Source: https://www.bdli.de/en/bdli-data-protection-regulation-german-data-protection
Timestamp: 2019-04-21 22:34:53
Document Index: 200646419

Matched Legal Cases: ['Art. 6', 'Art. 28', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

BDLI - Data Protection Regulation of the German Data Protection | BDLI
The observance of the General Data Protection Regulation (GDPR) | of the German Data Protection Act (BDSG) is for us a matter of course. Our technical and organizational measures comply with the statutory data-protection regulations. Please read our privacy policy.
Responsible party: Managing Director Volker Thum, BDLI e.V. Friedrichstr.60, 10117 Berlin, Germany
Personal data: Personal data are considered to be information regarding your identity, e.g., name, address, telephone number, e-mail address. In order to use our website, it is not necessary for you to disclose personal data. We do not actively collect personal information that is considered sensitive. Insofar as you utilize services, as a rule, only such data as we require for the rendering of the services shall be collected. Any further data we ask you for is voluntary information. The processing of personal data is done exclusively for the purpose of the fulfillment of the requested service.
Purpose: We use the personal data provided by you exclusively to answer your inquiries, to provide you with access to certain information (e.g., managing director's letter, BDLI forums) or to send you information regarding the aerospace industry. If you do not wish to use this service, you can unsubscribe at any time. Please use the contact details at the end of the privacy policy/legal notice.
Purpose limitation: We shall collect, process and use the personal data that you provide only for the purposes that you have designated. Dissemination of your personal data to third parties shall not be made without your consent. The collection of personal data as well as their dissemination to government institutions and government agencies entitled to receive information shall be made only in accordance with the relevant laws and/or insofar as we are obligated to do so by a court ruling. We are obliged, and we have obligated our commissioned service companies, to maintain confidentiality and to fulfill the provisions of the General Data Protection Regulation and of the German Data Protection Act.
Contracted data processing: In general, we are the party responsible for the processing of your information; in conjunction with certain events or services, service providers are commissioned to provide processing services for the information. These providers have been obligated through a data-protection-compliant contracted data-processing agreement.
Data: During the usage of our Internet site, for organizational and technical reasons, the following data shall be stored: the names of the retrieved pages, the browser and operating system used, the date and time of day of the access, the search engines used, the names of any downloaded files and your IP address. We shall evaluate these technical data anonymously and solely for statistical purposes in order to constantly continue to optimize our Internet site. These anonymous data shall be stored separately from personal information on secure systems and permit no individual personal inferences to be made.
Cookies: When you visit our website, we may store information on your computer in the form of a cookie. No personal user data will be stored, only the IP address. Of course, you can also view our website without using cookies. If you would not like for us to be able to recognize your computer, you can prevent the storage of cookies on your hard disk by selecting “accept no cookies” in your browser settings. To find out how this functions, please consult the instructional manual provided by your browser’s manufacturer.
Children and youths: Persons under 18 years of age should disclose no personal data to us without the consent of their parents or guardians. We collect no data from minors knowingly.
Security: We have undertaken technical and organizational security measures to protect your personal data from loss, destruction, manipulation and unauthorized access. Our team and all third parties participating in the data processing have been obligated to maintain data secrecy and fulfill the valid privacy policy. To prevent misuse of the data by third parties, our security measures are constantly being revised based on technological developments.
Video surveillance: For our Office, Friedrichstr. 60, 10117 we have a video monitoring. Guidelines were hung up notify visitors about the presence of video surveillance and their rights.
VoIP Telephone: The traffic data will be automatically deleted after seven days, for the user it is not possible to export data from our VoIP telephone.
Hosting: The hosting services that we utilize provide the following: infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services which we utilize for the operation of this website. In this regard, we and/or our hosting provider process master data, contact data, content data, contractual data, usage data, meta data and communication data from customers, prospective customers and visitors to this website on the basis of our rightful interests in an efficient and secure provision of this website, in accordance with Art. 6 Para. 1 lit. f GDPR, in conjunction with Art. 28 GDPR (conclusion of a contracted data-processing agreement).
Collection of access data and log files: We and/or our hosting provider collect data regarding each access of the server on which this service is hosted (called server log files) on the basis of our rightful interests, in accordance with Art. 6 Para. 1 lit. f. GDPR. The access data include the name of the accessed webpage, the file, the date and time of day of the retrieval, the transferred data quantity, notification of successful retrieval, the browser type and version, the user’s operating system, the referrer URL (the previously visited website), the IP address and the querying provider. For security reasons (e.g., for the detection of misuse or fraud), log file information is stored for a maximum of seven days and then deleted. Data whose longer retention is required for evidence purposes shall be accepted from the deletion until the respective event has been definitively clarified.
Google Analytics: On the basis of our legitimate interests (i.e., interest in the analysis, optimization and economic operation of our online services as defined in Art. 6 Para. 1 lit. f. of GDPR), we use Google Analytics, a web analysis service from Google LLC ("Google"). Google uses cookies. The information generated by a cookie about the use of the online offer is usually transferred to a Google server in the USA and stored there. Google is certified under the Privacy Shield Agreement and guarantees compliance with European data privacy laws (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Google will use this information on our behalf to evaluate the use of our online offer, to compile reports on the activities within this online offer and to provide us with further services associated with the use of this online offer and Internet use. Pseudonymous usage profiles may be created from the processed data. We only use Google Analytics with IP anonymization enabled. This means that the IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by the user's browser is not merged with other Google data. Users may refuse the use of cookies by selecting the respective settings on their browser; furthermore, users can prevent the transfer of the data generated by the cookie and related to their use of the online service to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
BDLI Google Fonts: Google Fonts (Open Font License) may allow tracking. The following data may be transferred: IP address of the user; language settings of the browser or operating system used by the user; name of the browser used; version of the browser; web page from which the request was made; operating system of the user; display resolution of the user.
Online presence in social media: We offer external links on our Internet pages; our privacy policy does not extend to these links. We have no control over the privacy and security practices of other providers. Therefore, please inform yourself using the provider's website about the privacy policies provided there. We maintain an online presence on social networks and platforms to communicate with interested parties and users and to inform them about the aerospace industry. When calling up the respective networks and platforms, the terms and conditions and the data-processing guidelines of their respective operators apply. Unless otherwise stated in our privacy policy, we process user data to the extent that the user communicates with us via social networks and platforms, e.g., posts articles on our online presence or sends us messages.
Use of Facebook social plugins: On the basis of our rightful interests (i.e., interest in the analysis, optimization and economic operation of our online service as defined in Art. 6 Para. 1 lit. f. GDPR), we use social plugins ("plugins") from the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plugins may display interaction elements or content (e.g., videos, graphics or text contributions) and are recognizable by one of the Facebook logos (a white "f" on a blue tile, the term "like", a "thumbs up" sign) or are marked with "Facebook Social Plugin". The list and appearance of the Facebook social plugins can be seen here: https://developers.facebook.com/docs/plugins/. Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data-protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active). When users call up a function of this online service that contains such a plugin, their device establishes a direct connection with Facebook's servers. The content of the plugin is transmitted directly from Facebook to the user's device and embedded into the online offer. Usage profiles can be created from the processed data. We therefore have no influence on the extent of the data that Facebook collects with the help of this plugin, but we inform the user of everything we know in this regard. By integrating the plugins, Facebook receives the information that a user has retrieved the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. When users interact with the plugins, e.g., by clicking the like button or commenting, the corresponding information is transferred directly from their devices to Facebook and stored there. If a user is not a member of Facebook, it is still possible for Facebook to come to know and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany. The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as the related rights and settings for protecting the privacy of users can be found in Facebook's data-protection information: https://www.facebook.com/about/privacy/. If a user is a Facebook member and does not want Facebook to collect information about him or her via this online service and link it to his or her Facebook member data, he or she must log out of Facebook and delete browser cookies before using our online service. Further settings and objection options to the use of data for advertising purposes are possible in the Facebook profile settings (https://www.facebook.com/settings?tab=ads) or via the US site https://www.aboutads.info/choices/ or the EU site https://www.youronlinechoices.com/. The settings are platform independent, i.e., they are adopted for all devices, such as desktop computers or mobile devices.
Twitter: Functions and contents of the Twitter service (offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) may be integrated into our online service. This may include, for example, content such as images, videos or text and buttons with which users can express their favor regarding the content or the authors of the content or subscribe to our posts. If the users are members of the Twitter platform, Twitter can assign the call of the above-mentioned contents and functions to the profiles of the users there. Twitter is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data-protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active). Privacy policy: https://twitter.com/de/privacy; opt-out: https://twitter.com/personalization.
Instagram: Functions and contents of the Instagram service (offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) may be integrated into our online offering. This may include, for example, content such as images, videos or text and buttons with which users can express their favor regarding the content or the authors of the content or subscribe to our posts. If the users are members of the Instagram platform, Instagram can assign the call of the above contents and functions to the profiles of the users there. Instagram privacy policy: http://instagram.com/about/legal/privacy/.
LinkedIn: Functions and contents of the LinkedIn service (offered by LinkedIn AG, Dammtorstr. 29-32, 20354 Hamburg, Germany) may be integrated into our online offering. This may include, for example, content such as images, videos or text and buttons with which users can express their favor regarding the content or the authors of the content or subscribe to our posts. If the users are members of the LinkedIn platform, LinkedIn can assign the call of the above contents and functions to the profiles of the users there. LinkedIn privacy policy: https://www.linkedin.com/legal/privacy-policy. LinkedIn is certified under the Privacy Shield Agreement and thereby offers a guarantee of compliance with European data-protection law (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active). Privacy policy: https://twitter.com/de/privacy; opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
YouTube: We integrate videos on the YouTube platform by the provider Google LLC, Gordon House Barrow St Dublin 4 Ireland or 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.gstatic.com/policies/privacy/pdf/20190122/f3294e95/google_privacy_policy_en_eu.pdf; opt-out: https://adssettings.google.com/authenticated.
Google Maps: We integrate maps from the Google Maps service by the provider Google LLC Gordon House Barrow St Dublin 4 Ireland or 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.gstatic.com/policies/privacy/pdf/20190122/f3294e95/google_privacy_policy_en_eu.pdf; opt-out: https://adssettings.google.com/authenticated.
Right to information: You may at any time receive information regarding your stored personal data:
BDLI e.V. Data Protection Department, Friedrichstr. 60, 10117 Berlin, Germany, or send an e-mail to datenschutz@bdli.de.
Right to lodge an objection: You may revoke your consent for the collection and storage of your personal data at any time. Address: BDLI e.V. Data Protection Department, Friedrichstr. 60, 10117 Berlin, Germany, or send an e-mail to datenschutz@bdli.de.
Changes to our privacy policy: We reserve the right to adapt our security and data-protection measures if this becomes necessary owing to technical developments. Please therefore take note of the current version of our privacy policy. If you do not consent to the conditions of this privacy policy or any amended version of it, your sole remedy is to discontinue use of our website.
Questions, suggestions, complaints: If you have any further questions regarding our data-protection information and the processing of your personal data, please directly contact our data-protection officer. She is also available as your contact person in the event of requests for information/inquiries. Claudia Schmidt-Nitz, BDLI Friedrichstr. 60, 10117 Berlin, Germany | Tel. +49 30 206240-35 | email: datenschutz@bdli.de
If you contact us (e.g., via the contact form, by e-mail, by telephone or via social media), your data shall be processed in order to handle the contact inquiry and its implementation, in accordance with Art. 6 Para. 1 lit. b) GDPR. Your contact data may be stored in a customer relationship management system (CRM system) or a comparable inquiry system. We shall delete the inquiries when they are no longer required. We review the necessity according to our deletion policy. The statutory archiving obligations also apply.
Data Protection | March 2019
(PDF | 346.7 KB)