Publisher:
Trimborn Family Association
represented by the board of directors
c/o Hildegard Coester-Manthey
Taubenstr. 31
47800 Krefeld
Germany
Contact via contact form
Privacy policy
Table of contents
1. Person in charge
2. Overview of the processing operations
2.1 Types of data processed
2.2 Categories of data subjects
2.3 Purposes of the processing
3. Relevant legal bases
4. Transfer and disclosure of personal data
5. Data processing in third countries
6. Use of cookies
7. Performance of tasks according to statutes or rules of procedure
8. Registration and login
9. Contacting
10. Provision of the online offer and web hosting
11. Communication
12. Deletion of data
13. Photo and video recordings
14. Rights of the persons concerned
1. Responsible person
Trimborn Family Association
Represented by the board of directors
Represented by the chairwoman Hildegard Coester-Manthey
Taubenstr. 31
47800 Krefeld
E-mail address: vorsitzende@familie-trimborn.de
2. Overview of the processing operations
The following overview summarizes the types of data processed and the purposes of their processing.
2.1 Types of data processed
– Master data (e.g. name, master number, address, contact details, date of birth, place of birth, family relationships, occupation, marital status, spouse, denomination, nationality, details of status as a member of the Family Association and any contractual relationships, functions in the Family Association, account details and any objections);
– Content data (e.g. text entries, photographs, videos);
– Meta/communication data (e.g. device information, IP addresses);
– Payment data (e.g. bank details); and
– Other data that you actively submit to us.
2.2 Categories of data subjects
– Members and their relatives;
– Other descendants of Cornelius Balduin Trimborn and their relatives (“Descendants”)
– Contractual partners;
– Users (e.g. website visitors, users of online services); and
2.3 Purposes of the processing
– Pursuit of the statutory objectives:
o Updating and continuation of the Descendants’ Table and its dissemination among descendants;
o Creation and dissemination of the family news “TriNa” among the descendants, both in print and digitally;
o Organization and preparation of events, especially family reunions;
o Family history and maintenance of the family grave;
– Contact requests and communication;
– Security measures;
– Services to members and third parties (based on contracts, if applicable); and
– Administration and response to inquiries.
3. Relevant legal bases
In the following, we share the legal bases on which we process personal data. Please note that in addition to the provisions of the GDPR, the national data protection provisions in your or our country of residence and domicile may apply.
– Consent (Art. 6 para. 1 p. 1 lit. a DSGVO) – The data subject has given his/her consent to the processing of personal data relating to him/her for a specific purpose or purposes. This includes implied consent.
– Performance of a contract and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. DSGVO) – Processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures carried out at the request of the data subject. In relation to the Family Association, this refers in particular to the fulfillment of the statutory purposes.
– Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO) – The processing is necessary to protect the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, override these interests. In this respect, the interests of the Family Association are affected in particular.
4. Transmission and disclosure of personal data
In the course of our processing of personal data, it happens that the data are transmitted to other bodies, companies, legally independent organizational units or persons or that they are disclosed to them. Recipients of this data may include, for example, payment institutions in the context of payment transactions, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such cases, we observe the legal requirements and, in particular, conclude appropriate contracts or agreements that serve to protect your data with the recipients of your data.
Data transfer within the family association: We may transfer personal data to other entities within our association, our members or other descendants or grant them access to this data. Provided that this transfer is carried out in accordance with the statutory purposes, the transfer of data is based on our legitimate interests or is carried out if it is necessary for the fulfillment of our contractual obligations or if there is consent of the data subjects or other legal permission.
5. Data processing in third countries
If we process data in a third country (i.e., outside the European Union (EU), the European Economic Area (EEA)) or the processing takes place in the context of the use of third-party services or the disclosure or transfer of data to other persons, entities or companies, this will only be done in accordance with the legal requirements.
Subject to express consent or contractually or legally required transfer, we only process or have data processed in third countries with a recognized level of data protection, which includes US processors certified under the “Privacy Shield”, or on the basis of special guarantees, such as contractual obligation through so-called standard protection clauses of the EU Commission, the existence of certifications or binding internal data protection regulations (Art. 44 to 49 DSGVO, information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).
6. Use of cookies
Cookies are text files that contain data from visited websites or domains and are stored by a browser on the user’s computer. The primary purpose of a cookie is to store information about a user during or after his visit within an online offer. Stored information may include, for example, language settings on a website, login status, or where a video was viewed.
The following cookie types and functions are distinguished:
– Temporary cookies (also: session cookies): temporary cookies are deleted at the latest after a user has left an online offer and closed his browser.
– Permanent cookies: Permanent cookies remain stored even after the browser is closed. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. Likewise, the interests of users used for reach measurement or marketing purposes can be stored in such a cookie.
– First-party cookies: First-party cookies are set by ourselves.
– Third-party cookies (also: third-party cookies): Third-party cookies are mainly used by advertisers (so-called third parties) to process user information.
– Necessary (also: essential or absolutely necessary) cookies: Cookies may be absolutely necessary for the operation of a website (e.g. to store logins or other user input or for security reasons).
– Statistical, marketing and personalization cookies: Furthermore, cookies may also be used in the context of range measurement and when a user’s interests or behavior (e.g. viewing certain content, using functions, etc.) on individual websites are stored in a user profile. Such profiles are used, for example, to show users content that corresponds to their potential interests. This procedure is also referred to as “tracking”, i.e., tracking the potential interests of users.
Insofar as we use cookies or “tracking” technologies, we will inform you separately in our privacy policy or in the context of obtaining consent. Before the consent has not been given, cookies are used at most, which are necessary for the operation of our online offer.
– Types of data processed: Usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
– Data subjects: Users (e.g., website visitors).
– Legal grounds: consent (Art. 6 para. 1 p. 1 lit. a DSGVO), legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).
7. Performance of tasks according to the articles of association
We process the data of our members, supporters, interested parties, contractual partners, the descendants or other persons (collectively “data subjects”) if we have a membership or other relationship with them and perform our tasks. In other respects, we process the data of data subjects on the basis of our legitimate interests, e.g. if it is a matter of statutory tasks, or on the basis of consent.
The data processed in this context, the type, scope and purpose and the necessity of its processing, are determined by the underlying membership or other relationship (e.g. successor position), which also determines the necessity of any data disclosures.
– Types of data processed: master data, payment data (e.g. bank details for membership fees), membership status.
– Data subjects: Users (e.g. website visitors), members and their relatives, business and contractual partners, descendants.
– Purposes of processing: pursuit of our statutory objectives, contractual performance and service, contact requests and communication, administration and response to inquiries.
– Legal bases: consent (Art. 6 para. 1 p. 1 lit. a DSGVO), contract performance and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b. DSGVO), legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).
8. Registration and login for the internal area
Users can create a user account. As part of the registration process, users are provided with the required mandatory data and processed for the purposes of providing the user account on the basis of contractual obligation fulfillment. The processed data includes in particular the login information (name, password as well as an e-mail address). The data entered during registration is used for the purposes of using the user account and its purpose.
Users may be informed by e-mail about events relevant to their user account, such as technical changes. If users have terminated their user account, their data with regard to the user account will be deleted, subject to any legal obligation to retain such data. It is the responsibility of users to back up their data upon termination before the end of the contract. We are entitled to irretrievably delete all user data stored during the term of the contract.
Within the scope of the use of our registration and login functions as well as the use of the user account, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests as well as those of the users in protection against misuse and other unauthorized use. As a matter of principle, this data is not passed on to third parties unless it is necessary for the pursuit of our claims or there is a legal obligation to do so.
– Types of data processed: master data, content data (e.g. text input, photographs, videos), meta/communication data (e.g. device information, IP addresses).
– Data Subjects: Users (e.g., website visitors).
– Purposes of processing: pursuit of our statutory objectives, contractual performance and service, security measures, administration and response to requests.
– Legal bases: consent (Art. 6 para. 1 p. 1 lit. a DSGVO), contract performance and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. DSGVO), legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).
9. Contacting and communication
When contacting us (e.g. via contact form), the information of the inquiring person is processed to the extent necessary to respond to the contact requests and any requested measures.
We send letters, e-mails and other electronic notifications (hereinafter “communication”) only with the consent of the recipients or on the basis of a legal permission. Communication may also take place by telephone.
– Types of data processed: master data, content data (e.g. text input, photographs, videos).
– Data subjects: Communication partners, essentially association members, their relatives and other descendants.
– Purposes of processing: contact requests and communication.
– Legal basis: consent (Art. 6 para. 1 p. 1 lit. a DSGVO), contract performance and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b. DSGVO), legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO), genealogy (Art. 9 para. 2 lit. j).
10. Provision of the online offer and web hosting
In order to provide our online offer securely and efficiently, we use the services of a web hosting provider, from whose servers (or servers managed by them) the online offer can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space and database services, as well as security services and technical maintenance services.
The data processed in the context of web hosting includes all data relating to the users of our website that is generated in the course of use and communication. This includes, for example, the IP address, which is necessary to deliver the content of online offers to browsers, and all entries made within our website.
E-mail dispatch and hosting: The web hosting services we use also include the dispatch, receipt and storage of e-mails. For these purposes, the addresses of the recipients and senders as well as further information regarding the e-mail dispatch (e.g. the providers involved) and the contents of the respective e-mails are processed. The aforementioned data may also be processed for spam detection purposes. Please note that e-mails are generally not sent encrypted on the Internet. As a rule, e-mails are encrypted in transit, but (unless a so-called end-to-end encryption method is used) not on the servers from which they are sent and received. Therefore, we cannot assume any responsibility for the transmission path of the e-mails between the sender and the reception on our server.
Collection of access data and log files: We ourselves (or our web hosting provider) collect data on each access to the server (“server log files”). The server log files include, for example, the address and name of the web pages and files accessed, the date and time of access, the volume of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider.
The server log files may be used, on the one hand, for security purposes, e.g., to prevent server overload (especially in the event of abusive attacks, so-called DDoS attacks) and, on the other hand, to ensure the utilization of the servers and their stability.
– Types of data processed: Content data (e.g. text input, photographs, videos), meta/communication data (e.g. device information, IP addresses).
– Data subjects: Users (e.g., website visitors).
– Legal grounds: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).
11. Deletion of data
The data processed by us will be deleted in accordance with the legal requirements as soon as their consents permitted for processing are revoked or other permissions cease to apply (e.g. if the purpose of processing this data has ceased to apply or it is not necessary for the purpose).
If the data are not deleted because they are required for other and legally permissible purposes, their processing will be limited to these purposes. I.e., the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law or whose storage is necessary for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person.
Further information on the deletion of personal data can also be found in the individual data protection notices of this privacy policy.
12. Photo and video recordings
In the course of our events, pictures are regularly taken. In the following, we inform you about the type and purpose of the image recordings, the legal basis and your rights.
The image recordings are used for the following purposes: Provision of the recordings to the participants; internal association use; use on our website; use in TriNa or other descendant purposes.
Retention Period of Image Recordings: Image recordings will be retained for as long as necessary for the aforementioned purposes.
Notes on image recordings by third parties: Image recordings may also be made by the participants of the event on their own responsibility. We ask the participants to show mutual consideration for their personal rights.
13. Rights of the persons concerned
As a data subject, you are entitled to various rights under the GDPR, which arise in particular from Articles 15 to 18 and 21 GDPR:
– Right of access to the personal data concerned (Art. 15 DSGVO):
– Right to rectification (Art. 16 DSGVO);
– Right to erasure (Art. 17 GDPR);
– Right to restriction of processing (Art. 18 DSGVO);
– Right to object to processing if the data processing is based on Art. 6(1)(e) or (f) DSGVO (Art. 21 DSGVO); see also the reference to the right to object under Art. 21 DSG-VO under Section III;
– Right to data portability (Art. 20 DSGVO);
– Right to revoke consent given at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation, if the data processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) DSGVO; and
– Right of appeal to a supervisory authority (Article 77 DSGVO).