1. Name and contact details of the person responsible

The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Hope for Children in Kenya e.V.

Andrea Hofmann

Marc-Aurel-Ring 13

61381 Friedrichsdorf

Germany

Telephone:

49 6172 737 838

Email:

info@hfc-kenya.de

3. Categories of personal data

Which categories of personal data are processed by Hope for Children in Kenya eV largely depends on the reason and the context in which contact or a contractual relationship with you arises or exists. A distinction must be made, for example, between (material) donors, interested parties, members and business partners according to the GDPR. As part of a (material) donation, membership, inquiry or other contract, Hope for Children in Kenya eV usually processes the following categories of data, depending on the specific relationship:

Salutation, surname, first name, address, contact details (telephone, e-mail), year/date of birth, photos; company name may also consist of surname, first name, address, contact details (telephone, e-mail), industry, focus, contact person *in the company with surname, first name, function, contact details (telephone, e-mail); payment transaction and order data (e.g. bank details/credit card data, payment orders), creditworthiness score (payment behavior with business partners); order history and sales at Business partners, donation history for donors; data in the context of conducting legal disputes (e.g. on those involved, legal representatives, courts); campaign participation and date (for petitions); data of the reporting party in possible case investigations as part of our protection concept against sexualized violence in the workplace. This can include the following data categories: address data, civil status data, possible special categories of personal data, description of the course of events.

If there is direct contact with you during donor or prospect support or a business relationship, further data, such as information about the contact channel, date, reason and result and copies of the correspondence will be processed.

4. Purposes of data processing and legal bases

Hope for Children in Kenya e (e.g. contact requests, information orders) with you in accordance with Art. 6 (1) b) GDPR. Your contact details will also be used for these purposes, for example in the context of specific information and queries.

Hope for Children in Kenya eV is also subject to various legal requirements (e.g. money laundering law, tax laws) and in this respect also processes your data on the basis of legal requirements according to Art. 6 (1) c) or in the public interest according to Art. 6 (1) e) DSGVO. The purposes of processing include, among others

the application and proof requirements in the context of donations from public authorities; the prevention of fraud and money laundering; the fulfillment of tax control and reporting obligations and examination requirements; the fulfillment of official and judicial instructions and orders; the assessment and control of risks at Hope for Children in Kenya eV; as well as the clarification of reports related to sexualized violence in the workplace.

If necessary, Hope for Children in Kenya eV will process your data as part of the balancing of interests according to Art. 6 (1) f) GDPR to protect the legitimate interests of Hope for Children in Kenya eV or third parties.

Among other things, the following data processing is based on the balancing of interests:

Measures for business management and further development of statutory tasks; Transmission of contact data between the responsible contact persons in Hope for Children in Kenya eV and the donors, members or business partners; Assertion of legal claims and defense in legal disputes; Guarantee of IT security and of IT operations at Hope for Children in Kenya eV; prevention of criminal offences; measures for building and system security (e.g. access controls); use of guest WLAN; data exchange with credit agencies to determine creditworthiness or default risks with business partners/ inside; contacts to media representatives for journalistic, editorial contact maintenance and press work.

In the context of contact inquiries and orders for information, processing is carried out in accordance with Art. 6 (1) f) GDPR. Your contact details will also be used for these purposes, for example in the context of specific information and queries.

Also as part of the balancing of interests according to Art. 6 (1) f) GDPR to protect the legitimate interests of Hope for Children in Kenya eV, your data will be processed, for example, on the basis of the donation relationship, a membership agreement, existing contracts or requests for needs-based, to your Interest-oriented information within the scope of the contractual purposes of Hope for Children in Kenya eVua according to the following provisions:

Postal (donation) advertising unless you have objected to this processing; You can object to this advertising use at any time with effect for the future using the above contact details (see Section 2) (see Section 10); have not objected to processing; You can object to this advertising use at any time with effect for the future using the above contact details (see Section 2) (see Section 10).

The balancing of interests according to Art. 6 Para.1 f) GDPR in conjunction with Section 23 Para.1 No. 3 KunstUrhG also forms the legal basis for the creation and use of photos and films made at Hope for Children in Kenya eV events. Hope for Children in Kenya eV processes the photo and film recordings for the purpose of reporting on the activities and is published in social media, the internet/website, press releases, newsletters and printed brochures. Hope for Children in Kenya eV has a legitimate interest in informing the public about its statutory goals, raising funds for development projects and campaign work. If there are special reasons why you should not be photographed or filmed, on which you may be recognizable, please contact the event management or the photographer/camera team on site.

Hope for Children in Kenya eV will not transmit your data to third parties for advertising purposes.

If you have given us your consent to process personal data for specific purposes, the legality of this processing is given on the basis of your consent in accordance with Art. 6 (1) a) GDPR. A given consent can be revoked at any time with effect for the future under the above contact details (see point 1.). Consent can be granted for, among other things

the sending of a Hope for Children in Kenya eV newsletter tailored to your interests with general content to your e-mail address; telephone advertising within the framework of the statutory purposes of Hope for Children in Kenya eV; the production and publication of photos/ Videos outside of reporting (see above) to advertise Hope for Children in Kenya eV and/or to support its press and public relations work, for example in print and online media (Internet) and in social networks (Facebook, WhatsApp, Twitter, Instagram, Xing, LinkedIn etc.); the exact purposes and possible third parties who also publish the photos/videos are described in the respective declaration of consent;

5. Recipients and categories of recipients of the data

Within Hope for Children in Kenya eV, only those departments that need your data to fulfill our contractual and legal obligations will have access to it. Service providers used by Hope for Children in Kenya eV can also receive data for these purposes if they are commissioned as processors in accordance with Art. 28 GDPR.

Possible recipients of personal data are, for example:

Cooperation partners with whom campaigns and projects (e.g. hands-on campaigns) are carried out online or using print products; public bodies and institutions (e.g. tax authorities, accident insurance institutions, Federal Central Tax Office) if there is a legal or official obligation; other credit and Financial service institutes; courts and legal representatives in the context of legal disputes; contract processors, e. Services, controlling, data screening in accordance with legal requirements, printing and sending personalized letters, sending e-mails, data destruction, auditing services and payment transactions; other data recipients on the basis of your consent.

To support the implementation of our statutory tasks, the exchange at the political level with organs, members, parliamentary groups or groups of the German Bundestag and vis-à-vis the federal government is of particular importance. For this reason, we have registered as a representative of interests within the meaning of Section 1 of the Lobby Register Act (LobbyRG), which will apply from January 1st, 2022, in the lobby register of the German Bundestag. According to Section 3 Paragraph 1 No. 7 LobbyRG, we are obliged to provide the following information on individual gifts from third parties (donations) in increments of EUR 10,000 each, provided an amount of EUR 20,000 or a total value of EUR 20,000 - related to a donor Donor - is exceeded in a calendar year to be sent to the lobby register:

Name, company or designation of the donor, place of residence or registered office of the donor, a brief description of the service.

If the donors (donors) are natural persons, the following data will not be published in the lobby register in accordance with Section 4 (2) sentence 2 LobbyRG:

the place of residence or registered office of the donor the maiden name and other first names of the donor.

The entries in the lobby register are published in machine-readable form and with a search function. The legal basis for the transmission of data to the lobby register is Art. 6 (1) c) GDPR in conjunction with Section 3 (1) No. 7 LobbyRG.

6. Transfer of data to a third country or an international organization

Data transfers to countries outside the EU or the EEA and (so-called third countries) only take place if this is necessary for the execution of your orders, is required by law (e.g. tax reporting obligations), you have given us your consent or as part of order data processing. If service providers are used in a third country for which there is no adequacy decision by the European Commission pursuant to Art. 45 (III) GDPR, they are obliged to comply with the data protection level in Europe in addition to written instructions through appropriate measures (e.g. agreement of the EU standard contractual clauses).

7. Data collection not directly from the data subject

To a small extent, Hope for Children does not collect company address data (e.g. company name, address, contact person, contact details) directly from the person concerned, e.g. B. for corporate donations on the basis of a balance of interests according to Art. 6. (1) f) GDPR from public directories (e.g. telephone/business directories, commercial registers), from generally accessible sources (e.g. Internet) or from address service providers. You can object to this advertising use at any time with effect for the future using the above contact details (see Section 1.) (see Section 10.1.).

In the context of recruiting new donors in relation to natural persons, we occasionally commission address service providers. The so-called letter shop process is used here. Hope for Children in Kenya eV does not receive the addresses of the address service provider, but the address service provider sends our donation advertising from its address database directly via a letter shop. Hope for Children in Kenya eV only gets knowledge of your data when you make a donation to Hope for Children in Kenya eV or order information material from Hope for Children in Kenya eV. Your data will then be processed in accordance with Art. 6 (1) b) or f) GDPR.

8. Duration of Data Storage

Hope for Children in Kenya e. If the data are no longer required for this purpose, they are regularly deleted, unless their - temporary - further processing is necessary, e.g. in a separate archive with restricted access authorizations, for the following purposes:

Fulfillment of retention periods under commercial and tax law (e.g. Commercial Code, Fiscal Code, Banking Act and Money Laundering Act with the periods specified there for storage or documentation for a period of two to ten years, e.g. for business letters, contracts, orders, invoices and donation receipts); Preservation of evidence for the period of 30 years according to § 197 BGB, e.g. in the context of legally established claims, claims from enforceable settlements or enforceable documents; Preservation of evidence for a period of 3 years according to § 195 BGB for verification purposes and any necessary clarification of judicial or extrajudicial claims (e.g. correspondence in the context of processing data subject rights).

storage of the data

The personal data relating to you will be stored until the purpose of the data processing no longer applies (usually after the end of the event) or after the expiry of statutory or official storage obligations.

9. Your data protection rights

As the person concerned, you have the following rights in principle and, provided that contractual and legal obligations do not conflict with this:

Right to information (Art. 15 GDPR) with the restrictions according to §§ 34, 35 BDSG nF; Right to correction of incorrect data (Art. 16 GDPR); Right to deletion (Art. 17 GDPR) with the restrictions according to §§ 34 , 35 BDSG nF;Right to restrict the processing of personal data (Article 18 GDPR);Right to data portability (Article 20 GDPR);Right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR)

rights of objection

There is an individual right to object (Article 21 (I) GDPR) for reasons that arise from your particular situation and relate to data processing in accordance with Article 6 (I) e) and Article 6 (I) f) GDPR a right to object to the processing of data for advertising purposes (Art. 21 (III) GDPR), the so-called advertising objection right. You can object to the use of your data for advertising purposes at any time with effect for the future using the above contact details (see Section 1.).

10. Obligation to Provide Data

As part of a contractual relationship (e.g. voluntary work agreement, other contracts), you must provide the personal data that is required for the establishment and implementation of a business relationship and the fulfillment of the associated contractual obligations or that we are legally obliged to collect. Without this data, we will generally have to refuse to conclude the contract or execute the order, or we will no longer be able to carry out an existing contract and may have to terminate it.