Who is responsible and how can I contact the data protection officer?
The person responsible within the meaning of the DSGVO is the
Naturschutzbund Deutschland (NABU), Landesverband Niedersachsen e.V.
Tel. +49 (0) 511-91105-0
Fax +49 (0) 511-91105-40
Register court: Local court Hannover | Register number: VR 4635
VAT identification no.: DE 115665979
Regional Chairman: Dr. Holger Buschmann, Managing Director: Inez Schierenberg
If you have any questions about the processing of your personal data by us or about data protection in general, please contact the data protection officer at the address given in the imprint or at the e-mail address datenschutz@NABU-niedersachsen.de .
Your rights as data subject
Each data subject shall have the following rights:
- Right of access (Art. 15 DSGVO)
- Right to rectification of inaccurate data (Art. 16 DSGVO)
- Right to cancellation or a right to be "forgotten" (Art. 17 DSGVO)
- Right to limit the processing of personal data (Art. 18 DSGVO)
- Right to data transferability (Art. 20 DSGVO).
You can object to the processing of personal data for advertising purposes including an analysis of customer data for advertising purposes at any time without stating reasons.
In addition, the data subject also has a general right of objection (cf. Art. 21 para. 1 DSGVO). In this case, the objection against data processing must be justified. If the data processing is based on a consent, your consent can be revoked at any time with effect for the future.
The easiest way to exercise the rights of data subjects is to contact Service@NABU.de. In addition, you have the right to lodge a complaint with the data protection supervisory authority responsible for you.
Processing of personal data by NABU Niedersachsen
In the following, we would like to give you an overview of how we ensure the protection of your personal data when accessing our website and which types of personal data we process for which purposes and to what extent.
1. Processing of data when accessing our website - log files
When you access our website, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider and the like. In addition, the IP address is transmitted and used to use the service you have requested. This information is technically necessary for the correct delivery of content requested by you from websites and is mandatory when using the Internet.
This log file data is anonymised or deleted by us immediately after the end of the usage process. The legal basis for data processing is Art. 6 Para. 1 S. 1 f) DSGVO.
According to our IT security concept, the log file data is stored for a period of two weeks in order to detect and analyse any attacks against our website. The legal basis for data processing is Art. 6 Para. 1 S. 1 f) DSGVO].
2. Data processing when using the website - your requests
If you send us an enquiry by e-mail or via the contact form, we collect the data you provide for processing and answering your request. We store this information for verification purposes over a period of up to two years. The legal basis for data processing is Art. 6 Para. 1 Sentence 1 Letter f DSGVO.
3. Subscription to an e-mail newsletter
We use the so-called double opt-in procedure to register for our newsletters. This means that we will send you a confirmation e-mail to the e-mail address you provided after entering your e-mail address, in which we will ask you to confirm that you wish the newsletter to be sent. If you confirm your wish to receive the newsletter, we will store your e-mail address until you unsubscribe. This storage serves the purpose of being able to send you the newsletter.
In addition, we save your IP addresses and the dates of your registration when you register and confirm your subscription in order to prevent misuse of your personal data and to be able to provide proof of correct sending. The legal basis for the processing of your personal data is Art. 6 Para. 1 Sentence 1 Letter a DSGVO.
The e-mail address is the only mandatory information for sending the newsletter. You have the right to revoke your consent to the sending of the newsletter at any time. Your revocation does not affect the lawfulness of the processing of your personal data until revoked. You can declare your revocation by clicking on the link provided in every newsletter e-mail, using the website form or by sending a message to the contact details given in the imprint.
4. Notes on the guarantee of data security
We take technical and operational security precautions on our pages in order to protect the personal data stored with us against access by third parties, loss or misuse and to enable secure data transfer.
We must point out to you that due to the structure of the Internet, unwanted data access by third parties may occur. It is therefore also your responsibility to protect your data against misuse by encryption or other means. Without appropriate protective measures, unencrypted data in particular can be read by third parties, even if this is done by e-mail.
Integration of external services
1. Integration of social plugins
Our website uses social plug-ins ("plug-ins") from various social networks such as Facebook.com, Twitter.com and Google. The purpose of these plug-ins is to provide you with an opportunity to interact with your contacts and easily distribute interesting information. These plug-ins can be recognized by the respective logo in the network. We use a two-click solution so that there is no data transfer when you simply visit the website.
Only when you click on such a plug-in does your browser establish a direct connection with the servers of the respective network. The content of the plug-in is transmitted directly through the network to your browser and integrated into the website by it. If these networks are located outside the EU or the EEA, we cannot therefore exclude the possibility that your data may be transferred to a server outside the EU/EEA and processed there. We have no influence on the scope or the period of use of the data that the respective network collects with the help of this plug-in and therefore inform you according to our state of knowledge:
By integrating the plug-in, the respective network receives the information that you have called up the corresponding page of our website. If you are logged in to one of the networks, this network can assign this information to your profile. If you do not want the network to collect information about your visit to our website, you must therefore log out beforehand. However, there is always the possibility that the network may find out your IP address and save it even though you have not registered or logged in there. We also do not have any information on the deletion of the collected data by the plug-in provider.
The plug-in provider stores the data collected about you as user profiles and uses these for purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation takes place in particular (also for users who are not logged in) in order to display demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles by the service providers.
The legal basis for the use of the plug-ins is Art. 6 Para. 1 S. 1 lit. f DSGVO. The purpose, duration and scope of the data collection and the further processing and use of your data as well as your rights in this regard and setting options for the protection of your privacy can be found in the data protection information of the respective social networks:
- Facebook: http://www.facebook.com/policy.php.
- Twitter: https://twitter.com/privacy?lang=de=en
- Google+: http://www.google.de/intl/de/policies/privacy/
2. Integration of the Google Tag Manager
We use the [Google Tag Manager] for the delivery of online advertising and the integration of external partners. This enables us to control the delivery of online advertising. This tool works without cookies, but requires the transmission of IP addresses to Google. Here we measure the use and usage of the tag manager. We have activated the anonymisation of the IP address before forwarding it to Google. The legal basis for data processing is Art. 6 Para. 1 S. 1 f) DSGVO]. The deletion of the accrued data takes place after two years.
3. Integration of Google Maps
We do not use Google Maps on our websites.
4. Iintegration of YouTube
Our website uses plugins from the YouTube page operated by Google. The site is operated by YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.
When you visit one of our pages equipped with a YouTube plug-in, a connection is established to YouTube's servers. This will tell the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you can allow YouTube to directly associate your surfing behavior with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of an appealing presentation of our online offers and thus on the basis of Art. 6 Para. 1 lit. f DSGVO. We only record the extent to which YouTube videos integrated into our site are accessed and delete this data after two years.
Our website uses so-called cookies. Cookies are small text files that are stored on your terminal and stored by your browser. They serve to make our offers more user-friendly, more effective and safer. We use so-called temporary cookies, which are automatically deleted when you close your browser ("session cookies"), as well as persistent (permanent) cookies.
You have the choice whether you want to allow the setting of cookies or not. You can make changes in your browser settings. You can choose whether you want to accept all cookies, be informed when cookies are set or reject all cookies. If you choose the last option, it is possible that you will not be able to use our services in full.
When cookies are used, a distinction must be made between the mandatory cookies and those required for further purposes (measurement of access figures, advertising purposes).
2. Mandatory required cookies when using the website
We use session cookies on our websites, which are absolutely necessary for the use of our websites. This includes cookies that enable us to recognize you while you are visiting the site during a single session. These session cookies contribute to the secure use of our offer by enabling the secure processing of the shopping cart function and the payment process.
Below you will find an overview of the cookies that are used by us with your consent given at the beginning of the use of the website. You will also find an opt-out option for each presentation of the use. These are cookies for recording the usage behaviour of our website and cookies that are used for advertising purposes.
The use of tracking cookies enables us to recognize users when they access our website again and to assign usage processes to an internally assigned code number (pseudonym). This enables us to record repeated visits to our website and analyse them in a coherent manner.
Specifically, the following tracking cookies are used:
Tracking by Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Ireland Limited ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help
the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United
States. However, due to the activation of IP anonymisation on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other
contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA where it will be shortened.
Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and
internet usage. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
We use Google Analytics to analyse the use of our website and to improve it regularly. The statistics obtained allow us to improve our services and make them more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the storage of cookies is the consent given (Art. 6 Para. 1 S. 1 lit. a DS-GVO). The further evaluation of the collected data by means of Google Analytics takes place over a period of two years on the basis of Art. 6 Para. 1 S. 1 lit. f DS-GVO.
Further information can also be found at http://tools.google.com/dlpage/gaoptout?hl=en or at https://www.google.de/intl/de/policies/privacy/
(general information about Google Analytics and data protection).
Google Adwords Tracking
We use the services of Google Adwords to draw attention to our attractive offers with the help of advertising media (so-called Google Adwords) on external websites. These advertising media are delivered by Google via so-called "Ad Servers". Ad server cookies are used to evaluate performance parameters such as ad impressions, clicks and conversions. This enables us to determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. If you access our website via a Google ad, Google Adwords stores a cookie on your PC. As a rule, these cookies lose their validity after 30 days and are not intended to identify you personally. The following analysis values are usually stored for this cookie:
- Unique Cookie ID
- Number of ad impressions per placement (Frequency)
- Last Impression (Relevant for Post-View-Conversions)
- OptOut information (marking that the user no longer wishes to be addressed)
These cookies enable Google to recognize your Internet browser. If a user visits certain pages of an AdWords customer's website and the cookie stored on their computer has not yet expired, Google and the customer may recognize that the user clicked on the ad and was directed to that page. Each Adwords customer is assigned a different cookie. Cookies cannot therefore be traced via the websites of Adwords customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. On the basis of these evaluations we can recognise which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information. The legal basis for the storage of cookies by Google is the consent given (Art. 6 Para. 1 S. 1 lit. a DS-GVO).
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. Please note that data processing by Google may take place outside the European Union. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-USFramework. Furthermore, we have no influence on the extent and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge:
Through the integration of "tracking tools", Google receives the information that you have called the corresponding website of our Internet presence, or that you have clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible for the provider to find out and store your IP address. You can find more information about data protection at Google here: http://www.google.com/intl/de/policies/privacy/ and https://services.google.com/sitestats/de.html
Specifically, the following cookies are set:
Use of Google Remarketing
In addition to AdWords tracking, we also use Google Remarketing. This is a retargeting, thus the delivery of interest-based advertising on other advertising spaces outside our offer to deliver. Through this application you can be shown advertisements about the services / products previously viewed on our website after visiting our website when visiting other websites. The cookie stored in your browser is used for recognition. This allows Google to record your interest in certain products based on your previous visit to our website and to use them for the targeted playout of advertisements on other websites. Google does not, according to its own statements, merge the data collected in the course of remarketing with your personal data, which may be stored by Google. In particular, according to Google, a pseudonymisation is used for remarketing.
The purpose of this use is to enable us to advertise to you in a way that is in line with your interests and to advertise our products in a targeted manner. Google has submitted to the EU-US Privacy Shield. The legal basis for the storage of cookies is the consent given (Art. 6 Para. 1 S. 1 lit. a DS-GVO). The further evaluation of the collected data over a period of up to two years is based on Art. 6 para. 1 sentence 1 lit. f DS-GVO.
If you do not wish advertisements tailored to your interests to be displayed, you can deactivate cookies in your browser or notify Google of this in the future using the following link: https://www.google.com/settings/ads/onweb/.
Status: February 2019