Data protection information – Registration for the ALEA SCHOOL SUMMER CAMP

1. Responsible party

The responsible party within the meaning of Art. 4 No. 7 GDPR is

Alea School gemeinnützige GmbH (non-profit private limited company under German law)

Kurparkstr. 29

63619 Bad Orb

(hereinafter: “Alea School”)

Phone: 06052 912807-0

Mail: learn@alea.school

2. Processing of personal data in the context of registration for the Alea School Summer Camp

When registering for the Alea School Summer Camp via the online form, the following personal data (hereinafter “data”) is collected as mandatory information (hereinafter “mandatory information”): from the student to be registered: surname and first name, address, gender, date of birth, language skills, name of the school currently attended, class (4th/5th or 6th grade); from the registering legal guardians: title, surname and first name, address, telephone number, e-mail address; general information: Registration for Sports Week / Botany Week / Theater Week. If additional information is provided outside the mandatory information marked as such, this is voluntary (hereinafter “voluntary information”).

3. Purpose of processing and legal basis

The legal basis for the processing of the mandatory data is the execution of the registration for the Alea School Summer Camp and thus the preparation or execution of the contractual relationship with the Alea School, Art. 6 para. 1 lit. b) GDPR.

The legal basis for the processing of voluntary information is your consent (Art. 6 (1) (a) GDPR). Insofar as you voluntarily provide us with special personal data within the meaning of Art. Art. 9 para. 1 GDPR, the legal basis for this is your consent in accordance with Art. Art. 9 para. 2 lit. a) GDPR.

4. Recipients or categories of recipients of the data

The recipients of your data are the respective persons responsible for the registration process for the Alea School Summer Camp.

We pass on at least some of your data that we collect in accordance with the aforementioned paragraphs to processors. They process your data only on our instructions and not for their own purposes (Art. 28, 29 GDPR). These are the following processors or the following categories of processors: media agency (support in organizational matters and in the planning and implementation of Alea School events), IT service provider.

In certain cases, we may pass on some of your data to other recipients. This may be the case if you have consented to this (Art. 6 para. 1 lit. a) GDPR), if we are legally obliged to do so (Art. 6 para. 1 lit. c) GDPR), or if this is necessary to safeguard legitimate interests (Art. 6 para. 1 lit. f) GDPR). These are the following recipients who receive data for the purposes listed below: Public authorities (e.g. social security institutions, tax authorities or law enforcement authorities) and courts (e.g. for the enforcement or defense of legal claims).

5. Storage of the data

Subject to revocation of consent, the data is stored for a specific purpose. We will delete the data no later than 6 months after the end of the Alea Summer Camp, provided that there are no statutory retention periods to the contrary or we are entitled to store the data for a longer period for another reason.

6. Your rights as a data subject 

You are entitled to the following rights as a data subject under the legal requirements:

• Right to information

You can request information from us under the conditions of Art. 15 GDPR as to whether we process your data. If this is the case, you have the right to receive information about this data.

• Right to rectification

In the event that your data stored by us is incorrect or incomplete, you can request that this data be corrected and, if necessary, completed (Art. 16 GDPR).

• Right to erasure or restriction of processing

If the legal requirements are met, you can request the erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) of your data.

• Right to data portability

In the case of automatically processed data that we have received from you on the basis of consent or a contract, you can assert the right to data portability (Art. 20 GDPR). We will then send you your data in a machine-readable format. If you wish and if this is technically possible, we will transmit this data to a third party.

All of the aforementioned rights may be restricted or excluded by law in certain cases.

Revocation of consent

If you have given us your consent to process personal data for specific purposes, the lawfulness of the processing is based on your consent. Consent that has been granted can be revoked. You can send your revocation to learn@alea.school. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected by this.

Objection to processing on the basis of a legitimate interest (Art. 21 GDPR)

Insofar as we process your data exclusively on the basis of Art. 6 para. 1 lit. f) GDPR, you can object to the processing of your data at any time for reasons arising from your particular situation. If you object, we will no longer process this data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

You can send your objection to learn@alea.school.

Right to lodge a complaint with a supervisory authority

Under the conditions of Art. 77 GDPR, you have the right to lodge a complaint with a competent supervisory authority. In particular, you can lodge a complaint with the supervisory authority responsible for us or another competent supervisory authority. A list of data protection supervisory authorities and their contact details can be found at the following link: www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html. The supervisory authority responsible for us is Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden.