Information about the Processing of Personal Data by the Urban Action Foundation e.V.




With this letter, we would like to inform you about the processing of your personal data by the Urban Action Foundation e.V. This information letter is intended for every natural person, especially website visitors and other individuals who may be affected by data processing by the Urban Action Foundation e.V.

We take the confidentiality and protection of your personal data very seriously. Therefore, we process your personal data only to the extent permitted by law, in particular, the EU General Data Protection Regulation ("GDPR") and the Federal Data Protection Act ("BDSG").

If you have any questions about this information letter or our handling of your personal data, please feel free to contact one of the contact addresses provided below.



    I. Responsibilities and Contact Information

The person responsible for processing your personal data is :

Urban Action Foundation e.V.
Waldemarstraße 85
10997 Berlin

Telefon: 0176 7322 57 05
E-Mail: info@ua-f.net



    II. Processing of personal data

      1. Log files

When you visit this website to learn about our association, we only collect the personal data in log files that your browser transmits to our server.

This includes the type of web browser, the operating system used and its interface, the domain name of the internet service provider, the IP address of the computer used, the website from which you visit us, the pages you visit on our site, the date and time of your request, and the duration of your visit.

This information is technically necessary for us to display our website to you and to ensure the stability and security of the website. Otherwise, the use of the website is not possible.

The legal basis for this data processing is our legitimate interest (Art. 6 para. 1 lit. f DS-GVO). With this, we pursue our legitimate interests in increasing data protection and data security to ensure a level of protection for the personal data we process that is appropriate to the risk, to ensure network and information security, and to optimize the website and protect it from attacks, disruptions, and damage.



      2. Cookies


We also use cookies to enable the operation and use of our website (e.g., to use the back function in your browser) and to ensure our IT security. Cookies are small text files that store information about user behavior when visiting a website and are stored on the user's computer for use in later visits to the website. Such cookies do not cause any harm to your computer and do not contain viruses.

The legal basis for this data processing is our legitimate interest (Art. 6 para. 1 lit. f DS-GVO). With this, we pursue our legitimate interests in personalizing the website for the user's visit and facilitating the use of the website.

The information obtained from cookies is not linked to your IP address. No further personal data is collected.

You can also visit our website without using cookies if you disable the storage of cookies in your browser's system settings. However, this may result in the inability to use all the functions of our website. Further information about cookies and how to disable them can be found on the website of the Federal Office for Information Security here.

'Session cookies,' which store information about your current session, are deleted as soon as you close your browser after a session.



      3. Contact Us

When you contact us via email, the data you provide (your email address, your name, and your phone number, if applicable) will be stored by us so that we can respond to your inquiry.

The legal basis for this data processing is our legitimate interest (Art. 6, Paragraph 1, lit. f DS-GVO). Our legitimate interest lies in being able to handle your inquiries properly.




      4. YouTube

The responsible entity for data processing in the sense of the DS-GVO is Google Ireland Limited ("Google") when Google processes your personal data in Germany and solely determines the purposes and means of processing.
Google Ireland Limited
Gordon House
Barrow Street, Dublin 4
Ireland

You can view the privacy policy here.


Regarding the processing procedures in detail:

        a) Operating the YouTube channel

          aa) Data processing by Google as the responsible party


We expressly point out that you use our YouTube channel at your own discretion. This applies in particular to the use of interactive features such as commenting, sharing, and rating.

When you visit our YouTube channel, Google processes your personal data. We have no influence on these processing operations and on whether Google complies with applicable data protection regulations. You can find details about the processing of your personal data in the privacy policy linked above.

Please note that personal data may also be transferred by Google to the United States and other third countries. We explicitly inform you that, in cases of data transfer to third countries, the level of data protection in the receiving third country may not have been determined by the EU Commission in accordance with Article 45 of the GDPR, and no appropriate safeguards within the meaning of Article 46 of the GDPR may be in place. Therefore, it cannot be ruled out that a level of data protection exists in the third country that is equivalent to that under the GDPR.

You can restrict the processing of your personal data by Google by adjusting the general settings of your user account on YouTube or Google. Additionally, on mobile devices, you can limit Google's access through the available settings.


          b) Data Processing by Urban Action Foundation e.V. as the Data Controller


We process your personal data for communication purposes when you contact us through our YouTube channel, such as by commenting on a post. In this case, we process the content of your message and any other personal data transmitted. Please note that, in addition to the content and data actively transmitted by you, we may also have access to other information related to your user profile, your contributions, and "likes". The extent of access to this information depends on the privacy settings you have configured within your YouTube user account. You can adjust your privacy settings here.

The legal basis for this processing is our legitimate interest (Art. 6(1)(f) of the GDPR). Our legitimate interest is in communicating with you and addressing your inquiries and other concerns.

If we are capable of it and have processed the data outside of YouTube, we will delete the content and data actively communicated by you once the purpose of processing no longer requires it. We have no influence on the deletion of content and data stored by YouTube and Google during our communication.




      5. Instagram

The provider of Instagram in Germany is Meta Platforms Ireland Limited ("Meta"). To the extent that Meta alone processes your personal data and determines the purposes and means of processing, Meta is the responsible entity for data processing in accordance with the General Data Protection Regulation (GDPR)

Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland

You can view the privacy policy here.


        a) Data Processing by Meta as Data Controller


We expressly inform you that you use our Instagram account at your own responsibility. This especially applies to the use of interactive features such as commenting, sharing, and rating.

When you visit our Instagram account, Meta processes your personal data. We have no control over these processing activities and whether Meta complies with the applicable data protection regulations. Details regarding the processing of your personal data can be found in the linked privacy policy.

Moreover, personal data processed by Meta may be transferred to the USA and other third countries. We explicitly notify you that, in cases of data transfer to third countries, the data protection level in the receiving third country might not have been established by the EU Commission under Article 45 of the GDPR, and no suitable guarantees under Article 46 of the GDPR may be in place. Therefore, it cannot be ruled out that the third country may have a data protection level that is equivalent to that of the GDPR.

You can limit the processing of your personal data by Meta by adjusting the general settings of your Instagram account. Additionally, on mobile devices, you can restrict Meta's access through the settings available there.



        b) Data Processing by Urban Action Foundation e.V. as Data Controller


We process your personal data, including your username and the content published under your account, for the purpose of communication when you contact us through our Instagram account, such as by commenting on a post.

The legal basis for this data processing is our legitimate interest (Article 6(1)(f) of the GDPR). Our legitimate interest lies in being able to communicate with you and respond to your inquiries and other concerns.

If we are able to do so and have processed the data outside of Instagram, we will delete the content and data actively provided by you once the purpose of processing no longer requires it. However, we cannot influence the deletion of content and data stored by Meta in the context of our communication.





    III. Objection or Withdrawal against the Processing of Your Data


      1. Withdrawal of Consent

If you have given your consent for the processing of your data, you can withdraw it at any time (Article 7(3) of the GDPR). Such a withdrawal does not affect the lawfulness of the processing of your personal data before you revoked your consent.

      2. Objection to the Processing

If we base the processing of your personal data on a balance of interests, you can object to the processing (Article 21 of the GDPR). When exercising such an objection, we kindly request you to state the reasons why we should not process your personal data as we have been doing. In the case of your objection, we will assess the situation and either cease or adjust the data processing or provide you with compelling legitimate grounds for continuing the processing.



    IV. Deletion

Unless a specific retention period has been explicitly specified in the above-mentioned data processing procedures, we will delete or block your personal data as soon as the purpose of storage no longer applies. Storage may also take place if required by the European or national legislator in Union regulations, laws, or other rules to which the data controller is subject.


    V. Your Further Rights

Subject to the legal conditions, which need to be evaluated in individual cases, you have the right to receive information about your personal data (Article 15 of the GDPR) and to request the correction (Article 16 of the GDPR) or deletion of your personal data (Article 17 of the GDPR) or the restriction of processing (Article 18 of the GDPR), and to receive your personal data in a structured, commonly used, and machine-readable format (data portability, Article 20 of the GDPR).

Furthermore, concerning the processing of your personal data, you have the right to lodge a complaint with a supervisory authority. In particular, you can contact the competent data protection supervisory authority:


Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59-61
10555 Berlin



    VI. Security

We implement technical and organizational security measures to protect your personal data processed by us from unauthorized access, misuse, loss, and other external disruptions.


    VII. Changes to this Data Protection Information

This data protection statement is as of February 2023. Due to the further development of our website or changes in legal or regulatory requirements, it may be necessary to amend this data protection information. You can always access and print the most up-to-date data protection information on the website.



    VIII. Contact

If you have any questions regarding the processing of your personal data on our website, you can contact us at any time.