Please note: this English version is a reading aid. Only the German Datenschutzerklärung is legally binding.

of Freunde der Owinger Bücherei - Verein zur Förderung der Katholischen öffentlichen Bücherei St. Jakobus, Haigerloch-Owingen e.V.

(1) The controller is the committee, represented by the chair, Osman Yilmaz. The association's committee can be reached via Owingen Library, c/o Kath. Kindergarten, Hauptstraße 78, 72401 Haigerloch-Owingen, telephone +49 7474 / 607 888 20, or by email at verein@owbib.de.

(2) Your personal data is collected, processed and stored in order to give effect to your membership. Your personal data is stored for the duration of your membership. When your membership ends, your data is deleted and the registration form you completed is destroyed.

(3) Any information sent out, such as the invitation to the annual general meeting, is sent by Owingen Library. Through the transfer of the membership list, the head of the library, or the member of library staff responsible for the mailing, learns of your membership of the association. Beyond this, your personal data is not passed on.

(4) Record of processing activities:

The membership list is kept electronically by the association's treasurer and contains the following data: first name and surname, address, membership subscription, date of joining and, where this was already fixed on joining, the date of leaving.

Contact details in the form of a telephone number and/or email address are stored in case we need to get in touch in the course of looking after members.

To issue a donation receipt we need your full address, and we must store and process your contact details electronically. Only authorised people have access to this data, as a rule only the treasurer.

We keep data connected with donations for 10 years, because the law requires us to.

You are of course entitled to object to your data being stored. In that case, however, we regrettably cannot issue a donation receipt.

(5) Right of access, rectification, erasure, restriction, objection and data portability:

You have the right of access to the personal data concerning you (Art. 15 GDPR), to the purposes of processing, the categories of personal data, the recipients or categories of recipient to whom your data has been or will be disclosed, and the intended storage period.

You further have the right to rectification (Art. 16 GDPR) or erasure of your data (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR). The right to data portability includes the provision of the personal data concerning you so that it can be transmitted to another controller.

You further have the right to object to processing (Art. 21 GDPR) where we process your data on the basis of a legitimate interest asserted by us (Art. 6 GDPR) and grounds for objection arise from your particular situation.

You also have the right to complain to a data protection supervisory authority about our processing of your personal data. The supervisory authority is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit (LfDI), Königstrasse 10a, 70173 Stuttgart.

(6) Providing your personal data is necessary in order to give effect to your membership. You are not obliged to provide the data, but without it your membership cannot be carried into effect.

(7) Withdrawing consent to data processing: where you have given us consent to process your personal data, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out on the basis of the consent up to its withdrawal (Art. 7 GDPR). You can exercise your rights of objection or withdrawal using the controller's contact details.

(8) Right to complain: you have the right to complain to the supervisory authority of the place where you are (Art. 77 GDPR).

(9) The association is not obliged to appoint a data protection officer. Please address data protection questions to the controller named above.

(10) The association's committee has taken organisational and technical measures to ensure data security.

(11) If you contact the association's committee (by post, email, telephone or through social media), your details are processed in order to deal with, answer and settle your enquiry in accordance with Art. 6 GDPR. Once it has been dealt with, your enquiry is deleted.

(12) Our donation page contains PayPal components. When you make a donation, PayPal passes the following data to us:

• your name (first name, surname)
• your email address
• the amount donated, showing the deduction of the PayPal fee
• the date and time of the transfer
• the transaction code / confirmation number
• the payment method
• your message to us, if you enter anything in the field "Personal message (optional)".

Please note: depending on the settings in your PayPal account, your address (street, number, town, postcode) may also be passed to us. Please check your settings if you do not want your address to be passed on. We need and process your address only if you give it to us expressly for the purpose of issuing a donation receipt (in accordance with Art. 6 para. 1 lit. b GDPR).

For information on data processing by PayPal, please see the section "Datenschutzerklärung zu PayPal als Zahlungsart" of the general privacy statement of the library website. The PayPal privacy statement can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

(13) Cashless payments are handled through SumUp. Our service provider receives personal data for the purpose of processing the payment. If you pay us by debit or credit card at events and fairs, parts of your card data, together with the location and the amount to be debited, are transmitted. All SumUp transactions are subject to the SumUp privacy statement, which can be found at sumup.de/datenschutzbestimmungen.

As at October 2019