Source: https://globalsoilweek.org/imprint-2/
Timestamp: 2019-04-26 09:42:37+00:00

Document:
Purposes of processing We process our users’ personal data only to the extent required for providing a functional website and supplying our content and services. We process our users’ personal data regularly only if the respective users have given their consent. The only exception to this is where it is actually impossible for us to obtain prior consent and processing of the data is legally allowed.
Legal basis for processing personal data Art. 6 paragraph 1 point a GDPR serves as the legal basis for processing personal data where we obtain the corresponding data subjects’ consent. Art. 6 paragraph 1 point b GDPR serves as the legal basis where we need to process personal data for the purposes of fulfilling a contract, and the data subject is party to the contract. This also applies to processing necessary to accommodate preparations for entering into a contract. Art. 6 paragraph 1 point c GDPR serves as the legal basis Where processing of personal data is necessary for our company to fulfil a legal obligation Art. 6 paragraph 1 point d GDPR serves as the legal basis where processing of personal data is necessary for protecting the vital interests of the data subject, or those of another individual. Art. 6 paragraph 1 point f GDPR serves as the legal basis where processing is necessary to protect our company’s or a third party’s legitimate interests, and such interests are not overridden by the interests, fundamental rights and freedoms of the data subject.
Duration of storage and criteria to determine the duration The data subject’s personal data will be deleted or blocked as soon as the purpose for which it has been collected has been fulfilled. Data may remain on record beyond this period if such is specified in European or national legislation. Data will also be deleted if a storage period specified in the above standards expires unless conclusion or fulfillment of a contract requires the data to remain on record further.
Transmission to third countries If we process data in a third country (that is, outside the European Union (EU) or the European Economic Area (EEA)) or this takes place in consequence of the use of services of third parties or disclosure or transmission of data to third parties, this is only done in order to fulfil our (pre)contractual obligations on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permission, we process or allow the data to be processed in a third country only when the specific requirements of Article 44 ff GDPR are met. This means that the processing is for example performed on the basis of particular guarantees, such as the officially recognised confirmation of a data protection level corresponding to the US (such as for the USA through the “Privacy Shield”) or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).
This data is recorded in our system’s log files. This data is not stored together with any of the user’s other personal data.
Our system needs to temporarily record the IP address in order to provide the website to the user’s computer. This also requires that the user’s IP address remains logged throughout the session. Recording the data in log files is necessary to ensure that the website operates correctly. The data further helps us optimise the website and ensure that our computer systems remain secure. No data is processed for marketing purposes in this context. The above purposes also constitute our legitimate interests in data processing under art. 6 paragraph 1 point f GDPR.
Data storage period The data is deleted as soon as it is no longer required for achieving the purpose for which it was recorded. With respect to data being recorded in order to provide the website, the data is no longer required as soon as the respective session ends. With respect to data being recorded in log files, the data is no longer required after fourteen days at the latest. Data may remain on record for longer. If so, the users’ IP addresses are deleted or rendered untraceable to make identification of the accessing client impossible.
Right to object and options for avoidance The website cannot be provided without recording the data and the operation of the site in the Internet is impossible without storing the data in log files. There is correspondingly no option for the user to object.
art. 6 paragraph 1 point f GDPR.
Encryption To keep your data secure during transmission, we use the latest state of the art in encryption technology (e.g. TLS/SSL) via HTTPS.
On our website, we offer different ways for users to get in touch with us. It is possible to contact TMG by email, telephone, fax and mail. When you contact us, we store your contact information, e.g. email address or telephone number, and he personal user data included in the message. Processing this data serves the purpose to enable us to contact you and to deal with your request.
If email communication pursues conclusion of a contract, the legal basis shall further be art. 6 paragraph 1 point b GDPR.
Data storage period The personal data that was transmissions in the course of communicating with the user will be deleted when the respective conversation with the user has concluded. The conversation has concluded when the circumstances indicate that the respective subject has been fully resolved.
Right to object and options for avoidance All users can at any time withdraw their consent to our processing their personal data and object to our storing their personal data. If you do so, we will delete all personal data recorded as part of our contact. In this case, the conversation cannot be pursued further.
Comment section Users can share their opinion on topics presented in our blog via our comment section. To post a comment users can log into their Squarespace, Google+, Twitter, or Facebook account or comment anonymously as a guest. If a user is logged in, their profile picture at the respective service will show up next to their comment and the respective service will receive information about the user’s activity. To find out which information your service receives and how they use it please refer to the respective service’s data protection policy. When commenting anonymously users choose a name to display over their comment. Addintionally, we offer an email subscription service for comment threads via squarespace that informs you via email when a new comment is added to the comment thread. In order to use this service users have to be logged into squarespace and squarespace’s data protection policies apply. TMG does not store personal information related to comments by users. We do not review comments before publications, but we reserve the right to delete inappropriate comments later on.
Right to object and options for avoidance If you do not wish for the above mentioned services to receive information about your comment, make sure not to be logged in the respective service(s) when commenting. If you subscribed to a comment thread and wish to cancel your subscription, you can do so directly via your squarespace account or by following the description in the emails.
“Liking” Visitors on our site can like blog posts and comments by clicking on the little heart button. To make sure every visitor can like posts only once the action is stored locally in the user’s browser and the IP address is logged.
Typekit We use Adobe Typekit to ensure a visually appealing design of our website. Typekit is a service provided by Adobe Systems Software Ireland Ltd., 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland (“Adobe”), which gives us access to the Adobe font library. To be able to integrate the fonts we use, your web browser must connect to an Adobe server in the USA and download the font needed. Adobe thereby receives information regarding the fonts used and additionally the following information: which website was accessed, if an ad blocker is used, IP address, soperating system and browser version of the visitor. Adobe has subjected itself to the EU-US Privacy Shield and thus committed itself to ensuring the European data protection principles and level of data protection even in the context of data processing occurring in the USA.
art. 6 paragraph 1 point f GDPR, based on our legitimate interest in a visually appealing design of our website.
Use of social media components On our website we use buttons from different social media networks to allow our users to easily share our content on other platforms. Loading a page that contains social media buttons does not lead to a transmission of data to external services. This only happens when you use the buttons. Please note that TMG as the provider of our sites is not informed of the data transmitted or of how the respective social media services use the data. For more information on this subject please refer to the data protection policies of the respective external provider.
External links Our online offers contain links to the web pages of other providers – so-called external links. We have no influence over the contents of the targets of such links, so we are unable to take responsibility for such contents. The responsibility always rests with the respective operator of the external pages. At the time when the external link was established, no breaches of law could be seen. Permanent monitoring of external content for breaches of law without specific grounds cannot reasonably be expected of us. If we become aware of breaches of law, we will remove the corresponding external links without undue delay.
Online presence in social media TMG currently maintains an online presence at the social media service Twitter. This serves to inform active users of the networks about the services and information available from TMG and in the case of interest to communicate directly over the platforms. You can reach our Twitter profile directly via the Twitter button at the top and bottom of our website. When accessing our Twitter profile, the terms and conditions and data policies of Twitter will apply.
art. 6 paragraph 1 point f GDPR (in Germany, the Federal Data Protection Act §26 BDSG also applies).
The processing is usually by electronic means. This is particularly the case where the application documents are submitted electronically, but the data protection guideline described applies to all personal data regardless of you sent them to us. During the selection process, the applications received are inspected, any questions arising may be sent in response, invitations to interview will be sent and further personal data may be collected in discussions during the recruitment process, in order finally to be able to reach a decision regarding the choice of applicants. If personal data of a special category as per art. 9 paragraph 1 GDPR is voluntarily transmitted as part of an application, processing of this data is also subject to art. 9 paragraph 2 point b GDPR (e.g. data on health such as a disability or data concerning ethnicity). If, during the application process, we request personal data of a special category as per art. 9 paragraph 1 GDPR from applicants, processing of this data is also subject to art. 9 paragraph 2 point a GDPR (e.g. data on health that are required for performing the job). We will use your personal data and other data in our online application system solely to ensure that applications can be processed smoothly and correctly. Your data will be made available only to people involved in the application process. If the application process does not lead to an employment relationship, the application documents are deleted six months after notification of rejection of the application. If you consent, we may keep your personal data on record after the application process for an advertised vacancy is over or if you have sent us a speculative application so that you will remain in our applicant pool for consideration in the event of future vacancies.
Right to rectification Article 16 GDPR You have the right to rectification and/or completion by the controller if the personal data processed that relates to you is incorrect or incomplete. TMG will make the correction without undue delay.
if you objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override your grounds.
If processing the personal data relating to yourself has been limited, the data can without your consent be used neither to assert, exercise or defend legal claims nor to enforce protection of another individual’s or legal entity’s rights nor can it be processed in the public interest of the European Union or one of its member states. This does not apply to the storing of the data. If processing has been restricted in accordance with the above conditions, you will be notified by the controller before any restrictions are lifted.
Right to object Article 21 GDPR You are entitled to object for reasons arising from your own personal situation at any time against processing of personal data relating to yourself where processing is legitimised by art. 6 paragraph 1 points e or f GDPR; this applies in equal measure to profiling legitimised by these provisions. The controller will cease to process your personal data unless they can prove compelling legitimate reasons for processing that override your interests, rights and liberties or processing pursues the assertion, exercise or defence of legal claims. If personal data relating to yourself is processed for the purpose of direct advertising, you are entitled to object at any time to the processing of your personal data for this purpose; this applies equally to profiling where it occurs in connection with such direct advertising. If you object to processing for direct advertising, the personal data relating to yourself will no longer be processed for this purpose. You may, in connection with the use of information society services – Directive 2002/58/EC notwithstanding – exercise your right to object by means of automated methods that are subject to technical specifications.
When exercising this right, you can further request controllers to send the personal data relating to yourself directly to another controller, provided this is technically feasible. This must not adversely affect the liberties and rights of others. The right to data portability does not extend to the processing of personal data where such processing is necessary for fulfilling a duty in the public interest or for exercising executive duties appointed to the controller.
Right to withdraw your consent under data protection law You are entitled to withdraw your consent under data protection law at any time. Your withdrawing consent does not affect legitimacy of any processing that has occurred with your consent prior to withdrawal.
However, such decisions may have been made based on personal data of special categories as per art. 9 paragraph 1 GDPR unless art. 9 paragraph 2 points a or g GDPR also apply and appropriate measures have been taken to protect your rights, liberties and legitimate personal interests. With respect to cases (1) and (3), the controller shall take appropriate precautions to protect your rights, liberties and legitimate personal interests; such precautions will include at least the right to enforce intervention by a human individual at the controller’s, to put forward your own opinion and to contest the decision.
Right to complain with a supervisory authority If you believe that processing of personal data relating to yourself is in breach of the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the EU member state you, your place of work or the locale of the alleged infringement are in. This does not affect your recourse to other administrative or judicial remedies. The supervisory authority receiving the complaint will keep the appellant up to date on status and results of the complaint, including on recourse to judicial remedies as per art. 78 GDPR.9. Changes to our data policy We reserve the right to amend this data policy to keep it in line with the latest legal requirements or to adjust it to reflect changes to our services, e.g. if we introduce new services. The latest version of our data policy will apply to any further visits.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 art. 6

art. 6
 art. 6

art. 6

art. 6
 §26
 art. 9
 art. 9
 art. 9
 art. 9
 art. 6
 art. 9
 art. 9
 art. 78