Controller / Data protection officer

Controller in terms of data protection law is:

INWT Statistics GmbH
Hauptstraße 8
Meisenbach Höfe, Aufgang 3a
10827 Berlin

Phone: +49 30 1208231-0
Fax: +49 30 1208231-99
E-Mail: info@inwt-statistics.de

Headquarter: Berlin-Schöneberg
AG Berlin-Charlottenburg, HRB 133141 B
Managing Directors who are authorised to represent: Mira Céline Klein, Dr. Amit Ghosh
USt-IdNr.: DE276345178

In terms of content under Section 10 Absatz 3 MDStV are liable: Mira Céline Klein, Dr. Amit Ghosh

In the following, we inform you about the processing (among other things collection/recording and storage) of your personal data. This applies to the processing of your personal data when using our website (including sub-websites) and of the special processing situations which are listed below.

1. Processing of your personal data by using our website

If you use our website purely for information purposes, we only process personal data transmitted by your browser to our server. Especially:

• the date and time of the visit of our websites (timestamp),
• URL of the resource that was accessed (e. g. „/home.html“) and access method (e. g. GET or PUT) as well as log-data (e. g. "HTTP/1.1"),
• the status code of the access (e. g. 200 on a successful submission of a page or 404, if a page was not present on the server),
• the amount of data transferred during the process in bytes,
• the so-called referrer (this is the URL of the referring page), if it has been transmitted (this information is transmitted by the browser in the sense if the call was made via a link),
• Information about the browser used if they were transmitted with the access (e. g. „Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0; Trident/5.0)“).
• Information on the device used, if this was transmitted (desktop or mobile)
• Name of the operating system used, if this was transmitted (Linux, macOS, or Windows)
• the country from which access was made, if this was transmitted (e.g. Germany)

On the one hand, this is done to enable our website to be viewed and to ensure the stability and security of the website (Article 6 (1) (f) GDPR). We have a contract processor for this. Sometimes personal data can also be transferred to the USA (legal basis are closed standard contractual clauses.)

All accesses of a day are stored in a log file. Log files are deleted after 14 days. We need this information to solve problems with our website (e. g. increased load times of the website, reported malfunctions, invalid references etc.). In addition, the log files help us to identify and ward off attacks on this part of our infrastructure (e. g. DoS-attacks, etc.).

The practices set out in this data privacy policy apply only to this website and other specific situations. Other sites operated by third parties may be subject to other practices. Therefore, if you follow or visit any links from third parties websites, please check the privacy policy statements on these sites. We have no control over such websites and we have no responsibility or liability for the practices pursued by third parties.

Linktree is its own responsible for the pages of Linktree. Only for our company subsite Linktree acts as processor of us and we are responsible for the links we put in Linktree. For more information on how Linktree processes your data as sole controller or as processor, please see https://linktr.ee/s/privacy/ .

This website does not use any special tracking tools (like Google Analytics).

Only so called "Session Cookies" are used. These are text files that are stored in the browser's local cache. The information is needed by the server, e.g. to recognize users, who have logged in during their session. As soon as the browser is being closed, the session cookies are destroyed.

2. Special Processing Situation: Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent. This data is processed on the basis of Article 6 (1) (b) GDPR if your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) if this was queried; the consent can be revoked at any time. The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.

3. Special Processing Situation: meetergo

The meetergo service from webnature solutions GmbH, Hansaring 61, 50670 Cologne, is used to book appointments via our website. When booking an appointment, the following personal data is collected: first and last name, e-mail address, telephone number. We have concluded a corresponding order data processing contract with webnature solutions GmbH. Data processing takes place on protected servers in Germany. Please note that for technical reasons, the data can only be sent to you and us by e-mail in an unencrypted form. When data is transmitted by e-mail, it is therefore possible that, in rare cases, third parties may inspect it. For this reason, we collect as little data as possible from you. If you make an appointment, you voluntarily give your consent to the processing of the data collected above for appointment booking in the calendar and the additional consent to unencrypted transmission. In addition, you consent to the data being transmitted to other service providers who are also based in unsafe third countries in order to arrange an appointment with us (storage in our calendar). You can revoke this consent at any time for the future (legal basis is: Art. 6 Para. 1 lit. a) GDPR, transmission to a third country Art. 49 Para. 1 lit. a) GDPR and completed standard contractual clauses/SCCs).

4. Special Processing Situation: Performance of Contract

The processing of all relevant personal data for performance of a contract takes place for entering into a contract, fulfillment of the contract and for the termination of the contract (Art. 6 (1) (b) GDPR). The personal data processed by us for the performance of the contract will be stored until the expiry of the statutory provisions and thereafter deleted, unless we are obliged to a longer storage or you have consented to an additional storage (Art. 6 (1) (a) GDPR).

5. Special Processing Situation: Consent

In certain situations, we will obtain your consent to process your personal data (Art. 6 (1) (a) GDPR). You have the option to withdraw your consent at any time.

6. Special Processing Situation: Applications

If you send us your application for an advertised position, your application documents will be processed on the basis of Article 6 (1) (b) GDPR. If you also send an application photo, you do so voluntarily and thus give your consent to the collection and storage of your application photo (Article 88 in conjunction with Section 26 (2) BDSG). We have a very great interest in the implementation and completion of a proper application process. This also includes refuting opposing allegations of discrimination in connection with the completion of the application process, which is why your application documents will only be deleted 6 months after rejection. Your application documents will only be stored for a longer period of time with your express consent. Unsolicited applications will be deleted, even if they have not been rejected, within a maximum of 12 months after receipt of your application documents.

7. Special Processing Situation: LinkedIn

In the following we inform you about the processing of your personal data in connection with your visit to one of our social media pages. The operator of the respective social media platform is solely responsible for the processing of personal data on the social media platform itself, on which we operate our social media pages (further information on the processing of your personal data by the operator of the respective social media platform can be found further below).

Processing of your Personal Data by us

When you visit one of our social media pages, we, as the operator of the social media page, process your actions and interactions with our social media page (e.g. the content of your messages, inquiries, posts or comments that you send to us or on leave our social media pages or if you like or share our posts) as well as your publicly visible profile data (e.g. your name and profile picture). Which personal data from your profile is publicly visible depends on your profile settings, which you can adjust yourself in your settings on the social media platform (further information on this can be found in this section B under point II). In general, please ensure that you do not transmit or share any sensitive data or confidential information (e.g. application documents, bank or payment data) via social media platforms; we recommend a more secure transmission method (e.g. letter post, e-mail ) to use. We operate our social media pages and process the aforementioned data for the purpose of providing information about us and our products and communicating with our followers and interested parties. This data processing takes place on the basis of our aforementioned legitimate interests (Art. 6 Para. 1 lit. f GDPR) and, if necessary, to answer your messages, inquiries, contributions or comments that you send to us (Art. 6 Para. 1 lit. b GDPR). We check whether comments or other interactions on our social media pages violate applicable law or the respective community guidelines and delete corresponding comments if necessary. In the event that corresponding comments occur frequently, we may process the user names involved for internal coordination. We base this processing on our legitimate interest (Art. 6 Para. 1 lit. f GDPR) to provide a reputable online presence and to meet legal requirements.

You can make a request via the social media channels. For this purpose, we process the contact details you provide (surname, first name, address, e-mail and telephone) as well as other information provided by you. According to your request, they will process the data you have provided in order to contact you to arrange an appointment, to fulfill a contract with you or to initiate a contract (Art. 6 Para. 1 lit. b) DSGVO).

The social media platforms also provide us with anonymous usage statistics (so-called analysis services or page insights data) of our social media pages based on the actions and interactions of our followers (e.g. likes, shares, comments etc., number of followers, Views of individual page areas, reach of a post and statistics on followers by age, language, origin or interests) that help us to get in touch with our followers and interested parties, to understand the use and reach of our posts, to evaluate content and to recognize usage preferences and to be able to design our social media pages as target group-oriented as possible. We have no influence or access to the creation and processing of these usage statistics and the underlying data, they are carried out under the operator of the respective social media platform and without us being able to see the personal data of individual followers or users (further information on this can be found further down). This data processing is based on our aforementioned legitimate interests (Art. 6 Para. 1 lit. f GDPR).

We also use these anonymous usage statistics to place targeted, interest-based advertisements on the social media platforms we use or to highlight our posts. The display of interest-based advertisements or the highlighting of posts on the social media platforms we use is based on an analysis of the user`s previous usage behavior by the respective social media platform without us viewing the personal data of individual users or with any personal data that we may have processed match or know the identity of users who are being served interest-based ads (see below for more information). This data processing is based on our aforementioned legitimate interests (Art. 6 Para. 1 lit. f GDPR). If, as part of interest-based advertising, we exceptionally carry out a so-called extended comparison with customer lists to be uploaded by us to the respective social media platform, this would only take place on the basis of your consent for this (Art. 6 Para. 1 lit. a DSGVO).

Processing of your Personal Data by the Operator of the Respective Social Media Platform

The operator of the respective social media platform is solely responsible for the processing of personal data on the social media platform itself, on which we operate our social media pages. This usually processes personal data from you when you visit one of our social media pages, regardless of whether you have a user account on the respective social media platform or are logged in on the respective social media platform and usually also uses cookies and other storage media - and (sometimes cross-device) tracking technologies. Further information on the processing of your personal data by the operator of the respective social media platform can be found in the information on data protection on the following websites of the respective social media platform.

The social media platforms also provide us with anonymous usage statistics (so-called page insights data) of our social media pages based on the actions and interactions of our followers (see above for more information). We have no influence or access to the creation and processing of these usage statistics and the underlying data; they are carried out under the responsibility of the operator of the respective social media platform and without us being able to see the personal data of individual followers or users. It may happen that the social media platforms also create personalized usage statistics themselves, for example for their own market research, advertising or other commercial or business purposes, and also process personal data outside the European Union, over which we also have no influence or access. Further information on the processing of your personal data by the operator of the respective social media platform as part of the creation and processing of usage statistics can be found in the information on usage statistics on the following websites of the respective social media platform.

Further information on the processing of your personal data by the operator of the respective social media platform in the context of interest-based advertising as well as the setting options for your profile and your advertising preferences can be found on the following websites of the respective social media platform.

8. Special Processing Situation: PodBean

We publish our podcasts on PodBean. PodBean hosts this itself and is responsible for hosting and operating its website (processing of personal data). We ourselves have concluded a joint contract for uploading and presence (responsible-to-responsible) in order to justify our own processing of personal data. You can find out how PodBean itself processes your personal data and, if necessary, transmits it to us or third parties as statistical data on PodBean`s data protection declaration page. As a rule, we have a legitimate interest in pseudonymised data in order to improve our reach and service.

9. Processor Contract

If we outsource the processing of personal data, we use specialized processors. Our processors are carefully selected and regularly monitored by us. They process personal data only on our behalf and strictly according to our instructions on the basis of corresponding contracts for a processing / data protection agreement (Art. 28 GDPR). For the processing of personal data, which we undertake on behalf of a data controller, we offer reasonable guarantees that we take appropriate technical and / or organizational measures so that the processing is in accordance with the legal provisions and the protection of the data subjects is maintained.

10. Transfer of Personal Data to Third Countries

If we transfer personal data to countries outside the EU that do not offer an equivalent level of data protection, we rely on an adequacy decision by the Commission (Article 45 GDPR) or appropriate guarantees (Article 46 GDPR) or on the exceptions for a third country transmission under Article 49 GDPR.

11. Data security, data integrity

We maintain reasonable technical and / or organizational measures to protect your personal information, from accidental or unlawful destruction or accidental loss, unintentional alteration, and unauthorized disclosure. The personal information we process is relevant to its intended use and we take reasonable measures to ensure that the personal information is complete and up to date for its intended use.

12. Storage of personal data

Unless otherwise provided in this Data Privacy Policy, personal data is stored only for as long as necessary for the purpose (s) for which it is being processed. If personal data is no longer necessary, it will be deleted and in any case, a deletion takes place under the provided provisions by law.

13. Your rights

You have the right to access, rectify, delete, restrict and transfer your personal data and may object an automated decision-making; subject to restrictions under applicable law. For the above-mentioned processing, which is based on the legal basis pursuant to Art. 6 (1) (f) GDPR or for advertising purposes, you have a right to object the processing. For your requests contact: datenschutz@inwt-statistics.de or write a letter to INWT Statistics GmbH, Hauptstraße 8, Meisenbach Höfe, entrance stairway 3a, 10827 Berlin. You have the right to lodge a complaint by a supervisory authority. Data Controller under the GDPR is the INWT Statistics GmbH, Hauptstr. 8, 10827 Berlin.

14. Changes to this Data Privacy Policy

In order to comply with technical and legal adjustments, changes may be made to this Data Privacy Policy.