PRIVACY POLICY

1. NAME AND ADDRESS OF THE RESPONSIBLE

The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is Metality eV, Postfach 703116, 60568 Frankfurt am Main, members@metality.org.

2. GENERAL INFORMATION ABOUT DATA PROCESSING

a. SCOPE OF PROCESSING OF PERSONAL DATA

In principle, we only process the personal data of our users to the extent that this is necessary to provide a functional website and our content and services.

b. DATA DELETION AND STORAGE PERIOD

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.

c. USE OF MICROSOFT FORMS

We use the "Microsoft Forms" tool to conduct surveys and order processes. Microsoft Forms is a service of Microsoft Corporation. The processing is carried out on behalf of Metality eV by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.

Please note that this data protection information only informs you about the processing of your personal data by Metality eV when using Microsoft Forms. If you require information about the processing of your personal data by Microsoft, please refer to the relevant statement at Microsoft.

When using Microsoft Forms, different types of data are processed. The scope of the data also depends on the information you provide when participating, especially if the questions are formulated "openly".

The following personal data are the subject of processing: IP address, name, email address, profile picture (optional if stored in Microsoft 365), preferred language, status (optional if stored in Microsoft 365), date and time the questionnaire was opened, date and time the answer was sent; as well as information in the survey/query. The latter information is questionnaire-specific. The user decides which personal data is transmitted when entering free text in the answer fields.

Please also note that we cannot rule out the possibility of data being transferred to the USA when using Microsoft Forms. This is based on the adequacy decision of the EU Commission for data transfer between the European Economic Area (EEA) and the USA.

3. INDIVIDUAL PROCESSING OPERATIONS

a. NEWSLETTER

You can subscribe to a free newsletter on our website. When registering for the newsletter, the data from the input mask, ie your name, your e-mail address and the language are transmitted to us.

In connection with the processing of data for the sending of newsletters, there is no disclosure of the data to third parties. The data will be used exclusively for sending the newsletter.

The collection of the user's e-mail address serves to deliver the newsletter. The legal basis for processing the data after the user has registered for the newsletter is Article 6(1)(a) GDPR if the user has given their consent.

Subscription to the newsletter may be terminated at any time by the user concerned. For this purpose, there is a corresponding link in each newsletter.

b. ORDER BLACKDOG RIBBON

There is an order form for the Blackdog wristbands on our website. If a user takes advantage of this option, personal data will be transmitted to us and stored. This data is the data specified in paragraph 2c) above within the framework of the use of Microsoft Forms, as well as the content of the form, ie name, complete address, and the content of the personal message, if applicable. Your consent will be obtained for the processing of the data during the sending process and reference will be made to this data protection declaration.

Alternatively, the wristbands can be ordered via the e-mail addresses provided. In this case, the user's personal data transmitted with the e-mail will be stored.

The data will only be used to send the wristbands. The legal basis for processing the data is Article 6(1)(a) GDPR if the user has given their consent. The legal basis for the processing of data transmitted in the course of sending an email is Article 6 Paragraph 1 Letter f GDPR.

The processing of the personal data from the input mask serves us to send the Blackdog wristbands. If contact is made by email, this is also the necessary legitimate interest in the processing of the data.

c. CONTACT FORM AND EMAIL CONTACT

There is also a contact form on our website. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and saved. This data is name, e-mail address and the content of the personal message.

For the processing of the data in the context of the sending process your consent is obtained and referred to this privacy statement.

Alternatively, you can contact us via the email addresses provided. In this case, the user's personal data transmitted with the e-mail will be stored.

The data will only be used to process the conversation.

The legal basis for processing the data is Article 6(1)(a) GDPR if the user has given their consent. The legal basis for the processing of data transmitted in the course of sending an email is Article 6 Paragraph 1 Letter f GDPR.

The processing of the personal data from the input mask serves us to process the contact. If contact is made by e-mail, this is also the necessary legitimate interest in the processing of the data.

The user has the possibility at any time to revoke his consent to the processing of the personal data. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the conversation can not continue.

4. SUBJECT RIGHTS

If personal data is processed by you, you are the person concerned within the meaning of the DSGVO and you have the following rights towards the responsible person:

a. RIGHT OF PROVIDING INFORMATION

If you want information about your personal data, we will provide you with a copy of the data we have about you and information about how it is processed.

b. RIGHT TO RECTIFICATION

You have a right to correction and/or completion to the person responsible if the processed personal data concerning you is incorrect or incomplete. Under certain circumstances, the submission of receipts may be required.

c. RIGHT TO RESTRICTION OF PROCESSING

Under certain conditions, you can request that the processing of your personal data be restricted

i.e. RIGHT TO DELETION

You can request the deletion of your personal data to the extent permitted by law.

e. RIGHT TO DATA PORTABILITY

You can request a copy of the personal data you have provided to us in a structured, commonly used and machine-readable format. If this is technically feasible, you can request that we transmit this copy to a third party.

f. RIGHT TO WITHDRAW YOUR CONSENT

If the processing of your personal data is based on your consent, you can revoke this at any time with effect for the future.

G. FILE A COMPLAINT WITH A DATA PROTECTION AUTHORITY

In addition to exercising the above rights, you can lodge a complaint with any supervisory authority responsible for data protection.

H. RIGHT TO OBJECT

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on Article 6 Paragraph 1 lit. e or f GDPR; this also applies to profiling based on these provisions.