Declaration of Data Protection

2018-05-24

Protection of your privacy is of prime concerne to us.
We only collect data that we need to provide our services and tasks, use them only for these purposes and treat them with great care.
Below we inform you in detail about the handling of your data.

Legal Basis:
Regulation (EU) 2016/… of the European Parliament and of the Council
on the protection of natural persons
with regard to the processing of personal data
and on the free movement of such data
and repealing Directive 95/
46/EC
(General Data Protection Regulation) aka GDPR

Legal basis for the data processing:
Art. 6 Abs. 1f ) GDPR when visiting the web site (IP-Address / Cookies)
Art. 6 Abs. 1a) / 1b) GDPR when collecting address data for licence, membership, purchase, insurance.
In principle, personal data is only collected if you voluntarily provide it to us as part of an application for membership, a licence registration, a purchase order or the registration for an event (such as a course), e.e. when creating a member- or customer account. We only use the data to fulfill the respective purpose of the data collection.
The organs of the VDWS or other persons acting on behalf of the VDWS are prohibited from processing, disclosing, disclosing or otherwise using personal data for purposes other than those specified in the data collection. All stored data must be protected against the knowledge of third parties by appropriate technical and organizational measures. This obligation also exists after leaving the VDWS. Company-related data of water sports schools which are members of the Association of German Watersport Schools VDWS e.V. are exempted from this prohibition.

Which data do we collect and for what purpose?
The kind and extent of the data collected depends on which of our services you use.

Your IP address:
Each time you visit one of our web pages, the IP address of the calling browser, the time and information about the page last visited (‘referrer’), the version of your browser and the resolution of your screen are recorded. These data serve to protect against misuse of our services (brute-force attacks) as well as to analyze and improve our services and to create statistics of use of our web site by country, browser type, etc.
We do not use the IP address to identify or locate you.
Unless superordinate concerns such as a legal proceeding or a legally binding governmental request prevent this, your IP address will be deleted or made unrecognicable after 14 days.

Your location data:
We do not collect data about your current geographical position.

Cookies:
Cookies are small text files stored by your Internet browser on your computer. We use cookies exclusively to provide our services (session cookies / shopping cart cookies), but do not to track your browsing behavior (third-party cookies). Web pages of third parties do not have access to the cookies we set and we do not read any cookies from third parties.
Session and shopping cart cookies are deleted when the browser program terminates.
Exception for logins of our VDWS member schools: The print settings for licence cards are stored in a persistent cookie so that they are available again at the next browser start.

Your name, date of birth, address, email address, telephone number and other contact details:
We need your personal information when you
– Register a VDWS licence yourself or have it registered by one of our member schools
– you want to take part in an instructor course or other VDWS events
– you want to become a member of VDWS e.V.
– you want to acquire a VDWS SafetyTool policy
– you want to buy a product in the VDWS shop (the date of birth is not necessary for this)
Your data, in particular name and date of birth, serve to uniquely identify you as the owner of the licence, as a course participant, as an insurance holder or as a VDWS member.
The minimum duration of the storage is in the case of an order / insurance the statutory retention period or the period of validity of the license.

Your personal photo:
Your photo is required to print out the personalized licence card and also to allow a complete online presentation of the licence card, replacing the printed license card.
We do not use your photo in any other way.
You can customize or delete your photo at any time.

Use of your contact information for communication:
We use the stored contact data (email address, telephone number, postal address) to contact you in order to supply our services. This applies on
– the change of your data record, such as the change of the address
– the status change of a VDWS license or membership (registration / expiry etc.)
– Information about the activation / expiry / renewal of an insurance policy
– Information about the processing status / shipping of your order with us and other documents
– to answer your inquiries
VDWS members also receive periodic information about the VDWS association, information about special offers from the VDWS and birthday greetings.
These special mails are optional and can be turned on and off by the member.
We need your help:
To provide our services, especially to VDWS members and insurance customers, a functional email address is essential. Please inform us of any changes to your email address.

Data transfer:
A transfer of your data takes place in the case of an order to the delivery company responsible for the delivery (Post / UPS etc.), as far as this is necessary for the delivery of the goods.
To process payments, we pass on your payment data to the bank responsible for the payment. For safety reasons, the IBAN of your bank account is only saved in truncated form in the online database.
Credit card data is not stored but recorded and processed directly by our payment service provider.
Our member schools can verify your license if they know your name and date of birth or name and licence code. Here an online photo is helpful.
The Member School that has collected your data (I.e. where you acquired your water sports licence) also has access to your data under restrictions of this Privacy Policy.
We also disclose your information to the appropriate authorities, if forced by a legal obligation, such as an enforceable administrative request or a judicial procedure.
PayPal:
We offer payment via PayPal. Provider of this payment service is PayPal Europe S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
If you choose to pay by PayPal, personally identifiable information such as first name, last name, address, email address, IP address, and possibly other information necessary for payment processing will be transmitted to Paypal. The transmission of your data to PayPal takes place in accordance with DSGVO Art. 6 para. 1 a) (consent) or Art. 6 para. 1 b) (fulfillment of a contract).
PayPal may share this information with affiliates, service providers, or subcontractors, if necessary to fulfill its contractual obligations or if the data is to be further processed on behalf of the contract.
You may revoke your consent to the use of your personal information with PayPal. The current privacy policy of PayPal can be found here:
https://www.paypal.com/en/webapps/mpp/ua/privacy-full

YouTube:
Our website makes use of video plugins provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit a web page with a YouTube plugin, your IP address and information about the page visited will be sent to Youtube. If you own a YouTube account and are logged in, YouTube may associate the pages you visit with your personal profile. To prevent this, you should surf with a logged-out YouTube account. YouTube videos are provided on our web site to improve it’s visual attractiveness. The transmission of data takes place in accordance with DSGVO Art. 6 para. 1 f).
The current privacy policy of YouTube can be found here: https://www.google.de/intl/en/policies/privacy

Correction / blocking / restriction of processing:
You can carry out the correction of your address data yourself or apply for a correction formless to the VDWS. To prevent misuse, the application for blocking or restriction of processing requires appropriate authentication.

Right of information:
You can informally request an excerpt of your address data from the VDWS.

Deletion / Revocation of Consent / ‘Right to Forget’:
You can, as far as no legal requirements prevent this, request the deletion (overwriting) of your record at the VDWS. In order to prevent abuse and willful deletion of licences, the request for deletion must be in writing with appropriate authentication. The deletion of your data record also means that the VDWS no longer has any evidence of your licences and, in the event of loss, can not issue a replacement licence.

Right for data portability:
You can informally request a machine-readable set of your data from the VDWS.

Duration of storage of personal data:
Personal data remains stored until fulfillment of the purpose for which it was collected, but at least for the respective statutory retention period. After expiry of this period, the corresponding data will be deleted, if they are no longer needed for the purpose of contract fulfillment or contract initiation.

Profiling / Automated Decision Making:
We do not perform automated decision making or profiling based on your personal data.

Data Security:
We secure our website and other systems by technical and organizational measures against loss, destruction, access, modification or dissemination of your data by unauthorized persons. Access to your customer account is only possible by entering your personal password. You should always keep your access information confidential and close the browser window when you stop communicating with us, especially if you share your computer with others.

Server location:
Your data is stored exclusively on servers within the EU.

Data Protection Officer:
A data protection officer is not appointed as the legal requirements for an appointment is not met.

Right to complain to the supervisory authority:
For complaints, please contact the following authority:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 27
91522 Ansbach
poststelle@lda.bayern.de
https://www.lda.bayern.de

VDWS contact for data protection:
For questions regarding the collection, processing or use of your personal data, information, correction, blocking or deletion of data and revocation of granted consent, please contact:

VDWS – Service GmbH für Windsurfingschulausrüstung und -beratung
Lisbeth Prade
Dr.-Karl-Slevogt-Str. 5
DE-82362 Weilheim
E-Mail: info@vdws.de
Telefax: +49-881-931115