Privacy Policy

The person responsible for data processing is:

New Roots e.V. Oettingenstr. 33a80538 MünchenEmail: kontakt@new-roots.de

We appreciate your interest in our website. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

Access data and hosting

You can visit our website without providing any personal information. Each time you access a website, the web server automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data), and documents the access. This access data is evaluated solely for the purpose of ensuring trouble-free operation of the website and improving our offering. This serves to safeguard our legitimate interests in a correct presentation of our offering, which prevail within the framework of a balancing of interests, in accordance with Art. 6 (1) (f) GDPR. All access data is deleted no later than seven days after your visit to the website.

The services for hosting and displaying the website are partially provided by our service providers as part of processing on our behalf. Unless otherwise stated in this privacy policy, all access data and all data collected in forms provided for this purpose on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact options described in this privacy policy. Our service providers are located in the USA. There is no adequacy decision from the European Commission for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission.

Scope

This privacy policy applies to all websites, applications, and services of New Roots e.V. This privacy policy also applies to the association's activities that are not related to the Internet.

What personal data do we collect?

We collect personal data from you when you sponsor a project, make a donation, or become a member of our association. We also collect personal data when you visit our website new-roots.de.

Some of this personal data, e.g. data that allows us to identify you, is necessary in order to be able to use your donations in accordance with the association's purpose.

The provision of all personal data is voluntary, but may be necessary to certify suitable donations and to establish contact with the people supported by the association.

Personal data that you submit in connection with membership in the association or support through donations:

• Data that identifies you, such as name, address, telephone number, email address
• Telephone number and date of birth are voluntary information
• We will save your address information to send you an annual donation receipt. If you do not wish to receive a donation receipt, please let us know.
• Information about your request, such as desired support, amount of donation, etc.
• Data for processing the donation, such as account number
• Data on the type of membership/sponsorship

Personal data automatically stored by the application:

• Registered on, Last online, Pages visited

Personal data that we collect manually or automatically when you contact the supported persons through us

• Names
• Email Address
• Telephone number

We also use your data for billing purposes and to document donations in accordance with legal and statutory requirements. In addition, we store necessary data to the extent required by law.

We also use your data to send you further information about the association's activities, such as newsletters or letters from the association or the sponsored children.

Relevant legal bases

In accordance with Art. 13 GDPR, we inform you of the legal basis for our data processing. If the legal basis is not explicitly stated in the privacy policy, the following applies:

• The legal basis for obtaining consent is Art. 6 (1) (a) and Art. 7 GDPR,
• The legal basis for processing to fulfil our services and carry out contractual measures as well as answering inquiries is Art. 6 (1) (b) GDPR,
• The legal basis for processing to fulfil our legal obligations is Art. 6 (1) (c) GDPR and
• The legal basis for processing to protect our legitimate interests is Art. 6 (1) (f) GDPR.
• Should vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) (d) GDPR serves as the legal basis.
• 
  

How we use your personal data

We use your personal data for different purposes and in accordance with different legal bases, which we describe in more detail below.

We store some of your information on a web-based database to:

• to be able to assign all payments to your name and to issue you with a tax-deductible donation receipt at the end of the year
• to be able to assign information about your sponsored child

We use your personal data to record donations, issue donation receipts, and provide information about recipients. Furthermore, it serves to fulfill legal obligations.

As long as we need this data for the placement or if legal requirements require us to do so, we also store and use data for the following purpose:

• To fulfill the association's purpose and the proper receipt and use of donations as well as their allocation to the recipient (sponsored child, project).
• Contact to express interest in sponsorship or to inform and, if necessary, deposit a sponsorship profile
• Sponsorship requests
• Desired recipient (sponsored child, project, association, emergency fund)
• If you have consented to the processing of your data:
• Sending sponsorship proposals
• Sending appeals for donations
• Sending a newsletter by email containing all the latest news from the association or project.
• Sending letters to godchildren
• Sending club mail
• For legally required purposes:
• To respond to requests from government or law enforcement agencies conducting an investigation.
• To meet legal, regulatory and compliance requirements

We store your data in our software. This data is used exclusively by us and not for any purposes other than those described above and the association's purposes and associated billing processes.

Protection of your personal information

The transmission of information over the internet is not completely secure. We cannot guarantee the complete security of your data, although we will do our best to protect it. Any transmission is at your own risk. Once we receive your personal information, we will implement strict security measures and procedures with respect to that data.

The association's board hereby points out that sufficient technical measures have been taken to ensure data protection. However, comprehensive data protection cannot be guaranteed when publishing personal data online. Therefore, the sponsor acknowledges the risks of a potential violation of personal rights and is aware that:

• the personal data can also be accessed in countries that do not have data protection regulations comparable to those in the Federal Republic of Germany,
• the confidentiality, integrity (inviolability), authenticity (genuineness) and availability of personal data is not guaranteed.

Disclosure of personal information to third parties

Sponsorship lists will be distributed in digital or printed form to board members, employees, and members whose function or specific responsibilities within the association require them to have access to this information. This data will not be used for any other purpose.

The letters from the sponsors are distributed to the children on-site. Our local school administration is given the sponsor's first and last name (no address or other information) so that the mail can be addressed to you. If you do not agree, the mail will be addressed to "Dear Sponsor."

Your personal information may be shared with third parties selected by us, including in the following circumstances:

• We host our websites on WordPress. When you submit data to us, your data is processed on the web server and transmitted to us.

The hosting provider has also adhered to strict confidentiality regulations, and we will not share your data with anyone else. No other parties will have access to the database, and your data will not be shared with anyone else.

We will also disclose your data to authorities and other third parties, including but not limited to law enforcement agencies, due to legal requirements or obligations, in accordance with court orders, and to the extent required or permitted by law.

Your rights regarding your personal information

With regard to your personal information stored by us, you can assert the following rights against us:

• The right to information about data concerning you (Art. 15 GDPR) and
• The right to a copy of your personal information (Art. 15 GDPR)
• The right to rectification/completion (Art. 16 GDPR),
• Deletion (Art. 17 GDPR) or restriction (Art. 18 GDPR) of the processing of your personal information,
• The right to receive your personal data that you have provided to us under a contract or based on your consent in a structured and machine-readable format and the right to have us transmit this data to another organization at your request (Art. 20 GDPR).
• Your rights regarding your personal information are limited in some cases. This may be the case, for example, if fulfilling your request would involve disclosing another person's personal information, or if we have a legal obligation or compelling legitimate ground to continue processing the data you have requested us to delete.

Right of withdrawal

• You have the right to revoke consent given in accordance with Art. 7 (3) GDPR with effect for the future

Right of objection

• You may object to the future processing of your data at any time in accordance with Art. 21 GDPR. In particular, you may object to processing for direct marketing purposes.

If you believe that your personal information has been misused, you may also have the right to file a complaint. In these cases, we ask you to contact us first; however, if you have the right to complain, you also have the right to contact the competent supervisory authority in the state of North Rhine-Westphalia directly (Article 77 GDPR).

If you wish to exercise any of the above rights, please contact us. Please note, however, that we will not provide a copy or breakdown of your personal data without first verifying your identity.

storage

We will retain your personal information for as long as necessary to fulfill the purposes set out in this Privacy Policy, as otherwise communicated to you, or as permitted by applicable law.

The data we process will be deleted or restricted in accordance with Articles 17 and 18 of the GDPR. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and there are no statutory retention periods that prevent deletion. If the data is not deleted because it is required for other legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.

After the sponsorship(s) have ended, all data will be deleted from our system by March 31 of the following year at the latest, after the donation receipts have been sent.

Our cookie policy

Like other commercial websites and apps, our platform uses standard software applications such as cookies and similar tools, such as web server logs, web beacons, tokens, pixel tags, local storage, device identifiers and tracking IDs (collectively referred to in this Privacy Policy as "cookies") for the purposes listed below.

Please note that third parties may collect and process data from cookies placed on the platform. The privacy practices of these third parties are not covered by this Privacy Policy. We encourage you to read the privacy policies of these third parties. If you prefer not to have your data collected by these third parties, you should use their opt-out options, where available.

Why do we use cookies?

We do not use cookies to track your behavior on the website, such as navigation and your interests. We also do not use cookies for targeted advertising.

However, we reserve the right to temporarily use cookies to conduct functionality analyses, particularly for troubleshooting, but limit these to the analysis period and purpose.

Compelling necessity/transaction purposes

The use of cookies for this purpose is essential for the proper functioning of our website. Cookies may be required to enable you to move around our website and use its features, as well as for system administration and to prevent fraudulent activity. These cookies cannot be disabled, as our website, particularly the members' area and photo gallery, cannot function properly without them.

Functional purposes

The use of cookies for these purposes allows us to improve and facilitate your user experience. The cookies set for these purposes can, for example, save the country from which you visit our platform or your preferences such as language or search parameters (e.g. date, region or treatment) and help identify problems with our platform (e.g. crashes). This knowledge makes it possible to offer you an improved experience tailored to your individual needs. The information these cookies collect can, where appropriate, identify you personally, e.g. in the case of your login data. The cookies cannot track your browsing activities on other websites or applications outside the platform. We may use cookies for this purpose on a case-by-case basis.

Examples:

Location – Remembers where you just tried an action if an error occurred.

Collection of access data and log files

We, or rather our hosting provider, collect data about every access to the server on which this service is located (so-called server log files) based on our legitimate interests within the meaning of Art. 6 (1) (f) GDPR. This access data includes the name of the accessed website, the file, the date and time of access, the amount of data transferred, the notification of successful access, the browser type and version, the user's operating system, the referrer URL (the previously visited page), the IP address, and the requesting provider.

Log file information is stored for security reasons (e.g., to investigate misuse or fraud) for a maximum of 7 days and then deleted. Data that needs to be retained for evidentiary purposes is exempt from deletion until the respective incident has been finally resolved.

Donations via Paypal

If you donate via PayPal, payment processing is carried out by the online payment service provider PayPal (Pay Pal Europe S.à rl et Cie, SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg), which processes your personal data such as your first and last name, address, email address, donation amount, IP address, payment notes, device information, and geographical information. PayPal applies the highest standards of information security when managing customer information. PayPal's applicable privacy policy can be found at www.paypal.com/de/webapps/mpp/ua/privacy-full.

After submitting the donation form, you will be redirected directly to the PayPal website, where you can complete your donation. We do not receive your account information and are only notified of successful payment.

Your data will be transmitted to PayPal on the basis of Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing to fulfill a contract). The purpose of processing the data is to process the donation.

Your personal data will be deleted upon revocation, unless there are statutory retention requirements to the contrary. Where such requirements exist, the data will initially be blocked for further use and deleted after the retention period has expired.

You have the right at any time to obtain free information about your stored personal data, its origin and recipient, and the purpose of data processing, as well as the right to correct, block, or delete this data. Please address your data protection concerns regarding payments with PayPal via the following link: https://www.paypal.com/de/selfhelp/contact/email/privacy

Protecting

Empowering

Conservating