Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data are any data that can be used to identify you personally. For detailed information on data protection, please refer to our Privacy Policy set out below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the section entitled “Information about the Controller” in this Privacy Policy.

How do we collect your data?

Some of your data are collected when you provide them to us. This may, for example, include information you enter in a contact form.

Other data are collected by our IT systems automatically or after you have given your consent when you visit the website. These are primarily technical data, such as your internet browser, operating system or the time at which you access a page. These data are collected automatically as soon as you access this website.

What do we use your data for?

Some data are collected to ensure that the website operates without errors. Other data may be used to analyse your user behaviour. Where contracts can be concluded or initiated through the website, the data you provide are also processed for contractual offers, orders or other order enquiries.

What rights do you have regarding your data?

You have the right at any time to obtain information free of charge about the origin, recipients and purposes of your stored personal data. You also have the right to request the rectification or erasure of these data. If you have consented to data processing, you may withdraw that consent at any time with effect for the future. You also have the right, under certain circumstances, to request restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time about these matters or any other questions concerning data protection.

Analytics Tools and Third-Party Tools

When you visit this website, your browsing behaviour may be evaluated statistically. This is primarily carried out using analytics software.

Detailed information about this analytics software can be found in the following Privacy Policy.

2. Hosting

We host the content of our website with the following provider:

IONOS

The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (hereinafter “IONOS”). When you visit our website, IONOS records various log files, including your IP addresses. For details, please refer to the IONOS Privacy Policy: https://www.ionos.de/terms-gtc/terms-privacy.

The use of IONOS is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring that our website is presented as reliably as possible. Where the relevant consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

Data Processing Agreement

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is an agreement required under data protection law that ensures that the provider processes the personal data of visitors to our website only in accordance with our instructions and in compliance with the GDPR.

3. General Information and Mandatory Disclosures

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection requirements and this Privacy Policy.

Various personal data are collected when you use this website. Personal data are data that can be used to identify you personally. This Privacy Policy explains which data we collect and what we use them for. It also explains how and for what purposes this processing takes place.

Please note that data transmission over the internet, for example when communicating by email, may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information about the Controller

The controller responsible for data processing on this website is:

Christian Bürger
Waldenburger Weg 4
40627 Düsseldorf
Germany

Telephone: +4921154247683
Email: contact@gtd-council.org

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names, email addresses or similar information.

Retention Period

Unless a more specific retention period is stated in this Privacy Policy, we retain your personal data until the purpose for processing them no longer applies. If you make a valid request for erasure or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for retaining your personal data, such as retention periods under tax or commercial law. In the latter case, the data will be deleted once those grounds no longer apply.

General Information about the Legal Bases for Data Processing on This Website

If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or, where special categories of data within the meaning of Article 9(1) GDPR are processed, Article 9(2)(a) GDPR. Where you have expressly consented to the transfer of personal data to third countries, processing is also based on Article 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device, for example through device fingerprinting, processing is additionally based on Section 25(1) TDDDG. Consent may be withdrawn at any time. Where your data are necessary for the performance of a contract or to take steps prior to entering into a contract, we process your data on the basis of Article 6(1)(b) GDPR. We also process your data on the basis of Article 6(1)(c) GDPR where this is necessary to comply with a legal obligation. Data processing may also be based on our legitimate interests under Article 6(1)(f) GDPR. The legal bases applicable in each case are explained in the following sections of this Privacy Policy.

Recipients of Personal Data

In the course of our business activities, we work with various external parties. This sometimes requires the transfer of personal data to those parties. We disclose personal data to external parties only where this is necessary for the performance of a contract, where we are legally required to do so, for example when disclosing data to tax authorities, where we have a legitimate interest in the disclosure under Article 6(1)(f) GDPR, or where another legal basis permits the disclosure. When using processors, we disclose our customers’ personal data only on the basis of a valid data processing agreement. Where processing is carried out jointly, a joint controllership agreement is concluded.

Withdrawal of Your Consent to Data Processing

Many data processing operations are possible only with your express consent. You may withdraw consent you have already given at any time. Withdrawal does not affect the lawfulness of data processing carried out before consent was withdrawn.

Right to Object to Data Collection in Particular Cases and to Direct Marketing (Article 21 GDPR)

WHERE DATA PROCESSING IS BASED ON ARTICLE 6(1)(e) OR (f) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE LEGAL BASIS FOR EACH PROCESSING ACTIVITY IS SET OUT IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).

WHERE YOUR PERSONAL DATA ARE PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ARTICLE 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of the alleged infringement. This right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

Right to Data Portability

You have the right to receive, or have transmitted to a third party, data that we process by automated means on the basis of your consent or in performance of a contract, in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will take place only where technically feasible.

Access, Rectification and Erasure

Within the scope of the applicable statutory provisions, you have the right at any time to obtain information free of charge about your stored personal data, their origin and recipients, and the purpose of processing, and, where applicable, the right to rectification or erasure of these data. You may contact us at any time about these matters or any other questions concerning personal data.

Right to Restriction of Processing

You have the right to request restriction of the processing of your personal data. You may contact us at any time to do so. The right to restriction of processing applies in the following cases:

  • If you contest the accuracy of the personal data we hold about you, we generally need time to verify this. For the duration of that verification, you have the right to request restriction of the processing of your personal data.
  • If the processing of your personal data was or is unlawful, you may request restriction of processing instead of erasure.
  • If we no longer need your personal data but you require them for the exercise, defence or establishment of legal claims, you have the right to request restriction of the processing of your personal data instead of erasure.
  • If you have lodged an objection under Article 21(1) GDPR, your interests must be weighed against ours. Until it has been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.

Where the processing of your personal data has been restricted, these data may, apart from storage, be processed only with your consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL or TLS Encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator. You can recognise an encrypted connection by the change from “http://” to “https://” in the browser’s address bar and the padlock symbol in your browser.

When SSL or TLS encryption is enabled, data you transmit to us cannot be read by third parties.

4. Data Collection on This Website

Cookies

Our website uses “cookies”. Cookies are small data packets and do not cause any harm to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are deleted automatically at the end of your visit. Persistent cookies remain stored on your device until you delete them yourself or your web browser deletes them automatically.

Cookies may originate from us (first-party cookies) or from third-party companies (third-party cookies). Third-party cookies enable certain services provided by third-party companies to be integrated into websites, such as cookies used to process payment services.

Cookies serve various functions. Many cookies are technically necessary because certain website functions would not work without them, such as shopping basket functions or the display of videos. Other cookies may be used to evaluate user behaviour or for advertising purposes.

Cookies that are necessary to carry out electronic communications, provide certain functions you request, such as shopping basket functions, or optimise the website, such as cookies used to measure website audiences (necessary cookies), are stored on the basis of Article 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to provide its services in a technically error-free and optimised manner. Where consent to the storage of cookies and comparable recognition technologies has been requested, processing takes place exclusively on the basis of that consent (Article 6(1)(a) GDPR and Section 25(1) TDDDG); consent may be withdrawn at any time.

You can configure your browser to notify you when cookies are set, to allow cookies only on a case-by-case basis, to reject cookies in certain cases or altogether, and to delete cookies automatically when you close the browser. Disabling cookies may limit the functionality of this website.

Information about any additional cookies and services used on this website can be found in this Privacy Policy.

Server Log Files

The website provider automatically collects and stores information in server log files, which your browser automatically transmits to us. These include:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

These data are not combined with data from other sources.

These data are collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website; recording server log files is necessary for this purpose.

Contact Form

If you send us enquiries using the contact form, we store the information you provide in the enquiry form, including the contact details you enter, to process your enquiry and deal with any follow-up questions. We do not disclose these data without your consent.

These data are processed on the basis of Article 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary to take steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), where this has been requested; consent may be withdrawn at any time.

The data you enter in the contact form remain with us until you request their erasure, withdraw your consent to storage, or the purpose for storing the data no longer applies, for example after we have finished processing your enquiry. Mandatory statutory provisions, in particular retention periods, remain unaffected.

Enquiries by Email, Telephone or Fax

If you contact us by email, telephone or fax, we store and process your enquiry, including any personal data contained in it, such as your name and enquiry details, to deal with your request. We do not disclose these data without your consent.

These data are processed on the basis of Article 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary to take steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), where this has been requested; consent may be withdrawn at any time.

The data you send to us in connection with contact enquiries remain with us until you request their erasure, withdraw your consent to storage, or the purpose for storing the data no longer applies, for example after we have finished dealing with your request. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

5. Analytics Tools and Advertising

IONOS WebAnalytics

This website uses the analytics services of IONOS WebAnalytics (hereinafter “IONOS”). The provider is 1&1 IONOS SE, Elgendorfer Straße 57, D – 56410 Montabaur, Germany. Analytics carried out with IONOS can evaluate, among other things, visitor numbers and behaviour, such as the number of page views, duration of website visits and bounce rates, visitor sources, meaning the page from which a visitor arrives, visitor locations, and technical data such as browser and operating system versions. For this purpose, IONOS stores in particular the following data:

  • Referrer (previously visited website)
  • Requested website or file
  • Browser type and version
  • Operating system used
  • Device type used
  • Time of access
  • IP address in anonymised form (used only to determine the location of access)

According to IONOS, data collection is fully anonymised so that the data cannot be traced back to individual people. IONOS WebAnalytics does not store cookies.

The storage and analysis of these data are based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in statistically analysing user behaviour to optimise both its website and its advertising. Where the relevant consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

Further information about data collection and processing by IONOS WebAnalytics can be found in the IONOS Privacy Policy at the following link: https://www.ionos.de/terms-gtc/datenschutzerklaerung/

Data Processing Agreement

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is an agreement required under data protection law that ensures that the provider processes the personal data of visitors to our website only in accordance with our instructions and in compliance with the GDPR.

WP Statistics

This website uses the WP Statistics analytics tool to evaluate website visits statistically. The provider is Veronalabs, Tatari 64, 10134 Tallinn, Estonia (https://veronalabs.com).

WP Statistics enables us to analyse the use of our website. Among other things, WP Statistics records log data, such as IP addresses, referrers, browsers used, users’ origins and search engines used, as well as actions taken by visitors on the website, such as clicks and views.

The data collected by WP Statistics are stored exclusively on our own server.

The use of this analytics tool is based on Article 6(1)(f) GDPR. We have a legitimate interest in the anonymised analysis of user behaviour to optimise both our website and our advertising. Where the relevant consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

IP Anonymisation

We use WP Statistics with anonymised IP addresses. Your IP address is truncated so that it can no longer be directly associated with you.

6. Newsletter

Newsletter Data

If you wish to receive the newsletter offered on this website, we require your email address and information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. We use these data to send the requested information and do not disclose them to third parties. As part of newsletter campaigns, we may analyse various data, such as the time of opening, IP address, device information, links clicked and, where applicable, subsequent actions.

The data entered in the newsletter subscription form are processed exclusively on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw your consent to the storage of your data and email address and their use for sending the newsletter at any time, for example through the “Unsubscribe” link in the newsletter. Withdrawal does not affect the lawfulness of processing operations already carried out.

The data you provide for the purpose of receiving the newsletter are stored by us or the newsletter service provider until you unsubscribe, and are deleted from the newsletter distribution list after you unsubscribe or once the purpose no longer applies. We reserve the right, at our discretion, to delete or block email addresses in our newsletter distribution list on the basis of our legitimate interests under Article 6(1)(f) GDPR.

Data stored by us for other purposes remain unaffected.

After you unsubscribe from the newsletter distribution list, your email address may be stored by us or the newsletter service provider on a suppression list where this is necessary to prevent future mailings. Data on the suppression list are used only for this purpose and are not combined with other data. This serves both your interest and our interest in complying with the statutory requirements governing the sending of newsletters (legitimate interest within the meaning of Article 6(1)(f) GDPR). Storage on the suppression list is not subject to a time limit. You may object to this storage if your interests override our legitimate interests.

7. Plugins and Tools

Google Fonts

This website uses Google Fonts, provided by Google, to ensure a consistent presentation of fonts. When you access a page, your browser loads the required fonts into its browser cache to display text and fonts correctly.

For this purpose, the browser you use must connect to Google’s servers. This enables Google to learn that this website has been accessed via your IP address. The use of Google Fonts is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the consistent presentation of typography on its website. Where the relevant consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

If your browser does not support Google Fonts, a standard font from your computer will be used.

Further information about Google Fonts can be found at https://developers.google.com/fonts/faq and in Google’s Privacy Policy: https://policies.google.com/privacy?hl=de.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when data are processed in the United States. Each company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is intended to check whether data entered on this website, for example in a contact form, are entered by a human or an automated program. To do so, reCAPTCHA analyses the behaviour of website visitors using various characteristics. This analysis begins automatically as soon as a visitor accesses the website. For the analysis, reCAPTCHA evaluates various information, such as the IP address, the length of time a visitor spends on the website and mouse movements made by the user. The data collected during the analysis are forwarded to Google.

reCAPTCHA analyses run entirely in the background. Website visitors are not notified that an analysis is taking place.

In this context, Google acts solely as a processor within the meaning of Article 28 GDPR and will not use the data collected in this way for its own purposes. The tool is used on the basis of a data processing agreement (DPA) with Google.

The storage and analysis of these data are based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its online services against abusive automated data extraction and spam. Where the relevant consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when data are processed in the United States. Each company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Source: https://www.e-recht24.de