Privacy Information

In the following privacy information, we, as the controller within the meaning of the General Data Protection Regulation (GDPR), explain which personal data we process when you visit our website and use our online services.

Please note that, as a standard, all data transmissions in connection with our website take place via an encrypted connection.
We reserve the right to amend this privacy information from time to time to ensure that it always complies with current legal requirements or to reflect changes to our services. We therefore recommend that you read the privacy information regularly to stay informed about the protection of the personal data we process.

Controller

Domowina – Zwězk Łužyskich Serbow | Zwjazk Łužiskich Serbow | Bund Lausitzer Sorben e. V.
Póstowe naměsto | Postplatz 2
Serbski dom | Haus der Sorben
02625 Budyšin | Bautzen
Germany

Telephone: +49 (0)3591 550-102
Fax: +49 (0)3591 42408
Email: sekretariat@domowina.de

Data Protection Officer

Dresdner Institut für Datenschutz
Hospitalstraße 4
01097 Dresden

Telephone: +49 351 6557720
Fax: +49 351 65577222
Email: zentrale@dids.de

Access to the Website, Logging and Log Files
In order to access our website, the processing of your IP address and further access information is technically necessary for the duration of your session. In addition, access information is logged and stored in the server log files.
This includes:

• IP address
• browser type and version
• operating system used
• referrer URL
• hostname of the accessing computer
• date and time of the request

Personal data is processed for the purpose of providing the website (Art. 6(1)(b) GDPR) and to ensure the security of our information technology systems (Art. 6(1)(c) GDPR in conjunction with Art. 32 GDPR).
Log files are deleted after seven days at the latest.

Use of Cookies
We use cookies on our website. Cookies allow us to optimise the information and services on our website for users. They enable us to recognise users of our website in order to make it easier for them to use.
Cookies are used on our website in connection with the following services:

• Matomo – Usage Analysis
  With your consent pursuant to § 25(1) TDDDG in conjunction with Art. 4 No. 11 and Art. 7 GDPR, we use the web analytics service Matomo for statistical analysis of the use of our website. The processing of personal data associated with this use is based on your consent (Art. 6(1)(a) GDPR).
  
  Matomo uses cookies to analyse website usage. The following data in particular is processed:
  
  • anonymised IP address
  • date and time of page access
  • pages accessed and duration of visit
  • referrer URL
  • technical information about the device, browser and operating system
    Processing takes place exclusively on our own server. No personal data is transferred to third parties. Data collected by Matomo is stored for six months and then deleted. It is stored solely for the purpose of analysing and optimising our website.
• Google Search Console
  We use Google Search Console, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Search Console helps us analyse the visibility of our website in Google Search and identify technical and content-related opportunities for optimisation.
  In particular, Google Search Console provides us with information about the search queries through which our website appears in or is accessed via Google Search, as well as statistical data such as impressions, clicks, click-through rates and average position.
  Based on our current technical implementation, the use of Google Search Console on our website does not set any additional cookies or use any additional tracking technologies on users' devices.
  The data obtained through Google Search Console is also analysed within our web analytics system, Matomo. For this purpose, the search and performance data made available by Google Search Console is imported into Matomo via a server-side API. No visitor data collected by Matomo is transferred to Google as part of this process.
  The processing is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in analysing and improving the visibility, technical discoverability and user-friendliness of our website.
  
  
• YouTube, Google Ireland Limited – Display of Video Content
  With your consent pursuant to § 25(1) TDDDG in conjunction with Art. 4 No. 11 and Art. 7 GDPR, we use the YouTube embedding function to display and play YouTube videos. The associated processing of personal data is based on your consent (Art. 6(1)(a) GDPR).
  
  Use of YouTube involves the transfer of personal data by Google Ireland Limited to Google LLC in the United States. This transfer is based on Art. 45(1) GDPR in conjunction with the EU–U.S. Data Privacy Framework.
  
  When video content is displayed, the user’s IP address and further browser-related information are transmitted to Google. When videos are embedded using enhanced privacy mode, no additional personal data is processed beyond this. Further information is transmitted to Google only when you actively click to play the video. If you are logged into YouTube at the time, Google assigns this information to your user account.
  
  For details regarding the purpose and scope of data processing by Google and your rights and settings options for protecting your privacy, please refer to Google’s privacy policy.
  
  In addition, only strictly necessary cookies pursuant to § 25(2) No. 2 TDDDG are used on our website. The subsequent processing of personal data is based on Art. 6(1)(b) GDPR for the purpose of identifying users and ensuring proper technical functionality of the content management system (“wires”, “wires_challenge”).

Other Integrated Services
Darüber hinaus sind auf unserer Internetseite weitere folgende Dienste eingebunden:

• Adobe Fonts, Adobe Systems Software Ireland Limited – We use Adobe Fonts (formerly Typekit), provided by Adobe Systems Software Ireland Limited, to ensure consistent font presentation.
  The integration of Adobe Fonts is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. This interest lies in the technically sound, consistent and visually appealing presentation of our website and licence monitoring by Adobe.
  
  When accessing our website, connection data, including the user’s IP address, is transmitted to Adobe servers. According to Adobe, no cookies are set in connection with Adobe Fonts and the IP address is used solely to provide the fonts.
  
  We do not store personal data in this context. Further details can be found in Adobe’s privacy information.

Newsletter
To provide our newsletter service, we integrate a form provided by our service provider Positive Group Deutschland GmbH (Rapidmail) on the basis of legitimate interest pursuant to Art. 6(1)(f) GDPR. A data processing agreement pursuant to Art. 28 GDPR has been concluded.

Subscription to the newsletter is based on your consent (Art. 6(1)(a) GDPR). Only your email address is required. To verify your details and consent, you will receive a confirmation email (double opt-in). We log:

• email address
• IP address
• date and time of registration and confirmation

You may withdraw your consent at any time with future effect by using the unsubscribe link included in every newsletter email. Your stored email address will then be deleted.

Contact Form
Our website provides a contact form and contact via email.
When you contact us, we process the personal data you provide (in particular name, email address and message) for the purpose of responding to your enquiry. Processing is based on legitimate interest (Art. 6(1)(f) GDPR) or, in the case of contractual matters, Art. 6(1)(b) GDPR.

Your data will be treated confidentially and will not be passed on to third parties unless necessary to handle your enquiry. Data is deleted once your enquiry has been fully resolved, unless statutory retention obligations apply.

Use of Service Providers
We use service providers for hosting and technical support who may process personal data on our behalf or have access to it. Data processing agreements pursuant to Art. 28 GDPR have been concluded with all such providers. In addition to those already mentioned, these include:

• Neue Medien Muennich GmbH (hosting)
• STARKAD (technical support)

Data Subject Rights and Right to Lodge a Complaint

You have the right to:

• obtain information about your personal data
• request rectification
• request erasure
• request restriction of processing
• request data portability

Where processing is based on legitimate interests, you also have the right to object. Where processing is based on consent, you may withdraw your consent at any time with future effect.
You may exercise your rights using the contact details provided above.
You also have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR if you believe that your personal data is being processed unlawfully.

If you would like, I can also adapt the tone slightly (more formal UK institutional, or more EU-legal neutral).