Data Protection

Data Protection Declaration of the DJH-LVB Rheinland e.V.

The Deutsche Jugendherbergswerk ( DJH) takes the protection of personal data really seriously. We like to let you know, which personal data we are collecting and storing while using our internet presence and how we are processing them. We adopted technical and organizational measures, which are ensuring that the legal regulations on data protection are being minded by us as well as by external service providers.

The regard of current data protection law is subject to a permanent verification by our data protection commissioner.

We are processing data, which we are receiving directly from you in the framework of our business relationship. We are processing this data in accordance with the data protection clauses, especially the “Europäische Datenschutz-Grundverordnung“ ( DSGVO) and the Bundesdatenschutzgesetz ( BDSG).

Following, we like to inform you about the dealings with your data according to article 13 DSGVO.

 

Person in charge

Deutsches Jugendherbergswerk, Landesverband Rheinland e.V., Düsseldorfer Strasse 1a, 40545 Düsseldorf, service@djh-rheinland.de

 

Personal data

Personal data is the entire information, which refers to an identified or identifiable corporate entity ( following mentioned as “concerned person“); a concerned person is considered as identifiable, which can be identified  - direct or indirect- especially by allocation to an identification such as a name, an identification number, to location-data, to an online-identification ( for example Cookies), or to one or several characteristics, which are an expression of the physical, physiological, genetic, psychic, economic, cultural or social identity of this concerned person. Information, which can`t be directly associated with the real identity ( such as, for example, dwell time on the website or number of users of the website) is not included. Personal data is collected for example with the application or in the forum. The collection of personal data is also necessary for example with the booking of overnight stays and travels or orders in the online-shop. The transfer of the data takes place through a saved connection.

1. Visit of our website

1.1 Storage of the IP-adress

We are storing the IP-adress, transmitted by your webbrowser, strictly for a specific purpose for a period of seven days, in the interest of recognising, limiting and eliminating offences on our website. After the expiration of this period, we will delete respectively anonymise the IP-adress. Legal basis is article 6 subparagraph 1 lit. F DSGVO.

1.2 Usage data

If you are visiting our websites, temporarily so-called usage data ( “Cookies“) will be stored for statistic purposes as a protocol, to increase the quality of our websites. This dataset consists of

-the site, from which the file was requested

-the name of the file

-date and time of the detection

-the transferred data size

-the access-status ( file transferred, file not found)

-the description of the type of used webbrowser

-the IP-adress of the enquiring computer, which will be shortened in a way, that a personal connection is no longer producible.

The mentioned protocol data is stored just anonymised.

1.3 Data transfer to third parties

The DJH Landesverband Rheinland e.V. is transmitting your data in the framework of an order-processing according to article 28 DSGVO, to service providers, which are supporting us with the running of our websites and the hereby linked processes. Our service providers are strictly bound by instructions towards us and respectively contractual obliged.

The following service providers are appointed by the Landesverband Rheinland e.V.

-DJH Rechenzentrum ( Hosting, Detmold)

-Agnitas ( EMM Newsletter, München)

-Google ( Google Analytics)

-Kasse9 ( Newsletter, Essen)

As far as we are legally or by court decision obliged, we will pass data on to information-entitled sites.

1.4 Data transfer in third countries

We will partly transfer personal data to a third country outside the EU. Hereby, we have each time taken care of an appropriate data protection level: in the case of Google ( USA), an appropriate data protection level takes place due to a respective participation at the Privacy-Shield-Agreement ( article 45 subparagraph 1 DSGVO).

1.5 Cookies

Cookies are small data packets, which are usually not bigger than 1 kilobyte. They content information, with which the web-server is able to recognise the visitor ( pc) at the next visit or on the following sites. To recognise the user at the next visit, the Cookie has to be stored from your browser on the local hard disk. The rest of the Cookies of our website are just applied for one time; are not stored on the hard disk and will be deleted with the break of the browser. These Cookies are needed for example with the diverse search requests. On linked sites, Cookies are possibly deployed without a suggestion from us. Most of the browsers  are installed in a way, that Cookies are accepted automatically. Nevertheless you are able to deactivate the setting of Cookies, or to install your browser in a way, that you`ll be notified as soon as Cookies are sent.

1.6  Application of Google Analytics

For the need-based configuration of our website, we are generating pseudonym usage-profiles with the help of Google Analytics for the purpose of increasing the quality of our websites. Google Analytics uses so-called Cookies, means text-files, which will be stored on your computer and enabling the analysis of the usage by you. The information generated  by the Cookie about the usage of this website, is usually transmitted to a server from Google in the USA and be stored there. As we activated the anonymisation on this website, your IP-adress is yet shortened from Google within the membership states of the EU or in other contractual states of the agreement on the European Economic Area. Just in exceptional cases the entire IP-adress will be transmitted to a server of Google in the USA and be shortened there. Google will use this information to evaluate your utilization of this website for us; to assemble reports about the website activities and to generate further services, linked with the website-utilization and the internet usage, towards us.

You can object the generation of the pseudonym usage-profiles anytime. Herefore there are several opportunities:

1.) One possibility to object the web-analysis by Google is to set an Opt-Out-Cookie, which will instruct Google not to use or store your data for the purpose of a web-analysis. Please notice, that with this solution the web-analysis will not take place just as long as the Opt-Out-Cookie is stored by the browser. If you want to set the Opt-Out-Cookie now, please click HERE

2.) You can also prevent the storage of the Cookies, used for the profiling, by a respective option of your browser software.

3.) According to the browser used by you, you have the opportunity to install a browser-plugin which will prevent the tracking. Therefore please click HERE and install the downloadable browser-plugin.

1.7 Contact Form

To answer your enquiry in a respective way, we are processing your data,collected through the contact form, according to article 6 subparagraph 1 lit. F DSGVO. Our justified interest exists primarily therein, to enable a fast and uncomplicated approach and to process your enquiry; mid-termed as well in the initiation of a contractual relationship. Especially included by the data processing are: company, club, institution, membership-number ( if at hand), title, name, adress, phone, E-mail.

Basically, the data is stored up to 6 months after the final processing of your enquiry. In the case of the existing of a duty to preserve records, the concerned data is archived for the length of these periods and is blocked for the generally access, if it is no longer needed for the contractual performance.

We are processing your name and adress according to article 6 subparagraph 1 lit. F DSGVO, to inform you by post about new offers. Our justified interest lies in the increasing of the utilization of the offered travels, programmes and courses.

1.8 Social Media Plugins

For reasons of the data protection, we are not integrating social plugins directly into our webpresence. Therefore, no data is transmitted to social-media services such as Facebook, Twitter, XING or Google+  if you are viewing our sites. A profiling by third parties is therefore excluded.

Nevertheless, you have the opportunity to share choosed sites with a click on Facebook, Twitter, XING or Google+ and will see already with the invocation of these inputs, how often they were shared in the past. Herefore we are using the so-called Shariff-solution, which was developed by the c`t magazine to offer a data protection conform alternative to the classical social-plugins.

What`s behind it? The Shariff-solution causes, that with the first step all of the data and functions, which are necessary for the depiction of Facebook, Twitter, XING or Google+ buttons, will be provided by our webserver. Just when you decide to share an input by the respective button and to click on it, the data transmission to the provider of the respective social media service will take place.

With a click on the button you will confer the compliance for the data processing towards the social media service, according to article 6 subparagraph 1 S.1 lit. A DSGVO. The data processing is legal up to a possible revocation.

1.9 Live-Chat

On this website, a live-chat-software is operated with the help of the technologies of the Userlike UG ( www.userlike.com). The legal basis herefore is article 6 subparagraph 1 lit. F DSGVO. The DJH Rhineland has the justified interest to get in contact with its members and to answer questions fast and uncomplicated. Userlike uses Cookies, which are stored on your computer and are enabling a personal conversation in the form of a realtime-chat on the website. If you decide to use Userlike, the chat-history inclusively the site-history will be collected, processed and stored in Germany by Userlike. Furthermore, location-based information is collected through your IP-adress. A linkage of the collected data with possible registration data will just take place, if you will inform us voluntarily, for example in the framework of the communication in the live-chat. The same takes effect for your other personal data.  You can extract details on the usage of your data by Userlike, as well as on your rights and setting opportunities for the safety of your data, from the data protection notification of Userlike : www.userlike.de/privacy_policy. You can object the processing anytime.

1.10 Newsletter

The DJH Landesverband Rheinland offers the opportunity to order an E-mail Newsletter. As far as you have conferred a separate compliance, that we can inform you by E-mail about products and services of the DJH, a respective processing according to article 6 subparagraph 1 lit. A DSGVO will take place. You can disconfirm your compliance anytime, without affecting the legitimacy of the so far ensued processing. If the compliance will be disconfirmed, we will stop the respective data processing.

Please direct your revocation to DJH Landesverband Rheinland e.V., Düsseldorfer Strasse 1a, 40545 Düsseldorf, phone: 0211 30263026, E-mail: service@djh-rheinland.de

1.11Technical Standards-Saved Transfer

At the data transfer, we are using the so-called SSL-security system, usually combined with a 256-bit-codification. This technique offers highest safety and is therefore – for example- used by banks for data security with online-banking. You can recognise, that the data is transmitted coded by a closed depiction of a key- respectively lock  symbol in the lower status bar.

At alterations, our measures are permanently adjusted to the state of art. Nevertheless, we like to point out that data protection for the data transfer inside the internet cannot – due to the current state of art- be guaranteed comprehensively.

2. Membership

Precondition for the admittance to a youth hostel is always the membership at the Deutsche Jugendherbergswerk or at another society of the International Youth Hostel Federation ( IYHF).

With the membership application we are gathering the following information:

-prename, surname

-gender respectively title

-adress

-date of birth

-valid E-mail adress

-phone number ( landline or cell phone)

With the family membership also the name and the date of birth of the partner as well as of the children up to 26 years are gathered, if they should be admitted into the family membership costless.

The census takes place,

-to identify you as a member of the Deutsche Jugendherbergswerk ( for example for the invoice of the subscription)

-to fulfil our contractual obligations ( for example issue of the international valid membership card)

-for the correspondence with you ( for example invitation to the general meeting)

-the gathering of the date of birth results from the fact, that subscriptions and overnight stay prices are age-dependent ( junior-membership, 27+ membership, children`s rebates, 27+surcharge).

The membership data is stored in a central database at the DJH-Hauptverband, Leonardo-da-Vinci-weg 1, 32760 Detmold.

3. Booking Enquiry and Booking

Related to the booking of overnight stay- and catering achievements as well as flat rate programmes, we are gathering the following information:

-title, prename, surname

-valid E-mail adress

-adress

-phone number ( landline or cell phone)

-information which is necessary for the contractual processing

The gathering of this data takes place,

-to identify you as our contractual partner

-to fulfil our contractual obligations

-for the correspondence with you

-for the invoice

-for the processing of possibly present liability claims as well as the enforcement of possible demands towards you.

According to article 6 subparagraph 1 S.1 lit. b DSGVO, the data processing takes place due to your enquiry, and is necessary for the mentioned purposes for the appropriate processing, especially for the bilateral fulfilment of obligations from the contractual relationship.

The gathered personal data by us is stored up to the expiration of the duty to preserve records, and be deleted afterwards; if we are not bounded – according to article 6 subparagraph 1 S.1 lit. C DSGVO- to longer fiscal- or commercial law duties to preserve records and duties of documentation  ( from HGB, StGB, or AO); or if you have consented in addition to it, to a storage according to article 6 subparagraph 1 S.1 lit a DSGVO.

4. Online Feedback System

We are asking our guests at an overnight stay in our youth hostels, if they are willing to give us a short online-feedback on their stay onetime after their departure. Therefore, we are processing your name and E-mail adress according to article 6 subparagraph 1 lit. A DSGVO. You can disconfirm your consent at the participation anytime ( for example by an E-mail to servive@djh-rheinland.de or by mail to DJH Landesverband Rheinland e.V., Düsseldorfer Strasse 1a, 40545 Düsseldorf). If the consent will be disconfirmed, we will shut down the respective data processing. Due to the consent, the legitimacy of the processing up to the disconfirmation of the consent is not affected. Naturally, just anonymous feedback data and no personal data  will be published on our website.

5. Your rights

Concerned persons do have – according to the respective regulations of the DSGVO- the right to information on the themselves concerning personal data, as well as the right of correction of uncorrect data or the deletion ( article 16, 17). Furthermore, it exists the right of limitation of the processing ( article 18) and in the cases of article 20 DSGVO, the right of data portability.

5.1 Rights for persons concerned 

You have the right:

-according to article 7, subparagraph 3 DSGVO, to disconfirm your once confered consent towards us anytime. This results in, that the data processing, just caused by this consent, is no longer allowed for us to be continued,

-according to article 15 DSGVO, to claim information about your personal data processed by us,

-according to article16 DSGVO, to claim immediately the correction of uncorrect data or the completion of your personal data stored from us,

-according to article 17 DSGVO, to claim the deletion of your personal data stored from us, as far as the processing is not necessary due to the right of freedom of expression and information; to fulfil a legal obligation; for reasons of the public interest or for the enforcement, exercise or defense of titles,

-according to article 18 DSGVO, to claim the limitation of the processing of your personal data, as far as the correctness of the data is contested by you; the processing is illegal but you are refusing to delete the data and we don`t need them anymore; nevertheless you need the data for the enforcement, exercise or defense of titles; or you have entered an objection against the processing according to article 21 DSGVO,

-according to article 20 DSGVO, to claim to receive your personal data, provided from you for us,  in a  structured, current and machine-parsable way or to claim the transmission to another person in charge,

-according to article 77, to complain at a controlling authority. 

5.2 Right of Objection

If data is collected on the basis of article 6 subparagraph 1 lit. F ( data processing for the protection of justified interests), the concerned person appertains to enter an objection against the processing anytime. We will then no longer process the personal data, unless provable compelling, worth beeing protected reasons are existing for the processing, which will outweigh the interests, rights and liberties of the concerned persons; or the processing serves the enforcement, exercise or defense of titles.

If personal data is processed for direct advertising, you have the right to enter an objection against the processing of the yourself concerning personal data for the purpose of such advertising anytime.

5.3 Right of Complaint at a controlling authority

Every concerned person has the right of complaint at a controlling authority, if he/she considers, that the processing of the concerned data offences data protection juridical clauses. The right of complaint can especially be claimed at a controlling authority in the membership state of the residence of the concerned person or the place of the presumed offence.

In NRW this is the regional commissioner for data protection in Nordrhein-Westfalen:

Kavalleriestraße 2-4, 40213 Düsseldorf.

6. Contact Information of the data protection commissioner

You can reach our data protection commissioner at:

datenschutz süd GmbH

Wörthstr. 15

97082 Würzburg

E-mail: office@datenschutz-sued.de

 

Data Protection Declaration for our social media sites

Following, we like to inform you about the dealings with your data according to article 13 ( Datenschutzgrundverordnung) DSGVO.

Person In Charge

We, the DJH Landesverband Rheinland e.V., are operating the following social media sites:

-Twitter: ( https://www.twitter.com/DJHRheinland )

 

-Facebook: ( https://www.facebook.com/jugendherbergen.rheinland )

 

-YouTube: ( https://www.youtube.com/user/DJHLVBRheinland )

 

-Instagram: ( https://www.instagram.com/jugendherbergen_im_rheinland )

 

You will find our contact information in the site notice.

Beside us, there is the provider of the social media platform himself. Also this one is a person in charge insofar, as he implements a data processing on which we have only a limited influence. At those places, where we are able to influence and to parameterise the data processing, we will work towards the data protection conform dealings of the provider of the social media platform in the  frame work of our possibilities. But at many places we are not able to influence the data processing by the provider of the social media platform and don`t know exactly, which data he is processing. Certainly, the operator will elucidate about this in his respective data protection declaration.

Data processing by us

The on our social media sites entered data from you, such as comments, videos, pics, likes, public news etc., will be published through the social media platform and will not be used or processed from us for other purposes anytime. We solely reserve to delete topics, as far as this is necessary. Possibly we will share your topics on our site, if this is a function of the social media site and will communicate with you through the social media platform. Legal basis is article 6 subparagraph 1 S.1 lit. F DSGVO. The data processing takes place due to the interest of our public relation and communication.

If you like to object a data processing on which we have an influence, please direct towards the contact information mentioned in the site notice. We will than proof your objection or pass it on to the social media platform if required.

As far as you place an enquiry on the social media platform, we will – according to the necessary answer- possibly point to other, safe communication channels which are guaranteeing confidentiality. You always have the opportunity to send us confidential enquiries to our adress mentioned in the site notice.

As already explained, we will take care at those places, where the provider of the social media platform gives us the opportunity to, of configuring our social media sites possibly data protection conform. Therefore, we are especially not using the demographic, interest-based, behaviour-based or located-based target groups definitions for advertising, which the provider of the social media platform might give us at hand. Entirely, we are not using the social media platform for advertising purposes. With regard to statistics, which are at disposal for us by the provider of the social media platform, we can only influence them in a limited way and are not able to shut them down.

Nevertheless we are taking care, that no additional optional stats are provided.

Data processing by the provider of the social media platform

The provider of the social media platform applies webtracking methods. The webtracking can also take place independently from your signing in or registration. As already explained, unfortunately we can barely influence the webtracking methods of the social media platform. For example, we are not able to shut them down.

Please be aware: it can`t be excluded that the provider of the social media platform uses your profile- and behaviour data, for example to evaluate your habits, personal relationships, preferences etc. Insofar, we can`t influence the processing of your data by the provider of the social media platform.

You can find details on the data processing by the provider of the social media platform and further opportunities for objection in the data protection declaration of the provider:

-Twitter: twitter.com/de/privacy

-Facebook: www.facebook.com/privacy/explanation

-YouTube: policies.google.com/privacy

-Instagram: help.instagram.com/519522125107875

In those cases, in which we are responsible for the processing together with the social media platform, you will find the significant contents of the common processing here:

- Facebook:https://www.facebook.com/legal/terms/page_controller_addendum

Your rights as a user

With the processing of your personal data, the DSGVO confers particular rights for you as a website user:

1.) Right to Information ( article 15 DSGVO):

You have the right , to claim a confirmation if yourself concerning personal data is processed; if this is the case, you have the right to information about these personal data and about the in article 15 DSGVO separately listed information.

2.) Right of Correction and Deletion ( article 16 and 17 DSGVO):

You have the right to claim immediately the correction of yourself concerning uncorrect data and possibly the completion of uncomplete personal data.

Additionally you have the right to claim, that yourself concerning personal data has to be deleted immediately, as far as one of the in article 17 DSGVO in detail listed reasons are pertaining; for example, if the data is no longer needed for the pursued purposes.

3.) Right of Limitation of the Processing  ( article 18 DSGVO):

You have the right to claim the limitation of the processing, if one of the in article 18 DSGVO listed reasons are existing, for example, if you have entered an objection against the processing, for the length of a possible verification.

4.) Right of Data Portability ( article 20 DSGVO):

In particular cases, listed in article 20 DSGVO, you have the right to receive the yourself concerning personal data in a structured, current and machine-parsable form, respectively to claim the transmission of this data to a third party.

5.) Right of Objection ( article 21 DSGVO):

If data is gathered on the basis of article 6 subparagraph 1 lit. F ( data processing for the protection of justified interests), you have the right – due to reasons taking place cause of your particular situation- to enter an objection against the processing anytime. We will then no longer process the personal data; if not provable, compelling worth being protected reasons are existing for the processing, which will outweigh the interests, rights and liberties of the concerned person; or the processing serves the enforcement, exercise or defense of titles.

Right of Complaint at a controlling authority

According to article 77 DSGVO, you have the right to complain at a controlling authority, if you consider that the processing of the yourself concerning data is in violation of data protection regulations. The right of complaint can be claimed especially at a controlling authority in the membershipstate of your residence, your working place or the place of the presumed offence.