1. Controller responsible for data processing
This website and the services offered on it are operated by:
VDI Zentrum Ressourceneffizienz GmbH
(hereinafter ‟VDI ZRE”)
Tel.: +49 30 2759506 0
Managing Director: Dr Martin Vogt
2. General information
Our goal when developing this website was to ensure that we collect as little of your data as possible. You can, in principle, visit our website without having to provide us with any personal data. Your personal data will not need to be processed unless and until you decide to use a specific service (e.g. a contact form). We always ensure that any processing of your personal data complies with the applicable legislation or is based on your explicit consent. We apply the rules set out in the GDPR which entered into effect on 25 May 2018 as well as the relevant domestic legislation, including the Federal Data Protection Act, the Telemedia Act and other more specialized laws.
‟Personal data” means any information relating to an identified or identifiable natural person (‟data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
‟Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
‟Restriction of processing” means the marking of stored personal data with the aim of limiting their processing in the future;
‟Pseudonymization” means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
‟Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
‟Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
‟Recipient” means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
‟Third party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data;
‟Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subjectʼs wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
In certain circumstances we will collect specific personal data when your visit our website, for which we require your consent. We will, for instance, collect your persona data if you use our contact form to write to us.
Declaration of consent
5. Processing of personal data: purpose and legal basis
Your personal data are always processed for a specific purpose. In sum, we process your personal data for the following purposes:
- to be able to process your contact request (e.g. email address, first name, family name)
- to monitor the activities of the VDI ZRE in regard to general contact requests, communications and the provision of information
- for the technical implementation of our website and to be able to provide you with information about the VDI ZRE on this website (e.g. IP address, cookies, browser information)
The specific purposes are described in the relevant sections below (e.g. regarding the contact form, web analysis).
The following applies with regard to the legal basis for the processing of your personal data:
If we obtain your consent to the processing of your personal data, in accordance with point (a) of Article 6(1) of the GDPR, your consent forms the legal basis for the data processing. Data processing is also permissible when we process your data for the purposes of pursuing our legitimate interests within the meaning of point (f) of Article 6(1) of the GDPR, except where these are overridden by your interests or fundamental rights and freedoms in relation to the processing of your personal data. Where we task external service providers with the data processing, your personal data are processed on the basis of Article 28 of the GDPR.
6. Collection of personal data
When you use our website merely for informational purposes, that is if you do not register or transmit information for another reason, we only collect those personal data which your browser transmits to our server. Whenever you view content on our website, we collect the following data for technical reasons so as to be able to display our website and to ensure its stability and security (the legal basis being point (f) of Article 6(1) GDPR):
- IP address
- date and time of request
- time zone difference to Greenwich Mean Time (GMT)
- content of page requested (specific page)
- access status/HTTP status code
- data volume transmitted in each instance
- website making request
- operating system and interface
- browser software language and version
Our website collects and stores information using browser cookies.
What are cookies?
Cookies are small text files which are stored on your medium and save certain settings and data which your browser shares with our system. A cookie generally contains the name of the domain from which the cookie data were sent, information about the age of the cookie and an alphanumerical identifier.
Cookies enable our systems to recognize a userʼs device and make any default settings immediately available. As soon as a user accesses the platform, a cookie is transmitted to the hard drive on the userʼs device. Cookies help us to improve our website and to offer you a better, tailor-made service. They enable us to identify your computer or (mobile) device if you return to our website as well as
- to store information about your preferred activities on our website and to gear our website to your specific interests
- to speed up the processing of your requests.
We cooperate with third-party providers which support us in making our website and the services we offer on it more interesting for you. That is why these partner companiesʼ (third-party providersʼ) cookies are stored on your hard drive when you visit our website. These cookies are automatically deleted after a specified period.
The table below lists all the cookies we use:
First-party or third-party cookie?
In the case of third-party cookies: who is responsible?
Serves to distinguish between different visitors
To retain the visitorʼs session status relating to page views
End of session
Transmits preferred settings
Can I decide whether or not cookies are used?
Should you not wish browser cookies to be used, you can set your browser to not accept cookies. Please note, however, that if you do so then you may not be able to use all the features on our website. If you only wish to accept our own cookies but not those of our service providers or partners, please select ‟Block third-party cookies” in your browser. We accept no responsibility for the use of third-party cookies.
8. How to contact us (using the contact form)
There are various ways in which you can contact us. When you contact us, we will store the personal data you transmit to us so as to be able to respond to all general enquiries sent to the VDI ZRE via the online contact form or publicly available email addresses by telephone, email or the online form. The first purpose of this data processing is to be able to handle each contact request and all communications resulting from it. The second purpose is to monitor the activities of the VDI ZRE. This monitoring serves the following purposes: project reporting to demonstrate the proper use of public funding; external project evaluation to analyse the effective use of public funding; and internal adjustment and optimization of the range of services offered by the VDI ZRE.
The legal basis for data processing when responding to contact requests and for the aforementioned monitoring is the data subjectʼs consent to data processing for the aforementioned purposes in accordance with point (a) of Article 6(1) of the GDPR. Only an email address and the content of the email are required to be able to deal with a request. Should you wish to, you can also transmit your first name and family name for the same purpose and so that you can be addressed by name. The retention period for personal data for the aforementioned purposes is first and foremost determined by the duration of the communications with the VDI ZRE resulting from your contact request. Personal data are deleted in the event that information relevant to the monitoring is extracted within an implementation period of a maximum of one month. Data which may possibly be stored at a later point in time for monitoring purposes are anonymized, i.e. can no longer be attributed to a specific data subject and are no longer subject to the provisions of the GDPR. Where such data are disclosed to external evaluators, it will not be possible to attribute those data to a specific data subject.
9. Third-party services and content
Our website uses the content, services and deliverables of other providers. This includes videos supplied by YouTube. It is essential that the userʼs IP address is transmitted so that these data can be called up and displayed in a userʼs browser. Providers (‟third-party providers”) are therefore aware of each userʼs IP address.
Although we make every effort only to use third-party providers which need an IP address solely in order to be able to deliver content, we have no influence on whether that IP address is stored or not. This then serves statistical purposes, for instance. Should we learn that the IP address is in fact stored, we will inform you of that fact.
Use of Google Tag Manager
Google is certified for the EU–US Privacy Shield. This data protection agreement aims to guarantee the same level of data protection as is applicable within the EU.
Use of YouTube
Our website uses YouTube plugins in order to be able to embed and display video content. YouTube is operated by Google. The provider of the video portal is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When you access a page with an integrated YouTube plugin, a connection is established to YouTubeʼs servers. YouTube then knows which of our websites you have called up.
YouTube can directly link your surfing behaviour to your personal profile if you are logged in to your YouTube account. You can prevent this occurring by first logging out of your account.
We use YouTube in the interests of presenting our online services in a visually appealing way. This represents a legitimate interest within the meaning of point (f) of Article 6(1) of the GDPR.
Use of Google Maps
Our website uses Google Maps to incorporate and display map content. The provider of this service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Whenever you access a page with an embedded map provided by Google Maps your IP address will be recorded. This information is generally transmitted to and stored on one of Googleʼs servers in the United States. Google then knows your IP address, even if you have no user account which you have logged in to. If you are logged in to your user account, Google can directly link your surfing behaviour to your personal profile. You can prevent this occurring by first logging out of your account. The provider of this page has no influence on this data transmission.
We use Google Maps in the interests of presenting our online services in a visually appealing way and to ensure that the places we cite on our website are easy to find. This represents a legitimate interest within the meaning of point (f) of Article 6(1) of the GDPR.
Use of Matomo (formerly Piwik)
Our website uses the open source web analytics software Matomo.
The information concerning the use of this website which is stored in the Matomo cookie is not disclosed to others. You can set your browser to not accept cookies. However, you may then no longer be able to use all of the features on our website.
You can prevent the storage and use of your data. Your browser sets an opt-out cookie which prevents Matomo storing user data. Whenever you delete your cookies, the Matomo opt-out cookie will also be deleted. When you next visit our website you will then have to once more set the opt-out cookie not to store and use your data (https://matomo.org/docs/privacy/).
Use of Google Analytics
Point (f) of Article 6(1) of the GDPR represents the legal basis for the setting of Google Analytics cookies. As the operator of this website we have a legitimate interest in carrying out anonymized analyses of user behaviour in order to optimize both our website and, possibly, also advertising.
We use Google Analytics in connection with IP anonymization. This guarantees that Google abbreviates your IP address within the Member States of the European Union or other Contracting States to the Agreement on the European Economic Area prior to transmission to the United States. There may be exceptional cases in which Google transmits the full IP address to a server in the United States and then abbreviates it there. Google will use this information on our behalf to analyse your use of our website, to compile reports on website activity and to provide other services to us which are linked to website and internet use. The IP addresses which Google Analytics transmits are not combined with other Google data.
We have concluded a contract with Google concerning such processing in order to fully comply with statutory data protection requirements.
You can also prevent Google Analytics recording data by setting an opt-out cookie. To do so, click >here<. Whenever you delete cookies on your browser you will have to click on the link again.
10. Social media
Our web pages display social buttons which create a static link to the VDI ZREʼs social media platforms. They do not establish a direct link to the respective providers.
11. Data security
Unfortunately, 100 per cent security can never be guaranteed whenever information is transmitted via the internet. That is why we are unable to guarantee the security of any data transmitted to our website via the internet.
However, we implement technical and organizational measures to safeguard our website against loss, destruction, access, amendment or dissemination of your data by unauthorized individuals.
In particular, we only transmit your personal data in encrypted form using the SSL/TLS (Secure Sockets Layer/ Transport Layer Security) coding system. We continuously improve our security measures in line with technological developments.
12. Rights of the data subject
You have the right
- under Article 15 of the GDPR to obtain confirmation as to whether or not we are processing personal data relating to you. More specifically, you have the right to information about the purposes for which your personal data are being processed; the category of personal data being processed; the categories of recipients to whom your personal data have been or will be disclosed; the envisaged period for which your personal data will be stored; the existence of the right to request correction or erasure of your personal data or restriction of the processing or to object to such processing; the right to lodge a complaint; where the personal data are not collected from the data subject, information as to their source; and the existence of automated decision-making, including profiling and, possibly, meaningful information about the logic involved;
- under Article 16 of the GDPR to obtain the immediate rectification and/or completion of incorrect or incomplete personal data concerning you;
- under Article 17 of the GDPR to the erasure of personal data concerning you which we have stored, unless they are required for the purposes of the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, on the grounds of a public interest or the establishment, exercise or defence of legal claims;
- under Article 18 of the GDPR to obtain restriction of the processing of your personal data where you contest the accuracy of the data, the processing is unlawful but you oppose the erasure and we no longer require the data but you require them for the establishment, exercise or defence of legal claims or you object to the processing in accordance with Article 21 of the GDPR;
- under Article 20 of the GDPR to data portability, that is the right to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format and to have these transmitted to another controller;
- under Article 7(3) of the GDPR to withdraw your consent at any time. The consequence of withdrawal of consent is that we will in future no longer process those data on which the consent is based; and
- under Article 77 of the GDPR to lodge a complaint with a supervisory authority. You will usually be able to turn to the supervisory authority of your habitual residence, place of work or seat of our company.
- Right to object
In so far as your personal data are processed on the basis of a legitimate interest pursuant to point (f) of Article 6(1) of the GDPR, you have the right, under Article 21 of the GDPR, to object to the processing of your personal data where grounds relating to your particular situation or the objection is directed against direct marketing. In the latter case you have the general right to object, which we will implement without you needing to cite any specific situation.
Should you wish to make use of your right to withdraw consent or to object, simply send an email to:.
13. Disclosure of personal data
Your personal data are disclosed as described in the following.
Our website is hosted by an external service provider based in Germany. This ensures that your data are processed within the European Economic Area. This is necessary in order to be able to operate the website and for the establishment, implementation and execution of the existing user contract. Your consent is not required.
Your data are disclosed where we are authorized or obliged on the basis of statutory provisions and/or official or court orders to pass on those data. This may, in particular, occur in the context of a criminal prosecution, to avert a threat or assert intellectual property rights.
Where the required data are transmitted to a service provider, the provider will only have access to your personal data to the extent necessary in the fulfilment of its tasks. The service provider is under the obligation to comply with data protection legislation, in particular the GDPR, when handling your personal data.
Over and above the aforementioned situations, we will not transmit any of your data to third parties without your consent. In particular, we will not transfer personal data to any offices in third countries or to any international organizations.
14. Retention period
Unless stated otherwise, processed personal data will always be deleted as soon as they are no longer required to fulfil the original purpose and no statutory retention period applies. Ultimately, the period for which your personal data will be stored is dictated by which statutory retention period applies. After the end of the respective period the relevant data are routinely deleted. Where statutory retention obligations apply, processing is restricted by means of blocking the data.
15. References and links
Third-party service providers may apply their own, different rules to the collection, processing and use of personal data. We therefore advise that you visit such third-party websites before entering personal data to find out how they handle personal data.
17. Data protection officer
We have appointed a data protection officer:
As at: July 2018