All photos are under Copyright by Dr. Michael Mühlich, Usingen, Germany. All rights reserved. Unsere Internetseiten sind urheberrechtlich (copyright) geschützt. Alle Rechte für den Inhalt und die Gestaltung stehen allein den Betreibern der Seite zu. Das vollständige oder teilweise Reproduzieren, Verbreiten, Übermitteln (elektronisch oder auf andere Weise), Modifizieren oder Benutzen unserer Internetseiten für öffentliche oder kommerzielle Zwecke ist ohne unsere vorherige schriftliche Zustimmung untersagt. Natürlich freuen wir uns über Link-Verweise auf unsere Seite und bitten insoweit um eine Information.
Data protection information pursuant to Article 13, 14 General Data Protection Regulation (GDPR)
I. Name and contact details of the responsible person
The following body is responsible for this website in accordance with Article 4 No. 7 of the Basic Data Protection Regulation (GDPR):
Serlo Monastery
c/o Tulku Pema Tharchhen Lama
Junbesi
Solukhumbu/Nepal
Email: SerloGonpa1@gmail.com
Phone: 00977 9842897784 (Serlo Gonpa office contact)
II. General information
1. Why is there this information?
The legislator obliges us to inform data subjects about the processing of their personal data in accordance with Article 13 and Article 14 of the Basic Data Protection Ordinance (GDPR). In the following you will be informed to what extent we will process your personal data as the "data controller" and which rights you are entitled to as the "data subject".
As a matter of principle, we do not process any personal data of data subjects unless processing is permitted by law ("legal basis"). A declaration of consent given by you voluntarily and after prior notification may also constitute a legal basis for the processing of your personal data.
2. What is personal data and who is affected?
According to Article 4 No. 1 GDPR, "personal data" means all information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); a natural person who can be identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier or to one or more special characteristics which are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person, is regarded as identifiable. There are many reasons why you should could be a data subject to us for whose personal data we are responsible. For example, you are a data subject as a user of our websites, sender and recipient of letters, e-mails or other communications, caller and called party, employee, customer, supplier or other cooperation partner.
3. What are the legal bases?
Insofar as we obtain the consent of the person concerned for processing personal data, Article 6 Para. 1 lit. a GDPR serves as the legal basis. With the processing of personal data, which is necessary for the fulfilment of a contract, whose contracting party is the person concerned, Article 6 Para. 1 lit. b GDPR serves as a legal basis. This applies also to processing procedures, which are necessary for the execution of pre-contractual measures on inquiry of the person concerned. As far as a processing of personal data is necessary for the fulfilment of a legal obligation to which our association is subject, Article 6 Para. 1 lit. c GDPR serves as legal basis. For the case that vital interests of the person concerned or another natural person make a processing of personal data necessary, Article 6 Para. 1 lit. d GDPR serves as a legal basis. If the processing is necessary for the protection of a legitimate interest of our association or a third party and the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the first-mentioned interest, then Article 6 Para. 1 lit. f GDPR serves as a legal basis for the processing.
4. How long are personal data stored and/or when deleted?
The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. A storage can take place beyond that, if this is specified by the European or national legislator in Union-legal regulations, laws or other regulations, after which we are obligated to the storage of the personal data. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires; unless further storage of the data is necessary for the conclusion or performance of a contract.
5. Which technical and organizational measures are used?
Ensuring data security is of particular importance to us. We therefore employ appropriate technical and organizational measures, in particular to protect your personal data from the dangers of data transmission and to protect it against third parties gaining knowledge. Our data security measures are checked and adapted in accordance with the current state of the Article
6. What rights do I have as a person concerned?
Insofar as personal data about you or a third party is processed by us as the "responsible person", this person is entitled to the following rights: rights to information, correction, blocking and deletion as well as revocation of your consent or objection, rights in automated processing and profiling and you have a right of complaint to the supervisory authority.
6.1 Right to revoke consent: You have the right to revoke your consent at any time in accordance with Article 7 para. 3 GDPR. As a result, the data processing based on this consent may no longer be continued in the future.
6.2 Right of access: In accordance with Article 15 GDPR, you have the right to request access to your personal data processed by the data controller. In particular, you may request information on the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right of rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data if not collected from us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details.
6.3 Right of rectification: You have the right, in accordance with Article 16 GDPR, to demand the immediate rectification of incorrect or incomplete personal data stored by the responsible person.
6.4 Right to deletion and oblivion: You have the right, in accordance with Article 17 GDPR, to request the deletion of your personal data stored with the responsible person, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.
6.5 Right to limitation: In accordance with Article 18 GDPR, you have the right to request the limitation of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Article 21 GDPR.
6.6 Right to data transfer: In accordance with Article 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transfer to another responsible party.
6.7 Right of complaint: You may complain to a supervisory authority in accordance with Article 77 GDPR. As a rule you can turn for this to the supervisory authority of your usual residence or workplace or the seat of the responsible person.
6.8 Right of objection: If your personal data are processed on the basis of legitimate interests in accordance with Article 6 para. 1 sentence 1 lit. f GDPR, you have the right, in accordance with Article 21 GDPR, to object to the processing of your personal data if there are reasons for doing so which result from your particular situation. For the assertion of your right of objection an e-mail to the responsible person is sufficient.
III. Special information for processing on this website
1. Providing the website and creating log files
1.1 Scope of processing
Each time you visit our website, our system automatically collects data and information from the computer system used by the person concerned (hereinafter referred to as the "User") to access our website. This data is stored and processed on our server in a log file. The following personal data is collected:
a) Information about the browser type and the version used
b) information about the user's operating system
c) Information about the User's Internet Service Provider
d) The IP address of the user
(e) the date and time of access
1.2 Purpose of processing
The IP address is a chain of numbers that uniquely identifies your computer system when you visit our website. The IP address is used to receive and send data packets and enables a user to access a website. The temporary storage of the IP address on our server is necessary in order to transmit the page content to the user's computer system after calling up our website, so that the user can perceive the content. The data is stored in log files in order to ensure the functionality of the website and to detect any transmission errors that may occur. This data is also used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
1.3 Legal basis for processing
The processing takes place on the basis of our legitimate interests according to Article 6 Para. 1 lit. f GDPR.
1.4 Legitimate interests
If the processing is based on Article 6 Para. 1 lit. f GDPR, we are obliged to inform you of the legitimate interests pursued by us. We have a legitimate interest in processing the above-mentioned personal data for the above-mentioned purposes in order to pursue our economic and non-material interest in the external presentation of our association. The external representation serves the public work of the association and the information of interested ones about the current conditions and the developments in the monastery Serlo, Nepal.
1.5 Recipients or categories of recipients
The personal data is passed on to our IT managers and our contractors, who are responsible for hosting and providing the IT resources for the operation of the website.
1.6 Third Country Transfer
We do not intend to transfer the personal data abroad.
1.7 Duration of storage
Personal data will be deleted as soon as they are no longer required for the purpose for which they were collected. In the case of the collection of the data for the provision of the website, this is the case when the session is finished. The IP address of the user must remain stored for the duration of the session in order to enable use of the website. Data stored in the log file is deleted as soon as it is no longer required to achieve the purpose for which it was collected. A storage going beyond this is possible. In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to assign the calling computer system. After seven days at the latest, the final deletion of the data takes place.
1.8 Possibility of objection and removal
As a data subject, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you on the basis of Article 6 para. 1 lit. e or f GDPR (Article 21 para. 1 GDPR). In this case, we will no longer process the personal data unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms as a data subject, or if the processing serves the assertion, exercise or defense of legal claims. The processing of personal data for the provision of the website and for the creation of the log file is mandatory for the operation of the website. The user can therefore not object to this type of processing.
2. Data processing by cookies
2.1 Scope of processing
We do not use any cookies on our website which are subject to data protection. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system as soon as a user accesses our website. Cookies contain characteristic character strings that enable the browser to be uniquely identified when the website is called up again.
2.2 Purpose of processing technically necessary cookies
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the Internet browser is recognized also after a page change. The user data collected by technically necessary cookies are not used to create user profiles that require data protection.
2.3 Legitimate interests
If the processing is based on Article 6 para. 1 lit. f GDPR - i.e. on a weighing of interests - we are obliged to communicate the legitimate interests pursued by us. Here we have no justified interest in processing personal data (item 2.1) for the purposes (item 2.2). Our interest lies exclusively in offering a technical website that complies with the generally accepted rules of technology and data protection. It is our interest to enable users to use our website easily, in accordance with their interests and needs.
2.4 Duration of storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of processing the data to provide the website, this is the case when the respective session has ended. Cookies are stored on the user's computer system and transmitted by the user to our server. Therefore, you as a user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically.
2.5 Objection and removal options
The data subject has the right to object at any time, for reasons related to his/her particular situation, to the processing of personal data relating to him/her that are processed pursuant to Article 6 para. 1 lit. e or f GDPR (Article 21 para. 1 GDPR). The person responsible will then no longer process the personal data unless he can prove compelling grounds for processing worthy of protection which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent.
3. Data processing for general enquiries
3.1 Scope of processing
You can use our website to send us general enquiries by e-mail, contact form on our website, telephone or post. We process your personal data by providing your personal data, title, first name, surname, e-mail address, details of your concern or other questions. If you use our contact form on our website, we will be provided with transmission related information like your IP-address, time and date of your inquiry.
3.2 Purpose of processing
The website should offer you an easy and comfortable way to get in touch with us. Your personal data will be processed to identify you and to answer your request or question. Your requests by e-mail will be processed in order to reply to you. E-mail addresses are not used for advertising purposes.
3.3 Legal basis of the processing
The processing of your personal data mentioned above is necessary for the fulfilment of the contract to which you are a party or for the implementation of pre-contractual measures and general enquiries prior to your order and is based on Article 6 Para. 1 S. 1 lit. b GDPR. The processing takes place with general, noncommittal inquiries due to our entitled interests after Article 6 exp. 1 S. 1 lit. f GDPR.
3.4 Legitimate interests
If the processing is based on Article 6 para. 1 lit. f GDPR - i.e. on a weighing of interests - we are obliged to communicate the legitimate interests pursued by us. We have here a justified interest in processing the personal data (Number: 3.1) for the purposes (Number: 3.2) to pursue our economic and idealistic interest in the external representation of our association and to operate if necessary direct advertising. This also includes responding to your enquiries.
3.5 Recipients or categories of recipients
We will receive your request and if necessary donations and process them with our staff. We pass on your personal data, which were transmitted to us in the way of the inquiry or donation, to external payment service providers (e.g. banks) and with examination of the association to tax authorities.
3.6 Third-country transfer
We do not intend to transfer the personal data abroad.
3.7 Duration of storage
Personal data will be deleted as soon as they are no longer required for the purpose for which they were collected. Invoice data will be kept for 10 years, § 257 HGB (German Commercial Code).
4. Provision of your data (Article 13 Para. 2 lit. e GDPR)
The provision of your data is voluntary. If you do not wish to provide your personal data, e.g. your name or address data, we cannot respond to your enquiries or answer them.
V. Contact person
All enquiries and applications for the assertion of the rights of the data subjects must be sent by e-mail to: Serlo Monastery Email: SerloGonpa1@gmail.com