Note: this draft must be reviewed by a lawyer and completed before publication (missing items are marked).
Controller
Yerdo / Erdoye Europa, Ibrahim Göksin, Schleifmühlweg 26, D-86633 Neuburg a. d. Donau, Germany. Email: info@yerdo.de. No data protection officer has been appointed; there is no legal obligation to do so for a voluntary community of this size.
Registration and members’ area
When you register we collect your first name, last name, email address and a password of your choosing. These details are used solely to administer access to the password-protected family tree. The legal basis is your consent (Art. 6(1)(a) GDPR).
Profile picture
You may voluntarily add a photo of yourself – during registration or later under “My account”. Without a photo only your initials are shown. On upload the image is recalculated to 400 × 400 pixels; this removes all additional information carried in the file, in particular the location of the shot, which mobile phones often record. It is stored under a random file name in a locked directory: direct access is not possible, and it is visible only to logged-in members and to those who approve registrations. You can replace or remove it at any time under “My account”; deleting your account removes it as well. The legal basis is Art. 6(1)(a) GDPR (consent), which you may withdraw at any time by removing the picture.
Profile pictures are processed exclusively on our own server. The “Gravatar” service commonly used by WordPress is not employed – it would transmit a value derived from your email address to a provider in the USA on every page view.
Family tree
The genealogical data in the members’ area (names, family relationships, places and dates of birth and death, photographs) is shown to logged-in members only. The legal basis is Art. 6(1)(f) GDPR – the legitimate interest of the community in preserving its family history, weighed against the interests of those concerned. The data is visible only to registered and approved members, is not reachable by search engines and is not passed on to third parties.
Contact details of the committee
Addresses and phone numbers of the regional contacts are delivered only to logged-in members. They are not contained in the page source for visitors who are not logged in.
Contact form
Data submitted through the contact form (name, email address, message) is sent to us by email solely to process your enquiry and is not stored permanently on the website.
Your rights
You have the right to information, rectification, erasure, restriction of processing, data portability and objection. Please contact info@yerdo.de. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR); the competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany..