The Competence Centre on Climate Change Mitigation in Energy-Intensive Industries (KEI), a division of Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH, takes the protection of personal data very seriously. For users to be able to use our website fully, it is necessary to collect certain information when they visit our website. With this privacy policy statement, we are informing users about which data we collect, how we use that data and about their rights as users of our website.
I. Controller pursuant to General Data Protection Regulation (GDPR)
Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH
Stresemannstraße 69-71
10963 Berlin
Germany
Telephone: +49 30 72618 0000
Fax: +49 30 72618 0099
Email: datenschutz(at)z-u-g.org
II. Name and contact details of data protection officer
For any questions or information on data protection, please contact the data protection officer at Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH.
Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH
Data Protection Officer
Stresemannstraße 69-71
10963 Berlin
Germany
Email: datenschutz(at)z-u-g.org
III. Which information is collected and for what purpose?
1. Visits to website
Every visit to our website is stored on a protocol file to ensure data security. To this end, the following data is stored for a maximum of 24 hours:
- names of files accessed
- date and time of access
- volume of data transferred
- notice whether data was successfully accessed
- IP address of the user or provider
- Internet address of website visited directly before (referrer)
- information about the programme retrieving the data (user agent)
The Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH is not able to directly link IP addresses to users and rules it out.
IP addresses are only analysed in cases of attacks against our website, breaches of public order or other cases of illegal actions in connection with the website. An analysis of the IP address to reveal the identity of the user can only be conducted with the help of the user's provider and only in connection with investigations by the police or public prosecutors.
This data is not used for statistical purposes. We do not pass on this data to third parties for commercial or non-commercial use.
2. Filling out forms with personal data
Some information offers on our website provide the option of filling out forms with personal data.
Users are free to decide whether they wish to submit this data. Only the data needed to deliver the requested service is asked of users. Data is treated as confidential and is only used for the purpose for which it was requested.
If the storage of personal data is required to provide a certain service, the data is only stored for the time period necessary to handle the request or to fulfil the offer or task of the Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH for which the data was requested.
Once users unsubscribe to such a service or it is terminated, personal data is irretrievably deleted after a maximum of 6 weeks.
3. Links to websites of other providers and social media
Our website contains links to websites of other providers and social media. We would like to expressly point out that these websites process personal data in accordance with their own privacy policies. The Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH has no influence on the compliance of other providers with data protection regulations.
4. Photos for press and public relations work
In connection with our press and public relations work, during events and meetings photos will be taken in which you may be identifiable. You may object to such photos being taken and/or published. Please use the contact details above for such objections.
5. Online Meetings, Telephone Calls, and Webinars
For conducting telephone calls and conference calls (collectively referred to as "Telephone Calls"), online meetings, video conferences, and/or webinars (collectively referred to as "Online Meetings"), we use the conferencing and collaboration solutions Zoom and Webex. Zoom is a service provided by Zoom Video Communications, Inc., and Webex is a service provided by Cisco Systems, Inc., both of which are based in the USA. Additionally, we use Slido as part of Webex to conduct surveys during Online Meetings on both platforms. Slido is a service provided by sli.do s. r. o., based in Slovakia and part of the Cisco Systems, Inc. group.
Types of Data
When conducting Telephone Calls, the following data is processed:
- Communication Content: Audio, voicemail
- Recordings (optional): MP4 files of voicemail audio recordings
- Call History with Participant Information: Details of incoming and outgoing phone numbers, country codes, call date and time, call duration
- Location Data: Approximate location of the call participants (nearest location)
- Metadata, Telemetry Data: Session Information (e.g., call result, call type, waiting time), participant IP addresses, device/hardware information
For Online Meetings, various types of data are processed. The scope of data depends on the information you provide before or during the Online Meeting. To participate in an Online Meeting or enter the "meeting room," you must at least provide your name. Personal Data Subject to Processing:
- User Information: First name, last name, phone number (optional), email address, password (if Single Sign-On is not used), profile picture (optional), department (optional), login credentials
- Meeting Metadata, Telemetry Data: Subject, description (optional), participant IP addresses, device/hardware information
- Recordings (optional): MP4 file of all video, audio, and presentation recordings, M4A file of all audio recordings, text file of the Online Meeting chat
- Text, Audio, and Video Data: You may have the option to use chat, questions, or survey functions during an Online Meeting. Text inputs made by you are processed to display them in the Online Meeting and potentially log them. To enable video display and audio playback, data from your device's microphone and any camera is processed during the meeting. You can turn off or mute the camera or microphone at any time via the Zoom or Webex applications.
- Survey Results: Results gathered through surveys via Slido.
- Q&A Results: Answers to questions gathered through Slido.
Scope of Processing
We use Zoom and Webex to conduct Telephone Calls and Online Meetings. If we intend to record Online Meetings, we will transparently inform you in advance and, if necessary, request your consent. The fact of the recording will also be indicated in the respective applications. Telephone Calls are not recorded.
If it is necessary to log the results of an Online Meeting, we will log chat contents. However, this is generally not the case. We will also transparently inform you in advance if this occurs.
In the case of webinars, we may process questions posed by webinar participants for the purposes of recording and follow-up.
We also use Slido with Webex and Zoom to make our meetings more interactive by incorporating surveys and Q&As. These surveys and Q&As can be conducted in real time.
Automated decision-making pursuant to Article 22 GDPR is not employed.
For more information on how personal data is handled, please refer to the privacy policies of the data processors:
Legal Basis
To the extent that personal data of employees of Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH is processed, Article 6(1)(b) GDPR in conjunction with § 26(1) BDSG serves as the legal basis for data processing. Should personal data not be necessary for the establishment, performance, or termination of the employment relationship, but nonetheless be an essential part of using Zoom, Webex, or Slido, Article 6(1)(f) GDPR is the legal basis for data processing. In these cases, our interest lies in the effective conduct of Telephone Calls and Online Meetings and improving direct interaction with participants.
Otherwise, the legal basis for data processing in the context of Telephone Calls and Online Meetings is Article 6(1)(b) GDPR, where these are conducted in the context of contractual relationships.
If no contractual relationship exists, the legal basis is Article 6(1)(f) GDPR. Again, our interest is in the effective conduct of Telephone Calls and Online Meetings.
If you have consented to video and audio recording of Online Meetings, the legality of this processing is based on your consent pursuant to Article 6(1)(a) GDPR.
Disclosure to Third Parties
Personal data processed in connection with participation in Telephone Calls and Online Meetings is generally not disclosed to third parties unless it is intended for such disclosure. Please note that content from Telephone Calls and Online Meetings, like in in-person meetings, often serves to communicate information with clients, prospects, or third parties and is thus intended for disclosure.
The providers Zoom Video Communications, Inc. and Cisco Systems, Inc., as well as sli.do s. r. o., necessarily have access to the aforementioned data as provided in our data processing agreements.
In the context of support services (Zoom Phone), our service provider WTG communications GmbH, with whom we have also concluded a data processing agreement, may have access to personal data.
Data Processing Outside the European Union
Zoom and Webex are services provided by providers based in the USA. Therefore, personal data is also processed in a third country.
Zoom Video Communications, Inc. and Cisco Systems, Inc. are certified under the Data Privacy Framework, so an adequacy decision under Article 45 GDPR is in place for transfers to third countries. Additionally, data processing agreements including standard contractual clauses have been concluded with both companies, providing an adequate guarantee pursuant to Article 46(1) and (2)(c) GDPR. As additional protective measures, we have configured our setup to use only data centers within the EU/EEA.
Slido s. r. o. is part of the Cisco Systems, Inc. group. Therefore, it cannot be excluded that personal data may be transferred to the USA when using Slido. The same applies to data transfers to the USA as stated above for Cisco Systems, Inc.
Data Deletion
Audio and video content, if not recorded, is not (locally) stored. We generally delete personal data when there is no longer a need for its retention. A need may exist if the data is required to fulfill contractual obligations, to check and assert or defend warranty and potentially guarantee claims. In the case of statutory retention obligations, deletion is considered only after the expiration of the respective retention period.
IV. How do we protect children and young people (protection of minors)?
Persons under the age of 18 should not submit personal information to us without the consent of their parent or legal guardian. We do not request personal data from children or young people without the consent of their parents or legal guardian. We do not knowingly collect such data, and we do not pass it on to third parties.
V. Why do we store personal data?
Generally, submitting personal data is not required when using our website. If we store personal data on our website, it is only done with the users’ consent, which can be withdrawn at any time.
In any other case, we only process personal data when legally required to do so (pursuant to Article 6 (1) (c) GDPR), when processing is necessary for performing the tasks of the Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH, when it is in the public interest or in the exercise of official authority (pursuant to Article 6 (1) (e) GDPR in conjunction with Article 3 of the Federal Data Protection Act (BDSG).
VI. Who do we pass data on to?
We operate our website in cooperation with external service providers. Where personal data is processed (for example, for sending newsletters or processing publication orders), we have put in place organisational and technical measures to ensure that our external service providers comply with data protection regulations.
Unless otherwise specified, data stored by our website is processed by our main service provider coding. powerful. systems. CPS GmbH which is located in the Federal Republic of Germany. If personal data is passed on to third parties, the respective page is labelled accordingly.
VII. What are the rights of users of our website?
With regard to the processing of personal data, visitors of the website of the Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH enjoy the rights stipulated in Articles 12 to 22 GDPR:
- Right of access pursuant to Article 15 GDPR
This right grants full access to relevant personal data and other important criteria such as purposes of processing or storage period. The exemptions specified in Article 34 BDSG apply. - Right to rectification pursuant to Article 16 GDPR
This right gives users the possibility to rectify inaccurate personal data concerning them. - Right to erasure pursuant to Article 17 GDPR
This right gives users the possibility to have data deleted. For data to be deleted, it is necessary that the personal data is no longer required, was unlawfully processed or that the consent has been withdrawn. The exemptions specified in Article 35 BDSG apply. - Right to restriction of processing pursuant to Article 18 GDPR
This right gives users the possibility to provisionally prevent further processing of the relevant personal data. This applies, in particular, in a review phase of the user establishing, exercising or defending other legal claims. - Right to data portability pursuant to Article 20 GDPR
This provision gives users the right to obtain relevant personal data in a commonly used, machine-readable format, for example pdf, from the controller in order to pass it on to other controllers where necessary. - Right to object pursuant to Article 21 GDPR
This right provides users with the possibility to object, on grounds relating to their particular situation, to processing relevant personal data where this is justified with a view to performing public tasks or lies in the public or private interest. Pursuant to Article 36 BDSG, this provision does not apply where an official authority is legally obligated to process the data. - Right to withdraw consent pursuant to Article 7 (3) GDPR
Users have the right to withdraw their consent for the future at any time. An option to withdraw consent is available to users on the website where the consent was given before.
Exercising these rights is free of charge and is provided in line with the user’s information rights. For more information, please contact the data protection officer at Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH.
VIII. Right to submit complaints to supervisory authority
In cases where the ZUG processes personal data, users have the right to lodge a complaint with the supervisory authority for data protection. The competent supervisory authority is:
Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit
Graurheindorfer Straße 153
53117 Bonn, Germany
Phone: +49 228 99 7799-0
eMail: poststelle(at)bfdi.bund.de
Internet: www.bfdi.bund.de