AfGAC Data Privacy Policy

1. Who is responsible for the processing, who can you contact?

2. What data processing takes place?

2.1 Transmission of data via the Internet

When you visit this website, your internet provider automatically transmits the following data to us:

• Your IP address (this is then shortened, see below)
• Information about your browser, language setting and operating system
• Date and time of your visit
• Name of your internet provider, referrer URL
• A message as to whether your access to this website was successful

Why is this data processed?

We process this data so that you can load our website and we can check and restore the security and function of our website and server if necessary. We cannot assign this data to a specific person, as the IP addresses are only stored in abbreviated form and thus anonymised. The legal basis is Art. 6 para. 1 f) GDPR. We have a legitimate interest in ensuring that our website is displayed correctly on your end device, that IT security is guaranteed and that we can identify and rectify the causes of any faults.

How long is this data stored?

The administrators have access to the above data for 3 months, after which the data records are permanently deleted. If the data is collected to provide the website, it will be deleted when the respective session has ended.

Do you have to provide us with this data?

The transmission of this data is not mandatory and is not required. However, for technical reasons, it is not possible to visit our website without processing this data.

2.2 Use of cookies

We use cookies on our website. Cookies are small files that contain an identification number. Cookies are stored on your computer, tablet or smartphone (from here on referred to as "end devices") when you visit our website. If you visit our website again, your device can be recognised using this identification number.

Why are cookies set?

The purpose of session cookies is to make it easier and faster for you to use our website. Thanks to session cookies, you do not have to make entries on our website again, even if you visit other websites in the meantime. Session cookies also enable us to recognise that you have already visited individual pages on our website. These session cookies also serve security purposes; they determine user activities and carry out functional checks on the respective user.

The legal basis for this is Art. 6 para. 1 f) GDPR. We have an interest in enabling you to use our website in a user-friendly manner and to optimise it.

We also use permanent ("persistent") cookies if you have given your consent. This allows us to statistically record and analyse the use of our website. The purpose is to improve our website (see 2.3). When you access our website for the first time, a cookie banner ("AfGAC Privacy") informs you about the use of cookies for statistical analysis and marketing purposes and obtains your consent to the processing of the personal data used in this context. In this context, reference is also made to this privacy policy.

In addition, permanent cookies are used to store whether you have consented to or rejected the use of statistical analysis/marketing tools. The legal basis for this is Art. 6 para. 1 f) GDPR. We have an interest in preventing the cookie banner from being displayed again each time you visit our website. This allows us to make your use of our website more convenient.

How long is this data stored?

Session cookies are deleted after the browser is closed. The storage duration of the aforementioned permanent cookies can be found in the following sections. We store your consent or rejection of analysis cookies for 12 months.

Are cookies mandatory?

It is also possible to visit our website without cookies. There is no obligation to use cookies. You can set your browser so that cookies are not permitted. You must make the settings separately for each browser and for each end device that you use.

2.3 Web analysis by Google Analytics / Google Tag Manager

We use Google Analytics, an analytics service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google"). Pseudonymised usage profiles of visitors to our website are created. Google also uses techniques to track your surfing behaviour such as "cross-device tracking" and permanent cookies (see above 2.2). The information generated by the cookie about your use of our website is processed by Google in the USA. This information is the data mentioned above under 2.1. Google also processes the search term with which you may have found our website via a search engine, the sequence of subpages you have accessed and the time you spend on these subpages. As a rule, your IP address will be truncated by Google within the European Union or the European Economic Area. Only in exceptional cases is the full IP address transferred to the USA and only anonymised there; this is done on the basis of the EU adequacy decision "EU-US Data Privacy Framework". Further information on data processing in connection with Google Analytics can be found here.

Why is this data processed?

The data is processed for the purpose of market research and improving our website. This means that we evaluate information about your visits to our website for analysis purposes in order to understand how visitors use our website. Google processes this data in order to compile reports on the use of our website. The legal basis is your consent (Art. 6 para. 1 a) GDPR) if you have clicked on "Accept all" in the cookie banner or have activated the corresponding sliders in the individual cookie settings ("Show Information" button) under "Statistics" or "External Media".

Google may also use this data for other purposes, which we cannot influence.

How long is this data stored?

The data compiled by Google Analytics is stored for 26 months. Google Analytics cookies are valid for 12 months. If you withdraw your consent, your data will be deleted earlier.

Do you have to provide us with this data?

The transmission of this data or your consent to it is voluntary.

How can you stop or re-authorise the use of Google Analytics?

You can withdraw your consent to the use of Google Analytics at any time. To do this, click on the cookie settings button at the bottom left of the website and adjust your settings accordingly. If you use several end devices or browsers, you must click this button for each individual end device in each individual browser.

If you would like to help us improve our website, you can consent to the use of Google Analytics at any time. To do this, click on the corresponding slider under "Statistics" in the detailed cookie settings mentioned above. Data about your surfing behaviour on this website will then be stored.

You can prevent the storage of cookies, tracking and thus the use of Google Analytics by changing the settings in your browser (see 2.2). Alternatively, you can prevent the processing of the data generated by the cookie by installing the plugin available here.

2.4 Messages we receive via e-mail

We process data that you have sent us by e-mail and - if you use our contact form - also your full name.

Why is this data processed?

In these cases, we process your e-mail address, your name and your message that you send us by e-mail in accordance with Art. 6 (1a) GDPR so that we can process and respond to your enquiry. We process other data entered by you on the basis of your consent (Art. 6 para. 1 a) GDPR).

How long will the data be stored? Do you have to provide this data?

The stored data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the enquirer has ended, i.e. it can be inferred from the circumstances that the matter in question has been conclusively clarified. In these cases, however, deletion takes place after 3 months at the latest. This only applies if we are not authorised or obliged to store the data for a longer period due to statutory provisions in conjunction with Art. 6 para. 1 c) GDPR.

The provision of this data is not mandatory and is not necessary for the conclusion of a contract. If you provide further data, this is voluntary.

2.5 Google Maps

Content from Google Maps is integrated on our website. When you visit our subpage on which Google Maps is integrated, data about your behaviour when using Google Maps is transmitted to Google and processed by Google if you have consented to the "external media" category as part of the cookie consent. Google receives, for example, the information that you have accessed our corresponding subpage. Your IP address is also transmitted.

Google processes this data jointly with us. We have concluded a contract with Google to regulate data protection responsibilities, which you can access here.

Google processes this data as user profiles and uses it for the purpose of market research and the customised design of Google Maps. If you are a Google customer and are logged in to a Google service, this data will be linked directly to your Google account. If you do not wish this to happen, you must log out of Google before visiting our website.

The legal basis is your (optional) consent, Art. 6 para. 1 a) GDPR. The provision of this data is not mandatory and is not required for the conclusion of a contract with us.

2.6 Video service Vimeo

Video content from the video service vimeo is also integrated into our website via a plugin. The provider is Vimeo.com Inc, 330 West 34th Street, New York, New York 10001, USA. When you visit a website on which this video service is integrated, data about your behaviour when using this service is transmitted to the service provider and processed there if you have consented to the "External Media" category as part of the cookie consent.

This service automatically collects certain types of data when you access a video, regardless of whether you have a vimeo account. This data includes your IP address, technical information about your device (e.g. browser type, operating system, basic device information), the website you visited or the search query you may have entered before accessing the website, and your activities while watching the video. We have no influence on this data transfer. For details, please refer to the vimeo privacy policy: https://vimeo.com/privacy

The legal basis is your (optional) consent, Art. 6 para. 1 a) GDPR. The provision of your data is not mandatory and is not required for the conclusion of a contract with us.

2.7 YouTube Videos

On our website, we have integrated videos from the provider YouTube (YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc. with registered office at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

2.8 Third-party services

Our website uses content, services and performances from third-party providers. These are, for example, tools for sending newsletters, analysing user behaviour or displaying geographical maps or videos. In order for the services to be made available, it is essential that the IP address of your end device is transmitted to the third-party provider. Wherever possible, we have chosen a low-data protection configuration. However, we have no influence on whether the IP address may be stored. The third-party providers are listed above.

3. Will your data be passed on to third parties?

We pass on at least some of your data to processors. These process your data only on our instructions and not for their own purposes (Art. 28, 29 GDPR). In addition to those mentioned above in Section 2, these are the following companies that process data for the purposes listed below:

• Processors from Germany that provide web hosting services
• Internet agency based in Germany for website maintenance

In certain cases, we may pass on some of your data to other recipients. This may be the case if you have consented to this (Art. 6 para. 1 a) GDPR), if we are legally obliged to do so (Art. 6 para. 1 c) GDPR), or if this is necessary to safeguard legitimate interests (Art. 6 para. 1 f) GDPR). These are the following recipients who receive data for the following purposes:

• Postal, logistics and telecommunications companies (dispatch and communication)
• Law enforcement authorities and courts (enforcement or defence of legal claims)
• Auditors, lawyers or tax consultants
• Insurance companies (settlement of claims)

4. What rights do you have in relation to your data?

You can request information from us under the conditions of Art. 15 GDPR as to whether we process your data. If this is the case, you have the right to receive information about this data. In the event that your data stored by us is incorrect or incomplete, you can request that this data be corrected and, if necessary, completed (Art. 16 GDPR). If the legal requirements are met, you can request the erasure (Art. 17 GDPR) or blocking (Art. 18 GDPR) of your data. In the case of automatically processed data that we have received from you on the basis of your consent or a contract, you can assert the right to data portability (Art. 20 GDPR). We will then send you your data in a machine-readable format. If you wish and if this is technically possible, we will transfer this data to a third party. All of the aforementioned rights may be restricted or excluded by law in certain cases.

If you have consented to the processing of your data for a specific purpose, you can revoke your consent at any time. The revocation only takes effect for the future and therefore has no effect on the legality of the processing carried out before the revocation.

You can assert all of the aforementioned rights by sending an email to us or by post to the postal address stated under Section 1. You also have the right to file a complaint about the processing of your data with a German data protection authority of your choice.