The protection of your data at eco – Association of the Internet Industry
We, the eco – Association of the Internet Industry, Lichtstrasse 43h, 50825 Cologne (hereinafter referred to as “eco”), take the protection of your personal data very seriously, and we strictly comply with the regulations of the data protection statutes. The following declaration provides you with an overview as to how we ensure this protection. In particular, we would like to explain to you – as a visitor to our website, a subscriber to our newsletter, as a guest at one of our numerous events, or as an applicant to eco – which types of data we gather, why we collect these types of data, how we use this data, and how you at any and all times can determine how your personal data is treated.
According to the General Data Protection Regulation (GDPR) you have various rights which you can assert in relation to us. This includes, among others, the right to withdraw consent to the processing of data, in particular data processing for the purposes of marketing. The possibility to withdraw consent is typographically highlighted.
II. Name and contact details of the person responsible for processing and the data protection officer
Our data protection officer, Mr. Jan Stumpf, can be contacted via the email address firstname.lastname@example.org, by post to: eco – Association of the Internet Industry, Mr. Jan Stumpf, Lichtstrasse 43h, 50825 Cologne, with the keyword “Data Protection,” or by fax at the number +49 (221) 70 00 48-111.
III. Purpose of data processing, legal basis, and legitimate interests that are pursued by eco or a third party, and categories of recipients
- Surfing on this website
eco gathers and automatically stores log file information in its server, which your browser deposited with us while you were surfing.
In brief, here is the key data that we store:
- Type of browser/browser version
- The operating system used
- Referrer URL (the page visited previously)
- URLs / pages on this website that have been accessed
- IP address of the accessing computer along with its name
- Time of the server request
- Visitor history
Furthermore, we record the complete Uniform Resource Locator (URL) Clickstream through and from our website, i.e. the sequence of the pages of our website that you visit, including date and time, cookie or flash cookie number, and the content that you viewed or for which you searched.
The legal basis for the processing of the IP address is Article 6, Para 1f) of the GDPR. Our legitimate interest results from the following list of purposes of the data processing. Please note on this point that it is not possible for us to draw any direct conclusions about your identity on the basis of the data collected, nor do we attempt to draw such conclusions.
The IP address of your device and the remaining data listed above is used by us for the following purposes:
- Ensuring a seamless establishment of the connection
- Ensuring the comfortable use of our website
- Assessing the system security and stability
The data is saved for a period of 7 days, after which it is automatically deleted or anonymized. Further, we make use of so-called cookies, tracking tools and social media plug-ins for our website. Exactly what process is undertaken and how your data is used for these is clarified in Section III below.
- Contact Form and Email Contact
On our website, you have the option of getting in contact with us via a contact form or via email. The information you impart via the contact form is usually:
– First name
The personal data imparted to us will be used exclusively for the purpose of processing your enquiry and will be deleted after processing your query. The legal basis for this is your consent within the meaning of Art. 6 No. 1) a GDPR, as well as Art. 6 No. 1) f GDPR. The proper processing of your enquiry is to be regarded as a legitimate interest within the meaning of the GDPR. You can withdraw your consent to the processing of the personal data imparted to us at any time with effect for the future, using the contact information provided under II. From the moment of withdrawal, it will no longer be possible to process your enquiry.
- Whitepaper Download
On our website, you have the opportunity to download whitepapers. This service is free of charge. Within the whitepaper download, we ask you to provide the following personal data as mandatory information:
- email address
We require this data in order to be able to send you the selected whitepaper / study. We can also use your data to contact you individually from time to time for promotional purposes. The legal basis for this is Article 6, Para 1 a) of the GDPR.
Your thus declared consent can be withdrawn at any time with effect for the future by using the contact details provided under Section II.
- Online Presence on Social Media
In addition to this website, we also maintain an online presence on the social media channels Facebook, Twitter, Xing, Linked-in, Youtube, and Flickr. You can access these by clicking on the corresponding menu items on our website.
We would like to point out that your use of these pages and their functions lies within your own responsibility. This applies in particular to the use of interactive functions (e.g., commenting, sharing, rating).
When visiting such a page, personal data may be transferred to the provider of the social media channel. The social media provider collects and processes your IP address, the type of processor and browser version used, including plug-ins and, where applicable, other information.
The data collected about you in this context will be processed by the provider of the social media channel and in some instances may be transferred to countries outside of the European Union.
If you are logged in with your personal user account of the respective channel during your visit to such a website, this channel can assign the visit to your account.
If you wish to avoid this, you should log out of the social media channel before visiting our online presence or deactivate the “remain logged in” function, delete the cookies present on your device, and exit and restart your browser. In this way, information which could be used to directly identify you is deleted.
As the operator of the respective online presence, we do not collect or process any further data from your use of the corresponding social media channel.
- Online presence and website optimization
Insofar as these cookies are those that are necessary to ensure the proper functioning of our website, the use of these takes place on the basis of Article 6 Para 1a) of the GDPR. Our interest in optimizing our website is thereby to be seen as legitimate in the sense of the aforementioned regulation. In all other cases, we ask you for your consent (pursuant to Article 6 Para 1a) of the GDPR), which allows us to set further cookies (analysis cookies, marketing cookies). No cookies are set (except required/essential cookies) without giving consent. Further information can be found in our “Individual Cookie Settings”.
You can change or withdraw your consent at any time in the “Individual Cookie Settings” or via the button “Change Cookie Settings” on our website.
Most browsers automatically accept cookies. You can, however, configure your browser so that no cookies are stored on your computer, or so that a warning always appears before a new cookie is created. However, the complete deactivation of cookies can result in your not being able to use all functions on our website. The storage duration of the cookies is dependent on their purpose and is not the same for all.
5.2. Matomo (formerly Piwik)
You can dissent to the storage and analysis of your data by Matomo at any time by amending or withdrawing your “individual cookie settings”.
5.3. Website Tracking
We use tracking tools on our website to measure, analyze, and optimize the effectiveness of our promotional activities. Through the use of promotional pixels or tracking tags, we receive information about how visitors have arrived on our website and what content they view (conversion tracking). This information helps us to analyze our website (web analytics), to improve it, and to display content customized to various target groups and interests (retargeting). In doing so, it is not possible for us to draw any direct conclusions about your identity. The legal basis for this data processing is your consent in accordance with Article 6 Para 1a) of the GDPR. You can learn about the exact tools which we use under 5.3.1 – 5.3.3.
You can amend or withdraw your consent at any time in the “individual cookie settings” or via the “Change cookie settings” button on our website.
5.3.1 Facebook Pixel
5.3.2 LinkedIn Insight Tag
Our website uses “Insight Tag”, a product of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”). By installing the “Insight Tag”, a direct connection to the LinkedIn server is established. LinkedIn processes this data and can link it to your user profile.
5.3.3 Twitter Website Tag
- Joint controllers pursuant to Article 26 Para. 2 (2) of the GDPR
In order to spare resources and use them more effectively, eco e.V. and the deutsche medienakademie GmbH (German Media Academy), as a 100 percent subsidiary of eco e.V., use a joint database to manage their address databases.
As part of their joint data protection responsibility, eco and dma have agreed which of them fulfils which obligations under the GDPR. To this end, eco and dma have each assigned the individual data files to a company responsible for processing the personal data. This applies in particular to the observation of the rights of the data subjects and the fulfilment of the information obligations pursuant to Articles 13 and 14 of the GDPR.
You can assert your data protection rights centrally at: email@example.com, or alternatively at: firstname.lastname@example.org.
IV. Your rights
Alongside the right to withdraw the consent given to us, you also have the following rights, when the respective legal conditions are extant:
- Right of information regarding your personal data stored by us in accordance with Article 15 of the GDPR; in particular, you can obtain information about the purpose of processing, the category of personal data, the category of recipient for whom your data is or has been made available, the planned period of retention, the origin of your data, insofar as it was not collected directly from you,
- Right of rectification of erroneous or to completion of correct data in accordance with Article 16 of the GDPR,
- Right to deletion of your data stored by us in accordance with Article 17 of the GDPR, insofar as there are no legal or contractual requirements to retain the data, or other legal obligations or rights to the continued retention of the data,
- Right to limit the processing of your data in accordance with Article 18 of the GDPR, insofar as you dispute the correctness of the data, the processing is illegal, but you oppose the deletion of said data; the data controller no longer requires the data, but you require said data for the assertion, exercise or defense of legal claims, or you have filed an objection to the processing in accordance with Article 21 of the GDPR,
- Right to data portability in accordance with Article 20 of the GDPR, i.e. the right to receive selected data about you stored by us in a standard, machine-readable format, or to have this transmitted to another data controller,
- Right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your normal place of residence or work, or of our association headquarters to do this.
- Right to object
Under the conditions of Article 21, Para 1 of the GDPR, the data processing can be objected to on grounds arising out of the special situation of the data subject.
V. Forwarding to third parties
The data collected by us are not sold. We provide information that we obtain to third parties exclusively to the extent described in the following:
- Affiliated companies
- Service providers
- Protection of eco and third parties
We disclose personal data when we are legally obliged to do so, or when such disclosure is necessary to protect our rights and those of third parties.
- Recipients outside of the EU
With the exception of the processing described in section III.5., we do not forward your data to recipients with headquarters outside of the European Union or the European Economic Area. The processing outlined in section III.5. causes a data transfer to the servers of the newsletter sender commissioned by us. These servers are located in Switzerland. The data transfer takes place on an adequacy decision of the EU for Switzerland.
VI. Further information and notes