Use and disclosure of personal information pursuant to the EU General Data Protection Regulation (GDPR)
Thank you for visiting our website and your interest in our association and services. The protection of your personal data is very important to us. Hence, we work strictly in accordance with the provisions of the data protection laws, in particular the European General Data Protection Regulation (GDPR) and the new German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG).
In the following, we would like to inform you of the type of data we collect and how we process and use this on our web pages.
General information on data processing
We process our users’ personal data only to the extent necessary to provide a functioning website as well as our content and services. Users’ personal data is only processed with their consent, except when prior consent cannot be obtained for technical reasons and the processing of data is permitted by law.Insofar as we obtain the data subject’s consent for the processing of personal data, Art. 6 para. 1(a) GDPR serves as the legal basis.
For the processing of personal data necessary for the performance of a contract to which the data subject is party, Art. 6 para. 1(b) GDPR forms the legal basis.
If the processing of personal data is necessary to fulfil a legal obligation to which our association is subject, Art. 6 para. 1(c) GDPR serves as the legal basis for the processing of data.
If processing is necessary to safeguard a legitimate interest of our association or a third party and if such a legitimate interest is not overridden by the interests, fundamental rights and freedoms of the data subject, Art. 6 para. 1(f) GDPR serves as the legal basis for processing.
The data subject’s personal data will be deleted or blocked as soon as the purpose for which it was stored ceases to apply.
Personal data may moreover be stored if this has been foreseen by European or national lawmakers in EU regulations, laws or other provisions to which our association is subject. Data will also be blocked or deleted if a storage period specified in any of the aforementioned legislation expires, unless there is a need for continued storage of the data to conclude or fulfil a contract.
Provision of the website and creation of log files Every time our website is accessed, our system automatically collects data and information from the accessing computer system.
The following data is collected:
- browser type and version used
- user’s operating system
- date and time of access
- website from which the user’s system accessed our website
- websites accessed by the user via our website
This data is not stored together with any of the user’s other personal data that may have been collected beforehand or afterwards. No user profiles are created.
The data is stored in log files in order to ensure the website functionality. The data is also used to optimise the website and to ensure the security of our information technology systems. It is moreover used for a statistical analysis.
The legal basis for the storage of data in log files is Art. 6 para. 1(f) GDPR.
We use so-called session cookies on our web pages.
For technical reasons, individual pages generate so-called session cookies. As a rule, these are not stored permanently, but rather are automatically deleted at the end of a user’s session or when the user closes their browser. Only in the case of online surveys are cookies stored for the duration of the survey. In general, we do not collect any other personal data for this.
The user data collected by technically necessary cookies is not used to create user profiles.
Session cookies are deleted after you leave our website. Cookies created during a survey are deleted one month after the survey has ended at the latest. The legal basis for the processing of personal data using cookies is Art. 6 para. 1(f) GDPR.
The newsletter is sent to users who have registered on our website to receive this. It is possible to subscribe to a free newsletter on our website. When you register for the newsletter, the data entered in the online form and your email address are transmitted to us.
The following data is also collected during registration:
- IP address of the accessing computer
- date and time of registration
The registration system with an additional confirmation message containing a link to the final registration (double opt-in) ensures that you specifically requested to receive the newsletter.
Your data is not transmitted to third parties in connection with data processing for the purpose of sending newsletters. The data is used exclusively for sending the newsletter. The user’s email address is collected to deliver the newsletter.
The collection of other personal data during the registration process serves to prevent misuse of the services or of the email address provided.
The data is deleted as soon as it is no longer needed to achieve the purpose for which it was collected.
The user’s email address will therefore only be stored for as long as the newsletter subscription is active.
The other personal data collected during the registration process is normally deleted after one month.
The data subject can cancel their newsletter subscription at any time. A link is provided in every newsletter for this This also enables users to withdraw their consent to the storage of their personal data collected during the registration process. The legal basis for the processing of data after users register for the newsletter when they have given their consent is Art. 6 para. 1(a) GDPR.
Registration for events offered by the ESREA
On our website, we offer users the opportunity to register for events offered by ESREA by providing personal data. The data is entered in an online form, transmitted to us and stored. No data is transmitted to third parties.
The following data is collected during registration:
- First and last name
- Address (street, town, postcode)
- Telephone number
- Email address
At the time of registration, the following data is also stored:
- user’s IP address
- date and time of registration
The user’s consent to the processing of this data is obtained as part of the registration process.
The registration serves to conclude a contract with the user to register for an ESREA event, which is usually subject to a fee. A user’s registration is therefore necessary to fulfil a contract with the user or to carry out pre-contractual measures.
The data is deleted as soon as it is no longer needed to achieve the purpose for which it was collected. This takes place after half a year at the latest.
Users are able to cancel their registration or to have the data stored about them modified at any time.
If the data is needed to fulfil a contract or to carry out pre-contractual measures, premature deletion of the data is only possible if contractual or legal obligations do not preclude a deletion. Therefore, please address your request to the email address provided during registration. In case of doubt, you can also send your request to ESREAsecretary@die-bonn.de
The legal basis for the processing of the data if the user has given their consent is Art. 6 para. 1(a) GDPR.
Furthermore, registration serves to fulfil a contract to which the user is a party or to carry out pre-contractual measures, so an additional legal basis for the processing of the data is Art. 6 para. 1(b) GDPR.
Contact form – feedback for ESREA
There is a contact form on our website to send ESREA feedback. This can be used to contact ESREA electronically. It serves the sending of questions, criticism or comments to ESREA or the provision of feedback about our website (homepage). It can also be used to request information materials.
If a user takes advantage of this option, the following data entered in the contact form is transmitted to us and stored:
- user’s name and email address
At the time the message is sent, the following data is also stored:
- user’s IP address
- date and time of registration
Alternatively, you can contact us via firstname.lastname@example.org
In this case, the user’s personal data transmitted via email will be stored. No data will be transmitted to third parties in this context. It will be used exclusively to process the conversation.
We only process the personal data entered in the online form to establish contact. If we are contacted via email, this also constitutes the necessary legitimate interest for the processing of data.
The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems. The data is deleted as soon as it is no longer needed to achieve the purpose for which it was collected.
With regard to the personal data entered in the contact form or sent via email, this is the case when the respective conversation with the user has ended, plus a grace period of three months. The conversation ends when it can be inferred from the circumstances that the matter has been conclusively clarified. The user is able to withdraw their consent to the processing of their personal data at any time (e.g. via email: email@example.com).
If the user contacts us via email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case. The legal basis for the processing of the data if the user has given their consent is Art. 6 para. 1(a) GDPR.
The legal basis for the processing of data transmitted when an email is sent is Art. 6 para.1(f) GDPR. Web analysis by Matomo (formerly PIWIK)
We use the open source software tool Matomo (formerly PIWIK) on our website to analyse our users’ surfing behaviour. The software places a cookie on the user’s computer (for information on cookies, see above).
When individual pages of our website are accessed, the following data is stored:
- user’s anonymised IP address (2 bytes)
- web pages visited · website from which the user came (referrer)
- subpages accessed by the web pages visited · time spent on the website
- frequency of website visits
The software runs exclusively on our website servers. The user’s personal data is only stored there. The data is not transmitted to third parties. The software is set to not store the full IP addresses; two bytes of the IP address are masked (e.g. 192.168.xxx.xxx). This makes it impossible to attribute the abbreviated IP address to the user’s accessing computer.
The processing of users’ personal data allows us to analyse our users’ surfing behaviour. Evaluating the data collected allows us to compile information about the use of individual components of our website. This helps us to continuously improve our website and its user-friendliness. Our legitimate interest in data processing pursuant to Art. 6 para. 1(f) GDPR also lies in these purposes.
By anonymising the IP address, users’ interest in protecting their personal data is sufficiently taken into account. The data is deleted as soon as it is no longer needed for our record-keeping purposes, once it has been evaluated. For more information on the privacy settings for the Matomo software, see https://matomo.org/docs/privacy.
The legal basis for the processing of users’ personal data by the Matomo software is Art. 6 para. 1(f) GDPR.
A search function has been implemented on our website, which enables you to navigate directly to the desired information by entering a search term. No personal data is collected and/or stored. Only the search term is logged so that we can see what interests visitors to our website.
Similarly, there is no link to any data that may have been collected beforehand. Rights of data subjects Information, blocking, deletion, objection Within the scope of the applicable statutory provisions, you have the right to free information on your stored personal data, its origin and recipient(s), and the purpose of data processing. Where applicable, you also the right to have this data corrected, blocked or deleted, or its processing limited.
European Society for Research on the Education of Adults (ESREA) e.V. Heinemannstraße 12 – 14
Telefon: 0228 / 3294-0
Responsible data protection supervisory authority
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen LDI Kavalleriestraße 2–4
Telephone: +49 (0)211 / 38424-0
Postal address: Postfach 20 04 44, 40102 Düsseldorf, Germany
last changed [15 April 2019]