- 1. Who is responsible for the processing of my data?
- 2. What data is recorded?
- 3. What cookies are used?
- 4. What data is recorded for what purposes?
- 4.1 Technical provision of the website
- 4.2 E-mail and telephone contact
- 4.3 Newsletter
- 4.4. Data processing within the context of charitable giving/donations
- 4.5. Web-tracking
- 5. Iframes by betterplace.org on websites other than betterplace.org
- 6. Facebook Login (Facebook Connect)
- 7. Google reCAPTCHA
- 8. Who will receive my data?
- 9. Use of payment service providers
- 10. Will my data be processed outside the EU or the EEA (third country transfer)?
- 11. What data privacy rights do I have?
- 12. From what source does the data stem?
- 13. To what extent does an automated decision-making process exist?
- 14. Is profiling carried out?
- 15. Conclusion/details of version
1. Who is responsible for the processing of my data?
gut.org non-profit stock corporation
Schlesische Straße 26
Telephone: +49 30 7676 4488 0
Telefax: +49 30 7676 4488 40
(hereinafter referred to as “betterplace.org”) is responsible for the processing of your data on this website. betterplace.org processes personal data in accordance with the provisions of the GDPR and the New Federal Data Protection Act (hereinafter referred to as “BDSG-neu”).
You can contact the data protection officer of betterplace.org at the above-mentioned postal address, with the addition “To the data protection officer” or at the e-mail address: firstname.lastname@example.org.
2. What data is recorded?
When you visit the website, the accessing computer automatically collects information (hereinafter referred to as “access data”). This access data includes server log files, which usually consist of information about the browser type and browser version, the operating system, the Internet service provider, the date and time of use of the website, the previously visited websites and those newly accessed via the website, and the IP address of the computer. With the exception of the IP address, the server log files cannot be linked to a person. An IP address can be traced to a person if it is permanently assigned when the Internet connection is used and the Internet provider can match it with a person.
If you continue to use the services of the website, pseudonymous user profiles and the data you enter on the website (e.g. search words, login data, comments, submissions on forms or for registration) will be processed.
Some of the website’s services require you to supply betterplace.org with personal data. In these cases, the data you supply will be used to provide the desired service or process the particular request. The following personal data is processed on the website:
- User data such as e-mail address and password; details of name and address; contact data; donation data; comments on donations and projects (optional), image data (optional)
- Title of position as a representative of the organisation, if you create and manage an aid project for an organisation as project manager; details on the project
- User data such as e-mail address and name details for the dispatch of the newsletter (depending on the type of newsletter).
Under no circumstances will personal bank account information be saved or displayed on betterplace.org during the donation process.
3. What cookies are used?
Generally, cookies only serve online identification purposes and are not mapped to a specific person. Cookies are mapped to a person when the information generated by the cookies is merged with other data. There is a difference between cookies which are required to provide the website and cookies which are required for other purposes such as analysis of user behaviour, or advertising.
Some of the cookies required to provide the website are, in particular, the following:
- Cookies which serve to identify or authenticate users;
- cookies which store certain user preferences (e.g. search or language settings);
- cookies which store data to ensure the error-free playback of video or audio content.
Some of the cookies required for other purposes are, in particular, the following:
- analysis cookies for the purpose of recording and statistically evaluating the usage behaviour of our users (e.g. clicked advertising banners, sub-pages visited, search queries made);
- advertising cookies of third parties which are used to create profiles of usage behaviour (e.g. clicked advertising banners, sub-pages visited, search queries made) and which enable the controller and the third party to display advertisements or offers to the user that are tailored to the user’s interests (hereinafter referred to as “third party cookies”).
4. What data is recorded for what purposes?
The purposes for which data is processed may result from technical, contractual or legal requirements and, where applicable, from consent given.
We use the data specified in Section 2 for the following purposes:
- to provide the website and ensure technical security, in particular to correct technical errors and to ensure that unauthorised persons do not gain access to the website’s systems;
- Provision of the online offer of the online donation platform and fulfillment of the contract in accordance with our currently applicable General Terms and Conditions (AGB) Terms and Conditions for Users and Donors and Terms and Conditions for Organisations and Projects which are tax-deductible and for Volunteering;
- for reach assessments and web analyses in order to make the website more efficient and interesting for you, and to conduct market research;
- for communication, contract preparation and user support;
- for creating and sending donation receipts;
- for sending newsletters and programme communications by e-mail;
- for the registration of a user of the online donation platform;
- for the receipt and processing of donations from registered and non-registered users of the online platform;
- for contacting persons in the context of so-called “time donations”, i.e. the placement of volunteers with an organisation;
- for the administration of fundraising projects by the organisation;
- for the forwarding of data to the organisations so that they can then send their own newsletters.
4.1 Technical provision of the website
4.1.1 Description and scope of data processing
For the functionality of the website, the performance of security analyses and the prevention of attacks, the server log files are automatically written on the computer server host when the website is accessed and used before they are stored for a short time as a component of the server access data defined in Section 2. The server log files are not stored together with other data. betterplace.org uses the server log files for statistical evaluations in order to analyse and remedy technical faults, fend off attacks and fraud attempts, and optimise the functionality of the website.
4.1.2 Purposes and legal basis of data processing
The legal basis for the recording of server log files is Art. 6 para. 1 letter f GDPR. The functionality of the website, the performance of security analyses, and the prevention of attacks are the legitimate interests of betterplace.org.
4.1.3 Duration of storage or criteria for determining this duration
After the websites have been accessed, the server log files are stored on the web server, and the IP address they contain is deleted after 7 days at the latest. The data is only evaluated during this storage period in the event of an attack.
4.1.4 Possibility of objection and erasure
You have the right to object to the processing of your data in the context of server logfiles, if there are reasons for this which arise from your particular situation. If you wish to exercise your right of objection, please contact us at the address given under Section 1.
4.2 E-mail and telephone contact
4.2.1 Description and scope of data processing
On the website you can contact betterplace.org via an e-mail address or a telephone number. If you do so, your e-mail address, your telephone number and your request will be transmitted to betterplace.org. Depending on your request (e.g. questions about the usage functionalities of betterplace.org, assertion of your rights as a data subject, e.g. access to information), your contact data will be processed further. If it is necessary for the processing of your request, your contact data may be forwarded to third parties (e.g. other organisations).
4.2.2 Purposes and legal basis of data processing
The legal basis for the processing of your contact data is Art. 6 para. 1 letter f GDPR. Our legitimate interests are the processing of your request and further communication. If the reason for your contacting us is to enter into a contract with betterplace.org, then the legal basis for the processing of your contact data is Art. 6 para. 1 letter b GDPR.
4.2.3 Duration of storage or criteria for determining this duration
After your request has been completely processed and further communication has ended, the contact data will be deleted, unless statutory retention periods prevent such deletion. The contact data will also not be deleted if your contacting us is aimed at concluding a contract with betterplace.org or if you assert your rights as a data subject, such as your right to access information. In this case, the data will be stored until the contractual and/or legal obligations have been fulfilled and statutory retention periods do not oppose deletion.
4.2.4 Possibility of objection and erasure
You have the right to object to the processing of your contact data, if there are reasons for this which arise from your particular situation. If you wish to exercise your right of objection, please contact us at the address given under Section 1. If you object, communication can no longer be continued. Other conditions apply if the storage of your contact data is necessary for the initiation of a contract, or fulfilment of a contract, or assertion of your rights as a data subject.
4.3.1 Description and scope of data processing
On the website you can subscribe to the free betterplace.org newsletter as part of the donation or registration process. Your name and e-mail address from the donation or registration form will be processed further (with the aid of service providers) for the dispatch of the newsletter.
Furthermore, you can subscribe to the free betterplace.org newsletter on the online donation platform outside of the donation or registration process. Only your e-mail address from the registration screen will be transmitted to betterplace.org and further processed (with the aid of service providers) for the dispatch of the newsletters.
Your data will not be passed on to third parties.
Please note that betterplace.org will evaluate your user behaviour when you receive the betterplace.org newsletter. For this analysis, the e-mails sent will contain so-called web beacons or tracking pixels, which are single-pixel image files stored on the website. For the analyses, betterplace.org will link your data and web beacons with your individual ID. The data is collected in a pseudonymised form only, i.e. the IDs are not linked to your other personal data; a direct connection to a person is thereby ruled out. You can object to this tracking at any time by unsubscribing from the newsletter via the unsubscribe link.
Project newsletter following donation
After making the donation, you may receive news by e-mail about the organisation of the respective aid project in the form of a newsletter from betterplace.org. Your name and e-mail address from the donation form will be processed further (with the aid of service providers) for the dispatch of the newsletter. Your data will not be passed on to third parties.
4.3.2 Purposes and legal basis of data processing
The purpose of the betterplace.org newsletter is to keep you informed by e-mail about current topics and other general news at betterplace.org. The legal basis for the processing of the data when you subscribe to the newsletter is your consent pursuant to Art. 6 para. 1 letter a GDPR.
Project newsletter following donation
The purpose of this processing is only to inform you about the progress of the aid project you selected when making your donation.
The legal basis for the processing of your data is Art. 6 para. 1 letter f GDPR.
4.3.3 Duration of storage or criteria for determining this duration
In the case of newsletters that are sent independently of a donation, we erase the data when you unsubscribe from the newsletter. In the case of newsletters to which you have subscribed as part of the donation or registration process, we will delete the data if you unsubscribe from the newsletter and if there are no contractual or legal retention periods to prevent deletion.
Project newsletter following donation
In the case of these newsletters, we will delete the data if you unsubscribe from the newsletter and if there are no contractual or legal retention periods to prevent deletion.
4.3.4 Possibility of objection and erasure
You can object to the data processing relating to the newsletter (betterplace.org-newsletter and project newsletter following a donation) any time by unsubscribing via the link in the newsletter or by using the contact option mentioned under Section 1. It will then no longer be possible to receive the newsletter.
4.4. Data processing within the context of charitable giving/donations
4.4.1 Thank-you note sent to donors by the charity
When you make a donation, the person in charge of the charity project you have chosen to donate to may send you an email with a one-off thank-you note. Such messages will always be sent through our donation platform.
184.108.40.206 Description and scope of data processing
When such a note is sent, your name and email address will be processed as part of the process of creating and sending the thank-you note. However, the person in charge of the charity project sending the note will not be able to see your email address when doing so. This is because the thank-you note will be processed and sent using third-party service providers.
220.127.116.11 Purposes and legal basis of data processing
The purpose of this thank-you note and the processing of personal data is to give the person in charge of the charity project an opportunity to thank you for having chosen their project for your donation and personally express their gratitude or provide feedback to you. For betterplace.org, this is an important part of our endeavors to make our donation process transparent.
The legal basis for processing this data is Art. 6 (1) f), with respect to which the legitimate interest pursued by betterplace.org is to provide donors with support and information.
18.104.22.168 Duration of storage and erasure of the data
When a thank-you note is sent, we will store the message until the person in charge of the charity projects ends all communications and follow-up activities concerning your donation, unless we are required to store this data for a specific duration for legal reasons.
Services that optimise user-friendliness and measure the reach of the website are built into the website. Your access data (see Section 2) is recorded and your usage behaviour is evaluated with the help of analysis cookies (see Section 3). Personal identification is generally not necessary for web-tracking, so that when your access data is recorded, the stored IP address is either not used or only used in truncated form, and pseudonymous user profiles are created. This data is not merged with other data and you have the possibility of revocation at any time. Personal user profiles are only created in exceptional cases and only if you have given your consent.
The web-tracking services are usually offered by service providers who process the data in accordance with the controller’s instructions only and not for their own purposes, as so-called processors. This is ensured by means of contracts for processing. If the service providers process your data outside of the European Union or the European Economic Area (hereinafter referred to as “EU or EEA”), a so-called third country transfer takes place. This is permissible if you have given your consent, betterplace.org has given guarantees for a level of data protection that meets European standards, or the EU Commission has classified the relevant third country as a safe third country. The third country transfer of the relevant service is identified below.
The individual web-tracking services of the website are described in more detail below.
4.5.1 Google Analytics
The website uses the services of Google Analytics. Google Analytics is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics creates a pseudonymous user profile to optimise the user-friendliness of the website. Pseudonymity is ensured by Google truncating your IP address prior to any further processing and storage of data, and it is not possible to draw any conclusions about you as a person. The pseudonymous user profile is evaluated after transmission in order to optimise user-friendliness. The data is not merged with any other Google data. By means of a contract for processing, betterplace.org ensures that Google only processes the data in accordance with its instructions.
Through the use of Google Analytics, a third country transfer takes place (see Section 6). However, with its certification in accordance with the EU-US Privacy Shield, Google ensures that the third country transfer meets the European data protection standards.
22.214.171.124 Purposes and legal basis of data processing
The legal basis for the recording and evaluation of pseudonymous user profiles is Art. 6 para. 1 letter f GDPR. The legitimate interests of betterplace.org consist of optimising the user-friendliness of the website and measuring its reach.
126.96.36.199 Duration of storage or criteria for determining this duration
As regards the use of Google Analytics on this website, the data is stored for a maximum of 14 months or until you object to its further use.
188.8.131.52 Possibility of objection and erasure
You can object to the use of the web-tracking services any time by changing your browser settings or by clicking the following link/s to download and install the available browser plug-ins:
You can prevent cookies from being saved via the appropriate settings in your browser software. However, under certain circumstances not all of the functions of this website might then be available to you.
Moreover, you can prevent Google’s forwarding and processing the data generated by the cookie and relating to your use of the website (incl. your IP address) by downloading and installing the following browser add-on
Opt-out cookies will prevent your data from being recorded in the future when you visit this website.
To prevent the recording by Universal Analytics across different devices, the opt-out must be undertaken on all systems used. If you click here, the opt-out cookie will be installed: deactivate Google Analytics
The website uses the services of Hotjar Analytics from Hotjar Ltd. The provider is Hotjar Ltd, Level 2 St Julians Business Centre, 3, Elia Zammit Street St Julians STJ 1000, Malta, Europe.
Hotjar Analytics creates a pseudonymous user profile to optimise the user-friendliness of the website. Pseudonymity is ensured by Hotjar abbreviating your IP address prior to any further processing and storage of data, so that it is not possible to draw any conclusions about you as a person. The pseudonymous user profile is evaluated after transmission in order to optimise user-friendliness. The data is not merged with any other data. By means of a contract for processing, betterplace.org ensures that Hotjar only processes the data in accordance with its instructions.
184.108.40.206 Purposes and legal basis of data processing
The purpose is to improve the betterplace.org website. The legal basis for the recording and evaluation of pseudonymous user profiles is Art. 6 para. 1 letter f GDPR. The legitimate interests of betterplace.org consist of optimising the user-friendliness of the website.
220.127.116.11 Duration of storage or criteria for determining this duration
With regard to the use of Hotjar on this website, the data will be evaluated and anonymised by Hotjar immediately after its transmission to Hotjar.
18.104.22.168 Possibility of objection and erasure
You can object to the use of the web-tracking services any time by changing your browser settings or by clicking the following link/s:
- You can activate the “Do-Not-Track” setting in your browser if your browser has this feature. Hotjar respects this setting.
A so-called widget from Outbrain UK Limited, 5 New Street Square, EC4A 3TW, London, United Kingdom, is contained in some pages of the offer. The Outbrain service is designed to provide you with information that is thematically related to the content you are reading.
22.214.171.124 Possibility of objection and erasure
If you wish to object to the use of data by Outbrain: Please call up Outbrain’s Privacy page and opt out there. – Please note that the opt-out must be performed on every device that you use.
The content recommendations in the widget are no longer controlled on the basis of Outbrain’s usage data after the opt-out.
5. Iframes by betterplace.org on websites other than betterplace.org
betterplace.org is offering the embedded betterplace.org donation form (Iframe) on websites other than betterplace.org. Fundraising goals (projects) may also be selected via Iframe for support on websites other than betterplace.org. In these cases, your information will be processed directly by betterplace.org as the data controller.
6. Facebook Login (Facebook Connect)
You also have the option of authenticating yourself on our website by providing your Facebook profile information from your Facebook user account (‘Facebook login’). An additional registration is then no longer necessary. You will then be forwarded to Facebook’s website for registration/login. By doing so, your Facebook profile will be linked to our service.
If you decide to register and/or log in using your Facebook user account, betterplace.org will receive access, from Facebook, to your first and last name, your email address, your profile photo, your gender, your language via this interface. Betterplace.org will also save this information in your user profile where you can edit this information in your user profile.
If you do not agree to the sharing of your information in this fashion, you should not use the Facebook login.
7. Google reCAPTCHA
On this website Google reCAPTCHA is integrated. Google reCAPTCHA is a CAPTCHA service which protects this website from spam and automated abuse by computer systems, e.g. bots.
Google reCAPTCHA is a service of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043 USA (in the following referred to as “Google.”)
Through this service, Google can determine from which website a request is sent and from which IP address you use the so-called reCAPTCHA input box. In addition to your IP address, additional information may be collected by Google, which is necessary for the offer and the guarantee of this service.
The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the security of our website and in the defense against unwanted, automated access in the form of spam or the like. Google provides further information on the general handling of your website at https://policies.google.com/privacy User data.
8. Who will receive my data?
Within betterplace.org, those parties receive access to your data who need it for the purposes described in Section 4. Service providers used by betterplace.org may also be given access to your data (so-called “processors”, e.g. computer centres, dispatch of newsletters, customer services or debtor management). Contracts for processing ensure compliance with instructions, data security and confidential handling of your data by these service providers.
Data will be passed on to other recipients such as advertising partners, providers of social media services or credit institutions (so-called “third parties”) if required to do so by law or if you have given your consent or that is part of your contract. The following third parties may be forwarded data:
- providers of measurements and web analyses that measure the reach of websites and create user profiles for their own purposes,
- advertisers who show you interest-based advertisements,
- credit institutions that collect your data via the website, receive it from us and process it further on their systems for the purposes of payment handling and for fraud prevention.
- public authorities and institutions such as law enforcement authorities which receive your data based on compliance with legal or official obligations,
- charity organisations which inform you about the progress of their respective aid project and other work via their own newsletter, provided you have agreed to your data being shared for such purposes (Art. 6 (1) a) GDPR).
You will find more information about the forwarding of data to the respective third parties in section 4, which specifies the individual purposes.
9. Use of payment service providers
We use the following payment service providers for the purpose of payment processing:
For credit card: Stripe Payments Europe Ltd, Block 4, Harcourt Center, Harcourt Road, Dublin 2, Ireland and Stripe Payments UK, Ltd, 7th Floor, The Bower Warehouse, 211 Old Street, London EC1V 9NR, United Kingdom (“Stripe”) , For more information on Stripe’s privacy, please visit the URL stripe.com/privacy.
For direct debit, credit card: Wirecard AG, Einsteinring 35, 85609 Aschheim, Germany (“Wirecard”). For more information on data protection by Wirecard, see the URL wirecardbank.de/DSGVO.
PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449 Luxembourg (“PayPal”). You can view PayPal’s privacy notices at the following links: www.paypal.com/web/msapps/mpp/ua/privacy-full
paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt, Germany ( “Paydirekt”). For more information on data protection by Wirecard, please visit the URL paydirekt.de/agb.
The payment service provider is responsible for the processing of data in the course of payment processing.
In addition, we will provide Stripe with your personal data (first and last name, e-mail address and address) for the purpose of fraud prevention.
The legal basis for this data transmission is Art. 6 para. 1 lit. f DSGVO. The legitimate interest here lies in the prevention of economic damage through crime and in the protection of donors.
10. Will my data be processed outside the EU or the EEA (third country transfer)?
If the service providers and/or third parties outside of the EU or the EEA which are specified under Section 8 process your data for the purposes of Section 4, this may result in your data being transferred to a country where no data protection standard commensurate with that of the EU or the EEA can be guaranteed. However, such a data protection standard can be ensured with an appropriate guarantee. Suitable guarantees are, for example, standard contractual clauses provided by the EU Commission. You can request a copy of these guarantees using the contact details specified in Section 1. By way of exception, guarantees may be dispensed with if you give your consent or if the transfer of data to a third country is necessary for the fulfilment of your contract with betterplace.org. Also, the EU Commission has recognised certain third countries as safe third countries, so that here too appropriate guarantees on the part of betterplace.org can be dispensed with. The following service providers process your data outside of the EU or the EEA:
- Web-tracking services are provided by service providers which have their computer centres in a third country or which can access the computer centres within the European Union or the EEA from a branch in a third country. With certification in line with the EU-US Privacy Shield, the services ensure that the third country transfer meets the European data protection standards.
- For the dispatch of newsletters, service providers are employed which have their computer centres in a third country or which can access the computer centres within the European Union or the EEA from a branch in a third country. With certification in line with the EU-US Privacy Shield, the services ensure that the third country transfer meets the European data protection standards.
- For the handling of customer enquiries, service providers are employed which have their computer centres in a third country or which can access the computer centres within the European Union or the EEA from a branch in a third country. With certification in line with the EU-US Privacy Shield, the services ensure that the third country transfer meets the European data protection standards.
11. What data privacy rights do I have?
You have the right to access, at any time, the personal data about you which we have stored. Should any data about your person be wrong or no longer up-to-date, you have the right to demand their correction. You also have the right to demand the erasure or restriction of the processing of your data in accordance with Art. 17 and Art. 18 GDPR. You may also have the right to have the data that you supplied released in a commonly used and machine-readable format (right to data portability).
If you have given your consent to the processing of personal data for certain purposes, you can withdraw your consent at any time with effect for the future. The declaration of withdrawal should be sent to betterplace.org at the contact address specified in Section 1. You can also withdraw any consent which you gave on the website under email@example.com.
Pursuant to Art. 21 GDPR you have the right, for reasons which arise from your particular situation, to object any time to the processing of your data which takes place on the legal basis of Art. 6 para. 1 letter f GDPR. You also have the right to object at any time to the processing of your personal data for the purposes of direct advertising. The same applies to the automated procedures that take place when some cookies are used, unless they are absolutely necessary for the provision of the website.
Moreover, you also have the option to approach a data protection authority and file a complaint there. The authority responsible for betterplace.org is Berliner Beauftragte für Datenschutz und Informationsfreiheit
You may, however, also approach the data protection authority responsible for your place of residence.
12. From what source does the data stem?
All data is collected directly from the data subjects.
13. To what extent does an automated decision-making process exist?
For the purposes mentioned in Section 4, we do not use any fully automated decision-making processes.
14. Is profiling carried out?
Profiling as defined in Art. 22 (1) and (4) GDPR is not carried out.
15. Conclusion/details of version
Version 2.0 dd. 26/10/2018.