Privacy Policy of the RLC Düsseldorf e.V.
1. Information on the collection of personal data
1.1 In the following we inform you on the collection of personal data when using our website. Please take a moment to familiarise yourself with the information.
1.2 This website contains links to other websites. This Privacy Policy applies only to this website. We are not responsible for the privacy practices or the content of linked websites. For more information, please read their own privacy statements.
1.3 Personal data is any information relating to an identified or identifiable natural person.
1.4 The person responsible for data processing in accordance with Art. 4 No. 7 of the EU General Data Protection Regulation (GDPR) is the
Refugee Law Clinic Düsseldorf e.V.
Bilker Allee 163
40217 Düsseldorf
Phone: +49 (0)211 / 81 – 10380
Mail: info@rlc-duesseldorf.de
(hereinafter „RLC Düsseldorf“, „we“ or „us“).
1.5 If we wish to use contracted service providers for individual functions of our offer or use your data for advertising purposes, we will inform you below in detail about the respective processes. We will also specify the criteria for the storage period.
2. Collection of personal data when you visit our website
If you only use the website for information purposes, i.e. if you do not otherwise provide us with any further information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to guarantee stability and security (legal basis is Art. 6(1)(1) lit. f GDPR):
- – IP address
- – Date and time of the request
- – Time zone difference to Greenwich Mean Time (GMT)
- – Contents of the request (concrete page)
- – Access status/HTTP status code
- – Amount of data transferred in each case
- – Website of the original request
- – Browser
- – Operating system and its interface
- – Language and version of the browser software.
3. Further functions and offers of our website
3.1 In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you must usually provide further personal data which we use to provide the respective service and to which the aforementioned data processing principles apply.
3.2 In some cases we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly.
3.3 If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.
4. Contact form and e-mail contact
4.1 Description and scope of data processing
A contact form is available on our website, which can be used for electronic contact. If a user makes use of this possibility, the data entered in the input mask will be transmitted to us and stored. That data is:
- – Name
- – E-mail address
- – Subject
- – Message.
At the time the message is sent, the following data will also be stored:
- – The IP address of the user
- – Date and time of registration.
Your consent will be obtained for the processing of the data as part of the sending process and reference will be made to this privacy policy. Alternatively, you can contact us via the e-mail address provided. In this case the personal data of the user transmitted via e-mail will be stored. The data will not be passed on to third parties in this context. The data will be used exclusively for the processing of the conversation.
4.2 Legal basis for data processing
The legal basis for the processing of the data is Art. 6(1) lit. a GDPR if the user has given his consent. The legal basis for the processing of the data transmitted in the course of sending an e-mail is Art. 6(1) lit. f GDPR. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6(1) lit. b GDPR.
4.3 Purpose of data processing
The processing of the personal data from the input mask serves us exclusively for the processing of the establishment of contact. If you contact us by e-mail, this is also the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
4.4 Duration of storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be inferred from the circumstances that the relevant facts have been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
4.5 Possibility of objection and removal
The user has the possibility to withdraw his or her consent to the processing of personal data at any time. If the user contacts us by e-mail, he or she can object to the storage of his or her personal data at any time. In such a case, the conversation cannot be continued.
The withdrawal or objection must be addressed to the contact person specified in the imprint by e-mail or by post or by telephone to the address specified there. In this case, all personal data stored in the course of establishing contact will be deleted.
5. Data processing for consulting inquiries
5.1 Personal data and purpose of your survey
5.1.1 If you contact the RLC Düsseldorf without a consultation agreement, we will ask you for your name (so that we know who our client will be), your contact details (so that we can contact you), your nationality (if you have a question about the right of residence or asylum), your date of birth (to know whether you are of age) and whether you need an interpreter (to assess the possibilities of communication); we will communicate with you in German or English.
5.1.2 If you do not wish to provide us with such personal data in advance, simply come to our open consultation instead. There we will explain to you what advice we offer, what happens to your data in the event of a consultation and how we protect it. You can remain anonymous in this first conversation.
5.1.3 When contacting us, please do not under any circumstances provide us with personal data relating to third parties (e.g. fugitives who you wish to refer to us for advice); this is not automatically permissible under data protection law. Whether corresponding data is necessary for the consultation and how we may collect this data can be clarified when concluding the consultation contract.
5.2 Further handling of your data
We will make the data you send to us available to the advisors who will offer you an initial consultation. If we involve a supervisor for your case at this point, we will also pass on the data to the supervisor anonymously (i.e. without being able to deduce who the person is). We also use the data for communication with you and for documentation in our case file. We do not pass on any data to other offices or persons or even to third countries before concluding a consultation contract. However, the stored data is not protected against confiscation in the event of criminal investigation proceedings.
5.3 Legal basis for data processing
The collection and storage of the data of advice seekers, as well as their passing on (see above under II No. 2), takes place on the basis of Art. 6(1) lit. b GDPR. The data is necessary to determine whether the conclusion of a consulting contract with you is possible and reasonable.
5.4 Special categories of personal data (sensitive data)
When contacting us for the first time via e-mail, please provide us only with the data mentioned under no. 1 concerning you and the circumstances of your case. Do not provide us with sensitive data, such as your ethnic origin or religious beliefs (Art. 9 GDPR). The data mentioned under no. 5.1.1 are sufficient for us to make a preliminary assessment. If we conclude a consultancy contract with you, we will be happy to take the time to discuss your concerns in detail. It cannot be excluded that the content of unencrypted e-mails can be viewed by third parties, so that sufficient confidentiality of the data does not exist. If we require further sensitive data to process your case, we will ask you for your express consent when concluding a consultation contract.
6. Data processing for donation offers
6.1 We are grateful for your voluntary donation! The processing of your donation will be facilitated if you let us know your name, your address, the amount of the donation and the desired purpose when you contact us. We need this information so that we can allocate your donation and issue you with a donation receipt.
6.2 We transmit your data (in paper form) to the Finance Department of the University of Düsseldorf, which is responsible for booking the money to the donation account of Refugee Law Clinic Düsseldorf and issuing the donation receipt.
6.3 The processing of the data of donors takes place on the basis of Art. 6(1) lit. b, c GDPR.
7. Data security
We have taken appropriate technical and organisational measures to ensure adequate security of your personal data. This applies in particular to protection against unauthorised or unlawful processing and against unintentional loss, destruction or damage.
8. Rights of data subjects
8.1 You are entitled to the rights set out below under the EU General Data Protection Regulation. Please understand that individual rights may be restricted in certain cases. If this is the case, we will inform you of the reason.
8.1.1 Right to withdraw consent (Art. 7(3) GDPR)
Pursuant to Art. 7(3) GDPR, you have the right to withdraw your consent at any time.
8.1.2 Right of access (Art. 15 GDPR)
You can request information pursuant to Art. 15 GDPR about your personal data processed by us. In your request for information you should specify your concern in order to make it easier for us to compile the necessary data. Please note that under certain circumstances your right to information may be restricted by law.
8.1.3 Right to rectification (Art. 16 GDPR)
If the information concerning you is (no longer) correct, you can request a rectification in accordance with Art. 16 GDPR. If your data is incomplete, you can request for it to be completed.
8.1.4 Right to erasure (Art. 17 GDPR)
You can request the erasure of your personal data under the conditions of Art. 17 GDPR. Your right to erasure depends, among other things, on whether we still need the data concerning you to fulfil a legal obligation.
8.1.5 Right to restriction of data processing (Art. 18 GDPR)
Within the framework of the provisions of Art. 18 GDPR, you have the right to demand that the processing of data concerning you be restricted.
8.1.6 Right to data portability (Art. 20 GDPR)
Pursuant to Art. 20 GDPR, you have the right to receive the data you have provided to us in a structured, common and machine-readable format.
8.1.7 Right to object (Art. 21 GDPR)
Pursuant to Art. 21 GDPR, you have the right to object to the processing of your data at any time if we process your data pursuant to Art. 6(1) lit. e or f GDPR or if we process your data for the purpose of direct advertising.
8.1.8 In order to exercise the rights described in sections 8.1.1 to 8.1.7, please contact the contact addresses listed in section 1.
8.2 If you are of the opinion that we have not complied with data protection regulations when processing your data, you can lodge a complaint with the competent supervisory authority pursuant to Art. 77 GDPR. The supervisory authority responsible for our RLC is the The North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information (LDI NRW), Postfach 20 04 44, 40102 Düsseldorf, poststelle@ldi.nrw.de.
9. Contact
9.1 For the exercise of your rights or for suggestions for improvement you are welcome to contact our data protection team.
9.2 You can contact our data protection team at the following e-mail address: datenschutz@rlc-duesseldorf.de.
10. Changes
10.1 This Privacy Policy may be subject to change from time to time, e.g. to reflect legal requirements or actual circumstances. We will post any changes to this Privacy Policy on this page.
10.2 This privacy policy is dated 07.06.2019.