Data protection information of the Monte Cassino Foundation, Germany

In the following, we inform you about the purposes and legal basis of any processing of your personal data by our foundation and your rights in this context:

1) Who is responsible for the data collection and whom can you contact?

Responsible for the processing of your personal data is the Monte Cassino Stiftung, Behrenstr. 44-64, 31737 Rinteln, Germany, email: This email address is being protected from spambots. You need JavaScript enabled to view it..

2) For what purposes and on what legal basis is your data collected and processed?

Your personal data may be collected and processed for the following purposes and on the legal bases specified in connection therewith:

a) Fundraising

We have an overriding legitimate interest pursuant to Art. 6 (1) lit. f GDPR (European General Data Protection Regulation) in conducting fundraising for our foundation and, for this purpose, contacting persons who are eligible to support our foundation in writing and processing their contact data for this purpose. If the contact is made electronically or by telephone, this is done on the basis of any consent you may have given in advance. In the latter case, the legal basis is Art. 6 (1) lit. a GDPR.  

b) Contributions to our foundation

In the context of donations made to our foundation and the associated issuing of donation receipts, data processing is carried out on the basis of Art. 6 (1) lit. b GDPR (donation contract) and, insofar as the tax code obliges us to do so, on the basis of Art. 6 (1) lit. c GDPR.

c) Supporting membership in our foundation

The purpose of processing personal data of existing and potential supporting members is the establishment and implementation of a membership. The legal basis for the related data processing is Art. 6 (1) lit. b GDPR. In addition, the processing of data of supporting members serves the fulfilment of our foundation purpose and is therefore in our legitimate interest according to Art. 6 (1) lit f GDPR. Should it be necessary to process data of supporting members in order to fulfil a legal obligation, e.g. from the tax code, this is done on the basis of Art. 6 (1) lit. c GDPR.

d) Participation in projects of the foundation

If you participate in our projects, such as in particular educational trips serving international understanding and the commemoration of war victims, we process your data for the organisation and implementation of these events. The legal basis is Art. 6 (1) lit. b GDPR. Insofar as the knowledge of special categories of personal data, such as information on food intolerances or physical limitations, is required for this purpose, we process your data on the basis of your consent pursuant to Art. 9 (2) lit. a GDPR.

e) Other business relations with our foundation

If you are in other business contact with our foundation, e.g. as a service provider, supplier, purchaser of goods offered by us, or in an official capacity, we process your personal data on a case-by-case basis insofar as this is necessary for the fulfilment of a contract with you, for pre-contractual measures or for the fulfilment of a legal obligation. In the first two cases, Art. 6 (1) lit. b GDPR and in the latter case Art. 6 (1) lit. c GDPR is the legal basis for data processing. In addition, it may also be in the legitimate economic interest of our Foundation to process your personal data, e.g. because your activity has a specific connection to our foundation, or if as is necessary to respond to an enquiry you have addressed to us. The legal basis for data processing in such cases is Art. 6 (1) lit. f GDPR.

f) Visit to our website

You can visit our website without providing any personal information. However, every time you access our website, usage data is transmitted to us or our web hoster / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider. The processing is based on Art. 6 (1) lit. f GDPR from our overriding legitimate interest in ensuring the trouble-free operation of our website and to improve our offer.

Cookies are also used on our website. Cookies are small text files that are stored in the Internet browser or by the Internet browser on the computer system of a user. When a user calls up a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your Internet browser, you can be notified before cookies are set and decide individually on their acceptance, as well as prevent the storage of cookies and transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, deactivating cookies may result in limited functionality of our website. As the operator of the website, we have a legitimate interest in storing cookies for the technically error-free and smooth provision of our services. The use of these cookies is based on § 15 (3) sentence 1 TMG (German Telemedia Act) and Art. 6 (1) lit. f GDPR. Other cookies than those that are technically necessary, such as those for analysis purposes in particular, are not used by us.

During our events, photos and/or film recordings are made, which can also be used for public relations (homepage, brochures, press, Facebook, Instagram, etc.). Publication will only take place if the person depicted has expressly consented.

g) Other purposes of data processing

In addition to the aforementioned purposes for which your data is originally collected and processed by us, processing may take place for the following additional purposes: for internal controlling and auditing purposes, for the prevention and investigation of criminal offences, for the enforcement and defence of legal claims and to ensure secure IT operations. The legal basis for this data processing is the overriding legitimate interest of our foundation or third parties pursuant to Art. 6 (1) lit. f GDPR.

Other data processing purposes for which you have given us your prior consent are also possible. This also includes the publication of photos that serve to document the projects we have implemented and on which you can be identified as an individual.

3) Do you have an obligation to provide us with your personal data?

In the context of a business relationship with us or participation in a project carried out by us, you generally only need to provide the data that we require for the establishment, implementation or termination of this business relationship or the organisation and implementation of the project, or which we are legally obliged to collect. Without this data, we will generally not be able to enter into a business relationship with you and may have to terminate an existing one or refuse your participation in the project.

A supporting membership is also not possible without providing the necessary data.

In the case of a donation to our foundation, a donation receipt can only be issued after the necessary data has been provided.

4) To whom will your data be passed on?

Insofar as you are a participant in projects carried out by us, your data will be passed on to the bodies that need to know it for the purpose of organising and carrying out the respective project. These may include travel agencies, transport companies such as airlines and bus companies, hotels and travel agents and other project participants.

Insofar as we provide services for you or receive services from you, your data may be passed on to authorities such as the foundation supervisory authority responsible for us or financial authorities. Data recipients may also be bodies advising us on tax or legal matters, insofar as this is necessary to fulfil the purpose of the advice.

For the purpose of investigating criminal offences or enforcing or defending against legal claims, data may also be passed on to the authorities involved.

As a matter of principle, we do not pass on your data to third countries outside the EU. If necessary, we would inform you in advance about this and about the measures we have taken in this context to protect your data.

If you, as a supporter or donor of our Foundation, have given your consent to this, your name may be mentioned as a supporter of the Monte Cassino Foundation on the website of our Foundation and in other publications of the Monte Cassino Foundation.

5) How long will the data be stored?

Your personal data will generally be stored by us for as long as is necessary for the respective purpose of the data processing, taking into account the statutory retention periods (Art. 17 (3) b GDPR). For accounting purposes, this is usually 10 years (§ 147 (3) AO (German tax code)).

If the processing of your data is based solely on your consent, the data will be deleted as soon as you revoke your consent.

6) Does automatic decision-making or profiling take place in individual cases?

As a matter of principle, we do not use decision-making based solely on fully automated processing pursuant to Art. 22 of the GDPR. This includes profiling. Should we use these procedures in individual cases, we will inform you about this separately, insofar as this is required by law.

7) What rights do you have?

You have the right to request information about the data we have stored about you (Art. 15 GDPR). You also have the right to correct inaccurate data (Art. 16 GDPR), blocking and deletion (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and transfer of your data (Art. 20 GDPR).

If the data processing is based on your consent, you can revoke this consent at any time. A revocation is only effective for the future. Data processing that took place before the revocation remains unaffected by the revocation.

In addition, you have the following rights of objection according to Art. 21 GDPR:

If you are of the opinion that the processing of your personal data by us violates applicable data protection law, you always have the option to contact us directly. You also have the right to complain to a supervisory authority.