Responsible for the data processing as controller in terms of data protection law is:

Volksbund Deutsche Kriegsgräberfürsorge e.V.
Sonnenallee 1
34266 Niestetal 

If you have any questions regarding data protection, you can contact us at + 49 (0) 561-7009-0 or info@volksbund.de or directly contact our data protection officer at datenschutzbeauftragter@volksbund.de. Further contact details for the data protection officer can be found at www.dsb-moers.de. 
 

The purposes of the data processing by the Volksbund Deutsche Kriegsgräberfürsorge e.V. are the provision of services, the performance of contracts, the provision of information about the services of the association and the presentation of the activities of the association through public relations. 
Moreover, personal data are processed on the basis of one of the following legal bases:
•    Art. 6 (1) a GDPR for the processing of personal data with the consent of the data subject.
•    Art. 6 (1) b GDPR for the necessary processing of personal data for the performance of a contract with the data subject as well as for the implementation of corresponding pre-contractual measures.
•    Art. 6 (1) c GDPR for the necessary processing of personal data to comply with a legal obligation to which we are subject under any applicable law of the EU or under any applicable law of a country in which the GDPR fully applies or only in part.
•    Art. 6 (1) f GDPR for the necessary processing of personal data in order to protect the legitimate interests of us or of third parties, unless the fundamental freedoms and rights and interests of the data subject prevail. Legitimate interests are in particular to inform about the work of the association and to be able to fulfil our tasks in the war graves welfare in the best possible way.
For this purpose, we use service companies separately obligated to secrecy and data protection within the scope of service provision. Data is only passed on to public authorities in the case of violating legal provisions. A transfer of data to third countries will only take place if the conditions from the provisions in Art. 44 et seq. GDPR apply.

When visiting our website, personal data are only processed to such extent required to ensure the technological feasability. However, if a data subject wants to use special services provided by us via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we will obtain the consent of the data subject. 
Our website collects a number of general data and information of the website visitor with each individual visit. These general data and information are stored in the log files of the website server. The legal basis for the data processing is Art. 6 (1) f GDPR. The following can be recorded 
•    browser types and versions used, 
•    the operating system used by the accessing system, 
•    the website from which an accessing system arrives at our website (so-called referrer), 
•    the sub-websites which are accessed via an accessing system on our website, 
•    the date and time of access to the website, 
•    an Internet Protocol (IP) address, 
•    the Internet service provider of the accessing system and 
•    other similar data and information that serve to avert danger in the event of attacks on our information technology systems.
When using these general data and information, the Volksbund does not draw any conclusions about the data subject. Rather, this information is needed to deliver the contents of our website correctly, to optimize advertising for content, to ensure the long-term functionality of our systems and the technology of our website, as well as to provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack. 
The anonymous data of the server log files are stored separately from any personal data provided by a data subject. A merge of the stored data with other data sources does not take place.

Contact form
If you write to us via a contact form, your data from the form will be processed to handle your request. The legal basis for the transmission to us is consent in accordance with Art. 6 (1) a GDPR. You can revoke your consent at any time with effect for the future. The data will then be deleted. If no retention obligation arises from your request (e.g. in the case of an order), the data will be deleted after three years. Your data will be forwarded internally to the responsible contact person for processing your request. Your data will not be passed on to third parties without your permission.

Cookies
This website uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website will be used to evaluate your visit to the website and to improve the information we provide. 
Before? cookies not necessary for the operation of the website are applied, we ask for your consent in advance; the legal basis for the data processing is Art. 6 (1) a GDPR (consent).
If the use of cookies is necessary for the functionality of the website, we use cookies on the basis of our legitimate interests. The legal basis for the data processing is then Art. 6 (1) f   GDPR (legitimate interests). The cookies will be deleted after two years at the latest. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full features of this website. The data collection is anonymized; the collected data cannot be related to your person.

Data processing on our website requiring consent

Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The legal basis for this processing is your consent according to Art. 6 (1) a GDPR. 
Google Analytics also uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. It is not excluded that the information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. The transmission of personal data to the USA was judged by the ECJ to be fundamentally unsafe without further security measures, as it cannot be ruled out that US security authorities may gain access to this data. IP anonymisation is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. A data transfer to the USA only takes place if the requirements of Art. 44 ff. GDPR are fulfilled. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The user data will be deleted after 14 months. 
You can revoke your consent at any time with effect for the future and prevent the use of data by Google by downloading and activating the available browser plug-in: tools.google.com/dlpage/gaoptout;
You can also prevent the storage of cookies by selecting the appropriate settings in your browser software; however, please note that if you do this you may not be able to use the full functionality of this website.
For more information about Google's privacy practices, please visit policies.google.com/privacy.

Google Maps
This website uses Google Maps, a service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The legal basis for this processing is your consent according to Art. 6 (1) a GDPR. 
At least the IP address, URL (internet address) of our website and date/time of use are transmitted to Google. It is not excluded that this information is transmitted to a Google server in the USA. The transmission of personal data to the USA was judged by the ECJ to be fundamentally unsafe without further security measures, as it cannot be ruled out that US security authorities will gain access to this data. A data transfer to the USA only takes place if the requirements of Art. 44 et seqq. GDPR are fulfilled.
We have a data protection agreement with Google, which regulates the joint responsibility for data processing in accordance with Art. 26 GDPR (https://privacy.google.com/intl/de/businesses/mapscontrollerterms). You as a visitor enter a direct user relationship with Google when using Google Maps. You can find more information on this in Google's detailed privacy policy (https://www.google.com/policies/privacy).

Use of YouTube
We use YouTube, a service of Google Ireland Ltd, Gordon House, 4 Barrow St, Dublin, Ireland, for embedding videos. The legal basis for the data processing is your consent according to Art. 6 (1) lit. a GDPR.
It cannot be ruled out that this information will be transferred to a Google server in the USA. The transmission of personal data to the USA was termed by the ECJ to be fundamentally unsafe as long as no further measures should be taken since it cannot be ruled out that US security authorities will gain access to this data. A data transfer to the USA only takes place if the requirements of Art. 44 et seqq. GDPR are fulfilled. When using the service, YouTube's terms of use apply (https://www.youtube.com/static?gl=DE&template=terms&hl=de ). Information on data protection when using this service can be found in Google's detailed privacy policy (https://www.google.com/policies/privacy). 
 

In the case of the “Gräbersuche-Online“ (Grave Search Online) service, your personal data will be processed by us within the framework of the information provided by you via the online form for the purpose of processing the order. As far as necessary for the processing of the grave search, the data will be transmitted to the following institutions:

Deutsches Rotes Kreuz
Suchdienst München
Chiemgaustr. 109
81549 München
Tel.: 089 - 68 07 73 - 0
Fax: 089 - 68 07 45 92
www.drk-suchdienst.de

Bundesarchiv, Abteilung PA
(Personal information in the context of the First and Second World War)
Eichborndamm 179
13403 Berlin
Tel.: 030 - 41904 440
Fax: 030 - 41904-100
E-Mail: poststelle-pa@bundesarchiv.de
www.bundesarchiv.de

We also use the data you provide via the Gräbersuche-Online (Graves Search Online) to contact you for updates around the work of the Volksbund by e-mail or post. This is done on the basis of our legitimate interest in accordance with Art. 6 (1) f GDPR to present the activities and tasks of the War Graves you can object to be contacted at any time ie in writing or by telephone.
 

In the context of an application process, data processing takes place exclusively for the purpose of initiating employment relationships on the basis of § 26 German data protection law. Your data will be stored for the duration of the application process; if you enter into an employment relationship with us, your application data will be stored by us for the duration of your employment relationship. If we do not accept your application after the application process has been completed, we will store your data for further 6 months in accordance with the law and then delete it. In the case of unsolicited applications or after your consent, your data will be stored for a possible future employment until your revocation, but for a maximum of two years.

On the basis of contractual relations or our legitimate interest, we address already known persons as well as potential new contacts with information about the association's activities in writing. Our legitimate interest is to inform about the development of our tasks for war graves and peace work. Among other things the way to the grave search, fate clarification of the missing war-deads and the family support is to be made possible thereby. Since our achievements are financed to a large extent by donations, we inform in the direct mail also about the possibilities of giving a donation to the association. 
If you no longer wish to be contacted by post, you can object at any time by writing to info@volksbund.de or by calling + 49 (0) 561-7009-0. You can also use this method to send an objection on behalf of a deceased family member of whose death we have not received any information.
 

For the processing of your donation (and creation of donation receipts) we only collect the necessary data such as name and address, email address, if applicable, payment method and period as well as bank data. The legal basis for this is Art. 6 (1) b GDPR (donation contract).
Your personal data will only be processed by members of the association. A transmission of your data to authorities will only take place in case of overriding legal regulations. 
Your data will be stored for as long as it is necessary for the respective task fulfilment and documentation obligations, taking into account the statutory retention periods. As a rule, this is ten years (Art. 17 (3) b GDPR, § 147 para. 3 AO).
In addition to the conventional bank transfer, other payment methods are available to you for processing payments in the context of donations.

When paying with PayPal, you will be redirected to the pages of PayPal via a link. For the use of this service PayPal collects, stores and processes your personal data such as your name, address, telephone number and email address as well as your credit card or bank account data. We do not receive your account data and are only informed about the successful payment. PayPal is solely responsible for the protection and handling of the data collected by PayPal. The PayPal terms of use and privacy policy apply which you can access at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

If you donate by credit card, your credit card data is sent exclusively via SSL encryption to the web payment frontend of the company Micropayment, where the correctness of the card data is checked with the respective credit card company and creditworthiness and validity are verified. We do not receive your credit card data and are only informed about the successful payment.

The purpose of the processing of personal data of members, prospective members and sponsors is the establishment and implementation of membership and sponsorship, the fulfillment of the purpose of the association, the processing of orders, information about the work of the association, the invitation and implementation of events and customer service for members and sponsors. The basis for this is the membership contract or the sponsorship relationship or the initiation of contractual relationships pursuant to Art. 6 (1) b GDPR.
If we should process data of you beyond that, then only on basis of your consent in accordance with Art. 6 (1) a GDPR.

Insofar as third parties provide support with the fulfilment of orders, this is done on the basis of data protection agreements in order to maintain confidentiality.
 

In order to fulfil our tasks in the care of war graves, the search for missing soldiers and the clarification of the fate of war victims, we get into contact with family members and relatives of the missing persons in order to establish connections and to contribute to the clarification of past events. In doing so, we actively approach relatives or receive search requests directly from relatives of the missing. If you contact us by e-mail, we will only process your personal data if there is a legitimate interest in the processing (Art. 6 (1) f GDPR), you have consented to the data processing (Art. 6 (1) a GDPR), the processing is necessary for the initiation, establishment, performance, content or amendment of a legal relationship between you and us (Art. 6 (1) b GDPR) or another legal basis exists.
The personal data used within the framework of the fulfilment of our order are processed for the fulfilment of the order. The origin of the data may result from a request to residents' registration offices and from the Federal Archives. The purpose of this data exchange is also to establish contact with the relatives of the missing persons. 
In the performance of our tasks, it is possible to process data from third parties who are not direct relatives of the missing persons, but whose data must be processed in the context of the processing of the order.

If you decide to participate in our workcamps, we will process your data for the preparations and implementation of the events. This applies in particular to your information on health, nutrition and emergency contacts as part of the registration for the youth education events and workcamps. We collect this data exclusively in order to be able to provide you with the best possible support in the projects. If personal data is processed on the basis of consent, you have the right to revoke your consent at any time with effect for the future.
During our events, photos and/or film recordings are made, which can also be used for public relations (homepage, brochures, press, Facebook, Instagram, etc.). Publication will only take place if the person depicted has expressly consented.
 

A Joint Controllership Agreement has been entered into with Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) which you can access here:
https://www.facebook.com/legal/terms/dataprocessing
https://www.facebook.com/legal/terms/page_controller_addendum

Facebook Ltd. assumes primary responsibility under the EU General Data Protection Regulation (GDPR). You can find Facebook's privacy policy here: https://www.facebook.com/privacy/explanation

The purpose of data processing on our fan page is to provide information about our services, combined with the possibility for users to interact with us in a targeted manner. The legal basis for the data processing is Art. 6 (1) f GDPR. Our legitimate interest is in particular to share information with our users and to be able to communicate with them.
If we publish images of individuals, this is done via consent (legal basis: Art. 6 (1) a GDPR), on the basis of a contractual agreement (legal basis: Art. 6 (1) b GDPR) and in exceptional cases on the basis of legitimate interests (legal basis: Art. 6 (1) f GDPR in conjunction with § 23 (1) no. 3 Art Copyright Act.

It is not excluded that data of the users are processed on systems outside the European Union. A data transfer to third countries only takes place if the requirements of Art. 44 et seq. GDPR are fulfilled.
 

The purpose of data processing on our Twitter site is to provide information about services and news about the association's work, combined with the possibility for users to interact with us in a targeted manner. The legal basis for data processing is Art. 6 (1) lit. f GDPR. Our legitimate interest is in particular to share information with visitors and to be able to communicate with them. 

Twitter is a service operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103 U.S.A.. We have no influence on the type and scope of the data processed by Twitter Inc. or the transfer of data to third parties. Furthermore, we have no means of control.
In this context, we would like to point out that you use the services provided by Twitter Inc. and all associated functions (e.g. sharing and rating content) on your own responsibility. Information about the data processing carried out by Twitter Inc. and the corresponding purposes pursued can be found in the data protection declaration of Twitter Inc. You can find Twitter's privacy policy here: https://twitter.com/de/privacy 

If we process data on Twitter, this data is not collected via our Twitter account. A transfer of data to Twitter, such as IP addresses, due to the embedding of tweets on homepages or similar does not take place.
However, we may retweet tweets from you, reply to tweets from you or write tweets that refer to you or your Twitter account. In this respect, your public data on Twitter may be made available to followers of our site.
 

Instagram is a service provided by Facebook Ireland Ltd. A Joint Controllership Agreement has been entered into with Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), which you can access here:
https://www.facebook.com/legal/terms/dataprocessing
https://www.facebook.com/legal/terms/page_controller_addendum

Facebook Ltd. assumes primary responsibility under the EU General Data Protection Regulation (GDPR).
Instagram's privacy policy can be found here: https://help.instagram.com/155833707900388/?helpref=hc_fnav&bc[0]=Instagram-Help&bc[1]=Privacy%20and%20Security%20Area.

The purpose of data processing on our Instagram presence is to provide information about our services, combined with the possibility for visitors to interact with us in a targeted manner. The legal basis for data processing is Art. 6 (1) lit. f GDPR. Our legitimate interest is in particular to share information with our users and to be able to communicate with them.

If we publish images of individuals, this is done via consent (legal basis: Art. 6 (1) a GDPR), on the basis of a contractual agreement (legal basis: Art. 6 (1) b GDPR) and in exceptional cases on the basis of legitimate interests (legal basis: Art. 6 (1) f GDPR in conjunction with § 23 (1) no. 3 Art Copyright Act. 

We process personal data only as long as it is necessary to achieve the purpose. If the processing purpose ceases to apply, we retain the data until expiry of the statutory retention periods and then delete it. 

Of course, you have the right to request information (Art. 15 GDPR) about the data we have stored about you. Likewise, you have the right to rectification (Art. 16 GDPR) of inaccurate data, blocking and deletion (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) and a right to object to the processing of data (Art. 21 GDPR). 
Consent to the processing of personal data can be revoked at any time with effect for the future. This can be done by notifying the Volksbund Deutsche Kriegsgräberfürsorge e. V., Sonnenallee 1, 34266 Niestetal or by e-mail to info@volksbund.de. 

Should you wish to lodge a complaint regarding the processing of your data, you always have the option of contacting us directly by telephone + 49 (0) 561-7009-0 or by email at info@volksbund.de. Alternatively, you can contact our data protection officer directly via datenschutzbeauftragter@volksbund.de or file a complaint with a data protection supervisory authority.

Without correct information from you, the use of our services and the execution of contractual agreements is not possible. Therefore, you have the obligation to provide us with correct information within the scope of your knowledge.

This statement is current as of April 19, 2021. The privacy information is reviewed and developed on a regular basis. The current version of our data protection information is available at: https://www.volksbund.de/datenschutz