Privacy policy

Principle

We process personal data only in so far as it is necessary to operate this website and to run the association. This website sets no cookies of its own, uses no analytics or tracking services and embeds no advertising networks. Third-party content is loaded only if you actively choose it.

Hosting

This website consists of static files and is hosted on Microsoft Azure (Microsoft Corporation / Microsoft Ireland Operations Limited). When you access the site, technically necessary connection data is processed. The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6 (1) (f) GDPR).

A data processing agreement is in place with the provider. Where data is transferred to third countries, this takes place on the basis of the EU standard contractual clauses.

Server log files

The hosting provider automatically records the data your browser transmits with every request:

• IP address (truncated or in full, depending on configuration)
• date and time of the request
• the page or file requested
• volume of data transferred and HTTP status code
• referrer URL as well as browser and operating system identifiers

This data is used solely to ensure technical operation and to defend against attacks. It is not combined with other data sources and is deleted automatically after a short period.

Contacting us

This website has no contact form and collects no data through the pages themselves. You reach us by email, telephone or post, using the details on our contact page.

If you get in touch, the details you give us — in particular your name, your contact details and the content of your message — are processed solely in order to answer your enquiry. The legal basis is our legitimate interest in responding to enquiries addressed to us (Art. 6 (1) (f) GDPR) and, where your enquiry concerns a membership, the performance of a contract and steps prior to it (Art. 6 (1) (b) GDPR). We keep your enquiry and the related correspondence for as long as is necessary to deal with it, and delete it afterwards unless statutory retention obligations apply.

Our email is hosted in our Microsoft 365 tenant (Microsoft Ireland Operations Limited), with a data processing agreement in place.

Membership application

The membership application is not completed on this website. The button on the “Become a member” page is a plain link to a form hosted on Microsoft Forms (Microsoft Ireland Operations Limited). Data is only transmitted to Microsoft once you click that link; simply visiting our page transmits nothing.

The details you enter there reach us in our Microsoft 365 tenant and are used solely to process your application and administer your membership. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract and steps prior to it). Microsoft’s own privacy statement applies additionally to the processing within the form.

Fonts

All fonts used are served from our own server. There is no connection to Google Fonts or any other external provider, and your IP address is not transmitted to third parties.

External content and links

We embed no social media plugins. The links to our social media profiles are plain links; data is only transmitted to the respective provider once you click them. The respective provider is responsible for the content of linked external pages.

Where individual pages link to ticketing providers for events, the privacy terms of that provider apply.

On our founding page we offer a historical film recording hosted by YouTube (Google Ireland Limited). The YouTube player is not loaded when you open the page. Only if you choose to play the recording is a connection established with YouTube. Your IP address is then transmitted to Google, and Google may set cookies on your device. The legal basis is your consent (Art. 6 (1) (a) GDPR), given by pressing play. Google’s own privacy statement applies to that processing. You may withdraw your consent by leaving the page; data already transmitted to Google cannot be recalled through us.

Your rights

You have the right at any time to

• obtain information about the data stored about you (Art. 15 GDPR),
• have inaccurate data corrected (Art. 16 GDPR),
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing (Art. 21 GDPR),
• withdraw consent with effect for the future (Art. 7 (3) GDPR).

Please contact us at the address given above. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.

Changes

We update this policy when the technical implementation of the website or the legal requirements change. The version published here at any given time applies.