Data protection regulation

The legally binding privacy policy is the German version (Datenschutzerklärung). The following is a summary in English.

Responsible party

European Group – International Society for Apheresis e.V., Schliemannstr. 2, 18059 Rostock, Germany
Phone: (0331) 743 19 29
Email: info@e-isfa.eu

Hosting and server log files

This website is operated on our behalf by BioArtProducts GmbH, Kröpeliner Straße 54, 18055 Rostock, Germany. We have concluded a data processing agreement (Art. 28 GDPR) with it. For hosting, BioArtProducts GmbH uses IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, as a sub-processor. When you visit the site, the hosting provider automatically records technical access data in server log files: browser type and version, operating system, referrer URL, hostname of the accessing computer, time of the server request and IP address. This data is not merged with other data sources. The legal basis is our legitimate interest in the technically flawless presentation and operation of the website (Art. 6(1)(f) GDPR).

Cookies and analytics

Simply visiting this website does not set any cookies, and no analytics or tracking services are used. Only when a member logs in to the members area does WordPress set technically necessary cookies (e.g. wordpress_logged_in_…) that keep the login. They last for the session, by default 2 days, or 14 days if “Remember me” is selected, or until you log out.

Fonts

The font used (Inter) is delivered from our own server. No connection is made to servers of Google or any other font provider.

Members area and user account

For the protected members area (download of association documents), an administrator of the association creates a user account for members. Self-registration is not possible. The data processed are the username, email address and a password stored in encrypted form (hash). The purpose is to provide the area exclusively to members of the association; the legal basis is Art. 6(1)(b) GDPR (membership). The data is deleted as soon as the account is no longer needed, in particular when the membership ends.

If you have forgotten your password, you can request a reset link on the login page. It is sent to the email address on file.

Contact by email or phone

If you contact us by email or phone, your request including the personal data it contains (name, request) is stored and processed to handle your enquiry. We do not pass this data on without your consent. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to a contract or pre-contractual measures, otherwise our legitimate interest in handling enquiries effectively (Art. 6(1)(f) GDPR) or your consent (Art. 6(1)(a) GDPR). The data remains with us until you ask us to delete it, withdraw your consent or the purpose for storage no longer applies. Statutory retention periods remain unaffected.

Membership applications

If you send us a membership application by email or post, we process the data it contains: name, title, date of birth, address, contact details, company and position, ISFA membership number and, if you take part in direct debit, account holder, bank, IBAN and BIC. The purpose is to establish and administer the membership and to collect membership fees (Art. 6(1)(b) GDPR). The data is stored for the duration of the membership and beyond only where statutory retention periods require it.

Please note that transmitting data by email can have security gaps. You can alternatively send bank details by post.

Links to other websites

This website contains links to external sites (e.g. to the ISFA World Congress). A connection to their servers is only established when you click the link. The respective operators are responsible for their data processing.

Your rights

You have the right to information about the personal data we hold about you, free of charge, and the right to rectification, erasure, restriction of processing, data portability and objection (Art. 21 GDPR). You can withdraw a consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. For all questions on this topic you can contact us at any time.