Privacy Policy

Privacy Policy

The Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH takes the protection of personal data very seriously. For users to be able to use our website fully, it is necessary to collect certain information when they visit our website. With this privacy policy statement, we are informing users about which data we collect, how we use that data and about their rights as users of our website.

I. Controller pursuant to General Data Protection Regulation (GDPR)

Zukunft – Umwelt – Gesellschaft gGmbH
Stresemannstr. 69-71
10963 Berlin
Germany
Phone: +49 30 72618 0000
Fax: +49 30 72618 0099
Email: kontakt(at)z-u-g.org

II. Name and contact details of data protection officer

For any questions or information on data protection, please contact the data protection officer at Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH:

Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH
Data Protection Officer
Stresemannstr. 69-71
10963 Berlin
Email: datenschutz(at)z-u-g.org

III. Which information is collected and for what purpose?

1. Collection of general data and information (log files)

For each visit made to our website by a data subject or an automated system, a number of general pieces of information and data are collected. This general data and information are stored in the log files on the server. Data and information collected can include the following:

  • Types of browsers used and versions
  • Operating system used by the accessing system
  • Web page from which an accessing system ends up on our website (known as the ‘referer’)
  • Child web pages targeted on our website by an accessing system
  • Date and time that the website was accessed
  • Internet protocol (IP) address in an anonymised format (truncated by last octet)
  • Internet service provider of the accessing system
  • Other similar kinds of data and information that are used to avert hazards in the event of attacks on our information technology systems

When utilising these general kinds of information and data, ZUG draws no inferences about the data subject. Instead, this information is required for the following purposes:

  • Ensuring the correct delivery of content from our website
  • Optimising our website content and marketing for this content
  • Ensuring the long-term functional capability of our information technology systems and the systems used to operate our website
  • In the event of a cyber-attack, providing law enforcement agencies with the information necessary to investigate the crime

This anonymously collected data and information is therefore used by ZUG to prepare statistical analyses, and also analysed with the aim of increasing the level of data protection and data security in our company, so as, ultimately, to guarantee an optimum level of protection for the personal data that we process.

For these stated purposes, we have a legitimate interest in data processing, with the legal basis being point (f) of art. 6(1) of the GDPR.

The anonymous data obtained from the server log files is stored separately from all of the personal data as provided by a data subject. At the end of the respective browser session, log files are erased after no later than seven days, except in cases where their further storage is required for the purposes as given above.

2. Filling out forms with personal data

Some information offers on our website provide the option of filling out forms with personal data.

Users are free to decide whether they wish to submit this data. Only the data needed to deliver the requested service is asked of users. Data is treated as confidential and is only used for the purpose for which it was requested.

If the storage of personal data is required to provide a certain service, the data is only stored for the time period necessary to handle the request or to fulfil the offer or task of the Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH for which the data was requested.

Once users unsubscribe to such a service or it is terminated, personal data is irretrievably deleted after a maximum of 6 weeks. 

3. Links to websites of other providers

Our website contains links to websites of other providers. We would like to expressly point out that these websites process personal data in accordance with their own privacy policies. The Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH has no influence on the compliance of other providers with data protection regulations.

4. Photos for press and public relations work

In connection with our press and public relations work, during events and meetings photos will be taken in which you may be identifiable. You may object to such photos being taken and/or published. Please use the contact details above for such objections.

5. Online Meetings, Telephone Calls, and Webinars

For conducting telephone calls and conference calls (collectively referred to as "Telephone Calls"), online meetings, video conferences, and/or webinars (collectively referred to as "Online Meetings"), we use the conferencing and collaboration solutions Zoom and Webex. Zoom is a service provided by Zoom Video Communications, Inc., and Webex is a service provided by Cisco Systems, Inc., both of which are based in the USA. Additionally, we use Slido as part of Webex to conduct surveys during Online Meetings on both platforms. Slido is a service provided by sli.do s. r. o., based in Slovakia and part of the Cisco Systems, Inc. group.

Types of Data

When conducting Telephone Calls, the following data is processed:

  • Communication Content: Audio, voicemail
  • Recordings (optional): MP4 files of voicemail audio recordings
  • Call History with Participant Information: Details of incoming and outgoing phone numbers, country codes, call date and time, call duration
  • Location Data: Approximate location of the call participants (nearest location)
  • Metadata, Telemetry Data: Session Information (e.g., call result, call type, waiting time), participant IP addresses, device/hardware information

For Online Meetings, various types of data are processed. The scope of data depends on the information you provide before or during the Online Meeting. To participate in an Online Meeting or enter the "meeting room," you must at least provide your name. Personal Data Subject to Processing:

  • User Information: First name, last name, phone number (optional), email address, password (if Single Sign-On is not used), profile picture (optional), department (optional), login credentials
  • Meeting Metadata, Telemetry Data: Subject, description (optional), participant IP addresses, device/hardware information
  • Recordings (optional): MP4 file of all video, audio, and presentation recordings, M4A file of all audio recordings, text file of the Online Meeting chat
  • Text, Audio, and Video Data: You may have the option to use chat, questions, or survey functions during an Online Meeting. Text inputs made by you are processed to display them in the Online Meeting and potentially log them. To enable video display and audio playback, data from your device's microphone and any camera is processed during the meeting. You can turn off or mute the camera or microphone at any time via the Zoom or Webex applications.
  • Survey Results: Results gathered through surveys via Slido.
  • Q&A Results: Answers to questions gathered through Slido.

Scope of Processing

We use Zoom and Webex to conduct Telephone Calls and Online Meetings. If we intend to record Online Meetings, we will transparently inform you in advance and, if necessary, request your consent. The fact of the recording will also be indicated in the respective applications. Telephone Calls are not recorded.

If it is necessary to log the results of an Online Meeting, we will log chat contents. However, this is generally not the case. We will also transparently inform you in advance if this occurs.

In the case of webinars, we may process questions posed by webinar participants for the purposes of recording and follow-up.
We also use Slido with Webex and Zoom to make our meetings more interactive by incorporating surveys and Q&As. These surveys and Q&As can be conducted in real time.

Automated decision-making pursuant to Article 22 GDPR is not employed.

For more information on how personal data is handled, please refer to the privacy policies of the data processors:

Legal Basis

To the extent that personal data of employees of Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH is processed, Article 6(1)(b) GDPR in conjunction with § 26(1) BDSG serves as the legal basis for data processing. Should personal data not be necessary for the establishment, performance, or termination of the employment relationship, but nonetheless be an essential part of using Zoom, Webex, or Slido, Article 6(1)(f) GDPR is the legal basis for data processing. In these cases, our interest lies in the effective conduct of Telephone Calls and Online Meetings and improving direct interaction with participants.

Otherwise, the legal basis for data processing in the context of Telephone Calls and Online Meetings is Article 6(1)(b) GDPR, where these are conducted in the context of contractual relationships.

If no contractual relationship exists, the legal basis is Article 6(1)(f) GDPR. Again, our interest is in the effective conduct of Telephone Calls and Online Meetings.

If you have consented to video and audio recording of Online Meetings, the legality of this processing is based on your consent pursuant to Article 6(1)(a) GDPR.

Disclosure to Third Parties

Personal data processed in connection with participation in Telephone Calls and Online Meetings is generally not disclosed to third parties unless it is intended for such disclosure. Please note that content from Telephone Calls and Online Meetings, like in in-person meetings, often serves to communicate information with clients, prospects, or third parties and is thus intended for disclosure.

The providers Zoom Video Communications, Inc. and Cisco Systems, Inc., as well as sli.do s. r. o., necessarily have access to the aforementioned data as provided in our data processing agreements.

In the context of support services (Zoom Phone), our service provider WTG communications GmbH, with whom we have also concluded a data processing agreement, may have access to personal data.

Data Processing Outside the European Union

Zoom and Webex are services provided by providers based in the USA. Therefore, personal data is also processed in a third country.

Zoom Video Communications, Inc. and Cisco Systems, Inc. are certified under the Data Privacy Framework, so an adequacy decision under Article 45 GDPR is in place for transfers to third countries. Additionally, data processing agreements including standard contractual clauses have been concluded with both companies, providing an adequate guarantee pursuant to Article 46(1) and (2)(c) GDPR. As additional protective measures, we have configured our setup to use only data centers within the EU/EEA.

Slido s. r. o. is part of the Cisco Systems, Inc. group. Therefore, it cannot be excluded that personal data may be transferred to the USA when using Slido. The same applies to data transfers to the USA as stated above for Cisco Systems, Inc.

Data Deletion

Audio and video content, if not recorded, is not (locally) stored. We generally delete personal data when there is no longer a need for its retention. A need may exist if the data is required to fulfill contractual obligations, to check and assert or defend warranty and potentially guarantee claims. In the case of statutory retention obligations, deletion is considered only after the expiration of the respective retention period.

IV. How do we protect children and young people (protection of minors)?

Persons under the age of 18 should not submit personal information to us without the consent of their parent or legal guardian. We do not request personal data from children or young people without the consent of their parents or legal guardian. We do not knowingly collect such data, and we do not pass it on to third parties.

V. Why do we store personal data?

Generally, submitting personal data is not required when using our website. If we store personal data on our website, it is only done with the users’ consent, which can be withdrawn at any time.

In any other case, we only process personal data when legally required to do so (pursuant to Article 6 (1) (c) GDPR), when processing is necessary for performing the tasks of the Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH, when it is in the public interest or in the exercise of official authority (pursuant to Article 6 (1) (e) GDPR in conjunction with Article 3 of the Federal Data Protection Act (BDSG).

VI. Who do we pass data on to?

We operate our website in cooperation with external service providers. Where personal data is processed (for example, for sending newsletters or processing publication orders), we have put in place organisational and technical measures to ensure that our external service providers comply with data protection regulations.

Unless otherwise specified, data stored by our website is processed by our main service provider coding. powerful. systems. CPS GmbH, which is located in the Federal Republic of Germany. If personal data is passed on to third parties, the respective page is labelled accordingly.

VII. What are the rights of users of our website?

With regard to the processing of personal data, visitors of the website of the Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH enjoy the rights stipulated in Articles 12 to 22 GDPR:

  • Right of access pursuant to Article 15 GDPR
    This right grants full access to relevant personal data and other important criteria such as purposes of processing or storage period. The exemptions specified in Article 34 BDSG apply.
  • Right to rectification pursuant to Article 16 GDPR
    This right gives users the possibility to rectify inaccurate personal data concerning them.
  • Right to erasure pursuant to Article 17 GDPR
    This right gives users the possibility to have data deleted. For data to be deleted, it is necessary that the personal data is no longer required, was unlawfully processed or that the consent has been withdrawn. The exemptions specified in Article 35 BDSG apply.
  • Right to restriction of processing pursuant to Article 18 GDPR
    This right gives users the possibility to provisionally prevent further processing of the relevant personal data. This applies, in particular, in a review phase of the user establishing, exercising or defending other legal claims.
  • Right to data portability pursuant to Article 20 GDPR
    This provision gives users the right to obtain relevant personal data in a commonly used, machine-readable format, for example pdf, from the controller in order to pass it on to other controllers where necessary.
  • Right to object pursuant to Article 21 GDPR
    This right provides users with the possibility to object, on grounds relating to their particular situation, to processing relevant personal data where this is justified with a view to performing public tasks or lies in the public or private interest. Pursuant to Article 36 BDSG, this provision does not apply where an official authority is legally obligated to process the data.
  • Right to withdraw consent pursuant to Article 7 (3) GDPR
    Users have the right to withdraw their consent for the future at any time. An option to withdraw consent is available to users on the website where the consent was given before.

Exercising these rights is free of charge and is provided in line with the user’s information rights. For more information, please contact the data protection officer at Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH.

VIII. Right to submit complaints to supervisory authority

In cases where the Zukunft – Umwelt – Gesellschaft (ZUG) gGmbH processes personal data, users have the right to lodge a complaint with the supervisory authority for data protection. The competent supervisory authority is:

Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit
Husarenstraße 30
53117 Bonn
Phone: +49 0228 99 7799-0
Email: poststelle(at)bfdi.bund.de
Internet: www.bfdi.bund.de

More information

Participation in Online and In-Person Events

Cookies

Legal information