PRIVACY POLICY

Thank you for your interest in THE CLIMATE CHOICE. The protection of your personal data is important to us. The collection and processing of your personal data is carried out in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR). Insofar as there are links to other websites, we have neither influence nor control over the linked content and the data protection provisions there. We recommend that you inform yourself in the data protection statements of the linked websites whether and to what extent personal data is collected, processed, used or passed on to third parties.

The following data protection declaration applies to the use of our online offer https://theclimatechoice.com as well as https://climatesummit.de. (hereinafter referred to as “website”).

RESPONSIBILITY

The responsible person in the sense of Art. 4 (7) GDPR is:

THE CLIMATE CHOICE UG (limited liability). 

Managing directors: Lara Obst, Yasha Tarani

c/o Factory Works GmbH
Lohmühlenstraße 65
12435 Berlin
Germany

WHAT DATA WE PROCESS

  1. WHEN VISITING OUR WEBSITES

We collect information about you when you use this website. We automatically collect information about your usage behavior and your interaction with us and register data about your computer or mobile device. We process data about each access to our website (log files). The logged data includes:

  • Name and URL of the file accessed
  • date and time of access
  • amount of data transferred
  • access status/http status code
  • browser type and version
  • operating system used
  • Referer URL (i.e. the previously visited page)
  • IP address and the requesting provider

We store the log files for 7 days for fault analysis and for security reasons (e.g. to clarify attempted attacks) and then delete them. Log files whose further storage is necessary for evidentiary purposes are exempt from deletion until the final clarification of the respective incident and may be passed on to investigating authorities in individual cases. In addition, the log files are also used for analysis purposes in order to improve our website. This is also our legitimate interest according to Art. 6 para. 1 p. 1 f) GDPR.

2 CONTACT

If you contact us (e.g. via contact form or e-mail), we process your information to process the request.

We have a legitimate interest in answering requests to us. The legal basis for data processing is Art. 6 para. 1 lit. f) GDPR. If your request is aimed at the conclusion of a contract or an existing contract, the legal basis is Art. 6 para. 1 lit. b) GDPR.

3 RATING-PROCESS

If you commission us with a rating of your company or other consulting services, any trade and business secrets and other facts requiring confidentiality that you provide to us are subject to a contractual confidentiality agreement.

If you provide us with personal data in this context, we process this data exclusively for the purpose of fulfilling the contract. The legal basis for this data processing is Art. 6 para. 1 p. 1 b) GDPR.

4 MARKETING

4.1 E-MAIL-NEWSLETTER

If you have given us your consent to our email newsletter, the data processing required for sending it is carried out on the legal basis of Art. 6 (1) a) GDPR (“consent”). You can revoke your consent at any time with effect for the future (e.g. by using the unsubscribe link contained in the e-mail).

Under the conditions of Section 7 (3) of the Unfair Competition Act (UWG), we may also send you direct advertising by e-mail for our own similar goods or services. You can object to this direct advertising at any time without incurring any costs other than the transmission costs according to the prime rates. 

4.2 easyfeedback (Climate Readiness Check)

We use the easyfeedback form tool to collect and process primary data for the provision of business services. The data we collect includes the following personal data: 

  • First name
  • Last name
  • E-mail address
  • Company
  • Position

The easyfeedback privacy policy can be found at: https://easy-feedback.com/privacy/privacy-policy/

4.3 SLACK

THE CLIMATE CHOICE uses the business communication platform Slack to communicate with the members of its Slack channel.

We process the data requested in this context to fulfill the contract envisaged with the respective member, so that the legal basis for the processing is Art. 6 para. 1 p. 1 lit. b GDPR. If you are accepted as a member, your data will be stored for the duration of the membership. If your application is rejected, we will delete your data with the exception of your name. It is our legitimate interest to identify you in the event of a renewed application, so the legal basis for further data processing of your name is Art. 6 para. 1 p. 1 lit. f GDPR.

During your membership, we process data that was collected during your application or that you have provided to us voluntarily thereafter on the basis of Art. 6 (1) S. 1 lit. b GDPR. 

Slack requires an email address in order for a person to register and become a member. The person is then free to complete their profile with personal data as they choose, including choosing an online name and/or picture. Any communication that the person chooses may also constitute personal data.

Slack’s privacy policy can be found at: https://slack.com/trust/privacy/privacy-policy.

4.4 HUBSPOT

THE CLIMATE CHOICE uses the CRM software solution HubSpot. The provider HubSpot Inc. is a US company with headquarters in Cambridge, USA, and a branch office in Dublin, Ireland.

As a basis for data processing, HubSpot uses so-called standard contractual clauses (Art. 46. para. 2 and 3 GDPR), i.e. model templates provided by the EU Commission to ensure that your data comply with European data protection standards even if they are transferred to third countries (such as the USA). These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en 

The data processing conditions (Data Processing Agreement), which correspond to the standard contractual clauses, can be found at https://legal.hubspot.com/dpa .

Further information on data protection at HubSpot can be found at: https://legal.hubspot.com/privacy-policy 

5 IN CONNECTION WITH THE CLIMATE DATA PLATFORM

5.1 USE OF THE CLIMATE DATA PLATFORM

We offer our customers the possibility to create a company profile in our CLIMATE DATA PLATFORM. We process the data stored in the company profile within the scope and for the purpose of fulfilling the contract. The legal basis for this data processing is Art. 6 para. 1 p. 1 b) GDPR.

We collect information about you when you use this website. We automatically collect information about your usage behavior and your interaction with us and register data about your computer or mobile device. We process data about each access to our website (log files). The evaluation and storage of the log files is carried out by the third-party provider Datadog (see section 5.4). The logged data includes:

  • Name and URL of the file accessed
  • date and time of access
  • amount of data transferred
  • access status/http status code
  • browser type and version
  • operating system used
  • Referer URL (i.e. the previously visited page)
  • IP address and the requesting provider

We store the log files for 15 days for fault analysis and for security reasons (e.g. to clarify attempted attacks) and then delete them. Log files whose further storage is required for evidentiary purposes are exempt from deletion until final clarification of the respective incident and may be passed on to investigating authorities in individual cases. In addition, the log files are also used for analysis purposes in order to improve our website. This is also our legitimate interest according to Art. 6 para. 1 p. 1 f) GDPR.

5.2 FURTHER DATA IN OUR CLIMATE DATA PLATFORM

Our CLIMATE DATA PLATFORM also contains information on companies that we obtain from public sources. This information is purely company-related data and not personal data. However, if you have any questions about this data, please do not hesitate to contact us at the above address. 

5.3 REGISTRATION ON OUR WEBSITE FOR THE USE OF THE CLIMATE CHOICE

After receiving an invitation email from The Climate Choice, you may register on our website to use The Climate Choice features. The data you use for registration is only required for the purpose of using our offer.

For important changes, for example regarding the scope of the offer or in the case of technically necessary changes, we use the e-mail address provided during registration to inform you in this way.

Data collected includes:

  • First name
  • Last name
  • Email address
  • Password
  • Last login date
  • Cookies in browser (SessionID for login)

5.4 DATADOG

The functions of the Datadog service are integrated on our platform. Datadog is a monitoring system of the American company Datadog, Inc, 620 8th Ave, 45th Floor, New York, NY 10018 USA. The system notifies our development team about possible errors in the application. For this purpose, log data and performance data are transferred to Datadog, Inc.

The data collected through this processing activity is sent to DataDog servers in the EU and processed there.

For more information about the collection and use of data by Datadog, Inc. please visit: www.datadoghq.com/legal/privacy/. 

5.5 MAILJET

For the automatic sending of emails of our Platform, we use the service Mailjet, 13-13 bis, rue de l’Aubrac, 75012 Paris, France (Global Headquarters) / Alt-Moabit 2, 10557 Berlin, Germany.

The sending of e-mails is organized and analyzed by this service provider. In this way, it can be determined whether an e-mail has been opened.

The data processing of sending the e-mail takes place for the purpose of communicating with you. The data processing for analysis is carried out to ensure the communication. This ensures that e-mails really reach the recipients. In addition, the analysis can also contribute to troubleshooting in the event of an error. 

6 IN CONNECTION WITH EVENTS

In connection with (virtual) events, we use the services of third-party providers, e.g. for video conferencing or ticket sales.

6.1 ZOOM

THE CLIMATE CHOICE uses Zoom video conferencing software, developed by Zoom Video Communications, Inc.  

Zoom is used for standard business communications, meetings, as well as webinars conducted by THE CLIMATE CHOICE. “Zoom” is a service offered by Zoom Video Communications, Inc. based in the United States.

To participate in a webinar, an individual must actively connect to the Zoom session via the Zoom software. Connection data, such as IP addresses and any identifying information, such as names, are collected by Zoom, as are all communications. Webinars are recorded, and therefore any user activity is also recorded in the form of a video recording that can be uploaded to YouTube (see below). 

Zoom’s privacy policy can be found at: https://zoom.us/privacy

6.2 GOOGLE MEET

THE CLIMATE CHOICE uses Google Meet of the company Google. For the European area, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

As a basis for data processing, Google uses so-called standard contractual clauses (Art. 46. para. 2 and 3 GDPR), i.e. model templates provided by the EU Commission to ensure that your data comply with European data protection standards even if they are transferred to third countries (such as the USA). These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en 

The data processing terms (Google Ads Data Processing Terms), which are also applicable to Google Meet, can be found at https://business.safety.google/adsprocessorterms/.

More about the data processed through the use of Google Meet can be found here https://policies.google.com/privacy?hl=en.

6.3 GATHER TOWN 

Gather Town is a virtual space that combines video telephony with a custom 2D map, allowing users to walk around and talk to others in that environment. Gather Town is operated by the US-based company Gather Presence Inc. For more information on Gather Town’s privacy policy, please visit: https://gather.town/privacy-policy

6.4 EVENTBRITE

Eventbrite is an event management and ticketing platform that THE CLIMATE CHOICE uses to offer tickets for online events. Personal information collected includes name, email address, and payment information. For more information about EventBrite’s privacy policy, please visit: https://www.eventbrite.com/support/articles/en_US/Troubleshooting/eventbrite-privacy-policy.

7 SOCIAL MEDIA

7.1 YOUTUBE

YouTube is an online video platform owned by Google. We use YouTube to host recordings or live streamings of webinars that people can attend. By attending the webinars or giving their consent to appear in recordings hosted on YouTube and other online channels. 

The terms of use for YouTube can be found here: https://www.youtube.com/static?template=terms

7.2 PRESENCE IN SOCIAL MEDIA

We maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services there. When calling up the respective networks and platforms, the terms and conditions and data processing policies of the respective operators apply.

Unless otherwise stated in our privacy policy, we process the data of users when they communicate with us within the social networks and platforms, e.g. write posts on our online presences or send us messages.

7.3 SOCIAL PLUGINS

We offer social plugins from various social networks such as LinkedIn, Facebook, Instagram or Twitter on our website.

These are operated exclusively by the respective provider. The plugins are marked on our website with the respective button of the provider or service. When you visit one of our websites that contains such a plugin, your browser establishes a connection to the servers of the respective service. This in turn transmits the content of the plugin to your browser, which integrates it into the displayed page. By visiting our website, the corresponding information is therefore transmitted to the respective service. If you are logged in to one of the respective services via your personal user account and visit our website at the same time, this service can assign the visit to the website to your account. Users can post or share links to websites on social networks via plugins. Through interactions, such as leaving a comment or clicking on the respective button, the corresponding information is transmitted directly to the respective services and stored there.

If you do not want such data transmission and would like to prevent it, log out of your social networks or user accounts before visiting our website. We have no influence on the data collection and transmission by social plugins. For the purpose and scope of the data collection of the respective provider or service and the further use and processing of your data, please refer to the respective data protection notices directly on the websites of the providers. Find out there what rights you have and how you can achieve a satisfactory data protection setting.

  • Privacy policy of Twitter: https://twitter.com/en/privacy
  • Privacy policy of Instagram: https://instagram.com/about/legal/privacy/
  • Privacy policy of Facebook: https://de-de.facebook.com/privacy/explanation
  • Privacy policy ofL LinkedIn: https://www.linkedin.com/legal/privacy-policy
  • Privacy policy of Whatsapp: https://www.whatsapp.com/legal/
  • Privacy policy of Telegram: https://telegram.org/privacy

OTHER SERVICES

1 BITLY

To generate short URLs, we use the tool “Bitly” from bitly.inc (39 5th Avenue, New York, NY 10010, USA). Privacy policy and opt-out: https://bitly.com/pages/privacy?lang=en 

2 GOOGLE FONTS

THE CLIMATE CHOICE uses Google Fonts of the company Google for the uniform display of fonts so-called Web Fonts. For the European area, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

We have integrated the Google fonts locally, i.e. on our web server and not on Google’s servers. We use Google Web Fonts for optimization purposes, in particular to improve the use of our website for you and to make it more user-friendly. This is also our legitimate interest according to Art. 6 para. 1 lit. f GDPR.

Further information on data protection can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en&gl=en

For more information on Google Fonts, please visit https://fonts.google.com/.

GOOGLE RECAPTCHA

THE CLIMATE CHOICE uses Google reCAPTCHA of the company Google for the uniform display of fonts so-called Web Fonts. For the European area, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

The use of reCAPTCHA serves in particular to distinguish whether the input is made by a natural person or by machine and automated processing abusive (bots). The service uses the transmission of the IP address and possibly other data required by Google for the service reCAPTCHA to Google. Further information on the privacy policy of Google Inc. can be found at https://policies.google.com/privacy?hl=en.

COOKIES

1 GENERAL

Cookies are small text files that are sent when a website is visited and stored in the browser of the user device. If the same website is called up again, the browser sends back the content of the cookies and thus enables the recognition of the user device. Certain cookies are automatically deleted after the browser session ends (so-called session cookies). Other cookies are stored for a certain time or permanently in the browser of the user device (so-called temporary or permanent cookies).

The use of cookies also depends on the settings of your web browser. Most web browsers are preset so that cookies are automatically accepted. You can change this setting at any time or delete stored cookies. Please refer to the manufacturer’s instructions on how this works in the browser or device you are using.

Please note that not all functions of our websites or individual functions may be available if you disable or delete cookies.

2 FUNCTIONAL COOKIES

Certain cookies are necessary for the website to be provided. You cannot object to the use of the functional cookies. We use the following functional cookies:

Name Purpose Storage duration Third-party supplier
sessionid Provision of the offer / authentication / session handling 2 weeks no
csrftoken Provision of the offer / protection of the webapp against cross-site request forgery attacks 1 year no

 

3 ANALYSE COOKIES

We use certain cookies to analyze the use of our website and for statistical evaluation (“analysis cookies”). The legal basis for these cookies and the processing of the data is your consent (Article 6(1)(a) GDPR).

3.1 GOOGLE-ANALYTICS

We use Google Analytics, a web analytics service provided by Google. For the European area, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about the use of this website by website visitors is usually transmitted to a Google server in the USA and stored there.

Google has submitted to the Privacy Shield Agreement concluded between the European Union and the USA and has had itself certified. This means that Google undertakes to comply with the standards and regulations of European data protection law. For more information, please see the entry linked below: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

We have activated IP anonymization on this website (anonymizeIp). However, this means that your IP address will be truncated beforehand by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent the transfer of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

3.2 OVERVIEW OF THE ANALYSIS COOKIES

We use the following analysis cookies:

Name Purpose Storage duration Third-party supplier
_ga Differentiation of users 2 years Yes, Google
_ga_<container-id> Session data storage 2 years Yes, Google

 

DISCLOSURE OF PERSONAL DATA

Unless otherwise expressly stated, the personal information we collect will be shared in the following circumstances.

1 TO COMPLY WITH A LEGAL OBLIGATION

We may disclose your personal information when we are required to do so by law to comply with applicable law, government requests, legal process, court orders or legal process, such as in response to a court order or to meet national security or law enforcement requirements.

2 FOR LEGAL DEFENSE

We may disclose your information when we believe it is necessary to prevent, investigate, or take action regarding possible violations of our policies, to protect against legal liability, possible misconduct in connection with our service, suspected fraud or other criminal activity, to protect the personal safety of an individual or the public, or as evidence in a lawsuit to which we are a party.

3 IN THE CONTEXT OF SUBCONTRACTING SERVICE PROVIDERS

We may engage selected third party companies to provide services or to assist us in analyzing the use of our services. They will only have access to your data to perform these tasks on our behalf and at our direction. and are required not to share it or use it for any other purpose. 

TRANSMISSION TO NON-EUR COUNTRIES

We also transfer personal data to third parties or processors established in non-EEA countries. In this case, we ensure that an adequate level of data protection exists at the recipient (e.g., based on an adequacy decision of the EU Commission for the respective country pursuant to Art. 45 GDPR or the agreement of so-called EU standard contractual clauses of the European Commission with the recipient pursuant to Art. 46 GDPR). This includes the following countries: USA

HOW LONG WE KEEP PERSONAL DATA

Unless expressly stated, we store personal data only for as long as is necessary to fulfill the purposes pursued. 

In some cases, the legislator provides for the retention of personal data, such as in tax or commercial law. In these cases, we only continue to store the data for these legal purposes, but do not process it further and delete it after the legal retention period has expired.

YOUR RIGHTS AS A DATA SUBJECT

Various rights are available to data subjects under the GDPR. These include in particular:

  • Right of access: Pursuant to Art. 15 of the GDPR, you may request confirmation as to whether personal data relating to you is being processed by us. If such processing is taking place, you may also request further information from us about the processing.
  • Right to rectification: you have a right to rectification and/or completion in accordance with Art. 16 GDPR, insofar as the processed personal data concerning you are inaccurate or incomplete.
  • Right to restriction of processing: You may request the restriction of the processing of personal data concerning you in accordance with Art. 18 GDPR.
  • Right to erasure: Pursuant to Art. 17 GDPR, you also have the right to demand that we erase the personal data stored about you under certain conditions.
  • Right to data portability: Pursuant to Article 20 of the GDPR, you also have the right to receive personal data relating to you that you have provided in a structured, commonly used and machine-readable format and to transfer it to another controller without hindrance from us.

RIGHT OF APPEAL

You have the right to complain about the handling of your personal data to the data protection authority responsible for you or us. Responsible for us is:

The Berlin Commissioner for Data Protection and Freedom of Information (www.datenschutz-berlin.de). 

RIGHT OF OBJECTION

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation.

Status: Version 2.0 – January 2022