Privacy Policy

The Conference on Jewish Material Claims Against Germany (“Claims Conference”, “we” and “us”), a New York non-profit corporation acknowledges that the protection of your Personal Data and privacy when interacting with us or using our website is very important to us.

This Privacy Notice sets out what Personal Data we collect, how we collect it, how we use it, and your rights in connection with how we process your Personal Data. We are committed to protecting your Personal Data as the data controller in accordance with our duties under the General Data Protection Regulation or the UK GDPR (“GDPR”).

In addition, please refer to our “Cookie Policy” below for more information regarding the data we collect when you access our website and how it is processed.

Our website contains links to third party pages and websites that are outside our control and are not covered by this Privacy Notice (“Third Party Websites”). If you access Third Party Websites using the links provided, the operators of those websites may collect Personal Data from you that will be used by them in accordance with their privacy notice, which may differ from ours. We encourage you to review the privacy notices of those Third Party Websites for information on how your Personal Data is collected, used and transferred.

1. Collection, use and transfer of Personal Data

We have set out below, in a table format, a description of the types of Personal Data we collect, the sources we collect it from, how we plan to use your Personal Data, and what are the legal bases we rely on to do so. We process the following categories of personal data:

  • Contact Information, including your first and last name, mailing address, email address, telephone number, mailing preference and other contact information you may provide when communicating with us.
  • Communication Information, such as the contents of the communications and correspondence between us by email, or otherwise.
  • Claims Conference Program Data, which includes:
    • General personal information such as, date of birth, ID numbers and government issued ID.
    • Demographic data, such as gender, religion, country and occupation
    • Data revealing ethnic or racial origin
  • Health Data means information about your physical and mental health, such as medical history and any other information included in a medical assessment performed in relation to a Claims Conference Program.
  • Persecution History Data, such as in information relating to your persecution history you were subject to during the war
  • Verification Data means photographs of you and mathematical representations of those photographs and of official identification (“ID”) taken using the Claims Conference Verification smartphone application, which can be used to verify you.
  • Sensitive Personal Data means data revealing religion, racial or ethnic origin, Health data and Verification Data.
  • Financial Data, such as account details and related transactional data.
  • Other Identifying Information, such as your IP address and other information your device makes available to us.

Please note that depending on the purpose for which we use your Personal Data, we may rely on more than one legal basis for processing. The relevant processing conditions are as follows:

  • Consent: your consent for us to process your Personal Data for one or more specified purposes (Article 6(1)(a) GDPR, Article 9(2)(a) GDPR);
  • Contract: means the processing of Personal Data is necessary for entering into or performing a contract with you (Article 6(1)(b) GDPR);
  • Legal Obligations: means the processing of Personal Data is necessary for us to comply with the legal obligations we are subject to (Article 6(1)(c) GDPR);
  • Legitimate Interest: means our legitimate business interest (Article 6(1)(f) GDPR) of managing our relationship with you and conducting our outreach programs;
  • Legitimate activities of a not-for-profit body or association: means processing carried out by a not-for-profit body, association or foundation in connection with its purposes (Article 9(2)(d) GDPR); and
  • Substantial public interest: means where processing is necessary for reasons of substantial public interest (Article 9(2)(h) GDPR).

If you have any queries, you can contact us at the email address listed in section 11 Contact Us of this notice.

When we rely on your consent as the legal basis for processing your Personal Data, you have the right to withdraw your consent at any time (for more information on this see section 5(8) Right to withdraw consent below).

We may use your Personal Data for purposes other than the ones listed below. Should this be the case, we will inform you of the purpose in accordance with applicable laws and regulations.

Use

Source of Personal Data

Categories of Personal Data

Legal Basis

Legitimate Interests

Outreach work to support our objectives

To conduct outreach for our programs or related programsCompensation applications submitted to us
  • Contact Information
  • Legitimate interests
  • Consent
It is in our legitimate interest to promote our mission of providing a measure of justice for Jewish Holocaust victims, and to provide them with the best possible care
To provide you with our newsletter and other promotional informationYour direct interaction with our website
  • Contact Information
  •  Consent
 
Publication of individual stories, photos/videos for education, outreach and general promotional purposesYour direct interaction with us
  • Information including photos and videos provided by or relating to you
  • Consent
 

In relation to Claims Conference programs

To consider you for a grant or fellowship application and to administer itThrough a portal on our website or grant application platform
  • Contact Information
  • Financial Data
  • Legitimate Interests
It is in our mutual interest for us to assess your application for a Claims Conference grant and to administer it
To consider your organization for a grant application and to administer itThrough a portal on our website or grant application platform
  • Contact Information
  • Legitimate Interests
It is in our mutual interest for us to assess your organization’s application for a Claims Conference grant and to administer it
To process and administer your application for participation in Claims Conference funded social welfare programs (which includes home-care, socialization, emergency services, and other social welfare services)Your direct interaction with a social service agency, which collects your information and shares it with us.
  • Contact Information
  • Claims Conference Program Data
  • Verification Data
  • Health Data – only for home-care
  • Financial Data
  • Persecution History Data
  • Consent (for Sensitive Personal Data)
  • Contract
  • Legitimate interests
  • Legitimate activities of a not-for-profit body
  • Substantial public interest
It is in our mutual interest for us to manage your application for Claims Conference funded social welfare programs
To process teacher evaluations in connection with Claims Conference teacher training education grantsYour direct interaction with a teacher training institution, which shares the information with us.
  • Contact Information
  • Legitimate interests
It is in our mutual interest for us to evaluate teachers in connection with Claims Conference teacher training education grants
To process and administer your application for compensation or other restitution programYour direct interaction with us and any of our Claims Conference programs

Through a portal on our website
  • Contact Information
  • Claims Conference Program Data
  • Verification Data
  • Health Data
  • Financial Data
  • Persecution History Data
  • Contract
  • Consent (for Sensitive Personal Data)
  • Legitimate interests
  • Legitimate activities of a not-for-profit body
  • Substantial public interest
It is in our mutual interest to process and administer your application for compensation or other restitution program

To support an individual making an application or receiving a benefit

Your direct interaction with us or a social service agency, through a portal on our website or grant application platform
  • Contact Information of a relative, alternate contact or representative who may be assisting an individual with making an application or receiving a benefit, or who is listed in the application.
  • Legitimate interests
  • It is in our mutual interest and in the interest of the applicant for us to assess the application or provide a benefit.
    To submit to audits and to respond to inquiries from the German Ministry of Finance/German Federal Audit Office, other regulators or government entities or other legal demandsCompensation records, grant records
    • Contact Information
    • Communication Information
    • Health Data
    • Claims Conference Program Data
    • Verification Data
    • Financial Data
    • Persecution History Data
    • Contract
    • Legal Obligation
    • Consent (for Sensitive Personal Data)
     
    To conduct audits on our agencies (i.e. grantee institutions)Directly from the grantee
    • Contact Information
    • Claims Conference Program Data
    • Health Data
    • Financial Data
    • Persecution History Data
    • Contract
    • Legal Obligation
    • Consent (for Sensitive Personal Data)

     

     
    Reporting on grants and programs to the German Ministry of Finance/German Federal Audit OfficeCompensation records, grant records
    • Contact Information
    • Claims Conference Program Data
    • Persecution History Data

     

    • Legal Obligations
    • Contract
     

    General inquiries

    To deal with your requests and questions regarding your compensation application or other compensation programs and social welfare servicesYour direct interactions with us and our services department, your compensation application, information from your social service agency.
    • Contact Information
    • Communication Information
    • Claims Conference Program Data
    • Legitimate Interest
    • Contract
    It is in our mutual legitimate interest for us to respond to your inquiries
    To answer your requests relating to your data protection rightsYour direct interaction with us
    • Contact Information
    • Communication Information
    • Legal Obligations
     
    To answer your telephone calls in the event you call our Survivor Services Department, and to record all incoming calls for the purposes of quality control and training. Your direct interactions with us
    • Contact Information
    • Communication Information
    • Claims Conference Program Data

    • Legitimate Interest
    • Contract
    It is in our mutual legitimate interest for us to respond to your inquiries and to ensure quality control

    Website

    To improve your experience on our websites and social media platformsCookies
    • Other identifying information
    • Legitimate interest
    It is our mutual legitimate interest to improve your experience on our websites

    Internal management

    To process payments in relation to vendors, independent contractors and other service companiesDirectly from the vendor, independent contractor or company.
    • Contact Information
    • Financial Data
    • ID Numbers
    • Contract
    • Legal Obligations

     

     
    To run the Claims Conference in an efficient and proper way. This includes managing our financial position, business capability, planning, adding and testing systems and processes, managing communications, corporate governance, and auditFrom all sources listed above
    • Contact Information
    • Claims Conference Program Data
    • Financial Data

     

    • Legitimate interests
    • Legal Obligations

     

    It is in our mutual interest to manage the efficiency of how we operate; and to comply with rules and regulations from regulators
    To manage our Board of DirectorsFrom the Board of Directors
    • Contact Information
    • Communication Information
    • Contract
    • Legitimate Interests
    It is in our mutual interest to manage our relationship

    2. Recipients

    In order to achieve our purposes set forth in the data use table, we may share your Personal Data with the following categories of recipients:

    • IT service providers;
    • social welfare agencies located all over the world;
    • grantee organizations;
    • government authorities (primarily the German government);
    • historical archives;
    • banks;
    • legal advisors;
    • auditors;
    • telecommunications companies and postal services; and
    • vendors or other service providers.

    We require all third parties who process Personal Data on our behalf to respect the security of your Personal Data and to treat it in accordance with their contractual obligations.

    We may need to share your Personal Data with more recipients than the ones listed above. Should this be the case, we will inform you of the change in accordance with applicable laws and regulations.

    3. If you fail to provide Personal Data

    Where we need to collect Personal Data by law or under the terms of a contract we have with you, and you fail to provide the data when requested, we may not be able to perform the contract we have or are trying to enter into with you. If that is the case, we may have to cancel funding or services you receive under a Claims Conference program.

    4. International Transfer of Personal Data

    Because of the global nature of our business, we may need to transfer or onward transfer your Personal Data to countries outside the European Economic Area (EEA) or the UK, such as the USA and Israel and any other country in which we have a social welfare agency that processes your data.

    Israel and the UK are recognized by the European Commission and the UK government as providing an adequate level of protection to Personal Data, which means that Personal Data can be transferred to Israel and/or the UK without any further safeguards being necessary.

    For transfers to countries whose data protection laws do not offer the same level of protection as European laws, we put in place adequate safeguards such as standard data protection clauses adopted by the European Commission or the UK Information Commissioners Office and by requiring the use of other appropriate technical and organizational information security measures. Alternatively, in certain circumstances we may ask for your express consent. You may contact the data protection officer to obtain additional information about the safeguards we take in connection with these transfers. A copy of the Standard Contractual Clauses can be accessed at https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_en.

    5. Your rights in relation to Personal Data

    You have the following rights regarding your Personal Data that we hold:

    • Right of access

    You can request details of your Personal Data that we hold. We will confirm whether we are processing your Personal Data and we will disclose supplementary information including the categories of data, the sources from which it originated, the purpose and legal basis for the processing, the expected retention period, and the safeguards regarding data transfers out of the UK or to non-EEA countries, subject to the limitations set out in applicable laws and regulations. We will provide you free of charge with a copy of your Personal Data, but we may charge you a fee to cover our administrative costs if you request further copies of the same information.

    • Right of correction

    We will comply with your request to correct incomplete or inaccurate parts of your Personal Data, although we may need to verify the accuracy of the new information you provide us.

    • Right to be forgotten

    At your request, we will delete your Personal Data promptly if:

    • it is no longer necessary to retain your Personal Data;
    • you withdraw the consent which formed the basis of your Personal Data processing;
    • you object to the processing of your Personal Data as set out in Section 5(6) below; and there are no overriding legitimate grounds for such processing;
    • the Personal Data was processed illegally; or
    • the Personal Data must be deleted for us to comply with our legal obligations.

    We will decline your request for deletion if processing of your Personal Data is necessary:

    • to comply with our legal obligations;
    • in pursuit of a legal action;
    • to detect and monitor fraud; or
    • for the performance of a task in the public interest.

    Please note that even if we stop all marketing communications, you may still receive administrative communications from us.

    • Right to restrict processing of your Personal Data

    At your request, we will limit the processing of your Personal Data if:

    • you dispute the accuracy of your Personal Data;
    • your Personal Data was processed unlawfully, and you request a limitation on processing, rather than the deletion of your Personal Data;
    • we no longer need to process your Personal Data, but you require your Personal Data in connection with a legal claim; or
    • you object to the processing pending verification as to whether an overriding legitimate ground for such processing exists.

    We may continue to store your Personal Data to the extent required to ensure that your request to limit the processing is respected in the future.

    • Right to data portability

    At your request, we will provide you free of charge with your Personal Data in a structured, commonly used and machine-readable format, if:

    • you provided us with Personal Data;
    • the processing of your Personal Data is based on your consent or required for the performance of a contract; or
    • the processing is carried out by automated means.
    • Right to object

    Where we process your Personal Data based upon our legitimate interest (or that of a third party), you have the right to object to this processing on grounds relating to your particular situation if you feel it impacts on your fundamental rights and freedoms. We will comply with your request unless we have compelling legitimate grounds for the processing which override your rights and freedoms, or where the processing is in connection with the establishment, exercise or defense of legal claims.

    • Right not to be subject to decisions based solely on automated processing

    You will not be subject to decisions with a legal or similarly significant effect (including profiling) that are based solely on the automated processing of your Personal Data, unless you have given us your explicit consent or where they are necessary for a contract with us.

    • Right to withdraw consent

    You have the right to withdraw any consent you may have previously given us at any time. Please note that where consent has been withdrawn you may not be able to receive certain benefits under a Claims Conference program.

    • Right to complain to a supervisory authority

    If you are not satisfied with our response, you have the right to complain to or seek advice from a supervisory authority and/or bring a claim against us in any court of competent jurisdiction.

    If you wish to contact us in connection with the exercise of your rights listed above, please email or write us at the address listed in section 11 Contact Us of this notice. We will respond to your written request as soon as possible and no later than 30 days from receiving it.

    Unless stated otherwise, we will not charge you any fee in connection with the exercise of your rights. In so far as it is practicable, we will notify the recipients of your Personal Data of any correction, deletion, and/or limitation on processing of your Personal Data.

    Please note that if you decide to exercise your rights under sub-sections (3) and (8), depending on our response, it may lead to the cessation of payments or homecare services.

    6. Retention Period

    We keep your information as long as it is needed to achieve our purposes listed above, as well as for the amount of time necessary to meet any legal, tax, or reporting requirements.

    We do not keep your personal information for longer than is required for us to comply with our legal obligations and for the purpose of historical research permitted by applicable law.

    7. Security

    We have a management system to correct and prevent unauthorized access, loss, destruction, falsification, and leakage of Personal Data, as well as the appropriate technical and organizational measures to address such risks, as further detailed below. The goal of these measures is to maintain our data protection standards and to ensure we have the necessary safeguards for the processing of Personal Data.

    • Active intrusion prevention and detection.
    • Both physical and system, user and role-based access controls.
    • Separation of responsibilities.
    • Data ingress controls.
    • Data availability controls.
    • Data minimization
    • Data encryption and pseudonymization.
    • Redundant IT infrastructures.

    8. Children

    We do not collect Personal Data from children under the age of 16, or equivalent minimum age in the relevant jurisdiction, without their parent or guardian permission. If we discover that we have accidentally collected Personal Data from a child below the age of 16, or equivalent minimum age in the relevant jurisdiction, without their parent or guardian permission, we will remove that child’s Personal Data from our records as soon as reasonably possible. If you are a parent or guardian and you would like to know what information we hold about your child, or you want to exercise any of your child’s data protection rights, please email us at the email address listed in section 11 Contact Us of this notice.

    9. Accountability

    We are responsible for all the safeguards implemented in relation to the processing of Personal Data, and we maintain an electronic record of all processing activities of Personal Data.

    10. Updates

    This Privacy Notice may be updated to reflect changes to our Personal Data processing policy. In the event there is material change to this Privacy Notice we will notify you in an appropriate manner.

    11. Contact Us

    If you have any questions or opinions regarding this Privacy Notice, or if you have a request regarding information you provided us, you may either email us at privacy@claimscon.org or write to us at the address below:

    The Claims Conference
    PO Box 1215
    New York, New York 10113

    Our Data Protection Officer in Germany can be reached at:
    SPIE GmbH, Herr Dr. Anton-Peuser, Lyoner Straße 9, 60528 Frankfurt am Main
    phone: +49 69/6649-6920

    Last updated: 02-15-2022


    What are “cookies?”

    Cookies are small text files that a website saves on your computer or mobile device.

    It enables the website to remember your actions and preferences (such as login, language, font size and display preferences) over a period of time, so you don’t have to re-enter such information when you revisit the website.

    What cookies do we use and how?

    Our website uses the following types of cookies:

    • Functional Cookies

    It records your preferences when visiting the website.

    • Performance Cookies

    It analyzes how a website is used and monitors the website’s performance. In addition, in the event of a failure, cookies are used to quickly identify issues and troubleshooting.

    Below is a list of cookies used on the website and what they are used for:

    1. Google Analytics: _ga, _gid, _unam
      • Type of cookie: Performance
      • Description: These cookies are used to collect information about how visitors use our website. We use the information to distinguish users, compile reports and to help us improve the website. The cookies collect information such as, the number of visitors to the website, where visitors have come to the website from and the pages they have visited. Visit here for more information on how Google safeguards data
    2. Marketing cookies : _ab12#, ads/ga-audiences
      • Type of cookie: Marketing
      • Description: This cookie tracks the visitor across websites to display relevant advertising
    3. Other functional cookies: sharethis_cookie_test         
      • Type of cookie: Functional
      • Description: This allows us to determine whether cookies are supported
    4. Other functional cookies: Collect
      • Type of cookie: Functional
      • Description: This cookie distinguishes users, event data, and device type

    You can find more information about cookies, and how to block or delete them, at www.allaboutcookies.org.