Privacy policy
In accordance with the General Data Protection Regulation (hereinafter referred to as the GDPR), we are obliged to inform you about the processing of your data when you use our website. This privacy policy informs you about the details of the processing of your data and about your legal rights in this regard.
We reserve the right to adapt the privacy policy with future effect, in particular in the event of further development of the website, the use of new technologies or changes to the legal bases or the corresponding case law.
Responsible Provider
Anna Cardillo
Wilhelmshavener Straße 65
10551 Berlin
info@changes.berlin
+49 30 61621044
Use of the website, access data
In principle, you can use our website for purely informational purposes without disclosing your identity. When you access the individual pages of the website in this sense, this only results in access data being transferred to our web hosting service so that the website can be displayed to you. This is the following data:
browser type/browser version,
operating system used,
language and version of the browser software,
hostname of the accessing device,
IP address,
website from which the request comes,
content of the request (specific page),
date and time of the server request,
access status/HTTP status code,
referrer URL (website visited before),
volume of data transferred,
time zone difference from Greenwich Mean Time (GMT).
Temporary processing of the IP address by the system is necessary to make it technically possible to deliver the website to your device. This requires processing of your IP address for the duration of the session. The legal basis of such processing is Art. 6(1) Sentence 1(f) GDPR.
The access data is not used to identify individual users and is not combined with other data sources. The access data is deleted when it is no longer required for achieving the purpose of its processing. In the case of recording the data to provide the website, this is the case when you end your visit to the website.
IP addresses are stored in log files to ensure the functionality of the website. In addition, the data serves us to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes takes place in this context either. In principle, data is deleted after seven days at the latest; further processing is possible in individual cases. In this case, the IP address is deleted or so transformed that an assignment of the retrieving client is no longer possible.
The recording of data for the provision of the website and the processing of data in log files is an absolute necessity for the operation of the website. You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). You can send us your objection to the contact data provided under ‘Responsible provider’. In the event that your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legitimate reasons on the basis of which we will continue processing.
Cookies
We do not use cookies or similar technologies.
Hosting
We use external hosting services for the provision of the following services: infrastructure and platform services, computing capacity, storage resources and database services, security and technical maintenance services. This involves processing all data necessary for the operation and use of our website. We use external hosting services by Strato AG, Berlin, to run this website. We have a Data Processing Agreement with Strato. By using external hosting services, we aim to make the provision of our website efficient and secure. The legal basis of the processing is Art. 6(1) Sentence 1(f) GDPR.
The recording of data for the provision and use of the website and the processing of data using external web hosting services is an absolute necessity for the operation of the website. You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). You can send us your objection to the contact data provided under ‘Responsible provider’. In the event that your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legitimate reasons on the basis of which we will continue processing.
Contacting us
When contacting us, e.g. by email, we will process the personal data provided by you so that we can respond to your enquiry. At the moment when you submit the message to us, the following data will also be processed:
IP address,
date/time of registration,
name,
first name.
The legal basis of the processing is Art. 6(1) Sentence 1(f) GDPR and Art. 6(1) Sentence 1(b) GDPR, if the contact is made with the intention of concluding a contract. If it is necessary to enter your data in order to conclude a contract, it may be impossible to conclude or execute the contract or to process the request if the data is not made available.
Processing the personal data from the form allows us alone to process the contact you make with us. Where you contact us by email, this also constitutes the necessary legitimate interest in the processing of the data.
The data will not be transmitted to third parties in this context. The data is only processed in order to process the conversation. As soon as processing is no longer necessary, we delete the data generated in this context or, if statutory retention obligations apply, restrict processing of the data.
You have the possibility to object to the processing of your personal data for contact requests at any time. You can send us your objection to the contact data provided under ‘Responsible provider’. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). In particular, you have a right of objection if processing is not necessary to fulfil a contract with you, which is described by us in the previous description of the functions. In such a case, it may not be possible to continue processing the request. In the event that your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legitimate reasons on the basis of which we will continue processing.
Processing and transmission of personal data for contractual purposes
We process your personal data if and to the extent necessary for the initiation, creation, execution and/or termination of a legal transaction with us. The legal basis from this results from Art. 6(1) Sentence 1(b) GDPR. If the data processing is necessary for the conclusion of a contract, the conclusion of the contract, the execution and/or the termination of a legal transaction with our company may be impossible if the data is not made available.
Once the purpose has been achieved (e.g. contract processing), the personal data will be blocked for further processing or erased, unless we are entitled to retain the data for a longer period and process it as required in the respective context on the basis of a consent granted by you (e.g. consent to the processing of your email address for sending promotional emails), a contractual agreement, a statutory authorisation (e.g. authorisation to send direct advertising) or on the basis of justified interests (e.g. retention for asserting claims).
Your personal data will be passed on if
Your personal data will not be transmitted to other persons, companies or bodies unless you have effectively consented to such transmission. The legal basis of the processing is then Art. 6(1) Sentence 1(a) GDPR.
Security
We have taken comprehensive technical and organisational precautions to protect your personal data from unauthorised access, abuse, loss and other external disruption. To this end, we regularly review our security measures and adapt them to current standards.
Your rights
You have the following rights with regard to the personal data concerning you that you can assert against us:
right of access (Art. 15 GDPR),
right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR),
right to restriction of processing (Art. 18 GDPR),
right to object to processing (Art. 21 GDPR),
right to withdraw your consent (Art. 7(3) GDPR),
right to receive the data in a structured, commonly used, machine-readable format (“data portability”) and the right to transfer the data to another controller, if the prerequisites of Art. 20(1) (a), (b) GDPR are fulfilled (Art. 20 GDPR).
You can assert your rights by informing us using the contact details specified above under ‘Responsible provider’.
You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR).
April, 2023