Privacy policy

This privacy notice describes how we, the Deutsch-Griechische Zivilrechtsvereinigung e.V. (see I.), process personal data both when you use our website (see II.) and in connection with your membership (see III.). It also explains the rights you have with regard to your personal data and how you can contact us (see IV.).

I. Who is responsible?

The controller within the meaning of the GDPR is

Deutsch-Griechische Zivilrechtsvereinigung e.V.
represented by the Chair of the Board
Professor Dr. Tim Florstedt
Viktoriastraße 31
65189 Wiesbaden, Germany
Tel. +49 (0) 611 7102 2273
Email: info@dgzv.org
Register of associations: Local Court (Amtsgericht) Wiesbaden, register number VR 7583

If you have any questions about how we process your personal data or about data protection in general, please use the contact details above.

II. Data processing when you visit the association’s website

Below we inform you about the processing of personal data when you use our website.

1. Processing of data when accessing our website – log files

When you use the website for information purposes only, i.e. simply view it without registering or otherwise providing information, we process the personal data that your browser transmits to our server. When you view our website, we collect the following data, which are technically necessary for us to display our website to you and to ensure its stability and security (legal basis: Art. 6(1)(1)(f) GDPR):

• IP address
• date and time of the request
• time zone difference to Greenwich Mean Time (GMT)
• content of the request (specific page)
• access status/HTTP status code
• amount of data transferred in each case
• website from which the request originates
• browser
• operating system and its interface
• language and version of the browser software.

These data are deleted as soon as they are no longer required for the purpose for which they were collected. In the case of providing the website, this is the case when the respective session has ended. The log files are kept directly and exclusively accessible to administrators for up to 24 hours. After that, they are only indirectly available through the reconstruction of backup tapes and are finally deleted after four weeks at most.

2. Hosting

The website is hosted by:

Domainfactory GmbH
c/o WeWork
Neuturmstrasse 5
80331 Munich
Germany
Tel.: +49 89 998 288 026
Email: support@df.eu
Website: www.df.eu

The host receives the data listed above as a processor and processes them exclusively on our instructions.

3. Processing of data when using the website – your enquiries

If you send us an enquiry by email or via the contact form, we collect the data you provide (name, email address) in order to process and answer your enquiry. These data are deleted as soon as they are no longer required for the purpose for which they were collected, unless statutory retention obligations apply. The legal basis for the processing is the consent you give by transmitting your personal data, Art. 6(1)(1)(a) GDPR. You can withdraw this consent at any time with effect for the future using the contact form or the email address provided, without affecting the lawfulness of processing based on consent before its withdrawal.

4. Cookies

Our website does not use cookies.

5. Transfers to third countries

Your personal data are not transferred to any third country.

III. Data processing in connection with your membership of the association

If you wish to support the purposes of our association as a member, we process various personal data about you for the purposes described below.

1. Membership administration

For the purpose of membership administration, we process your master data (name, address, contact details), including the bank details/account data you have provided for the administration of membership fees. The legal basis for this is Art. 6(1)(1)(b) GDPR.

As part of your membership, we inform you by post, email, and where applicable fax and telephone about current events, upcoming events and reports on past events in order to fulfil the association’s purposes. The legal basis for this is Art. 6(1)(1)(b) GDPR.

The data mentioned above that are required for membership administration are deleted 3.5 years after the end of the year in which the membership ended. The data required for the administration of membership fees, i.e. name, period of membership and bank details, are deleted ten years after the end of the year of the last fee statement.

2. Photos and information on our website

For the purpose of presenting the association to the public, photos of members taken at events may be published on our website. You will receive information about your consent at the events. You can of course withdraw your consent to the publication of photos showing you at any time with effect for the future, without affecting the lawfulness of processing based on consent before its withdrawal. After your withdrawal, we will no longer publish the photos. Information about your rights can be found below (IV.). The legal basis for this is your consent, Art. 6(1)(1)(a) GDPR.

IV. Your rights as a data subject

All data subjects have the following rights:

Right of access (Art. 15 GDPR)
You can request information under Art. 15 GDPR about the personal data we process about you.

Right to rectification of inaccurate data (Art. 16 GDPR)
If the information concerning you is not (or no longer) accurate, you can request rectification under Art. 16 GDPR. If your data are incomplete, you can request that they be completed.

Right to erasure or “right to be forgotten” (Art. 17 GDPR)
You can request the erasure of your personal data under Art. 17 GDPR.

Right to restriction of processing of personal data (Art. 18 GDPR)
Under Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data.

Right to data portability (Art. 20 GDPR)
If the conditions of Art. 20(1) GDPR are met, you have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party. The collection of data for the provision of the website and the storage of log files are essential for the operation of the website. They are therefore not based on consent under Art. 6(1)(a) GDPR or on a contract under Art. 6(1)(b) GDPR, but are justified under Art. 6(1)(f) GDPR. The conditions of Art. 20(1) GDPR are therefore not met in this respect.

Right to object (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6(1)(f) GDPR. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims. The collection of data for the provision of the website and the storage of log files are essential for the operation of the website.

Right to lodge a complaint (Art. 77(1) GDPR)
If you believe that the processing of your personal data infringes data protection law, you have the right under Art. 77(1) GDPR to lodge a complaint with a data protection supervisory authority of your choice. This includes the supervisory authority responsible for the controller: the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit), https://datenschutz.hessen.de/service/beschwerde-uebermitteln.