Privacy Statement Citizen Diplomacy International
In order to offer you the services of the Citizen Diplomacy International, we obviously also need some personal data of yours. In doing so, we take the protection of (your) personal data very seriously and always process it in accordance with the applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR). This privacy statement serves the purpose of informing you about the type, scope and purpose of personal data processed by us and your rights regarding this data as an affected party.
1. Responsible authority/party and general information
Your data will be processed by Citizen Diplomacy International, staff supervised by: Siobhan Lyons, President and CEO, 30 s. 15th St, 15th Floor, Philadelphia, PA 19102, Telephone: +1 215-486-2090, E-Mail: email@example.com. In this document, Citizen Diplomacy International means the websites www.cdiphila.org including all subpages, content and functions available (e.g. reservation function). Our services are intended for use by the general public Since minors can also use our services, e.g. Citizen Diplomat Academy, we collect data of minors only with the consent of the respective guardian.
2. Collection and processing of personal data
As a rule, you can use online services that do not require payment or registration without providing personal information. In certain cases, however, we process the personal data listed in Section 3. This will only be done to the extent necessary to provide a functional website and our content and services. Furthermore, we process personal data in connection with the use of the Citizen Diplomat Academy, Dialogue and Diplomacy, donations, volunteer forms and other events and programs, if you specify these yourself, e.g. within the context of an enquiry or when registering or because a different legal basis exists in this case (see Section 4). Should you not require this, you will unfortunately not be able to take full advantage of our services.
3. Categories of processed data
As soon as you use the Citizen Diplomacy website, when you make an application through our site or register yourself in Zoom for any event, program or volunteer service, our system automatically records information from the computer system of the calling computer. In the process the following data could i.a. be collected:
- Information about the browser type and version used
- Operating system of the user
- Date and time of access
- Web analysis data / pseudonymous usage profiles (Cookie ID, Ad ID, etc.)
- Websites from which the user accesses our website
- Websites that the user accesses via our website
In addition, we process the following personal data if there is a contractual relationship between you and us or if you have transmitted the data to us in other ways:
- Basic personal data (name, address, date of birth)
- Communication data (phone number, e-mail address)
- Contract master data (contractual relationship, product- or contract interest, order history)
4. Legal basis and purpose of the processing of data
We process your data solely in accordance with one or more of the possible legal requirements.
According to the GDPR, personal data may be processed in particular on the basis of a contract or for the performance of pre-contractual measures, upon the submission of consent, on the basis of a legitimate interest or law and for the protection of vital- or public interests.
When you make an application through our site to attend a program or event, or when using additional payment-based services, we use your contract master data including contact details for performance and fulfillment of the contract as is required, e.g. as is the case in processing operations that involve the delivery of goods or other services or counter-performance, as well as the enforcement of legal claims or claims (Article 6, para. 1, lit. b, GDPR). The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in the case of inquiries about our products or services. In the case of payable services, we process certain data, because we are subject to a legal obligation which requires the processing of personal data such as the fulfillment of tax obligations (Article 6, para. 1, lit c, GDPR).
We will also use your e-mail address collected during registration or in the course of contract execution to inform you by e-mail about your own similar products or services as well as about existing bookings or generally about Citizen Dilomacy International. The processing of the e-mail address in this case is based on our legitimate interest in the promotion of our products and services (Article 6, para. 1, lit. f, GDPR).
In addition, we use your e-mail address to send you our newsletter if you have given us your prior express consent to receive a newsletter or advertising. In this case, we will process your e-mail address in order to be able to deliver the newsletter as requested (Art. 6 (1) (b) GDPR). You may withdraw the permission for the use of your e-mail address for such purposes at any time in writing or in writing to firstname.lastname@example.org, with effect for the future, without any costs other than the transmission costs in terms of the basic rates arising.
In the Internet each device for transmitting data requires a unique address, the so-called IP address. The temporary storage of the IP address is technically necessary as a minimum in order to allow delivery of the website to the computer of the user. We abbreviate the IP ad-dresses before any processing and only process them anonymously. There is no storage or further processing of the unabridged IP addresses. Our servers also store your IP address for 14 days for your own security.
Processing operations that are not covered by one or more of the abovementioned legal bases are processed if they are deemed necessary to safeguard a legitimate interest and do not outweigh your interests, fundamental rights and fundamental freedoms (Art. 6, para. 1, lit. f, GDPR). A legitimate interest is assumed if the person concerned is a customer of the authori-ty/party responsible. Based on the processing of personal data, our legitimate interest is, in particular, to conduct our business for the benefit of all of our employees and our shareholders.
Our legitimate interest in being able to offer you products that are tailored to your needs, to inform you about new products and to constantly improve our services and thereby also in-crease our turnover is the legal basis for the processing for usage-based online advertising and web analysis. For web analysis services, see point 9.
Another legitimate interest is the functionality of the business processes (e.g. address man-agement / invoicing).
You may object to the processing on the basis of a legitimate interest at any time (see paragraph 14).
In the event of data being processed for a purpose other than that specified initially in collecting the data, a compatibility check will be carried out in accordance with Art. 6, para.4, GDPR. Further processing is only permitted if the original purpose is compatible with the new purpose or permitted on the basis of separate legal grounds. Recognized compatible purposes include i.a. the assertion, exercising or defence of civil law claims unless there is overriding interest of the affected party. In this case you will be advised of the change in purpose. Should the new purpose not be compatible with the original reasons provided upon collecting the data, data will be collected anew in accordance with the new legal basis. In this case, we will also inform you about the change of purpose.
5. Place of processing
In some cases we transfer your data to partners such as host families for example, insofar as this is necessary for the fulfillment of the contract (pursuant to Art. 45, para. 1 and Art. 49, para. 1 b), GDPR). Whether third parties with whom you have a separate contractual relationship (e.g. with Face-book, in case you have a Facebook account) transfer data to countries outside the European Economic Area lies beyond our knowledge and influence.
6. Disclosure of your data to third parties
We only transfer your personal data to third parties if the transmission is necessary to fulfill our contractual obligations towards you and this is clearly done by or together with another provider, if we are otherwise legally entitled thereto or obligated to transfer these, or you have given us an appropriate consent.
To provide our services, selected personal data within our company may be shared with certain departments. These include accounting, marketing and IT.
In certain cases, we also use external service providers or affiliates who have been instructed by us to process data on our behalf. Such service providers are contractually obligated by us in accordance with the strict requirements of the GDPR as contract processors and may not re-use your data for any other purpose. For example, we use the following services: registra-tion/log-in services, hosting, newsletters, rating services, maintenance and support, and web analytics.
The transfer of data to processors takes place on the basis of Art. 28, para. 1, GDPR, alterna-tively based on our legitimate interest in the economic and technical advantages associated with the use of specialized contract processors, Art. 6, para. 1, lit. f, GDPR. If we are legally obligated to do so, or, if this is permitted under data protection law, we transmit personal data to authorities, for example the police or the public prosecutor (Art. 6, para 1, lit. c, GDPR). The disclosure of this data is based on our legitimate interest in the fight against abuse, the prose-cution of criminal offences and the protection, assertion and enforcement of claims and that your rights and interests in the protection of your personal data do not predominate, Art. 6, para. 1, lit. f, GDPR.
7. Cookies and similar technologies
We use two types of cookies, namely on the one hand cookies that are technically necessary and without which the functionality of our website would be limited, as well as, on the other hand, optional cookies in order to make our website more user-friendly. User data collected through technically necessary cookies will not be used to create user profiles. The use of the analysis cookies is for the purpose of improving the quality of our website and its contents. Through the analysis cookies, we learn how the website is used and so we can constantly optimize our offer. Further information on the individual analysis services can be found in Sec-tion 9 of this Privacy Notice. We also use a so-called tracking cookie when you access our website via a link from a partner. This is done to fulfill our contractual relationship with the partner.
You can prevent the setting of cookies by us at any time by means of an appropriate setting of the Internet browser used and thus permanently contradict the setting of cookies. Furthermore, already set cookies can be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. If you deactivate the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.
8. Web analytics services
In order to continually improve our content and to adapt it to the interests of our users as well as to display usage-based online advertising, we employ a number of analysis services that collect and evaluate data on our website. These service providers process instruction-bound pseudonymised user data on the basis of an order processing agreement. The data will not be stored together with other personal data of users. You can de-activate the individual analytical services for the future at any time. Below you can find details about the analytical services we use:
We have integrated Google AdWords on this website. Google AdWords is an internet advertis-ing service that allows advertisers to run ads on Google's search engine as well as on the Google Network. Google AdWords allows an advertiser to pre-set keywords that display an advertisement on Google's search engine results only when the search engine retrieves a keyword-related search result. On the Google Network, the ads are distributed to topic-related sites using an automated algorithm and according to pre-defined keywords. The operating company for the services of Google AdWords is Google Inc., 1600 Amphitheater Pkwy, Moun-tain View, CA 94043-1351, USA. The purpose of Google Ad-Words is to promote our website by displaying interest-based advertising on third-party websites and in the search engine results of Google's search engine and by displaying third-party ads on our website. If an affected person reaches our website via a Google ad, a so-called conversion cookie is filed on Google's information technology system by Google. What cookies are, has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the person affected. If the cookie has not yet expired, the conversion cookie is used to see wheth-er certain sub-pages, for example the shopping cart from an online shop system, have been called up on our website. The conversion cookie tells both us and Google whether an affected person who came to our site through an AdWords ad generated revenue, i.e. completed a purchase or canceled.
The data and information collected through the use of the conversion cookies is used by Google to provide visitor statistics for our website. These search statistics are then used by us to determine the total number of users who have been sent to us through AdWords ads, in other words, to determine the success or failure of each AdWords ad and to optimize our Ad-Words ads for the future. Neither our company nor any other Google AdWords advertiser re-ceives any information from Google that could identify the data subject.
The conversion cookie stores personally identifiable information, such as the websites visited by the affected person. Each time you visit our websites, personal information, including the IP address of the Internet connection used by the data subject, is transferred to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties. The affected person can prevent the setting of cookies by our website, as already described above, at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the person concerned. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.
9. Social Networks
You can also find us on social networks of national and foreign companies, such as Facebook or Instagram. In addition, we have integrated individual functions of these networks into our online services. However, you can only use both if you are registered and logged in to the respective social network. Please note that the usage- and privacy conditions of this company apply to the use of the respective social network over which we have no influence. However, we would be happy to explain to you how such networks process your personal information in this context:
We have integrated components of the company Facebook on this website. Facebook is a social network and serves the exchange of opinions, experiences and media. The operating company of Facebook is Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If an affected person lives outside the US or Canada, the party responsible for the processing of personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. With each visit to one of the individual pages of this website, which is operated by us and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on the information technology system of the affected person automatically activates the respective Face-book component and causes a representation of the corresponding Facebook component of Facebook to be downloaded. An overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=en_US . As part of this technical process, Facebook is informed of the specific sub-pages of our website visited by the person concerned. If the data subject is simultaneously logged in to Facebook, Facebook recognizes with each visit to our website by the data subject and during the entire duration of the respective stay on our website which specific sub-page(s) of our website the data subject is visiting. This information is collected through the Facebook-component and associated with the respective Facebook account of the person concerned by Facebook. If the person concerned activates one of the Facebook buttons integrated on our website, e.g. the "Like" button, or if the person concerned makes a comment, Facebook assigns this information to the personal Facebook user account of the person concerned and saves this personal information. Facebook always receives information via the Facebook component that the person concerned visited our website if the data subject is simultaneously logged in to Facebook at the time of accessing our website; this happens regardless of whether the person clicks on the Facebook component or not. If such a transfer of information to Facebook is not wanted by the person concerned, he/she can prevent the transfer by logging out of his/her Facebook account before calling up our website.
The data policy published by Facebook, which is available at https://de-de.facebook.com/about/privacy/, provides information on the collection, processing and use of personal data by Facebook. It also explains which options Facebook offers to protect the privacy of the person concerned. In addition, different applications are available, which make it possible to suppress data transmission to Facebook. Such applications can be used by the person concerned to suppress data transmission to Facebook.
On smartphones and tablets, the aforementioned services are often not implemented by plug-ins, but by a device-internal “sharing” function. In accordance with the settings, information can also be given to other social media service providers. Please refer to details in the user information of your device.
There are links to Instagram in some places on this website, a service provided by Facebook. By using the links you leave the website of the GLS Campus in Berlin and are forwarded to Instagram. We have no control over the privacy policies of Instagram. Therefore, please see the respectively valid data protection regulations here: https://help.instagram.com/519522125107875?helpref=page_content
10. Payment service provider
In the event that you use a payment service or purchase services or goods via our website / app, we offer different payment methods. Should you decide to use one of these payment service providers, you leave our site. All the data is then collected and processed by this particular payment service provider. We do not receive any personal data, in particular no bank or credit card data, but only the information that the payment was successfully made. The following payment service providers are available:
We have integrated the payment option and forms with DonorPerfect Weblink Forms. We have integrated components of Donor Perfect Weblink Forms on this website. DonorPerfect Weblink Forms is a payment service that enables cashless payment for products and services on the Internet and represents a technical procedure by which the online retailer immediately receives payment confirmation. This enables a merchant to deliver goods, services or downloads to the customer immediately after ordering. The operating company of DonorPerfect is 601 Office Center Dr, Suite 200, Fort Washington, PA 19034. During the loading process, the person concerned selects "donate" as an option for payment in our online platform, which automatically transmits the data of the person concerned to Donor Perfect Weblink Forms. With the selection of this payment option, the person concerned consents to a transfer of personal data required for payment processing. The execution of the financial transaction is then communicated to the online retailer automatically. The personal data exchanged with Donor Perfect Weblink Forms is the name, last name, address, e-mail address, IP address, telephone number, mobile phone number or other data required for payment processing. The purpose of the transmission of the data is payment processing and fraud prevention. We will provide Donor Perfect Weblink Forms other personal information when there is a legitimate interest in the transfer. Additional Information may be found at https://www.donorperfect.com/company/gdpr/
11. Other services
Other services being used by us, are::
We use the service IContact, a data controllers and data processor provider which takes care of the sending of the emails and newsletters on our behalf. New subscribers through Icontact are invited to use the so-called double-opt-in procedure to ensure that the email/newsletter is sent to you. In the course of this, the potential recipient can be included in a distribution list. Afterwards, the user receives a confirmation e-mail to confirm the registration in a legally secure manner. Only when the confirmation is made, is the address actively included in the distributor. This data is used by Icontact exclusively for the delivery of ordered information and offers.
IContact is used as email and newsletter software. Your data will be transmitted to Iconact. Icontact is prohibited from selling your data and using it for purposes other than the sending of newsletters. icontact is a certified provider that was selected in accordance with the requirements of the General Data Protection Regulation and the Federal Data Protection Act.
Further information can be found here: https://www.icontact.com/gdpr/
The granted consent for the storage of data, the e-mail address and their use for forwarding the newsletter can be revoked at any time for example via the "unsubscribe" link in the news-letter.
12. Storage period
We store personal data only as long as we are entitled to do so, and the purpose for the processing thereof does not fall away. For the duration of storage of personal data, the respective statutory retention period applies. After the expiry of the deadline, the corresponding data will be routinely deleted as long as it is no longer required to fulfill the contract or to initiate a contract.
13. Contact data and your rights as a person concerned
Should you have any questions related to data protection, please contact our Data Protection Officer:
Siobhan Lyons, President and CEO, E-Mail: email@example.com
Information and correction
You can receive information from us free of charge at any time if personal data about you is processed by us and also specifically which data about you is stored as well as a copy of the stored data. You can also correct and complete incorrect data.
Deletion, restriction and the right to be forgotten
You can request the deletion and restriction of your personal data. Please note that in the case of e.g. payable contracts legal storage obligations exist, and, therefore, we may not delete your data in every specific instance completely. In this case, your data will be marked with the aim of limiting its future processing.
If applicable, you also have the right to have your personal data transferred to you or another person in a structured, commonly used and machine-readable format, provided the processing is based on your consent or contract and is performed by automated means. However, this does not apply if the processing is not required for the performance of a task deemed to be in the public interest or in the exercise of public authority delegated to the responsible party. Furthermore, you have the right to obtain that the personal data are transmitted directly from one responsible party to another, insofar as this is technically feasible, and provided that this does not affect the rights and freedoms of other parties.
14. Revocation / Objection
Your submitted consent can be revoked at any time with immediate effect for the future under the above-mentioned contact address. In particular, you can revoke the use of your e-mail address for the purpose of sending out the newsletter at any time in writing or in writing to firstname.lastname@example.org or Siobhan Lyons, President and CEO, 30 s. 15th St, 15th Floor, Philadelphia, PA 19102, Telephone: +41 215-486-2090, E-Mail: email@example.com with immediate effect for the future, without any other than the transmission costs according to the basic rates arising. You also have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data relating to a legitimate or public interest. This also applies to profiling based on these provisions. In the event of an objection, we will no longer process personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the person concerned or that the processing is for the assertion, exercise or defense of legal claims.
If we process personal data in order to operate direct mail, you have the right at any time to object to the processing of your personal data for the purpose of such advertising under the. above-mentioned contact address. This also applies to the profiling, as far as it is associated with such direct mail. You also have the right to object to the processing of personal data con-cerning you for scientific or historical research purposes or for statistical purposes for reasons that arise from your particular situation unless such processing is necessary to fulfill a duty that is deemed to be in the public interest.
Right of appeal
You also have the right of appeal to the competent supervisory authority as well as the possi-bility of seeking legal remedies. The supervisory authority to which the complaint has been submitted, shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy.
Existence of automated decision-making
We refrain from automated decision-making or profiling.