Privacy policy

I. Name and address of the person responsible

The person responsible within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other provisions of privacy laws is:

DVGW-Forschungsstelle am Engler-Bunte-Institut
des Karlsruher Instituts für Technologie (KIT)
Engler-Bunte-Ring 1-7
76131 Karlsruhe
Germany
Tel.: +49 721 608412-20
E-Mail: info@dvgw-ebi.de
Website: www.dvgw-ebi.de

II. Privacy policy controller

If you have any questions regarding the processing of data in our association and how to assert your rights please contact our Data Protection Officer free of charge.
Our Data Protection Officer is:

2B Advice GmbH
Joseph-Schumpeter-Allee 27
53227 Bonn
Germany
E-Mail: dvgw-ebi@2b-advice.com
Website: www.2b-advice.com

III. General information on data processing

1. Scope of processing of personal data

We collect and use the personal data of our users only to the extent necessary to provide a functional website and our content and services.

2. Legal basis for the processing of personal data
Where we obtain the consent of the data subject for the processing of personal data, Art. 6 Para. 1a GDPR serves as the legal basis for the processing of personal data.

Art. 6 Para. 1b GDPR serves as the legal basis for the processing of personal data required for the performance of a contract to which the website user is a party. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our organisation is subject, Art. 6 Para. 1c GDPR serves as the legal basis.Art. 6 Para. 1d GDPR serves as a legal basis in the event that vital interests of the website user or another natural person necessitate the processing of personal data.
If the processing is necessary to safeguard a legitimate interest of our organisation or a third party and if the interests, fundamental rights and fundamental freedoms of the website user do not outweigh the first-mentioned interest, Art. 6 Para. 1f GDPR serves as the legal basis for the processing.

3. Data erasure and storage duration
The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. In addition, the data may be stored if the European or national legislator has provided for this in EU regulations, laws or other provisions to which the person responsible is subject. The data shall also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless it is necessary for further storage of the data for the conclusion or performance of a contract.

IV. contact form

1. Description and scope of data processing
We will collect your personal data when you fill in the contact form on our website.

The following data will be collected:
(1) First name and surname
(2) Email address
(3) The IP address of the user
(4) Date and time when sending the contact form
(5) Browser (User Agent)

2. Legal basis for data processing

The legal basis for the processing of the data is Art. 6 Para. 1a GDPR if the user has given his consent.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 Para. 1f GDPR. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 Para. 1b GDPR.

3. Purpose of data processing

The processing of personal data from the input mask serves solely for processing and answering the inquiry.

4. Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the project duration has ended.

5. Possibility of opposition and removal

The user has the possibility at any time to revoke his consent to the processing of personal data in writing or by e-mail. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the request made via the contact form cannot be processed.
All personal data stored in the course of registration will be deleted in this case.

V. Provision of the website and creation of log files

1. Description and scope of data processing
Each time you access our website, our system automatically collects data and information from the computer system of the accessing computer.

The following data will be collected:
(1) The IP address of the user
(2) Date and time of access
(3) The page called up by the user
(4) Browser (User-Agent)

The data is also stored in the log files of our system. These data are not stored together with other personal data of the user.

2. Legal basis for data processing
The legal basis for the temporary storage of data and log files is Art. 6 Para. 1 f GDPR.

3. Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session.

The data is stored in log files to ensure the functionality of the website. The data is also used to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes also include our legitimate interest in data processing pursuant to Art. 6 Para. 1f GDPR.

4. Duration of storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data to provide website content, this is the case when the session in question has ended.
If the data is stored in log files, this is the case after one hour at the latest.

5. Possibility of opposition and removal
The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no possibility for the user to object.

VI. Use of cookies

1. Description and scope of data processing
Our website uses cookies. Cookies are files that are placed on your computer by our websites when you visit the sites. These files store information that makes your use of this site more efficient.

2. Legal basis for data processing
The legal basis for the processing of personal data using cookies is Art. 6 Para. 1f GDPR.

3. Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized also after a page change.
The user data collected by technically necessary cookies are not used to create user profiles.
Our legitimate interest in the processing of personal data in accordance with Art. 6 Para. 1f GDPR also lies in these purposes.

4. Duration of storage, possibility of objection and removal
Cookies are stored on the user’s computer and transmitted to our site by the user. Therefore, you as a user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that all functions of the website can no longer be used to their full extent.

VII. Google Analytics

This website uses the Google Analytics service, which is provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) for the analysis of website usage by users. The service uses “cookies” - text files that are stored on your terminal device. The information collected by the cookies is usually sent to a Google server in the USA and stored there.
On this website IP anonymization is used. The IP address of the users is shortened within the member states of the EU and the European Economic Area. This shortening ensures that no personal reference can be made. Within the framework of the order data agreement, which the website operators have concluded with Google Inc., Google Inc. uses the information collected to compile an evaluation of website usage and website activity and provides services associated with Internet usage.
You have the option of preventing cookies from being stored on your device by making the appropriate settings in your browser. We cannot guarantee that you can access all functions of this website without restrictions if your browser does not allow cookies.
You can also use a browser plug-in to prevent that the information are collected by cookies (including your IP address) and send to Google Inc. and used by Google Inc. The following link will lead you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=de
Alternatively, by clicking on this link, you prevent Google Analytics from collecting data about you within this website. Click on the link above to download an opt-out cookie. Your browser must therefore always allow the storage of cookies for this purpose. If you delete your cookies regularly, you will need to click the link again each time you visit this website.
Here you will find further information on the use of data by Google Inc.: https://support.google.com/analytics/answer/6004245?hl=de

VIII. Your rights

When your personal data is processed, you also have certain rights. More detailed information can be found in the corresponding provisions of the General Data Protection Regulation (Articles 15 to 21).

1 and 2. Right to information and correction

You have the right to obtain information from us on which of your personal data we process. If this information is not (no longer) correct, you can ask us to correct the data, or, if it is incomplete, to complete it. To the extent that we disclose your data to third parties we will inform the relevant third parties in the event of a corresponding legal situation.

3. Right to restriction of processing ("Right to block")

You may request us to restrict the processing of your personal data for one of the following reasons:

• If you dispute the accuracy of the data until we have had the opportunity to verify the accuracy of the data
• If the data is processed unlawfully, but instead of being deleted, you merely request the restriction of the use of personal data
• If we no longer need the personal data for the purposes of processing, but you still need them to assert, exercise or defend legal claims
• If you have filed an objection against the processing and it is not yet clear whether your legitimate interests outweigh ours

4. Right to deletion

You can request the immediate deletion of your personal data under the following circumstances:

• When your personal information is no longer needed for the purposes for which it was collected
• If you have withdrawn your consent and there is no other legal basis for data processing
• If you object to the processing and there are no overriding legitimate reasons for data processing
• If your data is processed unlawfully
• If your personal data must be deleted in order to comply with legal obligations

Please note that before deleting your data we must check whether there is no legitimate reason for processing your personal data.

5. Right to data portability

Upon request you have the right to receive personal data that you have given us for processing in a transferable and machine-readable format.

In addition, you have the right to communicate these data to another responsible person without being hindered by the responsible person to whom the personal data was provided, as long as
(a) the processing is based on a consent pursuant to Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract pursuant to Art. 6 Para. 1 lit. b GDPR and
(b) the processing is carried out by automated means.
In exercising this right, you also have the right to request that the personal data concerning you be transmitted directly by one responsible person to another responsible person, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this.
The right to data transfer does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

6. Right to object

a) Right to object on a case-by case basis

If the processing is carried out in the public interest or on the basis of a balance of interests, you have the right to object to the processing for reasons arising from your particular situation. In the event of an objection, we will not process your personal data further, unless we can prove compelling reasons for processing your data, which outweigh your interests, rights and freedoms, or because your personal data serve to assert, exercise or defend legal claims. The objection shall not preclude the legality of the processing carried out up to the time of the objection.

b) Right to object against the use of data for advertising purposes

In cases where your personal information is used for advertising purposes, you can object to this form of processing at any time. We will then no longer process your personal information for these purposes.
The objection can be made informally.

7. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

We try to process your requests and claims as quickly as possible in order to protect your rights appropriately. Depending on the frequency of enquiries, however, it may take up to 30 days before we can provide you with further information about your request. Should it take longer, we will inform you promptly of the reasons for the delay and discuss the further process with you. In some cases we may not or cannot give you any information. If legally permissible, we will inform you about the reason for the refusal to disclose the information.

However, should you not be satisfied with our answer and responses or should you be of the opinion that we violate the current data protection law, you are free to file a complaint with our Data Protection Officer as well as with the relevant supervisory authority. The supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Baden-Württemberg
Königstrasse 10 a
D-70173 Stuttgart
Phone: +49 (0) 711/615541-0
Email: poststelle@lfdi.bwl.de