Business and Biodiversity: Legal Notice & Privacy Policy

Legal Notice & Privacy Policy

IMPRINT

The website is edited by
'Biodiversity in Good Company' Initiative e. V.

Domicile:
'Biodiversity in Good Company' Initiative e. V.
Pariser Platz 6, 10117 Berlin, Germany
Tel. +49.(0)30.22 60 50-10
E-Mail: contact(at)business-and-biodiversity.de

Registry Court: Amtsgericht Charlottenburg, Vereinsregister-Nr. VR 31061 B
Board according to German law §26 BGB

Managing Director (according to German law § 30 BGB):
Carolin Boßmeyer, carolin.bossmeyer(at)business-and-biodiversity.de,
phone +49 (0)30.22 60 50 - 10

Disclaimer:
The information in this website has been carefully researched and diligently compiled. Nevertheless, 'Biodiversity in Good Company' Initiative does not accept any liability or give any guarantee for the validity, accuracy and completeness of the information provided. We assume no legal liabilities for damages, material or immaterial in kind, caused by the use or non-use of provided information or the use of erroneous or incomplete information, with the exception of proven intentional or grossly negligent conduct on the side of 'Biodiversity in Good Company' Initiative.

'Biodiversity in Good Company' Initiative reserves the right to modify, append, delete parts or the complete online content without prior notice, or to cancel the publication temporarily or permanently.

This site contains links to third-party web sites. The linked sites are not under the control of 'Biodiversity in Good Company' Initiative and 'Biodiversity in Good Company' Initiative is not responsible for the contents of any linked site or any link contained in a linked site.

Any geographical maps are for informational purposes only and do not constitute recognition of international boundaries or regions; GIZ makes no claims concerning the accuracy of the maps nor assumes any liability resulting from the use of the information therein.

DATA PROTECTION NOTICE according to the General Data Protection Regulation (GDPR) - as of May 23rd, 2018

1. Responsible authority


'Biodiversity in Good Company' Initiative e. V.
Pariser Platz 6, 10117 Berlin, Germany
Tel. +49.(0)30.22 60 50-10
E-Mail: contact(at)business-and-biodiversity.de

Registry Court: Amtsgericht Charlottenburg, Vereinsregister-Nr. VR 31061 B
Board according to German law §26 BGB

Managing Director (according to German law § 30 BGB): Carolin Boßmeyer, carolin.bossmeyer(at)business-and-biodiversity.de, phone +49 (0)30.22 60 50 - 10

2. Data protection at a glance


The following notice gives a simple overview of what happens to your personal data when you visit our website. Personal data refers to all data with which you can be personally identified. More detailed information is provided below.  

Which of your data do we collect and for what purpose? Data is collected via two channels: on the one hand, data is automatically collected by our IT systems as soon as you visit this website. This primarily involves technical data (e.g. internet browser, operating system, or the time you access the website). Some of this data is important to ensure that the website is made available without any problems. Other data can be used to analyse your user behaviour. On the other hand, we also gather data which you pass on to us for specific purposes, e.g. by entering details in a form. We need this data for the various services we offer as an association, e.g. sending out information, organising events, or membership administration.  

What are your rights with respect to your data? You have the right at all times to receive information free of charge on the origin, recipients and purposes for which your personal data is stored. You also have the right to demand that this data is rectified, as well as to limit the processing, or to erase the data under certain preconditions. Furthermore, you have the right to data portability. In addition, you also have the right to raise objections to the processing of your personal data. Please contact us at any time informally with respect to these issues (for contact details, please see above or the imprint).  

3. General 


Protecting your personal data is a high priority for the ‘"Biodiversity in Good Company’" Initiative e.V., as well as being our statutory obligation. We look after your data very carefully, and only pass this on to third parties on the basis of the relevant mandatory regulations, or with your permission. It is also a priority of ours to point out to you that as a non-profit organisation, we do not use your data for commercial advertising or other commercial activities. Unless described below otherwise, the use of our website in general does not involve the gathering, processing or use of personal data. In the event that personal data is gathered via the website, this takes place on a voluntary basis, and in accordance with the principle of data avoidance and minimisation. We would like to point out that the transmission of data via the internet can involve security loopholes. Together with contractors, we put technical and organisational security measures into place to protect your data. Our measures are continually upgraded in line with technical advances. Our privacy policy will be updated, if necessary, and adapted to new requirements. We therefore recommend that you reread this privacy policy periodically.

4. Lawfulness of data processing


We process personal data on the basis of Art. 6(1) lit. a GDPR when the affected person has given their consent for this processing for one or more specific purposes. Especially in the case of membership of our organisation Art. 6(1) lit. b GDPR is the legal basis, for the processing of data of contact persons is a necessary part of being accepted as a member, to satisfy contractual obligations, to pursue association objectives, and to administer members. We administer an association archive – partly electronic, partly in paper form (see further information below under “Duration of data processing and data retention”). Storage is based, referring to Art. 6(1) lit. f GDPR, on a justified interest in the history of the association and verification of our activities. 

5. Processing purposes of the use of data


Informative use of our website: If you access our website for informational purposes only, without registering for special purposes or providing us with information in any other way, we only collect personal data that your web browser automatically transmits to our provider's server. The so-called access logs of the web server record which page views took place at which time. This data is technically required to enable you to view our website and to ensure stability and security. Data include: IP, directory protection user, date, time, pages viewed, logs, status code, amount of data, referrer (website from which you came to our website), user agent, hostname invoked. The IP addresses are anonymised. For this purpose, the last three digits are removed. IPv6 addresses are also anonymised. Information about the directory protection user used will be anonymised after one day. The mentioned data is not stored together with other personal data of you. When using this general data and information no conclusions are drawn on the data subject.

Membership: Membership of the association is open to legal persons covered by private and public law, commercial companies, as well as in individual cases also natural adult persons. No natural persons are currently members. The data of natural persons only plays a role in the form of the data of contacts in the member companies. This means that this is almost exclusively always commercial data. Membership can be applied for online at the website (a PDF which can be filled in). Personal contact data are title, first name, last name, function within the company, email address, (mobile) telephone number and fax number. Processing the data, generally or for agreed specific purposes, can be objected to at any time by the affected persons.  

Newsletter subscription:  You can register for our free newsletter via the website. For the sake of data avoidance and minimisation, all that is required is the email address; entering the name is optional. The data is stored on the website server for automatic dispatch. The newsletter contains information on the association and its activities pursuant to its articles of association, and provides information on interesting news concerning biodiversity, with a main focus on biodiversity and business. The newsletter is published at irregular intervals approximately twice to four times per year. Subscription to the newsletter also includes our informing you occasionally about our events (the announcement of dates, invitations, documentation). We use the double-opt-in procedure for sending the newsletter. This means that you receive an email from us after you have sent in your application. The subscription for the service is only activated when you actuate the confirmation link contained in this email. In this way we can avoid the misuse of your email address by unauthorised third parties. You can object to the processing of this data at any time. For this purpose, you can cancel the newsletter at any time using the unsubscribe link.  

Web forms for registration e.g. for events or competitions: We sometimes use web forms to enable you to e.g. register for events or to participate in competitions. The purpose of providing the data is stated specifically in these forms. The type of data required is defined in each case. The obligatory fields are restricted to what is absolutely necessary (data avoidance and minimisation). Because our events are technical events, we not only ask for the title, first name and last name, and email address, but also the function and the organisation. After approval has been given, the information concerning title, first name, last name, function and organisation are also included in participant lists that are handed out to participants. Transparency concerning who takes part in our events is important to us. More detailed aspects are covered where necessary by the data protection notices applying to each event. You have the right at any time to withdraw your permission to process your personal data.  

Contact by e-mail: If you contact us by e-mail, we will store your e-mail address and any other contact details provided to answer your questions. We will erase the related data after the storage is no longer required, or restrict processing should any legal retention requirements exist.

Web analysis through Matomo: This website uses Matomo (formerly Piwik), an open-source web analytics tool (www.matomo.org), for the purpose of analysis and statistics. Matomo is installed on the servers of our website so that data is only stored there. Matomo uses cookies. A cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. Matomo uses cookies to help identify and track visitors, their usage of website, and their website access preferences. Visitors who do not wish to have cookies placed on their computers should set their browsers to refuse cookies, with the drawback that certain features of our website may not function properly. Matomo collects non-personally-identifying information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. The purpose in collecting non-personally identifying information is to better understand how our website's visitors use the website. Matomo also collects potentially personally-identifying information like Internet Protocol (IP) addresses. However, once sent to the server of our website, the IP address is automatically made anonymous so that we cannot identify any visitor. Matomo does not either use such information to identify its visitors and will not rent or sell potentially personally-identifying and personally-identifying information to anyone. Further information at https://matomo.org/privacy-policy

You may choose not to have a unique web analytics cookie identification number assigned to your computer to avoid the aggregation and analysis of data collected on this website. To make that choice, please click below (see bottom of this page) to receive an opt-out cookie.

6. Recipients or categories of recipients of the data


As part of day-to-day activities, data is processed in a standard way by a few authorised employees of the association's head office. The board, as the representative body of the association, also has access. There are also the recipients listed below. No data transfer takes place to third countries.  

Server log files: The log files that your web browser automatically transmits when you visit our website are stored at the server of our internet provider temporarily.

Membership: The data categories: title, first name, last name, function, email address, and (mobile) telephone number of the contact person in the member companies are used in internal association correspondence and communications (e.g. in email circulars, lists of participants at member meetings, and internal events). This is undertaken for the purposes of pursuing the association's goals. Relevant to specific events, such contact data is also published in publically accessible information (info material, website).   

Data from newsletter subscribers: The data of newsletter subscribers is stored on the website server. A data processing contractor in the form of an internet agency has access to the data on the basis of a data processing contract. The agency is not permitted to use the data in any way for its own purposes.  

Data from applications for events via the web forms: The application data is stored on the website server. A data processing contractor in the form of an internet agency has access to the data on the basis of a data processing contract. The agency is not permitted to use the data in any way for its own purposes. Our events are technical events for which participant lists are prepared and made available on location. After approval, these contain the data categories: title, first name, last name, function and organisation. Any donors providing funding can be supplied with this version of the lists in an electronic way as well.  More detailed aspects are covered where necessary by the data protection notices applying to each event. 

Data from registrations for competitions: Where necessary to realise the competition, this data is made available to all the persons required to carry out the contest, after obtaining consent from the data subject. This can include co-operation partners, donors, jury members and recipients of information material on the results of the competition. More detailed aspects are covered where necessary by the data protection notices applying to each competition.

Web analysis through Matomo: In addition to us, a data processing contractor in the form of an internet agency has access to the data on the basis of a data processing contract. The agency is not permitted to use the data in any way for its own purposes.

External services/YouTube: We have included YouTube videos on our website. These are embedded in the so-called extended privacy mode. This means that YouTube does not store any information about visitors to our site unless they watch the video. When you watch a video, device-related information, log data, and any other data is automatically transferred to Google Inc. (Mountainview, CA / USA). We have no influence on that. For more information, see the Google / YouTube privacy policy at http://www.youtube.com/t/privacy_at_youtube

7. Duration of data processing and data retention  


The 'Biodiversity in Good Company‘ Initiative e. V. will not undertake more processing or storage of your data than required for the purposes stipulated in this data protection notice. 

For server log files: IP addresses are only stored for the duration of your visit of our website and deleted when the session is over. Error logs that log pageview errors are deleted after seven days. In addition to the error messages, these include the accessing IP address and, depending on the error, the website accessed.

When association membership ends, the data of the contact persons in the member companies will no longer be processed, insofar as these persons have not explicitly stated otherwise, and will be erased in all actively used datasets. In the case of events, we no longer process the application data gathered by the web form, and also erase this data from the web server as soon as the event, including post processing and documentation, has been completed. This usually takes place at the latest by one year after the event. The same applies to completed competitions. Newsletter subscribers can arrange for their dataset to be erased by using the unsubscribe link themselves. We actively erase the datasets when appropriate error messages are received via auto responders (delivery failure).

We administer an association archive – partly electronic, partly in paper form. Storage is based on a justified interest in the history of the association and verification of our activities. The archive can also contain personal data which is no longer required for active use (e.g. archived participation lists, the specification of contacts in connection with prior activities, archived applications for competitions). This data can only be accessed by the management of the association and a small circle of authorised head office employees. 

8. Right of access and rectification, right of restriction of processing and right to erasure, right to data portability 


You have a right to information free of charge, a right to obtain from us the rectification of data, and under certain circumstances, also a right to obtain from us the restriction of the processing or the erasure of your personal data (“right to be forgotten”). Please contact us at any time if you wish to be informed of the personal data about your person which we store. Please also contact us if you wish data to be rectified or erased, or wish to make use of your right to data portability or to restriction of the processing of your data (see point 1 above for the responsible contact). 

9. Right to withdraw consent


You have the right to withdraw your consent to data processing at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before the withdrawal.

10. Right to object


You have the right to object at any time to the processing of your personal data. Please contact us for this purpose (see point 1 above for the responsible contact).  

11. Right of appeal


You have a right to appeal to the competent authority.

Piwik-Tracking

to top