§ 1 Information on the processing of personal data
(1) The protection of your personal data is our top priority and is taken into account by us. The following data privacy policy provides an overview of how we process your personal data. Personal data refers to all information relating to an identified or identifiable natural person.
Below, we provide information about the type, scope and purpose of the processing of personal data and how we handle this data. You will also learn about your rights regarding the processing of your personal data.
(2) The controller pursuant to Article 4 (7) of the General Data Protection Regulation (GDPR) is
Wissensstiftung
c/o Deutsche Gesellschaft für nachhaltiges Bauen DGNB e.V. (German Sustainable Building Council)
Tübinger Str. 43
70178 Stuttgart
Germany
T: +49 711722322-0
E: info@wissensstiftung.eu
(see Legals).
You can contact our data protection officer at: datenschutz@wissensstiftung.eu or our postal address with the addition "the data protection officer".
(3) When you contact us by e-mail or via a contact form, the data you provide (such as your e-mail address, name and telephone number) will be stored by us in order to respond to your enquiry. We delete the data collected in this context once storage is no longer necessary, or restrict processing if there are legal retention obligations. The legal basis for the processing of data transmitted in an email is Article 6 (1) point (f) of the GDPR. If the email contact is aimed at concluding a contract, the additional legal basis for the processing of the data is Article 6 (1) point (b) of the GDPR.
(4) For certain technical and organisational processes, we use the services of external service providers who have access to personal data in order to provide these services. These are service providers bound by instructions who are obliged to comply with data protection regulations and may not use the data for any other purpose.
§ 2. Your rights
(1) You have the following rights with regard to your personal data:
• Right to information pursuant to Article 15 GDPR,
• Right to rectification or erasure pursuant to Article 16 and Article 17 GDPR,
• Right to restriction of processing pursuant to Article 18 GDPR,
• Right to object to processing pursuant to Article 21 GDPR,
• Right to data portability pursuant to Article 20 GDPR.
(2) If we process your personal data on the basis of your consent, you can revoke this consent at any time with effect for the future. The revocation of consent initially granted has no effect on the lawfulness of data processing up to the point of revocation.
(3) You also have the right to complain to a data protection supervisory authority about our processing of your personal data.
§ 3 Processing of personal data during a visit to our website
(1) When using the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to browse on our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (the legal basis is Article 6 (1) sentence 1 point (f) of the GDPR):
• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred
• Website from which the request originates
• Browser
• Operating system and its interface
• Language and version of the browser software
The log files are deleted after one month. They are not stored for longer than this. In this case, the IP addresses of the users are deleted or anonymised so that it is no longer possible to identify the client making the request.
(2) The website was created by Webagentur tan3, Stefan Mielke / Oliver Tan, Dorfgang 10, 20535 Hamburg, E-Mail: info@tan3.det, http://www.tan3.de as well as OUP, Blumenstraße 36B, 70182 Stuttgart, Germany, https://ockert-partner.com/ and is continuously maintained by them.
This website is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp.
§ 4 Use of cookies
In addition to the information mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored in the Internet browser or by the Internet browser on the user's computer system.
When a user accesses a website, a cookie may be stored on the user's operating system. Cookies cannot execute programmes or transfer viruses to your computer. They serve to make the Internet offering more user-friendly and effective overall.
Our website uses the following types of cookies, the scope and functionality of which are explained below:
Session cookies
Session cookies are automatically deleted when you close your browser. They store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This allows your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.
Permanent cookies
Permanent cookies are automatically deleted after a specified period, which may
vary depending on the cookie. You can delete cookies at any time in your browser's security settings.
We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit.
§ 5 Further functions and services on our website
(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you must generally provide additional personal data that we use to provide the respective service and to which the aforementioned data processing principles apply.
(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
(3) Furthermore, we may pass on your personal data to third parties if contracts or similar services are offered by us together with partners. You will receive more detailed information on this when you provide your personal data or in the description of the offer below.
(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.
§6 Objection or revocation against the processing of your data
(1) If you have given your consent to the processing of your data, you may revoke it. Such revocation affects the permissibility of the processing of your personal data after you have expressed it to us.
(2) Insofar as we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if the processing is not necessary, in particular, for the performance of a contract with you, which is shown by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.
(3) Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time.
You can inform us of your objection using the following contact details:
Wissensstiftung
c/o Deutsche Gesellschaft für nachhaltiges Bauen DGNB e.V. (German Sustainable Building Council)
Tübinger Str. 43, 70178 Stuttgart
Germany
E-Mail: widerspruch@wissensstiftung.eu
§ 6 Use of our knowledge platform
(1) We operate the Knowledge Hub with the Knowledge Nuggets, through which Wissensstiftung can contribute content in order to provide interested parties with free access to certain topics that they can use as part of their projects or activities. As part of this access, we only collect the data that is otherwise processed when using our website in accordance with the above information.
(2) We conclude an agreement with the Wissensstiftung regarding the submission and publication of content on the Knowledge Hub and its use by the German Sustainable Building Council (DGNB e.V.) and DGNB GmbH. We process the first and last name, company / institution and e-mail address as mandatory information, further information is voluntary. The processing of the mandatory information is necessary for us to publish the content as agreed and to be able to defend ourselves against liability claims in the event of possible publication of unlawful content. We need the contact details in order to get in touch with the Wissensstiftung in the event that a third party objects to content. The legal basis is Art. 6 para. 1 sentence 1 lit. b DSGVO or, in the case of voluntary information, Art. 6 para. 1 sentence 1 lit. a DSGVO.
(3) The personal data processed by us will be stored by us for as long as is necessary for the respective purpose, in particular the publication of your content, taking into account the statutory retention periods (e.g. ten years for tax-relevant documents or six years for other business letters in accordance with the German Commercial Code and Fiscal Code) (Art. 6 para. 1 sentence 1 lit. c DSGVO). Storage beyond the statutory retention periods is possible if you have consented to this in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO or if the purpose of the data processing has not yet ceased to apply.
(4) We pass on the Knowledge donor's personal data to the German Sustainable Building Council (DGNB e.V.) and DGNB GmbH as agreed in the Terms of Use for Knowledge donors; otherwise, data will only be passed on if this is permitted by law or if the Knowledge donor has consented to this. For the revocation of consent, please refer to the information under § 5.
(5) In order to prevent unauthorized access to your personal data by third parties, the connection is encrypted using SSL or equivalent TLS technology.
§ 7 Matomo
This website uses the open-source web analytics service Matomo offered by InnoCraft Ltd. (150 Willis St, 6011 Wellington, New Zealand, NZBN 6106769; representative in the EU: ePrivacy Holding GmbH, Große Bleichen 21, 20354 Hamburg; privacy policy: https://matomo.org/matomo-cloud-privacy-policy/ ).
With the help of Matomo, we can collect and analyse data about how visitors use our website. This allows us to find out, among other things, when page views were made and which region they came from. We also collect various log files (e.g. anonymised IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g. clicks, etc.).
The use of this analysis tool is based on Article 6 (1) point (f) of the GDPR. The website operator has a legitimate interest in analysing user behaviour to optimise both its website and its advertising. If consent has been requested, processing is carried out exclusively based on Article 6 (1) point (a) of the GDPR and § 25 (1) of the TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
IP anonymisation
We use IP anonymisation for analysis with Matomo. This means that your IP address is truncated before analysis so that it can no longer be clearly assigned to you.
Cookie-free analysis
We have configured Matomo to ensure that it does not store any cookies in your browser.
Hosting
The collected information is sent to a Matomo server in Germany (Frankfurt) and stored there. This means that no technical transfer to third countries takes place. Insofar as data is transferred to InnoCraft's headquarters outside the European Economic Area, this is covered by an EU adequacy decision for New Zealand.
Order processing
We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.
Withdrawal of consent:
You can revoke your consent to the storage and evaluation of your data by Matomo at any time via the link below. A so-called opt-out cookie will then be stored on your device, which is valid for two years. As a result, Matomo will not collect any session data. Please note, however, that the opt-out cookie will be deleted if you delete all cookies.
Further information on the privacy settings of the Matomo software can be found at the following link: matomo.org/docs/privacy/.
You have the option to prevent your actions here from being analysed and linked. This will protect your privacy but will also prevent the owner from learning from your actions and improving the usability for you and other users.
§ 8 Newsletter
(1) With your consent, you can subscribe to our newsletter, with which we inform you about our current articles and offers. You can find issues of archived newsletters on our website. The advertised content is named in the declaration of consent.
(2) We use the so-called double opt-in procedure to subscribe to our newsletter. This means that after you have registered, we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
(3) The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a DSGVO.
(4) You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in each newsletter email, via this form on the website, by email to widerspruch@dgnb.de or by sending a message to the contact details provided in the imprint.
§ 9 Information on data processing on our social media company pages
We operate a so-called "company page" on these social media platforms:
LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
YouTube: Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland
Here we provide information about data processing when you visit one of our company websites.
1. General information about company websites, legal basis
As the owner of an online presence on a social media platform, we process personal data when you contact us directly in a personal message or via the public comment function on the platform. The data collected depends on the information you provide and the contact details you specify or share.
This data is processed on the basis of Article 6 (1) sentence (1) point (b) GDPR, insofar as this is necessary to carry out a measure requested by you. In all other cases, processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Article 6 (1) sentence (1) point (f) GDPR).
When you visit a company page, the respective operator of the platform ("provider") collects information that enables them to recognise users and comprehensively analyse user behaviour. The provider of the social media platform can also create user profiles based on the data collected in this way. If you are logged in with your corresponding social media account when visiting a company page, the respective provider can also assign this visit to your account.
The respective provider only provides us with an anonymised statistical evaluation of the use of our company page based on the information obtained. This enables us to make our posts even more targeted in the future. In this respect, we have a legitimate interest in collecting and processing this information. In addition, we have a legitimate interest in using as many communication channels as possible in order to reach as many interested parties as possible personally. The legal basis for the data processing associated with the operation of a company website is Article 6 (1) sentence (1) point (f) GDPR.
We do not pass on any personal data that we collect via our company pages to third parties. However, we cannot influence or exclude the possibility that the aforementioned providers may transfer the collected data to third parties, in particular to their partner companies, which may also be based in other EU countries. In particular, data transfers to the USA are permitted on the basis of an adequacy decision by the EU Commission if the company in the USA is certified under the EU-US Privacy Framework (e.g. Meta Platforms Inc., Google LLC and LinkedIn Corporation).
You can assert your rights as a data subject with regard to data processing by our company websites both against us and against the respective provider. However, we would like to point out that these rights can be most effectively asserted against the respective provider. This is because only the respective provider has access to the user data and can take appropriate measures and provide information directly.
Further information on data processing by the respective provider can be found at:
LinkedIn: linkedin.com/legal/privacy-policy
YouTube: policies.google.com/privacy
2. Agreements pursuant to Article 26 GDPR
Some social media platform providers offer an agreement in accordance with Article 26 GDPR, in which the data protection obligations arising from the operation of our company page are divided between us and the respective provider. The providers have assumed a large part of the data protection obligations, such as fulfilling the rights of data subjects in accordance with Article 12 and following of the GDPR, the obligation to provide suitable technical and organisational measures to protect the security of personal data, and the reporting and notification obligations in the event of a data breach. If you contact us regarding your rights as a data subject, we will forward your request to the respective provider immediately. We are obliged to do so in accordance with the agreement with the respective provider.
Further information on the agreement between us and the respective provider can be found at: