Privacy Policy

Data privacy

Data privacy statement

Data processing

In all respects of data processing (e.g., data collection, processing and transfer) we act in accordance with the respective legal regulations. The following explanations give you an overview about the fact what kind of data is claimed for what purpose and in which way it is transferred to third parties, what safety measures we install to protect your data and what your rights in this connection are.


Responsibility for the processing of personal data

Responsible for the processing of data within the meaning of data protection legislation is:

Fachverband Biogas e. V.
Angerbrunnenstraße 12
85356 Freising, Germany
Tel.: +49 (0) 8161 / 9846-60
Fax: +49 (0) 8161 / 9846-70
e-mail: info(at)biogas.org

If you have questions about the protection of your data, please send a mail to info(at)biogas.org or contact the responsible data protection officer.


Data protection officer

The data protection officer of the entity responsible for the processing of data is:

Ms Marion Liedmann
Fachverband Biogas e. V.
Angerbrunnenstraße 12
85356 Freising, Germany
Tel.: +49 (0) 8161 / 9846-60
e-mail: info(at)biogas.org

III. General aspects of data processing


Scope of processing personal data

Generally, we process personal data of our users only to the extent to which this is required for providing a fully functioning website and of our contents and services. Personal data of our users is processed regularly only with the users’ prior consent. An exception is a case in which prior consent cannot be obtained for valid reasons and the processing of data is permitted by applicable statutory provisions.


Legal basis of processing personal data

To the extent we obtain the consent of our users for processing their personal data, this is done on the basis of Article 6 clause 1 lit. a of the European General Data Protection Regulation (GDPR) as legal basis. Where processing of personal data is necessary for the performance of a contract to which the data subject is party, Article 6 clause 1 lit. b GDPR is referred to. This also includes steps at the request of the data subject prior to entering into a contract. Where processing of personal data is necessary for compliance with a legal obligation to which we are subject, Article 6 clause 1 lit. c GDPR is invoked. Where processing personal data is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of the personal data, Article 6 clause 1 lit. f of the GDPR is invoked.


Deletion and storage period of data

The personal data of the data subject will be deleted or blocked as soon as the purpose for which the data is stored ceases to exist. Personal data may also be stored if such storage is provided in European or national regulations, laws or other provisions to which the controller is subject. Data will be blocked or deleted also in cases where a period of storage prescribed by the afore-mentioned norms elapses, except where it is necessary to continue storing the data for the purposes of concluding or performing a contract.


Provision of the website and generation of log files

Description and extent of data processing


Whenever a user accesses our website, our system automatically collects data and information of the computer system of the computer from which the website is accessed.
The following data is collected:

  • IP address
  • Time and date of access
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the call (the page called)
  • Access status/http status code
  • Data volume transferred
  • Website from which the access is made
  • Browser
  • Operating system and the system surface
  • Language and version of the browser software.

The data is also stored in the log files of our system. Data will not be stored together with the user’s personal data.


Legal basis of data processing

The legal basis of the temporary storage of data and log files is Article 6 clause 1 lit. f of the GDPR.


Purpose of data processing

The temporary storage of the IP address by the system is necessary so that the website can be delivered to the computer of the user. For that purpose, the user’s IP address must remain stored for the duration of the session.
Storage in log files ensures the functionality of the website. Besides the data is used for optimizing our website and for ensuring the safety of our information technology systems. Data will neither be analyzed nor used for marketing purposes in this connection.
These purposes also describe our legitimate interest in data processing according to Article 6 clause 1 lit. f of the GDPR.


Period of storage

Data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of data collected for the purpose of providing our website this occurs when the respective session ends.
Data collected in this connection is deleted when storage is no longer necessary or the processing is restricted if specific periods of storage are prescribed by law. The IP addresses of the users are alienated to make an assignment of the calling client impossible.


Possibility of objection and disposal

The collection of the data for provision of the website and the storage of the data in log files are absolutely required for the operation of the internet site. The user has no possibility to object to either.


Use of cookies

Description and extent of data processing

Our website uses cookies. Cookies are text files stored in the internet browser or by the internet browser in the user’s computer system. When the user accesses a website, a cookie can be stored in the operating system of the user. The cookie contains a typical sequence of characters by which the browser can be identified uniquely when the same website is visited the next time.
We use cookies in order to make our website more user-friendly. Some elements of our website require that the calling browser can also be identified after a change to another site takes place.
This website uses the following types of cookies, which will be explained below as to scope and function:

  • Transient cookies (see a.)
  • Persistent cookies (see b.).

    Transient cookies are deleted automatically when the browser is closed. This includes particularly the session cookies. These cookies store what is called a session ID which can assign different requests of your browser to a common session. In this way, your computer can be identified when you return to our website. Session cookies are deleted when you log out or close the browser.
    Persistent cookies are deleted automatically after a predefined duration, which can differ according to the cookie type. You can delete the cookies at any time in the safety settings of your browser.

Legal basis of data processing

The legal basis of the processing of personal data using cookies is Article 6 clause 1 lit. f of the GDPR.


Purpose of data processing

The purpose of using cookies that are necessary technically is to make websites easier to use. Some functions of our website cannot be made available without cookies. For that, the browser must be identifiable after a site change.
We need cookies for the following applications:

  • Language settings
  • Cookie to leave the notice disabled after the first confirmation until the next session

Cookies of this type will be deleted after every session.
User data acquired by technically required cookies will not be used for generating a user profile.
These purposes also describe our legitimate interest in processing personal data according to Article 6 clause 1 lit. f of GDPR.


Storage duration, possibility of objection and disposal

Cookies are stored in the user’s computer and transferred to our system from there. This leaves the user in full control of the ways in which cookies are used. You can disable or restrict the transfer of cookies in the safety settings of your browser. Cookies already stored can be deleted at any time. This can be done automatically. When cookies for our website are disabled, the full use of all functions of our website may not be available. The transfer of flash cookies cannot be prevented in the browser settings but by changing the settings of the flash player.


Registration for the event

Description ad extent of data processing

Users can register their participation in the event by completing a registration form on our website. When a user registers, the following data from the entry form will be transferred to us:

  • Title / address (optional)
  • Given name
  • Surname
  • Company / institute
  • Department (optional)
  • Street
  • ZIP / city or town
  • Country
  • V.A.T. ID (optional)
  • Telephone number
  • e-mail address
  • Invoice address (if different) (optional)
  • Comments (optional)
  • Membership number (optional)
  • Ticket code (optional)

In addition, the following data is gathered at the time of registration:

  • IP address of the calling computer
  • Time and data of registration

When you register, we will ask you if you agree to the processing of your data; reference is made to this data protection statement.
For processing your data in connection with the event, data is transferred to CongressCheck GmbH, Bultstraße 7-9, 30159 Hannover, Germany, the participant manager for and on behalf of the Fachverband Biogas e. V. Data is only transferred in encrypted state. Under a data processing contract, Congresscheck is expressly obliged to use the data according to the GDPR. Data is used exclusively for handling our event. A contractor who works for us for the above purpose receives only information required for performing the contracted duties.


Legal basis of data processing

The legal basis of the processing the data after registration of the user for our event is Article 6 clause 1 lit. a of the GDPR.

 

Purpose of data processing

Data is acquired to ensure that the registered user can attend the event and the interactions necessary in connection with our events can be performed.


Duration of storage

Data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. We are obliged under trade and tax laws to store your address and payment data for ten years.
Any other personal information related to the registration will, as a rule, be deleted after two years.

VII. E-mail contact


Description and extent of data processing

Contact with us can be made at the e-mail addresses provided. In that case, the user’s personal data transferred with the e-mail will be stored. The data will not be transferred to any third party. Data will exclusively be used for processing the communication.


Legal basis of data processing

The legal basis of the processing the data transferred in connection with an e-mail is Article 6 clause 1 lit. f of the GDPR.


Purpose of data processing

The only purpose of processing personal data from the entry form is to process the contact. In the event of contact by e-mail, that fact explains the necessary justified interest in processing the data.


Duration of storage

Data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For personal data transferred by e-mail, this is the case when the conversation with the user ends. The conversation ends when the situation suggests that the related facts have finally been cleared.


Possibility of objection and disposal

The user can withdraw his consent to the processing of personal data at any time. If a user makes contact with us by e-mail, he can object to the storage of personal data at any time. In such a case, the conversation cannot be continued. The user can withdraw his consent by sending an e-mail, e.g., to info@biogas.org.

VIII. Disclosure of data for contract performance

Personal data will be disclosed or transferred in any other way to a third party only if the disclosure or other transfer is necessary for the performance of the contract (shipment of the goods, billing or the collection of money) or you have expressly consented to it. The contractors providing these services for us will receive only information necessary to perform their respective duties. No other use of the information is permitted.

Contracted performance providers and accordingly the potential addressees of the data are:

  • Service providers of the participant management
  • Payment and invoicing systems



Rights of the data subject

You are data subject as defined in the GDPR if personal data concerning you is processed and you have the following rights in relation to the party responsible for the processing:


Right to receive information

You can require the controller to confirm whether personal data concerning you is processed by us.
If that is the case, you can require the following information from the controller:

  • The purposes for which personal data is processed;
  • The categories of personal data processed;
  • The recipients or categories of recipients to whom personal data concerning you has been or is proposed to be disclosed;
  • The intended duration of storage of personal data concerning you or, if detailed information about that is not possible, the criteria for fixing the duration of storage;
  • Your right to correction or deletion of personal data concerning you, the right to restrict the extent of processing by the controller or the right to object to the processing of your data;
  • Your right to lodge a complaint with a supervisory authority;
  • All available information regarding the origin of personal data concerning you which has not been acquired with the data subject;
  • The availability of automatic decision-making, including profiling according to Article 22 clauses 1 and 4 of the GDPR and – at least in these cases – meaningful information about the involved logic as well as the extent and intended effects of such processing for the data subject.

You have a right to be informed whether personal data concerning you is transferred to another country or to an international organization. In this connection, you can demand to be informed about the suitable guarantees according to Article 46 of the GDPR in connection with the transfer.


Right to correction

You have the right to the correction and/or completion by the controller if personal data concerning you is incorrect or incomplete. The controller is obliged to make the correction without delay.


Right to restrict processing

Given the following conditions, you can demand that the processing of personal data concerning you is restricted:

  • If you contest the correctness of personal data concerning you for a duration in which the controller can check the correctness of personal data concerning you;
  • If the processing is illegal and you refuse that personal data concerning you is deleted and instead demand that the processing of such data is restricted;
  • If the controller does no longer need personal data concerning you for the purposes of processing but you need the data to establish, exercise or defend a legal claim, or
  • If you have not objected to the processing according to Article 21 clause 1 of the GDPR and it is not certain whether the justified reasons of the controller override your reasons.

When the processing of personal data concerning you has been restricted, the data – except for storage – may only be processed with your consent or for establishing, exercising or defending a legal claim or for safeguarding the rights of a natural or legal person or for reasons of an important public interest of the Union or a member state.
Where the processing is restricted on any of the above conditions, you will be informed by the controller before the restriction is lifted.


Right to deletion

  1. a) Obligation to delete

You can require the controller that personal data concerning you is deleted without delay and the controller is obliged to delete the data without delay unless one of the following reasons applies:

  • Personal data concerning you is no longer necessary in relation to the purpose for which it was collected or otherwise processed;
  • You withdraw your consent on which the processing is based according to Article 6 clause. 1 lit. a or Article 9 clause 2 lit. a of the GDPR and where there is no other legal basis for the processing;
  • You object to processing according to Article 21 clause 1 of the GDPR and there are no overriding legitimate rights for processing, or you object to the processing according to Article 21 clause 2 of the GDPR;
  • Personal data concerning you has been processed unlawfully;
  • Personal data concerning you has to be deleted for compliance with a legal obligation in Union or member state law to which the controller is subject;
  • Personal data concerning you has been collected in relation to the offer of information society services referred to in Article 8 clause 1 of the GDPR.

  1. b) Information of a third party

Where the controller has made personal data concerning you public and is obliged pursuant to Article 17 clause 1 of the GDPR to delete personal data concerning you, the controller, taking account of the available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing personal data concerning you that you as data subject have requested the deletion by such controllers of any links to, or copy or replication of personal data concerning you.


  1. c) Exceptions

The right to deletion does not apply to the extent that processing is necessary

  • For exercising the right of freedom of expression and information;
  • For compliance with a legal obligation which requires processing by the Union or by member state law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • For reasons of public interest in the area of public health in accordance with Article 9 clause 2 lit. h and i as well as Article 9 clause 3 of the GDPR;
  • For archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 clause 1 of the GDPR in as far as the right referred to in paragraph a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
  • For the establishment, exercise or defense of a legal claim.



Right to being informed

Where you have established your right to correction, deletion or restriction of the processing, the controller shall communicate any rectification or deletion of personal data concerning you or restriction of processing to each recipient to whom personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort.
The controller is obliged to inform you about those recipients if you request it.


Right to data portability

You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

  • The processing is based on consent pursuant to Article 6 clause 1 lit. a of the GDPR or Article 9 clause 2 lit. a of the GDPR or on a contract pursuant to Article 6 clause 1 lit. b of the GDPR and
  • The processing is carried out by automated means.

In exercising that right to data portability, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible. The right referred to above must not adversely affect the rights and freedoms of others.

The exercise of the right to data portability does not apply to processing personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.


Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 clause 1, lit. e or f of the GDPR, including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate reasons for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims. Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, the personal data will no longer be processed for such purposes. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.


Right to withdraw the data processing consent

You can withdraw your consent to the processing of the personal data concerning you at any time. Your withdrawal of the consent has no effect on the lawfulness of the processing until the time of withdrawal of the consent.


Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

  • Is necessary for entering into, or performance of, a contract between you and the data controller,
  • Is authorized by Union or member state law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or
  • Is based on your explicit consent.

However, these decisions shall not be based on special categories of personal data referred to in Article 9 clause 1 of the GDPR, unless Article 9 clause 2 lit. a or g applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place. In the cases referred to in points (1) and (3), the data controller is obliged to implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.


Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement if the you consider that the processing of personal data relating to you infringes this GDPR. 

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.