its revocation, remains unaffected by this.

Information on your right to object pursuant to Art. 21 GDPR

You have the right pursuant to Art. 21 para 1 GDPR to object to the processing of your personal data at any time for reasons arising from your particular situation, provided that we have stated our legitimate interest or the legitimate interest of a third party (Art. 6 para. 1 lit. f GDPR) as the legal basis for this processing. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or when the processing serves the establishment, exercise or defence of legal claims.

If we process your personal data for the purpose of direct marketing, in accordance with Art. 21 para. 2 GDPR, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. We will then no longer process your personal data for these purposes.

6. Your right to lodge a complaint with a supervisory authority
In the context of processing your personal data, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 para. 1 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or the registered office of our foundation.

7. Data security
All information that you transmit to us is stored on servers in Germany. Unfortunately, because the transmission of information via the Internet is not completely secure, we cannot guarantee the security of data transmitted to our website via the Internet.

However, we take technical and organisational measures to protect our website and other systems against loss, destruction, access, modification or dissemination of your personal data by unauthorised persons. In particular, we store your personal data in encrypted form. We use TLS encryption, which supports version TLS 1.3. You can recognise the secure connection by the small lock symbol or the ‘s’ appended to ‘http’ (i.e. ‘https’) in the address bar of the browser you are using.

8. Data protection and third-party websites
The website may contain hyperlinks to and from third-party websites. If you follow a hyperlink to one of these websites, please note that we cannot accept any responsibility or guarantee for third-party content or data protection provisions. Please check the applicable data protection regulations before transmitting your personal data to this website.

9. Changes to this data protection policy
We reserve the right to amend this data protection policy at any time with effect for the future. A current version is always available on our website. Please keep yourself informed about our data protection policy.