Privacy P0licy
We, the Team of the Order of Malta CARAVAN Project respect your privacy rights and wish to inform you with this privacy policy about the nature, scope and purpose of the processing of your personal data in the context of our website and to explain your rights in this respect. With regard to the terms used, such as „processing“ or „controller“, we refer to the General Data Protection Regulation (EU 2016/679 – „GDPR“) and the Kirchliche Datenschutzregelung der Ordensgemeinschaft päpstlichen Rechts (KDR-OG) the Papal Data Protection Regulation that applies to the Malteser.
Who is Responsible for the Processing of Your Data?
CARAVAN is a project of the German Association of the Sovereign Military Order of Malta. The controller for the processing of your data in the context of the Project is therefore:
German Association of the Sovereign Military Order of Malta
Erna-Scheffler-Str. 2
51103 Cologne
Germany
„Order of Malta“, „we“, or „us“ in the following.
Why and on which Legal Basis do We Process Your Data?
We process data for different purposes. We process data regularly for the following purposes and on the basis of the following legal bases (references are only made to the GDPR):
We process data for the performance of our contract (Art. 6 para. 1 lit. b GDPR/ § 6 para. 1 lit. c KDR-OG). When you register for the CARAVAN Project, certain contractual obligations may arise. We use your data to conduct the CARAVAN Project and to fulfill our contractual obligations towards you (such as providing you with information, registering you for and performing activities, ensuring appropriate boarding, lodging and care, processing invoices, replying to your e-mail or handling your donations).
We process data on basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR/ § 6 para. 1 lit. g KDR-OG). The processing of data may be necessary to pursue our legitimate interests, for example to inform you about our activities. You have the right to object at any time to processing of your personal data. When necessary, we will also use your data to defend ourselves against or pursue legal claims.
We process data on basis of your consent (Art. 6 para. 1 lit. a GDPR/ § 6 para. 1 lit. b KDR-OG). In certain cases, we may ask you to provide your consent to the processing of your data. If you have granted your consent, we will only process your data to the extent that the processing is covered by your consent.
You are free to grant or refuse your consent. Furthermore, you may withdraw your consent at any time with effect for the future. For this purpose, please use the contact details at the end of this privacy policy.
We process data to comply with our legal obligations (Art. 6 para. 1 lit. c GDPR/ § 6 para. 1 lit. a KDR-OG). Some data, in particular the data collected during your registration or through your donations will have to be processed due to statutory requirements (in particular tax and corporate law).
We will only process your data for the purposes for which they have been collected. We do not use your data for automated decision-making.
Do We Transfer Data to Third Countries? Do We Share your data With Others?
For the CARAVAN Project, we do not transfer any personal data to third parties in these countries, but only use the data on site.
As far as we transfer data to service providers, which process your data outside the European Union and the European Economic Area (in so called third countries), we will safeguard the transfer with appropriate guarantees, such as the Standard Contractual Clauses of the European Commission, to ensure that your data is protected by a level equal to the one of the GDPR.
We disclose your data to third parties, such as service providers, to the extent necessary for execution of the CARAVAN Project (e.g., for the preparation of activities; for organization of transport).
We may share your name and other personal data with other team members, German and Lebanese, for the coordination of the CARAVAN Project. In the context of the CARAVAN Project, our staff may process your personal data in Lebanon. In these cases, the processing is carried out on the basis of Art. 49 para. 1 lit. b and c DSGVO / § 41 para. 2 and 3 KDR-OG. Due to the absence of an adequacy decision and appropriate safeguards regarding the protection of your personal data in Lebanon we have taken appropriate technical and organisational measures to ensure a level of security appropriate to the risk.
How Long Do We Store Your Data?
We process and store your personal data only as long as necessary for the purposes named above. If necessary for the compliance with statutory retention times (between two and ten years) or for the protection of our legitimate interests, such as in legal disputes, we will store your data for a longer period. We will delete your data once the data is no longer needed for these purposes.
What Are Your Rights?
You have the following rights in respect to your personal data that we hold:
Right of access. Pursuant to Art. 15 GDPR/ Art. 17 KDR-OG, you can ask for a confirmation on whether we process your data. If this is the case, you have the right to obtain information on how we process your data.
Right to rectification. Pursuant to Art. 16 GDPR/ Art. 18 KDR-OG, you have the right to obtain rectification of your personal data without undue delay if that personal data is inaccurate or incomplete.
Right to erasure. Pursuant to Art. 17 GDPR/ Art. 19 KDR-OG, you have the right to obtain the erasure of your personal data without undue delay in certain circumstances, such as where (i) the personal data is no longer necessary for the purposes for which it was collected or processed, (ii) you have withdrawn your consent, (iii) you have successfully opposed the processing pursuant to Art. 21 GDPR/ Art. 23 KDR-OG; or (iv) the processing was unlawful.
Right to restriction. Pursuant to Art. 18 GDPR/ Art. 20 KDR-OG, you have the right to obtain restriction of the processing undertaken by us on your personal data in certain circumstances. This right applies, for example, if (i) you have contested the accuracy of the personal data, (ii) there is no legal basis for the processing of the data, but you do not want the data to be delete, (iii) we only need the data for the defense against or pursuit of legal claims or (iii) you have opposed the processing pursuant to Art. 21 GDPR/ Art. 23 KDR-OG for the period we need to assess the claim.
Right to information. Pursuant to Art. 19 GDPR/ Art. 21 KDR-OG you have the right to obtain information on the recipients of your data, which have been notified of you demand of rectification, erasure, or restriction.
Right to portability. Pursuant to Art. 20 GDPR/ Art. 22 KDR-OG, you have the right to demand a copy of your registration data in a structured, commonly used and machine-readable format and to demand the transfer of this data to another controller, if technically and reasonably possible.
Right to object. Pursuant to Art. 21 GDPR/ Art. 23 KDR-OG, you have a right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. In this case, we will no longer process your personal data, if we do not have compelling legitimate grounds for processing which override your rights and interests or if we need the data for the defense against or the pursuit of legal claims.
If you have given us your consent for the processing of your personal data, you may withdraw your consent at any time with effect for the future.
In addition to the foregoing listed rights, you also have the right to lodge a complaint with the data protection authorities. The following data protection authority is in charge of the Order of Malta: Dieter Fuchs, Esq., Wittelsbacherring 9, 53115 Bonn, Germany, E-Mail: fuchs@orden.de
If you have any further questions regarding the processing of your personal data or if you want to pursue your rights, please contact us.
What about Cookies?
We only use session cookies, which are deactivated after you leave the website. These cookies are necessary for the control and presentation of our website (use for legitimate interests).
You can activate your browser to inform you about the setting of cookies and only allow cookies in individual cases, you can exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website will be restricted.
How To Contact Us?
We are happy to hear from you:
Projekt Karawane
Kanzlei der Deutschen Assoziation des Souveränen Malteser Ritterordens e.V.
Erna-Scheffler-Str. 2
51103 Köln
Germany