Privacy

Privacy Policy

Effective Date: August 13, 2025

1. Data Controller Information

Verband für Adaptive Organisationen (VfAO)
Bärenwaldstrasse 13
81737 München
Deutschland

Email: info@adaptive-organisations.org
Phone: beantragt

2. Data Protection Officer

For questions regarding data protection, please contact us at: verband@sfao.org

3. Categories of Personal Data We Process

We process the following categories of personal data:

Website Visitors:

  • Technical data (IP address, browser type, device information)
  • Usage data (pages visited, time spent, click patterns)
  • Log file data (access times, error messages)

Contact Form Submissions:

  • Name and email address
  • Message content
  • Timestamp of submission

Newsletter Subscribers (if applicable):

  • Email address
  • Subscription preferences
  • Subscription date

Certification Candidates:

  • Full name and contact information
  • Professional qualifications and experience
  • Certification status and progress

We process your personal data based on:

  • Article 6(1)(a) GDPR: Consent (newsletter subscriptions, contact forms)
  • Article 6(1)(b) GDPR: Contract performance (certification services)
  • Article 6(1)(c) GDPR: Legal obligation (record keeping, tax requirements)
  • Article 6(1)(f) GDPR: Legitimate interests (website security)

5. Data Sources

We collect data from:

  • Direct interactions with our website
  • Contact forms and communication
  • Certification applications and assessments
  • Public professional profiles (for educator listings)

6. Data Sharing and Recipients

We may share your data with:

  • Service providers: Hosting, email services, payment processors
  • Legal authorities: When required by law
  • Certification bodies: For verification purposes
  • Marketing partners: Only with explicit consent

We do not sell your personal data to third parties.

7. International Data Transfers

Data may be transferred to countries outside the EU/EEA. We ensure adequate protection through:

  • EU Commission adequacy decisions
  • Standard contractual clauses
  • Binding corporate rules
  • Specific derogations under Article 49 GDPR

8. Data Retention Periods

We retain your data for:

  • Website logs: 12 months
  • Contact form data: 3 years
  • Newsletter data: Until unsubscribed
  • Certification records: 10 years (legal requirement)
  • Financial records: 7 years (tax law requirement)

9. Your Rights Under GDPR

You have the right to:

  • Access your personal data (Article 15)
  • Rectification of inaccurate data (Article 16)
  • Erasure of your data (Article 17)
  • Restriction of processing (Article 18)
  • Data portability (Article 20)
  • Object to processing (Article 21)
  • Withdraw consent at any time (Article 7)

To exercise these rights, contact us at: verband@sfao.org

10. Cookies and Tracking

This website currently uses:

  • Essential cookies: For website functionality only
  • No analytics cookies: We currently do not use analytics cookies
  • No marketing cookies: We currently do not use marketing cookies

If analytics or marketing cookies are implemented in the future, we will request your consent before use. You can manage cookie settings through your browser preferences.

11. Data Security

We implement appropriate technical and organisational measures including:

  • SSL/TLS encryption
  • Regular security updates
  • Access controls and authentication
  • Data backup and recovery procedures
  • Staff training on data protection

12. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects.

13. Data Breach Notification

In case of a data breach, we will:

  • Notify the supervisory authority within 72 hours
  • Inform affected individuals if there is a high risk
  • Take immediate steps to contain the breach

14. Children’s Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children.

15. Changes to This Privacy Policy

We may update this privacy policy. Changes will be posted on this page with an updated effective date.

16. Complaints

You have the right to lodge a complaint with the supervisory authority:

Bayerisches Landesamt für Datenschutzaufsicht
Promenade 27
91522 Ansbach
Deutschland
Phone: +49 981 531-1300
Email: poststelle@lda.bayern.de

17. Contact Information

For privacy-related questions or to exercise your rights, contact:

Verband für Adaptive Organisationen
Data Protection Inquiries
Bärenwaldstrasse 13
81737 München
Deutschland
Email: verband@sfao.org