Privacy Policy
Who we are
DI.DAY is offered by a consortium of organisations and is coordinated by Save Social – Networks for Democracy gUG.
Our website address is www.di.day.
The responsible body for the data processing described in this privacy policy, within the meaning of Article 24, Article 4(7), Article 13(1)(a) GDPR is the
Save Social – Networks For Democracy gUG
Managing Director: Björn Staschen
Emil-Andresen-Str. 47 K
22529 Hamburg, Germany
Embedded content from other websites
Contributions to this website may contain embedded content (e.g. videos, images, posts, etc.). Embedded content from other websites behaves exactly as if the visitor had visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking services, and record your interaction with this embedded content, including your interaction with the embedded content if you have an account and are logged in to this website.
Who we share data with
Unless explicitly stated in this privacy policy, we do not share your personal data with anyone other than visitors to this website, who will be informed of the names of the initial signatories once they have given their consent.
How long we store data
Anyone who contacts us consents to the storage of the data provided for an indefinite period until they withdraw their consent.
Where your data is sent
Supporters’ data may be checked by an automated spam detection service. The legal basis for this is Article 6(1)(f) GDPR.
twingle
This website uses the donation form from twingle GmbH, Prinzenallee 74, 13357 Berlin. twingle GmbH provides the technical platform for the donation process via this donation form. The data you enter when making a donation (e.g. address, bank details, etc.) is stored by twingle on servers in Germany solely for the purpose of processing the donation. We have signed a data processing agreement with twingle, and, when using the twingle donation form, we fully comply with the strict requirements of the EU General Data Protection Regulation and the German data protection authorities.
The transfer of your data is based on Article 6(1)(a) GDPR (consent) and Article 6(1)(b) GDPR (processing for the performance of a contract). Where you have given your consent to data processing, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of data processing operations carried out in the past.
matomo
The twingle donation form uses the web analytics software Matomo (www.matomo.org), a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand (‘Matomo’), to collect and store data based on twingle’s legitimate interest in the statistical analysis of user behaviour for optimisation purposes pursuant to Art. 6(1)(f) GDPR. Pseudonymised user profiles may be created and evaluated for the same purpose from this data. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of the website visitor's internet browser. Cookies enable recognition of the internet browser, among other things. The data collected using the Matomo technology (including your pseudonymised IP address) is processed on twingle’s servers. The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this website and is not merged with personal data relating to the bearer of the pseudonym.
An adequacy decision has been issued by the European Commission for New Zealand.
Plausible
This website uses Plausible Analytics, a privacy-friendly web analytics service provided by Plausible Insights Oร, Vรคstriku tn 2, 50403 Tartu, Estonia. Plausible does not collect any personal data, does not use cookies, and does not save any information in visitorsโ browsers. Only aggregated, non-personally identifiable data is collected (e.g. website views, referral source, browser and operating system used). It is not possible to identify individual persons. A daily hash of IP address and user agent is generated in order to count unique visits; the raw data is not saved and the hash is deleted after 24 hours. The data collected is hosted on servers belonging to Hetzner Online GmbH in Germany and do not leave the EU. Data processing is carried out on the basis of our legitimate interest in the statistical analysis of website usage in accordance with Article 6(1)(f) of the GDPR. Further information can be found at plausible.io/data-policy.
Donations and newsletter with CiviCRM
Save Social uses the open-source software CiviCRM as its contact database for sending newsletters and processing donations (in addition to twingle, see above). Newsletter subscriptions are added to CiviCRM using the double opt-in procedure and can be removed or cancelled by subscribers themselves via the unsubscribe or opt-out links available at the bottom of each mailing. Save Social is responsible for deleting subscriber data stored in CiviCRM. The CiviCRM database is hosted on behalf of Save Social by Uberspace (Kaiserstraße 15, 55116 Mainz). Access to the data stored in the software is restricted exclusively to employees of Save Social and Uberspace for commissioned service purposes. Data is not shared with third parties. The data processing organisation is, in principle, Save Social.
The data processed may include, in particular but not exclusively, the following data categories:
- Name, title, contact details, email addresses
- Position, role, qualifications, affiliation with an organisation
- Relationships between organisations or between individuals and organisations
- Areas of interest, subject areas, expertise
- Membership details
- Details of donations and contributions
- Tags, groups, mailing lists
- Communication history and preferences
- Consents, newsletter subscriptions
- Log files, consent history, IP addresses, timestamps
- Where applicable, any further personal data that the Europäische Bewegung Deutschland e.V. adds to CiviCRM
The group of data subjects affected by the data processing is determined by Save Social and may include, in particular, the following categories of individuals:
- Employees of the clients
- Subscribers of the clients
- Members of the clients
- Donors to the clients
- Volunteers
- Employees or contact persons at service providers, partner organisations, project partners, suppliers, and funding bodies of the clients
- Employees or contact persons at media organisations, government institutions, public authorities, ministries, interest groups, companies, associations, foundations, non-profit organisations
- Where applicable, other groups of people that the Europäische Bewegung Deutschland e.V. adds to CiviCRM
CiviCRM is a Customer Relationship Management System (CRM) for non-profit organisations. Further information is available at civicrm.org.
You may withdraw your consent to receive the newsletter at any time with future effect, in accordance with Article 7(3) of the GDPR. To do so, simply notify us of your withdrawal or click the unsubscribe link included in every newsletter.
Newsletter distribution and use of Brevo
We use Brevo, a service provided by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, to send emails (e.g. newsletters). Brevo enables us to send emails, manage recipient data, and carry out statistical analyses (e.g. open and click-through analyses). The processing of your personal data is carried out exclusively on our behalf and in accordance with the instructions set out in a data processing agreement (Art. 28 GDPR) that we have concluded with Brevo.
The personal data processed includes, in particular, your email address, name (if specified), technical information regarding your use of the newsletter, and the date and time of your subscription. The data is processed solely for the purpose of sending and analysing our emails as well as managing your newsletter subscription.
Processing is carried out either on the basis of our legitimate interest pursuant to Article 6(1)(f) of the GDPR in being able to contact you regarding the initiative following your expressed support, or on the basis of your consent pursuant to Article 6(1)(a) of the GDPR, which you provide to us when subscribing to the newsletter. You may withdraw this consent at any time with future effect, for example via the unsubscribe link which is included in every newsletter, or by contacting us directly. Following your withdraw of consent or unsubscription, your email address may be stored on a blacklist to prevent future, unintended mailings. This blocking serves the legal purpose of mailing compliance and may be stored on the basis of our legitimate interest.
Detailed information on data processing by Brevo is available at brevo.com/de/legal/privacypolicy.
Data subjects' rights
Right of information
Pursuant to Article 15 of the GDPR, you have the right to request information as to whether and what personal data we process about you.
Right to rectification
Pursuant to Article 16 of the GDPR, you have the right to request, without undue delay, the rectification of inaccurate personal data or the completion of your personal data stored by us.
Right to erasure
Pursuant to Article 17 of the GDPR, you have the right to request the erasure of your personal data, provided that there are no legal or contractual obligations to retain it.
Right to restriction of processing
Pursuant to Article 18 of the GDPR, you have the right to request the restriction of the processing of your personal data if the legal requirements for this are met.
Right to data portability
Pursuant to Article 20 of the GDPR, you have the right to receive the personal data concerning you that you have provided to us, in a structured, commonly used and machine-readable format, or to request that it be transmitted to another controller, insofar as this is technically feasible.
Right to object
Pursuant to Article 21 of the GDPR, you have the right to object at any time to the processing of your personal data, on grounds relating to your particular situation, provided that such processing is based on Art. 6(1)(e) or (f) of the GDPR.
If your personal data is processed for the purpose of direct marketing, you have the right to object to such processing at any time.
Right to withdraw consent
Where the processing of your personal data is based on your consent in accordance with Article 6(1)(a) of the GDPR, you may withdraw this consent at any time with effect for the future. This does not affect the lawfulness of the processing carried out prior to the withdrawal.
Right to lodge a complaint with the relevant supervisory authority
Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR. In particular, the data protection supervisory authority responsible is that of your usual place of residence, your workplace, or the place where the alleged infringement occured.
To exercise your rights, you can contact us at any time using the contact details provided in the ‘Responsible body’ section.