Data Privacy Policy

Page

§ 1 Information about the processing of personal data.

1) The protection of your personal data is a high priority for us and is taken into account by us. The following data privacy policy provides you with an overview of how we process your personal data. Personal data means any information relating to an identified or identifiable natural person.

In the following, we will inform you about the type, scope and purpose of the processing of personal data and how we handle this data. In addition, you will learn what rights you have with regard to the processing of your personal data.

(2) The responsible party pursuant to Art. 4 (7) of the General Data Protection Regulation (DSGVO) is.

DGNB GmbH
represented by Johannes Kreißig and Markus Kelzenberg
Tübinger Str. 43
70178 Stuttgart
E: gmbh@dgnb.de 

T: +49 711722322-0

You can reach our data protection officer at

E: datenschutz@dgnb.de 

or our postal address with the addition "the data protection officer".

(3) When you contact us by e-mail or via a contact form, the data you provide (such as your e-mail address, name and telephone number) will be stored by us in order to answer your questions. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations. The legal basis for the processing of data transmitted in the course of an e-mail is Art. 6 (1) lit. f DSGVO. If the e-mail contact is aimed at concluding a contract, the additional legal basis for processing the data is Art. 6 (1) lit. b DSGVO.

(4) For certain technical and organisational processes, we use the services of external service providers who have access to personal data in order to provide these services. These are service providers bound by instructions who are obliged to comply with data protection regulations and may not use the data for any other purpose.

 

§ 2 Your rights

(1) With regard to the personal data concerning you, you have the following rights towards us:

  • Right to information according to Art. 15 DSGVO,
  • Right to correction or deletion according to Art. 16 and Art. 17 DSGVO,
  • Right to restriction of processing according to Art. 18 DSGVO,
  • Right to object to processing according to Art. 21 DSGVO,
  • Right to data portability according to Art. 20 DSGVO.

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

 

§ 3 Processing of personal data when visiting our website

(1) In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f DSGVO):

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of the browser software

The log files are deleted after one month. Storage beyond this period does not take place. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

(2) The website was created by the web agency Mosaiq and is continuously maintained by them.

This website is hosted by gridscale GmbH, Oskar-Jäger-Str. 173 in 50825 Cologne, Germany.

 

§ 4 Use of cookies

  1. Cookies for the Provision of the Website

When you visit our website, cookies – small text files – may be stored on your device. Storing cookies on your device is strictly necessary for the provision of our website (Section 25(2)(2) of the TDDDG).

You can find out which cookies these are, what functions they serve, how long they are stored for, and whether third parties have access to the data collected by the respective cookie by referring to the information in our Consent Management Tool (‘CMT’), which you can access at any time via the cookie button on the left-hand side of the website.

  1. Consent Management Tool

We have integrated a Consent Management Tool (“CMT”) to obtain and provide Documentation of your consent to data processing by various services. The provider of the CMT “CCM19” is Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn.

When you open our website, you can use the CMT to give your consent to specific data processing activities by ticking the relevant boxes; this consent is then stored by the CMT. To this end, the CMT displays a list of cookies organised by functional groups, explains the purpose of the cookie functional groups and the individual cookies, and details their storage periods. Please note that the technically essential cookies are stored as soon as you access the website, and the relevant box is pre-ticked.

To this end, the CMT stores a cookie – a small text file – on your device. You can find out which cookie this is, what function it serves, how long it is stored for, and who has access to the data collected by referring to the information in our CMT, which you can access at any time via the cookie button on the left-hand side of the website.

This allows us to track, when you revisit the website, which data processing activities carried out by which services you have consented to or not consented to. This means you do not have to reconfigure your consent settings for individual data processing operations every time you visit. The storage of the listed cookies on your device is absolutely necessary for this purpose (Section 25(2)(2) of the TDDDG).

You can change or withdraw your consent at any time by clicking on the cookie button on the left-hand side of the website and deselecting or changing your selection of the relevant cookie categories. An additional way to control the use of cookies is through the relevant settings in your browser. Please note that if you deselect cookies, you may not be able to use all the functions of this website.

 

§ 5 Use of Matomo

The Matomo service is integrated into our website. This is open-source software that we have integrated ourselves. Data processing by the service only takes place once you have given your consent via the Consent Management Tool (‘CMT’). You can withdraw your consent at any time via the CMT.

The service collects the following information about your device and your visit to our website: the IP address of your device (which is anonymised immediately after collection), the date and time of your first, last and current access to our website, the total number of visits to our website, your site and the language settings of your device. In addition, the service assigns a user ID to your device.

To do this, the service stores cookies – small text files – on your device.

You can find out which cookies these are, what functions they serve, how long they are stored for, and whether third parties have access to the data collected by the respective cookie in our CMT, which you can access at any time via https://dgnb.de/de#CCM.openWidget. 

The legal basis for the service’s access to stored information and for the storage of information on your device is your consent (Section 25(1), first sentence, of the TDDDG).

Pseudonymous usage schemes are created and analysed on the basis of the data collected. These pseudonymous usage schemes relate solely to our website. There is no cross-service or cross-website tracking. Nor is there any personal identification of individual visitors. The legal basis for the creation of pseudonymous schemes is your consent (Article 6(1), first sentence, point (a) of the GDPR).

Further information on data processing by the service is available at:

  • matomo.org/gdpr-analytics
  • matomo.org/faq/general/faq_18254

§ 6 Objection or revocation against the processing of your data

(1) If you have given your consent to the processing of your data, you may revoke it. Such revocation affects the permissibility of the processing of your personal data after you have expressed it to us.

(2) Insofar as we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if the processing is not necessary, in particular, for the performance of a contract with you, which is shown by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

(3) Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time.

You can inform us of your objection using the following contact details:

DGNB GmbH

Tübinger Str. 43, 70178 Stuttgart, Germany

E-mail: widerspruch@dgnb.de 

 

§ 7 Use of the comment function

In myDGNB you can make public comments. Your comment will be published with your specified username with the post. If you post a comment, we will continue to store your IP address, which we will delete after one week. The storage is necessary for us to be able to defend ourselves against liability claims in cases of possible publication of illegal content. We need your e-mail address to contact you if a third party objects to your comment as unlawful.

Legal bases are Art. 6 para. 1 p. 1 lit. a and lit. f DSGVO. The comments are not checked before publication. We reserve the right to delete comments if they are objected to by third parties as unlawful.

 

§ 8 Use of our online platform

If you wish to use our , you must register by entering your e-mail address, a password of your choice and your user name. We use the so-called double opt-in procedure for the registration, i.e. your registration is only completed when you have filled out the membership application as the first step and this has been accepted by the responsible person or you have signed the DGNB Auditor / DGNB Consultant Licensing Agreement. Then the log-in data for the internal area will be stored in the system accordingly for members or DGNB auditors/DGNB consultants. As a member or DGNB auditor/DGNB consultant, you will then receive a link by e-mail. You can log in with the data contained therein.

(2) If you use our portal, we store your data required for the fulfillment of the contract, including information on the method of payment, until you finally delete your access. Furthermore, we store the voluntary data you provide for the duration of your use of the portal, unless you delete it beforehand. You can manage and change all information in the protected member or DGNB auditor/DGNB consultant area. The legal basis is Art. 6 para. 1 p. 1 lit. b DSGVO.

(3) To prevent unauthorized access to your personal data by third parties, the connection is encrypted using SSL or equivalent TLS technology.