PRIVACY POLICY

 

1. NAME AND ADDRESS OF THE RESPONSIBLE

The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is Metality eV, Postfach 703116, 60568 Frankfurt am Main, members@metality.org.

A data protection officer has not been appointed.

 

2. GENERAL INFORMATION ABOUT DATA PROCESSING

a. SCOPE OF PROCESSING OF PERSONAL DATA

We generally only process personal data of our users to the extent necessary for providing a functional website, our social media presences, our club services, and our communication.

b. DATA DELETION AND STORAGE PERIOD

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.

c. USE OF MICROSOFT FORMS

We use the "Microsoft Forms" tool to conduct surveys and order processes. Microsoft Forms is a service of Microsoft Corporation. The processing is carried out on behalf of Metality eV by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.

Please note that this data protection information only informs you about the processing of your personal data by Metality eV when using Microsoft Forms. If you require information about the processing of your personal data by Microsoft, please refer to the relevant statement at Microsoft.

When using Microsoft Forms, different types of data are processed. The scope of the data also depends on the information you provide when participating, especially if the questions are formulated "openly".

The following personal data are the subject of processing: IP address, name, email address, profile picture (optional if stored in Microsoft 365), preferred language, status (optional if stored in Microsoft 365), date and time the questionnaire was opened, date and time the answer was sent; as well as information in the survey/query. The latter information is questionnaire-specific. The user decides which personal data is transmitted when entering free text in the answer fields.

Please also note that we cannot rule out the possibility of data being transferred to the USA when using Microsoft Forms. This is based on the adequacy decision of the EU Commission for data transfer between the European Economic Area (EEA) and the USA.

3. INDIVIDUAL PROCESSING OPERATIONS

a. NEWSLETTER

You can subscribe to a free newsletter on our website. When registering for the newsletter, the data from the input mask, ie your name, your e-mail address and the language are transmitted to us.

In connection with the processing of data for the sending of newsletters, there is no disclosure of the data to third parties. The data will be used exclusively for sending the newsletter.

The collection of the user's e-mail address serves to deliver the newsletter. The legal basis for processing the data after the user has registered for the newsletter is Article 6(1)(a) GDPR if the user has given their consent.

Subscription to the newsletter may be terminated at any time by the user concerned. For this purpose, there is a corresponding link in each newsletter.

b. ORDER BLACKDOG wrist band

There is an order form for the Blackdog wristbands on our website. If a user takes advantage of this option, personal data will be transmitted to us and stored. This data is the data specified in paragraph 2c) above within the framework of the use of Microsoft Forms, as well as the content of the form, ie name, complete address, and the content of the personal message, if applicable. Your consent will be obtained for the processing of the data during the sending process and reference will be made to this data protection declaration.

Alternatively, the wristbands can be ordered via the e-mail addresses provided. In this case, the user's personal data transmitted with the e-mail will be stored.

The data will only be used to send the wristbands. The legal basis for processing the data is Article 6(1)(a) GDPR if the user has given their consent. The legal basis for the processing of data transmitted in the course of sending an email is Article 6 Paragraph 1 Letter f GDPR.

The processing of the personal data from the input mask serves us to send the Blackdog wristbands. If contact is made by email, this is also the necessary legitimate interest in the processing of the data.

c. CONTACT FORM AND EMAIL CONTACT

There is also a contact form on our website. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and saved. This data is name, e-mail address and the content of the personal message.

For the processing of the data in the context of the sending process your consent is obtained and referred to this privacy statement.

Alternatively, you can contact us via the email addresses provided. In this case, the user's personal data transmitted with the e-mail will be stored.

The data will only be used to process the conversation.

The legal basis for processing the data is Article 6(1)(a) GDPR if the user has given their consent. The legal basis for the processing of data transmitted in the course of sending an email is Article 6 Paragraph 1 Letter f GDPR.

The processing of the personal data from the input mask serves us to process the contact. If contact is made by e-mail, this is also the necessary legitimate interest in the processing of the data.

The user has the possibility at any time to revoke his consent to the processing of the personal data. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the conversation can not continue.

d. SOCIAL MEDIA CHANNELS

We maintain social media profiles on platforms such as Facebook, Instagram, LinkedIn and other social networks. As part of this social media use, personal data may be processed, in particular:

  • Names, usernames or profile pictures of commenters and followers
  • Images and videos in which people are recognizable
  • Information about place of residence or personal interests, provided that these are made public by users themselves
  • Health-related data 

The processing of personal data is based on:

  •  Art. 6 para. 1 lit. a GDPR (consent), provided that explicit consent has been obtained for the publication of images or personal information.
  •  Article 9 paragraph 2 letter a GDPR (explicit consent) in the context of any health-related data.
  •  Art. 6 (1) (f) GDPR (legitimate interest), provided that the processing is necessary for the presentation of our association's work, in particular for larger group photos or public events.

Please note that when using social networks, personal data is also processed by the respective platform operators. Metality eV has no influence on the data processing by the social media providers.

Facebook and Instagram are jointly responsible pursuant to Art. 26 GDPR ("Page Insights").

For information on data processing by the respective platforms, please refer to the providers' privacy policies.

e. WHATSAPP GROUPS

Metality eV uses WhatsApp groups for internal and partly external communication and for disseminating information. Participation in these groups is voluntary. As part of this use, personal data may be processed, in particular:

  • Phone number
  • Name (if visible in the profile)
  • News content shared voluntarily by users

The processing is carried out on the basis of Art. 6 Para. 1 lit. a GDPR (consent), since participation is voluntary and the members register themselves for the groups.

In addition, Art. 6 (1) (f) GDPR (legitimate interest) serves as the basis for official club groups, as they serve the organizational and communicative work of the club.

Please note that WhatsApp, as an external service provider, processes personal data itself. WhatsApp's privacy policy can be viewed here: https://www.whatsapp.com/legal/privacy-policy

F. WEBSITE

This website uses so-called web fonts, specifically “Font Awesome,” to ensure uniform display of symbols.

The integration takes place locally via our own server, so no connection is established to third-party servers (such as Fonticons Inc. in the USA).
Font Awesome is used in the interest of an appealing and consistent presentation of our online offerings.
This represents a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. No personal data is transmitted to third parties, as the fonts are hosted locally.
Font Awesome provider:
Fonticons, Inc., 6 Porter Road, Apartment 3R, Cambridge, MA 02140, USA
Website: https://fontawesome.com

G. YNRA

As part of the YNRA project, Metality eV enables people with disabilities to participate in concerts through individual support.

For this purpose, we process the following personal data:

  • Name, contact details, age, address
  • Details of desired events
  • Information on required support and travel arrangements
  • Information on caregivers and emergency contacts
  • Health-related information (e.g., disability ID card, disability markers, emergency medication)

The data is processed exclusively for the organization, execution and safety of participation in events.

The legal basis is Art. 6 para. 1 lit. a GDPR (consent).

Insofar as health data is processed, this is additionally done on the basis of Art. 9 para. 2 lit. a GDPR (explicit consent).

If personal data of third parties (e.g. caregivers or emergency contacts) is provided, the participating person assures that the persons concerned have been informed and have their consent.

If data is collected via Microsoft Forms, the information mentioned under point 2c) of this privacy policy also applies.

.

4. SUBJECT RIGHTS

If personal data is processed by you, you are the person concerned within the meaning of the DSGVO and you have the following rights towards the responsible person:

a. RIGHT OF PROVIDING INFORMATION

If you want information about your personal data, we will provide you with a copy of the data we have about you and information about how it is processed.

b. RIGHT TO RECTIFICATION

You have a right to correction and/or completion to the person responsible if the processed personal data concerning you is incorrect or incomplete. Under certain circumstances, the submission of receipts may be required.

c. RIGHT TO RESTRICTION OF PROCESSING

Under certain conditions, you can request that the processing of your personal data be restricted

i.e. RIGHT TO DELETION

You can request the deletion of your personal data to the extent permitted by law.

e. RIGHT TO DATA PORTABILITY

You can request a copy of the personal data you have provided to us in a structured, commonly used and machine-readable format. If this is technically feasible, you can request that we transmit this copy to a third party.

f. RIGHT TO WITHDRAW YOUR CONSENT

If the processing of your personal data is based on your consent, you can revoke this at any time with effect for the future.

G. FILE A COMPLAINT WITH A DATA PROTECTION AUTHORITY

In addition to exercising the above rights, you can lodge a complaint with any supervisory authority responsible for data protection.

H. RIGHT TO OBJECT

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on Article 6 Paragraph 1 lit. e or f GDPR; this also applies to profiling based on these provisions.

 

MAIL
© 2025 Metality eV