Privacy

We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point which of your personal data we collect when you visit our website and for what purposes it is used.

This data protection declaration applies to the website of the Industrial Digital Twin Association e.V. (IDTA), which can be reached under the domain idtwin.org as well as the various subdomains (“our website”).

Who is responsible and how can I reach you?

Responsible for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR).

Industrial Digital Twin Association e.V. (IDTA)
Lyoner Street 18
60528 Frankfurt am Main

+49 69 6603 1939
info@idtwin.org

Data Protection Officer
Philipp Herold
datenschutz@idtwin.org

What is it about?

This privacy statement meets the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address or user behavior when visiting a website. Information for which we cannot (or can only with a disproportionate effort) establish a reference to your person, e.g. by anonymization, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.

Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate grounds for further storage of the data. We will inform you about the specific storage periods or criteria for storage in the individual processing operations. Irrespective of this, we store your personal in individual cases for the assertion, exercise or defense of legal claims and if there are legal retention obligations.

Who receives my data?

We only share your personal data that we process on our website with third parties if this is necessary for the fulfillment of the purposes and is covered by the legal basis in the individual case (e.g. consent or safeguarding legitimate interests). In addition, we disclose personal data to third parties in individual cases if this serves the assertion, exercise or defense of legal claims. Possible recipients may then be, for example, law enforcement agencies, lawyers, auditors, courts, etc.

Insofar as we use service providers for the operation of our website who process personal data on our behalf within the scope of commissioned processing pursuant to Art. 28 GDPR, they may be recipients of your personal data. For more information on the use of processors as well as web services, please refer to the overview of the individual processing operations.

Do you use cookies?

Cookies are small text files that are sent by us to the browser of your terminal device during your visit to our websites and stored there. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to perform various analyses, so that we are able, for example, to recognize the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly from your browser. Cookies do not cause any damage to your end device. They cannot execute programs or contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations.

Hosting

We host our website with Strato. The provider is Strato AG, Pascalstraße 10, 10587 Berlin (hereinafter: “Strato”). When you visit our website, Strato collects various log files including your IP addresses. For more information, please refer to Strato’s privacy policy: https://www.strato.de/datenschutz/. The use of Strato is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the most reliable presentation of our website. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.

Order processing

We have concluded an order processing agreement (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that this provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as for example, orders or requests that you send to us as the site operator, SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

What rights do I have?

Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR), you have the following rights as a data subject:

• Information pursuant to Art. 15 GDPR about the data stored about you in the form of meaningful information about the details of the processing and a copy of your data;
• Correction pursuant to Art. 16 GDPR of incorrect or incomplete data stored by us;
• Erasure pursuant to Art. 17 GDPR of the data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
• Restriction of processing pursuant to Art. 18 GDPR, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you object to their erasure because you need them for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR.
• Data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data within the scope of consent pursuant to Art. 6 (1) a GDPR or on the basis of a contract pursuant to Art. 6 (1) b GDPR and these have been processed by us with the aid of automated processes. You will receive your data in a structured, common and machine-readable format or we will transfer the data directly to another responsible party, insofar as this is technically feasible.
• Objection according to Art. 21 GDPR against the processing of your personal data, insofar as this is done on the basis of Art. 6 para. 1 lit. e, f GDPR and there are reasons for this that arise from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding compelling legitimate grounds for the processing are demonstrated or the processing is carried out for the assertion, exercise or defense of legal claims. Where the right to object does not exist for individual processing operations, this is indicated there.
• Revocation pursuant to Art. 7 (3) GDPR of your granted consent with effect for the future.
• Complaint pursuant to Art. 77 GDPR to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.
  

How is my data processed in detail?

In the following, we will inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling does not take place.

Provision of the website

Type and scope of processing

When calling up and using our website, we collect the personal data that your browser automatically transmits to our server. The following information is stored temporarily in a so-called log file:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the accessed file
• Website from which the access is made (referrer URL)
• Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider.
  Our website is not hosted by ourselves, but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR for the purpose of.

Purpose and legal basis

The processing is carried out to protect our overriding legitimate interest in displaying our website and ensuring security and stability on the basis of Art. 6 para. lit. f GDPR. The collection of data and storage in log files is mandatory for the operation of the website. There is no right to object to the processing due to the exception under Art. 21 (1) GDPR. Insofar as the further storage of log files is required by law, the processing is based on Art. 6 para. 1 lit. c GDPR. There is no legal or contractual obligation to provide the data, however, calling up our website is not technically possible without providing the data.

Storage period

The aforementioned data is stored for the duration of the website display and for technical reasons beyond that for a maximum of 7 days.

Contacting (contact forms, offer forms, etc.)

You can contact us by e-mail or via our contact form. In this case, we store the personal data you provide in order to process your request and to contact you to handle your request. If we request information via our contact form, we have marked the mandatory fields required for contacting us accordingly (asterisk). The voluntary information is used to specify your request and to improve the processing of your request. The requested data is transmitted to us by you on a purely voluntary basis.

Depending on the type of request, the legal basis for this processing is Art. 6 para. 1 lit. b GDPR for requests that you yourself make as part of a pre-contractual measure or Art. 6 para. 1 sentence 1 lit. f GDPR if your request is of a different nature. The legitimate interest is to be able to process your request for contact inquiries. If personal data is requested that we do not need for the fulfillment of a contract or for the protection of legitimate interests, the transfer to us will be based on consent given by you in accordance with Art. 6 para. 1 lit. a GDPR.

A transfer to third parties may take place if this is necessary to process your request. You can find more information on this in the respective contact forms.

We delete the personal data of the requests as soon as their storage is no longer necessary for the fulfillment of the original purpose and no legal retention periods exist.

Newsletter

With your consent, you can subscribe to our newsletter, which we use to inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.

To subscribe to our newsletter, we use the double-opt-in procedure. After you have registered, we will send you an e-mail to the e-mail-address provided, in which we ask you to confirm, that you have received the newsletter. In addition, we store the IP addresses you use and the time of registration and confirmation. The purpose of the procedure is to provide proof of your registration and, if necessary, to be able to clarify a possible misuse of your personal data.

The only mandatory information for sending the newsletter is your e-mail address. The provision of additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will store your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a GDPR.

Your personal data will be processes on our behalf based on a data protection agreement in accordance with Art. 28 GDPR by the service provider rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg im Breisgau. In doing so, we ensure that the processing of personal data is carried out in accordance with the General Data Protection Regulation. You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in each newsletter, by sending an e-mail to info@idtwin.org or by sending a message to the contact details given in the imprint.

Presence on social media platforms

To be able to present our company in the best possible way and to communicate with you as a user, customer or interested party and to inform you about the services we offer, we use our presence on social media platforms. When using social media platforms, data is processed outside the European Union (EU) and the European Economic Area (EEA). An equivalent level of data protection as in the EU cannot be guaranteed in all countries outside the EU. In this context, it can lead to risks for you as a user if the transmitted data is processed in so-called third countries with an inadequate level of data protection.

This makes it difficult to enforce known user rights. In addition, your data may not be processed in your interest by the provider in the third country.  We only transfer personal data to third countries for which an adequate level of protection has been confirmed or if the transfer of personal data can be ensured by contractual agreements or other appropriate safeguards.

In addition to the respective provider of a social network, we also collect and process personal user data on so-called “fan pages”. With this notice, we inform you about what data we collect from you on our social media presences, how we use it and how you can object to the use of data. The respective data processing purposes and data categories can be found in the respective offer, which is listed in more detail below. 

The activities in social media operated by us and described in more detail below are carried out based on a balancing of interests in accordance with Art. 6 para. 1 lit. f) DSGVO. 

To achieve this, cookies are used to record user behavior and enable the user to be profiled. A specific list of the processing purposes of user data can be found in the data protection notices of the respective providers. By making the appropriate settings in your user account, you can restrict your profiling, at least to a limited extent. For the exact procedure, please read the corresponding privacy policies of the respective provider.

The relevant platforms are: 

Platform	Responsible body	Data protection information of the platform operators
YouTube	Google Ireland Limited  Gordon House, Barrow Street, Dublin 4, Irland	https://policies.google.com/privacy?hl=de
LinkedIn	LinkedIn Ireland Unlimited CompanyWilton Place, Dublin 2, Ireland	https://de.linkedin.com/legal/privacy-policy?

The Industrial Digital Twin Association e. V. operates profiles on the listed platforms in order to draw attention to products and service offers and to interact with customers, interested parties and other users of the platform. 

In this context, the platform operators also use certain data that they have collected from users of the platform (e.g. whether a photo has been “liked” or commented on a profile) to compile aggregated usage statistics and make them available to the respective operators of the profile (so-called “insights” or “analytics”). As a profile operator, we also receive such usage statistics. The information that we receive as a profile operator does not allow any conclusions to be drawn about individual users. The profile operator itself does not have access to personal data that the platform operator processes for the compilation of statistics about the usage of the platform. Only the respective platform operator determines which data is processed for these purposes and in what way. Industrial Digital Twin Association e. V.  cannot exert any legal or factual influence on the processing of data by the platform operators. 

For processing in connection with the compilation of usage statistics, the Industrial Digital Twin Association e. V. and the respective platform operator are joint controllers within the meaning of Art. 26 GDPR. 

Where possible, there are joint responsibility agreements with the respective platform operators.

In addition, data processing by the Industrial Digital Twin Association e.V. as the profile operator only takes place to a very limited extent:

• Processing of usernames and comments that are deleted for violation of netiquette. These will be kept within the limitation period for any necessary proof in the event of legal disputes. 
• Processing of usernames and individual messages when you contact us via messenger services
• Recruiting potential applicants on career platforms

For these purposes, we usually only process your name, message content, comment content and the profile information you provide “publicly”.

Youtube

Type and scope of data processing

We have integrated YouTube video on our website. YouTube Video is a component of the video platform of YouTube, LLC, where users can upload content, share it over the Internet and receive detailed statistics.

YouTube Video allows us to integrate content from the platform into our website.
YouTube Video uses cookies and other browser technologies to evaluate user behavior, recognize users and create user profiles. This information is used, among other things, to analyze the activity of the content listened to and to create reports. If a user is registered with YouTube, LLC, YouTube Video can assign the videos played to the profile.

When you access this content, you establish a connection to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted.

Purpose and legal basis

The use of the service is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by YouTube, LLC. Further information can be found in the privacy policy for YouTube Video: https://policies.google.com/privacy.

YouTube NoCookie

Type and scope of data processing

We have integrated YouTube NoCookie on our website. YouTube NoCookie is a component of the video platform of YouTube, LLC, where users can upload content, share it over the Internet and receive detailed statistics.

YouTube NoCookie allows us to integrate content from the platform into our website.

YouTube NoCookie uses cookies and other browser technologies to evaluate user behavior, recognize users and create user profiles. This information is used, among other things, to analyze the activity of the content listened to and to create reports. If a user is registered with YouTube, LLC, YouTube NoCookie can assign the videos played to the profile.

When you access this content, you establish a connection to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted.

Purpose and legal basis

The use of the service is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by YouTube, LLC. Further information can be found in the privacy policy for YouTube NoCookie: https://policies.google.com/privacy.

Google Analytics

Type and scope of data processing

We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offer. This includes, for example, the number of visits to our online offer, subpages visited and the length of stay of visitors.
Google Analytics uses cookies and other browser technologies to evaluate user behavior and recognize users.

This information is used, among other things, to compile reports on the activity of the website.

Purpose and legal basis

The use of Google Analytics is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.

Google reCaptcha

Type and scope of data processing

We have integrated components of Google reCAPTCHA on our website. Google reCAPTCHA is a service provided by Google Ireland Limited and enables us to distinguish whether a contact request originates from a natural person or is automated by means of a program. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. Furthermore, Google reCAPTCHA records the user’s dwell time and mouse movements in order to distinguish automated requests from human ones. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google reCAPTCHA.

Purpose and legal basis

The use of Google reCAPTCHA is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TTDSG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google reCAPTCHA: https://policies.google.com/privacy?hl=en-US.

Google Fonts

Type and scope of data processing

We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offer. To obtain these fonts, you connect to servers of Google Ireland Limited, whereby your IP address is transmitted.

Purpose and legal basis

The use of Google Fonts is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts: https://policies.google.com/privacy.

Google CDN

Type and scope of data processing

We use Google CDN for the proper provision of the content of our website. Google CDN is a service of Google LLC, which acts as a content delivery network (CDN) on our website.
A CDN helps to make the content of our online offer, in particular files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google CDN.

Purpose and legal basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision as well as the optimization of our online offer in accordance with Art. 6 para. 1 lit. f. GDPR.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the privacy policy for Google CDN: https://policies.google.com/privacy.

Google Maps

Type and scope of data processing

For the integration and display of map content, our website uses the map service Google Maps. The provider of this service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
When you visit a page with an integrated map from Google Maps, your IP address is recorded. This information is usually transmitted to a Google server in the USA and stored there. Google learns your IP address even if you do not have a user account through which you are logged in. If you are logged into your user account, Google can assign your surfing behavior directly to your personal profile. By logging out beforehand, you have the option of preventing this. The provider of this site has no influence on this data transfer.

Purpose and legal basis

The use of Google Maps is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the privacy policy for Google Maps: https://policies.google.com/privacy.

Google Tag Manager

Type and scope of data processing

We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags through an interface and allows us to control the precise integration of services on our website. This allows us to flexibly integrate additional services in order to evaluate user access to our website.

Purpose and legal basis

The use of Google Tag Manager is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

MyFonts

Type and scope of data processing

We have integrated MyFonts Counter on our website. MyFonts Counter is a service of MyFonts, Inc. and offers us the possibility to statistically evaluate the number of visits to our website. MyFonts Counter uses cookies and other browser technologies to recognize users and website visits. This information is used, among other things, to compile reports on the activity of the website. In this case, your data will be passed on to the operator of MyFonts Counter, MyFonts, Inc., 600 Unicorn Park Drive Woburn, MA 01801 USA.

Purpose and legal basis

The use of MyFonts Counter is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TTDSG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by MyFonts, Inc. Further information can be found in the privacy policy for MyFonts Counter: https://www.myfonts.com/legal/website-use-privacy-policy/.

Google DoubleClick

Type and scope of data processing

We have integrated components of Google DoubleClick on our website. DoubleClick is a trademark of Google, under which mainly special online marketing solutions are marketed to advertising agencies and publishers. DoubleClick by Google transmits data to the DoubleClick server with each impression as well as with clicks or other activities.

Each of these data transmissions triggers a cookie request to the data subject’s browser. If the browser accepts this request, DoubleClick sets a cookie in your browser.

DoubleClick uses a cookie ID, which is required to handle the technical process. The cookie ID is required, for example, to display an advertisement in a browser. DoubleClick can also use the cookie ID to record which advertisements have already been displayed in a browser in order to avoid duplication. Furthermore, it is possible for DoubleClick to record conversions through the cookie ID. Conversions are recorded, for example, if a user has previously been shown a DoubleClick advertisement and subsequently makes a purchase on the advertiser’s website using the same Internet browser.

A cookie from DoubleClick does not contain any personal data, but may contain additional campaign identifiers. A campaign identifier is used to identify the campaigns with which you have already been in contact on other websites. As part of this service, Google obtains knowledge of data that Google also uses to create commission statements. Among other things, Google can track that you have clicked on certain links on our website. In this case, your data will be passed on to the operator of DoubleClick, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information and the applicable privacy policy of DoubleClick by Google can be found at https://policies.google.com/privacy.

Purpose and legal basis

We process your data with the help of the DoubleClick cookie for the purpose of optimizing and displaying advertising on the basis of your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG. The cookie is used, among other things, to place and display user-relevant advertising and to create reports on advertising campaigns or to improve them. Furthermore, the cookie is used to avoid multiple displays of the same advertisement. Each time you visit one of the individual pages of our website on which a DoubleClick component has been integrated, your browser is automatically prompted by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and the settlement of commissions. There is no legal or contractual obligation to provide your data. If you do not give us your consent, a visit to our website is possible without restriction, but not all functions may be fully available.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google DoubleClick: https://policies.google.com/privacy.

References and links

When calling up Internet pages that are referred to within the framework of our website, information such as name, address, e-mail address, browser properties, etc. may be requested again. This privacy policy does not regulate the collection, disclosure or handling of personal data by third parties.

Third party service providers may have different and their own regulations regarding the collection, processing and use of personal data. It is therefore advisable to inform yourself on the websites of third parties about their practices regarding the handling of personal data before entering personal data.

Changes to the privacy policy

We are constantly developing our website in order to provide you with an ever-improving service. We will always keep this privacy statement up to date and adapt it accordingly if and when this should become necessary.

We will of course inform you in good time of any changes to this data protection declaration. We will do this, for example, by means of an e-mail to the e-mail address you have provided to us. If, in addition, further consent from you should become necessary for our handling of your data, we will of course obtain this from you before corresponding changes become effective.

You can access the current version of our data protection declaration at any time on the Internet under Data protection.