Thank you for your interest in THE CLIMATE CHOICE. The protection of your personal data is important to us. The collection and processing of your personal data is carried out in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR).
The following data protection declaration applies to the use of our online presences theclimatechoice.com and climatesummit.de as well as our CLIMATE INTELLIGENCE PLATFORM (hereinafter referred to as “”Websites”).
CONTROLLER
The controller in the sense of Art. 4 (7) GDPR is:
THE CLIMATE CHOICE UG (limited liability).
Managing directors: Lara Obst, Yasha Tarani
c/o Impact Hub Berlin GmbH
Rollbergstraße 28A
12053 Berlin
Germany
WHAT DATA WE PROCESS
1 WHEN VISITING OUR WEBSITES
We collect information about you when you use our websites. We automatically collect information about your usage behavior and your interaction with us and register data about your computer or mobile device. We process data about each access to our website (log files). The logged data includes:
Name and URL of the file accessed
date and time of access
amount of data transferred
access status/http status code
browser type and version
operating system used
Referer URL (i.e. the previously visited page)
IP address and the requesting provider
We store the log files for 7 days for fault analysis and for security reasons (e.g. to clarify attempted attacks) and then delete them. Log files whose further storage is necessary for evidentiary purposes are exempt from deletion until the final clarification of the respective incident and may be passed on to investigating authorities in individual cases. In addition, the log files are also used for analysis purposes in order to improve our website. This is also our legitimate interest according to Art. 6 para. 1 p. 1 f) GDPR.
2 COMMUNICATION AND INTERACTION
2.1 CONTACTING US
If you contact us (e.g. via contact form or e-mail), we process your information to process the request.
We have a legitimate interest in answering requests to us. The legal basis for data processing is Art. 6 para. 1 lit. f) GDPR. If your request is aimed at the conclusion of a contract or an existing contract, the legal basis is Art. 6 para. 1 lit. b) GDPR.
2.2 E-MAIL-NEWSLETTER
If you have given us your consent to our email newsletter, the data processing required for sending it is carried out on the legal basis of Art. 6 (1) a) GDPR (“consent”). You can revoke your consent at any time with effect for the future (e.g. by using the unsubscribe link contained in the e-mail).
Under the conditions of Section 7 (3) of the Unfair Competition Act (UWG), we may also send you direct advertising by e-mail for our own similar goods or services. You can object to this direct advertising at any time without incurring any costs other than the transmission costs according to the prime rates.
2.3 CLIMATE PERFORMANCE ASSESSMENT
We use the form tool of easyfeedback GmbH, a German based service provider, to collect and process primary data for the provision of business services. The data we collect includes the following personal data:
First name
Last name
E-mail address
Company
Position
We have a legitimate interest in answering requests to us. The legal basis for data processing is Art. 6 para. 1 lit. f) GDPR. If your request is aimed at the conclusion of a contract or an existing contract, the legal basis is Art. 6 para. 1 lit. b) GDPR.
The easyfeedback privacy policy can be found at: https://easy-feedback.com/privacy/privacy-policy/
2.4 SCORING-PROCESS
If you engage us with a scoring of your company or other consulting services, any trade and business secrets and other facts requiring confidentiality that you provide to us are subject to a contractual confidentiality agreement.
If you provide us with personal data in this context, we process this data exclusively for the purpose of fulfilling the contract. The legal basis for this data processing is Art. 6 para. 1 p. 1 b) GDPR.
2.5 EVENTS
In connection with (virtual) events, we use the services of third-party providers, e.g. for video conferencing or ticket sales. We will make available information about the respective service provider and the data processing separately before you register to the event.
We may also collect data related to your attendance at one of our events. If you provide us with personal data in this context, we process this data exclusively for the purpose of fulfilling the contract. The legal basis for this data processing is Art. 6 para. 1 p. 1 b) GDPR.
2.6 CUSTOMER RELATIONSHIP MANAGEMENT (CRM)
To manage our customer relationships, we use the the CRM software solution of HubSpot Inc. a US company with headquarters in Cambridge, USA, and a branch office in Dublin, Ireland.
As a basis for data processing, HubSpot uses so-called standard contractual clauses (Art. 46. para. 2 and 3 GDPR), i.e. model templates provided by the EU Commission to ensure that your data comply with European data protection standards even if they are transferred to third countries (such as the USA). These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en
The data processing conditions (Data Processing Agreement), which correspond to the standard contractual clauses, can be found at https://legal.hubspot.com/dpa.
The data is stored and processed in data centres located within the EU.
We have a legitimate interest in managing our customer relationships. The legal basis for data processing is Art. 6 para. 1 lit. f) GDPR or – if you are an existing customer Art. 6 para. 1 lit. b) GDPR.
Further information on data protection at HubSpot can be found at: https://legal.hubspot.com/privacy-policy
5 THE CLIMATE INTELLIGENCE PLATFORM
5.1 REGISTRATION ON OUR PLATFORM
After receiving an invitation email from us or one of your business partners, you may register to our CLIMATE INTELLIGENCE PLATFORM.
To complete the registration you must provide us the following mandatory registration data:
Preferred language
First name
Last name
Job title
Company email address
Physical company address
Password
Last login date
In addition, you may voluntarily provide us with additional registration data, for example, your title or phone number.
We may use your company email address to send you information about your registration to the CLIMATE INTELLIGENCE PLATFORM, for example regarding the available services or changes or downtimes of the CLIMATE INTELLIGENCE PLATFORM.
We process the registration data exclusively for the purpose of fulfilling the contract (your registration). The legal basis for this data processing is Art. 6 para. 1 p. 1 b) GDPR.
5.2 PLATFORM EMAILS
For the automatic sending of emails of our CLIMATE INTELLIGENCE PLATFORM, we use the service Mailjet, 13-13 bis, rue de l’Aubrac, 75012 Paris, France (Global Headquarters) / Alt-Moabit 2, 10557 Berlin, Germany.
The sending of e-mails is organized and analyzed by this service provider. In this way, it can be determined whether an e-mail has been opened .This ensures that e-mails really reach the recipients. In addition, the analysis can also contribute to troubleshooting in the event of an error.
7 SOCIAL MEDIA
7.1 YOUTUBE
YouTube is an online video platform owned by Google. We use YouTube to host recordings or live streamings of webinars that people can attend. By attending the webinars or giving their consent to appear in recordings hosted on YouTube and other online channels.
The terms of use for YouTube can be found here: https://www.youtube.com/static?template=terms
7.2 PRESENCE IN SOCIAL MEDIA
We maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services there. When calling up the respective networks and platforms, the terms and conditions and data processing policies of the respective operators apply.
Unless otherwise stated in our privacy policy, we process the data of users when they communicate with us within the social networks and platforms, e.g. write posts on our online presences or send us messages.
7.3 SOCIAL PLUGINS
We offer social plugins from various social networks such as LinkedIn, Facebook, Instagram or Twitter on our website.
These are operated exclusively by the respective provider. The plugins are marked on our website with the respective button of the provider or service. When you visit one of our websites that contains such a plugin, your browser establishes a connection to the servers of the respective service. This in turn transmits the content of the plugin to your browser, which integrates it into the displayed page. By visiting our website, the corresponding information is therefore transmitted to the respective service. If you are logged in to one of the respective services via your personal user account and visit our website at the same time, this service can assign the visit to the website to your account. Users can post or share links to websites on social networks via plugins. Through interactions, such as leaving a comment or clicking on the respective button, the corresponding information is transmitted directly to the respective services and stored there.
If you do not want such data transmission and would like to prevent it, log out of your social networks or user accounts before visiting our website. We have no influence on the data collection and transmission by social plugins. For the purpose and scope of the data collection of the respective provider or service and the further use and processing of your data, please refer to the respective data protection notices directly on the websites of the providers. Find out there what rights you have and how you can achieve a satisfactory data protection setting.
Privacy policy of Twitter: https://twitter.com/en/privacy
Privacy policy of Instagram: https://instagram.com/about/legal/privacy/
Privacy policy of Facebook: https://de-de.facebook.com/privacy/explanation
Privacy policy ofL LinkedIn: https://www.linkedin.com/legal/privacy-policy
Privacy policy of Whatsapp: https://www.whatsapp.com/legal/
Privacy policy of Telegram: https://telegram.org/privacy
7 OTHER SERVICES
7.1 GOOGLE FONTS
THE CLIMATE CHOICE uses Google Fonts of the company Google for the uniform display of fonts so-called Web Fonts. For the European area, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.
We have integrated the Google fonts locally, i.e. on our web server and not on Google’s servers. We use Google Web Fonts for optimization purposes, in particular to improve the use of our website for you and to make it more user-friendly. This is also our legitimate interest according to Art. 6 para. 1 lit. f GDPR.
Further information on data protection can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en&gl=en
For more information on Google Fonts, please visit https://fonts.google.com/.
7.2 GOOGLE RECAPTCHA
THE CLIMATE CHOICE uses Google reCAPTCHA of the company Google for the uniform display of fonts so-called Web Fonts. For the European area, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.
The use of reCAPTCHA serves in particular to distinguish whether the input is made by a natural person or by machine and automated processing abusive (bots). The service uses the transmission of the IP address and possibly other data required by Google for the service reCAPTCHA to Google. Further information on the privacy policy of Google Inc. can be found at https://policies.google.com/privacy?hl=en.
COOKIES
1 GENERAL
Cookies are small text files that are sent when a website is visited and stored in the browser of the user device. If the same website is called up again, the browser sends back the content of the cookies and thus enables the recognition of the user device. Certain cookies are automatically deleted after the browser session ends (so-called session cookies). Other cookies are stored for a certain time or permanently in the browser of the user device (so-called temporary or permanent cookies).
The use of cookies also depends on the settings of your web browser. Most web browsers are preset so that cookies are automatically accepted. You can change this setting at any time or delete stored cookies. Please refer to the manufacturer’s instructions on how this works in the browser or device you are using.
Please note that not all functions of our websites or individual functions may be available if you disable or delete cookies.
2 FUNCTIONAL COOKIES
Certain cookies are necessary for the website to be provided. You cannot object to the use of the functional cookies.
NamePurposeStorage durationThird-party suppliersessionidProvision of the offer / authentication / session handling2 weeksnocsrftokenProvision of the offer / protection of the webapp against cross-site request forgery attacks1 yearno
3 ANALYSIS COOKIES
We use certain cookies to analyze the use of our website and for statistical evaluation (“analysis cookies”). The legal basis for these cookies and the processing of the data is your consent (Article 6(1)(a) GDPR).
3.1 GOOGLE-ANALYTICS
The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). The information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.
In Google Analytics 4, the anonymisation of IP addresses is activated by default. Due to IP anonymisation, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
During your visit to the website, your user behaviour is recorded in the form of “events”. Events can be
Page views
First visit to the website
Start of the session
Visited web pages
Your “click path”, interaction with the website
Scrolls (whenever a user scrolls to the bottom of the page (90%))
Clicks on external links
Internal search queries
Interaction with videos
file downloads
Ads viewed / clicked on
language setting
Also recorded:
Your approximate location (region)
Date and time of your visit
Your IP address (in truncated form)
Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
Your internet provider
the referrer URL (via which website/advertising medium you came to this website)
Purposes of the processing
Google will use this information on our behalf to analyse your use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns.
Recipients of the data are/may be:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
For the USA, the European Commission adopted its adequacy decision on 10 July 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (for example to Singapore) cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider.
You can find more information on the terms of use of Google Analytics and data protection at Google at https://marketingplatform.google.com/about/analytics/terms/us/ and at https://policies.google.com/?hl=en.
3.2 OVERVIEW OF THE ANALYSIS COOKIES
We use the following analysis cookies:
NamePurposeStorage durationThird-party supplier_gaDifferentiation of users2 yearsYes, Google_ga_<container-id>Session data storage2 yearsYes, Google_gatUsed by Google Analytics to limit the request rate.1 dayYes, Google_gidRegisters a unique ID that is used to generate statistical data on how the visitor uses the website.1 dayYes, Google
DISCLOSURE OF PERSONAL DATA
Unless otherwise expressly stated, the personal information we collect will be shared in the following circumstances.
1 TO COMPLY WITH A LEGAL OBLIGATION
We may disclose your personal information when we are required to do so by law to comply with applicable law, government requests, legal process, court orders or legal process, such as in response to a court order or to meet national security or law enforcement requirements.
2 FOR LEGAL DEFENSE
We may disclose your information when we believe it is necessary to prevent, investigate, or take action regarding possible violations of our policies, to protect against legal liability, possible misconduct in connection with our service, suspected fraud or other criminal activity, to protect the personal safety of an individual or the public, or as evidence in a lawsuit to which we are a party.
3 SUBCONTRACTORS
We may engage selected third party companies to provide services or to assist us in analyzing the use of our services. They will only have access to your data to perform these tasks on our behalf and instructions as subprocessors.
TRANSMISSION TO NON-EUR COUNTRIES
We also transfer personal data to third parties or processors established in non-EEA countries. In this case, we ensure that an adequate level of data protection exists at the recipient (e.g., based on an adequacy decision of the EU Commission for the respective country pursuant to Art. 45 GDPR or the agreement of so-called EU standard contractual clauses of the European Commission with the recipient pursuant to Art. 46 GDPR). This includes the following countries: USA
HOW LONG WE KEEP PERSONAL DATA
Unless expressly stated, we store personal data only for as long as is necessary to fulfill the purposes pursued.
In some cases, the legislator provides for the retention of personal data, such as in tax or commercial law. In these cases, we only continue to store the data for these legal purposes, but do not process it further and delete it after the legal retention period has expired.
YOUR RIGHTS AS A DATA SUBJECT
1 GENERAL RIGHTS UNDER GDPR
Various rights are available to data subjects under the GDPR. These include in particular:
Right of access: Pursuant to Art. 15 of the GDPR, you may request confirmation as to whether personal data relating to you is being processed by us. If such processing is taking place, you may also request further information from us about the processing.
Right to rectification: you have a right to rectification and/or completion in accordance with Art. 16 GDPR, insofar as the processed personal data concerning you are inaccurate or incomplete.
Right to restriction of processing: You may request the restriction of the processing of personal data concerning you in accordance with Art. 18 GDPR.
Right to erasure: Pursuant to Art. 17 GDPR, you also have the right to demand that we erase the personal data stored about you under certain conditions.
Right to data portability: Pursuant to Article 20 of the GDPR, you also have the right to receive personal data relating to you that you have provided in a structured, commonly used and machine-readable format and to transfer it to another controller without hindrance from us
2 RIGHT TO COMPLAIN
You have the right to complain about the handling of your personal data to the data protection authority responsible for you or us. Responsible for us is:
The Berlin Commissioner for Data Protection and Freedom of Information (www.datenschutz-berlin.de).
3 RIGHT OF OBJECTION
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation.
Status: Version 3.0 – May 2024
