Privacy Information in accordance with Art. 13 GDPR
Introduction
The following information provides an overview of how we handle your personal data and your data protection rights. The specific data we process depends on our business relationship with you. Please share this information with any parties involved on your behalf as part of the contractual relationship, such as beneficiaries.
Data Controller
Registration Address: Im Mediapark 8, 50670 Cologne
Administration: Bolzstr. 8, 70173 Stuttgart
Phone: +49 711 99 88 59 12
Email: datenschutz@chancemaker.foundation
Data Protection Officer
If you have any questions or suggestions regarding data protection, you can contact our Data Protection Officer at any time.
Registration Address: Im Mediapark 8, 50670 Cologne
Administration: Bolzstr. 8, 70173 Stuttgart
Phone: +49 711 99 88 59 12
Email: datenschutz@chancemaker.foundation
What personal data do we process?
We collect your data as required for conducting our business relationship. We primarily collect data directly from you, typically provided when placing an order or during the course of our business relationship. We only collect data necessary for the specific purpose of the donation. Any additional information is provided voluntarily.
We process the following data in particular:
- Customer master data such as name, address, and residence
- Data for creating donation receipts and bank details for payment processing
- Communication data for establishing and maintaining a contractual relationship, such as email address, phone number, or mobile number
For products that include additional benefits such as online content, the use of these online portals is subject to the data protection policies of the respective websites.
Why do we process your data and on what legal basis?
We process your data in accordance with legal requirements, particularly the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), for the following purposes:
- To fulfill legal obligations or official requirements. Processing is based on legal provisions, including compliance with commercial and tax regulations (Art. 6(1)(c) and (e) GDPR).
- When necessary, we process your data to safeguard our legitimate interests or those of third parties (Art. 6(1)(f) GDPR):
- Providing information about the foundation’s activities
- Measures for business management
- Statistical evaluations for the development of (marketing) strategies, analysis of existing contractual relationships to maintain, improve, or terminate them
- Ensuring IT security and IT operations
- Communication and coordination purposes during the donation process
Who receives personal customer data?
The data collection entity is ChanceMaker Foundation. It stores all data necessary for fulfilling contractual obligations and customer support in its IT systems. To fulfill the purposes mentioned above, especially contractual obligations, we use selected service providers (data processors) and agents. These parties may access your data to the extent necessary to perform the tasks assigned to them.
Further data sharing with external parties occurs only if required or permitted by law, or if you have provided consent. Possible recipients of your data include:
- Public authorities and institutions if a legal or official obligation exists (e.g., tax authorities)
- Other companies and service providers (data processors) / agents in the following areas:
- IT service and consulting companies
- Financial institutions
- Accounting and tax consulting firms
- Multipliers for the foundation (in selected cases)
Will your data be transferred to a third country or international organization?
Your data will not be transferred to entities in countries outside the European Union (third countries).
How long are personal data stored?
We process and store your data as long as it is required for fulfilling the purposes mentioned above, especially our contractual and legal obligations. If the data is no longer necessary, it will be regularly deleted, unless temporary further processing is required for the following purposes:
- Compliance with commercial and tax retention obligations, such as those specified in the Commercial Code (HGB) and the Fiscal Code (AO), with retention periods of six to ten years.
- Preservation of evidence under statutory limitation periods. According to Sections 195ff. of the German Civil Code (BGB), limitation periods can be up to 30 years, with the regular limitation period being three years.
What are your data protection rights?
- Confirmation
You have the right to request confirmation from us as to whether personal data concerning you is being processed.
- Access (Art. 15 GDPR)
You have the right to request information about the personal data we store about you and to receive a copy of it free of charge in accordance with legal provisions.
- Rectification (Art. 16 GDPR)
You have the right to request the correction of inaccurate personal data concerning you and to have incomplete data completed.
- Erasure (Art. 17 GDPR)
You have the right to request the immediate deletion of your personal data if the legal requirements for this are met, unless processing/storage is required.
- Restriction of Processing (Art. 18 GDPR)
You have the right to request the restriction of processing under certain legal conditions.
- Data Portability (Art. 20 GDPR)
You have the right to receive personal data concerning you in a structured, commonly used, and machine-readable format and to have it transferred to another controller without hindrance, where technically feasible.
- Objection (Art. 21 GDPR)
You have the right to object at any time to the processing of your personal data for reasons related to your particular situation. This applies to data processed under Art. 6(1)(e) (public interest) or Art. 6(1)(f) GDPR (legitimate interests).
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights, and freedoms, or if processing is necessary for the establishment, exercise, or defense of legal claims.
In certain cases, we process personal data for direct marketing purposes. You can object to the processing of your data for such purposes at any time. If you object to processing for direct marketing purposes, your data will no longer be processed for these purposes.
- Withdrawal of Consent
You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.
- Complaint to a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.
If you wish to exercise any of these rights, please contact our Data Protection Officer. You can reach us at:
Email: datenschutz@chancemaker.foundation