Data Protection

We, the BOHNEN Public Affairs GmbH, Reinhardtstrasse 35, 10117 Berlin, Germany herewith inform you about the processing of personal data for which we are responsible in the sense of the EU General Data Protection Regulation (GDPR).

You can reach our data protection officer by sending an e-mail to vc@bohnen-pa.com or by sending a letter to BOHNEN Public Affairs GmbH, Reinhardtstrasse 35, 10117 Berlin.

Below we have compiled the most important information on typical data processing for you, broken down by groups of data subjects. For certain data processing operations, which only concern specific groups, the information requirements are fulfilled separately.

Where the term "data" is used, only personal data within the meaning of the GDPR are meant.

1. Website Visitors

2. Participants in Projects and Events of BOHNEN Public Affairs GmbH

3. Participants in Online Events via Zoom

4. Applicants for a Project or Event of BOHNEN Public Affairs GmbH

5. Applicants for an Employment with BOHNEN Public Affairs GmbH

6. Newsletter Recipients

7. Business Partners and their Employees

8. Interested Parties and Communication Partners

9. Rights of Data Subjects and Further Information

 

1. Website Visitors

1.1    Server log data
When using the website, certain information is sent to the server of our website by the browser used on your device for technical reasons. This data is stored and processed on our server.

(i)  We process the following data for the purpose of providing the contents of the website that you have visited, to ensure the security of the IT infrastructure used, to correct errors, to enable and simplify searches on the website and to manage cookies. A change of the purpose is not planned.
(ii)  The data processed is HTTP data: HTTP data is protocol data that is generated for technical reasons when the Website is visited via the Hypertext Transfer Protocol (Secure) (HTTP(S)): This includes IP address, type and version of your Internet browser, operating system used, the page visited, the page previously visited (referrer URL), date and time of the visit. HTTP(S) data also accumulates on the servers of service providers (e.g. when requesting third-party content).
(iii)  The legal basis for the processing is our legitimate interest in the operation of an internet presence and the communication with communication partners in accordance with Article 6 (1) (f) GDPR.
(iv)  The data is automatically transmitted by the browser of the website visitor.
(v)  Recipients of the personal data are IT service providers which we use as processors within the framework of a data processing agreement.
(vi)  IP addresses are anonymized after 24 hours at the latest. Pseudonymous usage data is deleted after six months.
(vii) Without disclosure of personal data such as the IP address, the use of the website is not possible. Communication via the website without disclosure of data is technically not possible.

1.2    Required Cookies – Google Tag Manager
We use cookies on our website. Cookies are small text files containing information that can be stored on the user's device via the browser when visiting a website. The information stored in cookies can be read out and processed when the website is visited again using the same device. In doing so, we use processing and storage functions of the browser of your device and collect information from the storage of the browser of your device.
In the structure of our privacy policy, we differentiate between „Required Cookies“, „Statistical Cookies“, „Marketing Cookies“ and „Third-Party Multi- and Social Media Content“. Cookies that are required for the functioning of the website, so called „Required Cookies“, cannot be deactivated via the cookie management function of this website. You can generally deactivate cookies at any time in your browser. Different browsers offer different ways to configure the cookie settings in the browser. However, we would like to point out that some functions of the website may not function or no longer function properly if you generally deactivate cookies in your browser.

We use the Google Tag Manager on our website. The Google Tag Manager enables us to manage cookies and control their placement. This enables us to implement, for example, your consent, a revocation of consent or an opt-out. The Google Tag Manager does not set its own cookies and does not process data stored in cookies.

(i)  The purpose of the data processing is to control the placement of cookies on our website and to ensure the security of the application. A change of purpose is not planned.

(ii)  The processed data is HTTP data: HTTP data is protocol data that is generated for technical reasons when the Website is visited via the Hypertext Transfer Protocol (Secure) (HTTP(S)): This includes IP address, type and version of your Internet browser, operating system used, the page visited, the page previously visited (referrer URL), date and time of the visit. HTTP(S) data also accumulates on the servers of service providers (e.g. when requesting third-party content). Your IP address is automatically anonymized during processing.

(iii)  The legal basis for the processing is our legitimate interest in the simple and reliable control of cookies in accordance with Article 6 (1) (f) GDPR.

(iv)  The data is automatically transmitted by the browser of the user.

(v)  The recipient of the data is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, which we use as processor within the framework of a data processing agreement.

(vi)  IP addresses will be anonymized after 24 hours at the latest. Pseudonymous usage data will be deleted after six months.

(vii)  Without disclosure of personal data the use of the website is not possible. Communication via the website without disclosure of data is technically not possible.

1.3    Statistical Cookies – Google Analytics
We use cookies on our website. Cookies are small text files containing information that can be stored on the user's device via the browser when visiting a website. The information stored in cookies can be read out and processed when the website is visited again using the same device. In doing so, we use processing and storage functions of the browser of your device and collect information from the storage of the browser of your device.
In the structure of our privacy policy, we differentiate between „Required Cookies“, „Statistical Cookies“, „Marketing Cookies“ and „Third-Party Multi- and Social Media Content“. Depending on their function and purpose, the use of certain cookies may require the user's consent. Your consent is given through a so-called "Cookie Banner": When you visit our website, we display our cookie banner. In our cookie banner you can declare your consent to the use of all cookies requiring consent on this website by clicking on the "Select all" button. Without such consent, the cookies requiring consent are not activated. By setting the individual sliders, you can also make sophisticated settings with regard to the individual cookies or completely reject all cookies requiring consent and then click on the corresponding button to "Submit Preferences". We store your settings in the form of a cookie. Alternatively, you have the possibility to access our cookie banner by clicking on the "Change Cookie Preferences" button. In the cookie board, you can make an individual selection of cookies and customize them at a later time. We store your cookie settings in the form of a cookie on your device in order to determine whether you have already made cookie settings the next time you visit the website.
 

If you have given your consent, we use the web analysis tool Google Analytics on our website. With the help of Google Analytics, we can analyze the user behaviour of visitors to our website in pseudonymized and anonymised form.
You can deactivate the data processing by Google Analytics at any time in our cookie banner. Alternatively, you can install a browser plug-in from Google which prevents data collection by Google Analytics: tools.google.com/dlpage/gaoptout;

(i)  The purpose of data processing is to analyze user behavior on our website. A change of purpose is not planned.
(ii)  The processed data are:
■  Google Analytics HTTP data:

This is protocol data that is generated for technical reasons when using the web analysis tool Google Analytics via the Hypertext Transfer Protocol (Secure) (HTTP(S)) used on the website: This includes IP address, type and version of your Internet browser, operating system used, the page visited, the page previously visited (referrer URL), date and time of the visit.
■    Google Analytics device data:
Data generated by the web analysis tool Google Analytics and assigned to your device: This includes a unique ID for the (re-)recognition of returning visitors (so-called "client ID") as well as certain technical parameters for controlling data collection for web analysis.
■    Google Analytics measurement data:
Device-related raw data (so-called "dimensions" and " measurement results"), which are collected and analyzed by the web analysis tool Google Analytics when using our website: This includes, above all, information about the sources through which visitors reach our website, information about the location, the browser and the device used, information about the use of the website (in particular page views, frequency of visits and length of stay on accessed pages) as well as information about the fulfilment of certain purposes (in particular transactions in the online shop). The data is assigned to the client ID assigned to your device. As a result, device-related usage profiles are created in which all device-related raw data is combined into a client ID. The data that we collect using Google Analytics does not enable us to identify you personally (i.e. by your civil name). We also do not merge the device-related raw data and the resulting device-related usage profiles with data that directly identifies you personally without your consent.
■    Google Analytics report data:
Data contained in aggregated segment and device-related reports generated by the Google Analytics web analysis tool based on the analysis of device-related raw data.
(iii)  The legal basis for the processing is your consent in accordance with Article 6 (1) (a) GDPR.
(iv)  The data is automatically transmitted by the browser of the user.
(v)  The recipient of the data is Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) which we use as processor within the framework of a data processing agreement. Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as its service provider. The basis for data processing in the USA is your consent granted through the cookie banner in accordance with Article 49 (1) (a) GDPR. In the USA, there is no level of data protection comparable to the provisions of the GDPR. It is possible that US authorities may access personal data without us or you being informed. An enforcement of your rights is probably not possible in the USA. You can withdraw your given consent at any time with effect for the future through the cookie banner.
(vi)  The data will be deleted after 6 months.
(vii)  The provision of data is not required by law or contract or necessary for the conclusion of a contract. There is no obligation on the data subject to provide the data. If the data is not provided, we cannot make web analysis using Google Analytics.
 

1.4  Marketing Cookies – Facebook Pixel
We use cookies on our website. Cookies are small text files containing information that can be stored on the user's device via the browser when visiting a website. The information stored in cookies can be read out and processed when the website is visited again using the same device. In doing so, we use processing and storage functions of the browser of your device and collect information from the storage of the browser of your device.
In the structure of our privacy policy, we differentiate between „Required Cookies“, „Statistical Cookies“, „Marketing Cookies“ and „Third-Party Multi- and Social Media Content“. Depending on their function and purpose, the use of certain cookies may require the user's consent. Your consent is given through a so-called cookie banner: When you visit our website, we display our cookie banner. In our cookie banner you can declare your consent to the use of all cookies requiring consent on this website by clicking on the "Select all" button. Without such consent, the cookies requiring consent are not activated. By setting the individual sliders, you can also make sophisticated settings with regard to the individual cookies or completely reject all cookies requiring consent and then click on the corresponding button to "Submit Preferences". We store your settings in the form of a cookie. Alternatively, you have the possibility to access our cookie banner by clicking on the "Change Cookie Preferences" button. In the cookie board, you can make an individual selection of cookies and customize them at a later time. We store your cookie settings in the form of a cookie on your device in order to determine whether you have already made cookie settings the next time you visit the website.
 

If you have given your consent, we use the “Facebook Pixel”. For this purpose, cookies from Facebook Ireland Limited, Harbour, D2, 4 Grand Canal Quay, Square, Dublin, Irland („Facebook“) are used. The Facebook Pixel enables Facebook to collect information about activities of users of our website. By implementing the Facebook Pixel we enable Facebook to collect personal data. The collection and processing of this data takes place after your consent and is the sole responsibility of Facebook. We have no knowledge of further details of the processing of personal data in the area of data controllership of Facebook. For information about the processing of personal data by Facebook, please refer to the Facebook Privacy Policy: de-de.facebook.com/about/privacy/.

Facebook provides us with the evaluations created on the basis of the collected data or further information only in aggregated, anonymized form. We cannot assign the information provided to us to any natural person.

You can deactivate the data processing by Google Facebook at any time in our "Cookie Board". Alternatively, you can deactivate the “Facebook Pixel” for the browser you are currently using by deactivating the storage of cookies in your browser settings.

(i)    The purpose of the Facebook Pixel is to enable Facebook to collect and process user data on our website. The purposes of processing by Facebook are solely determined by Facebook (https://www.facebook.com/about/privacy)
(ii)    According to Facebook the processed data are:
■     Facebook Pixel http data
This is protocol data that is generated for technical reasons when using the Facebook Pixel via the Hypertext Transfer Protocol (Secure) (HTTP(S)) used on the website: This includes IP address, type and version of your Internet browser, operating system used, the page visited, the page previously visited (referrer URL), date and time of the visit.
■    Facebook Pixel device data
Data generated by the Facebook Pixel and assigned to your device. This includes a unique ID for (re)recognition of returning visitors.
■    Facebook Pixel event data
Data that Facebook collects through the Facebook Pixel under assignment to the unique visitor ID of the respective visitor contained in the Facebook Pixel device data: This includes actions that take place on the website (so-called "events"). This includes, for example, the specific URL of the page visited on www.corporate-political-responsibility.org.
This also includes information associated with the actions (so-called "parameters"). This includes, for example, whether the visitor has sent the form to register for the GHS newsletter.
■    Facebook Pixel analysis data
Data that Facebook generates on the basis of the information captured by the Facebook Pixel under assignment to the unique visitor ID of the respective visitor contained in the Facebook Pixel device data: This includes information about the effectiveness of Facebook ads and user targeting for Facebook ads. Facebook may also generate additional data from the information collected for its own purposes or for the purposes of third parties. We have no knowledge of the details of data generated by Facebook.
(iii)    The legal basis for enabling the collection of personal data on our website by Facebook is your consent in accordance with Article 6 (1) (a) GDPR. We do not process personal data in our area of data controllership. We have no knowledge about the details of processing data in the area of data controllership of Facebook, in particular of the legal basis used by Facebook for the processing.
(iv)    Facebook generates the Facebook Pixel analysis data independently. We have no knowledge about the usage of further data sources by Facebook.
(v)    The recipient of the data is Facebook Ireland Limited, as data controller for collecting and processing personal data. Facebook Ireland Limited uses Facebook Inc. in the USA (1 Hacker Way, Menlos Park, CA 94025, USA) as its service provider. The basis for data processing in the USA is your consent granted through the cookie banner in accordance with Article 49 (1) (a) GDPR. In the USA, there is no level of data protection comparable to the provisions of the GDPR. It is possible that US authorities may access personal data without us or you being informed. An enforcement of your rights is probably not possible in the USA. You can withdraw your given consent at any time with effect for the future through the cookie banner.
(vi)    We do not collect and store this data ourselves. The collecting and processing of this data is the sole responsibility of Facebook. We have no knowledge about the duration of storage.
(vii)    The provision of data is not required by law or contract or necessary for the conclusion of a contract. There is no obligation on the data subject to provide the data. If the data is not provided, Facebook cannot offer the function of the Facebook Pixel.
(viii)    We do not use any methods of automated individual decision-making. We have no knowledge of further details of the processing of personal data in the area of data controllership of Facebook, in particular of any automated individual decision-making or possible data processing in the USA.

1.5    Third-Party Multi- and Social Media Content

We integrate multimedia content and content from social media platforms into our website if you have given your consent to this via our cookie banner.

a)    Soundcloud Embedding
By enabling the corresponding slider in the cookie banner "Soundcloud" in the category " Third-Party Multi- and Social Media Content" to play the content, you agree that we allow Soundcloud to collect data for its own purposes. The collection and processing of this data is the sole responsibility of Soundcloud Limited, 20 Old Bailey, London, EC4M 7 AN, UK.

Our website then links to audio files that are stored and available on Soundcloud. As soon as you activate the corresponding slider in the cookie banner, the file is loaded from Soundcloud. Technically, the same thing happens then as would happen if you clicked a link to go to the Soundcloud website: Soundcloud receives all information that your browser automatically transmits (including your IP address). Soundcloud also sets its own cookies on your device. This also happens if you do not have a Soundcloud user account. If you are logged in at Soundcloud, your data will be associated directly with your account. If you do not want the association to your Soundcloud user account, you must log out of Soundcloud before clicking on the audio file.
We have no knowledge of further details of the processing of personal data in the area of data controllership of Soundcloud or a data processing in the USA. BOHNEN Public Affairs GmbH has no influence on the data processing of Soundcloud.
For information about the processing of personal data by Soundcloud, please refer to the Soundcloud Privacy Policy: https://soundcloud.com/pages/privacy

b)  Podigee Podcast Hosting
By enabling the corresponding slider in the cookie banner for "Podigee Podcast Hosting" in the category " Third-Party Multi- and Social Media Content " to play the content of podcasts, you agree that we allow Podigee to collect data for its own purposes. The collection and processing of this data is the sole responsibility of Podigee GmbH, Schlesische Straße 20, 10997 Berlin.

Our website then links podcast files which are stored and accessible at Podigee. As soon as you activate the corresponding slider in the cookie banner, the file is loaded from Podigee. Technically, the same thing happens then as would happen if you clicked a link to go to the Podigee website: Podigee receives all information that your browser automatically transmits (including your IP address). Podigee also sets its own cookies on your device.

We have no knowledge of further details of the processing of personal data in the area of data controllership of Podigee or a possible data processing in the USA. BOHNEN Public Affairs GmbH has no influence on the data processing of Podigee. 

For information about the processing of personal data by Facebook, please refer to the Podigee Privacy Policy: https://www.podigee.com/de/about/privacy/

c)  Youtube Embedding (Privacy Enhanced Mode)
By enabling the corresponding slider in the cookie banner for "Youtube" in the category "Third-Party Multi- and Social Media Content" to play the content of Youtube, you agree that we allow Google as the provider of the Youtube service to collect data for its own purposes. The collection and processing of this data is the sole responsibility of Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as its service provider.

We include videos into our website that are stored on YouTube. With this embedding, content of YouTube is displayed in parts of a browser window. However, the YouTube videos are only accessed by clicking on them separately. The embedding of YouTube content is carried out in the so-called "Privacy Enhanced Mode". This is provided by Google as the provider of YouTube and thus ensures that no data is transmitted to Google and no cookies are stored on your device before a click to play the video.
As soon as you enable the corresponding slider in the cookie banner, the video is loaded from Youtube. Technically, the same thing happens then as would happen if you clicked a link to go to the YouTube website: YouTube receives all information that your browser automatically transmits (including your IP address). YouTube also sets its own cookies on your device. This also happens if you do not have a YouTube user account. If you are logged in at YouTube or Google, your data will be associated directly with your account. If you do not want the association to your YouTube or Google user account, you must log out of YouTube and Google before clicking on the corresponding slider in the cookie banner
We have no knowledge of further details of the processing of personal data in the area of data controllership of Google or a data processing in the USA. BOHNEN Public Affairs GmbH has no influence on the data processing of Google.
For information about the processing of personal data by Google, please refer to the Google Privacy Policy: https://policies.google.com/privacy?hl=en;

d)    Twitter

By enabling the corresponding slider in the cookie banner for „Twitter contents“ in the category "Third-Party Multi- and Social Media Content" to view Twitter contents, you agree that we allow Twitter to collect data for its own purposes. We do this by embedding content stored on Twitter into our website. With this embedding, content from the Twitter website is displayed in parts of a browser window. Before enabling the corresponding sliders in the cookie banner, no data is transmitted to Twitter and no cookies are stored on your device.

As soon as you enable the corresponding slider in the cookie banner to view the Twitter content, the content is loaded from Twitter. Technically, the same thing happens then as would happen if you clicked a link to go to the Twitter website: Twitter receives all information that your browser automatically transfers (including your IP address). Twitter also sets its own cookies on your device. This also happens if you do not have a Twitter user account. If you are logged in to Twitter, your data will be associated directly with your account. If you do not want the association to your Twitter user account, you must log out of Twitter before activating Twitter content.
The collection and processing of this data is the sole responsibility of Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. We have no knowledge of further details of the processing of personal data in the area of data controllership of Twitter or a data processing in the USA. BOHNEN Public Affairs GmbH has no influence on the data processing of Twitter.
For information about the processing of personal data by Twitter, please refer to the Twitter Privacy Policy: https://twitter.com/en/privacy.

e)  . Yumpu contents

By enabling the corresponding slider in the cookie banner for "Yumpu" in the category " Third-Party Multi- and Social Media Content  to view an animated PDF, you agree that we allow Yumpu to collect data for its own purposes. The collection and processing of this data is the sole responsibility of i-magazine AG, Gewerbestrasse 3, 9444 Diepoldsau, Switzerland.

When you access an animated PDF (for example, an annual report) on our website, a connection is established to Yumpu's servers in Switzerland. Accessing the online magazines requires that Yumpu is aware of the user's IP address, since without the IP address, the content can generally not be sent to your browser.

For more information about Yumpu, please see the i-magazine AG privacy policy: www.yumpu.com/en/info/privacy_policy

 

1. Participants in Projects and Events of the BOHNEN Public Affairs GmbH

(i)  We will process your data for the purpose of carrying out projects and events as well as for the documentation of the projects and events by means of image and sound recordings and the use of the resulting recordings for the purpose of press and public relations work. A further purpose is the transfer of participant data to the cooperation partners named in the context of the individual project and event for the purposes stated in each case. A change of these purposes is not planned.

(ii)  The processed data is participant data, which can vary from project to project/event to event. Usually, however, it is the names and contact details of the participants and sometimes photos of the participants or individual project results. Further details are always provided in the context of the specific project or event.

(iii) The legal basis for the processing of participant data in projects and events is the contract to hold the event in accordance with Article 6 (1) (b) GDPR and statutory obligations, in particular tax and commercial law provisions in accordance with Article 6 (1) (c) GDPR. The legal basis for the production of image and sound recordings is your consent in accordance with Article 6 (1) (a) GDPR and our legitimate interest in the documentation of the events we hold and our legitimate interest in the presentation of BOHNEN Public Affairs GmbH through press and public relations work in accordance with Article 6 (1) (f) GDPR. Your consent is given voluntary, participation in the event is also possible without the provision of your consent for recordings. As far as participants in projects and events who are under 16 years of age are concerned, the consent is given by the holder of parental responsibility or the consent of the child is given with the consent of the holder of parental responsibility in accordance with Article 8 (1) sentence 2 GDPR. The legal basis for the transfer of participant data to the cooperation partners named in each individual project and event is our legitimate interest in carrying out the project or event in accordance with Article 6 (1) (f) GDPR.
(iv) For the purpose of press and public relations work, the recipients of the image and sound recordings can be anyone, in particular journalists, media companies, press and photo agencies, members, employees, website visitors, users of social media, as well as service providers we use as processors within the framework of a data processing agreement, in particular commissioned web hosting companies, IT and media service providers. Recipients of the participant data are the cooperation partners named in the context of the individual project and event. Unless otherwise specified in the context of the individual project or event, the cooperation partners are independent data controllers for their processing of personal data. Further details on the data processing of the cooperation partners can be found in the privacy policies of the cooperation partners, which are specified in the context of the respective project and event.
(v)  When publishing image and sound recordings on the internet (BOHNEN Public Affairs GmbH website, social media platforms of BOHNEN Public Affairs GmbH, film recordings in videos (e.g. YouTube)), data is regularly transferred to so-called third countries outside the European Union, which are to be regarded as unsafe third countries in terms of data protection. BOHNEN Public Affairs GmbH has no influence on how the social media providers handle the data. BOHNEN Public Affairs GmbH has no knowledge of whether and for what purposes the data is further processed in the third country.
(vi) Archived image and sound recordings of the event as well as publications are generally not deleted. All contractual and booking relevant data will be stored in accordance with tax and commercial law retention periods for a period of ten calendar years after the end of the contract. Further data collected in the course of the event will be deleted six months after the event has taken place.
(vii) The provision of data is contractually obligatory for participation in events. It is not possible to participate in events and projects without providing personal data. The production of image and sound recordings is not obligatory for participation in the event. If you do not wish to be part of image and sound recordings, please inform our staff at the event location.

3.  Participants in Online Events via Zoom

(i)  The purpose of the processing of participant data is to organize, carry out and document online events of BOHNEN Public Affairs GmbH via Zoom. If we point this out separately in the context of the individual online event and you give your consent, the online event will be recorded and the recording will be published on the website, the YouTube channel of BOHNEN Public Affairs GmbH or other channels specified separately. A change of these purposes is not planned.

(ii)  The data of the participants processed by BOHNEN Public Affairs GmbH as data controller in the context of the online event of BOHNEN Public Affairs GmbH via Zoom are:
■    Participant data
Name and surname, e-mail address
■    Zoom conference data
Name and e-mail address of the participants
Meeting meta data: Topic, IP address, device/hardware information
Telephone data: For dial-in with telephone, information on incoming and outgoing telephone number, country name, start and end time, additional connection data if necessary.
■    Communication data
Within the online event, your communication data in the form of questions, requests to speak or vote, as well as chat content will be processed. You always decide yourself whether and in what form you want to participate.
■    Image, sound and video data (and, in case of consent, the corresponding recordings)
Within the online event via Zoom, image, sound and video data of the participants will be processed. However, each person is always free to decide whether they want to switch on their camera and microphone, or whether they just want to communicate via the chat window. If we have obtained your consent in this regard, the online event will be recorded, including the image, sound and video data of the participants.
■    Payment data (only for online events with costs)
For paid online events we also process payment data.
(iii)  The legal basis for the processing of participant data for the purpose of holding the online event via Zoom is your consent in accordance with Article 6 (1) (a) GDPR. The legal basis for the production and publication of the recordings on the website of BOHNEN Public Affairs GmbH or on other specified channels is also your consent in accordance with Article 6 (1) (a) GDPR.
(iv)  You may withdraw your given consent at any time with effect for the future. The revocation does not affect the lawfulness of the processing that took place before the revocation. Therefore, publications already made (e.g. on websites or in social media) will not be deleted.
(v)  The participant data and payment data is actively provided by the data subjects during the registration process for the online event of BOHNEN Public Affairs GmbH. The Zoom conference data is also actively provided by the data subjects or automatically by the browser or devices of the data subjects. The image, sound or video data and communication data are automatically collected, the recordings of the image, sound and video data are made by BOHNEN Public Affairs GmbH.
(vi)  The participant data (and payment data) will be deleted after ten years (legal retention periods due to participation in the online event). The Zoom conference data and communication data will be usually deleted three months after the online event of BOHNEN Public Affairs GmbH has taken place, unless otherwise specified in the context of the individual event. The image, sound and video data as well as the corresponding recordings and the selected archived material will not be deleted. However, the excess raw material of the recordings will be deleted three months after the online event has taken place. In addition, you can request the deletion of your personal data at any time, unless we are legally or contractually obliged or entitled to further process the data.
(vii)  The recipients of the name, communication data and image, sound and video data are always the moderators and other participants of the respective online event of BOHNEN Public Affairs GmbH. We also use service providers as processors within the framework of a data processing agreement for the provision of services, especially for the provision, maintenance and servicing of IT systems, in particular the service provider Zoom Video Communications, Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA. The basis for data processing in the USA is your consent in accordance with Article 49 (1) (a) GDPR. In the USA, there is no level of data protection comparable to the provisions of the GDPR. It is possible that US authorities may access personal data without us or you being informed. An enforcement of your rights is probably not possible in the USA. You can withdraw your given consent at any time with effect for the future. We have concluded the EU standard contractual clauses (2021/914; Modul 2) with Zoom Video Communications, Inc., so that Zoom Video Communications, Inc. may process your data only for our purposes.

If you create your own profile and register accordingly when you log in to Zoom, Zoom Video Communications, Inc. is solely responsible for the processing of this personal data. We have no knowledge of further details of data processing in the area of data controllership of Zoom Video Communications, Inc. or a data processing in the USA.

For information about the processing of personal data by Zoom Video Communications, Inc. please refer to the Zoom Video Communications, Inc. Privacy Policy: zoom.us/privacy

Recipient of the published image, sound and film recordings including the names of the participants can be anyone, in particular journalists, press agencies, members, employees, website visitors, users of social media, etc., as well as service providers which are used as processors within the framework of a data processing agreement, in particular commissioned web hosting companies and IT and media service providers.

When publishing recordings on the internet (CPR website, videos on e.g. YouTube), data is regularly transferred to so-called third countries outside the European Union, which are to be regarded as unsafe third countries in terms of data protection. BOHNEN Public Affairs GmbH has no influence on how the social media providers handle the data. BOHNEN Public Affairs GmbH has no knowledge of whether and for what purposes the data is further processed in the third country.

 

1. Applicants for a Project or Event of BOHNEN Public Affairs GmbH 

(i) The purpose of the data processing is to carry out the application process and to select the participants for the respective project or event of BOHNEN Public Affairs GmbH. A change of these purposes is not planned.
(ii) The legal basis for data processing is the initiation of a contract for participation in the project or event in accordance with Article 6 (1) (b) GDPR. If you do not apply directly yourself, but are proposed, for example, the legal basis is our legitimate interest of BOHNEN Public Affairs GmbH in knowing the persons proposed for the project in question and their professional qualifications in accordance with Article 6 (1) (f) GDPR.
(iii) The personal data will be passed on internally to the employees responsible. In addition, some of the data will be passed on to a review board and project partners during the application process. In addition, we use service providers as processors within the framework of a data processing agreement in the selection processes, as for the provision, maintenance and servicing of IT systems.
(iv) The applicant data for the study programs, research and further education events will be deleted six months after the end of the application process. All contractual and booking relevant data will be stored in accordance with tax and commercial law retention periods for a period of ten calendar years after the end of the contract.
(v) Without the data, participation in the application processes for projects and events of BOHNEN Public Affairs GmbH is not possible.

 

1. Applicants for an Employment with BOHNEN Public Affairs GmbH 

(i)  The purpose of the processing is the selection of applicants for employment. A change of this purpose is not planned.

(ii)  The legal basis is Section 26 German Federal Data Protection Act (BDSG) in conjunction with the initiation of the employment contract in accordance with Article 6 (1) (b) GDPR and Article 88 GDPR. We process voluntary information as part of your application on the basis of Section 26 (2) BDSG in conjunction with your consent in accordance with Article 6 (1) (a) GDPR and Article 88 GDPR.

(iii)  Applicant data is forwarded internally to the relevant employees. In addition, we use service providers as processors within the framework of a data processing agreement, in particular for the provision, maintenance and care of IT systems.

(iv) Applicant data is deleted six months after the end of the specific application process. In the event of expressed interest in other positions too, the data will remain stored for up to 12 months after the last job offer or the last concrete expression of interest.

(v) The provision of data is required for applicants. An application is not possible without providing data.

 

1. Newsletter Recipients

(i)  The purpose of the processing is to send our newsletter. A change of this purpose is not planned.
(ii)   The legal basis for the processing of data for our newsletter is your consent in accordance with Article 6 (1) (a) GDPR. In the case of newsletter recipients who are under 16 years of age, consent is given by the holder of parental responsibility or the consent of the child is given with the authorization of the holder of parental responsibility in accordance with Article 8 (1) sentence 2 GDPR).
(iii)  We use service providers as processors within the framework of a data processing agreement for the provision of services, especially for the provision, maintenance and servicing of IT systems.
(iv)  Data relating to newsletters will be deleted when you unsubscribe.
(v)  Personal data is required to receive newsletters. Without providing personal data, the newsletters cannot be sent.

     6.   Business Partners and their Employees 

(i) The purpose of the processing is the initiation and perfomance of contracts and communication with employees of business partners. A change of this purpose is not planned.

(ii) The legal basis for processing is the initiation and perfomance of the contract in accordance with Article 6 (1) (b) GDPR in the case of contracts with natural persons. In case of contracts with legal persons the legal basis ist our legitimate interest, namely communication with contractually relevant contact persons in accordance with Article 6 (1) (f) GDPR, and always statutory obligations, in particular tax and commercial law provisions in accordance with Article 6 (1) (c) GDPR.

(iii) The recipients of data may be banks for the processing of payments. Authorities and offices may be recipients within the scope of their duties, insofar as we are obliged or entitled to transfer data. We also use service providers as processors within the framework of a data processing agreement for the provision of services, in particular for the provision, maintenance and servicing of IT systems.

(iv) All contractual and booking relevant data will be stored in accordance with tax and commercial law retention periods for a period of ten calendar years after the end of the contract.

(v) The provision of data is obligatory for business partners and employees of business partners based on statutory and contractual regulations. The business relationship cannot be established and carried out without providing data.

 

1. Interested Parties and Communication Partners

(i)The purpose of the processing is the communication with interested parties and communication partners of BOHNEN Public Affairs GmbH. A change of this purpose is not planned.
(ii) The legal basis for the processing of interested parties and other communication partners is our legitimate interest, namely communication with interested parties and communication partners in accordance with Article 6 (1) (f) GDPR.
(iii) The inquiries will be passed on internally to the employees responsible. We also use service providers as processors within the framework of a data processing agreement for the provision of services, in particular for the provision, maintenance and servicing of IT systems.
(iv) Inquiries and communication will be deleted automatically after ten calendar years.
(v) The provision of data is obligatory for interested parties and communication partners. Without the provision of data, communication is not possible.

 

1. Rights of Data Subjects and Further Information

(i) We do not use any methods of automated individual decision-making.
(ii) You have the right to request information at any time about all your personal data which we are processing.
(iii) If your personal data is incorrect or incomplete, you have the right to have it rectified and completed.
(iv) You can request the erasure of your personal data at any time, as long as we are not bound by legal obligations that require or allow us to continue processing your data.
(v) If the applicable legal requirements are met, you can request a restriction to the processing of your personal data.
(vi) You have the right to object to the processing, insofar as the data processing is based on profiling or direct marketing purposes.
(vii) If the processing is carried out on the basis of the balancing of interests, you may object to the processing by stating reasons arising from your particular situation.
(viii) If the data processing takes place on the basis of your consent or a contract, you have the right to a transfer of the data provided by you, insofar as the rights and freedoms of others are thereby not impaired.
(ix) If we process your data on the basis of a declaration of consent, you have the right to withdraw this consent at any time with future effect. The processing carried out prior to a revocation remains unaffected by the revocation.
(x) Moreover, you have the right to file a complaint at any time with a data protection supervisory authority, if you believe that data processing has been carried out in violation of the applicable law.

Version: October 2022