Privacy Policy

General information

This privacy policy provides detailed information about what happens to your personal data when you visit our website www.enactus-muenster.de. Personal data is any data that can be used to identify you personally. We strictly adhere to legal regulations when processing your data, in particular the General Data Protection Regulation (“GDPR”), and place great importance on ensuring that your visit to our website is completely secure.

Responsible body

The entity responsible under data protection law for the collection and processing of personal data on this website is:

Name: Enactus Straubing e. V.

Street address: Uferstraße 53,
Postal code, City: 94315 Straubing,
Country: Germany,
Email: orga@straubing.enactus.team

Access data (server log files)

When you access our website, we automatically collect and store access data in so-called server log files, which your browser automatically transmits to us. This includes:

• Browser type and browser version of your PC

• Operating system used by your PC

• Referrer URL (source/link from which you accessed our website)

• Date and time of the server request

• country

• Interaction duration

  
  

We are generally unable to identify individuals from this data, nor do we intend to. Such data is processed in accordance with Article 6(1)(f) GDPR to protect our legitimate interest in improving the stability and functionality of our website.

Cookies

To make your visit to our website more attractive and to enable the use of certain functions, we use so-called cookies. These are small text files that are stored on your device. Cookies cannot execute programs or transmit viruses to your computer system.

Cookies that are necessary for carrying out electronic communication or for providing certain functions you have requested are stored on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in storing cookies to ensure the technically flawless and optimized provision of our services. Any other cookies (e.g., cookies for analyzing your browsing behavior) are addressed separately in this privacy policy.

Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit ends. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser on your next visit.

You can configure your browser to notify you when cookies are set and to allow cookies only in individual cases, to accept cookies in certain cases or to generally reject them, and to automatically delete cookies when you close your browser. Disabling cookies may limit the functionality of this website.

Error: The domain ENACTUS-MUENSTER.DE is not authorized to show the cookie declaration for domain group ID 1b9a2efa-ca4b-4f5f-af21-602547241462. Please add it to the domain group in the Cookiebot Manager to authorize the domain.

§ 1 Web analytics tools and advertising

1.1 Google Analytics

Our website uses the web analytics service Google Analytics. The provider is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics uses so-called "cookies." These are text files that are stored on your computer and enable an analysis of your use of our website. The information generated by cookies about your use of our website is generally transmitted to and stored on a Google server in the USA.

The legal basis for processing your data is the consent you have given via the cookie consent tool in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.

a) IP anonymization

We have activated the IP anonymization function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of our website, to compile reports on website activity, and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

b) Demographic characteristics in Google Analytics

Our website uses the "demographic characteristics" feature of Google Analytics. This allows us to generate reports that provide information about the age, gender, and interests of our website visitors. This data comes from Google's interest-based advertising and from third-party visitor data. This data cannot be traced back to any specific individual. You can deactivate this feature at any time via the ad settings in your Google account or generally prevent the collection of your data by Google Analytics – as described in the section "Objection to Data Collection".

c) Order processing

We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

d) Storage duration

User- and event-level data stored by Google that is linked to cookies, user identifiers (e.g., User ID), or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) is anonymized or deleted after 14 months. Details can be found at the following link: https://support.google.com/analytics/answer/7667196?hl=de

e) Objection to data collection

You can prevent the storage of cookies by adjusting your browser software settings; however, please note that in this case you may not be able to fully utilize all the functions of this website.

You can also prevent Google from collecting and processing data generated by cookies relating to your use of the website (including your IP address) by downloading and installing the browser add-on to deactivate Google Analytics available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. If you delete the cookies on your computer, you will need to set the opt-out cookie again.

For more information on how Google Analytics handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Further information on data protection can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de&gl=de

1.2 Google Tag Manager

Our website uses Google Tag Manager from Google. Google Tag Manager is a solution that allows marketers to manage website tags through a single interface. The tool that implements the tags is a cookie-less domain and does not store any personally identifiable information. The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If deactivation has been performed at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.

1.3 Google Fonts

We use “Google Fonts” (formerly “Google Web Fonts”) on our website, a service provided by Google. Google Fonts allows us to use external fonts, also known as Google Fonts. When you visit our website, the required Google Font is loaded from your web browser into its cache. This is necessary so that your browser can display our text with improved visual quality. If your browser does not support this feature, a standard font from your computer will be used.

The integration of Google Fonts involves a server request, usually to a Google server in the USA. This transmits information to the server about which of our web pages you have visited. Google also stores the IP address of your device's browser. We have no control over the scope and further use of the data collected and processed by Google through the use of Google Fonts.

We use Google Fonts for optimization purposes, in particular to improve your experience on our website and to make its design more user-friendly. This constitutes our legitimate interest in the processing of the aforementioned data by the third-party provider. The legal basis for this is Article 6(1)(f) GDPR.

Further information about Google Fonts can be found at https://fonts.google.com/, privacy policy at https://developers.google.com/fonts/faq?hl=de-DE&csw=1.

Social media

1.1 Facebook plugins (Like & Share button)

Our website integrates plugins from the social network Facebook, provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA ("Facebook"). You can recognize the Facebook plugins by the Facebook logo or the "Like" button on our website. An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/?locale=de_DE.

To enhance the protection of your data when visiting our website, the Facebook plugins are not fully integrated, but rather embedded using an HTML link (the so-called "Shariff" solution from c't). This integration ensures that when you access a page on our website containing such plugins, no connection is established with Facebook's servers. Only when you click the Facebook button will a new browser window open and take you to the Facebook page where you can click the Like or Share button.

Information about the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your related rights and settings options to protect your privacy, can be found in Facebook's privacy policy at: https://de-de.facebook.com/privacy/explanation.

1.2 Google+ Plugin

Our website uses social plugins from Google+, provided by Google. These plugins are recognizable, for example, by buttons with the "+1" symbol on a white or colored background. An overview of the Google plugins and their appearance can be found here: https://developers.google.com/+/plugins

To enhance the protection of your data when visiting our website, the Google+ plugins are not fully integrated, but rather embedded using an HTML link (the so-called "Shariff" solution from c't). This integration ensures that when you access a page on our website containing such plugins, no connection is established with Google's servers. Only when you click the Google+ button will a new browser window open and load the Google page.

Information about the purpose and scope of data collection and the further processing and use of data by Google, as well as your related rights and settings options to protect your privacy, can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de.

1.3 Instagram Plugin

Our website integrates features of the Instagram service. These features are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). The plugins are identified by an Instagram logo, for example, in the form of an "Instagram camera." An overview of the Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagrambadges

To enhance the protection of your data when visiting our website, the Instagram plugins are not fully integrated, but rather embedded using an HTML link (the so-called "Shariff" solution from c't). This integration ensures that when you access a page on our website containing such plugins, no connection is established with Instagram's servers. Only when you click the Instagram button will a new browser window open and load the Instagram page.

Information about the purpose and scope of data collection and the further processing and use of data by Instagram, as well as your related rights and settings options to protect your privacy, can be found in Instagram's privacy policy at: https://instagram.com/about/legal/privacy/.

1.4 LinkedIn Plugin

Our website uses features of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (“LinkedIn”).

To enhance the protection of your data when visiting our website, the LinkedIn plugins are not fully integrated, but rather embedded using an HTML link (the so-called "Shariff" solution from c't). This integration ensures that when you access a page on our website containing such plugins, no connection is established with LinkedIn's servers. Only when you click the LinkedIn button will a new browser window open and load the LinkedIn page.

Information about the purpose and scope of data collection and the further processing and use of data by LinkedIn, as well as your related rights and settings options to protect your privacy, can be found in LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy.

1.5 YouTube Plugin

Our website uses YouTube plugins to integrate and display video content. The video portal is provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA ("YouTube").

To enhance the protection of your data when visiting our website, the YouTube plugins are not fully integrated, but rather embedded using an HTML link (the so-called "Shariff" solution from c't). This integration ensures that when you access a page on our website containing such plugins, no connection is established with YouTube's servers. Only when you click the YouTube button will a new browser window open and take you to the YouTube page where you can click the Like button.

Information about the purpose and scope of data collection and the further processing and use of data by YouTube, as well as your related rights and settings options to protect your privacy, can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

Contact form

If you contact us by email or via a contact form, the data you provide, including your contact details, will be stored in order to process your request and to be available for follow-up questions. This data will not be shared without your consent.

The processing of data entered into the contact form is based solely on your consent (Art. 6 para. 1 lit. a GDPR). You may withdraw your consent at any time. To withdraw your consent, simply send an informal notification by email. The withdrawal of consent does not affect the lawfulness of data processing carried out before the withdrawal.

Data submitted via the contact form will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for data storage no longer applies. Mandatory legal provisions – in particular retention periods – remain unaffected. User Account: When you create a user account, you consent to the storage of your personal data such as name, address, and email address, as well as your usage data (username, password). This allows you to log in to our site using your email address and personal password.

Data use and sharing

The personal data you provide to us, for example via email (such as your name, address, or email address), will not be sold or otherwise marketed to third parties. Your personal data will only be processed for correspondence with you and only for the purpose for which you provided it. To process payments, we will forward your payment details to the financial institution responsible for handling the payment.

The data automatically collected during your visit to our website (Section 2: Storage period; Section 3: Data subject rights) is used solely for the purposes stated above. The data will not be used for any other purpose.

We assure you that we will not otherwise pass on your personal data to third parties unless we are legally obliged to do so or you have given us your prior consent.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential information, such as inquiries you send to us as the website operator, our website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the padlock icon in your browser's address bar.

When SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.

§ 2 Storage period

Personal data that has been communicated to us via our website will only be stored until the purpose for which it was entrusted to us has been fulfilled. Where commercial and tax law retention periods must be observed, the storage period for certain data may be up to 10 years.

§ 3 Rights of Data Subjects

With regard to your personal data, as a data subject you have the following rights against the controller in accordance with the legal provisions:

3.1 Right of withdrawal

Many data processing operations are only possible with your explicit consent. If the processing of your data is based on your consent, you have the right to withdraw your consent to data processing at any time with effect for the future, in accordance with Article 7(3) of the GDPR. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Data storage for billing and accounting purposes remains unaffected by a withdrawal of consent.

3.2 Right to information

You have the right, pursuant to Article 15 of the GDPR, to request confirmation from us as to whether we process personal data concerning you. If such processing takes place, you have the right to access your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, lodging a complaint with a supervisory authority, the origin of your data if they were not collected from you directly, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved and the significance and the envisaged consequences of such processing for you, as well as your right to be informed of the safeguards pursuant to Article 46 of the GDPR relating to the transfer of your data to third countries.

3.3 Right to rectification

You have the right, pursuant to Article 16 GDPR, to request at any time the immediate rectification of inaccurate personal data concerning you and/or the completion of your incomplete data.

3.4 Right to erasure

You have the right, pursuant to Article 17 GDPR, to request the erasure of your personal data if one of the following grounds applies:

a) Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.

b) You withdraw your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there is no other legal basis for the processing.

c) You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.

d) The personal data were processed unlawfully.

e) The erasure of personal data is necessary for compliance with a legal obligation under Union law or the law of the Member State to which we are subject.

f) The personal data were collected in relation to information society services offered pursuant to Article 8(1) GDPR.

However, this right does not exist insofar as the processing is necessary:

a) to exercise the right to freedom of expression and information;

b) to comply with a legal obligation which requires processing under Union or Member State law to which we are subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in us;

c) for reasons of public interest in the area of ​​public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;

d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) GDPR, insofar as the data subject’s rights are likely to render impossible or seriously impair the achievement of the objectives of that processing, or

e) for the establishment, exercise or defense of legal claims.

If we have made your personal data public and are obliged to erase it in accordance with the above, we will take reasonable steps, including technical measures, taking into account available technology and the cost of implementation, to inform controllers who are processing the personal data that you, as the data subject, have requested the erasure of all links to, or copies or replications of, your personal data.

3.5 Right to restriction of processing

You have the right, pursuant to Article 18 of the GDPR, to request the restriction of processing (blocking) of your personal data. You can contact us at any time at the address provided in the legal notice. The right to restriction of processing exists in the following cases:

a) If you dispute the accuracy of your personal data stored with us, we generally need time to verify this. For the duration of the verification process, you have the right to request the restriction of the processing of your personal data.

b) If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.

c) If we no longer need your personal data, but you require it for the establishment, exercise or defense of legal claims, you have the right to request restriction of processing of your personal data instead of erasure.

d) If you have objected to processing pursuant to Article 21(1) GDPR, a balancing of interests between your interests and ours must be carried out. Until it is determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data – apart from being stored – may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

3.6 Right to information

If you have asserted your right to rectification, erasure, or restriction of processing against us, we are obligated to inform all recipients to whom your personal data has been disclosed of this rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. Pursuant to Article 19 of the GDPR, you have the right to be informed about these recipients upon request.

3.7 Right not to be subject to a decision based solely on automated processing, including profiling.

You have the right, pursuant to Article 22 GDPR, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

This does not apply if the decision

a) is necessary for the conclusion or performance of a contract between you and us,

b) is permitted under Union or Member State law to which the controller is subject and which contains appropriate measures to safeguard your rights and freedoms and legitimate interests or

c) with your express consent.

However, in the cases referred to in (a) to (c), the decisions may not be based on special categories of personal data pursuant to Article 9(1) GDPR, unless Article 9(2)(a) or (g) applies and appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject have been taken.

In the cases referred to in (a) and (c), we will take appropriate measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

3.8 Right to data portability

If the processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and is carried out using automated procedures, you have the right, pursuant to Art. 20 GDPR, to receive your personal data which you have provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller or to request its transmission to another controller, insofar as this is technically feasible.

3.9 Right to object

Insofar as we base the processing of your personal data on the balancing of interests pursuant to Article 6(1)(f) GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data; this also applies to profiling based on this provision. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims (objection pursuant to Article 21(1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object, your personal data will no longer be processed for direct marketing purposes (objection pursuant to Article 21(2) GDPR).

You have the option, in connection with the use of information society services – notwithstanding Directive 2002/58/EC – to exercise your right to object by means of automated procedures using technical specifications.

3.10 Right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 GDPR

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged infringement. This right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

The supervisory authority responsible for us is:

Bavarian Data Protection Authority

Address:
Wagmüllerstraße 18,
80538 Munich,
Germany

Telephone: +49 89 212672-0
Email: poststelle@lda.bayern.de
Website: https://www.lda.bayern.de

Validity and changes to this privacy policy

This privacy policy is effective from November 22, 2023. We reserve the right to amend this privacy policy at any time in accordance with applicable data protection regulations. This may be necessary, for example, to comply with new legal provisions or to reflect changes to our website or new services offered on our website. The version available at the time of your visit applies.

Should this privacy policy be changed, we intend to announce any changes to our privacy policy on this page so that you are fully informed about what personal data we collect, how we process it, and under what circumstances it may be shared.