Information on data processing in accordance with the EU General Data Protection Regulation (DSGVO)
With the following information, AgoraNatura, Verein i.G. provides you with an overview of the processing of your personal data as an investor, provider, interested party and business partner in accordance with the GDPR.
1. responsible body / contact person
The responsible person within the meaning of the DSGVO is
AgoraNatura, registered association
at NABU
Charitéstraße 3
10117 Berlin
E-mail: info@agora-natura.de
Phone: +49 (0) 30 2849841133
If you have any questions about the processing of your personal data by us or about data protection in general, please contact us at the above address or at info@agora-natura.de
2. categories of personal data
Which categories of personal data are processed by AgoraNatura depends largely on the reason for and the context in which a contact or contractual relationship with you arises or exists.
A distinction must be made, for example, between interested parties, business partners and project partners (such as investors and providers on the online marketplace). As part of an order for information material, an enquiry, participation in projects or any other contract, AgoraNatura generally processes the following categories of data depending on the specific relationship. Forms used to collect personal data are labelled to indicate which data is mandatory and which data can be provided voluntarily.
- Surname, first name, address, contact details (telephone, e-mail), date of birth, industry/occupation, further data such as interests, if applicable;
- Company name, if applicable, also consisting of surname, first name, address, contact details (telephone, e-mail), sector, contact person in the company with surname, first name, function, contact details (telephone, e-mail);
- Legitimation data (e.g. ID data), authentication data (e.g. specimen signature), tax ID, VAT ID;
- Payment transaction and order data (e.g. bank account/credit card data, payment orders);
- Order history and turnover with business partners;
- Data in the context of the conduct of legal disputes (e.g. on the parties involved, legal representatives, courts);
If there is direct contact with you during an interested party, business or project relationship, further data, such as information about the contact channel, date, occasion and result and copies of the correspondence are processed.
3. data collection not directly from the data subject
To a small extent, AgoraNatura also collects address data of natural persons and companies (e.g. surname, first name, company name, names of contact persons, address, contact details) not directly from the data subject, e.g. for a content-related or advertising approach on the basis of the balancing of interests pursuant to Art. 6 (1) f) GDPR, e.g. from public directories (e.g. telephone/industry directories), from generally accessible sources (e.g. Internet) or from address service providers. You can object to this use in terms of content or advertising at any time with effect for the future using the above-mentioned contact details (see Section I.) (see Section VIII.).
4. purposes of data processing and legal basis
AgoraNatura processes your aforementioned personal data and categories of personal data to fulfil the respective contract (e.g. chargeable orders, binding participation in AgoraNatura as an investor or provider, invitations, other business relationships) or to carry out pre-contractual measures (e.g. contact enquiries with regard to contractual measures) with you in accordance with Art. 6 (1) b) GDPR. Your contact details are also used for these purposes, e.g. in the context of specific information and queries.
Access to the AgoraNatura website is stored in a log file with the following data:
- Date and time of retrieval
- Enquiry details and destination address
- Name of the retrieved file and amount of data transferred
- Message whether the call was successful
- Information about the browser type and version used
- The user's operating system
- The user's internet service provider
- Websites from which the user's system accesses our website (referrer)
- Websites that are accessed by the user's system via our website
AgoraNatura does not transmit your data to third parties for advertising purposes.
Insofar as you have given us consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent in accordance with Art. 6 (1) a) DSGVO. Consent given can be revoked at any time with effect for the future using the above contact details (see point I.).
5. recipients and categories of recipients of the data
Within AgoraNatura, only those departments that need your data to fulfil our contractual and legal obligations will have access to it. Service providers used by AgoraNatura may also receive data for these purposes if they are commissioned as processors in accordance with Art. 28 GDPR.
Possible recipients of personal data are, for example:
- Cooperation partners with whom joint actions and projects are carried out (e.g. within the framework of AgoraNatura, see the project partners named there on the website);
- the payment institution within the meaning of the German Payment Services Supervision Act (Zahlungsdiensteaufsichtsgesetz - ZAG), secupay AG, Goethestraße 6, 01896 Pulsnitz, in the context of the processing of payments via the intermediary platform in the AgoraNatura project between investors and providers,
- national and international environmental protection organisations within the framework of global strategies and global environmental protection;
- public bodies and institutions (e.g. tax authorities, Federal Central Tax Office) in the event of a legal or official obligation;
- Funding/third-party donors, if the action, event or similar is financed by funding/third-party funding;
- other credit and financial services institutions;
- Processors, e.g. for the support/maintenance of IT applications, archiving, document processing, call centre services, compliance services, controlling, data screening in accordance with legal requirements, printing and dispatch of personalised letters, e-mail dispatch, data destruction, auditing services and payment transactions;
- Credit agencies in the context of a creditworthiness enquiry about companies;
- other data recipients on the basis of consent given by you.
6. transfer of data to a third country or an international organisation
Data is only transferred to countries outside the EU or the EEA (so-called third countries) if this is necessary for the execution of your orders, is required by law (e.g. reporting obligations under tax law), you have given us your consent or within the framework of commissioned data processing. If service providers in third countries are used, which is currently not the case, they are obliged to comply with the level of data protection in Europe by means of appropriate measures (e.g. agreement on the EU standard contractual clauses) in addition to written instructions.
7. duration of the data storage
AgoraNatura processes and stores your personal data as long as it is necessary for the fulfilment of contractual and legal obligations and on the basis of the balancing of interests, taking into account the respective data category. If the data is no longer required for this purpose, it is regularly deleted, unless its - temporary - further processing is necessary, e.g. in a separate archive with restricted access authorisations, for the following purposes:
- Compliance with retention periods under commercial and tax law (e.g. Commercial Code, Fiscal Code and Money Laundering Act with the periods specified therein for retention or documentation for a period of two to ten years, e.g. for business letters, contracts, orders, invoices and donation receipts);
- Preservation of evidence for a period of 30 years pursuant to section 197 BGB, e.g. in the context of legally established claims, claims arising from enforceable settlements or enforceable deeds;
- Preservation of evidence for a period of 3 years in accordance with § 195 of the German Civil Code (BGB) for purposes of proof and any necessary clarification of judicial or extrajudicial claims (e.g. correspondence in the context of processing data subject rights).
8. your other data protection rights
The following further rights are available to you as a data subject in principle and, insofar as contractual and statutory obligations do not conflict with this:
- Right to information (Art. 15 DSGVO) with the restrictions according to §§ 34, 35 BDSG n.F.;
- Right to rectification of inaccurate data (Art. 16 GDPR);
- Right to deletion (Art. 17 DSGVO) with the restrictions according to §§ 34, 35 BDSG n.F.;
- Right to restrict the processing of personal data (Art. 18 GDPR);
- Right to data portability (Art. 20 GDPR);
- Right to lodge a complaint with a data protection supervisory authority (Art. 77 DSGVO);
Rights of objection
There is a right to object on a case-by-case basis (Art. 21 (I) DSGVO) for reasons arising from your particular situation and concerning data processing pursuant to Art. 6 (I) e) and Art. 6 (I) f) DSGVO.
Furthermore, there is a right to object to the processing of data for advertising purposes (Art. 21 (III) DSGVO), the so-called right to object to advertising. You can object to the use of your data for advertising purposes at any time with effect for the future by contacting the above contact details (see point I.).
9. obligation to provide data
As part of a business relationship, you must provide the personal data that is required for the establishment and execution of a business relationship and the fulfilment of the associated contractual obligations or that we are legally obliged to collect. Without this data, we will generally have to refuse to conclude the contract or execute the order or will no longer be able to fulfil an existing contract and may have to terminate it.