Source: https://www.bll.de/en/data-privacy
Timestamp: 2019-04-24 08:14:23+00:00

Document:
We process your personal data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Please note also our information about your right to object guaranteed under Art. 21 GDPR.
Providing an account for our BLL Crisis Manager Database.
If you have given us your consent to process personal data for specific purposes (such as ordering a newsletter), this processing is legal on the basis of your consent. You may revoke your consent at any time. Please note that such revocation is only with future effect. Processing that took place before the revocation will not be affected.
We also process your data beyond the actual fulfillment of the contract in order to protect our legitimate interests or those of third parties.
The processing of the data entered when signing up for our newsletter is exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke consent to the storage of your data and email address as well as their use for sending the newsletter at any time, just via the "unsubscribe" link in the newsletter. The data processed before we receive your request may still be legally processed.
The legal basis for the processing of your personal data in this application procedure is primarily §26 BDSG in the version valid from May 25, 2018. This allows the processing of data required in connection with the decision to establish an employment relationship. Should the data be necessary for legal prosecution after completion of the application procedure, data may be processed on the basis of the requirements of Art. 6 GDPR, in particular to safeguard legitimate interests under Art. 6 Para. 1 lit. f) GDPR. Our interest would then consist of asserting or defending against claims.
The personal data provided on your application will be processed by us exclusively for the purposes of processing your application and the hiring process. Hiring will be coordinated with the responsible staff members in HR and managers in the respective department. Your data will be deleted six months after completion of the application process, unless you agree to a longer retention period in order to take you into account in future job postings if necessary. If you are hired, your personal data will be copied into your personnel file.
Only our members have access to the members area (internal area). Only those with rights to maintain data and crisis managers nominated by member companies and authorities have access to the BLL Crisis Manager Database (internal area). On request, the access data (user name and password) will be sent to the user in accordance with Art. 6 Para.1b GDPR. Users will receive an automatically generated password which must be changed to a password of their choice after logging in for the first time. The passwords are not visible to us. Each time you log in, your visit will be counted. This is purely for statistical purposes in accordance with Art. 6 Para. 1f GDPR.
Within BLL, all departments that need access to your data in order to fulfil our contractual and legal obligations are granted access to it. In order to respond to inquiries, it may be necessary to pass it to third parties, such as our partner association Federation of German Food and Drink Industries (Bundesvereinigung der Deutschen Ernährungsindustrie, BVE) or individual members. Service providers and vicarious agents employed by us may also receive data for these purposes if they maintain confidentiality and comply with our data protection instructions. Data will only be disclosed to third parties within the framework of the regulations of the GDPR and BDSG. Data that we receive from you as part of our participant management system may be passed on to the event organizer.
We process and store your personal data as long as it is necessary for the fulfillment of our contractual and legal obligations. If the data is no longer required to fulfil contractual or statutory obligations, it will be deleted, unless is further processing is required to meet statutory retention obligations under commercial and tax laws. The periods for storage and documentation specified therein range from six to ten years.
You may revoke your consent to the processing of personal data at any time. Please note that such revocation is only with future effect. Processing that took place before the revocation will not be affected. Please note also our information about your right to object guaranteed under Art. 21 GDPR.
In the context of our business relationship or an order for services, you must provide that personal data necessary to make a business relationship possible and fulfill the associated contractual obligations or which we are legally obliged to collect. Without this data, we will usually have to refuse to enter into a contract with you or fulfill your order; we may also have to terminate an existing relationship.
When you visit our website, we receive usage data. This includes information such as screen resolution, browser version, the type of internet access, operating system, language, plug-ins used, the country or region you are accessing the site from, and search engines that may have referred you. This data is used solely for statistical purposes and will not be transferred to third parties. No evaluation of your specific behavior will take place.
We use a secure online transmission method called secure socket layer (SSL) to transmit and process your personal information. All information transferred using this secure method is encrypted before it is transmitted. Your personal data will only be stored in data centers and computers that meet industry standards (e.g. firewalls, password protection, access controls, etc.) and are protected by security technologies .
In order to increase the protection of your data when visiting our website, the YouTube plugin is integrated into the site using the double opt-in solution. This integration ensures that no connection to YouTube's servers is established when you access a page of our website that contains the plugin. Only when you activate the plugin by clicking the "Activate Video" button and thus give your consent to the transmission of data, will your browser make a direct connection to the YouTube servers.
The YouTube server is then informed about which of our pages you have visited. If you are logged in to your YouTube account, YouTube allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interests of making our online presence more attractive. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f) GDPR.
Our websites contain so-called social plugins ("plugins") of the social online networks Facebook.com, Twitter.com, Linkedin.com and Plus.Google.com. In order to increase the protection of your data when visiting our website, the plugins are integrated into the site using the double opt-in solution. This integration ensures that no connection to the servers of Facebook, Twitter, LinkedIn, or Google+ is established when you access a page of our website that contains such plugins. Only when you activate the plugin and thus give your consent to the transmission of data, will your browser make a direct connection to the servers of Facebook, Twitter, LinkedIn. and Google+. The content of the plugin is transferred directly to your browser and embedded into the site. The plugin will then send data (including your IP address) to the operators of these social networks. We have no control over the amount of data that social networks collect using the plugins. To the best of our knowledge, Facebook, Twitter, LinkedIn and Google+ will receive information about which of our websites you have visited currently and previously. By accessing the plugin, Facebook, Twitter, LinkedIn and Google+ receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the relevant social network or are not currently logged in. This information (including your IP address) is transmitted by your browser directly to a server operated by Facebook, Twitter, LinkedIn, or Google+ in the USA and stored there. The information may also be published on the social network and displayed to your contacts there.
This website uses the open source web analytics service Matomo. Matomo uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of your use of the website. For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymized before it is stored. Matomo cookies remain on your device until you delete them. Matomo cookies are stored on the basis of Art. 6 Para. 1 lit. f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

References: Art. 21
 §26
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 6
 Art. 6