Data Protection Declaration & Cookies

The protection of your privacy is important to us, the PATRIZIA Children Foundation. If and to the extent that you voluntarily provide us with personal data, it will be processed in accordance with the provisions of the EU Basic Data Protection Regulation (DS-GVO), which will apply from 25 May 2018, as well as the statutory data protection provisions of the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG). Of course, all data will be treated confidentially. Therefore, we want you to know when we store which data and how we use it. With this data protection declaration, we would therefore like to inform you about our data protection measures.

1 General information about the collection of personal data

1.1 In principle, the collection, processing and use of personal data for the use of our Internet presence is limited to the necessary extent and the necessary data. Personal data is data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.

1.2 Responsible office

The PATRIZIA Children Foundation, Fuggerstraße 26, 86150 Augsburg (hereafter: PATRIZIA Children Foundation) is responsible for the collection, processing and use of your personal data in accordance with art. 4 para. 7 DS-GVO.

If you have any questions or comments regarding data protection at the PATRIZIA Children Foundation, please contact the data protection officer below at the following contact details:

Alexander Busl

PATRIZIA Children Foundation

Fuggerstraße 26

86150 Augsburg

T +49 (0) 821 50910-303

alexander.busl@patrizia.foundation

1.3 If you contact us by e-mail or via a contact form, the data you voluntarily provide (e-mail address, name, address, etc.) will be stored by us in order to answer your questions. The data collected in this context will be deleted when storage is no longer necessary or we will restrict the processing in case there are legal retention obligations.

1.4 If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also specify the criteria for the storage period.

2. Your rights

You have the right

– to request information about your personal data processed by us in accordance with art. 15 DS-GVO. In particular, you may request information on the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right of rectification, deletion, restriction of processing or objection, the existence of a right of complaint, the origin of your data, if not collected by us, as well as the existence of an automated decision making process including profiling and, if applicable, meaningful information on its details;

– to immediately request the correction of incorrect or incomplete personal data stored with us in accordance with art. 16 DS-GVO;

– to demand the deletion of your personal data stored by us in accordance with art. 17 DS-GVO, unless processing is required to exercise freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

– to demand the restriction of the processing of your personal data pursuant to art. 18 DS-GVO if the correctness of the data is disputed by you, the processing is unlawful, but you refuse its deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing pursuant to art. 21 DS-GVO;

– in accordance with art. 20 DS-GVO, to receive your personal data which you have provided to us in a structured, common and machine-readable format or to request transmission to another responsible party;

– in accordance with art. 7 para. 3 DS-GVO, to revoke your consent once given to us at any time. As a result, we are no longer allowed to continue the data processing based on this consent in the future, and

– to complain to a supervisory authority in accordance with art. 77 DS-GVO. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or of our company headquarters.

3. Collection of personal data when you visit our website

If you only use our website www.patrizia.foundation for information purposes, we solely collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website and to guarantee stability and security:

– IP address

– Date and time of the request

– Time zone difference to Greenwich Mean Time (GMT)

– Contents of the request (concrete page)

– Access status/HTTP status code

– amount of data transferred in each case

– Website from which the request originates

– browser

– Operating system and its interface

– Language and version of the browser software.

The data mentioned will be processed by us for the following purposes:

– Ensuring a smooth connection of the website,

– Ensure comfortable use of our website,

– Evaluation of system safety and stability as well as

– for other administrative purposes.

The legal basis for data processing is art. 6 para. 1 p. 1 lit. f DS-GVO. Our legitimate interest results from the purposes listed above for the collection of data. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

In addition, we use cookies and analysis services when you visit our website. You will find more detailed information on this under sections 7 and 9 to 12 of this data protection declaration.

4. Further functions and offers of our website

4.1 In addition to the purely informational use of our website, we offer various services that you can use if you are interested. As a rule, you must provide further personal data which we use to provide the respective service and to which the aforementioned data processing principles apply. Legal bases are art. 6 para. 1 p. 1 lit. a, b and f DS-GVO.

4.2 To some extent we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly.

4.3 Furthermore, we may pass on your personal data to third parties if we enter into contracts or offer similar services together with partners. You will receive more detailed information on this when you provide us with your personal data or in the description of the respective offer you may have used.

4.4 If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the respective offer you may have made use of.

4.5 Within the website we use the widely spread SSL (Secure-Socket Layer) method in conjunction with the highest level of encryption supported by your web browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser.

4.6 We also make use of suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

5. Newsletter

5.1 With your consent, you can also separately receive information about current and future projects (by telephone, e-mail, telephone).

5.2 For the registration to receive this information by e-mail newsletter we use the so-called double opt-in procedure. This means that after your registration we will send you an e-mail to the e-mail address you stated in which we will ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the dates of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

5.3 Your e-mail address is the only mandatory information for sending the newsletter. The indication of further, separately marked data is voluntary and will be used to address you personally. After your confirmation we save your e-mail address for the purpose of sending you the newsletter. The legal basis is art. 6 para. 1 p. 1 lit. a DS-GVO.

5.4 You can revoke your consent at any time and cancel your subscription to information on current and future projects. You can withdraw your consent by clicking on the link provided in every newsletter e-mail, via e-mail to info@patrizia.foundation or with a message to the contact details stated in section 1.2.

5.5 We draw your attention to the fact that we evaluate your user behaviour when sending a newsletter. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which represent one-pixel image files stored on our website. For evaluation purposes, we link the data mentioned in section 3 and the web beacons with your e-mail address and an individual ID.

6. Objection or revocation against the processing of your data

6.1 If you have given your consent to the processing of your data, you can revoke it at any time. Such revocation influences the permissibility of the processing of your personal data after you have given it to us.

6.2 If we base the processing of your personal data on a weighing of interests, you may object to the processing. This is the case if the processing is in particular not necessary for the fulfilment of a contract with you, which is illustrated by us in the following description of the functions respectively. In the event of such an objection, we ask you to explain the reasons why we should not process your personal data. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out our compelling reasons worthy of protection on the basis of which we will continue the processing.

6.3 You can of course object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us about your advertising objection under the contact data mentioned in section 1.2 above.

7. Use of cookies

7.1 In addition to the data mentioned in 3, cookies are stored on your computer when you use our website. Cookies are small text files which are stored on your hard drive assigned to the browser you are using and through which certain information is transmitted to the site which sets the cookie (in this case by us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and overall effective and are used to support dialogue between our website and your end device.

7.2 This website uses the following types of cookies, the scope and function of which are explained below:

– Transient cookies, i.e. cookies that are automatically deleted when you close your browser. These include in particular session cookies. They store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close your browser.

– Persistent cookies, i.e. cookies that allow you to configure your browser settings according to your wishes. Here, for example, the acceptance of third party cookies or all cookies can be rejected. We would like to point out that you may not be able to use all the functions of this website.

The Flash cookies used are not recorded by your browser, but by your Flash plug-in. We also use HTML5 storage objects, which are stored on your end device. These objects store the required data regardless of the browser you are using and do not have an automatic expiration date. If you do not wish the Flash cookies to be processed, you must install an appropriate add-on, e.g. “Better Privacy” for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using private mode in your browser. We also recommend that you regularly delete your cookies and browser history manually.

8. Registration for events

8.1 You can register on our website for various events (golf tournaments, theatre performances, etc.).

8.2 Various personal data is collected and processed for your registration. The obligatory information that we require from you is marked accordingly. This usually includes your name, first name, e-mail address, mobile phone number and your address. In addition, further information required for the special event may be requested and processed. The information of other, separately marked data is voluntary and will only be used to address you personally. This data may be passed on to cooperation partners with whom we organize the corresponding event for which you have registered.

8.3 The legal basis for the processing of your data is art. 6 para. 1 lit. b and a DS-GVO. We need the data for the proper execution of the event for the participants, in particular to get in contact with you for the execution of the event for which you have registered and to register you if necessary with the cooperation partner. In addition, we need the data from you in order to be able to adapt any services to you personally and to provide you with the best possible user experience. The collection and processing of this data exclusively serves these purposes; your data will not be processed for other purposes beyond this. You can revoke your consent at any time. You can withdraw your consent by sending an e-mail to info@patrizia.foundation or by sending a message to the contact details stated in section 1.2.

8.4 In principle, your personal data will be processed as long as necessary to achieve the contractual purposes (to carry out the event), therefore as long as the contractual relationship exists. After the termination of the contractual relationship, the data provided by you may be stored and thus processed in order to comply with legal retention periods (art. 6 para. 1 lit. c DS-GVO) or due to legitimate interests (art. 6 para. 1 lit. f DS-GVO). In particular, legitimate interests may arise from the fact that the PATRIZIA Children Foundation must defend itself against legal claims or wishes to assert or exercise legal claims itself. After the expiry of the statutory retention periods and/or the loss of the legitimate interests, the data provided by you will be deleted.

9.1 Donations

9.1 You can make donations directly to the PATRIZIA Children Foundation on our website by direct debit, credit card or Paypal.

9.2 In order to process your donation, various personal data will be collected and processed, depending on the type of donation selected. The obligatory information that we require from you is marked accordingly. This includes salutation, surname, first name, e-mail address, address, name of the account holder and, if applicable, the IBAN. The information of other, separately marked data is voluntary and is provided only to ensure a more comfortable communication with you. Your data will only be passed on to third party service providers (in particular banks and financial service providers) for the purpose of carrying out the donation.

9.3 The legal basis for the processing of your data is art. 6 para. 1 lit. b and c DS-GVO. We need the data for the proper processing of your donation in order to issue you with a corresponding donation receipt and to fulfil our legal obligations.

9.4 Within the scope of the donation registration you have the possibility to register voluntarily for a mailing list to receive further information about the work of the PATRIZIA Children Foundation. In this respect, the PATRIZIA Children Foundation processes your name and e-mail address. The legal basis for this is art. 6 para. 1 lit. a DS-GVO. The information about the newsletter distribution according to section 6 applies accordingly.

9.5 In principle, your personal data will be processed as long as this is necessary to achieve the contractual purposes (to implement the donation agreement), therefore as long as the contractual relationship exists. After the termination of the contractual relationship, the data provided by you may be stored and thus processed in order to comply with legal retention obligations (art. 6 para. 1 lit. c DS-GVO) or due to legitimate interests (art. 6 para. 1 lit. f DS-GVO). In particular, legitimate interests may arise from the fact that the PATRIZIA Children Foundation must defend itself against legal claims or wishes to assert or exercise legal claims itself. After the expiry of the legal retention periods and/or the loss of the legitimate interests, the data provided by you will be deleted.

10. Use of Google Analytics

10.1 This website uses Google Analytics, a web analytics service provided by Google, Inc. “(“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be shortened by Google in advance within member states of the European Union or in other contracting states to the agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

10.2 The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

10.3 You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent Google from collecting the data generated by the cookie related to your use of the website (including your IP address) and prevent Google from processing this data by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

10.4 This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are shortened for further processing and that it is not possible to identify individuals. As far as the data collected about you is personal, this reference is immediately excluded and the personal data thereby deleted immediately.

10.5 We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained allow us to improve our services and make them more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is art. 6 para. 1 p. 1 lit. f DS-GVO. 10.6 Third-party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de.html, Privacy policy overview: http://www.google.com/intl/de/analytics/learn/privacy.html, and privacy policy: http://www.google.de/intl/de/policies/privacy.

11. Facebook

11.1 We are currently using a social media plug-in from Facebook. We are using the so-called two-click solution. This means that when you visit our site, generally no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by his initial letter or the logo in the mark on the box. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it will the plug-in provider receive the information that you have opened the corresponding website of our online offering. In addition, the data referred to in section 3 of this declaration will also be transmitted. In the case of Facebook, the IP address is made anonymous immediately after collection, according to information provided by the provider in Germany. By activating the plug-in, personal data is transferred from you to the plug-in provider and stored in the USA. Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the grayed-out box.

11.2 We have no influence on the data collected and data processing procedures, nor are we aware of the full scope of data collection, the purposes of processing or the storage periods. We also do not have any information on the deletion of the collected data by the plug-in provider.

11.3 The plug-in provider stores the data collected about you as user profiles and uses these for the purposes of advertising, market research and/or the design of its website to meet requirements. Such an evaluation is carried out in particular (also for users who are not logged in) to display demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but you must contact the respective plug-in provider to exercise this right. The plug-ins enable you to interact with social networks and other users so that we can improve our services and make them more interesting for you as a user. The legal basis for the use of the plug-in is art. 6 para. 1 p. 1 lit. f DS-GVO.11.4 Data is passed on regardless of whether you have an account with the plug-in provider and are logged in there or not. If you are logged in with the plug-in provider, your data collected by us will be assigned directly to your existing account with the plug-in provider. If you press the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and communicates it publicly to your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid being assigned to your profile by the plug-in provider.

11.5 Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy. Addresses of the respective plug-in providers and URL with their data protection information:Facebook Inc. 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

12. Integration of YouTube videos

12.1 We have incorporated YouTube videos into our online offering which are stored on http://www.Youtube.de or http://www.YouTube.com and can be played directly from our website.

12.2 When you visit the Website, YouTube will be informed that you have accessed the relevant page on our website. In addition, the data referred to in clause 3 of this declaration will be transmitted. This is done regardless of whether YouTube provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your profile to be associated with YouTube, you must log out before activating the button. YouTube stores your data as user profiles and uses them for advertising, market research and/or the design of its website to meet your needs. Such evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but you must contact YouTube to exercise this right. The legal basis is art. 6 para. 1 p. 1 lit. a, b and f DS-GVO.

12.3 Further information on the purpose and scope of data collection and processing by YouTube can be found in the Privacy Policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.