Legal information
Privacy Policy
Information about the processing of personal data on this website.
Controller
Surgical Mission Saarland e.V., Mühlenweg 21, 66130 Saarbrücken, Germany (registered seat: Illingen). Email: info@sms-team.org.
Data protection contact: Frank Schöndorf, reachable at info@sms-team.org.
Principles
We process personal data only to the extent required to operate this website and to run the association. This website uses no analytics, tracking, or advertising services.
Hosting and server logs
When you visit this website, the hosting provider automatically processes technical access data (IP address, date and time of the request, page requested, browser type) to deliver the website and keep its operation secure (Art. 6(1)(f) GDPR). Log data is not merged with other data sources.
The hosting provider is Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. Vercel processes the data as a processor under a data processing agreement pursuant to Art. 28 GDPR. Data may be transferred to the USA in the process. Vercel is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR); the European Commission's Standard Contractual Clauses apply in addition (Art. 46(2)(c) GDPR).
Cookies
This website sets no tracking or advertising cookies. Only one technically necessary cookie (NEXT_LOCALE) is used, storing your language choice between German and English (Art. 6(1)(f) GDPR).
Fonts, photos, videos, and audio
All fonts, photos, videos, and audio clips on this website are served locally from our server. No content is loaded from third-party servers such as Google Fonts when you visit.
Donating by bank transfer and via betterplace.org
The donation status shown on this site is fetched from betterplace.org by our server; no visitor data is transmitted in the process.
If you donate via the donation link on betterplace.org, gut.org gemeinnützige Aktiengesellschaft (Schlesische Straße 26, 10997 Berlin, Germany) processes your data under its own responsibility; the betterplace.org privacy policy applies. Donation receipts for online donations are issued by betterplace.org.
If you donate by bank transfer to our association account, we process your name, address, amount, and bank details to record the donation and issue a donation receipt (Art. 6(1)(b) and (c) GDPR). We keep this data for as long as tax law requires.
On the home page and the “Get involved” page you can choose to load the betterplace.org donation form. It only loads once you click a donation amount on the home page or press the “Load the donation form” button on “Get involved”. Nothing is transmitted to betterplace.org before that. The click constitutes your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG); your IP address and browser details are then transmitted to betterplace.org. You can withdraw your consent by reloading the page without clicking again.
Contact by email
If you contact us by email, for example about membership, donations, sponsorship, tickets, or press inquiries, we process the information you provide to handle your request (Art. 6(1)(b) and (f) GDPR). The data is deleted once it is no longer needed and no statutory retention obligations apply.
Via the contact form on the „Contact“ page you submit your first and last name, email address, subject, and message. We process this information solely to answer your enquiry, on the basis of your consent (Art. 6(1)(a) GDPR). We use Brevo (Brevo GmbH, Köpenicker Strasse 126, 10179 Berlin, Germany) as a processor for sending it. The data processing agreement under Art. 28 GDPR is part of Brevo's terms of use. Brevo stores the data on servers within the European Union; where individual Brevo sub-processors are based in the USA, transfers rely on the EU-U.S. Data Privacy Framework or standard contractual clauses. Your message is deleted once it is no longer needed and no statutory retention obligations apply.
Membership administration
For members of the association, we process the data provided in the membership application to administer the membership, bill contributions, and organize and communicate missions and assemblies (Art. 6(1)(b) GDPR).
Recipients of the data are the board and, where required, commissioned parties: the notary for register filings and Microsoft 365 as a processor under a data processing agreement.
Online meetings with Microsoft Teams
We use Microsoft Teams, part of Microsoft 365, for board meetings, general assemblies, and coordination within the association. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
This involves processing participants' names and email addresses, the time and duration of participation, chat messages, and audio and video where microphone and camera are switched on. For members, the legal basis is their membership (Art. 6(1)(b) GDPR); for other participants, our legitimate interest in working together regardless of location (Art. 6(1)(f) GDPR).
Microsoft processes the data as a processor. Data may be transferred to the USA in the process. Microsoft is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR); the European Commission's Standard Contractual Clauses apply in addition (Art. 46(2)(c) GDPR).
Social media
We merely link to our profiles on Facebook, Instagram, and LinkedIn. No social media plugins are embedded that would transmit data to these providers when you visit.
Retention
Personal data is deleted once it is no longer required for the purposes stated and no statutory retention obligations apply.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing (Art. 21). You may withdraw any consent at any time with effect for the future.
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Unabhängiges Datenschutzzentrum Saarland, Fritz-Dobisch-Straße 12, 66111 Saarbrücken, Germany.