Data Protection

We use the Klaro! software to manage cookie consent. Klaro! is a tool that runs locally on our website and stores a cookie named “klaro” in your browser. This cookie contains only your settings regarding the use of cookies and is managed without any external data processing. You can view and change your settings at any time by clicking on the “Open cookie settings” link.

The legal basis for the processing is Article 6(1)(f) of the GDPR. We have a legitimate interest in managing website visitors’ consent to cookies in a straightforward manner.

The Klaro cookie remains stored in your browser until you delete it yourself or change your cookie settings.

RKW Rationalisierungs- und Innovationszentrum der Deutschen Wirtschaft e. V.
RKW Kompetenzzentrum
Düsseldorfer Straße 40 A
65760 Eschborn
Tel: 06196 495-0
E-Mail: kommunikation(at)rkw.de

Represented by Managing Director Jens Nagel.
You can find our legal notice here.

Data Protection Officer:
Our Data Protection Officer is heyData GmbH, Schützenstraße 5, 10117 Berlin, www.heydata.eu, datenschutz(at)heydata.eu.

• Master data (e.g. names, addresses)
• Contact details (e.g. email, telephone numbers)
• Content data (e.g. text entries, photographs, videos)
• Usage data (e.g. websites visited, interest in content, access times)
• Meta/communication data (e.g. device information, IP addresses)

In addition, we process

• contractual data (e.g. subject matter of the contract, term, customer category).
• payment data (e.g. bank details, payment history)

from our customers, prospective customers and business partners for the purposes of providing contractual services, customer service and customer care, marketing, advertising and market research.

Visitors and users of the online service. Hereinafter, we shall also refer to the data subjects collectively as ‘users’.

• Provision of the online service, its functions and content
• Responding to enquiries and communicating with users
• Organising and conducting surveys
• Security measures
• Audience measurement/marketing

‘Personal data’ means any information relating to an identified or identifiable natural person (hereinafter referred to as the ‘data subject’); a natural person is regarded as identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. a cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

‘Processing’ means any operation or set of operations which is carried out on personal data, whether or not by automated means. The term is broad and covers virtually any handling of data.

‘Pseudonymisation’ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.

‘Profiling’ means any form of automated processing of personal data consisting of the use of such personal data

In accordance with Article 13 of the GDPR, we hereby inform you of the legal bases for our data processing activities. Where the legal basis is not specified in the privacy policy, the following applies: The legal basis for obtaining consent is Article 6(1)(a) and Article 7 of the GDPR; the legal basis for processing to fulfil our services, carry out contractual measures and respond to enquiries is Article 6(1)(b) of the GDPR; the legal basis for processing to fulfil our legal obligations is Article 6(1)(c) of the GDPR, and the legal basis for processing to safeguard our legitimate interests is Article 6(1)(f) of the GDPR. In the event that the vital interests of the data subject or another natural person necessitate the processing of personal data, Article 6(1)(d) of the GDPR serves as the legal basis.

In accordance with Article 32 of the GDPR, and taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk.

These measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access to, input of, disclosure of, and availability of the data, and ensuring their separation. Furthermore, we have established procedures to ensure that data subjects’ rights are exercised, that data is erased and that we respond to any data breaches. Furthermore, we take the protection of personal data into account right from the development and selection of hardware, software and procedures, in accordance with the principle of data protection by design and by default (Article 25 of the GDPR).

Where, in the course of our data processing activities, we disclose data to other individuals or organisations (data processors or third parties), transfer it to them or otherwise grant them access to the data, this is done only on the basis of a legal authorisation (e.g. where the transfer of data to third parties, such as payment service providers, is necessary for the performance of a contract in accordance with Article 6(1)(b) of the GDPR), you have given your consent, a legal obligation requires it, or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).

Where we engage third parties to process data on the basis of a so-called ‘data processing agreement’, this is done in accordance with Article 28 of the GDPR.

Where we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)), or where this occurs in connection with the use of third-party services or the disclosure or transfer of data to third parties, this will only take place if it is necessary to fulfil our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to statutory or contractual authorisations, we shall only process data in a third country, or arrange for it to be processed there, where the specific conditions set out in Articles 44 et seq. of the GDPR are met. This means, for example, that processing takes place on the basis of specific safeguards or compliance with officially recognised special contractual obligations (so-called ‘standard contractual clauses’).

You have the right to request confirmation as to whether data concerning you is being processed, and to obtain access to that data, as well as further information and a copy of the data, in accordance with Article 15 of the GDPR.

In accordance with Article 16 of the GDPR, you have the right to request that the data relating to you be completed or that any inaccurate data relating to you be rectified.

In accordance with Article 17 of the GDPR, you have the right to request that the relevant data be erased without delay; alternatively, in accordance with Article 18 of the GDPR, you have the right to request a restriction on the processing of the data.

You have the right to request that the data concerning you, which you have provided to us, be made available to you in accordance with Article 20 of the GDPR and to request that it be transferred to other data controllers.

You have the right to withdraw any consent you have given, in accordance with Article 7(3) of the GDPR, with effect for the future.

You may object at any time to the future processing of your personal data in accordance with Article 21 of the GDPR. In particular, you may object to the processing of your personal data for the purposes of direct marketing.

‘Cookies’ are small files that are stored on users’ computers. Various types of information can be stored within cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after their visit to a website. Temporary cookies, also known as ‘session cookies’ or ‘transient cookies’, are cookies that are deleted once a user leaves an online service and closes their browser. Such a cookie may, for example, store the contents of a shopping basket in an online shop or a login status. Cookies that remain stored even after the browser is closed are referred to as ‘permanent’ or ‘persistent’. For example, a user’s login status may be stored so that it is retained when they return to the site several days later. Similarly, such a cookie may store the user’s interests, which are used for audience measurement or marketing purposes. ‘Third-party cookies’ are cookies provided by providers other than the data controller operating the online service (whereas, if only the data controller’s own cookies are used, these are referred to as ‘first-party cookies’).

We may use both temporary and permanent cookies and provide further information on this in our privacy policy.

If users do not wish to have cookies stored on their computer, they are asked to disable the relevant option in their browser’s settings. Stored cookies can be deleted via the browser settings. Disabling cookies may result in functional limitations on this website.

A general objection to the use of cookies for online marketing purposes can be lodged with a wide range of services – particularly in the case of tracking – via the US website www.aboutads.info/choices/ or the EU website www.youronlinechoices.com. Furthermore, you can prevent cookies from being stored by disabling them in your browser settings. Please note that, in this case, you may not be able to use all the features of this website.

The data we process will be erased or its processing restricted in accordance with Articles 17 and 18 of the GDPR. Unless expressly stated otherwise in this privacy policy, the data stored by us will be erased as soon as it is no longer required for the purpose for which it was collected and there are no statutory retention obligations preventing its erasure. Where data is not erased because it is required for other, legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for any other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.

In accordance with statutory requirements in Germany, data is retained for a period of 10 years in particular, pursuant to Sections 147(1) of the German Fiscal Code (AO), 257(1) nos. 1 and 4, (4) of the German Commercial Code (HGB) (books, records, management reports, accounting documents, trading ledgers, documents relevant for taxation, etc.) and for 6 years in accordance with Section 257(1) nos. 2 and 3, (4) of the German Commercial Code (HGB) (business correspondence).

We process the data of our contractual partners and prospective clients, as well as other clients, customers, clients or contractual partners (collectively referred to as ‘contractual partners’) in accordance with Article 6(1)(b) of the GDPR, in order to provide them with our contractual or pre-contractual services. The data processed in this context, as well as the nature, scope, purpose and necessity of its processing, are determined by the underlying contractual relationship.

The data processed includes the master data of our contractual partners (e.g. names and addresses), contact details (e.g. email addresses and telephone numbers), as well as contractual data (e.g. services used, contract terms, contractual correspondence, names of contact persons) and payment data (e.g. bank details, payment history).

As a general rule, we do not process special categories of personal data, unless these form part of commissioned or contractual processing.

We process data that is necessary for the establishment and fulfilment of contractual obligations and draw attention to the necessity of providing such data, where this is not self-evident to the contracting parties. Data is only disclosed to external individuals or organisations where this is required under the terms of a contract. When processing data entrusted to us in the course of a commission, we act in accordance with the client’s instructions and the relevant legal requirements.

When our online services are used, we may store the IP address and the time of the respective user action. This storage is based on our legitimate interests, as well as the users’ interests in protection against misuse and other unauthorised use. As a general rule, this data is not disclosed to third parties, unless it is necessary for the pursuit of our claims in accordance with Article 6(1)(f) of the GDPR or there is a legal obligation to do so in accordance with Article 6(1)(c) of the GDPR.

The data will be deleted when it is no longer required to fulfil contractual or statutory duties of care, or to deal with any warranty or similar obligations; the necessity of retaining the data is reviewed every three years; otherwise, the statutory retention obligations apply.

We process data in connection with administrative tasks, the organisation of our business operations, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the course of providing our contractual services. The legal bases for processing are Article 6(1)(c) of the GDPR and Article 6(1)(f) of the GDPR. This processing affects customers, prospective customers, business partners and website visitors. The purpose of, and our interest in, the processing lies in administration, financial accounting, office organisation and the archiving of data – in other words, tasks that serve to maintain our business activities, fulfil our duties and provide our services. The erasure of data relating to contractual services and contractual communication is in accordance with the information provided in relation to these processing activities.

In this context, we disclose or transfer data to the tax authorities, advisers such as tax advisers or auditors, as well as other fee-charging bodies and payment service providers.

In order to run our business efficiently and to identify market trends and the needs of our contractual partners and users, we analyse the data available to us relating to business transactions, contracts, enquiries, etc. In doing so, we process customer data, communication data, contract data, payment data, usage data and metadata on the basis of Article 6(1)(f) of the GDPR, whereby the data subjects include contractual partners, prospective customers, customers, visitors and users of our online services.

The analyses are carried out for the purposes of business evaluations, marketing and market research. In doing so, we may take into account the profiles of registered users, including details such as the services they have used. The analyses help us to improve user-friendliness, optimise our offering and enhance operational efficiency. The analyses are used solely by us and are not disclosed externally, unless they are anonymous analyses based on aggregated data.

Where these analyses or profiles contain personal data, they will be deleted or anonymised upon termination of the user’s account; otherwise, they will be deleted two years after the conclusion of the contract. Furthermore, overall business analyses and general trend assessments are carried out anonymously wherever possible.

We process the data of our members, supporters, prospective clients, customers or other individuals in accordance with Article 6(1)(b) of the GDPR, provided that we offer them contractual services or act within the framework of an existing business relationship – for example, with members – or are ourselves recipients of services and donations. Furthermore, we process the data of data subjects in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interests, for example in relation to administrative tasks or public relations work.

The data processed in this context, as well as the nature, scope, purpose and necessity of its processing, are determined by the underlying contractual relationship. This generally includes personal records and master data (e.g. name, address, etc.), as well as contact details (e.g. email address, telephone number, etc.), contractual data (e.g. services used, content and information provided, names of contact persons) and, where we offer services or products subject to a fee, payment details (e.g. bank details, payment history, etc.).

We delete data that is no longer required for the fulfilment of our statutory and business purposes. This is determined in accordance with the respective tasks and contractual relationships. In the case of business-related data processing, we retain the data for as long as it may be relevant to the conduct of business, as well as with regard to any warranty or liability obligations. The necessity of retaining the data is reviewed every three years; otherwise, the statutory retention obligations apply.

We publish job vacancies on our website, on pages linked to our website or on third-party websites. The data provided as part of the application is processed for the purpose of conducting the recruitment process. Insofar as this data is necessary for our decision to enter into an employment relationship, the legal basis is Article 88(1) of the GDPR in conjunction with Section 26(1) of the BDSG. In our job vacancies, we specify the data required to carry out the application process. If applicants do not provide this data, we cannot process their application. Any further data is provided on a voluntary basis and is not required for an application. Should applicants provide further information, the legal basis is their consent (Article 6(1), first sentence, point (a) of the GDPR).

We ask applicants to refrain from including details of political opinions, religious beliefs and similarly sensitive data in their CVs and cover letters. Such information is not required for an application. If applicants nevertheless provide such information, we cannot prevent its processing as part of the processing of the CV or cover letter. Its processing is then also based on the applicant’s consent (Article 9(2)(a) of the GDPR).

Where, as part of the application process, special categories of personal data within the meaning of Article 9(1) of the GDPR are provided on a voluntary basis, their processing is also carried out in accordance with Article 9(2)(b) of the GDPR (e.g. health data, such as severe disability status or ethnic origin). Where, as part of the application process, applicants are asked to provide special categories of personal data within the meaning of Article 9(1) of the GDPR, the processing of such data is also carried out in accordance with Article 9(2)(a) of the GDPR (e.g. health data, where this is necessary for the performance of the job).

Finally, we process applicants’ data for further recruitment processes if they have given us their consent to do so. In this case, the legal basis is Article 6(1), first sentence, point (a) of the GDPR.

Applicants may submit their applications to us via email. However, please note that emails are generally not sent in encrypted form and applicants must ensure encryption themselves. We are therefore unable to accept any responsibility for the transmission of the application between the sender and our server, and we therefore recommend sending applications by post. Instead of applying by email, applicants still have the option of sending their application to us by post.

We pass on applicants’ data to the relevant staff members in the Legal and Human Resources department and to other staff members involved in the recruitment process.

Should an application be successful, the data provided by applicants may be further processed by us for the purposes of the employment relationship. Otherwise, if the application for a vacancy is unsuccessful, the applicants’ data will be deleted. Applicants’ data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time.

Subject to a valid withdrawal by the applicant, the data will be deleted after a period of six months has elapsed, so that we can answer any follow-up questions regarding the application and fulfil our obligations to provide evidence under the Equal Treatment Act. Invoices for any travel expense reimbursements will be archived in accordance with tax regulations.

If applicants have given us their consent to use their data for future recruitment processes, we will not delete their data until one year after receipt of the application.

Users can create a user account. During the registration process, users are informed of the required mandatory details, which are processed on the basis of Article 6(1)(b) of the GDPR for the purpose of providing the user account. The data processed includes, in particular, login details (name, password and an email address). The data entered during registration is used for the purposes of using the user account and in accordance with its intended purpose.

Users may be notified by email of information relevant to their user account, such as technical changes. Once users have terminated their user account, their data relating to that account will be deleted, subject to any statutory retention obligations. It is the users’ responsibility to back up their data prior to the end of the contract following termination. We are entitled to irrevocably delete all user data stored during the term of the contract.

When users make use of our registration and login functions, as well as when using their user account, we store the IP address and the time of the respective user action. This data is stored on the basis of our legitimate interests, as well as the users’ interests in protection against misuse and other unauthorised use. This data is not, as a rule, disclosed to third parties, unless it is necessary to pursue our claims or there is

When you use our registration and login functions, as well as when you use your user account, we store the IP address and the time of the respective user action. This data is stored on the basis of our legitimate interests, as well as the users’ interests in protection against misuse and other unauthorised use. This data is not, as a rule, disclosed to third parties, unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Article 6(1)(c) of the GDPR. IP addresses are anonymised or deleted after 7 days at the latest.

When users leave comments or other posts, their IP addresses may be stored for 7 days on the basis of our legitimate interests within the meaning of Article 6(1)(f) of the GDPR. This is for our own protection in the event that someone posts unlawful content in comments or posts (insults, prohibited political propaganda, etc.). In such cases, we ourselves may be held liable for the comment or post and are therefore interested in the author’s identity.

Furthermore, we reserve the right, on the basis of our legitimate interests pursuant to Article 6(1)(f) of the GDPR, to process users’ data for the purpose of spam detection.

On the same legal basis, we reserve the right, in the case of surveys, to store users’ IP addresses for the duration of the survey and to use cookies to prevent multiple votes.

The data provided in the context of comments and posts will be stored permanently by us until the user objects.

When you contact us (e.g. via the contact form, by email, telephone or via social media), the user’s details are processed for the purpose of handling the contact enquiry and its follow-up in accordance with Article 6(1)(b) (in the context of contractual or pre-contractual relationships) and Article 6(1)(f) (other enquiries) of the GDPR. . Users’ details may be stored in a customer relationship management system (“CRM system”) or a similar enquiry management system.

We delete enquiries once they are no longer required. We review the necessity of retaining them every two years; furthermore, statutory archiving obligations apply.

During our events, photographs and, where applicable, video footage are taken and these are used in print media (e.g. brochures, magazines, annual reports, historical publications), digital publications, on the RKW Competence Centre’s websites (click here for our complete list of domains), such as www.rkw-kompetenzzentrum.de, www.digiscouts.de, www.aufitgebaut.de, www.chefsachen.de, on social media platforms (e.g. XING, LinkedIn, Instagram, Facebook, YouTube), in press releases, radio and television features, the RKW’s own presentations and promotional films, and in our newsletters. Photographic and video documentation of the presentations is carried out on the basis of Article 6(1)(b) of the GDPR for the purpose of fulfilling a contract, in order to provide the services defined in the contractual relationship between the speakers and the RKW Competence Centre.

The further recording of photographs and videos, and thus the processing of personal data, is carried out on the basis of Article 6(1), first sentence, point (f) of the GDPR for the purposes of pursuing legitimate interests. This legitimate interest lies within the scope of our activities as a non-profit and impartial source of inspiration and advice for German SMEs, specifically in relation to event reporting, event documentation, the obligation to provide evidence to the funding body, and public relations work. We may release the photographs and video recordings as part of our press relations work, where appropriate.

At in-person events, the RKW Competence Centre displays a data protection notice at the venue detailing the taking of photographs and, where applicable, videos; the purpose of such recording; the recipients of the image and audio material; the retention period; and the rights of data subjects. If you do not wish to be photographed or filmed, please inform the photographer and/or cameraman on the day of the event.

We regularly organise digital events such as webinars, online seminars, online workshops, online training sessions and online meetings, and to this end we use video conferencing tools provided by external providers (see the list under ‘Online Tools’), with whom we have entered into data processing agreements. The processing of personal data is carried out for the purpose of organising and conducting online events, showing presentations and jointly editing documents on the basis of Article 6(1), first sentence, point (b) of the GDPR, insofar as the online events are conducted within the framework of contractual relationships (e.g. contracts with speakers and moderators).

Where no contractual relationship exists, the legal basis for data processing when organising online events is the pursuit of legitimate interests in accordance with Article 6(1), first sentence, point (f) of the GDPR. Our interest lies in the effective organisation of online events and, in particular, in fulfilling our obligation to provide evidence to the funding body.

You have the option at any time to switch your camera and microphone on or off yourself. If you contribute to the discussion with your microphone switched on and/or use the camera function at the same time to broadcast your image, this personal data will be processed for the purposes of communication within the online meeting and will be visible to all other participants.

If you use the chat, Q&A, poll or whiteboard features, or upload documents, your text input will be processed for the purposes of communication within the online meeting, so that it can be displayed during the meeting. This text will be visible to all other participants.

Webinars or online seminars are educational events in which experts provide information on various topics across different specialist fields via a live stream. Where webinars or online seminars are recorded, the processing of personal data is carried out on the basis of Article 6(1), first sentence, point (f) of the GDPR for the purposes of pursuing legitimate interests. This legitimate interest arises from our role as a non-profit and impartial source of inspiration and advice for German small and medium-sized enterprises (SMEs) in the areas of event reporting, event documentation, the obligation to provide evidence to the grant recipient, and public relations.
We make it clear at the time of registration for the online event that we intend to take photographs and, where applicable, make video recordings. For the purposes of recording and reviewing the content of webinars, the chat history and any uploaded contributions may be stored in a text file containing the participant’s surname, first name and the text of the chat message. You may disable your camera and microphone at any time.

Online meetings are used for communication between the RKW and its partners and project participants, and are not usually recorded. Online workshops and online training sessions focus on selected concepts, methods and practical exercises relating to a specific topic. They take place in smaller groups and are designed to facilitate an open exchange of experiences. As a rule, these are not recorded either. If we wish to record online meetings, online workshops and online training sessions, we will inform you of this transparently in advance. A recording will only be made if prior consent has been obtained from all participants in accordance with Article 6(1), first sentence, point (a) of the GDPR. This consent relates to the storage of audio, video and text recordings. You may disable your camera and/or microphone at any time. You may withdraw your consent at any time with future effect. The lawfulness of any data processing carried out on the basis of your consent up until the time of withdrawal remains unaffected by this withdrawal.

The following information explains the content of our newsletter, as well as the procedures for subscription, distribution and statistical analysis, and your rights to object. By subscribing to our newsletter, you agree to receive it and to the procedures described.

Content of the newsletter: We send out newsletters, emails and other electronic communications containing promotional information (hereinafter ‘newsletters’) only with the consent of the recipients or where permitted by law. Where the content of the newsletter is specifically described as part of the subscription process, this content forms the basis for the user’s consent. In addition, our newsletters contain information about our services and our organisation.

Double opt-in and logging: Subscription to our newsletter is carried out via a so-called double opt-in procedure. This means that, after subscribing, you will receive an email asking you to confirm your subscription. This confirmation is necessary to ensure that no one can subscribe using someone else’s email address. Newsletter subscriptions are logged so that we can provide evidence of the subscription process in accordance with legal requirements. This includes storing the time of subscription and confirmation, as well as the IP address. Any changes to your data stored with the mailing service provider are also logged.

Subscription details: To subscribe to the newsletter, you simply need to provide your email address. We also ask you, on an optional basis, to provide a name so that we can address you personally in the newsletter.

The sending of the newsletter and the associated performance measurement are carried out on the basis of the recipients’ consent in accordance with Article 6(1)(a), Article 7 of the GDPR in conjunction with Section 7(2)(3) of the UWG; or, where consent is not required, on the basis of our legitimate interests in direct marketing pursuant to Article 6(1)(f) of the GDPR in conjunction with Section 7(3) of the UWG.

The registration process is logged on the basis of our legitimate interests in accordance with Article 6(1)(f) of the GDPR. Our interest lies in the use of a user-friendly and secure newsletter system that both serves our business interests and meets users’ expectations, whilst also enabling us to provide evidence of consent.

Cancellation/Withdrawal – You may cancel your subscription to our newsletter at any time, i.e. withdraw your consent. A link to unsubscribe from the newsletter can be found at the end of every newsletter. We may store unsubscribed email addresses for up to three years on the basis of our legitimate interests before deleting them, in order to be able to provide evidence of consent previously given. The processing of this data is limited to the purpose of potentially defending against claims. An individual request for erasure may be made at any time, provided that the prior existence of consent is confirmed at the same time.

The newsletters contain a so-called ‘web beacon’, i.e. a pixel-sized file which is retrieved from our server – or, if we use a mailing service provider, from their server – when the newsletter is opened. As part of this retrieval process, technical information – such as details about your browser and system – as well as your IP address and the time of retrieval are initially collected.

This information is used to improve our services technically on the basis of the technical data, or to analyse target groups and their reading behaviour based on their location (which can be determined using the IP address) or the times at which the newsletter is accessed. The statistical analysis also includes determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be linked to individual newsletter recipients. However, it is neither our intention, nor – where applicable – that of the mailing service provider, to monitor individual users. Rather, the analyses serve to help us identify our users’ reading habits and adapt our content accordingly, or to send different content based on our users’ interests.

Unfortunately, it is not possible to opt out of performance tracking separately; in this case, the entire newsletter subscription must be cancelled.

The hosting services we use are intended to provide the following: infrastructure and platform services, computing capacity, storage space and database services, email delivery, security services and technical maintenance services, which we utilise for the purpose of operating this online service.

In doing so, we, or our hosting provider, process personal data, contact details, content data, contractual data, usage data, metadata and communication data relating to customers, prospective customers and visitors to this online service on the basis of our legitimate interests in the efficient and secure provision of this online service in accordance with Article 6(1)(f) of the GDPR in conjunction with Article 28 of the GDPR (conclusion of a data processing agreement).

[Translate to Englisch:]

Wir führen Umfragen über unsere Veranstaltungen, Dienstleistungen, Services und Produkte durch, um unser Angebot zu verbessern und um die Wirtschaftlichkeit, den Erfolg und die Wirkung der Arbeit des RKW sowie die Zweckmäßigkeit der eingesetzten Zuwendungen zu evaluieren. Die Verarbeitung personenbezogener Daten im Zusammenhang mit Umfragen erfolgt auf der Grundlage der Wahrung berechtigter Interessen gemäß Art. 6 Abs. 1 (f) DSGVO. Zur Durchführung von Umfragen verwenden wir verschiedene Umfragetools auch externer Anbieter (aufgeführt im Abschnitt „Online-Tools“), mit denen wir Auftragsverarbeitungsvereinbarungen abgeschlossen haben. Zur Ansprache potentieller Teilnehmenden per E-Mail verarbeiten wir Angaben wie Namen, Vornamen und E-Mail-Adressen. Wir kontaktieren Sie nur unter Wahrung der gesetzlichen Vorgaben zur Bestandskundenwerbung oder im Rahmen der Einwilligung, die Sie uns erteilt haben. Die Teilnahme an Umfragen erfolgt freiwillig. Sie können die Umfragen jederzeit ohne Angabe von Gründen abbrechen. Sie können der Verwendung Ihrer Kontaktdaten jederzeit mit Wirkung für die Zukunft widersprechen. Dazu finden Sie einen Link unter jeder Umfrage oder eine E-Mailadresse für den Widerruf. Ihre persönlichen Daten werden gemäß der DSGVO streng vertraulich behandelt und werden nicht zu einem anderen als dem genannten Zweck verwendet. Once the survey has been completed, personal data will be deleted. The data will be analysed only in anonymised form, and no conclusions can be drawn about individual participants. The anonymised analysis results may be passed on to third parties, such as public bodies and institutions (e.g. the Federal Ministry for Economic Affairs and Energy, the Federal Office for Economic Affairs and Export Control), for the purposes of evaluating events, assessing the effectiveness of funding, etc., and will be published on the websites of the RKW Competence Centre, the BMWi or third parties.

We, or rather our hosting provider, collect data on every access to the server on which this service is hosted (so-called server log files) on the basis of our legitimate interests within the meaning of Article 6(1)(f) of the GDPR. The access data includes the name of the webpage accessed, the file, the date and time of access, the amount of data transferred, confirmation of successful access, the browser type and version, the user’s operating system, the referrer URL (the previously visited page), the IP address and the requesting provider.

Log file information is stored for a maximum of 7 days for security reasons (e.g. to investigate cases of misuse or fraud) and is then deleted. Data which must be retained for further evidence purposes is exempt from deletion until the relevant incident has been fully clarified.

Wir setzen etracker zur Analyse von Nutzungsdaten ein. Anbieter ist die etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Deutschland.

etracker wird standardmäßig ohne den Einsatz von Analyse-Cookies verwendet (cookieless Tracking). Sofern im Einzelfall Analyse-Cookies eingesetzt werden, erfolgt dies ausschließlich auf Grundlage einer vorherigen Einwilligung. Liegt keine Einwilligung vor, erfolgt die Analyse ohne den Einsatz solcher Cookies.

We use etracker to analyse usage data. The provider is etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany.

By default, etracker is used without the use of analytics cookies (cookieless tracking). Where analytics cookies are used in individual cases, this is done exclusively on the basis of prior consent. If no consent has been given, the analysis is carried out without the use of such cookies.

The data generated by etracker is processed on our behalf within the European Union. etracker has been independently audited and awarded the ePrivacyseal data protection seal of approval.

Data processing is carried out on the basis of Article 6(1)(f) of the GDPR. Our legitimate interest lies in optimising our online services and our website. To protect the privacy of our visitors, personal data, in particular IP addresses, is anonymised or pseudonymised at the earliest opportunity. No data is passed on to other third parties.

Further information on data protection at etracker can be found in the provider’s privacy policy at https://www.etracker.com/datenschutzerklaerung/.

You may object to the data processing described above at any time by clicking on the slider below. Objecting will not result in any adverse consequences. If no slider is displayed, data collection has already been prevented by other blocking measures.

We maintain an online presence on social media networks and platforms in order to communicate with customers, prospective customers and users active on these platforms and to provide them with information about our services.

We would like to point out that, in doing so, users’ data may be processed outside the European Union. This may entail risks for users, as it could, for example, make it more difficult to enforce their rights. With regard to US providers that use the EU Standard Contractual Clauses, we would like to point out that they thereby undertake to comply with EU data protection standards.

Furthermore, users’ data is generally processed for market research and advertising purposes. For example, usage profiles may be created based on users’ behaviour and the resulting interests. These usage profiles may in turn be used, for example, to display advertisements both on and off the platforms that are presumed to correspond to users’ interests. For these purposes, cookies are usually stored on users’ computers, in which users’ usage behaviour and interests are recorded. Furthermore, data may also be stored in the user profiles regardless of the devices used by the users (particularly if the users are members of the respective platforms and are logged in to them).

The processing of users’ personal data is carried out on the basis of our legitimate interests in providing users with effective information and communicating with them, in accordance with Article 6(1)(f) of the GDPR. If users are asked by the respective providers to consent to data processing (i.e. to give their consent, for example, by ticking a box or clicking a button), the legal basis for the processing is Article 6(1)(a) and Article 7 of the GDPR.

For a detailed description of the respective processing activities and the options for objecting (opt-out), please refer to the information provided by the providers via the links below.

We would also like to point out that, in the case of requests for information and the exercise of user rights, these can most effectively be exercised with the providers themselves. Only the providers have access to users’ data and can take appropriate action and provide information directly. Should you nevertheless require assistance, please do not hesitate to contact us.

• Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland) - Privacy Policy: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads und http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

• Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Privacy Policy:  https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

• Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – Privacy Policy/ Opt-Out: http://instagram.com/about/legal/privacy/.

• Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Deutschland) - Privacy Policy/ Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.

Within our online offering, we rely on our legitimate interests (i.e. our interest in the analysis, optimisation and commercial operation of our online offering within the meaning of Article 6(1)(f) of the GDPR) content or services from third-party providers in order to integrate their content and services, such as videos or fonts (hereinafter collectively referred to as “content”).

This always requires the third-party providers of this content to collect the users’ IP addresses, as they would be unable to send the content to the users’ browsers without the IP address. The IP address is therefore necessary for the display of this content. We endeavour to use only such content whose respective providers use the IP address solely for the purpose of delivering the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as ‘web beacons’) for statistical or marketing purposes. These ‘pixel tags’ enable information, such as visitor traffic on the pages of this website, to be analysed. The pseudonymous information may also be stored in cookies on the user’s device and may include, amongst other things, technical information about the browser and operating system, referring websites, time of visit and further details regarding the use of our online service, as well as being linked to such information from other sources.

We embed videos from the “YouTube” platform provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

We embed maps from the “Google Maps” service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The data processed may include, in particular, users’ IP addresses and location data; however, this data is not collected without their consent (which is usually given via the settings on their mobile devices). The data may be processed in the USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

We use platforms and applications provided by other providers (hereinafter referred to as “third-party providers”) for the purposes of providing digital services, conducting video and audio conferences, and carrying out surveys. When selecting third-party providers and their services, we comply with the relevant legal requirements.

Within this framework, data relating to participants in communications is processed and stored on the third-party providers’ servers, insofar as such data forms part of communications with us. This data may include, in particular, registration and contact details, visual and audio contributions, as well as chat messages and shared screen content.

Askallo

Service provider: askallo GmbH, Brauerstr. 12, 76135 Karlsruhe
Website: www.askallo.de
Privacy Policy: https://www.askallo.de/rechtliche-hinweise/ und https://www.askallo.de/datenschutz/
There is no obligation to take part.

DS2

Service provider: RKW Kompetenzzentrum
Website: ds2.digiscouts.de  
Privacy Policy: https://ds2.digiscouts.de/privacy  
There is no obligation to take part.

Mentimeter

Service provider: Mentimeter AB, Alströmergatan 22, SE-112 47 Stockholm, Sweden;
Website: https://www.mentimeter.com/
Privacy Policy: https://www.mentimeter.com/privacy
There is no obligation to take part.

MS Teams Essentials

Service provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Website: https://www.microsoft.com
The privacy policy regarding the use of MS Teams Essentials as part of the services offered by the RKW Competence Centre is available here as a PDF-Document (DE).
Microsoft’s General Privacy Statement: https://www.microsoft.com/de-de/privacy/privacystatement
There is no obligation to take part.

Tweedback

Service provider: Tweedback GmbH, Richard-Wagner-Straße 1a, 18055 Rostock
Website: tweedback.de
Privacy Policy: https://tweedback.de/p/terms und https://tweedback.de/p/privacy
FAQ: https://tweedback.de/faq
There is no obligation to take part.

Webmag

Service provider: Webmag GmbH, Müllerstraße 40, 80469 München, Website: https://www.webmag.io 
Privacy Policy: https://www.webmag.io/datenschutz 

Wonder

Service provider: Yotribe GmbH, Kommandantenstraße 77, 10117 Berlin, Website: https://www.wonder.me
Privacy Policy: https://www.wonder.me/privacy-policy
There is no obligation to take part.