GDPR

DATA PRIVACY STATEMENT FOR VISITORS TO OUR WEBSITES HOSTED IN THE EUROPEAN UNION, THE EUROPEAN ECONOMIC AREA, THE UNITED KINGDOM AND SWITZERLAND

1. GENERAL INFORMATION

We are pleased that you are visiting our websites and would like to thank you for your interest. Our aim is to provide you a comprehensive online offering. In that, the protection of your privacy when using our websites is an important concern for us.

In the following, we will explain what data we collect for what purposes.

Personal data is information that can be traced to an identified or identifiable natural person (e.g. your first name and last name, or your address, telephone number and email address, etc.). Data is not personal if it cannot be employed to find out your actual identity.

Identifiable means any natural person who can be identified directly or indirectly by association with an identification such as a username or a membership number.

2. CONTROLLER

The Controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is the Konrad-Adenauer-Stiftung Ltd.

Konrad-Adenauer-Stiftung Ltd.
380 Jalan Besar
ARC 380
#11-01
209000 Singapore

[email protected]

If you have any questions about our in-house data protection, please contact:

[email protected]
Telagavathy Satchithanantham
Human Resources Manager and Data Protection Officer
https://www.kas.de/en/web/rspa/contact

3. GATHERING OF GENERAL INFORMATION WHEN VISITING OUR WEBSITE

Purpose and categories of data

When you access our website, general information will be collected automatically (i.e. not by means of registration) The webserver we use retains the following by default:

your IP address
the websites that you have visited within our offer,
the names of files that are accessed,
the website containing the link that you used to access our site,
the date and time of access,
and the type and version of your browser and the operating system.

The purpose of this processing relates to the ability of your device to access our website and the correct display of our website on your device or in your browser. We also use this data for optimising our website and ensuring the security of our systems. We do not analyse this data for marketing purposes.

Legal basis

The legal basis for temporary storage of data and log files is Article 6(1)(1) letter f GDPR. Our legitimate interest is the presentation of an optimised website and to enable communication between our server and your end device.

Duration of storage

The data will be deleted as soon as it is no longer required for achieving the purpose for which it was acquired. At the latest, it is deleted after three months. Where data is captured for provision of the website, the deletion is performed when the respective session is ended.

Receiver

This data is stored in a log file on the server of our provider.

4. COOKIES

On our website, we use cookies. Cookies are small text files that are placed on your end device and saved by your browser. They are used to enhance the user-friendliness, effectiveness and security of the website.

You may configure your browser settings to restrict the placement of cookies or block them altogether. If you do so, we advise you that you may not be able to use all the functions of this website.

This website uses the following types of cookies, the scope and functions of which are explained below:

A. Technically necessary cookies:

Technically necessary cookies enable our website to operate smoothly.

In particular, these include session cookies. These cookies save the so-called session ID that enables the various requests of your browser to be assigned during a shared session. Session cookies will be deleted when you log out of a signed-in account or close your browser. The legal basis for this is Article 6(1) letter f GDPR.

On our website, the cookies used are provided by the consent management tool that we use to obtain your consent for technically not necessary cookies. The legal basis for this is Article 6(1) letter c GDPR.

B. Cookies for the purpose of analysis

For the statistical analysis of our internet offering, we employ Google Analytics on our website. This service utilises cookies. To this end, the information acquired about use on the server of our provider is transmitted and stored in order to analyse user behaviour. Your IP address will be immediately anonymised so that you, the user, will remain anonymous.

The legal basis for this processing is your consent according to Article 6(1) letter a GDPR. You may grant consent by clicking on “Accept all” in our cookie banner, moving the slide for statistical analysis to the right or by granting your consent under “Cookie settings.”

C. Cookies for incorporating external content

To incorporate external content (e.g. YouTube) into our web content, we use a cookie on our websites that saves your settings (agree or decline).

The legal basis for this processing is your consent according to Article 6(1) letter a GDPR. You may grant consent by clicking on “Accept all” in our cookie banner, moving the slide for display of linked content to the right or by granting your consent under “Cookie settings.”

5. GOOGLE ANALYTICS

Purpose and categories of data

On our website, we use Google Analytics, a web analysis service of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of involving Google Analytics is to enable the analysis of user behaviour on our website. This way, we are able to make continuous improvements to our online offering and design it to be more interesting for you.

Google Analytics uses cookies that enable your use of the website to be analysed. As a rule, the information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the USA.

We use Google Analytics only with activated IP anonymisation (“anonymise IP”) Accordingly, your IP address will be truncated by Google in the member states of the European Union and other treaty members of the European Economic Area. Only in exceptional cases (for example, in the event of technical problems in Europe) will the full IP address be sent to and truncated by Google servers in the USA.

Google will use this information for us on our behalf to evaluate your visit to the website and to compile reports about activity on the website. For the purposes of Google Analytics, Google will not associate the IP address sent from your browser with any other data held by Google.

The following categories of data are processed by Google: browser data, IP address (anonymised), and activities on the website.

Legal basis

The legal basis for the use of this service is your consent according to Article 6(1)(1) letter a GDPR.

You may grant consent by clicking actively on our “Accept all” cookie banner, moving the slide for statistical analysis to the right, by clicking actively on the hidden content in the box or by granting your consent under “Cookie settings.”

Receiver

Only after consent is granted will Google Analytics be activated. When this happens, it cannot be ruled out that Google will also send your IP address to a server in a third country. For these exceptional cases in which personal data is sent to the USA, Google has undertaken to comply with the EU-US Privacy Shield. For further information: https://www.google.com/policies/privacy/ and https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

For the use of Google Analytics, we have concluded a processing agreement with Google according to Article 28 GDPR.

Duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was acquired.

For further information concerning Google Analytics, please refer to the data privacy statement issued by Google: https://support.google.com/analytics/answer/6004245?hl=de

6. SOCIAL NETWORKS

YouTube

We incorporate videos from YouTube on our website. YouTube is a service of YouTube LLC (“YouTube”), 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

This enables us to display various videos to you on our website.

The legal basis for this use is your consent according to Article 6(1)(1) letter a GDPR. You may grant consent by clicking actively on our “Accept all” cookie banner, moving the slide for display of incorporated content to the right, by clicking actively on the hidden content in the box or by granting your consent under “Cookie settings.”

When you actively click on the video, YouTube or Google may process personal data, depending on the circumstances. When this happens, it cannot be ruled out that YouTube or Google will also send this data to a server in a third country.

Google has undertaken to comply with the EU-US Privacy Shield. For further information: www.google.com/policies/privacy/ and https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

7. RIGHTS OF DATA SUBJECTS

When the Konrad-Adenauer-Stiftung Ltd. processes your personal data, you are a Data Subject within the meaning of the GDPR. You have the following rights vis-a-vis the Konrad-Adenauer-Stiftung Ltd. as Controller.

If you wish to exercise your rights, please send a message to us by email at [email protected] or by mail to Konrad-Adenauer-Stiftung Ltd., 380 Jalan Besar, ARC 380, #11-01, 209000 Singapore.

Right to withdraw consent (Article 7(3) GDPR)
If you have granted us consent, you may revoke this consent at any time with effect for the future.
The withdrawal of consent does not affect the lawfulness of processing performed on the basis of consent before the withdrawal.

Right to object (Article 21 GDPR)
Under Article 21 GDPR, you have the right to object to the extent that our processing of personal data is based on our own legitimate interests or the legitimate interests of a third party pursuant to Article 6(1) letter f GDPR:
According to Article 21 GDPR, you have the right to lodge objection against the processing of personal data at any time. In this case, we will no longer process personal data for the purpose of direct marketing or any profiling related thereto.
After an objection is lodged, we will likewise not process your personal data for other purposes unless we are able to demonstrate compelling legitimate reasons for the processing that override your interests, rights and freedoms, or the processing otherwise serves the purposes of asserting, exercising or defending legal claims. In such case, you must present reasons for the objection that arise from your specific situation.
The lawfulness of any processing performed before the complaint will not be affected thereby.

Right of access by the data subject (Article 15 GDPR)
You have the right to request confirmation from us of whether or not we process personal data about you.
If such an arrangement exists, you have the right to obtain information about which data pertaining to you is processed by us and how it is processed.

Right to rectification (Article 16 GDPR)
If any data about your person is incorrect or incomplete, you have the right to request rectification or completion with the missing information.

Right to erasure (Article 17 GDPR)
You may request the erasure of your personal data by us if the requirements of Article 17 GDPR are met. Your entitlement to erasure depends, for example, on whether your data is still required for fulfilment of a legal obligation for the purposes for which it was processed.

Right to restriction of processing (Article 18 GDPR)
If we are not permitted to erase your data, because of legal obligations among others, you may request the restriction of processing of your personal data, subject to the requirements of Article 18 GDPR.
You have an entitlement to restriction of processing, for example, if you have lodged an objection against processing pursuant to Article 21(1) GDPR and it is still pending whether the legitimate grounds of the Data Controller override your reasons.

Right to data portability (Article 20 GDPR)
You have the right to receive the personal data that concerns yourself, which you have provided to us, in a structured, commonly-used and machine-readable format.
However, this right must not adversely affect the rights and freedoms of other persons.

Right to lodge a complaint with a supervisory authority (Article 77 GDPR)
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with your competent supervisory authority at any time.
The competent supervisory authority is determined by the Federal State of your habitual residence, your place of work or the place of the alleged infringement. A list of supervisory authorities and their addresses is available at: bfdi.bund.de.

8. AMENDMENT OF DATA PRIVACY STATEMENT

We will amend this data privacy statement from time to time in keeping with new requirements when this is necessary due to changes in the applicable law or advancements in technology.

Version: May 2020