info@ygca-ev.org

Privacy Policy

1.0 Who We are

Our website address is: https://ygca-ev.org/

2.0  What personal data we collect and why we collect it

2.1 Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/.

After approval of your comment, your profile picture is visible to the public in the context of your comment.

2.2 Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included.

Visitors to the website can download and extract any location data from images on the website.

3.0  Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

4.0  Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

5.0  How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

6.0  What rights you have over your data

If you have an account on this site or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

 

 

Privacy Policy

 

Introduction

Data Privacy is a very important issue for us and we hold the protection of your personal data in very high esteem.

We only ask for personal data when we really need it in order to provide a service to you. We collect that data by fair and lawful means, and with your knowledge and consent.

The purpose of this Privacy Policy is also to let you know why we’re collecting personal data and how this will be processed.

Read this Privacy Policy carefully and contact us as indicated below if you have any questions.

We comply with the provisions of the German Federal Data Protection Act and the German Tele Media Act as well as with the EU General Data Protection Regulation.

This Privacy Policy provides you with information about how we process your personal data when you visit our website when you register or apply for open positions through our website when you are a candidate or participant at any of the YGCA program and initiatives; or when you use any services offered through SYA website.

This Privacy Policy applies to https://ygca-ev.org/ if you visit another website, the data protection provisions of the respective website operator applies.

This also applies to websites to which we refer by means of a link, which might be placed on our website, and we recommend that you obtain information on the respective website on how your personal data is collected and processed.

This version is effective from 1st January 2021

This Privacy Policy is organized as follows:

1.General Information and Overview

The information provided in this section provides general information, which applies to all services and processes unless specified otherwise within the specific sections.

1.1.  Contact

Responsible for the collection and processing of your data in accordance with Art. 4 para 7 GDPR is:

MACHWERK c/o Young Global Citizens Assembly e.V. – Am Krögel 2, 10179 Berlin, Germany

info@ygca-ev.org

(“Young Global Citizens Assembly e.V. ”, “we”, “us” or “our”)

You can contact our Data Protection Officer as follows:

Email: info@ygca-ev.org

Our Privacy Policy aims to be simple and understandable for everyone. The terms used in this Privacy Policy, unless they are defined herein or in other sources we explicitly refer to, correspond to the official terms of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, “GDPR”). Such official terms are defined in Art. 4 GDPR. The full text of the GDPR can be found here.

1.2.  Access to Data and Transferal

Depending on your use of our services different sets of data may be processed or stored, as is described in detail further below.

Our volunteers and contractors have access to the data based on our access control policies and are contractually bound to keep the information confidential.

Young Global Citizens Assembly e.V. uses service providers in order to operate and maintain Young Global Citizens Assembly e.V. ’s website and to be able to offer certain services related thereto, which may receive and process personal data of the users. Any service providers engaged by Young Global Citizens Assembly e.V. are obliged to comply with the applicable data protection regulations and will process data exclusively in accordance with the instructions of Young Global Citizens Assembly e.V. .

Young Global Citizens Assembly e.V. and its service providers commit to take reasonable technical and organizational precautions in order to protect the data of the users.

Your data will not be transferred to any third parties unless:

  •         we have explicitly indicated this in the description of such data processing;
  •         You have given express consent pursuant to Art. 6 para. 1 s. 1 lit. (a) GDPR;
  •         Disclosure in accordance with Art. 6 para. 1 s. 1 lit. (f) GDPR is required to assert, exercise or defend legal claims and there is no reason to assume that you have a predominantly legitimate interest in the non-disclosure of your data;
  •         Disclosure in accordance with Art. 6 para. 1 s. 1 lit. (c) GDPR is a legal obligation and
  •         Transfer to third parties is required by Art. 6 para. 1 s. 1 lit. (b) GDPR for the performance of contractual relationships with you.

Any third party processor, which handles data on Young Global Citizens Assembly e.V. ’s behalf is required to do so in accordance with contractual terms which require that the data is kept secure, is processed in accordance with applicable data protection laws, and used only as we have instructed and not for that Third Party Processor’s own purposes (unless you have explicitly consented to them doing so).

If our use of a Third Party Processor involves the transfer of personal data to a location outside of the European Economic Area, we apply European Commission-approved standard contractual clauses to ensure that the personal data is adequately protected in that location.

2. Servers. General Services

2.1.  GoDaddy

 

The main Young Global Citizens Assembly e.V. servers and data storages are hosted at GoDaddy.com

We have concluded a data processing agreement with GoDaddy. Using GoDaddy personal data may be transferred to the USA. In order to ensure an adequate level of data protection in accordance with the provisions of the GDPR, we have concluded standard contractual clauses with the provider in accordance with Art. 46 Para. 2 lit. c GDPR.

Contact: GoDaddy Corporate Headquarters 14455 N. Hayden Rd., Ste. 226 Scottsdale, AZ 85260 USA.

More information:

https://www.godaddy.com/legal/agreements

https://www.godaddy.com/legal/agreements/privacy-policy

 

3.Cookies

In order to optimize our services, we use cookies on different pages of the Website / Young Global Citizens Assembly e.V. platform. Cookies are small text files that are stored on your device. Some of the cookies will be deleted at the end of your browser session (so-called session cookies). Other cookies may remain on your device and allow us to identify your browser the next time you visit the YGCA platform (so-called persistent cookies).

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. language settings). Other cookies are used to evaluate user behavior or display advertising.

Technically necessary cookies are stored on the basis of Art. 6 para. 1 s. 1 lit. (f) GDPR. We have a legitimate interest in the storage of cookies for the technically error-free and optimized presentation of our services. Other cookies are only stored with your consent on the basis of Art. 6 para. 1 s. 1 lit. (a) GDPR. This consent can be withdrawn at any time for the future. The legal basis may also result from Art. 6 para. 1 s. 1 lit. (b) GDPR if the processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the request of the data subject.

On our website we give you the opportunity to select the type of cookies that will be used in addition to such cookies that are essential for the functionality of the Website (“Essential Cookies”). Provided you have given your consent on our Website, we also use cookies in order to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer to the users. Insofar as cookies are used for analysis purposes, we will inform you of this separately within the framework of this privacy policy and obtain your consent. These cookies enable us to automatically recognize when you return to our site that you have already visited our website. These cookies are automatically deleted after a certain period (14 months).

You can set your browser to:

■     Be informed about the setting of cookies.

■     Only allow cookies in individual cases,

■     Exclude the acceptance of cookies for certain cases or generally,

■     Activate the automatic deletion of cookies when the browser is closed.

The cookie settings can be managed under the following links for each browser:

Google Chrome

Mozilla Firefox

Edge (Microsoft)

Safari

Opera

You can also manage cookies of many companies and functions used for advertising individually. To do this, use the appropriate user tools, available at https://www.aboutads.info/choices/ or  http://www.youronlinechoices.com/uk/your-ad-choices.

Most browsers also offer a so-called “do-not-track function”. When this feature is enabled, the browser tells ad networks, websites, and applications that you do not want to be “tracked” for behavioral advertising and the like.

For information and instructions on how to edit this feature, please refer to the links below, depending on your browser provider:

Google Chrome

Mozilla Firefox

Edge (Microsoft)

Safari

Opera

Additionally, you can prevent the loading of so-called scripts by default. “No Script” allows the execution of Java Scripts, Java and other plug-ins only at trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).

In case of non-acceptance of cookies, the functionality of the YGCA platform may be limited.

4.Tracking Measures and Analysis Tools

We use Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google“). In this context, pseudonymised user profiles are created and cookies (see Section 3) are used. The information generated by the cookie about your use of this website such as

■     Browser type/version

■     Operating system used

■     Referrer URL (the previously visited page)

■     Host name of the accessing computer (IP address)

■     Time of the server request

are transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports about the website activities and to provide further services associated with website use and Internet use for the purposes of market research and demand-oriented design of these websites. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of the company. Under no circumstances will your IP address be merged with other data from Google. The IP addresses are anonymized using the Google Analytics extension “anonymizeIp()”, so that an assignment is not possible (IP masking).

Google will act for us as a processor within the meaning of Article 28 GDPR.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing a browser add-on.

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie is set which prevents future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

Information on data protection in connection with Google Analytics can be found in the

Google Analytics Help.

5.Other external services

We may use a number of other external services embedded in our website to better display certain content or deliver additional services. Below is a list of services and their respective privacy policies

5.1.Google Maps

We use Google Maps on this website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To guarantee the functionality of Google Maps, we store your IP-address. This information is sent to and stored on Google’s servers in the USA. We want to provide our online offer in an appealing way and ease the search for addresses. If you have given your consent, the legal basis for the processing is Art. 6 para. 1 lit. a GDPR. The provider of this website has no influence on the data transfer. Further details about the handling of data can be found in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/

Opt-out: https://www.google.com/settings/ads/

5.2.Google Web Fonts

This site uses web fonts provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) to uniformly display fonts. Google Web Fonts allows us to use external fonts, so-called Google Fonts. When you visit our website, the required Google Font is loaded from your web browser into your browser cache to display texts and fonts correctly. This is necessary so that your browser can also show an optically improved representation of our texts. If your browser does not support this feature, your computer will use a standard font for display. These web fonts are integrated by a server call, usually a Google server in the USA. This transfers to the server which page of our website you have visited. Google also stores the IP address of the browser of the visitor’s terminal device.

We use Google Web Fonts for optimization purposes, in particular to improve the use of our Internet presence for you and to make its design more user-friendly. This is also our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

Further information on data protection can be found in Google’s data protection declaration: http://www.google.de/intl/de/policies/privacy

For more information about Google Web Fonts, visit http://www.google.com/webfonts/ , https://developers.google.com/fonts/faq?hl=en-GB&csw=1https://www.google.com/fonts#AboutPlace:about.

5.3.Youtube

We use YouTube plugins on our website. YouTube is a service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). If you visit a website that is operated by us and uses a YouTube plugin, a connection to YouTube servers will be established. YouTube servers will be informed about which of our websites you visited. When you are logged in your YouTube account, you enable YouTube to assign your browsing behavior to your particular account. You can prevent this by logging out of your account. Further information about the handling of user data are stated in YouTube’s privacy policy, available at:https://www.google.de/intl/de/policies/privacy.

We use the advanced privacy mode which, according to the provider, only leads to the storage of user information when a video is actively played. When embedded YouTube videos are played, the provider uses cookies in order to collect information about user behavior. This procedure enables YouTube to record video statistics, enhance user friendliness and prevent abusive behavior. When you are logged in your Google account, your data will be assigned to your account when you play videos. You can prevent the assignment by logging out of your account before playing the video. Google stores the data (also for users that are not logged in) in the form of user profiles and analyses them. The legal basis for the analysis is Google’s legitimate interest in displaying personalized advertisement, market research and adequate website presentation. You have the right to object to the creation of user profiles. If you want to want to exercise this right, you have to address YouTube. By visiting this website, a connection to the Google network “DoubleClick” is established, independently from playing an embedded video, and can lead to further data processing, which are not influenced by us.

6. Donations via Betterplace

We process the data you enter in the donation input mask on the website in order to process the payment of donations by you via the donation platform betterplace.org. embedded in the website. The platform is operated by gut.org gemeinnützige Aktiengesellschaft, Schlesische Straße 26, 10997 Berlin, Germany. The information you enter in the donaion input mask is transmitted to betterplace.org by clicking on the “Donate Now!” button and is processed to complete your donation using the chosen payment method and to issue a donation receipt.

The legal basis for the above mentioned processing is Art. 6 para. 1 lit. b GDPR.

Further information on the handling of personal data in connection with the betterplace.org plugin can be found in the privacy policy of betterplace.org at: https://www.betterplace.org/c/rules/privacy-policy.

We use “Google reCAPTCHA” (in the following referred to as “reCAPTCHA”) within the donation input mask. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). reCAPTCHA controls whether data entries on our website (e.g. in a contact form) are made by humans or automated programs. For this purpose, reCAPTCHA analyses the user behavior on the website based on several characteristics. The analysis starts automatically as soon as the user visits the website. reCAPTCHA evaluates several information, e.g.

■     IP address

■     Length the user stays on the website

■     Mouse movements

The data recorded for the analysis are transferred to Google.

The reCAPTCHA analysis runs in the background. Website visitors are not informed about the analysis. The processing is pursuant to Art. 6 para. 1 s. 1 lit. (f) GDPR. We have a legitimate interest in protecting our website from abusive spying out of data and unwanted, automated mailings (spam).

We do not store personal data from the use of reCAPTCHA. In general, personal data concerning the data subject are deleted or disabled as soon as the purpose for storing the data has been omitted. Google’s privacy policy contains more details concerning data protection regulations, available at: https://www.google.com/intl/de/policies/privacy/

And https://www.google.com/recaptcha/intro/v3beta.html

7. Social Media Links

Social networks (Instagram, Facebook and Twitter) are only integrated on our website as links to the corresponding services. After clicking on the integrated text/image link you will be redirected to the page of the respective provider. Only after forwarding is user information transmitted to the respective provider. For information on the handling of your personal data when using these websites, please refer to the respective data protection regulations of the providers you use.

8. Contacting Young Global Citizens Assembly e.V.

If you have any questions or remarks, we offer you the opportunity to contact us by email or per post at the contacts indicated.  info@ygca-ev.org

8.1.Data Collected and Legal Basis

When you contact us we may collect and process personal information from you, including but not limited to:

■     Name

■     Contact information, such as address, telephone number, and email address

■     Any other information you voluntarily provide contacting us

We process your personal information you have transmitted on the basis of Article 6 para. 1 s. 1 lit. (f) GDPR. Our legitimate interest is to answer your questions and inquiries.

Your personal information will be stored in accordance with applicable laws and kept as long as needed to carry out the purposes described in this section, or as otherwise required by applicable law. Generally this means your personal information will be kept for the duration of the inquiry process plus a reasonable period of time on a case by case basis.

8.2. Access to Data & Transferal

We will not transfer your personal data to any external third party, except for the purpose of managing our correspondence with you, where we may work with a specialized provider contracted by us.

9.  YGCA newsletter

Via our website you can also register for our Newsletter. In this case, you will have to confirm your consent to receiving a newsletter with information about YGCA.

9.1.Data Collection & Legal Basis

We collect your email address so that we can deliver the requested periodical email newsletter from YGCA to you. No other data is collected for the purpose of sending the newsletter. We use the so-called double opt-in procedure for sending the newsletter. This means that we will not send you our newsletter by email until you have expressly confirmed that you agree to the dispatch of newsletters. In the first step, you will receive an email with a link to confirm that you, as the owner of the corresponding email address, would like to receive the newsletter in the future. With the confirmation you give us your consent according to Art. 6 para. 1 s.1 lit. (a) GDPR that we may use your personal data for the purpose of the desired newsletter dispatch.

When registering for the newsletter, in addition to the email address required for sending the newsletter, we store the IP address via which you have registered for the newsletter as well as the date and time of registration and confirmation so that we can trace any possible misuse at a later point in time.

9.2.Retention & Deletion

You can, of course, unsubscribe from the newsletter at any time via email info@ygca-ev.org, or better, by following the instructions provided at the bottom of each newsletter. After unsubscribing, your email address will be immediately removed from the system handling the newsletter.

9.3.Access to Data & Transferal

Your email address will be stored on YGCA’s secured server.  Within YGCA, only those departments will have access to your data that need it to carry out the mailing of the Newsletter.

Our email newsletters are sent via a technical service provider to whom we pass on the data you provide when you register for the newsletter. This forwarding is carried out in accordance with Art. 6 para. 1 s. 1 lit. (f) GDPR and serves our legitimate interest in the use of an effective, secure and user-friendly newsletter system. The data you enter to subscribe to the newsletter (e.g. email address) will be stored on servers located in the EU.

The service provider uses this information for the dispatch and statistical evaluation of the newsletter on our behalf. For evaluation purposes, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. In this way it can be determined whether a newsletter message was opened and which links were clicked on, if applicable.

Conversion tracking can also be used to analyze whether a predefined action (e.g. purchase of a product on our website) was carried out after clicking on the link in the newsletter. Technical information is also collected (e.g. time of access, IP address, browser type and operating system).

The data is only collected pseudonymously and is not linked to your other personal data, a direct personal reference is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

We have concluded an order processing contract with our email service provider in which we oblige him to protect our customers’ data and not to pass it on to third parties.

■     Email service provider:

■     Service provider: Mailjet

■     Address: Mailjet SAS,13-13 bis, rue de l’Aubrac, 75012 Paris, France

■     Privacy policy: https://www.mailjet.com/privacy-policy/

Privacy Shield: The US-based provider is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.

https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active

A transfer to other third parties may only take place with your consent (Art. 6 para. 1 s. 1 lit. (a) GDPR) or if we are legally obliged to do so in individual cases (Art. 6 para. 1 s. 1 lit. (c) GDPR).

10. Applying for a volunteer opportunity at YGCA

You can apply for one of the open positions at YGCA through our website by sending us an email as indicated here.

This section describes how YGCA handles your personal information when you apply for a job, an internship, a volunteer role or another position with us (“Position”) and the rights you have in connection with that information. The term “Candidates” is used in this section to refer to anyone who applies for any Position specified in our Career web page, or who otherwise seeks to work with or for us (whether on a permanent or non-permanent basis).

10.1.Data Collection & Legal Basis

When you apply for a Position at YGCA, we may collect certain information automatically, from you personally, or from third party sources.

10.2.Information we may collect automatically

You can visit the Join Us  page of our website and navigate through the open opportunities without providing personal information. However, we do collect certain information automatically from your device when you visit our website. For further information, please see other sections of this Privacy Policy.

10.3.Information we may collect from you

We only process such data that are related to your application. This can be general personal data (name, address, contact details, etc.), information on your professional qualifications and schooling, information on further professional training and, if applicable, other data that you provide us with in connection with your application.

As a general rule, during the recruitment process, we try not to collect or process any Special Categories of Personal Data (as defined in Art. 9 para. 1 GDPR) unless authorized by law or where necessary to comply with applicable laws.

However, in some circumstances, we may need to collect, or request on a voluntary disclosure basis, some Special Categories of Personal Data for legitimate recruiting-related purposes. For example, information about your physical or mental condition may be collected in order to consider accommodations we need to make for the recruitment process and/or subsequent job role.

You may provide, on a voluntary basis, other information including Special Categories of Personal Data during the recruiting process.

We may collect some or all of the following personal information from other sources (in each case where permissible and in accordance with applicable law) when you apply for a role with YGCA:

■     References provided by referees;

■     Other background information provided or confirmed by academic institutions and training or certification providers;

■     Criminal records data obtained through criminal records checks;

■     Information provided by background checking agencies and other external database holders (for example credit reference agencies and professional / other sanctions registries);

■     Information provided by recruiting or executive search agencies; and

■     Information collected from publicly available sources, including any social media platforms you use or other information available online.

 

We process your personal data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), insofar as this is necessary for the decision on the establishment of a volunteer relationship with us. The legal basis is Art. 88 GDPR in conjunction with Art. 26 BDSG for the purposes of the volunteer relationship, if this is necessary for the decision on the establishment of a volunteer relationship.

Furthermore, we may process your personal data if this is necessary to fulfil legal obligations (Art. 6 para. 1 s. 1 lit. (c) GDPR) or to defend or assert legal claims. The legal basis for this is Art. 6 para. 1 s. 1 lit. (f) GDPR. The legitimate interest is, for example, a duty of proof in proceedings under the General Equal Treatment Act (AGG).

If you give us express consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent pursuant to Art. 6 para. 1 s. 1 lit. (a) GDPR. Any consent granted can be revoked at any time with effect for the future

If a volunteer relationship arises between you and us, we may, in accordance with Art. 88 GDPR in conjunction with Art. 26 BDSG, further process the personal data already received from you for the purposes of the volunteer relationship, insofar as this is necessary for the implementation or termination of the volunteer relationship or for the exercise or fulfilment of the rights and obligations of volunteer representation arising from a law or a collective agreement, works or service agreement (collective agreement).

10.4.Retention & Deletion

In case you are selected for a position at YGCA, the information collected during the recruiting process will be processed in accordance with applicable law, including any privacy notice for volunteers, a copy of which will be provided when you are on-boarded as a volunteer, intern, or volunteer, as applicable.

If you are not successful, we will keep your application for a maximum period of six months, after which your personal information will be deleted or anonymized. We might keep it for a longer period, in which case we will ask for your consent first.

10.5.Access to Data & Transferal

Within YGCA, access to your personal information is reserved only to those departments and volunteers that need it to carry out their tasks and duties and that are directly involved in the selection process. If you apply for a position related to the activities carried out by our office in Jordan, we may share your personal information with the Jordan office, which will process your data exclusively in accordance with and for the purposes stated in this Privacy Policy.

If you have any questions about the processing of your data, you may address them to the person managing the recruiting process or contacting us as specified in other sections of this privacy policy. You can find an overview of your rights in the last section of this privacy policy.

10.6.Location Data

YGCA will provide specific offers based on the country or city you are currently located in. YGCA needs to know in which country you are currently located in order to offer these services. Additionally, you may provide your current city in order to further allow for tailoring of services.

We make use of the Google Location API, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), when you enter your location on our website to be able to serve you better based on your location and in accordance with Art. 6 para. 1 s. 1 lit. (f) GDPR.

You can find the Google API privacy policy here: https://www.google.com/policies/privacy/

10.7.Contact & Additional Information via Phone, Email, and other means

YGCA may keep in contact with you or send you updated information via email or other messaging services for which the respective contact details are used.

These services include:

■     WhatsApp Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland: For certain services we may also ask you to communicate through WhatsApp Messenger service. Therefore your name and telephone number will be required. You will be asked for your specific consent to communicate via WhatsApp.

More information: https://www.whatsapp.com/legal/#privacy-policy

■     Google Hangouts, a service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”): This service may be used for phone conversations with Students and video calls within YGCA-organized group tutorial sessions. To use this, you must be logged in to your Google Account. This allows Google to store your activity data. You can view and manage this information in your Google Account. During the call, you will be in a real-time audio/video call thata will not be recorded or transmitted by us to anyone else.

More information: https://www.google.com/+/policy/call-phones-terms.html

■     Facebook Groups: May be used for recruiting purposes and for the organisation of student events.

More information: https://www.facebook.com/policy.php

■     Telegram: May be used to create and coordinate Student groups and communicate with group members.

More information: https://telegram.org/privacy

■     MessageBird: May be used to deliver SMS messages to Students.

More information: /www.messagebird.com/en/privacy

■     Google Meets: This service may be used for phone conversations with Students and video calls within YGCA-organized group tutorial sessions. To use this, you must be logged in to your Google Account. This allows Google to store your activity data. You can view and manage this information in your Google Account. During the call, you will be in a real-time audio/video call that will not be recorded or transmitted by us to anyone else.

More information: https://www.google.com/+/policy/call-phones-terms.html

■     ZOOM: This service may be used for phone conversations with Students and video calls within YGCA-organized group tutorial sessions. During the call, you will be in a real-time audio/video call that will not be recorded or transmitted by us to anyone else.

More information: /www.zoom.us/privacy

We may use the contact services indicated to send you messages that may include information about our products and recent developments or to create and coordinate Student groups about specific topics, interests and events. We may also contact you in case of questions in connection with the YGCA platform, as well as to inform you on changes with regard to this Privacy Policy or any other Terms of Services.

10.8.Other Disclosures

Other than in the aforementioned cases YGCA will not transmit your personal data to any third parties, unless we are obliged to do so because of German legal regulations (e.g. disclosure to courts or law enforcement authorities), you have given us your explicit consent, or the disclosure is permitted by law. A disclosure may for example be permitted when such disclosure is required for us to be able to render our services to the user on the YGCA platform.

11.Your Rights: Right to information, questions, suggestions and comments

You have the right to be informed about your personal data stored in connection with the YGCA platform free of charge. Below you will find information on the rights the applicable data protection law grants you with regard to the processing of your personal data.

1-      The right to request information about your personal data processed by us pursuant to Art. 15 GDPR. In particular, you can request information on the purpose of processing, the category of personal data being processed, the categories of recipients to whom your data has been disclosed, the planned retention period, the right to rectification or erasure of personal data, or restriction of processing of your data, the right to lodge a complaint, what the source of the data is, if it wasn’t collected by us, and if any automated decision-making, including profiling exists and, where appropriate, meaningful information about their details.

2-      The right, in accordance with Art. 16 GDPR, to demand the correction of incorrect or completion of incomplete personal data stored by us without delay.

3-      The right to demand the deletion of your personal data stored with us, according to Art. 17 GDPR, as far as the processing is not required for the right of freedom of expression and information, the compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.

4-      The right to demand the restriction of the processing of your personal data, in accordance with Art. 18 GDPR, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you oppose the erasure and we no longer need the data, but they are required by you for the establishment, exercise or defense of legal claims or you have lodged an objection against the processing pursuant to Art. 21 GDPR

5-      The right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our above named seat or, if applicable, your usual place of residence or work place.

6-      Right to withdraw granted consent pursuant to Art. 7 para. 3 GDPR: You have the right to withdraw the previously given consent in the processing of data at any time with effect for the future. In the case of withdrawal, we will delete the data concerned immediately, as far as further processing cannot be based on a legal basis where consent is not required for processing. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation;

If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 para. 1 s. 1 lit. (f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, insofar as this is for reasons that arise from your particular situation. If you object to the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement of specifying a particular situation.

If we process your personal data on the basis of your consent according to Article 6 para. 1 lit. (a) GDPR, you have the right according to Article 7 para. 3 GDPR to withdraw your consent to us at any time. As a result, we are no longer allowed to continue processing data based on this consent in the future.

You can assert your right via email at: info@ygca-ev.org or contact us at the contact details specified in this Privacy Policy.

12.Versions, Modification of this Privacy Policy

We reserve the right to change this Privacy Policy at any time in accordance with the law. In this way, we can adapt it to current legal requirements and take changes in our services into account, e.g. when introducing new services. The most current version applies to your visit.

This is version 1.0 of this policy, effective as of 1st January 2021.