The responsible party according to Art. 4 Para. 7 of the General Data Protection Regulation (GDPR) is:

Planet Bambi - Theo & Gisela Grabowski Foundation

Ursbergerstrasse 31

86470 Thannhausen

Phone: 49 179 5150211

Email: info@planetbambi.foundation / Internet: www.planetbambi.foundation

2. Data Protection Officer

The protection of your personal data is very important to us. We process and store personal data confidentially and in accordance with statutory data protection regulations. This website can generally be used without providing any personal data. You have the right at any time to obtain information about your personal data, which we store for the purposes stated below, free of charge, and to request the correction, blocking, or deletion of this data. You can revoke your consent to data processing at any time without any formalities. In the event of violations of data protection law, you have the right to lodge a complaint with the Bavarian State Office for Data Protection Supervision.

3. What are personal data?

Personal data is information about the personal or factual circumstances of an identified or identifiable natural person (data subject). This includes, for example, information such as your name, address, telephone number, date of birth, or email address. Information that we cannot link to you (or can only do so with disproportionate effort), e.g., by anonymizing the information, is not personal data.

4. General information on data processing

4.1. Scope

We generally only collect and use personal data of our users to the extent necessary to provide a functional website and our content and services. We use your personal data to process online donations, to set up personal fundraising campaigns, to answer your questions, to operate and improve our websites and applications, and to provide further information about the work and use of donations fromPlanet Bambi Foundation. AWe also collect personal data from applicants within the framework of the requested aid projects.

Otherwise, your data will only be passed on to other third parties if we are legally obliged to do so.

The personal data mentioned here will be deleted after the expiry of the statutory retention periods.

4.2. Legal basis

If we obtain the consent of the data subject for the processing of personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.

For the processing of personal data necessary to fulfill a contract to which the data subject is a party, Article 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations necessary to implement pre-contractual measures.

To the extent that processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis.

If processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) (f) GDPR serves as the legal basis for processing.

The personal data of the data subject will be deleted or blocked as soon as the purpose for which it was stored no longer applies and there are no statutory retention periods to the contrary. Storage may also occur if this has been provided for by European or national legislators in EU regulations, laws, or other provisions to which the controller is subject. Blocking or deletion of the data will also occur if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

5. Individual processing operations

You can use most of our website without providing any personal data. For informational use of our website, we only collect the personal data that your internet browser automatically transmits to us, such as:

IP address

Date and time of the request

Time zone difference to Greenwich Mean Time (GMT)

Content of the request (specific page)

the amount of data transferred and the access status (file transferred, file not found, etc.)

Website from which the request comes

Browser type / version / language

Operating system and its interface

Language and version of the browser software.

This data is evaluated solely to improve our service and does not allow any conclusions to be drawn about you personally.

However, if you wish to use the services offered on our website, such as subscribing to a newsletter, etc., you will need to provide additional data. Details can be found below in the description of the specific data processing procedures. In particular, personal data is used as follows:

Provision of the website and creation of log files

Our provider automatically collects and stores information in so-called server log files within the framework of legal requirements, which your browser automatically transmits to its server. This information includes the browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and the anonymized IP address. This data cannot be assigned to specific individuals. This data is not merged with other data sources and is not passed on to third parties. We reserve the right to review this data if we become aware of concrete indications of illegal use of our website. If the storage purpose no longer applies or if a legally prescribed storage period expires, this data is routinely deleted in accordance with legal regulations. The legal basis for the temporary storage of the data is Art. 6 (1) (f) GDPR.

Completion of online donations / payment services and payment procedures

On our website, we offer users the opportunity to make online donations. If a user chooses this option, the data entered into the corresponding form will be transmitted to us and stored. The form is provided by Bank für Sozialwirtschaft AG, Konrad-Adenauer-Ufer 85, 50668 Cologne ("BFS"). Therefore, the entered data is transmitted directly via an encrypted SSL connection to BFS and the technical service providers employed by BFS to provide the form in order to process the donation. The data will not be shared with any other third parties. The following data is collected via the form:

Full name (last name, first name) with salutation (optional title and company name); address (street, house number, city, postal code, country); email address (optional); bank details (IBAN); donation details (recipient, amount, donation/purpose, donation receipt requested)

Additionally for donations via credit card: card type, card number, CVV/CVC security number, credit card validity period.

If you would like a donation receipt, we will process your data to issue and send you a donation receipt.

The collected data is required to process and execute the donation request. The voluntarily provided email address will be used for donation-related communication. The data will not be used for any other purpose. The legal basis for the processing of the data is Art. 6 (1) (b) GDPR.

The user's IP address is also saved when the form is submitted. We use the IP address to prevent misuse of the donation form. The IP address is used for the purpose of fraud prevention and to prevent unauthorized transactions that harm third parties. The legal basis for processing the IP address is Art. 6 (1) (f) GDPR.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For bank details, this occurs after the donation amount has been collected; in the case of a direct debit donation, this occurs after the recurring donation order has been terminated. After a donation receipt has been created and sent (if requested), the address data, like all other entered data, will be stored in accordance with tax retention requirements, but will be blocked for any other use. The IP address additionally collected during the sending process will be deleted after a period of seven days at the latest.

The user has the option to object to the processing of their data at any time. However, please note that if an objection is made, the donation request can no longer be processed as desired.

We use the data you provide for your donation to process your donation, exclusively for internal statistical market research and to send donation receipts, unless you expressly object to this.

Newsletter

To subscribe to our email newsletter service, we require, in addition to your consent to data protection law, at least your email address to which the newsletter should be sent. Any further information is voluntary and will be used to address you personally, tailor the content of the newsletter, and answer any questions you may have about your email address.

You can unsubscribe from a newsletter you have subscribed to at any time by clicking on the corresponding link at the end of the newsletter.

Contact form

When you contact us by email or via a contact form, the data you provide (your email address, your name, and your telephone number, if applicable) will be stored by us in order to answer your questions. We will delete the data collected in this context once storage is no longer required, or restrict processing if statutory retention periods apply.

Otherwise, your data will only be passed on to other third parties if we are legally obliged to do so.

6. Use of cookies, web analysis, videos

Our website uses so-called session cookies, small text files that are stored on your device and automatically deleted after your visit, to ensure a user-friendly and secure display of content. You can prevent cookies from being saved by selecting the appropriate browser settings. Disabling cookies may limit the functionality of this website. The legal basis for the use of session cookies is Art. 6 (1) (f) GDPR.

7. Security measures to protect the data stored by us

We are committed to protecting your privacy and treating your personal data confidentially. To prevent the loss or misuse of the data stored with us, we take extensive technical and organizational security precautions that are regularly reviewed and adapted to technological advances. However, we would like to point out that due to the structure of the Internet, it is possible that the data protection regulations and the aforementioned security measures may not be observed by other persons or institutions outside our area of responsibility. In particular, data disclosed unencrypted – e.g., if sent by email – can be read by third parties. We have no technical control over this. It is the user's responsibility to protect the data they provide against misuse by encryption or other means.

8. Hyperlinks to external websites

Our website contains so-called Hyperlinks to websites of other providers. At ABy activating these hyperlinks, you will be redirected from our website directly to the other provider's website. You will recognize this, among other things, by the change in the URL. We cannot assume any responsibility for the confidential treatment of your data on these third-party websites, as we have no influence on these companies' compliance with data protection regulations. Please inform yourself about how these companies handle your personal data directly on these websites.

9. Consent and revocation / objection

You may have expressly given the following consents.

We would like to point out that you can revoke your consent at any time with effect for the future and also object to the processing and use of your data for advertising purposes at any time. Please contact the following person: info@planetbambi.foundation

a) Permission for email advertising/newsletter

By entering my data and clicking the button, I consent to receiving the newsletter regularly. I can unsubscribe from the newsletter service at any time by clicking the "Unsubscribe" link at the end of the newsletter.

I can revoke my consent to the collection of other personal data collected during the registration process at any time.

b) Consent when submitting a contact form

By entering your personal data, you agree that we may use your information to process your request and for informational purposes. You can object to the use of your data by sending an email to info@planetbambi.foundation. Your data will only be used by us and our service providers.

10. Your rights as a data subject

If your personal data is processed, you are a data subject within the meaning of the General Data Protection Regulation (GDPR) and you have the following rights vis-à-vis the controller.

According to Article 15 of the General Data Protection Regulation, you have the right to request information about the processing of your personal data ("right of access of the data subject").

According to Article 16 of the General Data Protection Regulation, you have the right to request the rectification and erasure of inaccurate personal data concerning you ("right to rectification").

According to Article 17 of the General Data Protection Regulation, you can request the erasure of personal data concerning you if one of the reasons listed therein applies ("right to be forgotten").

Likewise, according to Article 18 of the General Data Protection Regulation, you have the right to request the restriction of the processing of personal data concerning you if one of the conditions listed therein applies ("right to restriction of processing").

According to Article 20 of the General Data Protection Regulation, you have the right to have personal data concerning you made available to you and to have this data transmitted to another controller ("right to data portability").

Information to third parties

If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Art. 17 (1) GDPR, the controller shall take appropriate measures, including technical ones, taking into account the available technology and the implementation costs, to inform data controllers which process the personal data that you, as the data subject, have requested the erasure by such controllers of all links to these personal data or of copies or replications of these personal data.

Exceptions

The right to erasure does not apply if processing is necessary

to exercise the right to freedom of expression and information;

to fulfill a legal obligation required by Union or Member State law to which the controller is subject or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;

for reasons of public interest in the area of public health pursuant to Art. 9 (2) (h) and (i) and Art. 9 (3) GDPR;

for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the right referred to in section a) is likely to make the achievement of the objectives of this processing impossible or seriously compromises it, or

to assert, exercise or defend legal claims.

Right to information

If you have asserted your right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification, erasure or restriction of processing, unless doing so proves impossible or involves disproportionate effort.

You have the right to be informed by the controller about these recipients.

Right of objection

You have the right to object at any time to the processing of personal data concerning you based on Article 6 (1) (e) or (f) GDPR, for reasons related to your particular situation; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

Right to revoke the data protection consent declaration

You have the right to revoke your consent to data protection at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent until the revocation.

11. Legal basis for data processing

Here you will find an overview of the legal bases for the processing of your data under data protection law.

Informational use

The processing of your data, which your browser automatically communicates to us, is carried out in the context of our interest in being able to display the websites to you at all.

Article 6 (1) (f) of the General Data Protection Regulation (GDPR)

Contact form

Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

Article 6 (1) (b) of the General Data Protection Regulation (GDPR)

Newsletter

Our newsletter is delivered based on your personal consent.

Article 6 (1) (a) of the General Data Protection Regulation (GDPR)

You can revoke your consent at any time and thus unsubscribe from the newsletter, see also the Newsletter chapter.

Web analysis, usage-based online advertising and integration of external services

For the purposes of advertising, market research or to tailor our websites to meet customer needs, we analyze the user behavior of our visitors in our own interest.

Art. 6 (1) (f) GDPR

12. Changes to our privacy policy

We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services in the privacy policy, for example, when introducing new services. The new privacy policy will then apply to your next visit.

13. Right to lodge a complaint with a supervisory authority

You can lodge a complaint with a supervisory authority at any time, for example, the competent supervisory authority in the federal state in which you reside or the authority responsible for us as the controller.

A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html .