privacy statement

Privacy Statement

Verband für Nachhaltigkeits- und Umweltmanagement e. V. (VNU) -
Association of European Sustainability and Eco-Management Professionals

as of 28th June,2018

1. Responsible for the data processing

Verband für Nachhaltigkeits- und Umweltmanagement (VNU) e.V.
registered with the Association Register Frankfurt / Main VR 12002

Contact
VNU office
c/o Christina Geiger
Am Hangelstein 8
65812 Bad Soden

Phone: +49 (0) 700 – 868 11 – 223
Fax: +49 (0) 700 – 868 11 – 224
Homepage: www.vnu-ev.de
E-Mail: datenschutz@vnu-ev.de

2. Legal basis of the data processing

VNU processes your data in compliance with the regulations of the EU General Data Protection Act (EU GDPR) and the German Federal Data Protection Law (BDSG).

3. Purpose of data processing

Data are processed in particular to achieve the statutory purposes within the framework of membership in the association as well as the organisation of events and work meetings (Art. 6 para 1 b DSGVO). We also process your personal data which we obtain permissibly from publicly accessible sources (e.g. trade and association register, EMAS register, internet).

Specifically, we process the following personal data:

  • Membership Master Data
    (e.g. name, company/organisation, address, contacts, amount of fee, entry/cancellation/changes of membership, access to the intranet)
  • Order data
    (e.g. registration for events or work meetings, receipt of newsletter)
  • Documentation data
    (e.g. memos, correspondence)

In the context of our events, we ask you upon registration if your contact data may be passed on to the other participants of the event. We will only share your contact data if we receive your consent to do so on the registration form. In this case, your consent will only cover the respective event and the participants in this event, respectively.

We will not pass on your contact data or other personal data to third parties without your explicit written consent.

4. Legitimated interest in the provision of data and in data processing

We will further process your data if the processing is based on art. 6 para. 1 f) DSGVO, i.e. serves the protection of legitimate interests of ourselves and of third parties.

This is done, inter alia, for the following purposes:

  • Steering of the association in general
  • Assertion of legal claims and representation in legal disputes
  • Ensuring IT security in the association
  • Prevention and investigation of criminal offences

The processing of your data is automated in part and is aimed at evaluate certain personal aspects (profiling). As an example, we use profiling in the following cases:

  • Targeted provision of information that is of interest for you and / or on VNU events.

Your personal data will not be passed on to third parties unless you have given your consent in advance or there is a legal basis for doing so. A legal obligation may exist in particular for the following recipients:

  • Public entities, supervisory authorities and bodies, e.g. tax authorities
  • judicial and law enforcement authorities, e.g. police, public prosecutions, courts
  • Lawyers and notaries, e.g. in insolvency proceedings
  • Chartered accountants

5. Contracted data processing

VNU e.V. may use various service providers (contracted processor according to article 28 GDPR) for the support of the association’s activities.

These contracted processors are obligated by us according to the requirements of the DSGVO and their compliance is monitored. These may be companies in the areas of services, printing services, sales and marketing, inter alia. Order processors may only use personal data according to our instructions and for specific purposes.

6. Data transfer to third countries

We do not transfer data to countries outside of Europe.

7. Required data for the membership in the association and the participation in events and meetings of the association, respectively

You will have to provide the personal data that are required for the entry into/membership in our association as well as for the organisation of VNU events or meetings of the association or to whose collection we are obliged by law.

Without these data, we are not able to accept you as a member of the association, to allow your attendance in events or meetings and to and to comply with all obligations thereunder.

8. Duration of data storage

The data will be stored until the termination of the membership in VNU, at least, yet until the payment of membership fees that may be overdue at the latest as well as in compliance with statutory storage terms.

Shall the data no longer be necessary for the compliance with contractual or legal obligations, they will at least be marked accordingly and blocked.

9. Rights to information, change, deletion of personal data

According to art.15 GDPR you are entitled to request information on your personal data that are processed by us. Should your data not be correct (anymore) you may request a rectification (art. 16 GDPR). Should your data be incomplete, you may request a completion. Should your data have been passed on to third parties by us, we will inform these third parties of the rectification – to the extent it is legally required.

According to art. 17 GDP you may request the deletion of your personal data, if

  • Your personal data are no longer needed for the purposes they were collected from
  • You withdraw your consent and there is no other legal basis for it
  • You revoke the processing and there are no overriding, legitimate reasons for processing
  • Your personal data have been processed wrongfully
  • Your personal data have to be deleted to fulfil legal requirements

Please note that legal obligations of the responsible person may result in your data not or only after the end of a term be deleted for good. Furthermore, you have the right to restriction of processing according to art. 18 GDPR, the right to object according to art. 21 GDP as well as the right to data portability according to art. 20 GDP.

For the right on information and the right to deletion the constraints according to § 34 and 35 Federal Data Protection Act apply. Further, there is a right to lodge a complaint with a relevant data protection supervisory authority (art. 77 GDPR).

10. Homepage

Essentially, you may visit our homepage without us learning who you are. In general, a responsible handling of your data, in compliance with the legal requirements in Germany, in particular with the Federal Data Protection Act,, the EU General Data Protection Regulation (EU-GDPR) and the Telemedia Act, is a particular concern to us and thus important.

Bear in mind, that the data transfer in the internet can basically carry safety gaps. A full protection against external access cannot be realised. This data protection information applies to the internet presence VNU provides. Should you reach our internet offer via links of other providers, our data protection information does and shall not apply to those.

10.1 Access data

The website operator and the provider Strato, respectively, collects data on accesses to the website and saves them as „server logfiles“. The following data are logged:

  • Visited website
  • Time at which website was accessed
  • Volume of data sent in bytes
  • Source/Reference, from which you got to the site
  • Browser used
  • Operating system used
  • IP address used

The collected data serve statistical evaluations and the enhancement of the website. The website operator reserves the right to retrospectively check the server log files if there are concrete indications of a wrongful use
10.2 Intranet

The homepage of the VNU is divided into a general public area (accessible to everyone) and an internal area accessible by registered members only.

Every VNU member may receive a personal access code for this internal area (intranet) at the beginning of his membership. After termination of membership this personal access code expires.

For your access to the VNU intranet, we store personal data such as first name, surname, address, place of residence, date of birth and email address. This allows us to carry out the registration.

In principle, other users of the internal area cannot use this personal data.

This does not apply, however, for such data that you provide to us as a member in order to present yourself in the internal and/or public part of the homepage, respectively, or that you pass on to us for publication in association with presentations or articles

10.3 Cookies

This website does not use cookies, does not use the „Google Analytics“ service and does not use social media plugins.

11. Newsletter

Independent of the VNU homepage, you may receive the VNU Newsletter if you have agreed to it at the beginning of your membership or later, e.g. upon registration for an event, and have provided a valid email address.

A termination of the subscription to the newsletter is possible at any time by a simple notification to the VNU Office and is offered in the closing clause of the Newsletter.

12. Ihre Rechte bzgl. Auskunft, Berichtigung, Löschung

You have the right to obtain information on your stored personal data. In addition, you have the right to rectification of incorrect data, blocking and deletion.

No cost incurs for you for the assertion of these rights.

In all matters related to data protection please contact the persons listed in section 1.