Privacy Policy

We are glad that you are interested in using the EUTurbines website. The protection of personal data is our first priority. Below you find information about the processing of your personal data and your rights within the use of our website.

1. Controller

The controller responsible for the data processing is:
EUTurbines
Lyoner Str. 18
60528 Frankfurt
Phone: +49 69 6603 1936
E-Mail: info@euturbines.eu

2. Data protection officer

You can contact our data protection officer as follows:
Scheja und Partner Rechtsanwälte mbB
Adenauerallee 136
D-53113 Bonn
Telephone: 0228/2272260
Contact: https://www.scheja-partner.de/kontakt/kontakt.html

3. Rights of the data subject

As data subject you have the following rights in accordance to the General Data Protection Regulation (GDPR) as far as the respective legal requirements are met:

Access: You have the right to obtain information about your personal data processed by us.

Rectification: You can obtain the rectification of inaccurate personal data concerning you. Furthermore you can obtain the completion of incomplete personal data.

Erasure: In specific cases you can obtain the erasure of your personal data.

Restriction of processing: In specific cases you can obtain restriction of processing of your personal data.

Data portability: If you provided data to us based on a contract or your consent you can demand that you receive the provided data in a structured, commonly used and machine-readable format or that we transmit the data directly to another controller.

Right to object


Individual right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Art. 6 sec. 1, including profiling based on those provisions. We will then no longer process the personal data for those purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims.                            

Right to object to processing for direct marketing purposes
In some cases we process your data for direct marketing. You have the right to object to the processing of your personal data for those purposes at any time. This applies to profiling as far as it is associated with such direct marketing. If you object to the processing for direct marketing purposes, your personal data will not be processed for those purposes any longer.

Withdrawal of consent: If you gave your consent to the processing of your personal data you can withdraw your consent at any time with future effect. The lawfulness of the processing of your personal data until your withdrawal will not be affected. In addition to the options stated under ‘enforcement of your rights’ you can explain your withdrawal according to the respective information concerning ‘exercising the right to object’ in the section ‘Services & Cookies’.

Enforcements of your rights: To exercise the aforementioned rights please contact patricia.seizer@euturbines.eu or send it by post to the address stated under number 1. When doing so please make sure an unambiguous identification of yourself is possible.

Right of appeal: You have the right to lodge a complaint with a data protection supervisory authority, particularly one in the member state of your habitual residence, work place or the place of the suspected violation, if you are of the view that the processing of your personal data is unlawful.

4. Details on services, cookies & co.  

4.1. Our own services

Display of service

Data categories
Date and time of access, duration of visit, type of device, used operation system, used functions, amount of sent data, type of event, IP-address, domain name

Purpose
Providing service

Legal basis
Article 6 section 1 b) and f) GDPR

Pursued legitimate interests
Technical functionality

Recipients or categories of recipients
Hosting provider, internal departments, external service provider for technical support

Third country transfer: Adequacy decision (yes/no)
No   

Safeguards and access possibilities to those

Storage periods or criteria for their determination
Directly after delivery by the web server

Duty to provide personal data and possible consequences of failure to provide
No duty to provide, automatic collection by accessing the service

Exercising the right to object

Data sources
Automatic collection by accessing the service

Log files

Data categories
Accessed URL, IP address, Date and time of access, amount of transferred data, website where the user came from (‘referrer’), websites accessed by the user’s system from our website, http-status, information about the browser type and the used version, operating system, internet service provider

Purpose
Statistical evaluations, optimizing the website, system security (fraud prevention), error diagnosis

Legal basis
Article 6 section 1 b) and f) GDPR

Pursued legitimate interests
See purposes

Recipients or categories of recipients
Hosting provider, internal departments, external service provider for technical support government agencies on demand

Third country transfer: Adequacy decision (yes/no)
No   

Safeguards and access possibilities to those

Storage periods or criteria for their determination
7 days after creation

Duty to provide personal data and possible consequences of failure to provide
No duty to provide, automatic collection by accessing the service

Exercising the right to object

Data sources
Direct collection when accessing website/service


4.2. Integration of third party services

We use third party services to enable you to use their functions, services and features. These integrated services are designed and provided by the respective third party. Therefore we have no influence on the design, contents and function of those services or the processing of personal data by the provider. Please obtain further information directly from the providers of those integrated services.

Openstreetmap

Provider/recipient
Openstreetmap Foundation
132 Maney Hill Road
Sutton Coldfield
West Midlands
B72 1JU
United Kingdom
Company Registration Number: 05912761

Purpose(s)
Providing map service Openstreetmap

Legal basis
Article 6 section 1 b) and f) GDPR

Pursued legitimate interests
Providing the openstreetmap map service

The provider’s data protection notice
https://wiki.osmfoundation.org/wiki/Privacy_Policy


  • Twitter
    Twitter Inc.
    1355 Market Street
    Suite 900
    San Francisco, CA 94103
  • LinkedIn


These “Share Buttons” are integrated in deactivated form, so that no direct contact with the servers of the respective social media network is established. At no time is data transmitted from our website to the respective operator of the social media network without action by the user. A new window where you must log in to the selected social media network does not open until you click the “Share Button”. Only then can the selected page be recommended or shared. When you click this button, your browser establishes a direct connection to the servers of the associated company and transmits data about your visit to them. Even if you are not a member of the social media network, there is the possibility that in this way data such as your IP address will be sent to the company and possibly saved there.

  • Google reCaptcha

We use the Google service reCaptcha to determine whether a person or a computer makes a specific entry in our newsletter form. Google uses the following   information to  determine if you are a human being or a computer: IP address of the terminal device you are using, the website you are visiting and on which the captcha is integrated, the date and duration of the visit, the identification data of the  browser and operating system type used, Google account if you are logged in to Google, mouse movements on the reCaptcha areas and tasks for which you must identify images. The legal basis for the described data processing is Art.  6 para. 1 lit. f General Data Protection Regulation. There is a legitimate interest on our part in this data processing to ensure the security of our website and to protect us from automated input (attacks).

4.3. Hyperlinks to other websites

Our website has so-called hyperlinks to the websites of other companies. In these cases, you are connected directly to the website of the other companies. You will notice this from the change in the URL. We cannot assume any responsibility for how your data is handled on external websites, since we have no influence regarding how these companies comply with data protection regulations. Please check the websites of such companies directly to learn how your data is handled by them.

5. Cookies

We use so-called “session cookies” on our website. Cookies refer to small text files generated by a web server and are saved on your computer by the web browser being used. They are used to aid in providing you (as a visitor to our website) with permanent, recurring settings, such as the “Save login data function”. Session cookies are deleted at the end of the browser session.

The majority of browsers are pre-configured to accept cookies automatically. If you do not wish for our cookies to be saved on your computer, please deactivate the function for saving cookies for our website in your browser, or configure your browser so that cookies are not stored on your computer in general.

6. Contacting EUTurbines via e-mail

Our site offers you the option to contact us via e-mail. In this case, your information is saved for the purpose of facilitating communication. There is no sharing with third parties. Data collected is not reconciled with the data that may be collected by other components of our site.

7. Security measures

As part of the technical administration of the website, we have instituted technical and organisation measures to protect your data against intentional or inadvertent manipulation, access by unauthorised third parties, loss, destruction or modification. We will continue to optimise this protection in the course of technical progress. We must point out that data transmission over the Internet (e.g. during communication via e-mail) can have security gaps. Absolute protection of data from access by third parties is not possible. It is the responsibility of the user to protect the provided data through encryption or in some other way.

General information on the handling of personal data in EUTURBINES and its bodies

EUTURBINES and its bodies (hereinafter referred to as “we”) thank you for your interest in our association as well as the products and services of EUTURBINES.
We take the protection of your personal data and its confidential handling very seriously. The processing of your personal data takes place solely in accordance with the respectively applicable statutory data protection requirements, in particular the EU General Data Protection Regulation (hereinafter referred to as “GDPR”).
We process personal data of employees of our association members and business partners. This personal data is the subject of this data protection information. We would like to use this document to inform you about the scope of the processing of your personal data and your data protection rights within the scope of association membership and/or your business relationship with us.

1. The controller and data protection officer responsible for data processing

Please contact us at any time should you have any questions or suggestions concerning data protection.

Data protection coordinators for all the named organizations:

Sven Laux
VDMA e. V.
Head of Department for Human Resources
Lyoner Straße 18
60528 Frankfurt
Tel.: + 49 69 6603-1640
Email: datenschutz@vdma.org

Thomas Zopick
VDMA e. V.
Head of IT Department
Lyoner Straße 18
60528 Frankfurt
Tel.: + 49 69 6603-1868
Email: datenschutz@vdma.org

You can contact our data protection officer at:

Scheja und Partner Rechtsanwälte mbB
Adenauerallee 136
53113 Bonn
Tel.: +49 228 227 226-0
Email: info@scheja-partner.de
https://www.scheja-partner.de/kontakt/kontakt.html

2. The subject of data protection

This data protection information covers personal data. This personal data includes all information that relates to an identified or identifiable natural person (so-called affected person). This data includes, for example, information on the name, postal address, email address or telephone number, but also includes information that is required during the association membership and/or business relationship, such as details on the beginning, end and scope of the usage of the membership, products and services.

3. Purposes and legal grounds of data processing

In the following, you will receive an overview of the purposes and legal grounds of data processing within the scope of the membership and/or business relationship with you.

3.1 Processing and execution of individual association work within the membership and/or business relationship

We generally process data that is created based on a business relationship with companies. We do, however, also process personal data when this is necessary for the preparation and performance of a contract with you personally.
Additional details on the purposes of the data processing can be obtained in the respective agreements and/or contract documents.
Data processing is performed on the basis of Article 6 para. 1 b) GDPR. You must specify the personal data which is necessary for the preparation and performance of the membership and/or the business relationship with you. We will not be able to process your query or fulfill the contract without this data.
We shall delete the data when it is not longer needed for the pursued purposes and no other legal grounds exist. Should the latter apply, we shall delete the data once the other legal grounds no longer exist.

3.2 Fulfillment of legal obligations

We also process your personal data to comply with legal obligations that we are subject to. The obligations may arise, for example, from association, commercial, tax, money laundering, finance or penal legislation. The purposes for the processing arise from the respective legal obligation; the processing generally serves the purpose of complying with federal control and information obligations.
Data processing is performed on the basis of Article 6 para. 1 c) GDPR. When we collect personal data due to a legal obligation, you must provide the personal data required to fulfill the legal obligation. We may not be able to process your query should you not provide this personal data.
We shall delete the personal data once the legal obligation no longer exists, provided that no other legal grounds exist. Should the latter apply, we shall delete the data once the other legal grounds no longer exist.

3.3 Safeguarding legitimate interests

We also process your personal data to safeguard our legitimate interests or those of third parties. We pursue the following interests, which are also the respective purposes:

Shared responsibility in accordance with Article 26 GDPR Individual data processing by the controller
Management of association memberships, documentation of services received from EUTURBINES and its bodies (including the preparation of interest profiles, see Section 7) X
Query management incl. group-internal workflows and documentation X

Participation management incl. participant documentation for

  • Surveys
  • Statistical surveys
  • Market exploration trips
  • Symposia
  • Visitor delegations
  • Events (domestic and abroad)
  • Committee meetings
X

Execution of

  • Surveys
  • Statistical surveys
  • Market exploration trips
  • Symposia
  • Visitor delegations
  • Events (domestic and abroad)
  • Committee meetings
X

Coordination of the collaboration in

  • National/European/international bodies
  • Sector committees
  • Associations and organizations
  • National and international standardization committees
  • National and international research projects
X

Execution of the collaboration in

  • National/European/international bodies
  • Sector committees
  • Associations and organizations
  • National and international standardization committees
  • National and international research projects
X
Recording of contacts from national and international organizations, authorities and ministries X
Execution of individual consultations X
Brokering of cooperation and sales queries X
Safeguarding technical operations, elimination of errors and disruptions X
Ensuring data security and data availability X
Business management and controlling X
Mailing of newsletters and automated forwarding of information with non-advertising character, provided you have not objected X
Direct marketing, provided you have not objected X



Within the comprehensive support provided by EUTURBINES and its bodies, we together document the service portfolio in a jointly used member and customer database. All responsible organizations are obligated to comply with lawful data processing in accordance with Article 26 GDPR in the case of joint data processing. The controller for individual rights in joint data processing is EUTURBINES, Lyoner Straße 18, 60528 Frankfurt.

The data processing is performed on the basis of Article 6 para. 1 f) GDPR. We shall explicitly point out those cases in which you have to provide data. We may not be able to process your query should you not provide this personal data.

We shall delete the data when it is not longer needed for the pursued purposes and no other legal grounds exist. Should the latter apply, we shall delete the data once the other legal grounds no longer exist.

3.4 Consent

If you have provided your consent for specific purposes, the respective purposes shall arise from the contents of the submitted consent.

The data processing is performed on the basis of Article 6 para. 1 a) GDPR. We shall explicitly point out those cases in which you have to provide data. Without the provision of this data, we may not be able to process the request covered by the consent. You may revoke your consent at any time. However, this shall not affect the lawfulness of the processing conducted, based on the consent, until the revocation.

We shall delete the data when it is no longer needed for the pursued purposes, or if you have revoked the consent and no other legal grounds exist. Should the latter apply, we shall delete the data once the other legal grounds no longer exist.

4. Recipient of personal data

4.1. Internal recipient

Only those persons who require the data for the purposes stated under Section 3 shall have access.

4.2. Joint responsibility

In case of data processing conducted within the scope of shared responsibility in accordance with Article 26 GDPR, EUTURBINES and its bodies are the reciprocal recipients.

4.3. External recipients

We shall only forward your personal data to external recipients when this is necessary for the completion or processing of your query, if another legal permission to do so exists or if you have provided your consent for this purpose.

4.3.1 External recipients may include:

a) Commissioned processors
External processors we commission to perform services, for example in technical infrastructure and maintenance or the provision of contents relevant for agreements and contracts. We select these commissioned processors very carefully and review their activities regularly to ensure the protection of your personal data. The service provider may only use the personal data for the purposes we specify.

b) Public bodies
Authorities and government institutions, such as district attorneys, courts or finance authorities, to which we must provide personal data based on mandatory and statutory grounds.

c) Other bodies
Cooperation partners to which personal data is transferred based on consent or legal grounds, for example to trade fair companies, standardization and research institutions, congress and event organizations, national and international associations, etc.

5. Data processing in third countries

If a data transfer takes place to bodies whose registered office or their place of data processing is not in a member state of the European Union or in another party to the Agreement on the European Economic Area, prior to transfer we ensure that, outside of legally permitted exceptional cases at the recipient, either an appropriate level of data protection exists (e.g. under an adequacy decision from the European Commission, through suitable guarantees by the recipient such as self-certification according to the EU-US Privacy Shield or the agreement of so-called standard contractual clauses in the European Union with the recipient) or that adequate consent has been granted.

We can provide you with an overview of the recipients in third countries and a copy of specifically agreed provisions for safeguarding the appropriate level of data protection. Please use the information provided in Section 1 to request this.

6. Sources and data categories for third-party collection

We not only process personal data which we receive directly from you: We also receive some personal data from third parties. An overview of the sources and data categories used in data collection from third parties to safeguard our legitimate interests (verification and updating of our database) is provided in the following. Use of such data strictly follows the purposes specified in Section 3. Use of personal data for advertising pitches shall only take place if we have the corresponding authorization.

7. Interest profiles

EUTURBINES compiles interest profiles within the scope of association membership in order to provide you with targeted information. Compiling an interest profile serves to inform you, within the scope of your company’s membership, with tailored information on topics and services provided by EUTURBINES and which are relevant to you, while minimizing information which is of little or no relevance for you. The data described in the following and your interest profile is only used by EUTURBINES for this purpose and is not forwarded to other third parties.
To this end, we use your contact data, data from the CRM system concerning services you have used, such as your participation in events or queries you have submitted, and possibly publicly accessible data from the external sources named in Section 6.
We only use other data when you have provided us with separate consent.
The above-mentioned data is used to automatically determine the relevance of specific topics for you and represent them accordingly in your interest profile. The interest profile contains a value for every topic that reflects the relevance of this topic for you.
The right to object against the use of your personal data as described in Section 10 also applies in relation to your interest profile and the personal data used for it.
 

8. Retention period

The retention period for personal data is provided in the respective section on data processing.
Also generally applicable: We only store personal data for as long as it is necessary to fulfill the respective purposes or – in case of consent – until you revoke your consent. In case of objection, we delete your personal data, unless its processing is permitted under the relevant statutory provisions.
We also delete your personal data when we are obligated to do so due to legal grounds.


9. Rights of affected persons

You have numerous rights as a person affected by the data processing. In detail:

  • Right of access: You have the right to receive information from us on the personal data we have stored about you.
  • Right to rectification and erasure: You can demand that we rectify any inaccurate personal data and – to the extent that legal requirements are met – the deletion of your personal data.
  • Right to the restriction of processing: You can demand that we – to the extent that legal requirements are met – restrict the processing of your personal data.
  • Data portability: If you have provided us with data based on an agreement and/or a contract or your consent, you have the right, when the legal requirements are given, to receive your personal data in a structured, commonly used and machine-readable format and have the right to demand that we transmit this data to another controller.
  • Withdrawal of consent: If you have consented to the processing of your personal data, you may withdraw this consent at any time with effect for the future. The lawfulness of the processing of your personal data up to the time of withdrawal remains unaffected.
  • Right to lodge a complaint with a supervisory authority: You may also file a complaint with the responsible supervisory authority when you are of the opinion that the processing of your personal data violates applicable law. To do so, you may turn to the data protection authority which is responsible for your place of residence or your country; you may also contact the data protection authority which is responsible for us.

10. Right to object

Objecting to data processing on legal grounds of a “legitimate interest”:
You have the right, based on reasons arising from your special situation, to object to our processing of your personal data at any time, provided this objection is based on the legal grounds of a “legitimate interest”. If you assert your right to object, we shall stop processing your personal data, unless we can document – in accordance with statutory provisions – compelling legitimate grounds for the continued processing which override your rights.

Objection to data processing for direct advertising purposes:
We process personal data based on the legal grounds of a “legitimate interest” and to conduct direct advertising. You have the right to object to such processing at any time

11. Your contact to us and the assertion of your rights

You may contact us, at no charge, should you have any questions on the processing of your personal data, your rights as an affected person and any consent you may have granted. To assert all of your above-mentioned rights, please contact datenschutz@vdma.org or one of the parties stated in Section 1 above. Please make sure that we can clearly identify your person.

12. Version

The current version of this data protection information, version 1.0, shall apply. Version June 18, 2018.