PrivacyPolicy

The contents of this Privacy Policy relate to the central Internet website of the Wuppertal Institut für Klima, Umwelt, Energie gGmbH at wupperinst.org, hereinafter called "the Website".

Personal data such as names, addresses, e-mail addresses or telephone numbers of data subjects, for example, are processed at this website at all times in accordance with the General Data Protection Regulation and in compliance with the applicable country-specific data protection regulations. The Wuppertal Institut für Klima, Umwelt, Energie gGmbH wishes through the medium of this Privacy Policy to provide information regarding the nature, scope and purpose of the personal data collected, used and processed by us. This Policy also explains the rights of data subjects.

The Wuppertal Institut für Klima, Umwelt, Energie gGmbH as the controller responsible for the processing of data has put in place numerous technical and organisational measures to ensure that the personal data processed at this website are as far as possible seamlessly protected. Nevertheless, Internet-based data transfers may fundamentally exhibit security loopholes, with the result that absolute protection cannot be guaranteed. For this reason, it is open to all data subjects to communicate personal data to us by alternative means, for example by telephone.

1. Definitions

This Privacy Policy is based on the terms and definitions employed by the European legislators in issuing the General Data Protection Regulation (GDPR). It is intended that the Policy should be easily read and understood both by members of the public and by our cooperating partners. In order to guarantee this, we would like first of all to explain the terms used.

The following terms among others are used by us in this Privacy Policy:

a) Personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b) Data subject
A data subject is any identified or identifiable natural person whose personal data are processed by the responsible controller.

c) Processing
Processing means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

d) Restriction of processing
Restriction of processing means the marking of stored personal data with the aim of limiting their processing in the future.

e) Profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

f) Pseudonymisation
Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

g) Controller or controller responsible for processing
Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

h) Processor
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

i) Recipient
Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.

j) Third party
Third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

k) Consent
Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

2. Name and address of the controller responsible for processing

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in Member States of the European Union and other regulations in the nature of data protection legislation is:

Wuppertal Institut für Klima, Umwelt, Energie gGmbH
Döppersberg 19
42103 Wuppertal
Germany
Tel.: +49 202 2492-0
info@wupperinst.org
www.wupperinst.org

3. Name and address of the data protection officer

The controller's data protection officer is:

Christian Radtke
Wuppertal Institut für Klima, Umwelt, Energie gGmbH
Döppersberg 19
42103 Wuppertal
Germany
Tel.: +49 202 2492-307
datenschutzbeauftragter@wupperinst.org
www.wupperinst.org

Every data subject may contact our data protection officer directly at any time to discuss any and all queries and suggestions.

4. Collection of general data and information

On each occasion on which the website of the Wuppertal Institut für Klima, Umwelt, Energie gGmbH is called up by a data subject or automated system, the website records a series of general data and information. The general data and information are stored in the server log files. Data recorded may include (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the Internet website from which an accessing system is referred to our website (known as the referrer), (4) the sub-websites via which an accessing system is directed to our website, (5) the date and time at which the Internet website is accessed, (6) an Internet Protocol address (IP address), (7) the Internet service provider used by the accessing system and (8) other similar data and Information which may used for defensive purposes in the event of an attack on our information technology systems.

The Wuppertal Institut für Klima, Umwelt, Energie gGmbH in its use of these data and information draws no conclusions regarding the data subject. On the contrary, this information is required in order (1) to correctly deliver the contents of our website, (2) to optimise the contents of our website for the data subject, (3) to guarantee the sustained functionality of our information technology systems and our website technology, and (4) to provide the law enforcement authorities with the necessary information to enforce the law in the event of a cyber attack. These anonymously collected data and information are therefore analysed by the Wuppertal Institut für Klima, Umwelt, Energie gGmbH on the one hand statistically, but also with the object of enhancing data protection and data security at our Institute, in order ultimately to ensure an optimum level of protection for the personal data processed by us. The anonymous server log file data are stored separately from any and all of the personal data disclosed by a data subject.

5. Online applications

Please read the data protection notes for applicants if you wish to apply to our Institute.

6. Cookies

This Wuppertal Institut für Klima, Umwelt, Energie gGmbH website uses cookies. Cookies are text files which are deposited via an Internet browser and stored on a computer system.

Large numbers of Internet sites and servers use cookies. Many cookies include a so-called cookie ID. A cookie ID is an unambiguous means of identifying a cookie. It comprises a series of characters via which Internet sites and servers can identify the specific Internet browser in which the cookie was set. This in turn enables the sites and servers visited to distinguish the individual browser used by the data subject from other browsers which contain other cookies. A specific browser can be recognised and identified via the unambiguous cookie ID.

By using cookies the Wuppertal Institut für Klima, Umwelt, Energie gGmbH is able to provide visitors to this website with a user-friendly service which would not be possible without setting cookies.

With the aid of a cookie the information and offerings available on our website can be optimised in the interests of the user. As already mentioned, cookies enable us to recognise visitors to our website. The purpose of this recognition is to make it easier for visitors to use our website. Users of a site which employees cookies for example need not enter their access data on every visit, because this task is performed by the site and the cookie placed on the user's computer system.

Data subjects may, by entering the appropriate setting in their browser, at any time prevent the setting of cookies by our website and thereby block cookies permanently. Moreover, cookies which have already been set may at any time be deleted via a browser or other software programs. This is possible with all Internet browsers in common use. If, however, the data subject deactivates the setting of cookies in their browser, under certain circumstances not all of our website functions may be fully usable.

On your first visit to our website, you will be informed that this website uses cookies. By continuing to use the website, you consent to the use of cookies. Only when this cookie has been deleted will you again be asked when you next visit our website to consent to the setting of a cookie.

7. Registering for Institute newsletters and events

At our website you can subscribe to our Institute newsletter and/or register for our events. Which personal data are transmitted upon registration to the controller responsible for processing will be dependent on the input form which is used.

For registrations for our Institute newsletter and for events, we employ what is termed a double opt-in procedure. Following registration, we will send an e-mail to the address given by you requesting confirmation that you wish us to send you our newsletter and details of events in future. If you do not confirm your registration, the subscription will not be activated. In addition, we will in each case store your IP address and the time of registration and time of confirmation. No disclosures will be made to third parties in connection with the processing of data for the dispatch of the Institute newsletter and events information. These data will be used exclusively for the purpose of sending you the newsletter.

The data you have entered in the input form at the time of registration will be used for the purpose which you personally have selected (e.g. the Institute newsletter or invitations to events) in accordance with Art 6,1a GDPR. Following your confirmation, we will store your data to enable us to send you the newsletter or invitations to events. Your IP address and the times of registration and confirmation will be saved as proof of your registration and where appropriate to clarify any possible misuse of your personal data.

The data entered will be erased as soon as they are no longer required to achieve the above purposes. You may withdraw your consent at any time by deregistering. You can do this by clicking on the links at the foot of any e-mail we may send you. Alternatively, you may also e-mail us at the address there specified.

8. Registering for the alumni network

The opportunity is open to former employees of our Institute to become members of our alumni network. An online registration form is available on our website for this purpose. The information provided via this form is stored in an internal Institute database and used exclusively for the purpose of our alumni activities. By registering, users expressly consent to be contacted by e-mail or post for the purpose of maintaining contact, to receive information regarding events and activities of the corresponding alumni network and the Wuppertal Institut für Klima, Umwelt, Energie gGmbH, and for projects and surveys. The data will be viewed, altered or erased only in response to a notification from the member. Data will be transmitted to third parties only with the express consent of the network member. There will be no merging of data with other data sources.

Your membership of our alumni network and thereby your consent to the storage and use of your personal data may be cancelled at any time in writing with future effect. For this purpose, please contact the alumni office. Your data will then be erased forthwith. Your withdrawal of consent will not affect the legality of such processing as may take place prior to withdrawal.

The consent of the user constitutes the legal basis for the processing of data pursuant to Art. 6 Para. 1 Letter a GDPR.

Please note: For its alumni newsletter the Wuppertal Institut für Klima, Umwelt, Energie gGmbH uses the CleverReach service – a service provided by CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. For this purpose the e-mail addresses and names for which consent has been given to use this service are transmitted to the CleverReach database via a secure connection and stored as a mailing list. No data will be disclosed by CleverReach to third parties. Consent to receive the alumni newsletter may be withdrawn at any time with future effect. The relevant e-mail address will then be erased from the mailing list.
For further information, please refer to www.cleverreach.com/de/datenschutz/.

9. Routine erasure and blocking of personal data

The controller responsible for processing will process and store personal data relating to data subjects only for the period for which it is necessary to do so in order to achieve the purpose of storage or insofar as is provided for by European legislators or other legislators in laws and regulations to which the controller is subject.

Should the purpose of storage cease to apply or should a time limit specified by European legislators or another competent legislator expire, the personal data will routinely be blocked or erased in accordance with the provisions of the law.

10. Rights of data subjects

a) Right to confirmation
Every data subject has the right, granted by European legislators, to request confirmation from the controllers responsible for the processing of data as to whether personal data pertaining to the subject are being processed by them.

b) Right to receive information
Every data subject has the right, granted by European legislators, to receive information at any time free of charge from the controllers responsible for the processing of data regarding the personal data pertaining to his or her person, and to be given a copy of this information. Moreover, European legislators have granted data subjects the right to receive the following information:

  • the purposes for which data are processed
  • the categories of personal data that are processed
  • the recipients or categories of recipients to whom personal data have been or are being disclosed, in particular recipients in third countries or international organisations
  • if possible the planned duration for which personal data are stored, or if this is not possible, the criteria by which this duration is determined
  • the existence of a right to the correction or erasure of personal data pertaining to the data subject or to a restriction of processing by the controller or a right to object to said processing
  • the right to complain to a supervisory authority
  • if personal data have not be collected from the data subject concerned: All available information regarding the origin of the data
  • the existence of an automated decision-making process including profiling pursuant to Art. 22 Paras. 1 and 4 GDPR and – at least in these cases – meaningful information regarding the logic involved and the consequences and intended effects of such processing on the data subject.

Moreover, the data subject has the right to receive information as to whether personal data have been transmitted to a third country or to an international organisation. Should this be the case, the data subject also has the right to receive information regarding suitable guarantees in connection with said transmission.

c) Right to rectification
Every data subject has the right, granted by European legislators, to demand immediate rectification of incorrect data concerning their person. Moreover, the data subject has the right in consideration of the purposes for which data are processed to demand completion of incomplete personal data – including by means of a supplementary explanation.

d) Right to erasure (right to be forgotten)
Every data subject has the right, granted by European legislators, to demand that the controller shall immediately erase data relating to his or her person provided that one of the following grounds applies and insofar as the processing is not necessary:

  • The personal data were collected for purposes or processed in other ways for which they are no longer required.
  • The data subject withdraws his or her consent as a basis for processing pursuant to Art. 6 Para. 1 Letter a GDPR or Art. 9 Para. 2 Letter a GDPR, and there are no other legal grounds for processing this data.
  • The data subject lodges an objection to the processing of his or her data pursuant to Art. 21 Para. 1 GDPR, and there are no legitimate priority grounds for said processing, or the data subject lodges an objection to the processing of his or her data pursuant to Art. 21 Para. 2 GDPR.
  • The personal data have been unlawfully processed.
  • The erasure of personal data is necessary for the fulfilment of a legal obligation under European Union law or the laws of Member States to which the controller is subject.
  • The personal data were collected in respect of information society services pursuant to Art. 8 Para. 1 GDPR.

If personal data have been publically disclosed by the Wuppertal Institut für Klima, Umwelt, Energie gGmbH, and if our Institute as controller pursuant to Art. 17 Para. 1 GDPR is obliged to erase such personal data, the Wuppertal Institut für Klima, Umwelt, Energie gGmbH in consideration of the available technology and the costs of implementation will take appropriate measures, including such of a technical nature, to inform other controllers involved in the processing of personal data that have by now been made public that the data subject has demanded that said other controllers delete all links to these personal data or copies or replications of these personal data insofar as the processing thereof is not necessary.

e) Right to restriction of processing
Every data subject has the right, granted by European legislators, to demand that the controller restrict the processing of data if one of the following conditions is met:

  • The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
  • The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
  • The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims.
  • The data subject has objected to processing pursuant to Art. 21 Para. 1 GDPR and it has yet to be determined whether the legitimate grounds of the controller override those of the data subject.

f) Right to data portability
Every data subject has the right, granted by European legislators, to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format. Data subjects additionally have the right to transmit those data to another controller without hindrance from the controller to which the personal data were provided, provided that processing is based on consent pursuant to Art. 6 Para. 1 GDPR or Art. 9 Para. 2 Letter a GDPR or on a contract pursuant to Art. 6 Para. 1 Letter b GDPR and takes place by automated means, insofar as processing is not required for the performance of a task that is in the public interest or in the exercise of public authority vested in the controller.
Moreover, data subjects in exercising their right to data portability pursuant to Art. 20 Para. 1 GDPR also have the right to have their personal data transmitted directly from one controller to another insofar as this is technically feasible and the rights and liberties of other persons are not thereby impaired.

g) Right to object
Every data subject has the right, granted by European legislators, at any time on grounds arising from their particular situation to object to the processing of their personal data on the basis of Art. 6 Para. 1 Letters e or f GDPR. This also includes profiling based on those provisions.
In the event of an objection, the Wuppertal Institut für Klima, Umwelt, Energie gGmbH will cease to process personal data, unless we are able to demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or the processing is undertaken for the establishment, exercise or defence of legal claims.
Where personal data are processed by the Wuppertal Institut für Klima, Umwelt, Energie gGmbH for direct marketing purposes, data subjects have the right at any time to object to the processing of their personal data for such marketing. This also applies to profiling to the extent that it is related to such direct marketing. Should a data subject lodge an objection with the Wuppertal Institut für Klima, Umwelt, Energie gGmbH against processing for direct marketing purposes, the Wuppertal Institut für Klima, Umwelt, Energie gGmbH will cease to process these personal data for these purposes.
In addition, data subjects also have the right on grounds arising from their particular situation to object to the processing of their personal data by the Wuppertal Institut für Klima, Umwelt, Energie gGmbH for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 Para. 1 GDPR, unless such processing is necessary for the fulfilment of a task which is in the public interest.
Data subjects are also at liberty in connection with the use of information society services, notwithstanding Directive 2002/58/EG, to exercise their right to object by automated means using technical specifications.

h) Automated individual decision-making including profiling

Every data subject has the right, granted by European legislators, not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning him or her or similarly significantly affects him or her, insofar as the decision (1) is not required for the conclusion or fulfilment of a contract between the data subject and the controller, or (2) is permissible under the laws of the European Union or Member States to which the controller is subject and these laws include adequate measures to uphold the rights and freedoms as well as the legitimate interests of the data subject, or (3) takes place with the express consent of the data subject.
If the decision (1) is required for the conclusion or fulfilment of a contract between the data subject and the controller, or (2) takes place with the express consent of the data subject, the Wuppertal Institut für Klima, Umwelt, Energie gGmbH will take appropriate measures to uphold the rights, freedoms and legitimate interests of the data subject, including as a minimum the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

i) Right to withdraw consent given in accordance with data protection legislation
Every data subject has the right, granted by European legislators, at any time to withdraw consent to the processing of personal data.

11. Privacy statements regarding the deployment and use of Google Analytics (with anonymisation function)

The controller has integrated Google Analytics (with anonymisation function) as a component of this website. Google Analytics is a Web analysis service. Web analysis comprises the acquisition, collection and evaluation of data regarding the behaviour of visitors to websites. A Web analysis service encompasses, among other things, data concerning the website from which a data subject was referred to another website (the so-called referrer), the sub-websites accessed, or how often and for how long a sub-website was visited. Web analysis is employed predominantly in order to optimise a website and for the cost-benefit analysis of Internet marketing.

The operator of Google Analytics is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

For the purpose of Web analysis via Google Analytics the controller uses the suffix "_gat._anonymizeIp". With the aid of this suffix, the IP address of the data subject's Internet connection is abbreviated and anonymised by Google when our Website is accessed from a Member State of the European Union or from another state which is a signatory to the treaty establishing the European Economic Area.

The purpose of the Google Analytics component is to analyse visitor flows to our website. Google uses the acquired data and information in order, among other purposes, to analyse the use of our Website, to compile online reports for us depicting the activity on our Website, and in order to provide other services in connection with the use of our Website.

Google Analytics sets a cookie on the information technology system of the data subject. An explanation of cookies has already been provided above. Setting the cookie enables Google to analyse the use of our Website. Every time one of the individual pages of this Website which is operated by the controller and in which the Google Analytics component is integrated is accessed, the Internet browser installed on the information technology system of the data subject is automatically requested by Google Analytics to transmit data for the purposes of online analysis. In the course of this technical procedure, Google acquires knowledge of personal data such as the IP address of the data subject which enables Google among other things to verify the origin of visitors and clicks and subsequently supports the raising of commission invoices.

With the aid of the cookie it is possible to store personal information such as for example the time of access, the location from which the access originated and the frequency with which our Website is visited by the data subject. Each time our Website is visited, personal data including the IP address of the Internet connection used by the data subject are transmitted to Google in the United States of America. These personal data are then stored by Google in the USA. Under certain circumstances the personal data acquired by this technical procedure may be passed on by Google to third parties.

As described above, data subjects may, by entering the appropriate setting in their browser at any time, prevent the setting of cookies by our website and thereby block cookies permanently. Such a browser setting would also prevent Google from placing a cookie on the information technology system of the data subject. Moreover, cookies which have already been set by Google Analytics may at any time be deleted via a browser or other software programs.

The data subject also has the opportunity to object to the acquisition of the data generated by Google Analytics regarding the use of this Website and to the processing of these data by Google, and prevent this. For this purpose the data subject must download and install a browser add-on available at tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data or information regarding website visits may be transmitted to Google Analytics. The installation of the browser add-on is deemed by Google to be an objection. If at a later time the information technology system of the data subject is erased, formatted or re-installed, the data subject must perform a new installation of the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or by another person who may be deemed to be within the sphere of influence of the data subject, the possibility exists to re-install or reactivate the browser add-on.
Further information and the applicable privacy policy pursued by Google may be downloaded at www.google.de/intl/de/policies/privacy/ and www.google.com/analytics/terms/de.html. For a more detailed explanation of Google Analytics, please refer to www.google.com/intl/de_de/analytics/.

12. Privacy statements regarding the deployment and use of YouTube

The controller has integrated components of YouTube into this website YouTube is an Internet video portal which allows video publishers to post video clips free of charge and enables other users to view, evaluate and comment on these, also free of charge. YouTube permits the publication of videos of all kinds, to the extent that both complete film and television broadcasts as well as music videos, trailers and videos made by users themselves can all be downloaded from this Internet portal.

The operator of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Every time one of the individual pages of this Website which is operated by the controller and in which a YouTube component (YouTube video) is integrated is accessed, the Internet browser installed on the information technology system of the data subject is automatically requested by the YouTube component to download the corresponding YouTube component from YouTube. Further information on YouTube is available for download at www.youtube.com/yt/about/de/. In the course of this technical procedure, YouTube and Google learn which pages of our Website are visited by the data subject.

Provided that the data subject is at the same time logged in at YouTube, when a sub-website which contains a YouTube video is accessed, YouTube learns which specific page of our Website is being visited by the data subject. This information is collected by YouTube and Google and matched with the respective YouTube account of the data subject.

Provided the data subject is at the same time logged in to YouTube, via the YouTube component YouTube and Google are always informed when the data subject has visited our website. This occurs irrespective of whether the data subject clicks on a YouTube video or not. If the data subject does not wish this information to be transmitted to YouTube and Google, the data subject can prevent the transmission by logging out of their YouTube account before accessing our website.

The privacy policy published by YouTube which is available at www.google.de/intl/de/policies/privacy/ explains how personal data are acquired, processed and used by YouTube and Google.

13. Privacy statements regarding the deployment and use of Google Maps

We use Google Maps on our website to create travel directions and a research map. This is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter called "Google".

Through its certification under the EU-US Privacy Shield (www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active), Google guarantees that the EU data protection regulations are complied with even when data are processed in the USA.
In order to enable certain fonts to be displayed on our website, when the site is accessed a connection is made with the Google server in the USA.

If you call up the Google Maps component integrated into our website, via your Internet browser Google then places a cookie on your terminal device. Your user settings and data are processed in order to depict our location and create directions. We cannot exclude the possibility that Google may use servers in the USA for this purpose.

The basis in law is provided by Art. 6 Para.1 Letter f) GDPR. Our legitimate interest lies in optimising the functionality of our website.

Via the connection established with Google the latter is able to ascertain the website from which your enquiry was sent and the IP address to which the travel directions should be despatched.

Should you not be agreement with the processing of your data in this manner, you have the opportunity to prevent the installation of cookies by entering the appropriate settings in your browser. Details are provided above under the heading of Cookies.

The use of Google Maps and the information acquired via Google Maps are subject to the Google terms of use at policies.google.com/terms?gl=DE&hl=de and the terms of business for Google Maps at www.google.com/intl/de_de/help/terms_maps.html.
In addition Google provides further information at adssettings.google.com/authenticated and policies.google.com/privacy.

14. Privacy statements regarding the deployment and use of Google Tag Manager

Our website uses the Google Tag Manager. This service enables website tags to be managed via an interface. The Google Tool Manager merely implements tags. Which means that no cookies are set and no personal data are acquired. The Google Tool Manager triggers other tags which may in turn collect data. However the Google Tag Manager does not access these data. In the event of deactivation at domain or cookie level, this will remain in force for all tracking tags insofar as these were implemented by the Google Tag Manager.

15. Privacy statements regarding the deployment and use of MyFonts

In order to ensure the uniform display of content, our website also uses fonts ("MyFonts") provided by Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, MA 01801, USA. The licensing terms require the use of page view tracking, a procedure by which the number of visits to the website are counted for statistical purposes and this information forwarded to Monotype. The data may be transmitted through the activation of Java Script code in your browser. To prevent the execution of Java Script code by Monotype, you may install a Java Script blocker (e.g. www.noscript.net). Further information regarding the privacy measures adopted by Monotype is available at www.monotype.com/legal/privacy-policy/.

16. Privacy statements regarding the deployment and use of CleverReach

For the purpose of distributing its alumni newsletter, press releases and invitations to events, the Wuppertal Institut für Klima, Umwelt, Energie gGmbH uses CleverReach. This is a service provided by CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. Data provided when registering for the newsletter are forwarded to CleverReach. In turn, these data are used by CleverReach to distribute the newsletter and for statistical analysis on our behalf. Using CleverReach to send out our newsletters enables us to analyse the behaviour of newsletter recipients. For example, it is possible for us to analyse how many recipients have opened the newsletter message and how often links contained in the newsletter are clicked on. In addition CleverReach can also perform conversion tracking, that is to say, determine whether after a hyperlink in the newsletter e-mail is clicked on, a desired action takes place. Moreover, certain technical information is recorded, such as the time of access, your IP address, and details of your Web browser and operating system. These data are acquired exclusively in pseudonymised form. No association is made with other personal data and the possibility of attributing the data to any individual person is therefore excluded.

We use CleverReach on the basis of consent given by you. The basis in law is provided by Art. 6 Para. 1 Sentence 1 Letter a GDPR. We also use CleverReach for marketing and optimisation purposes, particularly in order to analyse the use of our newsletter and to enable us to continuously improve individual functions and offerings and the user experience enjoyed by you. The statistical analysis of user behaviour allows us to improve our offering and make this more interesting for you as the user. This constitutes our legitimate interest in processing the aforementioned information. The basis in law is provided by Art. 6 Para. 1 Sentence 1 Letter f GDPR.

Having given your consent, you may revoke this at any time. You may also object at any time to the processing described above, simply by unsubscribing to the newsletter. You can prevent the installation of cookies by deleting existing cookies and resetting your browser to deactivate the saving of cookies. We would however draw your attention to the possibility that in this case, you may not be able to make full use of all the functions of our website. You may object to the acquisition and transmission of personal data, or prevent the processing of such data, by deactivating the execution of Java Script in your browser. You may also prevent the execution of Java Script code generally by installing a Java Script blocker (e.g. noscript.net or www.ghostery.com). We would however draw your attention to the possibility that in this case, you may not be able to make full use of all the functions of our website.
For further details please refer to the CleverReach privacy policy at: https://www.cleverreach.com/de/datenschutz/

The Wuppertal Institut für Klima, Umwelt, Energie gGmbH has entered into an agreement with CleverReach for contract data processing and implements the applicable data protection regulations in full in its use of CleverReach.

17. Legal basis for processing

Art. 6 I Letter a GDPR provides our Institute with a legal basis for processing operations in connection with which we obtain consent for specific purposes. Where the processing of personal data is necessary for the fulfilment of a contract entered into with the data subject, as for example in the case of processing operations that are required for the supply of products or performance of some other service or consideration, such processing is based upon Art. 6 I Letter b GDPR. This likewise applies to such processing operations as may be required for the execution of pre-contractual measures, for example in the case of inquiries concerning our products or services. Where our Institute is subject to a legal obligation which necessitates the processing of personal data, as for example in the fulfilment of tax obligations, such processing is based upon Art. 6 I Letter c GDPR. In rare cases the processing of personal data may be required in order to protect the vital interests of the data subject or another natural person. This would, for example, be the case if a visitor to our Institute were to suffer injury, thereby necessitating the communication of his or her name, age, health insurance details or other vital information to a doctor, hospital or other third parties. Processing would then be carried out on the basis of Art. 6 I Letter d GDPR. Lastly, processing operations may also be based on Art. 6 I Letter f GDPR. This provides the legal basis for processing operations not covered by any of the above bases in law, where processing is required to uphold a legitimate interest on the part of our Institute or a third party, provided that the interests, basic rights and freedoms of the data subject do not take precedence. We are permitted to undertake such processing operations in particular because they have been mentioned specifically by European legislators. The latter were of the opinion that a legitimate interest may be assumed to exist if the data subject is a customer of the controller (Recital 47 Sentence 2 GDPR).

18. Legitimate interests in processing pursued by the controller or a third party

Where the processing of personal data is based upon Art. 6 I Letter f GDP, our legitimate interest lies in carrying out our business activities for the benefit of all our employees and our shareholder.

19. Duration for which personal data are stored

The criterion determining the duration of storage of personal data is the respective statutory time limit. Upon expiry of this time limit the corresponding data are routinely erased insofar as they are no longer required for the fulfilment or initiation of contracts.

20. Regulations regarding the provision of personal data; necessity for entry into contract; obligation on the part of the data subject to provide personal data

We would make it clear that the provision of personal data is in some cases required by law (e.g. tax regulations) or may arise from contractual provisions (e.g. details of the contracting party). Occasionally it may be necessary for the purpose of entering into a contract for a data subject to make personal data available to us which must then subsequently be processed by us. For example, a data subject is obliged to provide us with personal data if our Institute proposes to enter into a contract with said person. Failure to provide personal data would then lead to the consequence that the contract could not be entered into with the data subject.

21. Automated decision-making

As a responsibly minded undertaking, we refrain from automated decision-making or profiling.