1. Home
  2. Privacy Policy

Privacy Policy

Content element with id 1325

Privacy Policy

I    Information About the Collection of Personal Data::

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. 
When you use this website, various personal data are collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done. 
We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible. 

The responsible party for data processing on this website pursuant to art. 4 (7) GDPR is 

Institut der deutschen Wirtschaft Köln e.V.
Konrad-Adenauer-Ufer 21
50668 Köln
Telefon: 0221 / 498 - 1
Telefax: 0221 / 4981 - 533
welcome@iwkoeln.de 
If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we will also state the defined criteria for the storage period.

II    Data Protection Officer

We have appointed a data protection officer for our company:

legitimis GmbH
Herrn Sebastian Feik, Dipl.-WJur. (FH)
Ball 1
51429 Bergisch Gladbach
Tel.: +49 2202 28 941 - 0
Fax: +49 2202 28 941 - 47
E-mail : datenschutz-IWkoeln@legitimis.com

III    Your Rights

1. Information, Blocking, Deletion
Within the framework of the applicable legal provisions according to art. 15 GDPR, you have the right, at any time, to free information about your stored personal data, its origin and recipient and the purpose of data processing and, if applicable, according to art. 16 GDPR, a right to rectification or to blocking (art. 18 GDPR) or deletion of this data (art. 17 GDPR). For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the above mentioned address. 

2. Right to Data Portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format (art. 20 GDPR). If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible. 

3. Right of Complaint to the Competent Supervisory Authority.
In the event of violations of data protection law, the subject has a right of appeal to the competent supervisory authority (article 77 GDPR in conjunction with section 19 FDPA). The competent supervisory authority in matters of data protection law is the state data protection commissioner of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Service/Kontakt/kontakt_node.html.

IV    Revocation of Your Consent to Data Processing

There are data processing operations that are only possible with your express consent. You can revoke consent you have already given at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing performed until the revocation remains unaffected by the revocation.

V    SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in the address line of your browser. 
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

VI    Objection to Advertising Mails

The use of contact data published within the framework of the imprint obligation for the transmission of advertising and information material not expressly requested is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails. 

VII    Data Collection on our Website

1.    Server log files

a. Type and scope of data processing:
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- browser type and browser version
- operating system used
- referrer URL
- date and time of server request
- anonymized IP address
This data is not merged with other data sources. 

b. Purpose of data processing:
The collection of data to provide the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

c. Legal basis:
The basis for the data processing is art. 6 para. 1 lit. f GDPR. The temporary storage of the IP address is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. Log files are stored to ensure the functionality of the website and the security of our information technology systems.

d. Duration of storage:
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. 
In the case of storage of the data in log files, this is the case after seven days at the latest; backups are stored in encrypted form for 14 days. 

e. Possibility of objection and removal:
Due to the fact that the collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website, there is no possibility for the user to object to the data processing.

2.    Cookies

a. Type and scope of data processing:
Cookies do not cause any damage to your computer and do not contain viruses. They serve to make the offer on the Internet more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser. 
The website uses various cookies to ensure its proper functioning and to make it easier for users to navigate. In addition, after your consent, we also use cookies on our website that enable an analysis of the user's behavior (performance cookies).
When accessing our website, the user is informed about the use of necessary cookies or cookies for analysis purposes (performance cookies) and his consent to the processing of personal data used in this context is obtained. In this context, a reference to this privacy policy is also made.
Further details on the cookies used can also be found in the corresponding paragraphs of this data protection declaration.

b. Purpose of data processing
The analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our offer. 

c. Legal basis:
The legal basis for the processing of personal data using technically necessary cookies is art. 6 para. 1 lit. f GDPR. The legal basis for the processing of personal data using cookies that are not technically necessary is art. 6 para. 1 lit. a GDPR if the user has given his consent in this regard.

d. Duration of storage, possibility of objection and removal:
Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.
In addition, reference is made to the consent tool on our website, in which you can choose with regard to the setting of all cookies that are not necessary.

3.    E-Mail Contact

Contacting us is possible via the e-mail address provided on our website. In this case, the personal data transmitted with your e-mail will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.
The legal basis for the processing of data transmitted in the course of sending an e-mail is art. 6 (1) lit. f GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is art. 6 (1) lit. b GDPR. The necessary interest is the processing of the contact.
The data will be deleted insofar as they are no longer required to achieve the purpose for which they were collected, i.e. when the conversation with you as a user has ended or the facts concerned have been conclusively clarified. 
You have the option to revoke your consent to the processing of personal data at any time (see above "Revocation of consent to your data processing").

4.    Newsletter:

a. Type and scope of data processing
On our website, there is the option to subscribe to a free newsletter. In doing so, the data from the input mask is transmitted to us when you register for the newsletter. To register for the newsletter, it is sufficient to enter your e-mail address. In addition, the following data is collected during registration: 
- your e-mail address 
- IP address of the calling computer 
- date and time of registration  
- geographical data (longitude and latitude) 
Your consent is obtained for the processing of the data during the registration process. This will be logged by us. The registration for our newsletter is carried out in a so-called double opt-in process. This means that after registration you will receive an e-mail in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with other e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address.  
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, your e-mail address will be stored as long as the subscription to the newsletter is active.  

b. Legal basis and purpose for data processing:
The legal basis for the processing of data after the user has subscribed to the newsletter is art. 6 para. 1 lit. a GDPR if the user has given his consent. 

c. Storage period, possibility of objection and removal:
You can stop receiving our newsletter at any time by revoking your consent. The easiest way to exercise your right of withdrawal is to click on the corresponding link below each newsletter.

5.    Web analysis through Matomo

a. Type and scope of data processing
We use the open source software tool Matomo (formerly PIWIK) of the provider InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, on our website after your consent to analyze the surfing behavior of our users. The software sets a cookie on your computer (for cookies, see above). When the website is called up, the following data is stored: 
- two bytes of the IP address of the user's calling system,
- the website called up,
- the website from which the user accessed the accessed website (referrer),
- the subpages accessed from the accessed web page,
- the time spent on the web page
- the frequency with which the web page is accessed.
The software runs exclusively on the servers of our website. A storage of the personal data of the users only takes place there. The data is not passed on to third parties. It is not possible to draw conclusions about a specific person, as your IP address is anonymized immediately after processing and before storage.

b. Purpose of data processing
The processing of the users' personal data enables us to analyze the surfing behavior of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. 

c. Legal basis for data processing
The legal basis for the use of Matomo is art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest for the use is that we can improve our offer through the statistics obtained through Matomo and we can design more interesting for you as a user.

d. Duration of storage
The data is deleted as soon as it is no longer required for our recording purposes. The cookie set is valid for one week, after which it is deleted.

e. Possibility of objection and removal
With regard to the objection and removal options, the same applies as described under "Cookies".
More detailed information on the privacy settings of the Matomo software can be found at the following link: https://matomo.org/docs/privacy/.

6.    Social Media Links:

a. Facebook:
Among other things, this website links to our Facebook fan page. By clicking on the link, you leave this website and establish a direct connection between your browser and the Facebook servers. For more information on the purpose and scope of data collection and processing by Facebook, please refer to the provider's privacy policy at https://www.facebook.com/about/privacy.

b. Twitter:
This website links to our Twitter page, among others. By clicking on the link, you leave this website and establish a direct connection between your browser and the servers of Twitter. For more information on the purpose and scope of data collection and processing by Twitter, please refer to the provider's privacy policy at https://twitter.com/de/privacy.

c. YouTube videos:
Among other things, this website links to our YouTube channel. By clicking on the link, you leave this website and establish a direct connection between your browser and YouTube's servers. For more information on the purpose and scope of data collection and processing by YouTube, please refer to the provider's privacy policy at https://policies.google.com/privacy.

7.    Youtube Plugin:

This website uses plugins of the Google-operated site YouTube for embedding video content after your consent. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.
When you call up a sub-page with an embedded video, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. We use the extended data protection of YouTube when embedding YouTube videos. No data of our visitors is stored when using this option, unless they watch the corresponding video (start the video by clicking).
When you start a video embedded on our pages, Google collects, processes and stores various data (IP address, subpage of our site on which the video is embedded, etc.). If you are logged into your Youtube account, Youtube can assign your surfing behavior directly to your personal profile. You can only prevent this if you log out of your Youtube account before viewing the video. The provider of this site has no influence on this data transmission.
The integration of Youtube videos is done in the interest of an appealing presentation of our online offers. This is also our legitimate interest according to the legal basis art. 6 para. 1 lit. f GDPR.
For more information on the handling of user data, please refer to YouTube's privacy policy at: https://policies.google.com/privacy.

8.    Google Maps:

After your consent, this website uses Google Maps via an API to display interactive maps and to create directions. Google Maps is a map service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. By using Google Maps, information about the use of this website, including your IP address and the (start) address entered as part of the route planner function, may be transmitted to Google in the USA. When you call up a web page on our website that contains Google Maps, your browser establishes a direct connection with Google's servers. The map content is transmitted by Google directly to your browser, which then integrates it into the website. Therefore, we have no influence on the scope of the data collected by Google in this way. According to our knowledge, this is at least the following data:
- date and time of the visit to the website in question,
- Internet address or URL of the website called up,
- IP address, (start) address entered as part of route planning. 
We have no influence on the further processing and use of the data by Google and therefore cannot assume any responsibility for this.
The legal basis is art. 6 para. 1 lit. f GDPR. Our legitimate interest is the presentation of the map content or the provision of directions.
If you do not want Google to collect, process or use data about you via our website, you can disable JavaScript in your browser settings. In this case, however, you will not be able to use the map display.
The purpose and scope of the data collection and the further processing and use of the data by Google, as well as your rights in this regard and setting options for protecting your privacy, can be found in Google's privacy policy (https://policies.google.com/privacy).

If you would like information that this data protection declaration cannot provide or if you would like further information on a specific point, please contact the above-mentioned responsible officer.

Content element with id 8880 Content element with id 9713