Data protection

Thank you for your interest in our services. Your personal data will be processed confidentially and according to the applicable data protection regulations as well as this privacy statement. The aim of this statement is to inform you about the type, extent and purpose of the personal data processed by us. Data subjects will be informed about their rights and the ways in which they can contact us.

The use of the „Leipzig trails“ website of Netzwerk Energie & Umwelt e.V. is basically possible without any indication of personal data. When contacting us via our contact form, you only need to provide us with the following data to enable communication: Name and first name, e-mail address and the information you provide in the message field. Personal data is processed in accordance with the requirements of the General Data Protection Regulation and the country-specific data protection regulations applicable to Netzwerk Energie & Umwelt e.V.

Contact information

Every data subject can contact our data controller and the contract processor directly at any time with any questions or suggestions regarding data protection.

Name and address of the data controller

The data controller within the meaning of the GDPR, other data protection laws applicable in the member states of the European Union and further provisions of a data protection nature is:

Netzwerk Energie & Umwelt e.V.
Augustusplatz 7
04109 Leipzig
Tel.: +49 341 1213317
Email: ziliack@energiemetropole-leipzig.de
Website: energiemetropole-leipzig.de

Name and address of the processor

Thomas Lingk
Deputy Chairman
Netzwerk Energie & Umwelt e.V.
Augustusplatz 7
04109 Leipzig
Tel.: +49 341 1235851
Email: vorstand@energiemetropole-leipzig.de

Definition of terms

The privacy statement of the Netzwerk Energie & Umwelt e.V. is based on the terms used by the European directives and ordinances when issuing the General Data Protection Regulation (GDPR). Our privacy statement should be easy to read and understand for the public as well as for our customers and business partners. In order to guarantee this, we will first define the terms used:

Personal data
Personal data is any information relating to an identified or identifiable natural person (hereinafter „data subject“). A natural person is considered identifiable if they can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more specific characteristics expressing the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.

Data subject
A data subject is any identified or identifiable natural person whose personal data is processed by the controller.

Processing
Processing means any operation or set of operations which is carried out with or without the aid of automated means relating to personal data, such as collection, recording, organization, sorting, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, matching or linking, restriction, deletion or destruction.

Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.

Profiling
Profiling is any automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular, to analyze or predict aspects of that natural person’s work performance, economic situation, health, personal preferences, interests, reliability, conduct, whereabouts or movements.

Pseudonymization
Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the provision of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures ensuring that the personal data are not attributed to an identified or identifiable natural person.

Data controller
The data controller is the natural or legal person, public authority, agency or another body which alone or jointly with others determines the purposes and means of the processing of personal data.

Processor
The processor is a natural or legal person, public authority, agency or another body which processes personal data on behalf of the controller.

Recipient
The recipient is a natural or legal person, public authority, agency or another body to whom personal data are disclosed, whether or not that person is a third party. However, public authorities which may receive personal data in the course of a specific investigation task under EU law or the law of the member states are not considered recipients.

Third party
A third party is a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons authorized to process the personal data under the direct responsibility of the controller or processor.

Consent
Consent means any voluntary, informed and unequivocal expression of the data subject’s intention to consent to the particular case, in the form of a statement or other unambiguous confirmatory act by which the data subject indicates their consent to the processing of his or her personal data.

Secure data transmission

The website of Netzwerk Energie & Umwelt e.V. uses a so-called SSL (Secure Socket Layer) certificate. This ensures secure data transmission. In addition, we secure our websites and other systems by technical and organizational measures against loss, destruction, access, alteration or distribution of your data by unauthorized persons.

Cookies

The website of Netzwerk Energie & Umwelt e.V. uses cookies. Cookies are text files which are stored on a computer system via an Internet browser.

Cookies contain a unique identifier, the so-called cookie ID. It consists of a string of characters through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the visited Internet pages and servers to distinguish the individual browser of the person concerned from other Internet browsers that contain other cookies. A particular Internet browser can be recognized and identified by its unique cookie ID.

Netzwerk Energie & Umwelt e.V. can provide users of this website with more user-friendly services through the use of cookies than would be possible without the setting of cookies. A cookie can be used to optimize the information and offers on our website in the interests of the user. As previously stated, cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. Users of a website that uses cookies, for example, do not have to re-enter their access data each time they visit the website because it is transferred to the website and the cookies are stored on the user’s computer system.

The person concerned can prevent the cookies from being set by our website by means of an appropriate setting in the Internet browser used and thus permanently object to the setting of cookies at any time. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all standard Internet browsers. If the data subject deactivates the cookies settings in the Internet browser used, not all functions of our website may be fully usable under certain circumstances.

Recording of general data and information

The website of Netzwerk Energie & Umwelt e.V.records a series of general data and information each time a data subject or an automated system accesses the website. This general data and information is stored in the log files of the server. The types of browsers and versions used, the operating system used by the accessing system, the website from which an accessing system accesses our website (so-called referrers), the subsites which are accessed via an accessing system on our website, the date and time of access to the website, an Internet protocol address (IP address), the Internet service provider of the accessing system and other similar data and information which serve to protect against dangers in the event of attacks on our information technology systems may be recorded.

When using this general data and information, Netzwerk Energie & Umwelt e.V. does not draw any conclusions about the data subject. This information is required in order to correctly deliver the contents of our website, to optimize the contents of our website, to guarantee the long-term functionality of our information technology systems and the technology of our website and to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack. The anonymously recorded data and information are therefore evaluated by Netzwerk Energie & Umwelt e.V. both statistically and with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimum level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by the data subject.

Routine deletion and blocking of personal data

The controller will process and store the personal data of the data subject only for the period necessary to achieve the storage purpose or as provided for in the laws or regulations of the Member State to which the controller is subject by the European Data Protection Supervisor or any other lawmaker. If the storage purpose no longer applies or if a storage period prescribed by the EU legislation or other laws or regulations expires, the personal data is routinely blocked or deleted in accordance with the statutory provisions.

Rights of the data subject

a) Right to confirmation
Any data subject has the right to obtain from the controller confirmation as to whether and how personal data is processed. If a data subject wishes to exercise this right of confirmation, they can contact our controller or the processor at any time.

b) Right to information
Any data subject affected by the processing of personal data has the right to obtain information concerning the personal data relating to their person which has been stored, as well as a copy of such information, at any time from the controller, free of charge. The data subject is also entitled to information on the following:

the purposes of the processing
the categories of personal data processed
the recipients or categories of recipients, if the personal data has been or will be disclosed to them, in particular recipients in third countries or international organizations
if possible, the planned duration for which the personal data will be stored or, if that is not possible, the criteria for determining that duration
the existence of a right to the rectification or deletion of personal data concerning their or to the restriction of the processing by the controller or of a right to object to such processing
the existence of a right of appeal to a supervisory authority
if the personal data is not collected from the data subject: All available information on the origin of the data
the existence of automated decision-making, including profiling, in accordance with Article 22(1) and (4) of the GDPR and – at least in such cases – meaningful information on the method involved and the scope and intended impact of such processing on the data subject. The data subject also has the right to know whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to obtain information on the appropriate safeguards in connection with the transfer.  If a data subject wishes to exercise this right to information, they can contact our data controller or the processor at any time.

c) Right of rectification
Any data subject affected by the processing of personal data has the right to demand rectification without delay of inaccurate personal data concerning them. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data, including by means of a supplementary statement. If a data subject wishes to exercise this right of rectification, they may contact our controller or the processor at any time.

d) Right to deletion (right to be forgotten)
Any data subject who is affected by the processing of personal data has the right to demand that the controller deletes the personal data concerning them without delay, if one of the following reasons applies and if the processing is not necessary:

•   The personal data have been collected for such purposes or processed in any other way for which they are no longer necessary.
•   The data subject revokes their consent on which the processing was based in accordance with Art. 6 Section 1 a GDPR or Art. 9 Section 2 a GDPR and there is no other legal basis for the processing.
•   The data subject objects to the processing in accordance with Art. 21 Section 1 GDPR and there are no overriding legitimate reasons for the processing, or the data subject objects to the processing in accordance with Art. 21 Section 2 GDPR.
•   The personal data was processed unlawfully.
•   The deletion of the personal data is necessary for the fulfillment of a legal obligation in accordance with EU law or the law of the member states to which the data controller is subject.
•   The personal data was collected in relation to services offered by the information society in accordance with Art. 8 Section 1 GDPR.

If one of the above reasons applies and a data subject wishes to have personal data stored by the data controller deleted, they can contact our data controller or the processor at any time. If the personal data has been made public by Netzwerk Energie & Umwelt e.V. and if our company as the data controller is obliged to delete the personal data in accordance with Art. 17 Section 1 GDPR, Netzwerk Energie & Umwelt e.V. will take appropriate measures, also of a technical nature, taking into account the available technology and the implementation costs, to inform other data controllers who process the published personal data that the data subject has requested these other data controllers to delete all links to this personal data or copies or replications of this personal data, insofar as the processing is not required. The data controller will take the necessary steps in individual cases.

e) Right to restriction of processing
Any data subject affected by the processing of personal data has the right to request the controller to limit the processing if one of the following conditions applies:
•   The accuracy of the personal data is contested by the data subject for a period of time which allows the controller to verify the accuracy of the personal data.
•   The processing is unlawful and the data subject refuses to erase the personal data and instead requests that the use of the personal data be restricted.
•   The controller no longer needs the personal data for the purposes of processing, but the data subject needs it for the assertion, exercise or defense of legal rights.
•   The data subject has lodged an objection to the processing in accordance with Art. 21 Section 1 GDPR and it is not yet clear whether the legitimate reasons of the data controller outweigh those of the data subject. If any of the above conditions are met and a data subject wishes to request the restriction of personal data stored at Netzwerk Energie & Umwelt e.V., they can contact our data protection officer or another employee of the data controller at any time. The data controller or another employee will arrange for the processing to be restricted.

f) Right to data portability
Any data subject who is subject to any processing of personal data has the right to obtain personal data concerning them, which the data subject has provided to a controller, in a structured, common and machine-readable format. The data subject also has the right to transfer such data to another data controller without being impeded by the controller to whom the personal data has been provided, insofar as the processing is based on consent in accordance with Art. 6 Section 1 a GDPR or Art. 9 Section 2 a GDPR or on a contract in accordance with Art. 6 Section 1 b GDPR and the processing is carried out by means of automated procedures, insofar as the processing is not necessary for the performance of a task in the public interest or in the exercise of official authority assigned to the controller. Furthermore, in exercising their right to data portability pursuant to Art. 20 para. 1 DS-GVO, the data subject has the right to obtain that personal data be transferred directly from one controller to another controller, insofar as this is technically feasible and insofar as this does not impair the rights and freedoms of other persons.In order to assert the right to data portability, the data subject may contact our data controller or the processor at any time.

g) Right of objection
The data subject has the right to object at any time, for reasons related to their particular situation, to the processing of personal data concerning them carried out in accordance with Art.6 Section 1 e or f GDPR. This also applies to profiling based on these provisions. In the event of an objection, Netzwerk Energie & Umwelt e.V. will no longer process the personal data unless it can be proven that there are compelling reasons for the processing which are worthy of protection and which outweigh the interests, rights and freedoms of the person concerned, or the processing serves to assert, exercise or defend legal claims. If Netzwerk Energie & Umwelt e.V. processes personal data in order to conduct direct advertising, the data subject has the right to object to the processing of personal data for the purpose of such advertising at any time. This also applies to profiling if it is connected with such direct advertising. If the data subject objects to the processing for direct marketing purposes by the Netzwerk Energie & Umwelt e.V., the data will no longer be processed for these purposes.In addition, the data subject has the right to object to the processing of personal data concerning them by Netzwerk Energie & Umwelt e.V. for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Section 1 GDPR for reasons arising from their particular situation, unless such processing is necessary for the performance of a task in the public interest.To exercise the right to object, the data subject may contact our controller or the processor directly. Notwithstanding Directive 2002/58/EC, the data subject is also free to exercise their right of objection by means of automated procedures using technical specifications in connection with the use of information society services.

h) Automated decisions in individual cases including profiling
Any data subject who is affected by the processing of personal data has the right not to be subject to a decision based solely on automated processing, including profiling, which has legal effects upon them or significantly affects them in a similar way, unless the decision is necessary for the conclusion or performance of a contract between the data subject and the controller or is authorized by EU or national law to which the controller is subject and which contains appropriate measures to safeguard the rights and freedoms and the legitimate interests of the data subject or is taken with the express consent of the data subject. If the decision is necessary for the conclusion or performance of a contract between the data subject and the controller or is taken with the express consent of the data subject, Netzwerk Energie & Umwelt e.V. will take appropriate measures to safeguard the rights, freedoms and legitimate interests of the data subject, including at least the right to have the data subject intervene, to state their point of view and to challenge the decision.  If the data subject wishes to assert rights relating to automated decisions,they may contact our controller or the processor at any time.

i) Right to revoke consent under data protection law
Any data subject affected by the processing of personal data has the right to withdraw consent to the processing of their personal data at any time. If the data subject wishes to exercise their right to revoke their consent, they may at our data controller or the processor any time contact.

Privacy statement regarding the use of Google Analytics (with anonymization function)

The data controller has integrated the Google Analytics component (with anonymization function) on this website. Google Analytics is a web analysis service. Web analysis is the recording, collection and evaluation of data on the behavior of visitors to websites. Among other things, a web analysis service collects data on which website a data subject accessed the website from (so-called referrers), which subpages of the website were accessed or how often and for how long a subpage was viewed.

The Google Analytics component is operated by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The data controller uses the „_gat._anonymizeIp“ addition for the web analysis via Google Analytics. This addition is used by Google to shorten and anonymize the IP address of the Internet connection of the data subject, regardless of whether the access to our website is from a member state of the European Union or from another state party to the Agreement on the European Economic Area or beyond.

The purpose of the Google Analytics component is to analyze the flow of visitors to our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us showing the activities on our website and to provide other services in connection with the use of our website.
Google Analytics places a cookie on the information technology system of the data subject. What cookies are has already been explained above. When the cookie is set, Google is able to analyze the use of our website. Each time you access one of the individual pages of this website, which is operated by the data controller and on which a Google Analytics component has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google obtains knowledge of personal data, such as the IP address of the data subject which Google uses, among other things, to track the origin of visitors and clicks and subsequently to enable commission settlements.
The cookie is used to store personal information such as the access time, the location from which the access originated and the frequency of visits to our website by the data subject. Each time you visit our website, this personal data, including the IP address of the Internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the USA. Google may share this personal data collected through the technical process with third parties.

The data subject can at any time prevent the setting of cookies by our website, as described above, by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the data subject. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

Furthermore, it is possible for the data subject to object to and prevent the collection of data generated by Google Analytics and relating to the use of this website and the processing of this data by Google. For this purpose, the data subject must download and install a browser add-on from the https://tools.google.com/dlpage/gaoptout link. This browser add-on informs Google Analytics via JavaScript that no data and information on visits to Internet pages may be transmitted to Google Analytics. The installation of the browser add-on is considered an objection by Google. If the data subject’s information technology system is later deleted, formatted or reinstalled, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the person concerned or by another person within his/her sphere of control, the browser add-on may be reinstalled or reactivated.

More information and Google’s current privacy statement can be found at https://www.google.de/intl/de/policies/privacy/ and http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail at https://www.google.com/intl/de_de/analytics/.

Privacy statement regarding the use of YouTube

The data controller has integrated YouTube components into this website. YouTube is an Internet video portal that enables video publishers to post video clips and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programs, but also music videos, trailers or videos made by users themselves can be accessed via the Internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Each time an individual page of this website, which is operated by the data controller, is accessed and contains an integrated YouTube component (YouTube video), the Internet browser on the information technology system of the data subject is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google obtain information about which specific subpage of our website is visited by the data subject.

If the data subject is logged in to YouTube at the same time and accesses a subpage containing a YouTube video, YouTube recognizes which specific subpage of our website the data subject is visiting. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is logged on to YouTube at the same time as that they visit our website; this occurs regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want YouTube and Google to receive such information, they may prevent the transmission by logging out of their YouTube account before visiting our website.

The YouTube privacy statement is available at https://www.google.de/intl/de/policies/privacy/ and provides details about the collection, processing and use of personal data by YouTube and Google.

Privacy statement regarding the use of Facebook plug-ins ("Like" button)

Our pages contain plug-ins of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. You can recognize the Facebook plug-ins by the Facebook logo or the „Like“ button on our page. An overview of the Facebook plug-ins can be found here: Here.

When you visit our pages, the plug-in establishes a direct connection between your browser and the Facebook server. Facebook receives the information that you have visited our site with your IP address. If you click the Facebook „Like“ button while logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate the visit to our pages with your user account. We wish to point out that, as the provider of the pages, we do not have any knowledge of the content of the data transmitted or its use by Facebook. Further information on this can be found in Facebook’s privacy statement.