Data Protection
I. Name and contact details of the controller
Your point of contact as the controller within the meaning of the European General Data Protection Regulation ("EU GDPR") and other national data protection laws of the Member States, as well as other data protection regulations, is:
Franz Beckenbauer-Stiftung
P.O. Box 70 02 20
81392 Munich
Germany
Fax: +49 (0) 89 78 58 64 64
Email: info@franz-beckenbauer-stiftung.de
(hereinafter referred to as "we", "us" or "our")
II. Data processing on our website
1. Website functions
i. Provision of the website and creation of log files
Hosting
a. Legal basis
The legal basis for processing your personal data transmitted to the provider "WIX" as part of hosting is our legitimate interest in presenting our online offering as reliably as possible in accordance with Art. 6(1)(f) EU GDPR and section 25(1) TTDSG. According to WIX, the transfer of data to the USA and other third countries is based on the EU Commission's standard contractual clauses or comparable safeguards under Art. 46 EU GDPR. Details can be found at: https://de.wix.com/about/privacy-dpa-users.
b. Purpose
WIX is a tool for creating and hosting websites. The provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel. When you visit this website, WIX is used to analyse user behaviour, traffic sources, the region of website visitors and visitor numbers. In doing so, WIX stores cookies on your browser that are required to display the website and to ensure security (https://support.wix.com/de/article/cookies-und-deine-website-bei-wix).
c. Storage period
The data may be stored on different servers around the world. WIX stores the data for as long as it is necessary for the service provided.
d. Right to object and erasure
The processing of your personal data to provide the website and the storage of your personal data in log files is strictly necessary for the operation of the website. You therefore have no right to object.
WIX's data protection provisions can be viewed at https://de.wix.com/about/privacy-dpa-users.
ii. Technically necessary cookies
Newsletter
a. Legal basis
The legal basis for processing your personal data transmitted as part of the newsletter sign-up is your consent in accordance with Art. 6(1)(a) EU GDPR.
b. Purpose
This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, (Crash Building), Schafjückenweg 2, 26180 Rastede. CleverReach is a service that can be used to organise and analyse newsletter mailings. The data you enter for the purpose of subscribing to the newsletter (email address, first name, last name) is stored on CleverReach's servers in Germany or Ireland. Newsletters sent with CleverReach allow recipient behaviour to be analysed. Among other things, it can be analysed how many recipients opened the newsletter and how often each link in the newsletter was clicked. Using conversion tracking, it can also be analysed whether, after clicking a link in the newsletter, a pre-defined action was performed. Further information on data analysis by CleverReach newsletters can be found at: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.
c. Storage period
The data you have provided for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from both our servers and CleverReach's servers after you unsubscribe. Data stored with us for other purposes remains unaffected by this.
d. Right to object and erasure
You can withdraw your consent at any time by unsubscribing from the newsletter. The lawfulness of data processing already carried out remains unaffected by the withdrawal. If you do not wish to be analysed by CleverReach, you must unsubscribe from the newsletter.
CleverReach's data protection provisions can be viewed at https://www.cleverreach.com/de/datenschutz/
iii. Contact form and email contact
a. Legal basis
The legal basis for processing your personal data transmitted in the course of contacting us is Art. 6(1)(f) EU GDPR. If the contact is aimed at concluding a contract, Art. 6(1)(b) EU GDPR is an additional legal basis for processing your personal data.
b. Purpose
The processing of your personal data when you contact us serves us solely to handle your request.
c. Storage period
Your personal data will be deleted as soon as it is no longer needed to achieve the purpose of its processing. For personal data sent in the course of contacting us, this is the case once your request has been handled and
statutory retention periods do not preclude deletion.
d. Right to object and erasure
You can object to the processing of your personal data in the context of contacting us for the future at any time. In this case, however, we are unable to
process your request further. In this case, all personal data stored in the course of contacting us will be deleted, unless statutory retention periods preclude deletion.
2. Data protection and law
i. Data subject requests under Art. 12 et seq. EU GDPR
a. Legal basis
The legal basis for processing your personal data when handling your data protection request ("data subject request") is Art. 6(1)(c) in conjunction with Art. 12 et seq. EU GDPR. The legal basis for the subsequent documentation of the lawful handling of data subject requests is Art. 6(1)(f) EU GDPR.
b. Purpose
The purpose of processing your personal data when handling data subject requests is to respond to your data protection request. The subsequent documentation of the lawful handling of the respective data subject request serves to
fulfil the accountability obligation required by law, Art. 5(2) EU GDPR.
c. Storage period
Your personal data will be deleted as soon as it is no longer needed to achieve the purpose of its processing. In the case of handling data subject requests, this is, in accordance with section 41 BDSG in conjunction with section 31(2) no. 1 OWiG, three years after the end of the respective procedure
in question.
d. Right to object and erasure
You can object to the processing of your personal data in connection with the handling of data subject requests for the future at any time. In this case, however, we will not be able to process your data protection request further. The documentation of the lawful handling of the respective data subject request is strictly necessary. You therefore have no right to object.
ii. Legal defence and enforcement
a. Legal basis
The legal basis for processing your personal data for legal defence and enforcement is Art. 6(1)(f) EU GDPR.
b. Purpose
The purpose of processing your personal data in the context of legal defence and enforcement is to defend against unjustified claims and to legally enforce and assert claims and rights.
c. Storage period
Your personal data will be deleted as soon as it is no longer needed to achieve the purpose of its processing.
d. Right to object and erasure
The processing of your personal data in the context of legal defence and enforcement is strictly necessary for legal defence and enforcement. You therefore have no right to object.
III. Data processing in connection with funding applications
1. Funding applications
i. Scope of processing
The Franz Beckenbauer-Stiftung aims to support people in need both financially and with advice. We support people with disabilities and people who are ill or have fallen into hardship through no fault of their own by granting aid or co-financing measures. If you submit an application as an individual, we process the following personal data of the applicant and the affected person, where these are not the same person:
• Master data (title, first name, last name)
• Contact details (address, telephone / mobile number and email address)
• From the affected person:
o Information on marital status
o Information on housing situation
o Information on financial situation
o Health data
If an organisation is the applicant, we collect the following data:
• Master data of the responsible person in the organisation
• Contact details of the responsible person in the organisation
• About the organisation
o Tax exemption notice from the tax office
o Overall project description
o Income/expenditure statement
o Statutes
ii. Legal basis
The legal basis for processing your personal data in connection with handling and reviewing your funding application, as well as when granting aid and/or co-financing measures, is Art. 6(1)(b) EU GDPR. Insofar as your data is processed to fulfil legal obligations (e.g. accounting obligations, evidence requirements), this is based on Art. 6(1)(c) GDPR in conjunction with national rules, in particular the German Commercial Code (HGB) and the German Tax Code (AO).
iii. Purpose
The purpose of processing your personal data in connection with funding is the handling and review of your funding application and, in the event of a positive decision on your application, the granting of aid and/or the co-financing of the measure(s).
iv. Storage period
Your personal data will be deleted as soon as it is no longer needed to achieve the purpose of its processing. In the case of processing your personal data in connection with granting aid and/or co-financing measures, this is the case once a decision has been taken on your funding application and no further statutory retention periods
apply. If you withdraw your funding application, your data will be deleted without delay, at the latest by the end of the calendar month.
v. Right to object and erasure
You can object to the processing of your personal data in connection with handling and reviewing your funding application for the future at any time. In this case, however, we will not be able to process your funding application further.
IV. Categories of recipients
Within our organisation, those units and departments receive personal data that need it to fulfil the purposes mentioned above. In addition, we partly use various service providers and transfer your personal data to other trustworthy recipients. These may, for example, be:
- Banks
- Scanning services
- Printing companies
- Letter shops
- Lawyers and courts
IVa. "Gute Freunde Funding Fund"
Only the following information about the applicant is transmitted to the DFL Stiftung for the decision on whether to approve funding: project name, project content, funding purpose, target group, funding amount, cost plan, information on whether a tax exemption notice exists (yes/no), income surplus statement, link to the website and a brief assessment of our own. Personal data is processed exclusively by the Franz Beckenbauer-Stiftung.
V. Your rights
You have the following rights against us:
1. Right of access
You have the right to obtain information about whether and which of your personal data is being processed by us. In this case, we will additionally inform you about
(1) the purpose of processing;
(2) the categories of data;
(3) the recipients of your personal data;
(4) the planned storage period or the criteria for determining it;
(5) your further rights;
(6) where your personal data has not been provided by you: all available information about its source;
(7) where applicable: the existence of automated decision-making and information about the logic involved, as well as the significance and the envisaged consequences of the processing.
2. Right to rectification
You have the right to have your personal data corrected and/or completed if the data we process about you is inaccurate or incomplete.
3. Right to restriction of processing
You have the right to obtain restriction of processing where
(1) we are verifying the accuracy of the personal data we process about you;
(2) the processing of your personal data is unlawful;
(3) you require your personal data, after the purpose has ceased to apply, in order to pursue legal claims;
(4) you have objected to the processing of your personal data and we are reviewing your objection.
4. Right to erasure
You have the right to erasure where
(1) we no longer need your personal data for its original purpose;
(2) you withdraw your consent and there is no other legal basis for processing your personal data;
(3) you object to the processing of your personal data and — unless it concerns direct marketing — there are no overriding reasons
for continued processing;
(4) the processing of your personal data is unlawful;
(5) the erasure of your personal data is required by law;
(6) your personal data was collected as a minor for information society services.
5. Right to be notified
If you have exercised your right to rectification, erasure or restriction of processing, we will communicate this rectification, erasure or restriction of processing to all recipients of your personal data.
6. Right to data portability
You have the right to receive the personal data we process about you on the basis of consent or for the performance of a contract in a structured, commonly used and machine-readable format and to transmit it to another controller. Where technically feasible, you have the right to have us transmit this data directly to another controller.
7. Right to object
Where there are particular reasons, you have the right to object to the processing of your personal data. In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing.
Where your personal data is processed for the purposes of direct marketing, you have the right to object at any time.
8. Right to withdraw consent
You have the right to withdraw any consent you have given us at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent up to the point of withdrawal.
9. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the competent supervisory authority if you consider that our processing of your personal data infringes the EU GDPR. The competent supervisory authority for us is:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Tel: +49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800
Email: poststelle@lda.bayern.de