Privacy Policy

We are delighted that you are interested in our website.

The protection of your personal data during its collection, processing and use in connection with your visit to our website is of great importance to us. Your data is protected in accordance with the relevant legal provisions.

Please take a moment to read the information below. This explains how we handle your personal data, how and for what purpose this data is used, to whom we disclose this data, and how we protect your personal data.

Your personal rights are our top priority, and we do our utmost to protect and safeguard these rights.

The data controller responsible for the processing of your personal data within the meaning of the General Data Protection Regulation is:

ARL – Academy for Spatial Development in the Leibniz Association
Vahrenwalder Straße 247
30179 Hanover
Tel. 0511 34842-0
Fax 0511 34842 - 41
Email arl@arl-net.de

Collection and processing of data

Every visit to our website and every retrieval of a file stored on the website is logged. This data is stored for internal system-related and statistical purposes.

The following information is logged:

• Name of the file retrieved,
• Date and time of retrieval,
• Amount of data transferred,
• notification of successful retrieval,
• operating system used,
• browser and browser type,
• the website from which the user was redirected,
• the internet service provider,
• pages visited and
• requesting domain.

In addition, the IP addresses of the requesting computers are logged. However, the data controller does not draw any conclusions regarding specific individuals.

This data is required solely to display the content of our website correctly, to optimise the content for you on an ongoing basis, and to support criminal prosecutions in the event of cyber-attacks.

Where personal data (such as name, address, email address, etc.) is collected on this website, this is done with your voluntary consent and with your knowledge.

We collect and process personal data in accordance with the provisions of the Digital Services Act (DDG), the EU General Data Protection Regulation (GDPR) and the Lower Saxony Data Protection Act (NDSG). You may withdraw your consent at any time.

Use and Disclosure of Personal Data

Where you have provided us with personal data, we use this in accordance with European and German data protection regulations solely to respond to your enquiries, to establish, process and terminate contracts concluded with you, for technical administration and, where you have given your consent or where permitted by law, for the promotion of our products and services.

Your personal data will only be disclosed to third parties or otherwise transferred if this is necessary for the purpose of fulfilling a contract – in particular, the disclosure of order or contract data when service providers and/or suppliers are involved – if it is necessary for billing purposes, or if you have given your prior consent. You have the right to withdraw any consent you have given at any time with effect for the future.

Contact form

All your personal data and other information that you provide to us via the contact form on our website will be collected and processed solely for the purpose of processing and responding to your enquiries on the basis of Article 6(1)(a) and (b) of the GDPR. Your data will be forwarded to us via email by our provider. If you do not provide this information, we will unfortunately be unable to contact you or process your enquiry. No automated decision-making takes place.

The personal data you provide will not be transferred to a third country or an international organisation, nor are there any plans to do so. Your personal data will not be disclosed to external third parties. The personal data you provide via the contact form will be stored by us for the duration of the processing of your enquiry and will be deleted or blocked immediately once it has been processed.

Newsletter

If you subscribe to our electronic newsletter, your personal data will be processed solely for the purpose of sending you our newsletter on a regular basis, in accordance with Article 6(1)(a) of the GDPR. Following your registration, we will send you a confirmation email, which allows us to verify your identity and reconfirm your consent.

Your data is forwarded to us via email by our provider. If you do not provide this data, we will unfortunately be unable to send you our newsletter, contact you or process your enquiry. No automated decision-making takes place.

The personal data you provide will not be transferred to a third country or an international organisation, nor are there any plans to do so. Your personal data will not be disclosed to external third parties. The personal data you provide to us when subscribing to the newsletter will be stored by us until you withdraw your consent to receive the newsletter, after which it will be removed from the mailing list once you unsubscribe.

User account

All your personal data and other information that you provide to us when registering on our website and within the customer portal is collected and processed solely for the purpose of your registration and for processing and responding to your enquiries, on the basis of Article 6(1)(a) and (b) of the GDPR. Unfortunately, if you do not provide this information, it will not be possible to register on our website or to respond to your enquiries via the customer portal. No automated decision-making takes place.

The personal data you provide will not be transferred to a third country or an international organisation, nor are there any plans to do so. Your personal data will not be disclosed to external third parties. The personal data you provide to us during registration and via our customer portal will be stored by us until you deregister and, where applicable, in accordance with any statutory retention periods.

Online orders

All your personal data and other information that you provide to us via an online order are collected and processed solely for the purpose of processing your order in our online shop, in accordance with Article 6(1)(b) of the GDPR. Unfortunately, if you do not provide this information, it is not possible to place an online order with us. No automated decision-making takes place.

The personal data you provide will not be transferred to a third country or an international organisation, nor are there any plans to do so. Your personal data will not be disclosed to external third parties. The personal data you provide to us when placing an online order will be stored by us for the duration of the ordering process and in accordance with the statutory retention period; it will be deleted or blocked immediately upon expiry of this period.

Data subject rights

In accordance with Article 15 of the GDPR in conjunction with Section 9 of the NDSG, you have the right to obtain information regarding the processing of your personal data.

Furthermore, you are free to exercise your rights to rectification, erasure or, where erasure is not possible, to restriction of processing and to data portability in accordance with Articles 16–18 and 20 of the GDPR in conjunction with Section 52 of the NDSG. Should you wish to exercise this right, please contact our Data Protection Officer.

You also have the right to lodge a complaint with the relevant supervisory authority at any time. Should you believe that the processing of your personal data is not being carried out in compliance with data protection laws, we would kindly ask you to contact our Data Protection Officer.

Furthermore, in accordance with Article 13(2)(b) of the GDPR, you have the right to object to the processing of your personal data at any time.

Protection of stored data

We implement technical and organisational security measures to protect the personal data you provide to us against manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously improved and adapted in line with the latest technological developments. It cannot be ruled out that data transmitted by you in unencrypted form may be viewed by third parties during transmission. Please note that, with regard to data transmission over the internet (e.g. when communicating by email), completely secure transmission cannot be guaranteed. Sensitive data should therefore either not be transmitted at all or only via a secure connection (SSL) over the internet.

Protection of minors

Consent to the processing of personal data may only be given by a person of legal age. For information society services, the consent of a child aged sixteen or over is permissible in accordance with Article 8 of the GDPR.

Storage of anonymised data/cookies

Usage data is collected and stored in anonymised form on this website. So-called ‘cookies’ may be used for this purpose. These are text files that are stored on your computer and enable an analysis of your use of the website. However, they collect and store data exclusively in pseudonymous form. They are not used to identify you personally and are not linked to data relating to the bearer of the pseudonym. We use this information to assess the appeal of our website and to continuously improve its content. Data processing is carried out in accordance with Article 6(1)(f) of the GDPR.

Technical cookies are used in the online shop to support the ordering process. Data processing is carried out in accordance with Article 6(1)(b) of the GDPR.

Tracking Tools

The tracking measure listed below and used by us (Matomo) is carried out on the basis of Article 6(1)(f) of the GDPR. We use this tracking measure to ensure that our website is designed to meet your needs and to optimise it on an ongoing basis. Furthermore, we use the tracking tool to collect statistical data on the use of our website and to analyse this data for the purpose of optimising our offering for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision. The purposes of data processing and the categories of data are set out below.

Matomo

We use the open-source software Matomo to analyse and statistically evaluate website usage. Cookies are used for this purpose (see Storage of anonymised data/cookies). The information generated by the cookie regarding website usage is transmitted to our servers and aggregated into pseudonymous usage profiles. The information is used to evaluate website usage and to enable us to tailor our website to your needs. The information is not passed on to third parties. Under no circumstances is the IP address linked to other data relating to the user. IP addresses are anonymised so that they cannot be traced back to an individual (IP masking).

Data Protection Officer

If you have any questions regarding data protection, please do not hesitate to contact our Data Protection Officer, Dr Bittner Consulting GmbH & Co. KG, Podbielskistraße 386, 30659 Hanover (office@drbg.de).