1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
corange
Christian Anslinger
Brunnenstraße 169
10119 Berlin
Germany
Email: ca@corange.org
Website: www.corange.org
2. General Information
We take the protection of your personal data seriously. Personal data is processed solely in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telecommunications and Digital Services Data Protection Act (TDDDG).
Personal data means any information relating to an identified or identifiable natural person.
3. Hosting
This website is hosted by STRATO AG.
When visiting the website, server log files are automatically generated. These may include:
IP address
Date and time of access
Requested page
Browser type and version
Operating system
Referrer URL
Processing is carried out to ensure the secure and reliable operation of the website.
Legal basis: Article 6(1)(f) GDPR.
4. Contact Requests
If you contact us by email or through the contact form, the information you provide will be processed in order to handle your request.
Legal basis:
Article 6(1)(b) GDPR where the request relates to pre-contractual measures;
otherwise Article 6(1)(f) GDPR. Data will be deleted once processing is no longer necessary and no statutory retention obligations apply.
5. Google Fonts
This website uses fonts provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When the website is accessed, a connection to Google’s servers is established, transmitting your IP address and technical browser information to Google, potentially including transfers to the USA. Legal basis: Article 6(1)(a) GDPR (consent). For more information, see Google’s privacy policy:https://policies.google.com/privacy
6. Social Media Links
This website contains links to social media platforms.
No personal data is transferred to social media providers merely by visiting this website.
Data processing by the respective platform begins only after you click the relevant link.
7. Google reCAPTCHA
To ensure the security of our website and to protect against spam, malicious requests and automated access, we use Google reCAPTCHA. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is used to determine whether entries on our website are made by a natural person or by automated programmes (bots). To this end, reCAPTCHA analyses various pieces of information, including the IP address, details of the device and browser used, language settings, the time spent on the website, and user interactions such as mouse movements or keystrokes. This analysis takes place automatically in the background as soon as the relevant pages are accessed.
The processing is carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest lies in protecting our website and the services provided on it from misuse, spam and cyber-attacks, as well as in ensuring the functionality and security of our online offering.
When using reCAPTCHA, personal data may be transferred to Google LLC in the USA. The data transfer is carried out on the basis of appropriate safeguards in accordance with Article 44 et seq. of the GDPR.
Further information on data processing by Google can be found at:
• Google Privacy Policy
• Google reCAPTCHA Information
8. Cookies
This website uses cookies. Technically necessary cookies are set on the basis of Section 25(2) No. 2 TDDDG and Article 6(1)(f) GDPR without requiring consent. For all other cookies (e.g. analytics, advertising), we obtain your consent in accordance with Section 25(1) TDDDG and Article 6(1)(a) GDPR. You may withdraw your consent at any time via our cookie settings.
9. Consent Management (CookieYes)
We use the CookieYes consent management tool on our website to obtain, manage and document users’ consent to the storage of certain cookies and the use of certain technologies.
When you visit our website, a technically necessary cookie is set, in which your consent settings are stored. This involves processing information about your consent decision, the time of the decision, and technical information regarding the browser used.
This processing is carried out to fulfil our legal obligations to provide evidence of consent in accordance with Article 6(1)(c) of the GDPR, as well as on the basis of our legitimate interest in managing the cookies and technologies used in a manner that complies with data protection regulations, in accordance with Article 6(1)(f) of the GDPR.
The consent data collected via the consent management tool is stored on our own server. This data is not transferred to the provider of the consent management tool.
Further information on CookieYes can be found at CookieYes Privacy Policy
10. Data Retention
Personal data is retained only for as long as necessary for the purposes described above or as required by law.
11. Data Subject Rights
You have the following rights under the GDPR:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent (Art. 7(3) GDPR)
You also have the right to lodge a complaint with a competent supervisory authority. The competent supervisory authority for this website is:
Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit)
https://www.datenschutz-berlin.de/
12. Language management (WPGlobus)
We use the WPGlobus plugin to provide our multilingual website. The plugin stores the language selected by the user in a cookie in order to retain the selected language version when further pages are viewed. No personal data is processed for analytical or marketing purposes. The processing is carried out on the basis of our legitimate interest in providing a user-friendly multilingual online service in accordance with Article 6(1)(f) of the GDPR.
13. Recruitment and selection process
If you submit an application to us, we process the personal data you provide for the purpose of conducting the recruitment and selection process.
This may include, in particular:
Personal information (name, address, contact details)
Application documents (cover letter, résumé/CV, certificates and references)
Information regarding qualifications and professional experience
Correspondence related to the application process
Any other information voluntarily provided by you
The processing is carried out for the purpose of deciding on the establishment of an employment relationship.
Legal basis:
Article 6(1)(b) GDPR
Section 26(1) German Federal Data Protection Act (BDSG) (initiation of an employment relationship)
Where special categories of personal data are submitted (e.g. health data, information concerning severe disability status, or religious affiliation), such data will be processed on the basis of Section 26(3) BDSG and/or Article 9(2)(b) GDPR.
Access to application documents is restricted exclusively to those persons involved in the recruitment and selection process. Your personal data will not be disclosed to third parties unless we are legally obliged to do so or you have expressly consented to such disclosure.
If no employment relationship is established, your application documents will generally be deleted no later than six (6) months after completion of the application process, unless a longer retention period is required for the establishment, exercise, or defence of legal claims.
With your explicit consent, we may retain your application documents in our applicant pool beyond the completion of the specific recruitment process. In this case, your data will be stored for a maximum period of 24 months.
You may withdraw your consent at any time with effect for the future.
Legal basis: Article 6(1)(a) GDPR.
