Privacy policy

for members of and donors to the Anglo-German Club e.V.

The protection of your data is important to us. The following privacy policy provides information about the collection of your personal data for the purposes of your membership as well as your visit to our website.

 

§ 1 Information on who is responsible

(1) The following provides information about the collection and use of personal data in connection with your membership of the Anglo-German Club e.V., (hereinafter referred to as the “club”).
Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses, bank details or your user behaviour on websites.

(2) Responsible under data protection law:
Anglo-German Club e.V.
Harvestehuder Weg 44
20149 Hamburg
Email address: office@anglogermanclub.de

 

§ 2 Information on the processing and recipients of personal data

(a) Information about the processing of club members’ personal data for membership purposes

(1) We only process the personal data necessary for providing membership of the club, in accordance with Art. 6(1b) GDPR. These data are in particular the following:

  • First name
  • Surname
  • Address
  • E-mail address
  • Phone number
  • Bank details (e.g. account number, IBAN)

(2) We process the aforementioned personal data for the following purposes:

  • Managing the club
  • Collecting the membership fee
  • Running and organising club events (e.g. general meetings, lectures)

(3) We will only share your personal data with third parties if this is essential to fulfil the aforementioned purposes (e.g. sharing your name and account details in the case of a direct debit mandate, sharing your name with event organisers to the extent that this is required by the organiser) or if we are legally required to do so. Furthermore, we will transmit your personal data to contractors (e.g. printers and mailing service providers) for processing on our behalf in accordance with instructions. Over and above this we will not share your data with third parties.

(4) Where processing requires express consent (e.g. publication of data and/or photographs), the club will only process your data in this form if you have given us your consent in advance. The legal basis for data processing based on your consent is Art. 6(1a) GDPR.

(b) Transmission of data to Gastronomie Pütter im Anglo-German Club e.K.

We will transmit your contact information (name, address, phone and e-mail) to Gastronomie Pütter im Anglo-German Club e.K., Harvestehuder Weg 44, 20149 Hamburg. The basis for this is Art. 6(1f) GDPR. Our overriding interests arise from the fact that at events in our club Gastronomie Pütter im Anglo-German Club e.K. is regularly tasked with running the catering and therefore requires your name for table arrangements as well as your contact details in order to be able to contact you in the event of any queries.

(c) Google Maps

This website uses the map service Google Maps via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Using the functions of Google Maps requires your IP address to be stored. This information will be transmitted to a Google server in the USA as a rule and stored there. The provider of this website has no influence on this data transmission.

You can find more information about how your user data is handled in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

Google Maps is used in the interests of making it easy to find the places we have indicated on the website. The basis for this data processing is Art. 6(1f) GDPR, which permits the processing of data to protect the legitimate interests of the controller, provided that this is not outweighed by the interests or fundamental rights and freedoms of the data subject.

 

§ 3 Your rights

(1) Right of access (Art. 15 GDPR)

You have the right to obtain from the controller confirmation as to whether or not personal data concerning you are being processed. Where personal data concerning you are being processed by our organisation, you have the right of access to information concerning

  • the purposes of the processing,
  • the categories of personal data concerned (type of data),
  • the recipients or categories of recipient to whom the personal data have been or will be disclosed,
  • the envisaged period for which the personal data will be stored; or, if not possible, the criteria used to determine the period,
  • your right to request the rectification or erasure of personal data or restriction of its processing and/or the right to object to such processing (see also the following clauses),
  • the right to lodge a complaint with a supervisory authority, and
  • where the personal data are not collected directly from you, any available information as to their source.

You also have the right to information as to whether your personal data are subject to a decision based on automated processing within the meaning of Art. 22 GDPR and – if this is the case – which decision-making criteria form the basis of such an automated decision (logic) and what consequences and implications the automated decision may have for you.

If personal data are transferred to a third country outside the EU/EEA, you have the right to information whether and, if so, on the basis of which guarantees an adequate level of protection within the meaning of Art. 45, 46 GDPR is ensured by the data recipient in the third country.

You have the right to obtain a copy of your personal data. We generally provide copies of data in electronic form unless you have specified otherwise. The first copy is free of charge. For any further copies, we may charge a reasonable fee. The provision of data is conditional on such provision not adversely affecting the rights and freedoms of others.

(2) Right to rectification (Art. 16 GDPR)

You have the right to obtain from us the rectification of your data should they be inaccurate, inapplicable and/or incomplete; the right to rectification includes the right to have incomplete personal data completed, including by means of providing a supplementary statement. Rectification and/or completion shall take place without undue delay.

(3) Right to erasure (Art. 17 GDPR)

You have the right to obtain from us the erasure of your personal data where one of the following grounds applies:

  • the personal data are no longer necessary in relation to the purposes for which they were collected or processed,
  • data processing is based on your consent, which you have withdrawn, to the extent that there is no other legal ground for the processing,
  • you object to the processing of your data pursuant to Art. 21 GDPR and there are no overriding legitimate grounds for the processing,
  • you object to the processing of your data for direct marketing purposes pursuant to Art. 21(2) GDPR, or
  • your personal data have been unlawfully processed.

The right to erasure of your personal data does not apply in the following circumstances:

  • the right obtain erasure is in conflict with the right to freedom of expression and information,
  • processing of personal data is necessary (i) for compliance with a legal obligation (e.g. legal obligations to store data), (ii) for the performance of public duties and interests under EU law and/or the law of Member States (this includes reasons of public interest in the area of public health), or (iii) for archiving and/or research purposes, or
  • personal data are necessary for the establishment, exercise or defence of legal claims.

Erasure shall take place without undue delay. If we have made personal details public (e.g. on the internet), we are obliged, taking account of available technology and the cost of implementation, to take reasonable steps to inform third party controllers that you have requested the erasure, including any links to, or copy or replication of, those personal data.

(4) Right to restriction of processing (Art. 18 GDPR)

You have the right to obtain the restriction of processing where one of the following applies:

  • You have contested the accuracy of your personal data and demand restriction of processing of your data for other purposes while the accuracy of the data is verified.
  • The processing is unlawful and, instead of the erasure of the personal data pursuant to Art. 17(1d) GDPR, you request restriction of their use pursuant to Art. 18 GDPR.
  • You can request the restriction of processing if the controller no longer needs the personal data for the purposes of processing, but they are required by you for the establishment, exercise or defence of legal claims.
  • If you have objected to processing pursuant to Art. 21(1), you can request restriction of processing for other purposes pending verification of whether the legitimate grounds of the controller override your own.

Where processing of personal data has been restricted at your request, such personal data shall, with the exception of storage, only be processed (i) with your consent, (ii) for the establishment, exercise or defence of legal claims, (iii) for the protection of the rights of another natural or legal person, or (iv) for reasons of important public interest. You shall be informed by the data controller beforehand should the restriction of processing be lifted.

(5) Right to data portability (Art. 20 GDPR)

You have the right – subject to the following provisions – to receive the personal data concerning you in a commonly used electronic, machine-readable format. The right to data portability includes the right to transmit those data to another controller; if so requested, and where technically feasible, we will transmit the personal data directly to another controller nominated by you. The right to data portability pertains only to the data supplied by you and presupposes that the processing is based on consent or for the performance of a contract and that the processing is carried out by automatic means. The right to portability shall be without prejudice to the right to erasure pursuant to Art. 17 GDPR. The right to portability shall not adversely affect the rights and freedoms of others.

(6) Right to object (Art. 21 GDPR)

In the case of processing of personal data for the performance of tasks carried out in the public interest (Art. 6(1e) GDPR) or for the pursuit of legitimate interests (Art. 6(1f) GDPR), you may object to the processing of the personal data relating to you at any time with future effect. In the event of an objection, we must refrain from any further processing of your data for the aforementioned purposes unless,

  • there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or
  • the processing is for the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, you shall have the right to object to processing of your personal data for this purpose at any time with future effect. In the event of an objection, we must refrain from any further processing of your data for direct marketing purposes.

(7) Right to lodge a complaint

You have the right to complain at any time to the responsible EU or Member State supervisory authority. The supervisory authority responsible for our company is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (Hamburg Commissioner for Data Protection and Freedom of Information), Klosterwall 6, 20095 Hamburg, Tel: +49 40/428544040, E-mail: mailbox@datenschutz.hamburg.de, www.datenschutz-hamburg.de.

(8) Exercise of data subject rights

If you wish to exercise the aforementioned rights, please contact us by e-mail at office@anglogermanclub.de or in writing to the address given in § 1 para. 2.

§ 4 Data protection

We maintain up-to-date technical measures to ensure data security, in particular to protect your personal data from risks during data transmission and to prevent third parties becoming aware of your personal data. These measures are regularly updated in line with the relevant technical standards.

§ 5 Duration of data storage

We will generally retain your personal data for as long as is necessary for the purposes for which they were collected in accordance with this privacy policy. However, we may be required by law to retain certain data for a longer period. In this case, we will ensure that your personal data are treated in accordance with this privacy policy for the entire storage period.

§ 6 Changes

In the course of further technical development, we will also adapt our privacy policy on an ongoing basis. To this end, changes to the privacy policy will be published on our website. Please therefore regularly read the current version of the privacy policy at anglogermanclub.de/en/privacy-policy. Subject to prevailing legislation, any changes to the privacy policy will come into effect as soon as the updated privacy policy is published. If we have already collected personal data about you and/or are subject to a legal duty to inform you, we will inform you additionally of any material changes to our privacy policy and seek your consent should this be required by law.

May 2021