Information on data processing in accordance with the EU General Data Protection Regulation (DSGVO)
With the following information, Leibniz-Centre for Agricultural Landscape Research (ZALF) e. V., provides you with an overview of the processing of your personal data as an investor, project supplier, interested party and business partner in accordance with the DSGVO.
1. Responsible party / Contact person
The responsible party within the meaning of the DSGVO is
Leibniz-Centre for Agricultural Landscape Research (ZALF) e. V.
Eberswalder Straße 84
Phone: +49 (0)33432 82 0
For questions about the processing of your personal data by us or about data protection in general, please contact the above address or the following e-mail address:
2. Categories of personal data
The categories of personal data processed by ZALF e.V. depend largely on the reason for and the context in which a contact or a contractual relationship with you arises or exists.
A distinction must be made, for example, between interested parties, business partners and project partners (such as investors and suppliers within the AgoraNatura project). In the context of an order for information material, an enquiry, participation in projects or any other contract, ZALF generally processes the following categories of data depending on the specific relationship. In forms with which personal data is collected, it is indicated in each case which data is mandatory for this purpose and which data can be provided voluntarily.
- Name, first name, address, contact data (telephone, e-mail), date of birth, industry/occupation, further data such as interests, if applicable;
- Company name, if applicable also consisting of surname, first name, address, contact data (telephone, e-mail), industry, contact person in the company with surname, first name, function, contact data (telephone, e-mail);
- Legitimation data (e.g. ID data), authentication data (e.g. specimen signature), tax ID, VAT ID;
- Payment transaction and order data (e.g. bank account/credit card data, payment orders);
- Order history and turnover with business partners;
- Data in connection with the conduct of legal disputes (e.g. on the parties involved, legal representatives, courts);
If there is direct contact with you during an interested party, business or project relationship, further data will be processed, such as information on the contact channel, date, occasion and result and copies of the correspondence.
3. Data collection not directly from the data subject
To a small extent, ZALF also collects address data of natural persons and companies (e.g. surname, first name, company name, names of contact persons, address, contact data) not directly from the data subject, e.g. for a content-related or advertising approach on the basis of the balance of interests according to Art. 6 (1) f) DSGVO, among other things from public directories (e.g. telephone/industry directories), from generally accessible sources (e.g. Internet) or from address service providers. You can object to this use in terms of content or advertising at any time with effect for the future by contacting the above-mentioned contact details (see section I.) (see section VIII.).
4. Purposes of data processing and legal basis
ZALF processes your aforementioned personal data and categories of personal data for the fulfilment of the respective contract (e.g. orders subject to a fee, binding participation in AgoraNatura as an investor or provider, invitations, workshops/conferences, other business relationship) or for the implementation of pre-contractual measures (e.g. contact enquiries with regard to contractual measures) with you in accordance with Art. 6 (1) b) DSGVO. For these purposes, your contact details are also used, e.g. in the context of specific information and queries.
ZALF is also subject to various legal requirements (e.g. Money Laundering Act, tax laws) and in this respect also processes your data on the basis of legal requirements pursuant to Art. 6 (1) c) or in the public interest pursuant to Art. 6 (1) e) DSGVO. The purposes of the processing include
- the application and verification obligations in the context of grants by public bodies;
- the prevention of fraud and money laundering;
- the fulfilment of control and reporting obligations and audit requirements under tax law;
- the fulfilment of official and judicial directives and orders;
- as well as the assessment and management of risks at ZALF e.V..
Where necessary, ZALF processes your data within the framework of the balancing of interests according to Art. 6 (1) f) DSGVO for the protection of legitimate interests of ZALF e.V. or third parties. For example:
- Ordering free information material and general enquiries;
- exchange of participation and contact details/experiences between ZALF and participants in workshops, conferences, working groups etc. as well as the sending of further project-specific information;
- the publication of images on the website, in print products and on social media channels in connection with reporting on ZALF events;
- Measures for corporate management and further development of statutory tasks, also in connection with other organisations;
- Exchange of experience with other national and international environmental protection organisations in the context of global strategies and global environmental protection;
- transfer of contact data between inquirers and internal and external environmental experts of DUH-GmbH;
- statistical evaluations in relation to the use of DUH-GmbH’s newsletter services;
- Assertion of legal claims and defence in legal disputes;
- Ensuring IT security and IT operations of ZALF;
- Prevention of criminal offences;
- Building and facility security measures (e.g. access controls);
- Use of the guest WLAN;
- Data exchange with credit agencies to determine creditworthiness and default risks of business partners
Also within the framework of the balancing of interests according to Art. 6 (1) f) DSGVO for the protection of legitimate interests of ZALF, ZALF e.V. processes your data, e.g. on the basis of existing contracts or enquiries for needs-based information oriented to your interests within the framework of the statutory purposes of ZALF e.V. (self-promotion) according to the following specifications:
- Postal advertising, provided you have not objected to this processing; you can object to this advertising use at any time with effect for the future using the above contact details (see section I.) (see section VIII.);
- Advertising by telephone to companies in the event of your presumed consent for this, provided you have not objected to this processing; you can object to this advertising use at any time with effect for the future under the above contact details (see point I.) (see point VIII.);
- Advertising by e-mail, if DUH-GmbH has received the e-mail address from the customer in connection with the sale of goods or services and is used for direct advertising for its own similar goods or services; you can object to this advertising use at any time with effect for the future using the above contact details (see point I.) (see point VIII.); this does not incur any costs other than the transmission costs according to the basic rates.
ZALF will not pass on your data to third parties for advertising purposes.
Insofar as you have given us consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent in accordance with Art. 6 (1) a) DSGVO. Consent given can be revoked at any time with effect for the future using the above contact details (see point I.).
5. Recipients and categories of recipients of the data
Within ZALF e.V., only those offices will receive access to your data that need it to fulfil our contractual and legal obligations. Service providers used by ZALF may also receive data for these purposes if they are commissioned as processors in accordance with Art. 28 DSGVO.
Possible recipients of personal data are, for example:
Cooperation partners with whom joint actions and projects are carried out (e.g. within the framework of AgoraNatura, see the project partners named there on the website);
- the payment institution within the meaning of the German Payment Services Supervision Act (Zahlungsdiensteaufsichtsgesetz, ZAG), secupay AG, Goethestraße 6, 01896 Pulsnitz, in the context of the processing of payments via the intermediary platform in the AgoraNatura project between investors and providers,
- national and international environmental protection organisations in the context of global strategies and global environmental protection;
- public bodies and institutions (e.g. tax authorities, Federal Central Tax Office) in the event of a legal or official obligation;
- funding/third-party funding bodies, if the action, event or similar is financed by funding/third-party funding;
- participants in workshops, conferences, working groups, etc. of ZALF;
- other credit and financial service institutions;
- order processors, e.g. for the support/maintenance of EDP/IT applications, archiving, document processing, call centre services, compliance services, controlling, data screening in accordance with legal requirements, printing and dispatch of personalised letters, e-mail dispatch, data destruction, auditing services and payment transactions;
- credit agencies in the context of a creditworthiness enquiry about companies;
- other data recipients on the basis of consent given by you.
6. Transfer of data to a third country or an international organisation
Data is only transferred to countries outside the EU or the EEA (so-called third countries) if this is necessary for the execution of your orders, is required by law (e.g. reporting obligations under tax law), you have given us your consent or within the framework of commissioned data processing. If service providers in third countries are used, which is currently not the case, they are obliged to comply with the level of data protection in Europe by means of appropriate measures (e.g. agreement on the EU standard contractual clauses) in addition to written instructions.
7. Duration of data storage
The ZALF e.V. processes and stores your personal data as long as it is necessary for the fulfilment of contractual and legal obligations as well as on the basis of the balance of interests, taking into account the respective category of data. If the data is no longer required for this purpose, it is regularly deleted, unless its – temporary – further processing is necessary, e.g. in a separate archive with restricted access authorisations, for the following purposes:
- Fulfilment of retention periods under commercial and tax law (e.g. Commercial Code, Fiscal Code and Money Laundering Act with the periods specified therein for retention or documentation for a period of two to ten years, e.g. for business letters, contracts, orders, invoices and donation receipts);
- Preservation of evidence for a period of 30 years in accordance with section 197 of the German Civil Code (BGB), e.g. in the context of legally established claims, claims arising from enforceable settlements or enforceable deeds;
- Preservation of evidence for a period of 3 years in accordance with § 195 BGB for purposes of proof and any necessary clarification of judicial or extra-judicial claims (e.g. correspondence in the context of the processing of data subject rights).
8. Your further data protection rights
The following further rights are available to you as a data subject in
principle and, insofar as contractual and legal obligations do not conflict
- Right to information (Art. 15 DSGVO) with the restrictions according to
§§ 34, 35 BDSG n.F.;
- Right to rectification of inaccurate data (Art. 16 DSGVO);
- Right to deletion (Art. 17 DSGVO) with the restrictions according to §§
34, 35 BDSG n.F.;
- Right to restriction of the processing of personal data (Art. 18 DSGVO);
- Right to data portability (Art. 20 DSGVO);
- Right to lodge a complaint with a data protection supervisory authority (Art. 77 DSGVO);
Right of objection
There is a right to object on a case-by-case basis (Art. 21 (I) DSGVO) for reasons arising from your particular situation and concerning data processing pursuant to Art. 6 (I) e) and Art. 6 (I) f) DSGVO.
Furthermore, you have the right to object to the processing of data for advertising purposes (Art. 21 (III) DSGVO), the so-called right to object to advertising. You can object to the use of your data for advertising purposes at any time with effect for the future by contacting the above-mentioned contact details (see point I.).
9. Obligation to provide data
In the context of a business relationship (e.g. participation in the AgoraNatura project, other contracts), you must provide the personal data that is required for the establishment and implementation of a business relationship and the fulfilment of the associated contractual obligations or which we are legally obliged to collect. Without this data, we will usually have to refuse the conclusion of the contract or the execution of the order or will no longer be able to perform an existing contract and may have to terminate it.