Privacy notice

Data protection officer

SOLI Uganda e.V. is not required to appoint a data protection officer under Article 37 (4) GDPR in conjunction with § 38 (1) of the German Federal Data Protection Act (BDSG).

Your rights

Using the contact details of our board, you can exercise the following rights at any time:

• Access to the data we store about you and information on how it is processed (Art. 15 GDPR)
• Rectification of inaccurate personal data (Art. 16 GDPR)
• Erasure of data we store about you (Art. 17 GDPR)
• Restriction of processing where we are not yet allowed to delete your data because of a legal duty (Art. 18 GDPR)
• Objection to the processing of your data by us (Art. 21 GDPR)
• Data portability, where you have consented to the processing or have entered into a contract with us (Art. 20 GDPR)

If you have given us consent, you can withdraw it at any time with effect for the future.

You can lodge a complaint with a supervisory authority at any time, for example the authority of the German federal state where you live, or the authority responsible for us. A list of supervisory authorities (for the non-public sector) is available at bfdi.bund.de.

Right to object under Article 21 GDPR

Right to object in an individual case

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Article 6 (1) (f) GDPR. This also applies to profiling based on that provision within the meaning of Article 4 (4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where to send an objection

Board of SOLI Uganda e.V. – Charlotte Campbell, charlotte.campbell@soli-uganda.org; Sabine Görg, sabine.goerg@soli-uganda.org

Access data and log files

Our website, or our hosting provider, collects data about each access to the server (server log files) on the basis of our legitimate interests (Art. 6 (1) (f) GDPR). This includes: the name of the page retrieved, the file, date and time of access, the amount of data transferred, a message about successful retrieval, browser type and version, the user’s operating system, the referrer URL, the IP address and the requesting provider.

Log-file information is stored for security reasons (for example to investigate misuse or fraud) for a maximum of 7 days and is then deleted. Data whose further retention is required for evidence is exempt from deletion until the incident in question has been finally resolved.

SSL encryption

To protect your data during transmission we use encryption in line with the current state of the art (for example SSL) over HTTPS.

Contact

When you contact us (for example by form, email, telephone or social media), the details you provide are processed in order to handle the enquiry under Article 6 (1) (b) GDPR. The details may be stored in a CRM system or a comparable way of organising enquiries.

Deletion of data

Under German law, records are kept in particular for 6 years in accordance with § 257 (1) of the Commercial Code (HGB) – commercial books, inventories, opening balance sheets, annual financial statements, commercial correspondence, accounting vouchers and similar – and for 10 years in accordance with § 147 (1) of the Fiscal Code (AO) – books, records, management reports, accounting vouchers, commercial and business correspondence, and documents relevant to taxation.

Changes to this notice

We may update this privacy notice so that it continues to meet current legal requirements, or to reflect changes in our services. The new notice then applies to your next visit.

Questions about privacy

If you have questions about data protection, please contact Sabine Görg, sabine.goerg@soli-uganda.org

This privacy notice was created with the help of activeMind AG (version #2020-09-30).