Data protection

1. general information

1.1 What is personal data?

Personal data is information that discloses or may disclose the identity of the user. We adhere to the principle of data avoidance. The collection of personal data is avoided as far as possible.

 

1.2 Handling of personal data

Personal data is used exclusively to establish the contract, organise its content, implement or process the contractual relationship (Art. 6 I p. 1 b GDPR).

In addition, personal data will only be processed if we have received your consent to do so (Art. 6 I p. 1 a GDPR) or if the processing of the data is necessary for our legitimate interests and if the balancing of interests shows that there are no overriding interests, fundamental rights or freedoms on your part to the contrary (Art. 6 I p. 1 f GDPR).

We may use processors to process your personal data, but we will not pass on your personal data to third parties beyond this.

The data will only be passed on to the shipping company commissioned with the delivery for the fulfilment of the contract, insofar as this is necessary for the delivery of ordered goods. In order to process payments, the necessary payment data will be passed on to the credit institution commissioned with the payment and, if applicable, to the commissioned and selected payment service provider.

Your personal data is processed exclusively within the EU, unless otherwise stated below.

 

1.3 Usage data

General technical information is collected when you visit the website. This includes the IP address used, time, duration of the visit, browser type and, if applicable, the originating page. For technical reasons, this usage data is registered in a log file and can be used and stored for the purpose of analysing the statistics of this website. This usage data is not linked to your other personal data.

 

1.4 Duration of storage

After the end of the purpose for which the data was collected, we will only store your personal data for as long as this is required by law (in particular tax law).

 

 

2. your rights

2.1 Information

You can request information from us as to whether we process personal data about you and, if this is the case, you have a right to information about this personal data and to the further information specified in Art. 15 GDPR.

 

2.2 Right to rectification

You have the right to rectification of inaccurate personal data concerning you and may request the completion of incomplete personal data in accordance with Art. 16 GDPR.

 

2.3 Right to cancellation

You have the right to demand that we erase the personal data concerning you without undue delay. We are obliged to delete this data immediately, in particular if one of the following reasons applies:

• Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.

• You withdraw your consent on which the processing of your data was based and there is no other legal basis for the processing.

• Your data has been processed unlawfully.

• The right to erasure does not apply if your personal data is required for the assertion, exercise or defence of our legal claims.

 

2.4 Right to restriction of processing

You have the right to demand that we restrict the processing of your personal data if

• you dispute the accuracy of the data and we therefore check the accuracy,

• the processing is unlawful and you oppose the erasure and request the restriction of use instead

• we no longer need the data, but you need it for the establishment, exercise or defence of legal claims,

• you have objected to the processing of your data and it is not yet certain whether our legitimate reasons outweigh your reasons.

 

2.5 Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent or on a contract and the processing is carried out by automated means.

 

2.6 Right of cancellation

If the processing of your personal data is based on consent, you have the right to withdraw this consent at any time.

 

2.7 General information and right of appeal

The exercise of your above rights is generally free of charge for you. In the event of complaints, you have the right to contact the supervisory authority responsible for us, the state data protection officer.

 

 

3. data security

3.1 Data security

All data on our website is protected by technical and organisational measures against loss, destruction, access, modification and dissemination.

 

3.2 Sessions and cookies

To operate the website, we use cookies or server-side sessions in which data can be stored. We ensure that no personal data is transferred from sessions or through cookies without your express consent and that cookies are only used if this is technically necessary for the website (e.g. spam protection for the contact form, shopping basket function) and thus the consideration shows that there are no overriding interests on your part to the contrary (Art. 6 I p. 1 f GDPR) or that you have given your express consent.

With your express consent, we use cookies to personalise content and advertisements, to offer functions for social media and to analyse access to our website. We may share information about your use of our website with our social media, advertising and analytics partners with your consent at . Our partners may be able to combine this information with other data that the partners already have about you.

Below you will find the domain, name and duration of the cookies used only on the basis of your consent:

Site's own cookies

Domain Group Cookie Storage duration

ehda-ev.eu Technically necessary PHPSESSID Session

ehda-ev.eu Technically necessary Contao HTTPS CSRF Token Session

ehda-ev.eu Technically necessary CCB Contao Token 180 days

 

4. making contact

To contact us regarding data protection, you are welcome to use the following contact options. Controller within the meaning of the GDPR:

European Health Data Alliance e.V. Unter den Linden 21 10117 Berlin info@ehda-ev.eu

 

Consent/change cookie settings

You can change or revoke your consent at any time at this point in the privacy policy.

 

Your consent applies to the following domains: ehda-ev.eu

Change your consent

 

Articles of Association

The statutes of the EHDA e.V. Here you can download the statutes of the EHDA e.V.