Privacy policy of elan e.V. regarding the processing of personal data on the website.
This privacy policy informs users (data subjects) of the website https://www.elan-ev.de
(the Service) about the nature, scope, and purposes of the processing of personal data by elan e.V., in accordance with the applicable provisions of the GDPR and other data protection laws in force in Germany. In addition, this privacy policy informs users of the rights to which they are entitled.
General information
1.1 Controller
The controller within the meaning of the EU General Data Protection Regulation (GDPR) and other data protection laws applicable in Germany is:
elan e.V.
Karlstraße 23
26123 Oldenburg
Germany
Tel.: +49 4 41 99 86 66 10
Email: office@elan-ev.de
Website: https://elan-ev.de
1.2 Personal data
Personal data is any information relating to an identified or identifiable natural person. Examples include name, address, e-mail address, telephone number, IP address and log files, as well as photographs of individuals.
1.3 Data subject
A data subject is any identified or identifiable natural person whose personal data is processed by the controller.
1.4 Processing
Processing refers to any operation or set of operations performed on personal data, whether or not by automated means, such as collecting, recording, organising, structuring, storing, adapting or altering, retrieving, consulting, using, disclosing by transmission, dissemination, or otherwise making available, aligning or combining, restricting, erasing, or destroying data.
1.5 Third
A natural or legal person, authority, institution, or other body, other than the data subject, the controller, the processor, and the persons authorised to process personal data under the direct authority of the controller or processor.
1.6 Anonymisation
The alteration of personal data in such a way that it can no longer be attributed to an individual.
2. Information on specific processing activities2.1 Access data / server log files
For technical reasons, the following data, among others, transmitted to us by your internet browser, is recorded (so-called server log files):
- Browser type and version
- Operating system used
- Website from which you visit us (referrer URL)
- Website you visit
- Date and time of your access
- IP address (masked)
When using this general data and information, elan e.V. does not draw any conclusions about the data subject. This general data is necessary for the proper provision of the service. It is stored exclusively for our own security purposes (e.g., identification of DoS attacks) and to provide law enforcement authorities with the information required for prosecution in the event of a cyberattack, for a maximum period of 7 days. The data processing is carried out in accordance with Art. 6(1)(f) GDPR and §§ 21, 22, 23, 24 TDDDG.
2.2 Contact details
Users have the option to contact elan e.V. via e-mail. In this case, the information provided by the user – name and e-mail address – is stored for the purpose of handling their inquiry. No transfer to third parties takes place. The personal data collected in this way is not matched with any personal data that may be collected through other components of the service. The data processing is carried out in accordance with Art. 6(1)(b) and (f) GDPR.
2.3 Cookies
The websites of elan e.V. use only technically necessary cookies. The data processing is carried out in accordance with Art. 6(1)(f) GDPR and § 25(2) No. 2 TDDDG. Cookies are small text files that the user’s own internet browser stores on the user’s device. They are used to optimise the website and its services. These are mostly so-called “session cookies,” which are deleted again at the end of the website visit.
In some cases, however, these cookies provide information to automatically recognise users. This recognition is based on the anonymised IP address stored in the cookies. The information obtained in this way is used to optimise our services and to make it easier for users to access our website.
Users can prevent the installation of cookies by adjusting the settings of their browser accordingly. However, please note that in this case, you may not be able to use all the functions of the website in full.
2.4 Matomo
Use of web analytics tools
This service uses Matomo, an open-source software for the statistical analysis of user access, in order to determine users’ interest in the individual information offerings of elan e.V. The use of the web analytics tool is anonymised, meaning that no personal data is processed. The use of cookies in the Matomo software is disabled.
When storing the user’s IP address, the last two octets are not processed. The collection of the user ID is disabled. In addition to page access and the anonymised IP address, the following data is also analysed:
- Date and time of the request
- Page title of the accessed page
- URL of the previously visited page (referrer URL)
- Screen resolution of the client system
- Local time zone
- URL of clicked and downloaded files
- URL of clicked external domains
- Geolocation of the client (country, region, city)
- Primary language of the browser used
- User agent of the browser used
The data processing is carried out in accordance with Art. 6(1)(f) GDPR.
If users do not agree to the storage and analysis of this data during their visit, they can object to the storage and use at any time by clicking the link below. An opt-out cookie will then be placed in their browser, which means that Matomo will no longer collect any data about their visit. If cookies are deleted in the browser settings, this may also delete the Matomo opt-out cookie, which may need to be reactivated. The privacy policy of Matomo can be accessed at:
https://matomo.org/privacy-policy/3. Routine deletion and blocking of personal data
elan e.V. collects, processes, and stores personal data of the data subject only for as long as is necessary to achieve the purpose of storage, or as required by the GDPR or other national laws or regulations to which the controller is subject. Once the purpose of storage no longer applies, or a storage period prescribed by the GDPR or other national laws expires, the personal data is routinely blocked or deleted in accordance with legal requirements.
4. Notice of the rights of data subjects
Under Art. 15 GDPR, data subjects have the right to obtain, free of charge, information on whether personal data concerning them is being processed and, if so, what personal data is involved. In principle, a copy of the data may be requested, provided that no legal exemption applies. If the data is incomplete or inaccurate, there is a right to rectification in accordance with Art. 16 GDPR.
Other rights of the data subject include:
Art. 17 GDPR: Deletion of one’s own personal data if a deletion ground specified therein applies.
Art. 18 GDPR: Restriction of the processing of personal data if a reason specified therein applies.
Art. 20 GDPR: Transfer of one’s own personal data to another provider if the processing is based on consent or a contract.
Art. 21 GDPR: For reasons of a particular personal situation, the right to object to otherwise lawful processing of personal data may exist.
Art. 22 GDPR: Grants specific rights to data subjects regarding automated individual decision-making, including profiling. Automated decisions, including profiling, do not take place.
Art. 77 GDPR: Data subjects have the right to lodge a complaint with the supervisory authority listed below if they believe that the processing of their personal data violates the GDPR.
The State Commissioner for Data Protection Lower Saxony
Prinzenstraße 5
30159 Hannover
Telefon: +49 511 120-4500
Telefax: +49 511 120-4599
E-Mail: poststelle@lfd.niedersachsen.de
As of: 29 May 2024
