Privacy Policy

1. Privacy at a glance

General information
The following information give a simple overview on how we process your personal data when you visit our website. Personal data is all information that can identify you as a natural person. Please find more information about privacy policy in the privacy statement below.

Data collection on this website
Who is responsible for data collection on this website?
Data collection on this website is processed by the website owner. The contact info can be found under ‘information on person responsible’ in this privacy statement.

How is your data gathered?
On the one hand, your data is collected by you submitting information to us, e. g. data filled in a contact form.  Other data is collected automatically or with your approval during your visit on our website through our IT system. This includes technical data (e. g. internet browser, operating system or time of visit). This data is gathered automatically as soon as you enter this website. 

How is your data used?
Part of the data is collected to guarantee an error-free service of the website. Other data may be used to analyze your user behavior. 

Which rights do you have regarding your data?
You are entitled to receive free-of-charge information on origin, receiver and purpose of your saved personal data at any time. You are also entitled to ask for correction or deletion of this data. If you have given consent to data processing, you may revoke this at any time. Furthermore, you have the right to ask for limitation of processing of your personal data under certain circumstances. Moreover, you have right of appeal with the responsible supervisory authority. If you have any questions regarding this or about privacy policy in general, please feel free to contact us anytime.

Analytical tools and tools of third-party providers
When visiting this website your user behavior may be analyzed statistically. This happens with so called analysis programs. Detailed information about these analysis programs can be found in the following privacy statement. 

2. Hosting an Content Delivery Networks (CDN) Strato

Our website is hosted by Strato. Provider is Strato AG, Pascalstrasse 10, 10587 Berlin, (herebyafter called “Strato”). When you visit our website, Strato collects different logfiles including your IP addresses. Please find more information in the privacy statement by Strato: https://www.strato.de/datenschutz/. The use of Strato takes place based on Art. 6, para. 1 lit. f. DSGVO. We have a legitimate interest in a reliable display of our website. If an appropriate consent has been given, the processing takes place entirely based on Art. 6, para. 1 lit. a. DSGVO; the consent may be revoked at any time.

Conclusion of contract for job processing
We have signed a contract for job processing with Strato. This contract is mandatory according to data protection regulations and guarantees that Strato only processes personal data of our website guests upon our instructions and in compliance with data protection regulations. 

3. General information and mandatory information

Privacy policy
The operators of this website take protection of your personal data very seriously. We treat the personal data you provide confidential and according to data protection regulations as well as this privacy policy. When visiting this website, various personal data is collected. Personal data include all information that you can personally be identified with. This privacy policy explains which kind of data we collect and what this data is used for. It also explains how and for which purpose data is collected. We point out that digital data transfer (e. g. communication via email) may not always be secure. A complete data protection against access of third parties is not possible. 

Note to person responsible
The controller for data processing on this website is
GoBanyo gGmbH
Neuer Kamp 31
20359 Hamburg
Represented by: Christian Poelmann
Telephone: +49 (40) 5354 2496 (Mo – Fr 11 a.m. – 4 p.m.)
email: kontakt@gobanyo.org
Controller shall mean the natural or legal person which alone or jointly with other determines the purposes and means of the processing of personal data (e. g. names, email addresses or the like). 

Storage period
Unless stated differently in this privacy policy, your personal data will be stored until the purpose for which they were recorded or the purpose itself is no longer persued.  If you would like to claim a legitimate deletion request or revoke a consent for data processing, you data will be deleted as we do not have other legal valid reasons for storing your personal data (e. g. tax or commercial law retention periods); in the latter case the deletion takes place after ending of these reasons. 

Data transfer to the USA and other third countries
We use tools by companies based in the USA or other third countries not subject to data protection regulations. When these tools are active, your data may be transferred to third countries and be processed there. We point out that in these countries no data protection regulations comparable to those in the EU can be guaranteed.  For example, US companies are obliged to hand out personal data to safety authorities without the affected person being able to take legal proceedings. It thus cannot be ruled out that US authorities (e. g. secret services) process, evaluate and permanently safe your data stored on US servers. We do not have influence on these processing activities. 

Revoking your consent to data processing
Many data processing activities are only possible with your explicit consent. You are entitled to revoke your given consent at any time. The lawfulness of previous processing of personal data remains unaffected until the revocation. 

Right of rejection to the collection of data in particular cases as well as direct advertisement (Art. 21 DSGVO)
If data processing takes places based on Art. 6, para 1 lit. e. or f. DSGVO, you have the right to rejection to the processing of personal data at any time, on legitimate grounds relation to your particular situation. This also applies to profiling based on these regulations. The respective legal grounds on which processing is based, is included in this privacy policy. If you appeal, we will no longer process your respective personal data, unless we can prove legitimate grounds for processing that outweigh you interests, rights and freedoms, or the processing serves the assertion, execution or defense of legal claims (right to object according to Art. 21, para 1 DSGVO). If your personal data is processed for direct advertisement, you have the right to rejection to the processing of your person data for this purpose; this also applies to the profiling, if it is associated with such direct advertisement. If you file for objection, your personal data will no longer be processed for the purpose of direct advertisement (right to object according to Art. 21, para 2 DSGVO).

Right of appeal with the responsible regulation authority
In case of violations against the DSGVO, affected persons have the right to appeal with the regulation authority, especially in the member state of their primary residence, workplace or the place of the assumed violation. The right of appeal exists regardless of other administrative or legal provisions. 

Right to data portability
Data that we automatically process based on your consent or the fulfilment of a contract shall be issued to yourself or a third party in a common, machine-readable format. If you ask for the direct transfer of data to another person responsible, this may only take place if it technically possible. 

SSL/TLS encryption
This website uses SSL/TLS encryption for safety reasons and for the protection of transfers of confidential content, such as orders or requests sent to the website operator. You can tell that a connection is encrypted if the browser’s address bar switches from “http://” to “https://” and by the lock symbol in your browser line. When SSL/TLS encryption is activated, submitted data cannot be read by third parties. 

Disclosure, deletion and authorization
Within the frame of legal regulations you have the right to free-of-charge disclosure of your saved personal data, its origin and receiver and the purpose of data processing, as well as the right to correction or deletion of this data at any time. If you have any questions about this or personal data in general, please do not hesitate to contact us.  

Right to limitation of processing
You have the right to ask for a limitation of processing of your personal data. Please do contact us at any time. The right to limitation of processing applies in the following cases:
– if you deny the correctness of your saved personal data, we need time to check this. For the duration of examination, you have the right to ask for the limitation of processing of your personal data.
– if the processing of your personal data is/was unlawfully, you may ask for limitation instead of deletion of processing.
– if we no longer need your personal data, but you need it for execution, defense or assertion of legal claims, you are entitled to ask for limitation instead of deletion of processing of your personal data.
– if you have filed for objection according to Art. 21. Para 1 DSGVO, a careful consideration of your and our interests has to be made. Until it is fixed whose interests prevail, you have the right to ask for the limitation of processing of your personal data. 

If you have limited the processing of your personal data, this data – apart from its storage – may only be processed with your consent or for assertion, execution or defense of legal claims, or for protection of rights of another natural or legal person, or for reasons of important public interest to the European Union or another member state.

Right of appeal to advertising emails
We hereby expressly object to the use of the contact data as published within the framework of legal notice obligations by third parties in order to send advertising and information. Should the operator receive unsolicited promotional material, such as spam etc., the operator expressively reserves

the right to take legal action.

4. Data collection on this website
Cookies

Our website uses ‘cookies’. Cookies are small text files that do not harm your device. They will be saved either temporarily for the duration of the session (‘session cookies’) or permanently (‘permanent cookies’) on your device. Session cookies expire and are automatically deleted when you close your internet browser. Permanent cookies will stay on your device until deleted by the user or your browser automatically deletes them. When entering this website, also cookies by third party companies may be saved on your device (‘Third-Party-Cookies’). Third-Party-Cookies allow us and you the use of certain services by third party companies (e. g. cookies for the purpose of payment processing). Cookies do have different functions. Many cookies are technically required since certain website functionalities would not work without them (e. g. shopping cart functions or the display of videos). Other cookies serve to evaluate user behavior or to display advertisement. Cookies that are necessary for electronic communication (‘essential cookies’), or to provide certain functions requested by you (‘functional cookies’, e. g. shopping cart functions), or for website optimization (e. g. cookies to measure web audience) will be saved according to Art. 6, para. 1 lit. f. DSGVO, unless another legal basis is indicated. The website owner has a legitimate interest in the saving of cookies for technically correct and optimized providing of his services. If a consent for the saving of cookies has been given, the saving of respective cookies takes place solely based on this consent (art 6, para 1 lit. a. DSGVO); the consent may be revoked at any time. You may set your browser to notify you before you receive a cookie so that you can decide then if you wish to accept the cookie on a case-by-case basis, reject the acceptance of cookies in certain cases or generally, as well as activate the automatic deletion of cookies when closing your browser. If you use your browser settings to block all cookies (including essential cookies), you may not be able to access all or parts of our website. If cookies by third party companies are used for analytical purposes, you will be informed and your consent will be requested if necessary. 

Cookie consent with Borlabs Cookie
Our website uses the Cookie-Consent-Technology by Borlabs Cookie, asking for your consent to save certain browser cookies and to document these according to data protection regulations. Provider of this technology is Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg (hereafter referred to as Borlabs). When entering our website, a Borlabs cookie will be saved in your browser by saving your given consents or appeal of these consents. This data will not be forwarded to the provider of Borlabs Cookie. The collected data will be saved until you ask us to delete them, and/or delete the Borlabs cookie yourself, or the purpose for data storage expires. Mandatory legal retention periods remain unaffected. Please find more information on data processing by Borlabs Cookie online: https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/. Borlabs-Cookie-Consent-Technology is used in order to fulfil the statutory consent for the use of cookies. Legal basis is Art. 6, para. 1 lit. c. DSGVO.

Server-Log-Files
The provider of this websites gathers and automatically saves information in so called Server-Log-Files that your browser automatically submits to us. This information include:

• Browser type and browser version
• operating system used
• Referrer URL
• Host name of accessing server
• Time of server request
• IP address

This data will not be fused with other data. The gathering of this data is based on Art. 6, para 1 lit. f. DSGVO. The website owner has a legitimate interest in the technically correct display and optimization of his website. Therefore, Server-Log-Files must be collected. 

Inquiries by email, telephone or telefax
When contacting us be email, telephone or telefax, your inquiry including all resulting personal data (name, request) of your request will be saved and processed. Your data will not be forwarded without your consent. The processing of this data is based on Art. 6, para. 1 lit, b. DSGVO, if your inquiry is essential to the fulfilment of contractual purposes or to the performance of pre-contractual measures.  In all other cases, the processing is based on our legitimate interest in an effective processing of inquiries directed to us (Art. 6, para. 1 lit. f. DSGVO), or on your given consent (Art 6, para 1 lit. a. DSGVO). The data submitted via contact forms remain with us until we ask you to delete it, your consent to saving is revoked or the purpose for data storage expires (e. g. after your inquiry has been successfully handled). Mandator statutory regulations, especially legal retention periods, remain unaffected. 

5. Analytical tools and advertisement
Matomo (formerly Piwik)

This website uses the Open Source web analysis service Matomo. Matomo uses technologies that enable user recognition across pages for the purpose of analyzing user behavior (e. g. cookies or device fingerprinting). Information about the use of this website collected by Matomo will be saved on our server. The IP address will be anonymized before saving. The use of this analyzing tool is based on Art 6, para 1 lit. f. DSGVO. The website owner has a legitimate interest in an anonymized analysis of user behavior in order to optimize his web service as well as his advertisement. If an according consent has been requested (e. g. a consent to the saving of cookies), the processing is solely based on Art. 6, para 1 lit. a. DSGVO; the consent may be revoked at any time. Information gathered by Matomo about the use of this website will not be forwarded to third parties. 

6. Plugins and tools
Vimeo without tracking (Do-Not-Track)

This website uses plugins by the video portal Vimeo. Provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. If you visit one of our pages that includes a video by Vimeo, a connection to the servers of Vimeo will be established. 

By doing so, the Vimeo server will receive information on which page you have visited. Moreover, Vimeo receives your IP address. We have deactivated the option for Vimeo to trace your user activities and set cookies. The use of Vimeo takes place in the interest of an appealing display of our online services. This justifies a legitimate interest according to Art. 6, para. 1 lit. f. DSGVO. If an according consent has been given, the processing solely takes place based on Art. 6, para. 1 lit. a. DSGVO; the consent may be revoked at any time. Data transfer to the USA is based on standard contract clauses by the EU Commission as well as on Vimeo’s legitimate commercial interest. For more information visit: https://vimeo.com/privacy. Further information about how Vimeo deals with user data can be found in Vimeo’s privacy policy: https://vimeo.com/privacy.

Google Web Fonts (local hosting)
For the standardized display of fonts, this website uses web fonts provided by Google. Google fonts are locally installed. No connection to the servers of Google will be established. More information on Google Web Fonts can be found under https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.