Privacy Policy

0. ifu Hamburg's privacy policy in short

General: This preceding paragraph gives a concise overview of what happens to your personal information when you visit our website. Personal information is any data with which you could be personally identified. Detailed information on the subject of data protection can be found in our privacy policy below.

Data collection on our website: Who is responsible for the data collection on this website? The data collected on this website are processed by the website operator. The operator's contact details can be found in the website's legal notice (disclaimer).

How do we collect your data? Some data are collected when you provide it to us. This could, for example, be data you enter in a contact form.

Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data such as the browser and operating system you are using or when you accessed the page. These data are collected automatically as soon as you enter our website.

What do we use your data for? Part of the data is collected to ensure the proper functioning of the website. Other data can be used to analyze how visitors use the site.

What rights do you have regarding your data? You always have the right to request information about your stored data, its origin, its recipients, and the purpose of its collection at no charge. You also have the right to request that it be corrected, blocked, or deleted. You can contact us at any time using the address given in the legal notice if you have further questions about the issue of privacy and data protection. You may also, of course, file a complaint with the competent regulatory authorities.

Analytics and third-party tools: When visiting our website, statistical analyses may be made of your surfing behavior. This happens primarily using cookies and analytics. The analysis of your surfing behavior is usually anonymous, i.e. we will not be able to identify you from this data. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following privacy policy.

You can object to this analysis. We will inform you below about how to exercise your options in this regard.

The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations (in particular EU-GDPR) and this privacy policy.

If you use this website, various pieces of personal data will be collected. Personal information is any data with which you could be personally identified. This privacy policy explains what information we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.

Following is the full text of the privacy policy:

1. Notice concerning the party responsible for this website

The party responsible for processing data on this website is:

ifu Hamburg GmbH
CEO: Jan Hedemann
Max-Brauer-Allee 50
22765 Hamburg
Germany

Tel: +49 40 480009-0
Fax: +49 40 480009-0
E-Mail: info(at)ifu.com

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).

We have appointed a data protection officer for our company:

Datenschutzbeauftragter
Lars-Holger Krause
Tercenum AG
Unter den Linden 16
10117 Berlin
Germany

Tel: +49 30 9832175–0
E-Mail: lars-holger.krause@tercenum.de

2. Handling of Personal Data

Personal data is data that identifies an individual or relates to an identifiable individual. This includes, for example, name, email address or a telephone number. This data may also include personal preferences, hobbies, or which web page has been viewed by someone.

Personal data is only collected, processed and used by us, if this is permitted by law or you have consented to the data processing.

3. Contact Forms

Should you send us questions via a contact form on this web page, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share this information without your permission.

We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1)(a) GDPR. You may revoke your consent at any time. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.

4. Server Log Files

This data processing is required in order to be able to deliver the contents of our website, to ensure the functioning of our IT systems and to optimise our web pages. Log file data will always be stored separately form any personal data.

The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files". These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

These data will not be combined with data from other sources.

The basis for data processing is Art. 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract.

5. Use of Cookies

Some of our web pages use cookies. Cookies do not harm your computer and do not contain any viruses. Cookies help make our website more user-friendly, efficient, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain in your device's memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site.

You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.

Cookies which are necessary to allow electronic communications or to provide certain functions you wish to use (such as the shopping cart) are stored pursuant to Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the storage of cookies to ensure an optimized service provided free of technical errors. If other cookies (such as those used to analyze your surfing behavior) are also stored, they will be treated separately in this privacy policy.

6. Use of Google Analytics

This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google Analytics cookies are stored based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.

IP anonymization:
We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.

Browser plugin: You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout.

Objecting to the collection of data: You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics.

For more information about how Google Analytics handles user data, see Google's privacy policy: support.google.com/analytics/answer/6004245.

Outsourced data processing:
We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

7. Use of Google AdWords

To promote our website by the inclusion of relevant advertising on third-party websites and in the search engine results of the Google search engine we are using Google AdWords ads (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)

If you reach our website via a Google ad, a so-called conversion cookie is stored on your computer by Google.

The data collected through the conversion cookie is used by Google to create visit statistics for our website. These visit statistics are used in order to determine the total number of users who have been served through AdWords ads to analyse the success of each ad and to optimize our ads in the future. Neither we nor other Google AdWords advertisers receive information from Google that could identify you.

The conversion cookies store personal information, e.g. web pages visited by you. Each time you visit our web pages, personal data including your IP address, is transmitted to Google in the USA. This personal data is stored by Google in the USA and Google may pass personal data collected on to third parties.

A conversion cookie loses its validity after 30 days and is not used to identify you.

If you want to prevent "Conversion Tracking" you should set your browser settings to block cookies from the domain "googleadservices.com". You can object to the interest based advertisement of Google by accessing from each of the browsers you use the link www.google.com/settings/ads and set the desired settings.

Further information can be found in Google's Privacy Policy.

8. Use of Google Tag Manager

This website sometimes uses Google Tag Manager. Google Tag Manager is a solution operated by Google LLC. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) that allows marketed website tags to be managed using an interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not register personal data. The tool causes other tags to be activated which may, for their part, register data under certain circumstances. Google Tag Manager does not access this information. If recording has been deactivated on domain or cookie level, this setting will remain in place for all tracking tags implemented with Google Tag Manager.

You can read Google's data protection policy for this tool here: https://www.google.de/tagmanager/use-policy.html

9. Use of Google Campaign Manager (DoubleClick by Google)

This website uses the online marketing tool Campaign Manager by Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) formerly branded DoubleClick. The remarketing function allows us to present to users of our website advertisements based on their interests on other websites within the Google advertising network (in Google search or on YouTube, so-called "Google Ads" or on other websites). For this purpose, the interaction of users on our website is analyzed, e.g. which offers the user was interested in, in order to be able to display targeted advertising on other pages to users after they have visited our website.

To do this, Google stores a Cookie-ID in the browsers of users who visit certain Google services or websites in the Google Display Network. This number, also known as a "cookie", is used to record the visits of these users. The number is used to uniquely identify a web browser on a particular device and not to identify a person. According to Google, the Campaign Manager cookies contain no personal data.

Your browser automatically establishes a direct connection to the Google server once visiting our website. We have no influence on extent and further use of the data collected by Google through the use of this tool and therefore inform you according to our best knowledge: By integrating Campaign Manager, Google receives the information that you have visited/viewed a part of our pages or clicked on an advertisement from us. If you are registered with a Google service, Google may associate this visit with your account. Even if you are not registered with Google or if you are registered but not logged in, it is possible that the service  provider obtains and stores your IP address.

The Campaign Manager may use DoubleClick Floodlight cookies that allow us understanding if you complete certain actions on our website after you have seen or clicked through one of our display/video advertisements served on Google or other platforms via Campaign Manager. Campaign Manager uses this cookie to understand the content with which you have engaged on our website so they may subsequently deliver some targeted advertisements to you.

You can prevent participation in this tracking process in different ways: a) by setting your browser software accordingly, in particular by suppressing third-party cookies, you will not receive any ads from third-party providers b) by deactivating cookies for conversion tracking, by setting your browser so that cookies from the domain 'googleadservices.com' are blocked, this setting being deleted when you delete your cookies c) by deactivating the interest-based ads of the providers that are part of the 'About Ads' self-regulation campaign, this setting being deleted when you delete your cookies d) by using a browser plugin to permanently deactivate tracking in your browser (Firefox, Internet Explorer, Google Chrome) from this page e) by setting your cookie preferences accordingly (click here). Please note that in this case you may not be able to use all functions of this offer in full.

For more information on the purpose and scope of data collection and processing by Google, please visit Google's Privacy Policy.

10. Use of YouTube

On our websites you can watch videos uploaded to YouTube (YouTube LLC, a Google company, 901 Cherry Ave., San Bruno, CA 94066, USA) that are integrated via iFrame. The iFrames are set in a way that a connection is only established when you click on the 'Play' button.

If you are logged in to your YouTube account at the same time when you press 'Play', YouTube may associate your surfing behaviour with your user profile. You can prevent such data processing by logging out of your account before visiting our websites.

As this is the service of a third party, we have no influence on the processing of such data by Google. The purpose and scope of data collection and the further processing and use of the data by Google as well as your rights and setting options for the protection of your privacy can be found in the relevant section on data protection in Google's Privacy Policy.

The legal basis for this data processing is Art. 6 (1) (f) GDPR. The purpose and legitimate interest is to increase the visibility of this website and the attractiveness and user-friendliness of our software products.

11. Data collection on our website

Registration on this website: You can register on our website in order to access additional functions offered here. The input data will only be used for the purpose of using the respective site or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject your registration.

To inform you about important changes such as those within the scope of our site or technical changes, we will use the email address specified during registration.

We will process the data provided during registration only based on your consent per Art. 6 (1)(a) GDPR. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.

We will continue to store the data collected during registration for as long as you remain registered on our website. Statutory retention periods remain unaffected.

Processing of data (customer and contract data): We collect, process, and use personal data only insofar as it is necessary to establish, or modify legal relationships with us (master data). This is done based on Art. 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract. We collect, process and use your personal data when accessing our website (usage data) only to the extent required to enable you to access our service or to bill you for the same.

Collected customer data shall be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

Data transmitted when entering into a contract with online shops, retailers, and mail order:
We transmit personally identifiable data to third parties only to the extent required to fulfill the terms of your contract, for example, to companies entrusted to deliver goods to your location or banks entrusted to process your payments. Your data will not be transmitted for any other purpose unless you have given your express permission to do so. Your data will not be disclosed to third parties for advertising purposes without your express consent.

The basis for data processing is Art. 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract.

Data transferred when signing up for services and digital content:
We transmit personally identifiable data to third parties only to the extent required to fulfill the terms of your contract with us, for example, to banks entrusted to process your payments.

Your data will not be transmitted for any other purpose unless you have given your express permission to do so. Your data will not be disclosed to third parties for advertising purposes without your express consent.

The basis for data processing is Art. 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract.

12. Newsletter

If you would like to receive our newsletter, we require a valid email address as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive this newsletter. No additional data is collected or is only collected on a voluntary basis. We only use this data to send the requested information and do not pass it on to third parties.We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1) (a) GDPR. You can revoke consent to the storage of your data and email address as well as their use for sending the newsletter at any time, e.g. through the "Unsubscribe" link in the newsletter. The data processed before we receive your request may still be legally processed.The data provided when registering for the newsletter will be used to distribute the newsletter until you cancel your subscription when said data will be deleted. Data we have stored for other purposes (e.g. email addresses for the members area) remain unaffected.

13. Data Storage Period and Routine Erasure and Blocking of Personal Data

The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of the retention period the corresponding data is routinely deleted, as long as it is no longer necessary for the initiation or fulfillment of a contract.

We shall process and store your personal data only for the period necessary to achieve the purpose of storage, or as far as this is granted by the European legislator or other legislators in laws or regulations to which we are subject to.

If the storage purpose is not applicable, or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data are routinely blocked or erased in accordance with legal requirements.

14. Legal Basis for Processing

Art. 6 (1) (a) GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Art. 6 (1) (b) GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services.

Is our company subject to a legal obligation by which processing of personal data is required, such as for the fulfillment of tax obligations, the processing is based on Art. 6 (1) (c) GDPR.

In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 (1) (d) GDPR.

Finally, processing operations could be based on Art. 6 (1) (f) GDPR. This legal basis is used for processing operations which are not covered by any of the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing can be considered a legitimate interest if the data subject is a client of the controller (Recital 47 Sent. 2 GDPR).

15. No automated decision-making

We do not use automatic decision-making or profiling.

16. Rights of the Data Subject

If your personal data is being processed you are considered the data subject and have the following rights:

Right of Access: You have the right to obtain from the controller free information about you personal data stored at any time and a copy of this information. Furthermore, the European directives and regulations grant you access to the following information:

a.        the purposes of the processing;

b.        the categories of personal data concerned;

c.        the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;

d.        where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

e.        the existence of the right to request from the controller rectification or erasure of personal data, or restriction of processing of personal data concerning you, or to object to such processing;

f.         the existence of the right to lodge a complaint with a supervisory authority;

g.        where the personal data are not collected from you, any available information as to their source;

Furthermore, you have a right to obtain information as to whether personal data are transferred to a third country or to an international organisation. Where this is the case, you have the right to be informed of the appropriate safeguards relating to the transfer.

Right to Rectification: You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right of Restriction of Processing: You have the right to obtain from the controller restriction of processing where one of the following applies:

a.        The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;

b.        The processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of their use instead;

c.        The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims, or

d.        The data subject has objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.

Right to Erasure (Right to be Forgotten): You have the right to obtain from the controller the erasure of personal data concerning yourself without undue delay, and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies, as long as the processing is not necessary:

a.         The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.

b.         You withdraw consent to which the processing is based according of Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, and where there is no other legal ground for the processing.

c.         You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.

d.         The personal data have been unlawfully processed.

e.         The personal data must be erased for compliance with a legal obligation in European Union or Member State law to which the controller is subject.

The right to erasure may not apply to the extent that processing is necessary:

a.        for exercising the right of freedom of expression and information;

b.        for compliance with a legal obligation which requires processing by European Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

c.         for reasons of public interest in the area of public health in accordance with Art. 9 (2) (h) and (i) of GDPR as well as Art. 9 (3) GDPR;

d.        for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 (1) GDPR in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or

e.        for the establishment, exercise or defence of legal claims.

Right to Data Portability: You have the right to have data which we process based on your consent or in fulfillment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.

Right to Object: You have the right granted to object, on grounds relating to his or her particular situation, at any time, to processing of personal data concerning him or her, which is based on Art. 6 (1) (e) or (f) GDPR.

We shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.

Revocation of your Consent to the Processing of your Data: Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.

Right to File Complaints with Regulatory Authorities: If there has been a breach of data protection legislation, the person affected may file a complaint with the competent regulatory authorities. The competent regulatory authority for matters related to data protection legislation is the data protection officer of the German state in which our company is headquartered.

The regulatory authority is the data protection officer of the German federal state in which our company has its seat:

Hamburgische(r) Beauftragte(r) für Datenschutz und Informationsfreiheit
Klosterwall 6 (Block C)
20095 Hamburg
Germany
Tel. +49 40 42854 - 4040
Fax +49 40 4279 - 11811
E-Mail: mailbox(at)datenschutz.hamburg.de


17. Changes to this Privacy Policy


We reserve the rightt to modify or amend this privacy policy, if this is necessary e.g. due to new techologies. Please make sure you have the latest version of this privacy policy available.

As of: May 2018

Data protection information for applicants

Thank you for your application and your interest in ifu Institut für Umweltinformatik Hamburg GmbH. Please note: by applying you consent to the processing of your data in accordance with the privacy policy of ifu Institut für Umweltinformatik Hamburg GmbH.

In accordance with Art. 13 GDPR, we would like to give you some information on the use of your data in the application process:

1. Contact details of the responsible person:

ifu Hamburg GmbH
Max-Brauer-Allee 50
22765 Hamburg
Deutschland
bewerbung(at)ifu.com 
Tel: +49 40 480009-0

2. Contact details of the data protection officer:

Data Protection Officer
Lars-Holger Krause
Tercenum AG
Unter den Linden 16
10117 Berlin
Germany
lars-holger.krause(at)tercenum.de

3. Your data will be processed and stored for the following purposes:

- Execution of the application process,
- Decision on the conclusion of an employment contract.

4. The legal basis for the processing is Art. 6 (1) (b) GDPR.

5. The following persons (groups) acquire knowledge of your data as part of the application process: Employees of the personnel department as well as superiors of the position which they have applied for and members of the management. The data will not be passed on to third parties, with the exception of our service providers within the scope of order processing.

6. There is no intention to transfer the personal data to a third country or an international organisation. If your profile is suitable for use by one of our international sister companies, we will inform you separately about the transfer of your data.

7. Your data will be stored for the duration of the application procedure and deleted after the successful recruiting process, but no later than six months after completion of the procedure. If an employment contract is concluded, we will inform you separately about the use of the data in the employment relationship.

8. The provision of personal data is not required by law or contract. However, the provision of personal data is required for the conclusion of an employment contract. You are not obliged to provide personal data. Please note that we will not be able to consider you further in the application procedure if  the required data is not made available.

9. An automated decision-making process does not take place.

10. You have the right to be informed by the person responsible about the personal data concerning you and to have it corrected, deleted or processed only to a limited extent. You have the right to object to the processing if the prerequisites are given. We also draw your attention to your right to data transfer. This means that you have the right to receive the personal data concerning and provided by you in a structured, common and machine-readable format, and you have the right to transfer this data to another responsible person without obstruction by us.

11. You have the right to complain to the Data Protection Authority. The competent supervisory authority for data protection is:

Hamburgische(r) Beauftragte(r) für Datenschutz und Informationsfreiheit
Klosterwall 6 (Block C)
20095 Hamburg
Germany

ifu Expert News

Monthly whitepaper, best practice examples etc. on sustainable production