Privacy Policy (Datenschutzerklärung)
Data Controller
Krebsforschung Rhein-Main e.V.
Krankenhaus Nordwest
Steinbacher Hohl 2–26
60488 Frankfurt am Main
Germany
Email: info@kfrm.net
Types of Data Collected
- Name
- Email address
- Message content (via contact forms)
- IP address
- Browser information
Purpose of Data Collection
- Responding to contact form inquiries
- Website analytics (only with consent)
- Donation processing
- Website security
Legal Basis (GDPR Art. 6)
We process personal data on the following legal bases:
- Consent (Art. 6(1)(a) GDPR): for analytics cookies and any optional data processing where consent is requested.
- Contractual necessity (Art. 6(1)(b) GDPR): where processing is necessary to handle a donation or related request.
- Legitimate interest (Art. 6(1)(f) GDPR): for website security, fraud prevention, and the administration of enquiries.
Data Retention
Personal data is retained only as long as necessary for the purpose for which it was collected. Contact form enquiries are typically deleted after 12 months unless they need to be retained longer due to legal, tax, accounting, or administrative obligations.
Third-Party Services
We use selected third-party service providers where necessary to operate the website and process donations.
Payment Processing
For donations, we direct users to the independent platform betterplace.org (gut.org gGmbH). When you click the donation link you leave our website and Betterplace acts as the independent data controller for the entire donation process. Further information is available in Betterplace's privacy policy: https://www.betterplace.org/c/datenschutz. We do not process or store payment data on this website.
Analytics
We use Google Analytics (Google Ireland Ltd.) to analyse website usage, only where you have given consent.
Hosting
This website is hosted using Lovable. Data may be processed on servers outside the EU. Appropriate safeguards are in place where required.
Contact Forms and Email Handling
Enquiries submitted via contact forms are processed via email systems. Access is restricted to authorised personnel only.
Use of Contact Forms
Our contact forms are intended solely for general enquiries.
Users are expressly requested not to submit sensitive personal data, in particular information relating to health, medical conditions, diagnosis, or treatment, via these forms.
Any personal data submitted via the contact form will be processed only for the purpose of responding to the enquiry and handling related administrative communication.
If sensitive personal data is nevertheless provided voluntarily, it will not be processed beyond what is strictly necessary to respond to the enquiry and will not be stored long-term. Such data should instead be shared only through appropriate clinical or research channels where applicable.
No marketing tracking tools are used at launch.
International Data Transfers
Some of the service providers we use (including hosting providers, analytics providers, and email systems) may process personal data outside the European Economic Area (EEA), including in the United States.
Where such transfers occur, appropriate safeguards are in place in accordance with GDPR requirements. These safeguards may include:
- EU Standard Contractual Clauses (SCCs)
- Participation in the EU–US Data Privacy Framework (where applicable)
- Data Processing Agreements with the relevant providers
These measures ensure that personal data is protected to a standard equivalent to that within the European Union.
Your Rights Under GDPR
You have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure of your data
- Restrict processing of your data
- Data portability
- Object to processing
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority.
Competent supervisory authority:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany
Contact for Data Requests
For privacy inquiries, please contact:
Email: info@kfrm.net