Privacy Statement

1. General Information

The protection of personal data (name, address, e-mail etc.) is an extremely important concern to German Toilet Organization e. V. (GTO). Everyone has the right to know what happens to their own data. GTO therefore informs all visitors of the website and social media profiles about the type, scope as well as the purpose of the processing of personal data.

a) Responsible Body
The responsible body for the data processing on this website is:

German Toilet Organization e. V.
Paulsenstrasse 23
12163 Berlin, Germany

GTO is a non-profit organization registered according to German charity law and regulations (entry no. 25207 B in the register of societies at the district court Charlottenburg), represented by the executive board: Dr. Reinhard Marth, Dr. Kilian Langenbach, Barbara Wagner.

b) Data Processing
GTO processes personal data in compliance with the relevant data protection regulations, in particular the DSGVO and the BDSG. Data processing by GTO is only taking place on the basis of legal permission. When using this website, GTO will process personal data only with your consent (Art. 6 para. 1 letter a) DSGVO), to fulfil a contract to which you are a party, or at your request to carry out pre-contractual measures (Art. 6 para. 1 letter b) DSGVO), to fulfil a legal obligation (Art. 6 para. 1 letter c) DSGVO), or if the processing is necessary to safeguard your rightful interests or the rightful interests of a third party, unless your interests or fundamental rights and freedoms, which require the protection of personal data, prevail (Art. 6 para. 1 sentence f) DSGVO). If you apply for a vacancy at GTO, GTO will also process your personal data for the purpose of deciding about the establishment of an employment relationship (§ 26 para. 1 sentence 1 BDSG). GTO does not sell data to third parties. Consents to the collection or use of data may be revoked at any time coming into effect in the future.

c) Duration of Storing
Unless resulting otherwise from the following notices, GTO will only store the data for as long as necessary for achieving the purpose of processing or to fulfil contractual or legal obligations. Such legal storage obligations may arise in particular from commercial or tax law regulations.

d) Technical Service Providers
Unless resulting otherwise from the following notices, the data will be processed on the servers of technical service providers commissioned by GTO for this purpose. These service providers process the data only in accordance with explicit instructions and are contractually obliged to guarantee adequate technical and organisational measures for data protection.

e) Data Transmission to the USA
Visiting the GTO website may involve the transmission of certain personal data to the USA. For the transmission of data to the USA as a third country, i.e. a country in which the DSGVO law does not apply, the European Commission has decided in accordance with Art. 45 DSGVO that an adequate level of data protection is required for companies certified under the EU-US Privacy Shield. The transfer to the USA will then take place in a permissible manner.

2. Processing of Server-log-files

For the purely informative use of the GTO website, general information is initially stored automatically (i.e. not via registration), transmitted by your browser to the GTO server. This includes by default: browser type/version, operating system used, accessed page, previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code.

The processing is carried out to safeguard the legitimate interests of GTO and is based on the legal basis of Art. 6 Para. 1 Letter f) DSGVO. This processing serves the purpose of the technical administration and security of the website. The stored data will be deleted after seven days unless there is a justified suspicion of illegal use on the basis of concrete indications and therefore further examination and processing of the information is necessary.

GTO is not able to identify you as person on the basis of the stored information. Art. 15 to 22 DSGVO therefore do not apply in accordance to Art. 11 para. 2 DSGVO, unless you provide additional information in order to exercise your rights under these articles, enabling identification.

3. Contact Possibilities and Seminar Enquiries

If you wish to send a message via the provided contact e-mail or register for a seminar via the provided contact option, GTO will process the transmitted data for the purpose of answering your enquiry.
If your request is for the completion or execution of a contract with the GTO, Art. 6 para. 1 letter b) DSGVO is the legal basis for data processing. Otherwise, GTO will process the data on the basis of its legitimate interest of contacting inquiring persons. The legal basis for the data processing is then Art. 6 para. 1 letter f) DSGVO.

4. GTO Newsletters

On its website, GTO offers the option to register for various newsletters. After registration you will be regularly informed about current news and offers of GTO. For registration a valid e-mail address is required. To verify the e-mail address, you will first receive a registration e-mail, which you must confirm via a link (double opt-in). If you subscribe to the newsletter on our website, GTO processes personal data such as your e-mail address and your name on the basis of the consent you have given. The processing is based on the legal basis of Art. 6 Para. 1 Letter a) DSGVO.

You can revoke your consent at any time with effect for the future, for example via the "unsubscribe" link in the newsletter or by contacting GTO via the channels mentioned above. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

When registering for the newsletter, GTO also saves the IP address and the date and time of registration. The processing of this data is necessary in order to be able to prove that you have given your consent. The legal basis results from the legal obligation to document your consent (Art. 6 Para. 1 Letter c)) in connection with Art. 7 para. 1 DSGVO).

a) Contents of the newsletter
On the GTO website you can currently subscribe to three different newsletters. In the newsletter "Toilettenpapier" GTO informs about the work of the association and the activities as a member / secretary of the WASH network every three months. With the newsletter about the courses offered by GTO, information about new seminar dates and other news in the field of further education is shared. The "Toilets machen Schule" newsletter contains regular information about the "Toilets machen Schule" competition and the topic of school toilets. The newsletters will only be sent with the consent of the recipients.

b) Use of the mailing service “MailChimp”
The newsletters are sent via "MailChimp", a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. MailChimp stores the personal data of the recipients of the GTO newsletter on servers in the USA. The information is used to send the newsletters on behalf of the GTO. The Rocket Science Group LLC d/b/a MailChimp is certified under the EU-US Privacy Shield. The platform commits itself to comply with the EU data protection regulations. The GTO has concluded a "Data Processing Agreement" with MailChimp and relies on the dependability and the IT- and data-security of the provider.

c) Statistical Surveys
MailChimp collects pseudonymised usage data via the newsletter server, such as information on the subscribers' browser, the IP address and the time of retrieval. GTO thus analyses the reading behaviour and opening rates of its newsletters with the sole aim of improving them. For this purpose, statistical data is collected and processed by GTO which is not merged with your e-mail address or IP address.
The legal basis for the analysis of the newsletter is Art. 6 Para. 1 Letter f) DSGVO and the processing serves the legitimate interest in optimising the newsletter. You can object to this at any time by contacting one of the contact channels mentioned.

5. Cookies

GTO uses cookies on its website. Cookies are small text files that are stored by your browser when you visit a website. This marks the used browser which can then be recognised by the GTO web server. If this use of cookies results in the processing of personal data, this happens on the legal basis of Art. 6 Para. 1 Letter f) DSGVO. This processing serves the legitimate interest of GTO in making its website more user-friendly, effective and secure.
The GTO uses so-called "session cookies", which are deleted when the browser session is closed. Other cookies ("persistent cookies") are automatically deleted after a specified period, which may vary depending on the cookie.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can delete the cookies in the security settings of your browser at any time. You can object to the use of cookies through your browser settings in principle or in certain cases. Further information can be obtained from the Federal Office for Information Security under this link.

6. Use of Google Analytics

The GTO website uses Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google"). Google Analytics uses so-called cookies (small text files), which are stored on the user's internet-enabled device and which make an analysis of the user’s website use possible. The information generated by a cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google evaluates the information collected to compile reports on website activity for website operators and to provide other services relating to website activity and internet usage. Google may transfer this information to third parties where legally required to do, or in case such third parties process data on Google's behalf.
When visiting the GTO website, users may refuse the installation of cookies (opt-out function). Google Analytics sets a cookie to collect data about the use of the website only in the case of consent.
GTO uses Google Analytics only with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by the user's browser is not merged with other Google data.

Google offers a tool to deactivate the Google Analytics tracking. You get more information in German here.

7. Embedded Services and Contents of Third Parties

GTO uses services, information and content (in the following collectively referred to as "Content") provided by third parties on its website. For such an integration via inline frame, it is technically necessary to process your IP address so that the content can be sent to your browser. Your IP address will therefore be transmitted to the respective third party providers.
This data processing is carried out to safeguard GTO's legitimate interests in the optimisation and economic operation of its website and is based on the legal basis of Art. 6 Para. 1 Letter f) DSGVO. You can object to this data processing at any time via the settings of the browser used or certain browser extensions. One such extension is the matrix-based firewall matrix for the Firefox and Google Chrome browsers. Please note that this may restrict the functionality of the website.

a) Donation Form of the Bank für Sozialwirtschaft
The GTO website provides the opportunity to make donations online to users. If using this possibility, the data of the user entered in the corresponding form will be transmitted to GTO and stored. The form is provided by the Bank für Sozialwirtschaft AG ("BFS"). The data entered is therefore forwarded directly to the BFS and the technical service providers used by the BFS to provide the form, using an encrypted SSL connection, in order to execute the donation order. The data will not be passed on to other third parties. The following data is collected with the form:
Full name (surname, first name) with manner of address (optional title and company name); address (street, house number, town, postcode, country); e-mail address; bank details (IBAN); donation data (recipient of donation, amount, purpose, donation receipt desired).
If a donation receipt is desired, GTO processes the data to issue and sends a corresponding donation receipt.
The collected data is necessary for the execution of the donation order. The user's e-mail address is required to confirm the receipt of the donation order. The data will not be used for other purposes. The legal basis for the processing of the data is Art. 6 Para. 1 lit. b DSGVO.
At the time the form is sent the IP address of the user is stored, as well. GTO uses the IP address to prevent misuse of the donation form. The IP address is used for the purpose of fraud prevention and to prevent unauthorised transactions to the detriment of third parties. The legal basis for processing the IP address is Art. 6 para. 1 lit. f DSGVO.
The data are deleted as soon as they are no longer required for the purpose of their collection. In the case of bank data, this is the case immediately after collection of the donation amount. The address data, like all other data entered, will be stored within the framework of tax retention obligations after possibly desired issuing of a donation receipt, but will be blocked for any other use. The IP address that is additionally collected during the sending process, will be deleted after a period of seven days at the latest.
The user has the possibility to object to the processing of the data at any time. However, it should be noted that in the event of an objection, the donation order can no longer be executed as desired.
In case of any remaining questions you may have regarding data protection law, the data protection officer of the BFS may help you: datenschutzbeauftragter@sozialbank.de

b) Videos of the Platform YouTube (Google)
GTO uses the platform YouTube.com to post its own videos and make them available to the public. YouTube is the service of a third party not affiliated with us, YouTube LLC.
On the GTO website, video content is embedded using inline frames provided by the video platform YouTube. With this embedding, content of the website YouTube is displayed in parts of a browser window. The YouTube videos, however, can only be accessed by clicking on them separately. This technique is also called "framing". If you call up a (sub-)page of the GTO website on which YouTube videos are embedded this way, a connection to the YouTube servers is established and the content is displayed on the website by notifying your browser.
On the GTO website, YouTube content is embedded solely in the "extended data protection mode". This mode is provided by YouTube itself, thereby ensuring that YouTube does not store any cookies on your device for this moment. When you access the relevant pages, however, the IP address and other data specified in Section 2 are transmitted and in particular information about which of our web pages you have visited. However, this information cannot be assigned to you unless you have registered with YouTube or another Google service or are permanently registered prior to accessing the site.

As soon as you start the playback of an integrated video by clicking on it, YouTube only stores cookies on your device that do not contain any personally identifiable data, unless you are currently logged in to a Google service. These cookies can be prevented by appropriate browser settings and extensions.

Address and link to third-party privacy notices Google/YouTube:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

8. External Links

The GTO website contains links to other websites. Where links are provided, GTO tries to ensure that they also comply with our data protection and security standards. However, GTO has no influence on the permanent or full compliance of other providers with data protection and security regulations and is in no way responsible for these other websites’ content. For this reason, please inform yourself about the data protection declarations on the websites of the other providers.

9. Social Media

GTO maintains profiles on the social media networks Facebook, Instagram and Twitter as well as on the video platform YouTube in order to inform about the association's work and to communicate with interested parties. These online presences’ users’ data may be processed outside the territory of the European Union, which makes it difficult, for example, to enforce user rights. When visiting the online presences, profiles can be created on the basis of the users’ interests, which may be used for market research and advertising purposes. This is usually done through the use of cookies.
For more information on the respective processing operations and the opt-out possibilities, GTO refers to the information given by the providers. For information requests and the assertion of user rights, the respective provider should be contacted, as only this provider has full access to the collected user data. Providers who are certified under the Privacy Shield are obliged with the data protection standards of the EU.

a) Facebook & Instagram
Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

b) Google / YouTube
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

c) Twitter
Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA

10. Processing in the Exercise of your Rights under Art. 15 to 22 DSGVO

If you exercise your rights in accordance with Articles 12 to 22 of the DSGVO, the GTO will process the provided personal for the purpose of the implementation of these rights by GTO and in order to be able to provide proof thereof.
The GTO will process stored data for the purpose of information provision and data protection control purposes only and will otherwise restrict the processing in accordance with Art 18 DSGVO.
These processing operations are legally based on Art. 6 para. 1 letter. c) DSGVO in connection with Art. 15 to 22 DSGVO and § 34 para. 2 BDSG.

11. Your Rights

As a data subject, you have the right to assert your data subject rights against GTO. You have the following right in particular:

  • Pursuant to Art. 15 DSGVO and § 34 BDSG, you have the right to request information as to whether or not and, if so, to what extent we process personal data related to you.
  • You have the right to demand that we correct your data in accordance with Art. 16 DSGVO.
  • You have the right to demand that we delete your personal data in accordance with Art. 17 DSGVO and § 35 BDSG.
  • You have the right to have the processing of your personal data restricted in accordance with Art. 18 DSGVO.
  • You have the right, in accordance with Art. 20 DSGVO, to receive the personal data concerning you which and which you have provided to us in a structured, common and machine-readable format and to forward this data to another person responsible.
  • If you have given us an individual consent for data processing, you can revoke this consent at any time in accordance with Art. 7 para. 3 DSGVO. Such a revocation does not affect the legality of the processing, which has taken place until the revocation on the basis of the consent.

If you think that the processing of your personal data violates the legal provisions of the DSGVO, you have the right to file a complaint with a supervisory authority in accordance with Art. 77 DSGVO.

12. Right to Objection

In accordance to Article 21(1) DSGVO, you have the right to object to processing operations on the legal basis of Article 6 section 1 letter e) or f) DSGVO on grounds arising from your particular situation. If GTO processes personal data about you for the purpose of direct marketing, you may object to such processing in accordance to Art. 21 para. 2 and para. 3 DSGVO.

13. Data Protection Officer

GTO provides information on stored data free of charge in accordance with the statutory provisions. The data protection officer answers all inquiries regarding the collection, processing or use of personal data. In addition to the right to information, you have the right to have data corrected, blocked or deleted and to revoke any given consent given for the future in accordance with the statutory provisions.

Contact: datenschutz@germantoilet.org