1. Datenschutz auf einen Blick

General information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data are all data from which you can be personally identified. You can find full information on data protection from our Privacy Policy set out below this text.

Data collection on our website

Who is responsible for collecting data on this website?
The data on this website is processed by the website operator, whose contact details are given in this website’s legal notice above.

How do we collect your data?
You data are in part collected when you provide us with them. They can be data which you provide in a contact form, for instance. Other data are collected automatically by our IT systems when you visit our website. These are mainly technical data, such as your Internet browser or operating system and the time when you accessed our site. These data are collected automatically as soon as you enter our website.

What do we use your data for?
Some of the data are collected to guarantee error-free provision of the website. Other data may be used to analyse your user behaviour.

What rights do you have in relation to your data?
You have the right to obtain at any time and free of charge information about the source, recipient and purpose of the personal data being stored about you. You also have a right to obtain the rectification, blocking or erasure of these data. You can get in touch with us at any time at the address stated in the legal notice above if you have any questions about this or anything else relating to data privacy. In addition, you have a right to lodge a complaint with the responsible supervisory authority. You also have a right to obtain under certain circumstances the restriction of the processing of your personal data. For details of this, please see our Privacy Policy under ‘Right to restrict processing’.

Analytics tools and tools by third-party providers
When you visit our website, your surfing behaviour can be statistically analysed. This is mainly done using cookies and analytics programs. Analysis of your surfing behaviour is normally anonymous, so that the surfing behaviour cannot be attributed back to you. You may object to this analysis. We will be informing you about your possibilities for objecting in this Privacy Policy.

2. General information and obligatory information

Data protection
The operators of these pages take the protection of your personal data very seriously. We handle your personal data in confidence and in compliance with data protection legislation and this Privacy Policy. Various personal data are collected when you use this website. Personal data are data from which you can be personally identified. This Privacy Policy explains what data we collect and what we use them for. It also explains how and for what purpose this happens. We would point out that data transmission in the Internet (such as email communication) can have gaps in security. It is not possible to protect data completely from access by third parties.

The responsible controller for data processing on this website is:
dbb forum berlin GmbH
Friedrichstrasse 169
10117 Berlin
Telefon 030. 4081-4500
info@dbb-forum.berlin

The responsible controller is the natural person or legal entity who makes decisions, alone or jointly with others, about the purpose and means of processing of personal data (such as names, addresses and the like).

Withdrawing your consent to data processing
Many data processing processes are only possible with your express consent. You may withdraw any consent once given at any time. An informal email notification to us is sufficient for this. The lawfulness of data processing up to the time of your withdrawal of consent will not be affected by your withdrawal of consent.

Right to object to data collection in special cases and to direct marketing (Article 21 of the EU General Data Protection Regulation (GDPR))
If data is processed on the basis of Article 6(1)(e) or (f) of the GDPR, you have the right at any time to lodge an objection to the processing of your personal data for reasons arising from your particular situation. This also applies to any profiling based on these provisions. You can find the relevant basis in law for processing in this Privacy Policy. If you lodge an objection, we will no longer process your relevant personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or if processing is for the purpose of establishing, exercising or defending legal claims (right to object under Article 21(1) of the GDPR).

If your personal data are being processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is connected with such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection under Article 21(2) of the GDPR).

Right to lodge a complaint with the responsible supervisory authority
In the event of breaches of the GDPR, the data subject (you) has a right to lodge a complaint with a supervisory authority, in particular in the Member State where they have their normal residence or place of work or in which the presumed breach took place. The right to lodge a complaint exists without prejudice to any other administrative or judicial legal remedies.

Right to data portability
You have the right to have data which we are processing in automated form or on the basis of your consent or for the performance of a contract handed over to you or to a third party in a commonly-used and machine-readable form. If you request the direct transmission of your data to another controller, this will only happen if it is technically feasible.

SSL or TLS encryption
For security reasons and to protect the transmission of confidential content such as orders or enquiries which you send to us as the operator of the site, this site uses SSL or TLS encryption. You can recognise an encrypted connection from the change in the address line of your browser from “http://” to “https://” and from the lock icon in your browser bar. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, blocking, erasure and rectification
Within the scope of applicable legislation, you have the right at any time to obtain free of charge information about the personal data being stored about you, their source and recipient and the purpose for their processing and, if need be, a right to obtain rectification, blocking or erasure of these data. You can get in touch with us at any time at the address stated in the legal notice above if you have any questions about this or anything else relating to personal data.

Right to restrict processing
You have the right to obtain the restriction of processing of your personal data. You can get in touch with us at any time at the address stated in the legal notice above if you have any questions about this. The right to restrict processing exists in the following cases:

• If you contest the accuracy of your personal data stored by us, we will normally need time to check this. While this check is ongoing, you have the right to obtain restriction of the processing of your personal data.

• If your personal data was / is being processed unlawfully, you may obtain restriction of the processing of your personal data instead of erasure.

• If we no longer need your personal data but you need them for the exercise, defence or establishment of legal claims, you have the right to obtain restriction of the processing of your personal data instead of erasure.

• If you have lodged an objection under Article 21(1) of the GDPR, your interests must be weighed against ours. Until it is determined whose interests prevail, you have the right to obtain restriction of the processing of your personal data.

• If you have restricted the processing of your personal data, these data may only be processed, apart from their storage, with your consent or for the establishment, exercise or defence of legal claims or to protect the rights of another natural person or legal entity or for reasons of important public interest of the European Union or of a Member State.

Objection to marketing emails
Objection is herewith made to any use of the contact data published within the scope of the obligation to provide a legal notice (Impressumspflicht) for sending advertising and information material that has not been expressly requested. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information by spam emails, etc.

3. Data collection on our website

Our use of cookies
Our Internet pages use cookies to some extent. Cookies do not cause any damage to your computer and do not contain viruses. Cookies are used to make our offering more user-friendly, more effective and more secure. Cookies are small text files which are placed on your computer and stored by your browser.Most of the cookies we use are session cookies. They are automatically erased at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognise your browser when you next visit us.You can adjust your browser settings to tell you when cookies are placed and to allow cookies only on a case-by-case basis, to accept cookies in certain cases or to prevent them generally as well as to activate automatic deletion of cookies when you close your browser. If cookies are deactivated, the functionality of this website may be restricted.

Cookies which are necessary for carrying out electronic communication or for providing certain functions desired by you are stored on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (such as cookies for analysing your surfing behaviour) are stored, these are dealt with separately in this Privacy Policy.

Cookies on this website:
Our own cookies are cookies placed by this website and can only be read by this website. These essential cookies are for the basic functioning of the website and cannot be deactivated.  We place the following cookies:

• dbbforumsession: a session cookie placed by our Content Management System. The Content Management System is required for the basic functioning of the website.

• XSRF-TOKEN: a session cookie placed by the website‘s enquiry form to protect your personal data.

External cookies
No external cookies are placed on this website.

Server log files
The provider of the pages automatically collects and stores information in server log files which your browser automatically transmits to us. These are:

• your browser type and browser version

• the operating system you are using

• the referrer URL

• host name of the accessing computer

• time of your server request

• your IP address

These data are not combined with other data sources. These data are collected on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in the technically error-free display and optimisation of its website. This is why the server log files have to be collected.

Contact form
If you send us an enquiry using the contact form, your information from the enquiry form, including the contact data provided by you there, are stored by us for the purpose of processing your enquiry and for the event that there are any follow-up questions. We will not pass these data on without your consent.

These data are processed on the basis of Article 6(1)(b) of the GDPR insofar as your enquiry is in connection with the performance of a contract or for the carrying out of precontractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of enquiries sent to us (Article 6(1)(f) of the GDPR or on your consent (Article 6(1)(a) of the GDPR if we have asked you for it. The data you input in the contact form remain with us until you request us to erase them or withdraw your consent or until the purpose for which they were stored no longer exists (such as when the processing of your enquiry has been completed). This does not affect mandatory legal provisions such as in particular statutory periods of safe-keeping.

Enquiry by email, telephone or fax
If you contact us by email, telephone or fax, your enquiry including all the personal data derived from it (name and enquiry) will be stored and processed by us for the purpose of processing your enquiry. We will not transmit these data to third parties without your consent.These data are processed on the basis of Article 6(1)(b) of the GDPR insofar as your enquiry is in connection with the performance of a contract or is necessary for carrying out precontractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of enquiries sent to us (Article 6(1)(f) of the GDPR or on your consent (Article 6(1)(a) of the GDPR if we have asked you for it. The data you transmit to us in the contact form remain with us until you request us to erase them or withdraw your consent to their storage or until the purpose for which they were stored no longer exists (such as when the processing of your enquiry has been completed). This does not affect mandatory legal provisions such as in particular statutory periods of safe-keeping.

ProvenExpert
We have integrated rating seals from ProvenExpert on this website. They are offered by Expert Systems AG, Quedlinburger Str. 1, 10589 Berlin, https://www.provenexpert.com. The ProvenExpert seal enables us to display customer ratings made with ProvenExpert in relation to our company in a seal on our website. When you visit our website, a connection is opened to ProvenExpert so that ProvenExpert can tell that you have visited our website. ProvenExpert also records your language settings in order to display the seal in the selected country’s language. ProvenExpert is used on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in displaying customer ratings in as clear and transparent way as possible. If you have been asked to give your consent to this, processing is exclusively done on the basis of Article 6(1)(a) of the GDPR and section 25(1) of the Telecommunications and Telemedia Data Protection Act (TTDSG) insofar as consent covers the storage of cookies or access to information on the user’s end device (such as Device Fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

4. Analytical tools

Matomo
This website uses the Open Source web analytics service Matomo. Matomo uses technologies which enable the cross-site recognition of users to analyse user behaviour (for instance Device Fingerprinting). The information collected by Matomo on use of our website is stored on our server. The IP address is anonymised before being stored. Using Matomo enables us to collect and analyse data on the use of our website by website visitors. This lets us find out, for instance, when which site requests have been made and which regions they have been sent from. We also collect various log files (such as IP address, referrer and the browser and operating system being used) and are able to determine whether our website visitors carry out certain actions (clicks, purchases and the like). This analytic tool is used on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in the anonymised analysis of user behaviour so as to optimise both its web offering and its advertising. If you have been asked to give your consent to this, processing is exclusively done on the basis of Article 6(1)(a) of the GDPR and section 25(1) of the Telecommunications and Telemedia Data Protection Act (TTDSG) insofar as consent covers the storage of cookies or access to information in the user’s end device (such as Device Fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

IP anonymisation
We use IP anonymisation for analysis with Matomo. This means that your IP address is abbreviated before being analysed so that it can no longer be unambiguously attributed to you.

Hosting
We host Matomo exclusively on our own servers, which means that all analysed data remain with us and are not transmitted to third parties.

Tracking without cookies
We do not place any tracking cookies for our analysis using Matomo.

5. Newsletter

Newsletter data
If you would like to subscribe to our newsletter offered on our website, we need from you your email address and information that permits us to check that you are the owner of that email address and consent to receiving the newsletter. Other data are not collected or are only collected on a voluntary basis. We use the newsletter service provider described below for processing the newsletter.

CleverReach
This website uses CleverReach for the dispatch of newsletters. The provider is CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany (hereinafter: CleverReach). CleverReach is a service that enables newsletter dispatch to be organised and analysed. The data provided by you for the purpose of newsletter subscription (such as your email address) are stored on the servers of CleverReach in Germany and/or Ireland.

Our newsletters sent with CleverReach enable us to analyse the behaviour of newsletter recipients. This includes, for instance, analysing how many recipients have opened the newsletter message and how often which link in the newsletter is clicked on. Using Conversion Tracking, we can also analyse whether a predefined action (such as buying a product on this website) has been carried out after the link in the newsletter has been clicked on. You can find out more about data analysis with CleverReach newsletters at: https://www.cleverreach.com/en-de/funktionen/reporting-und-tracking/.

Your personal data are processed on the basis of your consent (Article 6(1)(a) of the GDPR. You may withdraw this consent at any time by unsubscribing the newsletter. The lawfulness of data processing carried out before you withdraw your consent is not affected by your withdrawal of consent.

If you do not want CleverReach analysis, then you must unsubscribe the newsletter. We provide a link for this purpose in every newsletter message.

The data placed with us for the purpose of your newsletter subscription are stored by us and/or the newsletter service provider until you unsubscribe the newsletter and after you have unsubscribed the newsletter they are erased from the newsletter distribution list. Data which we have stored for other purposes are not affected by this.

If necessary to prevent future mailings, your email address may be stored in a blacklist by us and/or the newsletter service provider after you have been unsubscribed from the newsletter distribution list. The data in the blacklist will be used solely for this purpose and will not be combined with other data. This both in your interests and in ours in complying with legal requirements for the sending of newsletters (legitimate interest within the meaning of Article 6(1)(f) of the GDPR). There is no time limitation on storage in the blacklist. You may object to this storage if your interests override our legitimate interest.

For more details please refer to the CleverReach Privacy Policy at:
https://www.cleverreach.com/en-de/datenschutz/.

Order processing
We have signed an order processing contract with the above provider. This is a contract required under data protection legislation to guarantee that the provider only processes the personal data of our website visitors on our instructions and in compliance with the GDPR.