Privacy and Data Protection – Hillel Deutschland
1. Introduction
At Hillel Deutschland, we are committed to protecting your personal data and respecting your privacy. This privacy notice explains how we collect, use, and safeguard your personal information when you interact with us. We process personal data in compliance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
Who Are We?
Hillel Deutschland e.V. is an organization dedicated to enriching the lives of Jewish students in Germany. Our mission is to provide meaningful Jewish experiences to students, fostering a vibrant Jewish community.
Our contact details are:
- Address: Hillel Deutschland,
- Email: hallo@hilleldeutschland.org
For any questions regarding this privacy notice or to exercise your rights, please contact us at the above details.
2. Legal Basis for Processing Personal Data
We process your personal data based on one or more of the following legal grounds:
- Consent (Article 6(1)(a) GDPR): Processing is based on your explicit consent, which you may withdraw at any time.
- Performance of a Contract (Article 6(1)(b) GDPR): Processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
- Legal Obligation (Article 6(1)(c) GDPR): Processing is necessary for compliance with a legal obligation.
- Legitimate Interests (Article 6(1)(f) GDPR): Processing is necessary for our legitimate interests, provided your rights and interests do not override those interests.
3. What Personal Data Do We Collect and Why?
3.1. Website Interaction
We collect personal data when you interact with our website (www.hilleldeutschland.org), including:
- Contact Forms: When you contact us via our website forms, we collect your name, email address, and any other information you choose to provide.
- Event Registrations: When you register for events, we collect information necessary to facilitate your participation.
- Newsletter Subscription: If you subscribe to our newsletter, we collect your email address.
- Cookies: We use cookies and similar technologies to enhance your experience. Please refer to our Cookie Policy for details.
Legal Basis: Consent and legitimate interests (for website functionality and improvement).
3.2. Marketing Communications
We may send you marketing communications, updates about events, programs, and other activities if:
- You have subscribed to our newsletter.
- You have provided consent to receive such communications.
You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us at info@hilleldeutschland.org.
Legal Basis: Consent.
3.3. Event Participation
When you participate in our events, programs, or activities, we may collect:
- Personal Identification Information: Name, email address, phone number, date of birth.
- Demographic Information: Such as your university affiliation or areas of interest.
- Special Categories of Data: Information about religious beliefs, which is considered sensitive under GDPR.
Purpose: To organize and facilitate events, ensure appropriate resources, and tailor our programs to participants' interests.
Legal Basis: Explicit consent (for special categories of data), legitimate interests, and performance of a contract.
3.4. Donations
If you make a donation to Hillel Deutschland, we collect:
- Contact Information: Name, address, email, phone number.
- Payment Information: Necessary financial details to process your donation.
Purpose: To process your donation, issue receipts, and comply with legal obligations.
Legal Basis: Performance of a contract, legal obligation.
3.5. Volunteer and Employment Applications
When you apply to volunteer or work with us, we collect:
- Personal Identification Information: Name, email address, phone number.
- Professional Information: CV/resume, cover letter, qualifications.
Purpose: To evaluate your application and manage the recruitment process.
Legal Basis: Legitimate interests (processing is necessary for recruitment purposes).
4. Sharing of Personal Data
We may share your personal data with:
- Service Providers: Third-party companies assisting in our operations (e.g., IT services, event management platforms).
- Affiliated Organizations: Such as Hillel International, for coordination and program purposes.
- Legal and Regulatory Authorities: When required by law.
International Data Transfers
Your personal data may be transferred to countries outside the European Economic Area (EEA), including the United States, where Hillel International is based. We ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses: Agreements ensuring data protection standards.
- Binding Corporate Rules: Internal policies approved by authorities.
5. Automated Decision-Making and Profiling
We do not use your personal data for automated decision-making or profiling that produces legal effects concerning you or significantly affects you.
6. Data Retention
We retain your personal data only as long as necessary for the purposes stated and in accordance with legal obligations. Retention periods depend on:
- Event Participation Records: Retained for up to two years, unless otherwise required.
- Newsletter Subscription: Until you unsubscribe or withdraw consent.
- Donation Records: Retained as required by tax and accounting laws (typically ten years).
- Volunteer and Employment Applications: Unsuccessful applications may be retained for up to six months, unless you request deletion sooner.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:
- Encryption: Securing data in transit and at rest.
- Access Controls: Limiting access to personal data to authorized personnel.
- Regular Assessments: Monitoring and testing security measures.
8. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Access: Request access to your personal data.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request deletion of your data under certain conditions.
- Restriction: Restrict processing of your data under certain circumstances.
- Portability: Receive your data in a structured format and transfer it to another controller.
- Objection: Object to processing based on legitimate interests or for direct marketing.
- Withdrawal of Consent: Withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.
To exercise your rights, please contact us at info@hilleldeutschland.org.
Right to Lodge a Complaint
If you believe we have violated data protection laws, you have the right to lodge a complaint with the supervisory authority:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
- Address: Friedrichstraße 219, 10969 Berlin, Germany
- Phone: +49 (0)30 13889-0
- Email: mailbox@datenschutz-berlin.de
- Website: www.datenschutz-berlin.de
9. Children's Data
Our services are intended for individuals aged 16 and over. We do not knowingly collect personal data from children under 16 without parental consent.
- Under 16: Parental or guardian consent is required for processing personal data.
- Under 13: We do not process data from children under 13.
10. Updates to This Privacy Notice
We may update this privacy notice periodically. Changes will be posted on this page with an updated revision date.