The purpose of this data protection notice is to provide you with information on the processing of your personal data within the framework of this website and the arrangement of accommodation. If you have any further questions, you are of course welcome to contact us directly at any time. Please use the contact options below.
1. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?
gut.org gemeinnützige Aktiengesellschaft
Schlesische Straße 26
D-10997 Berlin
E-Mail: [email protected]
is responsible for the processing of your personal data within the framework of this website and in the context of the arrangement of accommodation
In addition to the above address, you can reach the data protection officer of gut.org via the e-mail address [email protected].
2. WHICH DATA IS PROCESSED, FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS?
| Data | Purpose of processing | Legal basis (if information is required) |
|---|---|---|
| Technical Data when accessing and using this website (server logs) IP Address, date and time of the page visit, browser type, browser version, operating system, website from which you came to our site. | Visiting our website, your browser sends varying information to our server. We need this to establish and maintain the connection while using the website. The purpose of this data processing is the proper, trouble-free and secure provision of our website for you. | Art. 6 Abs. 1 lit. f DSGVO |
| Your data as provider of accommodation Name and contact data, number of available beds, address of the accommodation, period of provision of accommodation (from when/until when). Optional: linguistic proficiency, type of accommodation, accessible (yes/no), pets permitted (yes/no), free text field for additional information | We collect the following data from you via the contact form provided on our website. We need this data in order to be able to match the accommodation offered by you as closely as possible to the people who are looking for accommodation: We verify your identity by means of an online procedure. We use specialized service providers for this purpose. As soon as your identity is confirmed and we have been able to match your accommodation to a suitable person based on the data provided, you will receive the contact details of the accommodation seeker. We do not pass on your data to the person seeking accommodation. We work together with cooperation partners in the placement of accommodation. Cooperation partners are, for example, municipalities, counties or other regionally active organizations. We pass on your data to these cooperation partners if they are involved in the placement process. Our cooperation partners are contractually obligated to use your data only for the assignment of refugees and the corresponding contact and to process it in accordance with data protection laws. | Art. 6 Abs. 1 lit. a DSGVO (consent) |
| Your data as inquirer of accommodation Name and contact details, gender, number of beds needed, information of fellow travelers (number, gender, number of children), language proficiency, date of arrival, location of arrival, preferred residence, free text field for additional information | We collect the following data from you via the contact form provided on our website. We need this data in order to be able to find you a suitable accommodation and to be able for the offering to contact you. As soon as we find a suitable accommodation, we give your information by phone or email to the person offering said accommodation. | Art. 6 Abs. 1 lit. a DSGVO (consent) |
| Data as a subscriber to one of our newsletters (e-mail address, technical data, IP address) | On our website you have the possibility to subscribe to a newsletter via e-mail. You can unsubscribe from the newsletter at any time via the link contained in each e-mail. | Art. 6 Abs. 1 lit. a DSGVO (consent) |
3. DURATION OF THE STORAGE OF THE DATA OR THE CRITERIA FOR THE DETERMINATION OF THIS DURATION
In accordance with the data protection principle of purpose limitation, your data may only be stored until the technical purpose of its processing has been fulfilled. An exception to this is data that must be retained beyond this due to a legal requirement. In this section you will find detailed information on deletion and retention periods:
| Data | Deletion period and criteria for deletion / retention period |
|---|---|
| Technical Data when accessing and using this website | Serverlogs are automatically deleted after 30 days. |
| Your data as provider of accommodation | After successful assignment, the data will be stored for the duration of one year for reasons of ensuring liability insurance coverage and then deleted. If no successful assignment could be made, the data will be deleted within one year after registration. |
| Your data as inquirer of accommodation | After successful assignment, the data will be stored for the duration of one year for reasons of ensuring liability insurance coverage and then deleted. If no successful assignment could be made, the data will be deleted within one year after registration. |
Data, that is being captured and processed in order to perform an identity verification, will be deleted 7 days after identity verification has been processed.
The result of identity verification (Identity successful confirmed/not confirmed) will be transmitted to us and deleted when data, that is being captured with us, is being deleted (see above, chapter 1 and 2).
4. POSSIBILITY OF OBJECTION
If the processing of your data is based on prior consent, you have the right to revoke this consent at any time and with effect for the future.
Please address a revocation to the following e-mail address or to the postal address of gut.org mentioned under No. 1:
E-Mail: [email protected]
A revocation leads to the deletion of your personal data, unless there is a legal obligation to store them. A match-making is then no longer possible.
In the event of subscribing to one of our newsletters via e-mail, you have the option to revoke your consent to the data processing in this regard by clicking on the unsubscribe link contained in each e-mail. The receipt of the respective newsletter will then end.
You have the possibility to object to the further processing of your data, provided that you can provide reasons for this that arise from your particular situation. Please address an objection to the following e-mail address or to the postal address of gut.org mentioned under No. 1:
E-Mail: [email protected]
5. Who receives my data?
Inside gut.org access to your data is only granted to those offices and persons who absolutely need it to fulfill the purposes outlined in No. 2.
Service providers used by gut.org may also have access to your data (so-called “order processors”, e.g. data centers). Contracts for order processing ensure that these service providers are bound by instructions, data security and confidential handling of your data.
gut.org uses processors in the following areas or for the following partial processing:
- provision of hosting resources and administration of servers,
sending of e-mails,
conducting online verification of the identity of accommodation providers,
assistance in matching accommodation offers and people looking for accommodation (ServiceCenter).
In addition, the suitable accommodation provider will receive your data if you have registered on our website as an accommodation-seeker.
In addition, data from accommodation providers may be passed on to our cooperation partners (e.g. municipalities, districts, other regionally active organisations), who in turn match the accommodation with the refugee.
In the event of a claim for insurance cover by our insurance partner, the following data will be passed on to the insurance partner: First name/last name, e-mail address, information about the match, if applicable, address of the matched accommodation, time of registration on the platform.
Data will only be forwarded to other recipients if required by law (e.g. to law enforcement agencies in the context of criminal proceedings).
6. Is my data processed outside the EU or EEA (third country transfer)?
Insofar as service providers and/or third parties outside the EU or EEA process your data for the purposes set out below, this may result in your data being transferred to a country where no level of data protection adequate to that of the EU or EEA can be guaranteed.
However, such a level of data protection can be ensured with an appropriate guarantee. Standard contractual clauses provided by the EU Commission can be considered as an appropriate guarantee. You can request a copy of these guarantees from us upon request.
Any guarantees may be waived in exceptional cases if you consent or the third country transfer is necessary for the performance of your contract with us. The EU Commission has also recognized certain third countries as safe third countries, so that appropriate guarantees can also be waived at this point.
The following service providers used by us process your data outside the EU or EEA:
- For the hosting of parts of the platform, service providers are used whose data centers are located within the EU, but who can also access the data centers within the European Union or the EEA from a branch office in a third country in certain operating situations (e.g., in the event of serious disruptions). gut.org has agreed with these service providers on compliance with the European level of data protection via standard contractual clauses.
- For sending e-mails, service providers are used whose data centers are located within the EU, but who can also access the data centers within the European Union or the EEA from a branch office in a third country in certain operating situations (e.g. in the event of serious faults). gut.org has agreed with these service providers on compliance with the European level of data protection via standard contractual clauses.
7. What are my rights of data privacy?
You have the following rights:
- Right to information (Art. 15 DSGVO),
- Right to correction (Art. 16 DSGVO),
- Right to termination (Art. 17 DSGVO),
- Right to limitation (Art. 18 DSGVO),
- Right to data portability (Art. 20 DSGVO),
- Right to objection (Art. 21 DSGVO),
To exercise these rights, you can contact our data protection officer mentioned above directly.
In addition, you have the option of contacting a data protection authority and filing a complaint there.
The responsible authority for gut.org is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstraße 219, 10969 Berlin.
However, you can also contact the data protection authority responsible for your place of residence.
8. What is the source of the data?
We work with other organizations that are also involved in helping refugees:
- Organizations involved in refugee assistance collect data directly from those requesting accommodation when they arrive, e.g. at a collective shelter. The organization enters this data on our website. The scope of this data transfer to us as well as the purposes of our processing correspond to the information mentioned in No. 2. We only receive and process this data if the organization has established a sufficient basis under data protection law.
- Organizations active in refugee assistance collect data directly from inquirers for accommodation upon their arrival, e.g. in a collective accommodation. The organization requests data from us from accommodation providers, independently determines suitable accommodation on this basis, and transmits to us the data of the inquirer as well as the assigned accommodation provider. We receive and process this data only if the organization has established a sufficient basis under data protection law.
The respective organization acts as a data controller with respect to the data processing it undertakes.
9. To what extent is there automated decision making?
No automated decision making takes place within the framework of this website and our accommodation placement services.
10. Does profiling take place?
There is no profiling in accordance with Art 22 (1) und (4) DSGVO.
Version of this privacy notice: 4.0 from 19.07.2022
