Privacy Policy

In accordance with art. 13 GDPR

RESPONSIBLE ENTITY

Deutsch-Kanadisches Luftwaffenmuseum e.V.
Victoria Boulevard E 8
77836 Rheinmünster
Germany
+49 176 / 30465099

vorstand@airforcemuseumsoellingen.de

If you have any questions about data protection, please contact us at vorstand@airforcemuseumsoellingen.de or at the above postal address.

DATA PROCESSING ON OUR WEBSITE AND OTHER ONLINE SERVICES

Log Files When Accessing Our Website

When you access our website, log files are created for the analysis of errors and security incidents. These are stored only for a few days to weeks and are then automatically deleted. We use Netlify as an external service provider for hosting our website. The log files are stored there. By using Netlify, we also use a Content Delivery Network (CDN).

Use of Cookies

Our website uses cookies. Cookies are small text files that are stored on your device and store certain information. They are used to make our offer more user-friendly, effective, and secure. Most of the cookies we use are “session cookies.” They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser on your next visit.

When you visit our website for the first time, you will be asked whether you agree to the use of cookies. Your selection will be stored in a cookie that specifies which cookies are accepted and which are not. You can adjust your cookie settings at any time via the “Cookie Settings” link in the footer of our website. If you reject cookies, certain functions of the website, especially the embedded plug-ins, may be disabled.

Subscription to Our Newsletter

If you subscribe to the newsletter on our association’s website, we will use your email address to send you the newsletter regularly and keep you informed about the association. The legal basis for sending the newsletter is your consent (Article 6(1)(a) GDPR). You can withdraw your consent at any time to stop receiving the newsletter. To do this, you can click on “unsubscribe” at the bottom of the newsletter email, or you can write to us at vorstand@airforcemuseumsoellingen.de or by post. We use the GDPR-compliant service EmailOctopus (https://emailoctopus.com/legal/gdpr) to send the newsletter. The form for subscribing to the newsletter uses Google reCAPTCHA to protect against misuse.

The email address you provide for the newsletter will be deleted once you withdraw your consent, unless that email address is also used for other communications between you and the association.

Social Media Presence

We maintain publicly accessible profiles on the social networks Facebook and Instagram, operated by Meta Platforms Ireland Ltd. Data processing by social networks is carried out by the platform operators.

When you visit our profiles on social networks, your personal data is usually processed by the platform operators for market research and advertising purposes. Usage profiles can be created from your usage behavior and the interests derived from it. These usage profiles can be used to display advertisements to you inside and outside the platforms that correspond to your interests. For this purpose, cookies are usually stored on your device. These cookies store your usage behavior and interests.

Data processing is based on Article 6(1)(f) GDPR, based on our legitimate interest in optimal presentation of our association and effective communication with interested parties and members. If you are asked by the respective platform operators for consent to data processing, the legal basis for processing is Article 6(1)(a) GDPR.

Communication via WhatsApp

You can also communicate with us via the WhatsApp messenger service. WhatsApp is a service of WhatsApp Inc., a subsidiary of Meta Platforms Ireland Ltd. Communication via WhatsApp is only based on your voluntary contact. Please note that WhatsApp has access to metadata of the communication and may transfer it to countries outside the EU according to its privacy policy.

Integration of Plug-Ins and Links

On our website, we integrate plug-ins from Instagram, YouTube, Facebook, and Google Maps. These services are provided and operated by the respective platforms. When you visit our pages, a direct connection is established between your browser and the server of the respective provider via the plug-ins. This way, the provider receives the information that you have visited our site with your IP address. If you activate the plug-ins and click on the “Like” button or leave a comment, the corresponding information is transmitted directly from your browser to the provider and stored there.

Our website contains links to Google Maps, WhatsApp, Instagram, and Facebook. By clicking on the links, you leave our website and are redirected to the respective provider’s page. The respective provider is responsible for data protection on these external pages.

Cashless Payments in the Museum

In the museum, there is the possibility of cashless payments. The device and payment transaction service are provided by the Sparkasse. Your payment data is processed by the Sparkasse. Further information on Sparkasse’s data protection can be found on the Sparkasse website.

DATA PROCESSING WITHIN OUR ASSOCIATION ACTIVITIES

Member Management

Member data (name, entry date, date of birth, address, phone number, and email address, as well as bank account details) are processed by the respective functionaries of our association only for the fulfillment of their assigned tasks. Specifically, this means:

  • If the board needs member data to carry out its tasks, it may access all necessary member data. This includes, in particular, sending the email newsletter, sending invitations to meetings, and collecting membership fees.
  • The treasurer processes the member data necessary for collecting membership fees; the auditor processes the member data relevant to the audit. This includes first name, last name, postal address, and bank account details with payment data, as well as access to the direct debit authorization including signature, if the member has granted a direct debit mandate to the association.
  • The association office processes member data for member management and support.

The purpose of processing member data is to pursue the association’s goals and manage the association. The legal basis is the membership of the association (Article 6(1)(b) GDPR). Current member data is stored for the duration of the membership and for a maximum of 2 months thereafter.

Photos at Events

Photos of our association’s activities are published on our website for external representation purposes. The legal basis for publishing the following photos of adults on our website is the legitimate interest of our association described below under Article 6(1)(f) GDPR:

  • Team photos due to our legitimate interest in informing about the association’s activities (here: team lineup),
  • Photos related to the event or activity due to our legitimate interest in reporting on the (sports) event,
  • Photos of the audience attending the event or photos where individuals appear only incidentally, due to our legitimate interest in reporting on the event and its success.

You have the right to object to the use of such a photo in which you appear, pursuant to Article 21(1) GDPR. The association will review whether there are compelling legitimate grounds for processing that override your interests, rights, and freedoms. If not, the relevant photo will be deleted.

Other photos where an adult person (member or audience) is the focus or specifically photographed are published only with the person’s consent (Article 6(1)(a) GDPR). This consent can be revoked at any time for the future.

Photos of minor members or children from the audience are published only with the consent of the guardians according to Article 6(1)(a) GDPR. This consent can be revoked at any time for the future.

DATA SUBJECT RIGHTS

If we process personal data about you, you have the following rights as a data subject:

  • The right to information about the data processed and a copy of it,
  • The right to correction if we process incorrect data about you,
  • The right to deletion unless exceptions apply that allow us to retain the data, such as retention obligations or limitation periods,
  • The right to restrict processing,
  • The right to withdraw consent to data processing at any time,
  • The right to object to processing in the public interest or based on legitimate interest,
  • The right to data portability,
  • The right to file a complaint with a data protection supervisory authority if you believe we are not processing your data properly. For our association, the supervisory authority is the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg. If you reside in another federal state or outside Germany, you can also contact the data protection authority there.

CHANGES TO THIS PRIVACY POLICY

We reserve the right to adapt this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services in the privacy policy. For your renewed visit, the new privacy policy will apply.

CONTACT

If you have any questions or concerns about this privacy policy or our data processing, please contact us using the contact information provided.