PRIVACY POLICY OF THE PARENT-CHILD CENTER SCHWABING/MAXVORSTADT E. V.
LAST UPDATED: APRIL 2024
GENERAL INFORMATION
1.1
The protection of your personal data is very important to us. Personal data refers to any information relating to your personal or factual circumstances. In accordance with applicable data protection regulations, we inform you here about the collection, processing, and use of your data.
1.2 Responsible entity under the Federal Data Protection Act (BDSG):
Eltern-Kind-Zentrum Schwabing/Maxvorstadt e. V.
Nordend Straße 53
80801 Munich
Germany
Represented by the Executive Board of the Association
1.3
If you have any questions regarding data protection, please contact us at: info@elki-schwabing.de
The following explains how we collect, store, process, and use your data.
2. COLLECTION AND PROCESSING OF PERSONAL DATA
2.1
We process and use only the data you provide to us yourself. We do not collect data from other sources.
2.1.1 Registration for events and language playgroups as an external participant (non-member):
You may register and pay without becoming a member. The collection, storage, and processing of the required personal data is carried out exclusively for the respective business purpose. If you register without creating an account, you must re-enter your data for each new registration.
2.1.2 When applying for membership:
When registering for courses or upon joining the association, the following data is collected:
Main member: Title, first name, last name, address, phone number (mobile), email address.
With the consent of the legal guardians, the necessary data of minors may also be collected.
2.1.3 Contact by email
If you send us an email, it is stored on servers of our hosting provider, Strato AG. Encryption is provided via an SSL certificate (Secure Socket Layer).
Strato Privacy Policy:
https://www.strato.de/datenschutz
Data relevant for fulfilling a contract or required for pre-contractual measures, as well as invoicing and customer data, are stored for 10 years in accordance with legal retention periods.
2.2
The data you provide is used exclusively for membership administration and for the organization and execution of our groups.
We may contact you using this data to request additional information if necessary.
Membership lists are provided digitally or in printed form to board members and section leaders if necessary for their role or specific responsibilities within the association.
Membership lists are stored in Buhl MeinVerein, an online data management tool that processes LOG data, IP addresses, cookies, and pixels.
Privacy Policy: https://www.buhl.de/datenschutz/
If a member asserts the need to access the membership list to exercise their statutory rights, the board will only provide the list upon written confirmation that the addresses will not be used for any other purpose.
The association may provide personal data (name, address, function within the association) to insurance companies when necessary for establishing, executing, or terminating insurance contracts. Contractual measures ensure that data is used exclusively for the specified purpose.
2.3 Collection of general data when visiting our website
Our website is hosted by STRATO. When visiting our website, STRATO’s servers automatically store information transmitted by your browser, including: request, IP address, browser type and language, date, and time of access.
These logs are used for technical operations, security, and misuse detection and are automatically deleted after 7 days. No further use or transfer of this data occurs.
STRATO may additionally integrate external services automatically. ELKI has no influence on this. Details are available in STRATO’s privacy policy:
https://www.strato.de/datenschutz/
2.4
Personal data is protected through technical and organizational measures against unauthorized access, loss, or alteration.
2.5
Your personal data is processed in compliance with European and national data protection laws, particularly the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
2.6 Google Maps
This website uses the Google Maps API. Provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use Google Maps, your IP address must be stored. This data is typically transmitted to a Google server in the USA.
Use of Google Maps is based on our legitimate interest in providing an appealing website and making our location easy to find (Art. 6 (1) lit. f GDPR).
Google Privacy Policy: https://www.google.de/intl/de/policies/privacy/
3. RECIPIENTS OF YOUR PERSONAL DATA
3.1
Your data is only shared with authorized individuals within the association. All board members, section leaders, and employees (e.g., instructors) are obligated to maintain confidentiality and protect all personal data.
4. DATA TRANSFER TO THIRD PARTIES OR COUNTRIES OUTSIDE THE EU
4.1
Third parties are persons or entities outside the association that do not process data on behalf of ELKI.
4.2
Personal data is only transferred to third parties if legally required, contractually necessary, or in the interest of the data subject.
4.3
We have a data processing agreement with Buhl MeinVerein for the provision of online membership management services. Buhl contractually guarantees GDPR compliance.
Privacy Policy: https://www.buhl.de/datenschutz/
5. DURATION OF STORAGE AND PROCESSING
5.1
Personal data is stored only as long as necessary for achieving the storage purpose or as required by legal retention periods. When the purpose ceases or the retention period expires, data is deleted in accordance with legal requirements.
Financial data is stored for up to 10 years as required by tax law.
5.2 Rejection of membership
If the board decides not to accept an application, the data is deleted immediately unless outstanding payments exist.
5.3 Termination of membership
Upon termination, member data is deleted from the registry unless outstanding payments exist. Financial data remains stored for up to 10 years after termination.
6. RIGHTS OF DATA SUBJECTS
6.1
You have the right to request information about your stored personal data at any time. You also have the right to correction, deletion, restriction of processing, objection to processing, and data portability. Requests may be made by phone, email, or in writing.
6.2 Right to withdraw consent
You may withdraw your consent to data processing at any time.
6.3 Contact
6.4
For security and privacy reasons, information is provided only in writing and sent to the postal address stored in your records.
7. RIGHT TO LODGE A COMPLAINT
7.1
If your request is not processed within one month, you have the right to lodge a complaint with the relevant supervisory authority or seek legal remedy.
7.2 Supervisory authority:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 27
91522 Ansbach
Germany
8. CHANGES TO THE PRIVACY POLICY
Our privacy policy may be updated periodically to reflect legal requirements or changes in our services (e.g., new offerings).
9. NECESSITY FOR MEMBERSHIP
The board must reject membership applications if the applicant does not consent to the storage and processing of their personal data as described above.
PRIVACY POLICY – APPLICATION PROCESS
ELTERN-KIND-ZENTRUM SCHWABING/MAXVORSTADT E. V.
Last updated: April 2024
1. GENERAL INFORMATION
1.1
The protection of your personal data is very important to us. In accordance with applicable data protection laws, we inform you about the collection, processing, and use of your data during the application process.
1.2 Responsible entity:
Eltern-Kind-Zentrum Schwabing/Maxvorstadt e. V.
Nordend Straße 53
80801 Munich, Germany
Represented by the Executive Board.
1.3
Questions regarding data protection: info@elki-schwabing.de
2. COLLECTION AND PROCESSING OF PERSONAL DATA
2.1
We process only the data you provide. No external data sources are used.
2.1.2 Contact by email
Emails you send to us are stored on servers of Strato AG and encrypted via SSL.
Strato Privacy Policy: https://www.strato.de/datenschutz
Data relevant for contractual or pre-contractual purposes is stored for 10 years. These data are stored on STRATO HiDrive, which processes log data, IP addresses, cookies, and pixels.
More info: https://www.strato.de/online-speicher/hidrive
2.2 Use of data during the application process
Your data is used exclusively for processing your application. We may contact you to gather additional information. If an employment relationship arises, your data will be used to prepare the contract.
2.3 Data protection
Your application data is protected through technical and organizational measures.
Please note: Sending unencrypted emails involves confidentiality risks. You may send documents by post instead.
3. RECIPIENTS OF YOUR DATA
3.1
Your data is forwarded only to the relevant personnel within the association, all of whom are obligated to confidentiality.
3.2
You may withdraw your consent at any time. In this case, your documents and data can no longer be considered for the current or future application processes.
4. DATA TRANSFER TO THIRD PARTIES OR OUTSIDE THE EU
Same conditions as outlined in Section 4 above.
5. STORAGE DURATION
5.1
Data is stored only as long as required by law or purpose.
5.2
If your application is unsuccessful, your data will be deleted 3 months after the rejection.
5.3 Initiativbewerbungen (unsolicited applications)
Stored for up to 3 months, then deleted.
6. RIGHTS OF DATA SUBJECTS
Same rights as in Section 6 above.
7. RIGHT TO COMPLAIN
Same as in Section 7 above.
8. AMENDMENTS TO THE PRIVACY POLICY
As above.
9. CONSENT
By submitting your application documents, you consent to this privacy policy and to the deletion of your data after the completion of the application process.