1. Extent and purpose of processing of personal data; Legal basis for processing
When you visit our website, our servers temporarily store all access operations in a log file. The following data is acquired automatically and stored for three months:
- The IP address of the requesting computer (pseudonymized)
- Date and time of access
- The name and URL of the file called
- The website from which the access originated
- The operating system of your computer and the browser you are using
- The country and the name of your internet access provider
This data is processed to enable the use of our website (connection establishment), to permanently ensure system security and stability and to enable the optimisation of our internet-based services as well as for internal statistical purposes. The IP address will be used only in the case of attacks on the network infrastructure of www.donortracker.org, for statistical purposes and to assert or defend against legal claims. The processing of this data takes place on the basis of our legitimate interest (art. 6 (1) sent. 1 lit. f GDPR).
For the purpose of registration and creating a customer account for your company by you as an authorised staff responsible the truthful provision of the following data is compulsory:
- First name, surname
We require this data to allow to process and administer our website, to check the input data for plausibility, i.e. to establish structure in terms of content, process and amend the contractual relationship we enter into with you. Via your user customer account you can receive and collect the required content (art. 6 (1) sent. 1 lit. b GDPR). You may delete your customer account at any time. The data will then be deleted accordingly.
When you communicate with us by e-mail, we collect the following personal data:
- Any information you choose to provide, which may include personal data
We process this data for the purpose of answering your request (art. 6 (1) sent. 1 lit. b GDPR). This information is necessary in order to perform the contract between you and us. The data will be deleted within 6 months after answering the request if it is no longer needed, unless statutory requirements oblige us to keep the data.
2. Subscription for our News-Update-Service
If you create an account and accordingly sign up for our Weekly Digest and/or newsletter on this website you will get a confirmation e-mail in order to activate your account.
We process and store your e-mail address in order to send you the newsletter and/or the Weekly Digest regarding our services based on the performance of this contractual relationship (art. 6 (1) sent. 1 lit. b GDPR). You may unsubscribe the newsletter and/or the Weekly Digest at any time. To do so, you may unsubscribe from the Weekly Digest and/or the newsletter in the preferences of your account or unsubscribe using the link at the end of the newsletter. We will then delete your data accordingly.
3. Disclosure to third parties
We work with several third parties that act on our behalf and are subject to our instructions. Among these are, for example, service providers which host our website and our newsletter service. All disclosures to such service providers are safeguarded by executing the required agreements under applicable law. If you want to get more information about our service providers, please contact us at the above contact details.
We will not disclose your personal data to other third parties unless there is a statutory obligation to do so or you gave us your permission before or if disclosure is necessary for the assertion of our rights.
Cookies help in many ways to make your visit to our website easier, more pleasant and more practical. The processing of this data takes place on the basis of our legitimate interest (art. 6 (1) sent. 1 lit. f GDPR). We have a legitimate interest in enhancing the usability of our website, which is also in your interest. Cookies are alphanumerical information files which your web browser automatically stores on your computer's hard disc when you visit our website. Cookies do not damage your computer's hard disc.
Deactivation of cookies may have the result that you cannot use all the functions of our website.
5. Tracking tools
We use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”), to collect information about the use of this site. Google Analytics collects information such as how often our users visit this website, what content pages they visit when they do so, and events such as downloads and button clicks. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. Google will use this information in order to evaluate your use of the website, to compile reports on website activities and to provide other services relating to website and internet use to us.
The legal basis for the data processing is art. 6 (1) sent. 1 lit. f GDPR. We have a legitimate interest in analysing user behaviour in order to optimize both our website and our advertising. The legal basis for transferring personal data to Google is art. 28 GDPR in connection with the data processing agreement we concluded with Google.
We have activated the IP-anonymisation within the Google Analytics service, and your IP address will be truncated within the area of Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases the whole IP address will be first transferred to a Google server in the USA and truncated there. The IP-address your Browser conveys within the scope of Google Analytics will not be associated with any other data held by Google.
6. International data transfer
We do not transfer your personal data to countries outside of the European Economic Area (“EEA”).
In case our service providers transfer your personal data outside the EEA to countries, where the data protection level might be lower than the one in your country and no adequacy decision of the European Commission is in place, we have implemented suitable safeguards to keep the standard of processing equivalently high. The service provider has agreed to the “Standard Contractual Clauses (SCC)”. You can access a copy of the SCC here: .
7. Your rights regarding your personal data
You may at any time request information about your personal data that we have stored or access and correct it by logging in to our website with your log-in data. You may also delete or correct your data or profile in your custom account. You may do this by sending the relevant request via email with proof of your identity.
You have the right to:
- Data Access and Portability: You may be entitled to request copies of your personal information held by us. You may also be entitled to request copies of personal information you have provided to us in machine-readable format.
- Change or Correct Data: You have the right to ask us to correct change, update or rectify your data.
- Data Retention and Deletion: We only retain data for as long as necessary to fulfil the purpose set out above. You have the right to ask us to delete all or some of the personal data we hold about you.
- Restriction of Processing: Under certain circumstances, you may have the right to limit the ways in which we use your personal information.
- Withdrawing Consent: Where you provide consent to the processing of your personal information by us, you may withdraw your consent at any time. Please note that the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal.
Right to object:
If you object to such processing we will no longer process your personal information for these purposes unless we can demonstrate compelling legitimate grounds for such processing or such processing is required for the establishment, exercise or defence of legal claims or obligations.
In addition to these listed rights, you have the right to lodge complaints about the data processing activities carried out by us before a competent data protection authority.
8. Data retention and storage periods
If your data is deleted, it will no longer be possible to use some or all of our services.
Please note that by law certain kinds of data must be kept for a certain period of time. Such data must be stored by us until these periods run out. We block this data in our system and use it only in order to fulfil statutory requirements.
If you have any questions about data privacy on our website, wish to request information or wish to request the deletion of your data, please contact:
As of July 2018