Pens for Change

With this privacy policy, we aim to inform you about the type, scope, and purpose of processing personal data (hereinafter referred to as „data“). Personal data includes all data that relates to you personally, such as your name, address, email address, or your user behavior. This privacy policy applies to all data processing activities carried out by us, both in the context of our core activities and through our online media.

Who is responsible for data processing with us? 
Responsible for data processing is:

Kristin Hoell
Tegeler Straße 6
13353 Berlin Germany
hello@pensforchange.org
https://pensforchange.org/imprint-privacy-policy/

Your rights under the GDPR 

Under the GDPR, you have the following rights, which you can exercise at any time with the controller mentioned above in this privacy policy:

• Right to information: You have the right to request information from us about whether and which data we process about you.
• Right to rectification: You have the right to request the correction of incorrect or completion of incomplete data.
• Right to erasure: You have the right to request the erasure of your data.
• Right to restriction: In certain cases, you have the right to request that we only process your data to a limited extent.
• Right to data portability: You have the right to request that we transmit your data to you or another controller in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible is the one at your usual place of residence, your place of work, or our company headquarters.
• Right of withdrawal You have the right to withdraw your consent to data processing at any time.
• Right to object You have the right to object to the processing of your data, which we base on our legitimate interests according to Art. 6 para. 1 lit. f GDPR. If you exercise your right to object, please provide reasons. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms.

Regardless of the above, you have the right to object at any time to the processing of your personal data for the purposes of advertising and data analysis.

Please direct your objection to the contact address of the controller mentioned above.

When do we delete your data?

We delete your data when we no longer need it or when you instruct us to do so. This means that unless otherwise specified in the individual data protection notices in this privacy policy, we will delete your data:

• when the purpose of data processing no longer applies, and thus the respective legal basis mentioned in the individual data protection notices no longer exists, e.g., after the termination of our contractual or membership relationship (Art. 6 para. 1 lit. a GDPR) or after our legitimate interest in further processing or storage of your data ceases to exist (Art. 6 para. 1 lit. f GDPR),
• when you exercise your right to withdraw your consent, and no other legal basis for processing under Art. 6 para. 1 lit. b-f GDPR applies,
• when you exercise your right to object, and there are no compelling legitimate grounds for processing that override your interests and rights.

However, if we (certain parts of) your data still need to be retained for other purposes, such as statutory retention periods (usually 6 years for business correspondence or 10 years for booking documents) or for the assertion, exercise, or defense of legal claims arising from contractual relationships (up to four years), or if the data is needed to protect the rights of another natural or legal person, we will only delete (part of) your data after these deadlines have expired. Until these deadlines have expired, we will restrict the processing of this data to these purposes (fulfillment of retention obligations).

Cookies

Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are stored on and retrieved from your device. Cookies are primarily used to exchange information between your device and our website. This includes, among other things, language settings on a website, login status, or the point at which a video was viewed.

Two types of cookies are used when you visit our websites:

• Temporary cookies (session cookies): These store a so-called session ID, which can be used to assign various requests from your browser to the common session. Session cookies are deleted when you log out or close your browser.
• Persistent cookies: Persistent cookies remain stored even after you close your browser. This allows our website to recognize your computer when you return to our website. Information such as language settings or login information may be stored in these cookies. Furthermore, your surfing behavior may be documented and stored with these cookies. This data can be used for statistical, marketing, and personalization purposes.

In addition to the above classification, cookies can also be distinguished based on their purpose:

• Necessary cookies: These are cookies that are absolutely necessary for the operation of our website, such as storing logins or shopping carts for the duration of your session or cookies set for security reasons.
• Statistics, marketing, and personalization cookies: These are cookies used for analysis purposes or to measure reach. Such „tracking“ cookies may store information about entered search terms or the frequency of page views. In addition, the surfing behavior of an individual user (e.g., viewing certain content, using certain features, etc.) can be stored in a user profile. Such profiles are used to display content to users that matches their potential interests. If we use services through which cookies are stored on your device for statistics, marketing, and personalization purposes, we will inform you separately in the following sections of our privacy policy or as part of obtaining your consent.

Affected data:

Usage data (e.g., access times, clicked websites) Communication data (e.g., information about the device used, IP address). Affected individuals: Users of our online offers

Processing purpose: Displaying our websites, ensuring the operation of our websites, improving our online offering, communication, and marketing

Legal basis:

Legitimate interest, Art. 6 para. 1 lit. f GDPR

If we do not obtain your consent to set cookies, we base the processing of your data on our legitimate interest in improving the quality and user-friendliness of our website, especially its content and features. You can object to the use of cookies set by us as part of our legitimate interest via the security settings of your browser. There, you can specify whether you do not want to accept cookies at all or only want to accept them on request. You can also specify that cookies should be deleted after each closing of your browser. If cookies are deactivated for our website, some functions of the website may not be fully usable.

Consent, Art. 6 para. 1 lit. a GDPR

If we ask you for your consent to set certain cookies on your device before you visit our website and you give your consent, the legal basis is the consent you have given. We will inform you about which cookies we set in detail as part of the consent process. If you do not give this consent, only the so-called technically necessary cookies that are required for the proper operation of our websites and their display in your browser will be set. If you have consented to the setting of cookies, you have the option to revoke your consent at any time.

Web hosting To host our websites, we use a provider whose servers store our websites and make them available on the internet (hosting). In this process, the provider may process all data transmitted via your browser when using our websites. This includes, in particular, your IP address, which the provider needs to deliver our online offering to your browser and all entries made by you on our website. In addition, the provider we use may collect:

the date and time of access to our website time zone difference to Greenwich Mean Time (GMT) access status (HTTP status) the amount of data transferred the Internet service provider of the accessing system the type and version of the browser used by you the operating system you use the website from which you may have come to our website the pages or subpages you visit on our website. The data mentioned above is stored as log files on the servers of our provider. This is necessary to ensure the stability and security of the operation of our website.

Affected data:

Content data (e.g., posts, photos, videos) Usage data (e.g., access times, clicked websites) Communication data (e.g., information about the device used, IP address) Affected individuals: Users of our online presence

Processing purpose: Displaying our websites, ensuring the operation of our websites

Legal basis: Legitimate interest, Art. 6 para. 1 lit. f GDPR

Web hoster commissioned by us:

All-inkl.com

Service provider: All-Inkl.com – Neue Medien Münnich, owner: René Münnich, Hauptstr. 68, 02742 Fredersdorf Website: https://all-inkl.com/ Privacy policy: https://all-inkl.com/datenschutzinformationen/

Contact If you contact us via email, social media, telephone, fax, post, our contact form, or in any other way and provide us with personal data such as your name, telephone number, or email address or additional information about yourself or your concern, we process this data to answer your inquiry within the framework of the pre-contractual or contractual relationships between us.

Affected data:

Inventory data (e.g., names, addresses) Contact data (e.g., email address, telephone number, postal address) Content data (texts, photos, videos) Contract data (e.g., subject matter of the contract, duration of the contract) Affected individuals: Interested parties, customers, business and contractual partners

Processing purpose: Communication and response to contact inquiries, office and organizational procedures

Legal basis: Contract fulfillment and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Our online presence on social networks

We operate online presences within the social networks listed below. When you visit one of these presences, the provider collects and processes the data listed in more detail below. In general, this data is collected for advertising and market research purposes and is used to create usage profiles. Data can be stored in user profiles regardless of the device you use. This is particularly the case if you are a member of the respective platform and are logged in to it. The usage profiles can be used by the providers to display interest-based advertising to you. You have the right to object to the creation of user profiles. To exercise this right, you must contact the respective provider.

If you have an account with one of the providers listed below and are logged in when you visit our website, the respective provider may collect data about your usage behavior on our website. To prevent such a link between your data, you should log out of the provider’s service before visiting our site.

For what purpose and to what extent data is collected by the provider, please refer to the respective data protection notices of the providers listed below.

We would like to point out that depending on the country of the provider listed below, data collected through its platform may be transmitted and processed outside the European Union. In this case, there is a risk that the level of data protection required by the GDPR will not be met and that the enforcement of your rights may not be possible or may only be possible with restrictions.

Affected data:

Inventory and contact data (e.g., name, address, telephone number, email address) Content data (e.g., posts, photos, videos) Usage data (e.g., access times, clicked websites) Communication data (e.g., information about the device used, IP address) Processing purpose: Communication and marketing, tracking and analysis of user behavior

Legal basis: Consent, Art. 6 para. 1 lit. a GDPR, legitimate interests, Art. 6 para. 1 lit. f GDPR

Options for objection: For the respective options for objection (opt-out), we refer to the linked information of the providers below.

We maintain online presences on the following social networks:

Facebook

Service provider: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA EU seat: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland Website: https://www.facebook.com/ Privacy policy: https://www.facebook.com/about/privacy/ Data protection declaration for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data

Instagram

Service provider: Instagram Inc., 1601 Willow Road, Menlo Park CA 94025, USA Parent company: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA EU seat: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland Website: https://www.instagram.com/ Privacy policy: http://instagram.com/about/legal/privacy

Twitter

Service provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA Website: https://twitter.com/?lang=de Privacy policy: https://twitter.com/de/privacy

Website Translations

We utilize the GTranslate plugin on our website to provide translation services for our users‘ convenience. Please be aware that by using this translation service, your data may be processed by GTranslate in accordance with their Privacy Policy, which can be found on their website.

https://gtranslate.io/privacy-policy

While we strive to maintain the privacy and security of your information, we recommend reviewing GTranslate’s Privacy Policy for a comprehensive understanding of how your data is handled when using this translation feature. Your continued use of our website signifies your acceptance of this translation service and its associated privacy implications.

Security measures

We also take technical and organizational security measures in accordance with the state of the art to comply with the provisions of data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or against unauthorized access by third parties.

Currentness and amendment of this privacy policy

This privacy policy is currently valid and has the status of September 2023. Due to changed legal or official requirements, it may become necessary to adapt this privacy policy.

This privacy policy was created with the help of the privacy policy generator from SOS Recht. SOS Recht is an offering of Mueller.legal Rechtsanwälte Partnerschaft based in Berlin. It was translated from German into English by ChatGPT.