1. Introduction

Data protection is of particularly high importance to the association „Beethoven zur ewigen Harmonie” — hereinafter referred to as the Lodge Beethoven. The Lodge Beethoven is part of „Beethoven zur ewigen Harmonie” e.V., entered in the register of associations at the Bonn Local Court under no. 2915.

Use of the Lodge Beethoven's website (www.loge-beethoven.de) is generally possible without providing any personal data. However, if particular services of our association are used via our website (contacting us, registration for events, etc.), the processing of personal data may become necessary. You will be informed in each specific case where personal data is to be processed for such a purpose, and consent will be obtained. The processing of personal data — such as name, address, email address or telephone number of the data subject — always takes place in accordance with the General Data Protection Regulation and the data-protection provisions applicable to the Lodge Beethoven. By means of this privacy notice, our association wishes to inform you of the nature, scope and purpose of the personal data we collect, use and process. This privacy notice also informs you of the rights to which you are entitled.

As the controller responsible for processing, the Lodge Beethoven has implemented numerous technical and organisational measures to ensure the fullest possible protection of personal data. Nevertheless, internet-based data transmissions and electronic mailing may in principle have security gaps, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone or by letter.

2. Definitions

The Lodge Beethoven's privacy notice is based on the terminology used in the European General Data Protection Regulation (GDPR).

3. Controller and Data Protection Officer

For the Board:

Beethoven zur ewigen Harmonie e.V.
Dyroffstr. 2
53113 Bonn
Email: mvst[at]loge-beethoven.de

as the responsible body

and

For the Data Protection Officer

Email: sekretaer[at]loge-beethoven.de

4. Collection and storage of personal data; nature, purpose and use

a) When using our website in general

In accordance with the purpose of membership in the association Beethoven zur ewigen Harmonie, the following information is collected:

Salutation, title, first name, last name
Address
Email address
Telephone number (landline and/or mobile)
Fax number if applicable (where available)
Bank details
Date of birth

The collection of personal data takes place:

in order to identify members;
in order to meet our associational obligations towards our members;
in order to comply with our statutory obligations;
for correspondence with our association members;
for invoicing and, where applicable, as part of reminder procedures;
for the assertion of any claims.

In addition, all information necessary to fulfil the non-personified purposes of the association is collected.

b) When using our contact form specifically

For questions of any kind, we offer you the option of contacting us via a form provided on the website. At a minimum, a valid email address as well as your first and last name are required, so that we know from whom the enquiry originates and can respond to it. Further details may be provided voluntarily.

The data processing for the purpose of contacting us is carried out pursuant to Art. 6(1) sent. 1 lit. a GDPR on the basis of your voluntarily given consent.

The personal data collected by us for the use of the contact form is automatically deleted once the enquiry you have submitted has been dealt with.

5. Disclosure of data to third parties

Personal data is, as a rule, not disclosed to third parties.

Exceptions apply only where this is necessary for the fulfilment of obligations towards the members. This includes in particular disclosure to third parties commissioned by us whose activity is necessary for the association's work (e.g. banks, event organisers, transport companies). The data disclosed may be used by third parties exclusively for the defined purposes.

6. Rights as a data subject

The person affected by data processing is entitled to various rights:

a) Right to revoke consent: Consents given may be revoked at any time vis-à-vis the association. Data processing based on the revoked consent may then no longer be continued for the future.

b) Right of access: You may at any time demand information about the personal data we process. This applies in particular to the purposes of the processing, the categories of personal data, where applicable the categories of recipients, the duration of storage, where applicable the origin of your data, and where applicable the existence of automated decision-making including profiling and, where applicable, meaningful information about its details.

c) Right to rectification: Without restriction, you may demand the correction of inaccurate personal data stored with us, or the completion of such data.

d) Right to erasure: You may demand from the association the erasure of stored personal data, insofar as the processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.

e) Right to restriction of processing: On justified grounds, you may demand the restriction of the processing of your personal data, insofar as the accuracy of the data is contested, the processing is unlawful but erasure is refused.

f) Right to data portability: You may demand that personal data be transmitted in a structured, commonly used and machine-readable format. Alternatively, you may demand the direct transfer of the personal data provided by the association to another controller, insofar as this is possible.

g) Right to complain: Any person whose data have been collected in accordance with the association's purpose may complain to the supervisory authority responsible for us, e.g. if the data subject is of the opinion that we process personal data unlawfully.

7. Right to object

Insofar as the Lodge Beethoven processes personal data on the basis of a legitimate interest, every data subject has the right to object to such processing.

If this right to object is exercised, a notice in text form is sufficient. Text form means a letter, a fax or an email to us. Our contact details can be found under point 3 of this privacy notice.

8. Data processing via our website

Certain personal data — including the IP address of website visitors — is also processed via our website at www.loge-beethoven.de. Each time our website is called up, our system automatically records data and information from the computer system of the accessing computer. The following data is collected in this process:

Information on the browser type and version used
The operating system of the accessing device
The IP address of the accessing device
Date and time of access
Websites and resources (images, files, further page content) accessed on our website.
Websites from which the user's system reached our website (referrer tracking)

This data is stored in the log files of our system. Storage of this data together with the personal data of a specific user does not take place, so that the identification of individual visitors does not occur.

The legal basis for the processing of personal data is Art. 6(1) GDPR (legitimate interest). Our legitimate interest consists in the following:

a) Purpose of data processing

Logging takes place to maintain the compatibility of our website for as many visitors as possible, and to combat misuse and rectify faults. For this it is necessary to log the technical data of the accessing computer, in order to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website.

In addition, the data serves to optimise the website and to generally ensure the security of our information-technology systems.

b) Duration of storage

The aforementioned technical data is deleted as soon as it is no longer required to ensure the compatibility of the website for all visitors, but at the latest 3 months after our website was accessed.

c) Right to object and to have data removed

The possibilities of objection and removal are governed by the general rules on the right of objection under data-protection law and the right to erasure set out elsewhere in this privacy notice.

Bonn, 24 May 2018