Information on data processing in accordance with the EU General Data Protection Regulation (DSGVO)
With the following information, the Leibniz-Centre for Agricultural Landscape Research (ZALF) e. V. provides you with an overview of the processing of your personal data as an investor, provider, interested party and business partner in accordance with the DSGVO.
1. responsible body / contact person
The responsible person within the meaning of the DSGVO is
Leibniz Centre for Agricultural Landscape Research (ZALF) e. V.
Eberswalder Street 84
Tel.: +49 (0)33432 82 0
If you have any questions about the processing of your personal data by us or about data protection in general, please contact us at the above address or at the following e-mail address:
2. categories of personal data
The categories of personal data processed by ZALF e.V. depend largely on the reason for and the framework of a contact or contractual relationship with you.
A distinction must be made, for example, between interested parties, business partners and project partners (such as investors and suppliers within the AgoraNatura project). In the context of an order for information material, an enquiry, participation in projects or any other contract, ZALF generally processes the following categories of data, depending on the specific relationship. In forms with which personal data is collected, it is indicated which data is mandatory and which data can be provided voluntarily.
- Surname, first name, address, contact details (telephone, e-mail), date of birth, industry/occupation, further data such as interests, if applicable;
- Company name, if applicable, also consisting of surname, first name, address, contact details (telephone, e-mail), sector, contact person in the company with surname, first name, function, contact details (telephone, e-mail);
- Legitimation data (e.g. ID data), authentication data (e.g. specimen signature), tax ID, VAT ID;
- Payment transaction and order data (e.g. bank account/credit card data, payment orders);
- Order history and turnover with business partners;
- Data in the context of the conduct of legal disputes (e.g. on the parties involved, legal representatives, courts);
If there is direct contact with you during an interested party, business or project relationship, further data, such as information about the contact channel, date, occasion and result and copies of the correspondence are processed.
3. data collection not directly from the data subject
To a small extent, ZALF also collects address data of natural persons and companies (e.g. surname, first name, company name, names of contact persons, address, contact details) not directly from the data subject, e.g. for a content-related or promotional approach on the basis of the balance of interests according to Art. 6 (1) f) DSGVO, among others from public directories (e.g. telephone/business directories), from generally accessible sources (e.g. Internet) or from address service providers. You can object to this use in terms of content or advertising at any time with effect for the future using the above contact details (see section I.) (see section VIII.).
4. purposes of data processing and legal basis
ZALF processes your aforementioned personal data and categories of personal data for the fulfilment of the respective contract (e.g. orders subject to a fee, binding participation in AgoraNatura as an investor or provider, invitations, workshops/conferences, other business relationship) or for the implementation of pre-contractual measures (e.g. contact enquiries with regard to contractual measures) with you in accordance with Art. 6 (1) b) DSGVO. For these purposes, your contact details are also used, e.g. in the context of specific information and queries.
ZALF is also subject to various legal requirements (e.g. Money Laundering Act, tax laws) and in this respect also processes your data on the basis of legal requirements pursuant to Art. 6 (1) c) or in the public interest pursuant to Art. 6 (1) e) DSGVO. The purposes of the processing include, among others
- the application and evidence requirements in the context of grants by public bodies;
- the prevention of fraud and money laundering;
- the fulfilment of control and reporting obligations and audit requirements under tax law;
- the fulfilment of official and judicial directives and orders;
- and the assessment and management of risks at ZALF e.V.
If necessary, ZALF processes your data within the framework of the balancing of interests according to Art. 6 (1) f) DSGVO for the protection of legitimate interests of ZALF e.V. or third parties. For example:
- Order free information material and general enquiries;
- Exchange of participation and contact details/experiences between ZALF and participants in workshops, conferences, working groups, etc. and sending of further project-specific information;
- the publication of images on the website, in print products and on social media channels in connection with reporting on ZALF events;
- Measures for corporate management and further development of statutory tasks also in connection with other organisations;
- Exchange of experience with other national and international environmental protection organisations within the framework of global strategies and global environmental protection;
- Transfer of contact data between enquirers and internal and external environmental experts of DUH-GmbH;
- statistical evaluations in relation to the use of the DUH-GmbH newsletter services;
- Assertion of legal claims and defence in legal disputes;
- Ensuring IT security and IT operations of ZALF e.V.;
- Prevention of crime;
- Building and facility security measures (e.g. access controls);
- Use of the guest WLAN;
- Data exchange with credit agencies to determine creditworthiness and default risks of business partners.
Also within the framework of the balancing of interests according to Art. 6 (1) f) DSGVO for the protection of legitimate interests of ZALF e.V., ZALF processes your data, e.g. on the basis of existing contracts or requests for needs-based information oriented to your interests within the framework of the statutory purposes of ZALF e.V. (self-promotion) according to the following specifications:
- postal advertising, provided you have not objected to this processing; you can object to this advertising use at any time with effect for the future by contacting the above-mentioned contact details (see section I.) (see section VIII.);
- Telephone advertising to companies in the event of your presumed consent for this, provided you have not objected to this processing; you can object to this advertising use at any time with effect for the future under the above contact details (see section I.) (see section VIII.);
- Advertising by e-mail, provided that DUH-GmbH has received the e-mail address from the customer in connection with the sale of a product or service and is used for direct advertising for its own similar goods or services; you can object to this advertising use at any time with effect for the future using the above contact details (see clause I.) (see clause VIII.); this will not incur any costs other than the transmission costs according to the basic rates.
ZALF does not transmit your data to third parties for advertising purposes.
Insofar as you have given us consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent in accordance with Art. 6 (1) a) DSGVO. Consent given can be revoked at any time with effect for the future using the above contact details (see point I.).
5. recipients and categories of recipients of the data
Within ZALF e.V., only those offices that need your data to fulfil our contractual and legal obligations will receive access to it. Service providers employed by ZALF may also receive data for these purposes if they are commissioned as processors in accordance with Art. 28 DSGVO.
Possible recipients of personal data are, for example:
- Cooperation partners with whom joint actions and projects are carried out (e.g. within the framework of AgoraNatura, see the project partners named there on the website);
- the payment institution within the meaning of the German Payment Services Supervision Act (Zahlungsdiensteaufsichtsgesetz - ZAG), secupay AG, Goethestraße 6, 01896 Pulsnitz, in the context of the processing of payments via the intermediary platform in the AgoraNatura project between investors and providers,
- national and international environmental protection organisations within the framework of global strategies and global environmental protection;
- public bodies and institutions (e.g. tax authorities, Federal Central Tax Office) in the event of a legal or official obligation;
- Funding/third-party donors, if the action, event or similar is financed by funding/third-party funding;
- Participants in ZALF workshops, conferences, working groups, etc;
- other credit and financial services institutions;
- Processors, e.g. for the support/maintenance of IT applications, archiving, document processing, call centre services, compliance services, controlling, data screening in accordance with legal requirements, printing and dispatch of personalised letters, e-mail dispatch, data destruction, auditing services and payment transactions;
- Credit agencies in the context of a creditworthiness enquiry about companies;
- other data recipients on the basis of consent given by you.
6. transfer of data to a third country or an international organisation
Data is only transferred to countries outside the EU or the EEA (so-called third countries) if this is necessary for the execution of your orders, is required by law (e.g. reporting obligations under tax law), you have given us your consent or within the framework of commissioned data processing. If service providers in third countries are used, which is currently not the case, they are obliged to comply with the level of data protection in Europe by means of appropriate measures (e.g. agreement on the EU standard contractual clauses) in addition to written instructions.
7. duration of the data storage
ZALF e.V. processes and stores your personal data as long as it is necessary for the fulfilment of contractual and legal obligations as well as on the basis of the balance of interests, taking into account the respective category of data. If the data are no longer required for this purpose, they are regularly deleted, unless their - temporary - further processing is necessary, e.g. in a separate archive with restricted access authorisations, for the following purposes:
- Compliance with retention periods under commercial and tax law (e.g. Commercial Code, Fiscal Code and Money Laundering Act with the periods specified therein for retention or documentation for a period of two to ten years, e.g. for business letters, contracts, orders, invoices and donation receipts);
- Preservation of evidence for a period of 30 years pursuant to section 197 BGB, e.g. in the context of legally established claims, claims arising from enforceable settlements or enforceable deeds;
- Preservation of evidence for a period of 3 years in accordance with § 195 of the German Civil Code (BGB) for purposes of proof and any necessary clarification of judicial or extrajudicial claims (e.g. correspondence in the context of processing data subject rights).
8. your other data protection rights
The following further rights are available to you as a data subject in principle and, insofar as contractual and statutory obligations do not conflict with this:
- Right to information (Art. 15 DSGVO) with the restrictions according to §§ 34, 35 BDSG n.F.;
- Right to rectification of inaccurate data (Art. 16 GDPR);
- Right to deletion (Art. 17 DSGVO) with the restrictions according to §§ 34, 35 BDSG n.F.;
- Right to restrict the processing of personal data (Art. 18 GDPR);
- Right to data portability (Art. 20 GDPR);
- Right to lodge a complaint with a data protection supervisory authority (Art. 77 DSGVO);
Rights of objection
There is a right to object on a case-by-case basis (Art. 21 (I) DSGVO) for reasons arising from your particular situation and concerning data processing pursuant to Art. 6 (I) e) and Art. 6 (I) f) DSGVO.
Furthermore, there is a right to object to the processing of data for advertising purposes (Art. 21 (III) DSGVO), the so-called right to object to advertising. You can object to the use of your data for advertising purposes at any time with effect for the future by contacting the above contact details (see point I.).
9. obligation to provide data
In the context of a business relationship (e.g. participation in the AgoraNatura project, other contracts), you must provide those personal data that are necessary for the establishment and implementation of a business relationship and the fulfilment of the associated contractual obligations or which we are legally obliged to collect. Without this data, we will usually have to refuse to conclude the contract or execute the order or will no longer be able to perform an existing contract and may have to terminate it.