Data Privacy Statement

Data Privacy Statement

With this data privacy state­ment, we would like to educate you in accord­ance with the provi­sions of the EU Regula­tion 2016/679 (General Data Protec­tion Regula­tion — GDPR) on the nature, extent and purpose of the proces­sing of personal data in connec­tion with our website.

Definitions

personal data” means any infor­ma­tion relating to an identi­fied or identi­fiable natural person (‘data subject’); an identi­fiable natural person is one who can be identi­fied, directly or indirectly, in parti­cular by reference to an identi­fier such as a name, an identi­fi­ca­tion number, location data, an online identi­fier or to one or more factors specific to the physical, physio­lo­gical, genetic, mental, economic, cultural or social identity of that natural person;
“proces­sing” means any opera­tion or set of opera­tions which is performed on personal data or on sets of personal data, whether or not by automated means, such as collec­tion, recording, organi­za­tion, struc­tu­ring, storage, adaptation or altera­tion, retrieval, consul­ta­tion, use, disclo­sure by trans­mis­sion, disse­mi­na­tion or other­wise making avail­able, align­ment or combi­na­tion, restric­tion, erasure or destruc­tion;
“controller” means the natural or legal person, public autho­rity, agency or other body which, alone or jointly with others, deter­mines the purposes and means of the proces­sing of personal data; where the purposes and means of such proces­sing are deter­mined by Union or Member State law, the controller or the specific criteria for its nomina­tion may be provided for by Union or Member State law;
“recipient” means a natural or legal person, public autho­rity, agency or another body, to which the personal data are disclosed, whether a third party or not. 2However, public autho­ri­ties which may receive personal data in the frame­work of a parti­cular inquiry in accord­ance with Union or Member State law shall not be regarded as recipi­ents; the proces­sing of those data by those public autho­ri­ties shall be in compli­ance with the appli­cable data protec­tion rules according to the purposes of the proces­sing.

General Information

Inter­na­tio­naler Verband Natur­tex­til­wirt­schaft e.V.
Chemnitzer Str. 229
12621 Berlin
Tel. +49 30 55616075
info@naturtextil.com

Contact Information of the responsible data protection officer

Heike Hess
Chemnitzer Str. 229
12621 Berlin
Tel. +49 30 55616075
info@naturtextil.com
heikehess@naturtextil.com

Legal Basis

We process personal data based on at least one of the follo­wing statu­tory sources:

Permis­sion of the data subject to the proces­sing of this or her personal data concer­ning one or more specific purposes (Art.  6 Para. 1 S. 1 lit. a GDPR);
Comple­tion of a contract with the data subject or in order to take steps at the request of the data subject prior to entering into a contract (Art.  6 Para. 1 S. 1 lit. b GDPR);
Compli­ance with a legal obliga­tion we are subject to (Art.  6 Para. 1 S. 1 lit. c GDPR);
Protec­tion of the vital interests of the data subject or of another natural person (Art.  6 Para. 1 S. 1 lit. d GDPR);
Protec­tion of our legiti­mate interests or those legiti­mate interests of a third party (Art.  6 Para. 1 S. 1 lit. f GDPR)

The respec­tive legal basis of indivi­dual proces­sing opera­tions is referred to below in this data privacy state­ment.

Disclosure of personal data to recipients

We only share personal data with recipi­ents (mandated proces­sors of personal data or other third parties) to the extent necessary and only under one of the follo­wing condi­tions:

  • Permis­sion of the data subject to the transfer of his personal data
  • The transfer is necessary for the fulfill­ment of contrac­tual obliga­tions or in order to take steps at the request of the data subject prior to entering into a contract;
  • We are legally obligated to transfer the data;
  • The disclo­sure is based on our legiti­mate interests or those legiti­mate interests of a third party.

Countries outside the EU

The transfer of personal data to a country or an inter­na­tional organi­za­tion outside of the European Union (EU) or the European Economic Area (EEA) is subject to a statu­tory or contrac­tual permis­sion. Such transfer shall only be appli­cable under the condi­tions set out in Article 44 et seqq. GDPR. There­fore such transfer of personal data shall only occur to a country which was granted an adequacy decision of the EU-Commis­sion pursuant to Art. 45 GDPR, a country which has given guaran­tees to appro­pria­tely safeguard personal data pursuant to Art. 46 GDPR or has imple­mented binding corpo­rate rules follo­wing Art. 47 GDPR.

Rights of the data subject

The data subject has the follo­wing rights:

  • pursuant to Art. 15 GDPR you have the right to request infor­ma­tion about your personal data processed by us; you may also request infor­ma­tion regar­ding the purposes for proces­sing your personal data , the catego­ries of personal data processed, the recipi­ents or catego­ries of recipi­ents to whom your infor­ma­tion has been or will be disclosed, the planned safeguar­ding period or the criteria for deter­mi­ning the safeguar­ding period, the proven­ance of your personal data if your personal data was not collected from you, the existence of automated decision-making, inclu­ding profiling, and, where appro­priate, meaningful infor­ma­tion about the logic involved, as well as the signi­fi­cance and the envisaged conse­quences of such proces­sing for you, your right to rectifi­ca­tion or deletion of your personal data, your right to limit such a proces­sing  or your right to object to such proces­sing, the existence of a right to appeal to such proces­sing in front of the super­vi­sory autho­rity; Finally, you have a right to know whether personal data has been trans­mitted to a country outside the EU or to an inter­na­tional organi­za­tion and, if this is the case, the right to receive infor­ma­tion about the measures taken for appro­priate data security associated with such a transfer;
  • pursuant to Art. 16 GDPR, you have the right to obtain the rectifi­ca­tion of inaccu­rate personal data stored with us without undue delay;
  • pursuant to Art. 17 GDPR, you may request the deletion of your personal data stored with us, unless the proces­sing of personal data is justi­fied by the right of freedom of expres­sion and infor­ma­tion, for compli­ance with a legal obliga­tion or for reasons of public interest or for the establish­ment, exercise or defense of legal claims;
  • pursuant to Art. 18 GDPR you can demand the limita­tion of the proces­sing of your personal data, if and as far as the accuracy of the data is disputed by you, the proces­sing is unlawful and you are opposed to the erasure of your personal data and request the restric­tion of the use of such data instead; and we no longer need the personal data for the purposes of the proces­sing, but they are required by you for the establish­ment, exercise or defense of legal claims; or you have objected to the proces­sing in accord­ance with Art. 21 GDPR, but it has not yet been deter­mined whether our legiti­mate reasons for the data proces­sing outweigh your interest;
  • pursuant to Art. 20 GDPR you may request the transfer of the personal data you have provided us with in a struc­tured, commonly used and machine-readable format and have the right to transmit this personal data to another controller;
  • pursuant to Art. 21 GDPR you have the right to object to the proces­sing of your personal data at any time to, on grounds relating to your parti­cular situa­tion, or personal data is processed for direct marke­ting purposes and the legal basis for the proces­sing of the personal data are the protec­tion of our legiti­mate interests or those legiti­mate interests of a third party according to Art. 6 Para. 1 S. 1 lit. f GDPR;
  • pursuant to Art. 7 Para. 3 GDPR, you may at any time revoke your once given consent for proces­sing your personal data to us. As a result of such a withdrawal, we are not allowed to continue proces­sing your personal data in the future;
  • pursuant to Art. 77 GDPR you have the right to lodge a complaint with a super­vi­sory autho­rity, in parti­cular in the Member State of your habitual residence, place of work or place of the alleged infrin­ge­ment.
    If you would like to assert your above data subject rights, you can contact us or our data protec­tion officer at any time using the contact details above.

Erasure and Limitation of Personal Data

We erase personal data which we process according to the rules of Art. 17 GDPR and restrict the proces­sing of personal data pursuant to Art. 18 GDPR. Insofar as this Data Privacy State­ment does not stipu­late other­wise, the personal data is deleted if this data is no longer necessary for the purposes for which the personal data was collected or other­wise processed and the deletion does not conflict with any statu­tory requi­re­ments of safeguar­ding this personal data. If personal data is required for legally permis­sible other purposes, it will not be erased but the proces­sing of the personal data will be limited to such purpose. This applies, for example, to personal data that must be retained by us for commer­cial or tax law reasons. For example, documents pursuant to § 257 Para. 1 Nr. 2 und 3 HGB and § 147 Para. 1 Nr. 2, 3, 5 AO will be safeguarded for 6 years, documents pursuant to § 257 Para. 1 Nr. 1 und 4 HGB and § 147 Para. 1 Nr. 1, 4, 4a AO will be safeguarded for 10 years.

Cookies

We have adopted the use Cookies for our website. Cookies are small text files that your browser automa­ti­cally creates and are recorded on your device (laptop, tablet, smart­phone, PC, etc.) when you visit our site. Cookies do not harm your device and do not contain any viruses or other malicious software. Cookies store infor­ma­tion resul­ting in connec­tion with the specific device in use. However, this does not result in an immedia­tely knowledge of your identity. Cookies are mainly used to make our website offerings more user-friendly, effec­tive and secure.

We use session Cookies to recognize which webpages you have frequented during your visit on our website. Cookies also provide certain functio­na­li­ties. Session cookies are deleted after the end of your visit to our website.

In addition, we also use temporary Cookies that are stored on your device for a specific period of time to optimize usabi­lity of our website and to statis­ti­cally evaluate the use of our offer. If you return to our website to take advan­tage of our services, the site will automa­ti­cally recognize that you have frequented the website before, and which settings you have chosen and entries you have made, so that you do not need to reenter them.

The data processed by Cookies are necessary for the protec­tion of our legiti­mate interests or those legiti­mate interests of a third party according to Art.  6 Para. 1 S. 1 lit. f GDPR.

The majority of browsers accept Cookies automa­ti­cally. If you object to this routine browser setting, you can confi­gure your browser so that no Cookies are stored on your device or a message is always displayed before a new Cookie is created. A general objec­tion to the use of cookies used for online marke­ting purposes can be made for a variety of services, e.g. at http://www.youronlinechoices.com/ or the deactiva­tion page of the Network Adver­ti­sing Initia­tive http://optout.networkadvertising.org. However, disab­ling Cookies may imply, that the usabi­lity of our website may suffer.

Individual processing operations

Hosting

To make our website avail­able to the public, we are engaging services provided by hosting compa­nies, such as the supply of web servers, disk space, database services, security and mainten­ance services.

Thereby we are, respec­tively our hosting provider is, proces­sing personal data of users of our website on the basis of our legiti­mate interests in an efficient and secure supply of our online offerings pursuant to Art. 6 Para. 1 lit. f GDPR.

Access Data and Log Files

When you access our website or one of the indivi­dual web pages, the browser on your device automa­ti­cally is sending infor­ma­tion to the server of our website. This infor­ma­tion is stored in so-called log files by us or our hosting provider and deleted after leaving our website.

The follo­wing infor­ma­tion is stored:

  • IP address of the computer reques­ting access to our website,
  • Date and time of the access,
  • Name and URL of the retrieved file,
  • Website from which access is made (referrer URL),
  • The browser used and, if appli­cable, the opera­ting system of your computer
  • This data is processed for the follo­wing purposes:
  • Supply of our Internet offering inclu­ding all functions and contents
  • Enabling of an unobst­ructed establish­ment of a dial-up connec­tion to the Internet
  • Enabling a comfor­table utili­za­tion of our website
  • Ensuring system security and stabi­lity
  • Anony­mized statis­tical evalua­tion of visitors acces­sing our website
  • Website optimi­za­tion
  • Disclo­sure to law enforce­ment autho­ri­ties in the event of unlawful inter­fe­rence / attack on our systems
  • Other adminis­tra­tive purposes.

The legal basis for the data proces­sing is Art. 6 Para. 1 p. 1 lit. f GDPR. Our legiti­mate interest derives from the above data collec­tion purposes. The collected personal data is never used for the purpose of drawing conclu­sions about a person.

Contact Form

If you use the contact form, you will be asked to provide your name and email address so that we can get in personal contact with you. Further infor­ma­tion can be provided volun­ta­rily. The proces­sing of personal data for the purpose of establi­shing a contact with you and answe­ring your request is in accord­ance with Art. 6 Para. 1 p. 1 lit. a GDPR on the basis of your unsoli­cited consent. All personal data collected in connec­tion with the contact form will be deleted after your request has been processed, unless storage is required for the documen­ta­tion of other transac­tions (for example the subse­quent conclu­sion of a contract).

Email Marketing to Customers

If you are a customer of us and we have received your email address in connec­tion with the sale of a good or service, we are autho­rized to use your email address for purposes of direct marke­ting of similar goods or services. This only applies if you have not objected to such a use and we have expli­citly informed you about the possi­bi­lity to object to such a use when collec­ting the email address and every time we use your email address. The legal basis of the proces­sing is our legiti­mate interest in direct marke­ting according to Art. 6 Para. 1 lit. f GDPR.

Newsletter

If you would like to receive our newsletter, we need your email address. The data proces­sing for the purpose of sending you our newsletter is carried out pursuant to Art. 6 Para. 1 p. 1 lit. a GDPR on the basis of your volun­tary consent by means of the so-called double opt-in proce­dure. Your email address will be used and stored for this purpose until you revoke your consent or unsub­scribe from recei­ving the newsletter. The unsub­scrip­tion from our newsletter is possible at any time, for example via a link at the end of each newsletter. Alter­na­tively, you can unsub­scribe at any time by sending an email to the email address documented under II.

We send our newslet­ters with a so-called counting pixel. A counting pixel is a minia­ture graphic embedded in the HTML format of the newsletter to allow for analysis of reader behavior. In this context, we store whether and at what time a newsletter was opened by you and which of the links contained in the newsletter you accessed. We use this data to generate statis­tical evalua­tions about the success or failure of a marke­ting campaign in order to optimize the delivery of newslet­ters and to better tailor the content of future newslet­ters to your interests. The collected data will not be passed on to third parties and are deleted after the statis­tical evalua­tion.

Meltwater

The newsletter is sent via Meltwater. Provider of Meltwater is Meltwater Deutsch­land GmbH, Rother­straße 22, 10245 Berlin, Germany (hereafter „Meltwater“).

Meltwater is used for the distri­bu­tion and analysis of the reach of our newsletter. For this purpose, your email address as well as any other data required by Meltwater for the supply of the newsletter will be processed on our behalf. The legal basis for proces­sing by Meltwater is Art. 6 Para. 1 lit. f GDPR and our legiti­mate interest to establish a user-friendly and secure newsletter system and to optimize our Internet offering.

For more infor­ma­tion about how Meltwater handles your personal data, please see the privacy policy of Meltwater: https://www.meltwater.com/de/privacy-policy/.

Registration / User Account

You have the oppor­tu­nity to register on our website provi­ding personal data. The regis­tra­tion is volun­tary and is in accord­ance with Art. 6 Para. 1 p. 1 lit. a GDPR on the basis of your unsoli­cited consent. Which personal data is trans­ferred thereby results from the respec­tive input mask which is used for the regis­tra­tion. The personal data recorded will be used for the purposes of our offer as well as for contac­ting for infor­ma­tion regar­ding supply and regis­tra­tion. A personal access allows you to look at your personal data and to make changes to these data. Your data will be stored until you delete the user account or instruct us to delete your data. Provided that we are obliged to retain your personal data on the basis of statu­tory reten­tion periods, in parti­cular tax and commer­cial law, the proces­sing of your personal data will be restricted accord­ingly until the expira­tion of the reten­tion periods and then the data will be deleted.

If you register on our website or use the user account we store the IP address and the time of the respec­tive use. The storage takes place on the basis of our legiti­mate interest according to Art. 6 Para. 1 p. 1 lit. f GDPR for the provi­sion of our offer. The storage is also in your interest to protect you from misuse and other unaut­ho­rized use. A transfer of these data to third parties does not take place unless it is required to fulfill contrac­tual obliga­tions according to Art. 6 Para. 1 lit. b GDPR or for the prose­cu­tion of any claims to which we are entitled or there is a legal obliga­tion according to Art. 6 Para. 1 lit. c GDPR.

Contract Data

In connec­tion with and for the purpose of fulfil­ling pre-contrac­tual measures and contrac­tual obliga­tions via our Internet offering which takes place at the request of the data subject, we process the data of the data subject required for the fulfill­ment of the contract. This includes:

Data of the contractor, such as name, address and contact details, if appli­cable diffe­rent delivery or billing addresses or recipi­ents and if necessary the date of birth;
Contrac­tual data, such as subject of the contract, duration, customer category;
Payment data, such as bank details, credit card data, payment history.

The legal basis for the data proces­sing is Art. 6 Para. 1 p. 1 lit. b GDPR.

The data will be trans­ferred to third parties only to the extent to fulfill pre-contrac­tual and contrac­tual obliga­tion, e.g. to banks, payment service provi­ders, credit card compa­nies for the payment transac­tion and to shipping service provi­ders for the dispatch of goods.

Services of Google

Provider of the follo­wing services of Google is Google LLC, 1600 Amphi­theatre Parkway, Mountain View, CA 94043, USA (hereafter „Google“).

The legal basis for using the follo­wing services of Google are our legiti­mate interests according to Art. 6 Para. 1 lit. f GDPR.

Google has entered the EU/ U.S. Priva­cy­Shield, has thereby committed to compli­ance with European privacy standards and there­fore is in compli­ance with the requi­re­ments of the European Union to legiti­mize the transfer of personal data to the United States. Infor­ma­tion on Google’s commit­ment concer­ning the Priva­cy­Shield can be found under:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

For more infor­ma­tion about how Google handles your personal data, please see the privacy policy of Google: https://www.google.com/intl/de/policies/privacy/

Infor­ma­tionen about the use of data for adver­ti­sing purposes by Google, setting and contra­dic­tory options, you can found on these websites:

https://www.google.de/policies/privacy/partners/

https://www.google.de/policies/technologies/ads/

http://www.google.de/settings/ads

http://www.google.com/ads/preferences/

Google Analytics

This website uses Google Analy­tics by Google. Google Analy­tics uses cookies. Google collects data on the user visits of our Internet offering and their user behavior. These data serve the purpose to ensure a needs-based design and a conti­nuous optimi­sa­tion of our Internet offering, to  measure the success of marke­ting measures and to create statis­tical evalua­tions. In this context pseud­ony­mised user profiles are created and cookies are used. Infor­ma­tion provided through a cookie about your usage of this website like browser type/version, utilized opera­ting system, referrer-URL (before visited page), host name of the acces­sing computer (IP address), time of server request will be trans­mitted to a server of Google in the USA and stored there. User and event data will be deleted after 26 months. These infor­ma­tion will also be trans­ferred to third parties if required by law or if third parties process these data on behalf of us or Google. Under no circum­s­tances will your IP address be merged with any other data of Google. IP addresses will be anony­mized, there­fore an alloca­tion is impos­sible. You can avoid the storage of cookies by appro­pria­tely adjus­ting your browser software. Although in this case it might be possible that you will not be able to use all functions of this website. In addition, you may avoid the collec­tion of data generated by the cookie and related to your use of the website to Google as well as the proces­sing of these data by Google by downloa­ding and instal­ling a browser plugin that can be found under the follo­wing link: https://tools.google.com/dlpage/gaoptout?hl=de. You can avoid data collec­tion by Google Analy­tics by clicking the follo­wing link Click here to opt-out of Google Analy­tics to receive an Opt-Out-Cookie. This cookie ensures that in the future no visitors data from your browser will be collected and stored by Google Analy­tics when visiting this website. Caution: If you delete your cookies the Opt-Out-Cookie will be deleted as well and you may have to activate it again.

Google Web Fonts

This website uses external typeset­tings by Google, so called web fonts, to depict fonts. In acces­sing the website your browser there­fore loads the necessary web font into the browser cache. If your browser does not support this feature a standar­dised font from your computer will be used to display this website. This service collects your IP address, which of our websites you have visited and, if appli­cable, other data required by Google for the provi­sion of web fonts. Generated infor­ma­tion about your use of this website will be stored on a server in the USA. These infor­ma­tion will be trans­ferred to third parties if required by law or if third parties process these data on behalf of us or Google.

Media Content

Within our Internet offering we use partly foreign contents which are loaded directly by servers of the follo­wing provi­ders named in detail. The purpose of integra­ting this content is to make our website more attrac­tive. In the purpose of making our website more attrac­tive there is also our legiti­mate interest in the use of such third-party content. Legal basis for the use of the follo­wing social media plugins are our legiti­mate interests according to Art. 6 Para. 1 lit. f GDPR.

Vimeo

Our website uses media content of the Vimeo platform. Provider is Vimeo, LLC headquarted in 555 West lBth Street, New York, NY10077 USA (hereafter „Vimeo“). Purpose is the display of contents of the platform Vimeo in the context of our Internet offer. This service collects your IP address and, if appli­cable, any other data required by Vimeo. The generated infor­ma­tion about your use of this website is stored on a server in the USA. These infor­ma­tion may also be trans­ferred to third parties if required by law or if third parties process these data on behalf of us or Vimeo. If you are logged in to Vimeo at the same time, Vimeo can directly match the visit to the page of our Internet offer to your user account there. If you do not want Vimeo to be able to match the data collected on our website to your respec­tive user account on Vimeo, you must first log out of Vimeo.

More infor­ma­tion about data proces­sing and notes on data protec­tion by Vimeo, can be found under https://vimeo.com/privacy .

YouTube

Our website uses media content of the YouTube platform. Provider is Google LLC, 1600 Amphi­theatre Parkway, Mountain View, CA 94043, USA (hereafter „Google“).

Purpose is the display of contents of the platform YouTube in the context of our Internet offer. This service collects your IP address and, if appli­cable, any other data required by Google for YouTube. The generated infor­ma­tion about your use of this website is stored on a server in the USA. These infor­ma­tion may also be trans­ferred to third parties if required by law or if third parties process these data on behalf of us or Google. If you are logged in to YouTube at the same time, Google can directly match the visit to the page of our Internet offer to your user account there. If you do not want Google to be able to match the data collected on our website to your respec­tive user account on YouTube, you must first log out of YouTube.

Google has entered the EU/ U.S. Priva­cy­Shield, has thereby committed to compli­ance with European privacy standards and there­fore is in compli­ance with the requi­re­ments of the European Union to legiti­mize the transfer of personal data to the United States. Infor­ma­tion on Google’s commit­ment concer­ning the Priva­cy­Shield can be found under:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

For more infor­ma­tion about how Google handles your personal data, please see the privacy policy of Google: https://www.google.com/intl/de/policies/privacy/