Privacy Policy

1. General Information

Protecting your personal data is important to us. This Privacy Policy explains which personal data are processed when you visit our website and use our services, the purposes for which this processing takes place, and the rights you have under the General Data Protection Regulation (GDPR).

Personal data are any information relating to an identified or identifiable natural person. Examples include a name, email address, IP address or payment details.

We process personal data only where there is a legal basis for doing so.

2. Controller

The controller responsible for data processing on this website is the responsible entity named in the Legal Notice.

The relevant contact details can be found in our Legal Notice.

3. Legal Bases for Processing

We process personal data in particular on the basis of the following provisions of the GDPR:

Article 6(1)(a) GDPR – Consent

If you give us your consent to a particular form of processing, the processing is carried out on this basis. Consent may be withdrawn at any time with effect for the future.

Article 6(1)(b) GDPR – Contract and pre-contractual measures

If processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract, it is carried out on this basis.

Article 6(1)(c) GDPR – Legal obligation

If we are required by law to process personal data, the processing is carried out on this basis.

Article 6(1)(f) GDPR – Legitimate interests

If processing is necessary to protect our legitimate interests or those of a third party and these interests are not overridden by the interests or fundamental rights of the data subject, processing may be carried out on this basis.

4. Storage Period

As a general rule, we store personal data only for as long as necessary for the relevant purpose of processing.

Where statutory retention periods apply, the relevant data are stored for the duration of those periods. Once the purpose of processing no longer applies or the statutory retention periods have expired, the data are deleted unless another legal basis permits their continued storage.

5. Your Rights

Subject to the statutory requirements, you have the following rights in particular:

Right of access pursuant to Article 15 GDPR

Right to rectification pursuant to Article 16 GDPR

Right to erasure pursuant to Article 17 GDPR

Right to restriction of processing pursuant to Article 18 GDPR

Right to data portability pursuant to Article 20 GDPR

Right to object pursuant to Article 21 GDPR

Right to withdraw consent pursuant to Article 7(3) GDPR

If you believe that the processing of your personal data infringes the GDPR, you also have the right to lodge a complaint with a data protection supervisory authority.

6. SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.

You can recognise an encrypted connection, among other things, by the fact that your browser’s address bar begins with “https://”.

Encryption generally prevents third parties from readily reading data that you transmit to us.

7. Hosting by dogado

Our website is hosted by dogado GmbH, Antonio-Segni-Straße 11, 44263 Dortmund, Germany.

When you access our website, technically necessary connection data are processed and stored in server log files. These data may include in particular:

the page or file accessed

the date and time of access

the amount of data transferred

the referrer URL

the browser used

the operating system used

the IP address of the device accessing the website

These data are processed in order to provide our website securely, reliably and without disruption, and to detect and analyse technical errors and potential attacks.

According to dogado, IP addresses in the web-hosting log files are anonymised after 24 hours; the log files are deleted after no more than seven days.

Processing is based on our legitimate interest in the secure and reliable operation of our website pursuant to Article 6(1)(f) GDPR.

Where dogado processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Article 28 GDPR. dogado provides an appropriate data processing agreement for this purpose.

Further information about data protection at dogado can be found here:

dogado Privacy Policy

8. Cookies and Technically Necessary Storage

Our website may use technically necessary cookies or comparable storage technologies.

Cookies are small files or pieces of information that can be stored on your device. Technically necessary cookies are used, for example, to provide basic website functions or to retain settings you have selected during a session.

Where the storage of or access to information on your device is strictly necessary in order to provide a digital service that you have expressly requested, this takes place within the framework of the applicable statutory provisions.

Where non-essential cookies or comparable technologies are used, this is generally done only after you have given your consent.

9. Contacting Us

If you contact us by email or by another means, we process the personal data you provide.

These may include in particular:

name

email address

other contact details

the content of your message

other information you provide voluntarily

The data are processed in order to handle and respond to your enquiry.

Where your enquiry is connected with a contract or pre-contractual measures, processing is based on Article 6(1)(b) GDPR.

For other enquiries, processing is based on our legitimate interest in appropriate communication and the handling of enquiries pursuant to Article 6(1)(f) GDPR.

10. Contact and Registration for Education Programs

If you contact us by email at bildung@juedische-woche-dresden.de, we process the personal data you provide, in particular your name, email address and any other information you share with us.

Processing is carried out in particular in order to:

answer general and organisational questions about visiting Jewish Week;

coordinate group visits and other education programs;

process enquiries and registrations for encounters organised as part of “Meet a Jew”; or

manage your registration for the online professional exchange and send you confirmation of registration, the access link and an event-related reminder.

Where your message concerns registration for an education program or the specific preparation of your participation, processing is based on Article 6(1)(b) GDPR.

General enquiries and the associated communication are processed on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in responding to your enquiry and in planning and delivering our education programs.

Please do not send us personal data relating to pupils or other participants unless this is necessary for organising the relevant program.

If you make an enquiry or register for “Meet a Jew”, the information required for contacting you and delivering the encounter may be passed on to the responsible project team at “Meet a Jew”, a project of the Central Council of Jews in Germany.

The information is passed on solely for the purposes of making contact and coordinating the date, location and delivery of the encounter. The relevant project organiser provides information, under its own responsibility, about any further processing carried out by the project team.

11. Newsletter via CleverReach

We use CleverReach to distribute our newsletter.

The provider is CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany.

When you subscribe to our newsletter, the data you provide during registration are processed. These include your email address in particular. If additional details are requested and you provide them, those data may also be processed.

Processing is carried out for the purpose of sending our newsletter and providing information about Jewish Week Dresden events, programs and other news.

Processing is based on your consent pursuant to Article 6(1)(a) GDPR.

A double opt-in procedure may be used to confirm your subscription. After subscribing, you will receive an email asking you to confirm your registration. As part of this procedure, the time of registration and confirmation and your IP address may be logged. This allows us to demonstrate that the registration was completed correctly.

CleverReach processes the data required for newsletter distribution on our behalf. Where CleverReach acts as a processor, processing is carried out on the basis of a data processing agreement pursuant to Article 28 GDPR.

Depending on the newsletter’s configuration, CleverReach may also process information about whether newsletters are opened and which links contained in them are clicked. This information may be used for statistical evaluation and to improve our newsletters. CleverReach also describes the measurement of opening and click behaviour in its privacy information.

You may withdraw your consent to receive our newsletter at any time with effect for the future. In particular, you can use the unsubscribe link at the end of our newsletters.

Further information about data protection at CleverReach can be found here:

CleverReach Privacy Policy

12. Video Conferences and Webinars via kMeet / Infomaniak

We use kMeet, a service provided by Infomaniak Network SA, based in Geneva, Switzerland, to conduct online events, video conferences and webinars.

When you participate in an event delivered via kMeet, personal data may be processed. These may include in particular:

your name or chosen display name

your IP address

technical information about your device and internet connection

any audio and video data you transmit

any chat messages and other content you provide within the video conference

Processing is carried out for the purpose of technically providing and delivering the relevant online event and enabling communication between participants.

Where you participate as part of an education program that you have requested or booked, processing is based on Article 6(1)(b) GDPR.

In all other cases, processing is based on our legitimate interest in delivering online events and communication services pursuant to Article 6(1)(f) GDPR.

Where consent is required for a specific form of processing, the legal basis is Article 6(1)(a) GDPR.

Further information about data protection at Infomaniak can be found here:

Infomaniak Data Protection Information

13. Donations via FundraisingBox

Our website gives you the option of supporting Jewish Week Dresden by making a donation.

We use FundraisingBox, a service provided by Wikando GmbH, for the technical provision and processing of donations.

If you make a donation, the personal data required to process and administer the donation are processed.

These may include in particular:

name

email address

postal address

donation amount

time of donation

chosen payment method

any other information you provide

Processing is carried out in order to process and administer your donation and, where necessary, to comply with statutory documentation, verification and retention obligations and to issue a donation receipt.

Where processing is necessary to carry out your donation, it is based on Article 6(1)(b) GDPR.

Where we are legally required to process or retain certain data, processing is based on Article 6(1)(c) GDPR.

Further information about data protection at FundraisingBox can be found here:

FundraisingBox Data Protection Information

14. Processing Payments for Donations

Various payment methods are available for making your donation.

Depending on the payment method you select, the data required to process the payment are processed and, where applicable, transmitted to the relevant payment service provider.

SEPA Direct Debit

If you select payment by SEPA direct debit, the data required to collect the direct debit are processed. These include in particular the account holder’s name and the necessary bank details.

Processing takes place solely for the purpose of making the payment you have initiated.

The legal basis is Article 6(1)(b) GDPR.

Credit Card Payments via Stripe

We use Stripe for credit card payments.

The provider for the European Economic Area is Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

If you select credit card payment, the data required to process the payment are transmitted to and processed by Stripe. These may include payment information, transaction data and technical data in particular.

Processing is carried out for the purpose of making the payment you have initiated and is based on Article 6(1)(b) GDPR.

Further information can be found here:

Stripe Privacy Policy

Apple Pay

If you select Apple Pay as your payment method, the payment is processed using Apple Pay.

The information required to process the payment may be processed by Apple and the payment service providers involved.

Processing is carried out for the purpose of making the payment you have initiated and is based on Article 6(1)(b) GDPR.

Further information about Apple’s processing of personal data can be found in Apple’s privacy information.

Apple Privacy Information

Google Pay

If you select Google Pay as your payment method, the payment is processed using Google Pay.

The information required to process the payment may be processed by Google and the payment service providers involved.

Processing is carried out for the purpose of making the payment you have initiated and is based on Article 6(1)(b) GDPR.

Further information about Google’s processing of personal data can be found in Google’s privacy information.

Google Privacy Policy

PayPal

If you select PayPal as your payment method, the data required to process the payment are transmitted to and processed by PayPal.

The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.

Processing is carried out for the purpose of making the payment you have initiated and is based on Article 6(1)(b) GDPR.

Further information can be found here:

PayPal Privacy Policy

15. Locally Hosted Fonts

We use fonts on our website that are stored locally on our own web server and served from there.

Loading these fonts therefore does not establish a connection to external font providers such as Google Fonts.

Consequently, providing the locally stored fonts does not transmit your IP address or other personal data to external font providers solely for the purpose of loading those fonts.

16. External Links

Our website contains links to external third-party websites and services.

When you follow such a link, you leave our website. A connection to the relevant external provider is established only when you click the link.

The respective operator is generally responsible for any subsequent processing of personal data on its website. Please therefore refer to the privacy information provided there.

17. Currency of and Amendments to this Privacy Policy

We reserve the right to amend this Privacy Policy if the services we use, the legal requirements or the nature of data processing change.

The current version published on this website applies.