DATA PROTECTION INFORMATION

Name and contact details of the persons responsible for the processing of data

This data protection information shall apply to data processing by The Wheat Initiative, Königin-Luise-Straße 19, 14195 Berlin, email: wheat.initiative(at)julius-kuehn.de, as well as for the following website: http://wheatinitiative.org

Accessing our website

(1) By accessing our website, information will automatically be sent by the browser you are using to our website server, and temporarily stored in a log file. The following information will, without any action on your part, be collected and saved until it is automatically deleted:

The IP address of the computer accessing the site,
The date and time of access,
The name and URL of the file accessed,
The website from which the access occurred (Referrer URL),
The browser which you used, the operating system of your computer, and the name of your internet service provider.
Web pages you visited prior to coming to this website.

This information may also include details about your use of this website, including:

Clicks
Internal links
Pages visited
Scrolling
Searches
Timestamps

We share this information with Squarespace, our website analytics provider, to learn about site traffic and activity.

(2) We will collect and process the data listed in order to ensure a smooth connection to, and comfortable use of, our website. Furthermore, the data helps to analyse system security and stability, as well as being used for administrative purposes in order to continuously improve our services.

(3) The legal basis for data processing is Article 6 (1)(f) of the German General Data Protection Regulations (DSGVO). Our legitimate interest arises from the above listed purposes for data collection. Under no circumstances will we use the data collected for the purpose of drawing conclusions about your person. The data will be stored for a period of 7 days and thereafter will be deleted automatically.

(4) The operation of our online offering is via a hosting service provider based within the EU. The provider with whom we have concluded an agreement in accordance with Article 20 DSGVO for order processing, provides infrastructure and storage space for our website and email accounts on their servers within the EU, and is responsible for the maintenance, technical support and systems operation. It is there that, on our behalf, the provider processes personal data which you share with us when using our service, for example your name and email address for performance of the contract. Ensuring the smooth and safe operation of our online offering also constitutes our legitimate interest in accordance with Art 6 (1)(f) DSGVO.

(5) We also use cookies and tracking tools on our website. The exact process this involves and how your data will be used will be more precisely explained in the corresponding sections.

Cookies

(1) Based on Article 6 (1)(f) DSGVO, we use so-called cookies on our website. Cookies are small files which your browser automatically creates, and which are saved onto your device (laptop, tablet, smartphone, or similar) when you visit our site. Cookies do not cause damage to your device, and do not contain viruses, trojans or other harmful software. Information is stored to the cookie which, in each case, is created in connection with the specific device used. This does not, however, mean that we are able to directly identify you from this. On the one hand, the use of cookies helps to make browsing our site a more comfortable experience for you. We use cookies in order to determine that you have already visited certain pages of our website. These cookies will be automatically deleted after you leave our site. We also use temporary cookies in order to improve user friendliness. These are stored on your device for a defined period of time. If you return to our site to make use of our services, it will automatically be detected that you have already visited our site, along with which entries and settings you used so that you will not need to enter these again.

These functional and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.

These analytics and performance cookies are used on this site, as described below, only when you acknowledge our cookie banner. We use analytics cookies to view site traffic, activity, and other data.

(2) On the other hand, we use cookies to statistically measure usage of our website, to evaluate and optimise our services for you. When you return to our site, these cookies allow us to recognise that you have already visited us. In each case, after a defined period of time, the cookies will be deleted. Most browsers automatically accept cookies. You can, however, configure your browser so that no cookies are stored on your computer, or so that you always receive a notification before a cookie is created. However, full deactivation of cookies may mean that you are not able to use all functions of our website. The duration cookies are saved depends on the purpose for which they are used, and is not always the same. The use of cookies is for the named purposes to safeguard our legitimate interests.

Google Analytics

(1) For the purposes of needs-based design and continued optimisation of our site, based on Article 6 (1) (f) DSGVO, we use Google Analytics, which is a web analysis service from Google Inc. (“Google”). (2) On the other hand, we use tracking measures to statistically measure usage of our website in and for the purpose of optimising our services for you. These interests are considered as justified in the sense of the aforementioned regulation. In this respect, a pseudonymised user profile will be created and cookies will be used. Information obtained from the cookies about your usage of this website, such as

browser type and version,
operating system used,
referrer URL (site visited beforehand),
host name of the computer accessing the site (IP address),
time of the server request,

will be sent to a Google server in the USA and stored there. The information will be used in order to evaluate the usage of our website so that reports concerning website activity can be generated, and in order to provide other services related to the use of the website and the internet. This is for the purpose of market research and for needs-based design of this website. This information will also, where appropriate, be sent to third parties, as long as this is legally permissible, or when the third party has been hired to process the data. Under no circumstances will Google collect your IP address together with other data. IP address will be anonymised so that it not possible to identify your person (IP masking). As a rule, anonymisation takes place within the member states of the European Union and in other states party to the Agreement on the European Economic Area. Only in exceptional cases will your full IP address be sent to a Google server in the USA and truncated there.

(2) You can prevent the installation of cookies with the appropriate settings on you browser software. However, we advise you that, in this case, it is possible that you will not be able to use all functions on this website fully. You can also prevent the collection of data created by cookies and of data related to your use of this website (including your IP address), as well as the processing of this data by Google. This can be done by downloading and installing this browser add-on: https://tools.google.com/dlpage/gaoptout?hl=de.

(3) As an alternative to the browser add-on, particularly for browsers on mobile devices, you can prevent the collection of data by Google Analytics by clicking this link. An opt-out cookie will be saved, which will prevent future collection of your data when visiting this website. The opt-out cookie will only be valid for this browser and only for our website. It will be stored on your device. Should you delete the cookies in this browser, you will need to save the opt-out cookie once again. Further information on data protection in connection with Google Analytics can be found on the Google Analytics website.

(4) Google Inc., based in the USA, is certified for the US-European Data Protection Convention “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.

Contact form and email contact

(1) A contact form is available on our website and can be used for contacting us electronically. If a user does this, the data entered into the input mask will be sent to us and saved. This data comprises:

Name
Email address
Telephone number

The following data will also be saved at the moment the message is sent:

User IP address
Date and time of contact inquiry

(2) Alternatively, it is possible to contact us via the above email address. In this case, your personal data sent with the email will be stored. No data in connection with this will be passed on to third parties. The data will be used exclusively for processing the conversation.

(3) The legal basis for the processing of data is the existence of consent from the user, as set out in Article 6 (1)(a) DSGVO. The legal basis for data processing for data sent in the course of a contact enquiry or in an email is Article 6 (1)(f) DSGVO. If the aim of the email contact is the conclusion of a contract, Art 6 (1)(b) DSGVO shall also be a legal basis for the processing. The processing of personal data from the input mask is only used for the purpose of the initial contact. Initial contact by email also provides the necessary legitimate interest for the processing of data. The other personal data processed during the submission process is used to prevent misuse of the contact form and to safeguard our information technology systems.

(5) The data will be deleted as soon as it is no longer required for the achievement of the purpose for which it was collected. For personal data from the input mask of the contact form and the personal data which is sent by email, this is the case when the relevant conversation with the user is ended. The conversation is ended when the circumstances show that the situation concerned is conclusively resolved. The additional personal data collected during the submission process will be deleted after a maximum period of seven days.

(1) If you have registered for our newsletter on our website, we will use your email address to send a newsletter. Only direct advertising for our own similar products or our own similar services will be sent in the newsletter.

(2) In connection with the data processing for sending the newsletter, your data will be sent to an external service provider whom we have entrusted with the coordinated mailing of our newseltter. This service provider is based in the USA. Therefore, your email address will be sent to a third party country. The service provider is, however, certified in accordance with the so-called Privacy Shield agreed between the EU and the USA. The Privacy Shield is considered an adequacy decision of the EU Commission pursuant to Article 45 DSGVO.

(3) The legal basis for the processing of data after the user registers for the newsletter is the existence of consent from the user, as set out in Article 6 (1)(a) DSGVO. The legal basis for the mailing of the newsletter for the sale of goods or services is Section 7 (3) of the German Act Against Unfair Competition (UWG) or Article 6 (1)(f) DSGVO. The collection of the user’s email address is for the purpose of delivering the newsletter. The collection of other personal data in the scope of the registration process is to prevent misuse of the service or the email address used.

(4) The data will be deleted as soon as it is no longer required for the achievement of the purpose for which it was collected. Therefore, the user’s email address will be stored for as long as the subscription to the newsletter is active.

(5) The subscription to the newsletter can be cancelled at any time by the user concerned. For this purpose, there is a corresponding link in each newsletter. Through this link, it will also be possible to withdraw consent to the storage of personal data collected during the registration process.

Social Media Plug-ins

(1) Based on Article 6 (1)(f) DSGVO, we use social plug-ins from the Facebook, Google+, Twitter and LinkedIn social networks in order to make our company better known. The advertising purpose behind this is considered a legitimate interest as set out in the DSGVO. Each respective provider is responsible for guaranteeing operation in compliance with data protection. We integrate these plug-ins by way of the so-called two click method in order to best protect visitors to our website.

Twitter

(1) On our website, plug-ins of the Twitter Inc. short message network (Twitter) have been integrated. Twitter is a service from Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The Twitter plug-ins (Tweet button) on our site are recognisable by the Twitter logo. An overview of Tweet buttons is available here https://about.twitter.com/resources/buttons.

(2) If you access a page of our website which has such a plug-in, a direct connection between your browser and the Twitter server will be established. From this, Twitter receives information that you have visited our site with your IP address. When you click on the Twitter “Tweet button” while you are logged in to your Twitter account, you will be able add a link to the content on our site on your Twitter profile. In that case, Twitter will be able to match your visit to our site with your user account. Please note that, as provider of the pages, we have no access to the content of the transmitted data or its use by Twitter.

(3) If you do not wish Twitter to be able to associate your visit to our site with your account, please log out of you Twitter user account. You can find more information regarding this in Twitter’s data protection statement (https://twitter.com/privacy).

(4) Twitter Inc., based in the USA, is certified for the US-European Data Protection Convention “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.

YouTube

(1) On our website, you are able to watch some YouTube videos. YouTube is a service from YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA. The company is linked with Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

(2) In order to prevent your data being sent to YouTube directly upon access to the page where the video is embedded, we have embedded the videos in privacy-enhanced mode. As a result, data will only be sent to YouTube when you activate the playback of the video by touching or clicking on it.

(3) For playback of the videos, data such as the IP address of the computer you are using will be sent to YouTube. Additionally, a connection will be made to the DoubleClick advertising network, which is a subsidiary of Google LLC. In this process, cookies will be created. These are small files which your browser creates and saves onto your device when you visit a website. Cookies are used to provide advertisements that are relevant for the user, to improve campaign performance reports, or to avoid that the user sees the same adverts repeatedly.

(4) We use the videos in order to make our website more informative and entertaining for you. We have embedded the videos on our site to allow you a simple and fast way to play them, and to make our website more user friendly. The legal basis is Article 6 (1)(f) DSGVO. The embedding of YouTube videos for the aforementioned purposes constitutes our legitimate interest as defined in the the DSGVO.

(5) You can prevent cookies being saved with a corresponding setting on your browser software (see clause 3 above). You can activate or deactivate personalised advertising from Google via the settings for advertising. In the event that you deactivate personalised advertising, you will still see advertisements shown, but the adverts will no longer be matched to your interests. Instructions on how to deactivate personalised advertising can be found on the following website:https://support.google.com/accounts/answer/2662922#stop_goog_p13n

(6) Alternatively, you can install a browser plug-in in order to deactivate personalised advertising. In this case, an opt-out cookie is created, which blocks the DoubleClick cookie, and deactivates interest-based advertising. The browser plug-in can be downloaded from the following website:https://support.google.com/ads/answer/7395996?hl=de

Google LLC is certified under the EU-US Privacy Shield, a convention which guarantees compliance with the data protection regulations applicable in the EU. You can find Google’s data protection statement by clicking the following link: https://policies.google.com/privacy?hl=de

Google reCAPTCHA

(1) We use “Google reCAPTCHA” (hereafter “reCAPTCHA”) on our website. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Inc., based in the USA, is certified for the US-European Data Protection Convention “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.

(2) reCaptcha is used to verify whether the data entered on our website (e.g. in a contact form) is sent by a person or by an automated program. For this purpose, reCAPTCHA analyses the behaviour of the website user using different characteristics. This analysis begins automatically as soon as a website user accesses the website. For this analysis, reCAPTCHA evaluates different information (e.g. IP address, duration the website user is on the website, or mouse movements effected by the user). The data captured during the analysis will be sent to Google.

(3) The reCAPTCHA analysis runs fully in the background. Website users will not be notified that an analysis is taking place. The legal basis for this data processing is Article 6 (1)(f) DSGVO. The website operator has a legitimate interest to protect its website from improper automated spying or from spam.

(4) Further information about Google reCAPTCHA, as well as Google’s data protection statement can be found using the following links: https://www.google.com/intl/de/policies/privacy and https://www.google.com/recaptcha/intro/android.html

Google Web Fonts

(1) This site uses so-called Web Fonts, which is provided by Google, for the consistent display of fonts. When you access a site, your browser loads the necessary Web Fonts to your browser cache in order to correctly display text and fonts.

(2) For this, the browser you are using must connect to the Google servers. In this process, Google obtains information that our website was accessed via you IP address. The use of Google Web Fonts is to provide a consistent and attractive display of our online offering. This is a legitimate interest as defined in Article 6 (1)(f) DSGVO.

(3) When your browser does not support Web Fonts, your computer will use a default font. Further information on Google Web Fonts can be found using the following links: https://developers.google.com/fonts/faq and in Google’s data protection statement: https://www.google.com/policies/privacy.

Membership

(1) When you become one of our members or take part in our work, or want to work and participate with us, we collect the following information:

title, forename, surname,
a valid email address
information which is necessary to successfully give guidance and to provide the membership. This includes, amongst other things, the organisation that you belong to.

(2) This data is collected,

to be able to identify you as one of our members;
to be able to fulfil our obligations to you that arise from your membership;
to allow correspondence with you;
for invoicing purposes;
for the processing of potential liability claims, as well as the enforcement of any claims, against you.

(3) This data processing occurs upon your enquiry, and is, for the aforementioned purposes, in accordance with Article 6(1)(b) DSGVO, necessary for the appropriate processing of your assignment, and for the mutual fulfilment of obligations arising from the membership.

(4) The personal data we collect for the provision of membership will be stored until the expiry of the statutory retention obligation, or possible contractual warranty and guarantee rights. Thereafter, it will be deleted, unless, in accordance with Article 6(1)(c) DSGVO, we are obliged to store it for longer due to tax law and commercial law retention and documentation obligations (arising from the German Commercial Code (HGB), the German Criminal Code (StGB) or German Fiscal Code (AO), or you have consented to a longer storage period, in accordance with Art 6 (1)(a) DSGVO.

(5) If you have registered with us as a member, an interested party or expert, you will be considered as an existing member. In this case, we process your contact details without the existence of concrete consent in order to send you information about new events and initiatives in this way. We use your email address without the existence of concrete consent in order to send you information about similar offers.

You may, without cost and at any time, object to the processing of data for the aforementioned purposes. This must be done separately for each communication channel, and will have future effect. For this, an email or a letter sent by post to the address specified in 1 will be sufficient.

Events and seminars

(1) When you book a seminar, a workshop or another event with us, we will collect the following information:

title, forename, surname,
a valid email address
address,
if applicable, telephone and fax number,
information which is necessary to successfully give guidance and to provide the membership. This includes, amongst other things, the organisation that you belong to.

(2) This data is collected,

to be able to identify you as a participant;
to be able to fulfil our obligations to you that arise from your booking;
to allow correspondence with you;
for invoicing purposes;
for the processing of potential liability claims, as well as the enforcement of any claims, against you.

The personal data we collect for the provision of seminars, for the management of points accounts, and for the certification of events will be stored until the expiry of the statutory retention obligation, or possible contractual warranty and guarantee rights. Thereafter, it will be deleted, unless, in accordance with Article 6(1)(c) DSGVO, we are obliged to store it for longer due to tax law and commercial law retention and documentation obligations (arising from the German Commercial Code (HGB), the German Criminal Code (StGB) or German Fiscal Code (AO), or you have consented to a longer storage period, in accordance with Art 6 (1)(a) DSGVO.

(5) Provided that you have booked an event with us, you will be considered as an existing client. In this case, we process your contact details without the existence of concrete consent in order to send you information about new events and initiatives in this way. We use your email address without the existence of concrete consent in order to send you information about similar offers.

Passing on of data to third parties

(1) Your personal data will not be sent to third parties other than for the aforementioned purposes or the purposes listed below.

(4) For tax accounting and our bookkeeping, we send necessary data to a commissioned tax office. The legal basis for this is Article 6(1)(f) of the General Data Protection Regulation (GDPR). The support and advice of a tax adviser is considered as a legitimate interest in the scope of this provision.

(5) For the storage of our data, we use an external provider based within the EU. Your data will be sent to an external provider to help to ensure coordinated work and the efficient organisation of our work processes, and for the purpose of backing up data. The legal basis for this is Article 6(1)(f) of the General Data Protection Regulation (GDPR). The efficient organisation of work processes is considered as a legitimate interest in the scope of this provision.

(6) We use external IT service providers for support with our electronic data processing systems. The legal basis for this is Article 6(1)(f) of the General Data Protection Regulation (GDPR). The specialist support of our data processing system and the processing of client data are considered as a legitimate interest in the scope of this provision.

Rights of persons concerned

You have the right:

to withdraw consent you have given to us at any time, in accordance with Art 7(3) DSGVO. The effect of this is that, for the future, we will no longer be permitted to carry out the data processing that depended on your consent.
to request information concerning your personal data which we process, in accordance with Art 15 DSGVO. In particular, you are able to request information about the purposes of the data processing; the categories of receivers to whom your data has been or will be disclosed; the planned duration of storage; the existence of a right to correction, deletion, limitation of processing, or withdrawal; the existence of a right to appeal; where your data comes from in the event that it was not collected by us; and the existence of automated decision making, including profiling and any meaningful information on their details;
to request the immediate correction of any of your personal data that is incorrect, or the completion of any that is incomplete, in accordance with Article 16 DSGVO;
to request the deletion of your personal data that we store, so long as the processing of the data is not necessary for the exercise of right to freedom of expression and information, for the fulfilment of a legal obligation, is not in the public interest, or is necessary for the enforcement, exercise or defence of legal claims. This is in accordance with Article 17 DSGVO;
to, in accordance with Article 18 DSGVO, request the limitation of processing of your personal data, so long as: the correctness of the data is disputed; the processing is unlawful, but you decline for the data to be deleted; we no longer require the data, but you need it for the enforcement, exercise or defence of legal claims; or you have declared your objection to the processing in accordance with Article 21 DSGVO;
to receive the personal data that you have made available to us in a structured, up-to-date, and machine-readable format, or to request that it is sent to another person responsible, in accordance with Article 20 DSGVO; and

to lodge a complaint with a regulatory authority, as set out in Article 77 DSGVO. As a rule, for this purpose, you can contact the regulatory authority in the place of your residence or workplace, or of our domicile.

Right to object

If your personal data is processed based on legitimate interests as set out in Article 6(1)(f) DSGVO, you have the right, in accordance with Article 21 DSGVO, to raise an objection to the processing of your personal data, as long as there are grounds for this which arise from your specific circumstances, or which are directed against direct advertising. In the case of the latter, you have a general right to object, which we will implement without you specifying specific circumstances.

If you wish to exercise your right to object or right of withdrawal, an email to XXXXX@wheatinitiative.org will be sufficient.

Data security

(1) All personal data that you send, including your payment data, will be transmitted with the usual and secure Standard SSL (Secure Socket Layer). SSL is a secure and tested standard, which, for example. is also used in online banking. You can recognise a secure SSL connection by, amongst other things, the s appended to the http (i.e. https://...) in the address bar of your browser, or by the padlock symbol towards the bottom your browser.

(2) Additionally, we make use of appropriate technical and organisational security measures in order to protect personal data of yours that we have saved from manipulation, full or partial loss, and against unauthorised access from third parties. Our security measures will be continuously improved in line with technological developments.