Privacy notice for all Ecologic Institute websites

Responsible authority
Ecologic Institut gemeinnützige GmbH
Pfalzburger Strasse 43/44
D - 10717 Berlin

[email protected]

Director: Dr. Camilla Bausch
Data Protection Officer: Dr. Nico Stelljes

Data Collection and Processing

Every time you access one of our websites your browser automatically transfers specific information to us. This data serves the purpose of system security, statistics and the technical and content administration of our website. This includes information on your browser type, your operating system, your IP address, date and time of the page view and the Ecologic websites that you visited. This data will neither be assigned to a specific person nor consolidated with other data sources.

Your personal data (i.e. your name, address, telephone number, IP address) will only be collected in case you deliberately and voluntarily submit such information, for example as part of a request or registration. Personal data will only be collected if this is required from a technical or organisational perspective. The personal data submitted by you will only be used for the pre-assigned purpose, it will never be published nor passed on to third parties. This particularly refers to the signing up to events via an online form and to any information given in the process of applying for a job online. You can object to the use of your personal data at any time with future effect, please use the form below to contact us regarding this issue.


Cookies

We use "cookies" on our website; these are small text files that your internet browser stores locally on the access device you use. If a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that enables a unique identification of the browser when the website is called up again. We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. The cookies also store information on web statistics, especially if you wish to be excluded from the statistical recording (see section "Google Analytics"). The user data collected by technically necessary cookies are not used to create user profiles. You can manually delete set cookies at any time in the settings of your Internet browser or deactivate the use of cookies altogether. Please note that if all cookies are disabled, individual websites may not function properly.

Drupal as the content management system (CMS) which drives all our dynamic websites requires to set a cookie (named "has_js") which stores the information, if your currently used browser has javascript enabled or not. Based on that, some links and functions within the websites may need to be rendered differently.

On some websites, channels (streams) from social media such as Twitter, Instagram or Facebook are displayed. These may in turn set so-called third-party cookies, which can be deactivated separately in the settings of your browser.

Google Analytics


If you have given your consent, this website will use Google Analytics 4, a web analytics service provided by Google LLC. Responsible for users in the EU/the EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Scope of processing


Google Analytics uses cookies, which enable an analysis of your use of our website. The information collected by means of the cookies about your use of this website will be transmitted to and stored by Google's server in the USA.
In Google Analytics 4, the anonymisation of IP addresses is enabled by default. Due to IP anonymisation, Google will shorten your IP address within the member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases, Google transmits the full IP address to a server in the USA and shortens it there. According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
When visiting the website, your user behaviour is recorded in form of usage data, e.g. 
•    Page views 
•    First visit to the website 
•    Start of session 
•    Your "click path", interaction with the website 
•    Scrolls (whenever a user scrolls to the bottom of the page (90%)) 
•    Clicks on external links  
•    Internal search queries 
•    Interaction with videos 
•    file downloads 
•    ads seen / clicked on 
•    language setting 
Also recorded: 
•    Your approximate location (region) 
•    your IP address (in shortened form) 
•    technical information on your browser and the end devices you use (e.g. language setting, screen resolution) 
•    your internet service provider 
•    the referrer URL (via which website/advertising material you came you came to this website)

Purposes of the processing


On behalf of the operator of this website, Google will use this information to evaluate your pseudonymous use of the website and to compile reports on the website’s activity. The reports provided by Google Analytics will be used to analyse the website’s performance.

Recipients


Recipients of the data are/could be 
•    Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor according to Art. 28 GDPR) 
•    Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA 
•    Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA 
It cannot be precluded that US authorities may access the data stored by Google.

Third country transfer


Where data is processed outside the EU/EEA and there is no level of data protection equivalent to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be precluded. The USA is currently considered a third country from a European data protection perspective. You do not have the same rights there as within the EU/EEA. You may not have any legal remedies against access by authorities of third countries.

Storage period


The data sent by us and linked to cookies is automatically deleted after 2 months. The deletion of data whose retention period has been expired takes place automatically once a month.

Legal basis


The legal basis for this data processing is your consent pursuant to Art.6 para.1 p.1 lit.a GDPR.

Revocation


You are entitled to cancel a consent given at any time with effect for the future by calling up the cookie settings and change your settings there. The lawfulness of the data processing carried out on the basis of your consent until the revocation remains unaffected.
You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, functionalities on this and other websites may be restricted. You can also prevent the collection of data generated by the cookie and related  to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by
a.    not giving your consent to the setting of the cookie or
b.    downloading and installing the browser add-on to deactivate Google Analytics (download link: https://tools.google.com/dlpage/gaoptout?hl=en).
You can find further information on the terms of use of Google Analytics and on Google’s data protection policies at https://policies.google.com/terms?hl=en. If you want to cancel your consent or receive more information, please contact [email protected].

Mailing List

You can at any time with future effect revoke your consent given to the storage of your e-mail address and the sending of mails, please contact us via [email protected] regarding this issue.

Right to Information, Objection and Appeal

You have the right to be given information on your personal data stored by us at any time. You also have the right to the rectification of false data, blocking and cancellation. You can also object to the use of your personal data at any time with future effect, please contact us via [email protected] regarding this issue. You also have the right to file a complaint with the responsible supervisory authority if you believe that your data have been processed unlawfully. If applicable, you may also assert your right to data portability.