Privacy and Cookie Policy
I. Who is responsible and how can I contact the Data Protection Representative?
The data controller within the meaning of the GDPR (General Data Protection Regulation) is the
NABU (Nature and Biodiversity Conservation Union Germany) e.V.
Charitéstraße 3
10117 Berlin
Germany
Tel. +49 (0) 30-28 49 84-0
Fax +49 (0) 30-28 49 84-20 00
NABU@NABU.de
Register court: Amtsgericht Stuttgart | Register number: VR 2303
VAT identification-No.: DE 155765809
President: Jörg-Andreas Krüger, Managing Director: Leif Miller
If you have any questions about the processing of your personal data by us or about data protection in general, please contact our data protection representative at the following e-mail address: Datenschutz@NABU.de.
The easiest way to exercise your rights of objection is to contact Widerspruch@NABU.de. If you would like to have a secure transmission, please contact us by post. For all other data protection concerns, especially confidential ones, you can contact our external data protection officer, Dr. Stefan Drewes, directly via the e-mail address DSB@NABU.de.
II. Your rights as person concerned
Each affected person has the following rights:
- Right of access by the data subject (Art. 15 GDPR),
- Right of rectification (Art. 16 GDPR),
- Right of erasure, or better, a „right to be forgotten“ (Art. 17 GDPR),
- Right to restriction of processing (Art. 18 GDPR),
- Right for data portability (Art. 20 GDPR).
In addition, the person concerned also has a general right to object (cf. Art. 21 (1) GDPR). In this case, the objection against data processing must be substantiated. If the data processing is based on consent, your consent can be revoked at any time with effect for the future.
The easiest way to exercise the rights of a person concerned is to contact Widerspruch@NABU.de. In addition, you have the right to lodge a complaint with the data protection supervisory authority responsible for you.
III. Processing of personal data by NABU
In the following we would like to give you an overview of how we ensure the protection of your personal data when you access our website. Furthermore, we would like to explain which types of personal data we process as Controller, for which purposes and to what extent.If data processing takes place beyond the website (e.g. in the context of events after registration via the online form), we refer to our „Privacy Policy according to the General Data Protection Regulation (GDPR) for members, donors, sponsors, interested parties and business partners”. Information on data processing by third parties, e.g. by integrating services, can be found further down in section IV. Our cookie policy can be found below in section V.
1. Processing of personal data when accessing our website – Logfiles
When you access our website, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider and similar information. In addition, the IP address is transmitted and used to provide the service you requested. This information is technically necessary in order to correctly deliver the contents of websites requested by you and is mandatory when using the Internet.
This log file data is anonymized or deleted by us immediately after the end of the usage process. The legal basis for data processing is Art. 6 Para. 1 lit. f) GDPR.
According to our IT security concept, the log file data is stored for a period of two weeks in order to detect and analyse any attacks against our website. The legal basis for data processing is Art. 6 Para. 1 lit. f) GDPR].
2. Processing of personal data when accessing our website – Your inquiries and use of online forms
If you send us an inquiry by e-mail or via the contact form, we will collect the data you provide for handling and answering your request. We store this information for a period of three to eleven years due to statutory retention periods for verification purposes. The legal basis for data processing is Art. 6 Para. 1 lit. b) in the case of pre-contractual/contractual relations and/or otherwise f) GDPR.
3. Integration of Campaignion
On the website, the service Campaignion of more onion (more onion e-campaigning GmbH Hütteldorfer Straße 253/yurp, A-1140 Vienna) is used to create and manage online petitions with e-mail or voice messages. If you use this service, your data will be processed to fulfil the purpose of the petition according to art. 6 para. 1 lit. a) GDPR. If you subscribe to a newsletter, your data will also be processed in accordance with Art. 6 para. 1 lit. a) GDPR. The use of your address data and, if applicable, your interests for postal, advertising purposes is in accordance with Art. 6 Para. 1 lit. f) GDPR. When participating in petitions, it is possible to agree to receive newsletters and further information. In case of a petition of NABU, see further information in “Subscription to an e-mail newsletter”. In case of a petition of a partner organisation of NABU, please see their privacy policy. If it is a petition of NABU, this agreement includes the invitation to further petitions. In order to prevent the resending of e-mail reminders concerning participation in petitions on the basis of the consent in which the e-mail recipients* have already participated, these participations are marked accordingly in accordance with Art. 6 para. 1 f) GDPR. You can object to this marking for the future towards the Controller of the petition by sending a message to the contact details given in the imprint or the privacy policy.
For more information about Campaignion's privacy policy, please visit https://www.campaignion.org/privacy-policy.
4. Subscription to an e-mail newsletter
We use the so-called double-opt-in procedure to subscribe to our newsletters. This means that after entering your e-mail address, we will send you a confirmation e-mail to the e-mail address provided, asking you to confirm that you wish to receive the newsletter. If you confirm your wish to receive the newsletter, we will store your e-mail address until you unsubscribe from the newsletter. The storage serves the purpose of sending you the newsletter. Furthermore, we store your IP address and the time of your registration at registration and confirmation in order to prevent misuse of your personal data and to be able to provide proof of correct sending. The legal basis for the processing of your personal data is Art. 6 para. 1 lit. a) GDPR. In addition, a dispatch history of the newsletters sent to you is created in order to be able to provide you with information on this; your usage behaviour is generally not stored. The legal basis for this is Art. 6 para. 1 lit. f) GDPR.
Only the e-mail address is required for the dispatch of the newsletter. You have the right to revoke your consent to receive the newsletter at any time. Your revocation does not affect the legality of the processing of your personal data until revocation. You can revoke your consent by clicking on the link provided in each newsletter e-mail or by sending a message to the sender's address, or in an emergency to the contact data provided in the imprint or the privacy policy.
5. Notes on ensuring data security
We take technical and operational security precautions on our pages to protect the personal data stored with us from access by third parties, loss or misuse and to enable secure data transfer.
Among other things, all online forms are accessed via an encrypted SSL connection and your data is transmitted via this connection. You can recognize this transmission by a closed lock in the status bar of your Internet browser. Your data is encrypted on the way from your computer to us and can only be read again on our server. A security certificate confirms the authenticity.
We must point out that due to the structure of the Internet, unwanted data access by third parties may occur. It is therefore also your responsibility to protect your data against misuse by encrypting it or in any other way. Without appropriate protective measures, in particular data transmitted without encryption can be read by third parties, even if this is done by e-mail.
V. Cookie Policy
1. General information on the use of Cookies
Our website uses so-called cookies. Cookies are small text files that are stored on your end device and saved by your browser. They serve to make our offers more user-friendly, effective and secure. We use so-called temporary cookies, which are automatically deleted when you close your browser ("session cookies"), as well as persistent (permanent) cookies.
You have the choice whether you want to allow the setting of cookies. You can make changes with the cookie banner or in your browser settings. You can choose whether you want to accept all cookies, be informed when cookies are set, or reject all cookies. If you choose the last option, it is possible that you will not be able to use our services to their full extent.
When using cookies, a distinction must be made between the mandatory cookies and those for more extensive purposes (measurement of access numbers, advertising purposes).
2. Mandatory cookies when using the website
We use session cookies on our websites, which are mandatory for the use of our websites. These include cookies that enable us to recognize you while you are visiting the site in a single session. These session cookies contribute to the safe use of our offer by enabling the secure processing of the shopping cart function and the payment process.
3. Use of cookies with your consent
Below you will find an overview of the cookies that are used by us with your consent given at the beginning of the use of the website. You will also find an opt-out option with each explanation of the use of cookies. These are cookies to record the usage behaviour of our website and cookies that are used for advertising purposes.
a. Use of cookies to record user behaviour (Tracking)
The use of tracking cookies enables us to recognize users when they return to our website and thus to assign usage processes to an internally assigned code number (pseudonym). In this way we can record repeated access to our website and analyse it in a coherent manner.
Specifically, the following tracking cookies are used:
Tracking through Google Analytics
This website uses Google Analytics, a web analysis service from Google (Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on this website, your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before this happens. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide us with further services related to the use of the website and the Internet. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
We use Google Analytics to analyse the use of our website and to improve it regularly. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google Analytics implements the requirements of the standard contract clauses concluded. The legal basis for the storage of the cookie is the consent given (Art. 6 para. 1 lit. a) DSGVO). The further evaluation of the collected data by means of Google Analytics is carried out over a period of 26 months on the basis of Art. 6 Para. 1 lit. a) DSGVO.
For further information see https://tools.google.com/dlpage/gaoptout?hl=en and https://policies.google.com/privacy?hl=en.
Tracking through Piwik Pro Analytics
This website uses Piwik PRO Analytics, a web analytics service provided by Piwik PRO (Piwik PRO GmbH, „Piwik PRO“, Lina-Bommer-Weg 6, 51149 Köln). Piwik PRO Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is only transmitted to a server within the EU. Piwik PRO will use this information exclusively on our behalf to evaluate your use of the website, to compile reports on website activities and to provide us with further services related to website and internet use.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
We use Piwik PRO Analytics to analyse and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. The legal basis for the storage of the cookie is the consent given (Art. 6 para. 1 lit. a) GDPR). The further evaluation of the collected data by means of Piwik PRO Analytics is carried out over a period of 26 months on the basis of Art. 6 para. 1 lit. a) GDPR.
For more information see https://piwikpro.de/analytics-web-mobile/.
Google Adwords Tracking
We use the offer of Google Adwords to draw attention to our attractive offers by means of advertising material (so-called Google Adwords) on external websites. These advertising media are delivered by Google via so-called "Ad Servers". Ad server cookies are used to evaluate performance parameters such as ad impressions, clicks and conversions. In relation to the data of the advertising campaigns, we can thus determine how successful the individual advertising measures are. If you reach our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies usually expire after 30 days and are not intended to identify you personally. The following analysis values are usually saved for this cookie:
- Unique Cookie ID
- Number of Ad Impressions per placement (Frequency)
- Last Impression (relevant for post-view conversions)
- OptOut information (marking that the user no longer wishes to be addressed)
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. Please note that data processing by Google may take place outside the European Union. Google processes personal data on the basis of standard contract clauses. We also have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge:
Through the integration of "tracking tools", Google receives the information that you have called up the corresponding website of our Internet presence, or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and save your IP address.
You can refuse the setting of a cookie. This can be done, for example, via cookie banners or browser settings that generally deactivate the automatic setting of cookies. Alternatively, you can disable cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com. You can also prevent Google from recording the data generated by the cookie and related to your use of the website by installing a browser plug-in: https://tools.google.com/dlpage/gaoptout?hl=en. If you do not wish to receive interest-based advertising, you can disable Google's use of cookies for these purposes by visiting https://www.google.de/settings/ads//. For more information about Google's privacy policy, please visit https://www.google.com/intl/de/policies/privacy/. Alternatively, you can visit the Network Advertising Initiative (NAI)
b. Use of cookies for Marketing
We use cookies for marketing purposes, for example to tailor advertising to the interests of a website visitor. They are also used to limit the frequency of ads and to measure the effectiveness of an ad. This records which web pages and articles are clicked on. This allows us to collect information about usage patterns to target interest-based advertising. This information is shared with third parties. In these cases the cookies are regularly set directly by the advertising partner.
More specifically, the following cookies are set:
Use of Google Remarketing
In addition to AdWords tracking, we also use Google Remarketing. This is a retargeting, thus the delivery of interest-based advertising on other advertising spaces outside our offer to deliver. This application allows you to see advertisements for the services / products previously viewed on our website when you visit other websites after visiting our website. The cookie stored in your browser is used for recognition purposes. Google can thus record the interest in certain products on the basis of your previous visit to our website and use this information for the targeted display of advertising on other websites. According to Google, a combination of the data collected in the course of remarketing with your personal data, which may be stored by Google, does not take place. In particular, according to Google, pseudonymisation is used in remarketing.
The purpose of this application is to enable us to provide you with advertising that is in line with your interests and to advertise our products in a targeted manner. The legal basis for the storage of the cookie is the consent given (Art. 6 para. 1 lit. a) GDPR). Further evaluation of the data collected over a period of up to two years is based on Art. 6 Para. 1 lit. f) GDPR.
If you do not want ads tailored to your interests to be displayed, you can disable cookies in your browser or tell Google to do so in the future by following this link: https://www.google.com/settings/ads/onweb/.
(July 2020)