Köln e.V.

Privacy policy

PRIVACY NOTICE

  1. Purpose and Data Controller

This Privacy Policy explains the nature, scope, and purpose of the processing (including, among other things, the collection, processing, and use of personal data, as well as the obtaining of consent) of personal data within our online service and the associated websites, features, and content (hereinafter collectively referred to as the “online service” or “website”). This Privacy Policy applies regardless of the domains, systems, platforms, and devices (e.g., desktop or mobile) on which the online service is operated.

The provider of the online service and the entity responsible under data protection law is [VEREIN e.V.].,

represented by the Executive Board:

Marlena Hock: Team Leader Julius Reinemann: HR, Deputy Team Leader Lukas Urich: Project Development Timo Lenzen: Finance Lena Kowalzik: Events Gabriel Louzeiro: Marketing Lawrence Hearn: Relations Johannes Müller: Team Leader Spokesperson, Enactus Germany

The registered office of Enactus at the University of Cologne e.V. is

c/o Gateway Gründungsservice Weyertal 109 50937 Cologne

Enactus at the University of Cologne e.V. and its governing bodies are hereinafter also referred to as “Provider,” “we,” or “us.”

For contact information, please refer to our legal notice.

The data protection officer of the data controller is:

Any data subject may contact our Executive Board directly at any time with questions or suggestions regarding data protection.

The term “user” refers to all visitors to our online platform. The terms used, such as “user,” are to be understood as gender-neutral. 2. General Information on Data Processing

We process users’ personal data only in compliance with the relevant data protection regulations, in accordance with the principles of data minimization and data avoidance. This means that users’ data is processed only when there is legal authorization, particularly when the data is necessary for the provision of our contractual services and online services, or is required by law, or when consent has been obtained.

We implement state-of-the-art organizational, contractual, and technical security measures to ensure compliance with data protection laws and to protect the data we process against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons.

If, within the scope of this Privacy Policy, content, tools, or other resources from other providers (hereinafter collectively referred to as “third-party providers”) are used and those providers are headquartered abroad, it can be assumed that data will be transferred to the countries where the third-party providers are headquartered. The transfer of data to third countries takes place either on the basis of a legal authorization, the user’s consent, or specific contractual clauses that ensure the legally required security of the data. 3. Processing of Personal Data

In addition to the uses expressly stated in this Privacy Policy, personal data is processed for the following purposes based on legal authorization or user consent: the provision, execution, maintenance, optimization, and security of our services and user-related functions; and the provision of effective customer service and technical support.

We transfer users’ data to third parties only if this is necessary for billing purposes (e.g., to a payment service provider) or for other purposes if these are necessary to fulfill our contractual obligations toward users (e.g., providing addresses to suppliers).

When you contact us (via the contact form or email), your information is stored for the purpose of processing your inquiry and in case follow-up questions arise.

Personal data is deleted once it has served its intended purpose and provided that no retention obligations prevent its deletion. 4. Collection of Access Data

We collect data about every access to the server on which this service is hosted (so-called server log files). Access data includes the name of the webpage accessed, the file, the date and time of access, the amount of data transferred, a notification of successful access, the browser type and version, the user’s operating system, the referrer URL (the previously visited page), the IP address, and the requesting provider.

We use the log data—without linking it to the user’s identity or creating any other profiles—in accordance with legal provisions solely for statistical analysis for the purposes of operating, securing, and optimizing our online service. However, we reserve the right to review the log data retrospectively if there are concrete indications giving rise to a reasonable suspicion of unlawful use.

  1. Collection of Visitor Data

This website is hosted by Squarespace. Squarespace collects personal data when you visit this website. This includes:

Information about your browser, network, and device

Webpages you visited before coming to this website

Your IP address

Squarespace needs this data to operate this website and to protect and improve its platform and services. Squarespace analyzes this data in a de-identified form. 6. Fonts

This website uses font files from Google Fonts and Adobe Fonts. To display this website correctly, servers hosting these font files may receive personal data about you. This includes:

Information about your browser, network, or device

Your IP address 7. Cookies, Audience Measurement

Cookies are pieces of information that are transmitted from our web server or third-party web servers to users’ web browsers and stored there for later retrieval. Users are informed about the use of cookies for pseudonymous audience measurement in this Privacy Policy.

It is also possible to view this website without cookies. If users do not want cookies to be stored on their computer If you wish to do so, please disable the corresponding option in your browser's settings. Stored cookies can be deleted in your browser's settings. Disabling cookies may result in limited functionality of this website.

You can manage many online advertising cookies from various companies via the U.S. website (available at http://www.aboutads.info/choices) or the EU website (available at http://www.youronlinechoices.com/uk/your-ad-choices/). 8. Squarespace Website Analytics

This website collects personal data that serves as the basis for our website analytics. This includes:

Information about your browser, network, and device

Webpages you visited before coming to this website

Your IP address

This information may also include details about your use of this website, including:

Clicks

Internal links

Pages visited

Scrolling Search Queries

Timestamps

We share this information with Squarespace, our website analytics provider, to learn more about traffic and activity on this website. 9. Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc. (Google). Google uses cookies. The information generated by the cookie regarding users’ use of the website is generally transmitted to a Google server in the United States and stored there.

Google will use this information on our behalf to evaluate users’ use of our website, to compile reports on activity within the website, and to provide us with other services related to the use of the website and the Internet. In doing so, pseudonymous user profiles may be created from the processed data.

We use Google Analytics only with IP anonymization enabled. This means that users’ IP addresses are truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. The IP address transmitted by the user’s browser is not combined with other data held by Google. Users can prevent the storage of cookies by adjusting their browser settings accordingly; users can also prevent Google from collecting the data generated by the cookie and related to their use of the online service, as well as from processing this data, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

For more information about Google’s use of data for advertising purposes, as well as options for settings and opting out, please visit Google’s websites: https://www.google.com/intl/de/policies/privacy/partners (Google’s use of data when you use our partners’ websites or apps), http://www.google.com/policies/technologies/ads (Data Use for Advertising Purposes), http://www.google.de/settings/ads (Manage the information Google uses to show you ads), and http://www.google.com/ads/preferences" (Control which ads Google shows you). 10. Google Marketing and Remarketing Services

We use the marketing and remarketing services (collectively, “Google Marketing Services”) provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google&). Google Marketing Services allow us to display ads for and on our website in a more targeted manner, so that users are shown only ads that potentially match their interests. For example, if users are shown ads for products they have expressed interest in on other websites, this is referred to as remarketing. For these purposes, when our website or other websites where Google Marketing Services are active are accessed, a Google code is executed directly by Google, and so-called (re)marketing tags (invisible graphics or code, also known as web beacons) are embedded into the website. With their help, an individual cookie—that is, a small file—is stored on the user’s device (comparable technologies may also be used instead of cookies). The cookies may be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com, or googleadservices.com. This file records which web pages the user has visited, what content they are interested in, and which offers they have clicked on, as well as technical information about the browser and operating system, referring web pages, the time of the visit, and other details regarding the use of the online service. Users’ IP addresses are also collected; however, as part of Google Analytics, we note that IP addresses are truncated within member states of the European Union or in other signatory states to the Agreement on the European Economic Area, and are only transmitted in full to a Google server in the United States—where they are then truncated—in exceptional cases. The IP address is not combined with user data from other Google services. The information mentioned above may also be combined with information from other sources. When the user subsequently visits other websites, ads tailored to their interests may be displayed.

User data is processed pseudonymously within the framework of Google Marketing Services. This means that Google does not, for example, store or process the user’s name or email address, but rather processes the relevant data on a cookie-based basis within pseudonymous user profiles. This means that, from Google’s perspective, ads are not managed and displayed for a specifically identified individual, but rather for the cookie holder, regardless of who that cookie holder is. This does not apply if a user has expressly permitted Google to process the data without this pseudonymization. The information collected by DoubleClick about users is transmitted to Google and stored on Google’s servers in the United States. The Google marketing services we use include, among others, the online advertising program Google AdWords. In the case of Google AdWords, each AdWords customer receives a different conversion cookie. Cookies cannot therefore be tracked across the websites of AdWords customers. The information collected via the cookie is used to generate conversion statistics for AdWords customers who have opted in to conversion tracking. AdWords customers are informed of the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

We integrate third-party advertisements based on Google’s DoubleClick marketing service. DoubleClick uses cookies that enable Google and its partner websites to serve ads based on users’ visits to this website or other websites on the Internet. We also integrate third-party advertisements using Google’s AdSense marketing service. AdSense uses cookies that enable Google and its partner websites to serve ads based on users’ visits to this website or other websites on the Internet.

Another Google marketing service we use is Google Tag Manager, which allows us to integrate additional Google analytics and marketing services into our website (e.g., AdWords, DoubleClick, or Google Analytics).

For more information on Google’s use of data for marketing purposes, please visit the overview page: https://www.google.com/policies/technologies/ads. Google’s Privacy Policy is available at https://www.google.com/policies/privacy. If you wish to object to data collection by Google Marketing Services, you can use the settings and opt-out options provided by Google: http://www.google.com/ads/preferences. 11. Facebook Social Plugins

Our website uses social plugins (plugins) from the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Facebook). The plugins can be recognized by one of the Facebook logos (a white “f” on a blue tile, the terms “Like,” “Gefällt mir,” or a thumbs-up icon) or are labeled with the phrase “Facebook Social Plugin.” The list and appearance of Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/.

When a user accesses a feature of this website that contains such a plugin, their device establishes a direct connection to Facebook’s servers. The content of the plugin is transmitted directly from Facebook to the user’s device and integrated into the website. In the process, user profiles may be created based on the processed data. We therefore have no influence over the scope of the data that Facebook collects using this plugin and are informing users accordingly based on the information available to us.

By integrating the plugins, Facebook receives information that a user has accessed the corresponding page of the online service. If the user is logged into Facebook, Facebook can associate the visit with the user’s Facebook account. When users interact with the plugins—for example, by clicking the “Like” button or posting a comment—the corresponding information is transmitted directly from your device to Facebook and stored there. Even if a user is not a Facebook member, there is still a possibility that Facebook may obtain and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany.

Users can find information on the purpose and scope of data collection, as well as the further processing and use of the data by Facebook, and their related rights and privacy settings, in Facebook’s privacy policy: https://www.facebook.com/about/privacy/ .

If a user is a Facebook member and does not want Facebook to collect data about them through this online service and link it to their membership data stored on Facebook, they must log out of Facebook and delete their cookies before using our online service. Additional settings and the ability to opt out of the use of data for advertising purposes are available in the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the U.S. site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. These settings apply across all platforms, meaning they are applied to all devices, such as desktop computers or mobile devices. 12. Integration of Third-Party Services and Content It may happen that content or services from third-party providers, such as city maps or fonts from other websites, are integrated into our online offering. The integration of third-party content always requires that the third-party providers collect the users’ IP addresses, since they would not be able to send the content to the users’ browsers without the IP address. The IP address is therefore necessary for displaying this content. Furthermore, third-party content providers may set their own cookies and process user data for their own purposes. In doing so, they may create user profiles based on the processed data. We will use this content in a manner that minimizes and avoids data collection as much as possible and will select reliable third-party providers with regard to data security.

The following list provides an overview of third-party providers and their content, along with links to their privacy policies, which contain further information on data processing and—in some cases, as already mentioned here—options to object (so-called “opt-out” options):

  1. User Rights and Data Deletion Users have the right, upon request and free of charge, to receive information about the personal data we have stored about them.

In addition, users have the right to have inaccurate data corrected, to withdraw their consent, to have their personal data restricted or deleted, and to file a complaint with the competent supervisory authority if they believe their data is being processed unlawfully.

The data stored by us will be deleted as soon as it is no longer necessary for its intended purpose and no statutory retention obligations prevent its deletion. 14. Changes to the Privacy Policy

We reserve the right to amend the Privacy Policy to adapt it to changes in the legal landscape or to changes in the service and data processing. However, this applies only to statements regarding data processing. If user consent is required or if parts of the Privacy Policy contain provisions governing the contractual relationship with users, changes will be made only with the users’ consent.

Users are asked to review the content of the Privacy Policy regularly.