Introduction: This Privacy Policy (“Policy”) explains how Kontakt Kollektiv gUG (haftungsbeschränkt), a nonprofit company established in Hamburg, Germany, with its office registered at Stockkamp 7, 22607 Hamburg (“Kontakt Kollektiv”, “we”, “us” or “our”), collects, uses, and processes your Personal Data when you visit our website (the “Site”). We are the data controller for purposes of the General Data Protection Regulation (the “GDPR”). This means we are responsible for deciding how we hold and use personal data about you.
The official language of this Policy is English unless required otherwise by local law. Any translations are provided for reference purposes only, and in the case of any conflict, the English version shall prevail.
Please read this Policy carefully to understand your rights concerning your personal data. By using the Site, you agree to the practices described here. If you do not agree, please do not access or use the Site.
1. Contact Information of the Data Controller
Kontakt Kollektiv gUG (haftungsbeschränkt)
Stockkamp 7,
22607 Hamburg, Germany
Email: privacy@kontaktkollektiv.org
Website: www.kontaktkollektiv.com
2. Definitions
- Personal Data: Any information relating to an identified or identifiable natural person.
- Processing: Any operation or set of operations performed on Personal Data.
- Data Subject: An identified or identifiable natural person whose Personal Data is processed.
3. Data We Collect
We collect the following types of personal data from you:
- Information you provide: When you sign up for our services, subscribe to newsletters, or interact with us (e.g., name, email address, preferences).
- Technical Data: Automatically collected information when you access the Site, such as:
- IP address
- Browser type and version
- Operating system
- Device type
- Date and time of access
- Referrer URL (the website from which you came)
- Pages viewed and links clicked
We may also collect data through cookies or similar technologies (see Section 7 below).
4. Legal Basis for Processing
We process your personal data in accordance with the GDPR on the following legal bases:
- Consent (Art. 6(1)(a) GDPR): When you have given your explicit consent for processing (e.g., newsletter subscription).
- Contractual necessity (Art. 6(1)(b) GDPR): When processing is necessary for the performance of a contract with you (e.g., providing our services).
- Legitimate interests (Art. 6(1)(f) GDPR): When processing is necessary for our legitimate interests, such as improving website performance, maintaining security, and analyzing user behavior.
- Legal obligation (Art. 6(1)(c) GDPR): When we need to comply with a legal obligation.
5. How We Obtain Consent
We obtain your explicit consent when you sign up for our newsletters or agree to the use of cookies through a consent banner that provides clear information about the types of cookies used.
6. How We Use Your Data
We use your data for the following purposes:
- To provide, personalize, and improve our services and communication with you.
- To respond to your inquiries and process any requests you submit.
- To analyze website traffic and improve user experience through analytics tools.
- To ensure the security of our website and protect against unauthorized access or misuse.
- To comply with legal obligations.
7. Data Retention
We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected or as required by law. For instance:
- Newsletter Subscribers: Data will be retained until you unsubscribe.
- Contact Form Data: Retained for the duration of the communication and any follow-up, after which it will be deleted unless required for legal purposes.
You can request the deletion of your data by contacting us at privacy@kontaktkollektiv.org, and we will comply unless we are legally required or have a legitimate interest to retain it.
8. Your Rights
You have the following rights under GDPR regarding your personal data:
- Right to Access (Art. 15 GDPR): Request a copy of your personal data.
- Right to Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.
- Right to Erasure (Art. 17 GDPR): Request deletion of your data (right to be forgotten).
- Right to Restrict Processing (Art. 18 GDPR): Request to limit how we use your data.
- Right to Data Portability (Art. 20 GDPR): Receive your data in a structured, commonly used format or request that we transfer it to another controller.
- Right to Object (Art. 21 GDPR): Object to the processing of your data under certain circumstances.
- Right to Withdraw Consent (Art. 7(3) GDPR): Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at privacy@kontaktkollektiv.org.
9. Cookies and Tracking Technologies
Our Site uses cookies and similar tracking technologies to improve user experience and analyze website traffic. We use:
- Session Cookies: Temporary cookies that are deleted when you close your browser.
- Persistent Cookies: Remain on your device until deleted or expired.
You can manage or disable cookies through your browser settings. However, some features of the Site may not function properly without cookies.
We use third-party services like Google Analytics to analyze user behavior. These services may transfer your data to servers outside the EU. Appropriate safeguards are in place to protect your data during such transfers, and your consent is required (Art. 6(1)(a) GDPR).
You may revoke your consent to cookies at any time by adjusting your browser settings or contacting us.
10. Sharing Your Data
We do not sell or share your personal data with third parties for their own marketing purposes. We may share data with:
- Service Providers: Trusted third parties who help us deliver our services (e.g., hosting, analytics, payment processors). These third parties are contractually bound to safeguard your data.
- Legal Obligations: We may disclose your data to comply with legal requirements or enforce our agreements.
11. Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure server environments, and access control protocols. Please note that no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
12. Automated Decision-Making
We do not engage in automated decision-making or profiling that significantly affects users.
13. Third-Party Websites
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these third-party sites. Please review their privacy policies separately.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant updates by posting a notice on the website or contacting you directly. The updated policy will apply from the date of publication.
15. Effective Date
This Privacy Policy is effective as of October 23, 2024.
16. Contact Us
If you have any questions or concerns regarding this Privacy Policy or our data practices, please contact our data protection officer at privacy@kontaktkollektiv.org.
