The protection of your personal data is important to us.
We, Brandenburg Invest | Babelsberger Straße 21 | 14473 Potsdam | email@example.com, as the provider of this website and controller in accordance with Article 4(7) of the EU General Data Protection Regulation (“GDPR”) of course respect the applicable data protection regulations, primarily the GDPR. Needless to say, we will be handling your personal data responsibly.
In the text below we would like to elaborate on the use of your personal data, its purpose, on how we will process such data and on your rights in this regard.
Should you have any questions with regard to data protection, please feel free to contact our Data Protection Officer at Brandenburg Invest at firstname.lastname@example.org or by mail including the reference “Data Protection Officer”.
We will only process your personal data, such as your name, postal address, email address or other contact details, if you enter them on the website and submit them to us, and only if such data-processing is permitted by law and we have obtained your consent.
The use of certain services on the website, e.g. registration forms, requests, online applications or subscriptions to our newsletter require the collection, processing and use of personal data. In these instances we adhere to the principle of data minimisation. In the case of each of those services we will inform you accordingly about the purpose of the processing of your personal data.
When subscribing to the newsletter of Brandenburg Invest, we will - with your explicit consent - process the data you have provided us based on point (a) of Article 6(1) of the GDPR, in order to send you our newsletter. It is necessary that you enter your email address, while all of the other information is optional. Of course you can withdraw your consent at any time and thereby unsubscribe from the newsletter with future effect. Feel free to contact us in this regard by email or mail, or by clicking on the link provided in our newsletter. Further information about the sending of our newsletter will be provided below.
The personal data collected during the use of our website will not be provided to third parties or submitted in any other way unless we are legally entitled or obliged to do so (e.g. for law enforcement purposes). The legal basis for such actions can be found under point (c) of Article 6(1) of the GDPR.
When you contact us with a request, we will process your name and your email address exclusively for the purposes of processing your request and for the purposes of contacting you in this regard. The legal basis for such actions can be found under point (b) of Article 6(1) of the GDPR. All other information is optional and will be processed only with your consent according to point (a) of Article 6 (1) of the GDPR.
External service providers whose services we use in order to run our website or to offer specific services on our website will process personal data exclusively on our behalf while being contractually obliged to adhere to the current legal provisions concerning data protection and data security. They are not considered third parties as defined by data protection laws.
Image and sound recordings
Should image and sound recordings be produced at events for public relations purposes of Brandenburg Invest or for location marketing purposes, you are giving your consent to the publication of such recordings by participating in the event. If you do not agree with the publication of such images and sound recordings as far as they concern your person, please inform the organiser of the event.
Brandenburg Invest’s website uses Google Analytics, a digital analytics tool provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (hereinafter: Google). Google Analytics uses so-called cookies, i.e. text files that are stored on your computer and make it possible to analyse your usage of the website. The information about your usage of our website generated by the cookie will be generally transmitted to a Google server in the USA where it will be stored.
However, we have activated IP anonymisation and Google will shorten and thereby anonymise your IP address. This applies within the Member States of the European Union or within other states that are signatories to the Agreement on the European Economic Area. The full IP address will be submitted to a Google server in the USA only in exceptional cases and subsequently shortened there. On behalf of the provider of this website, Google will use this information to analyse your usage of the website, to compile reports on website activities and to provide other services related to the usage of the website and the usage of the Internet to the provider of the website. The IP address sent from your browser by Google Analytics will not be added to Google’s other data.
You can use the settings of your browser to stop cookies from being saved on your computer. However, we would like to remind you that by refusing cookies you might not be able to use all of the functions of our website to their full extent. Furthermore you can prevent the data generated by the cookies and related to your usage of the website (including your IP address) from being sent to Google as well as from being processed by Google by downloading and installing available browser plug-ins: tools.google.com/dlpage/gaoptout.
We use Google Analytics to analyse the usage of our website and to regularly improve it. Thanks to the statistical data we receive we are able to improve our content and to make it more attractive to you, the users. With regard to the exceptional cases in which personal data are sent to the USA, Google submitted to the EU-US Privacy Shield.
The legal basis for the use of Google Analytics can be found in the first sentence of point (f) of Article 6(1) of the GDPR.
This website uses Google Maps API, a map service by Google, to display an interactive map. By using Google Maps, information about your usage of the website (including your IP address) can be sent to a Google server in the USA where it will be stored. This will happen regardless of you being logged into a user account provided by Google or not; it will also happen if no such account exists. If you are logged into a Google account, the data will be assigned directly to your account. If you do not wish information to be assigned directly to your Google profile, you have to log out before you activate the button. Google will store your data in the form of user profiles and use them for the purpose of advertising, market research and/or custom-tailored website design. Such an analysis takes place (and this also applies to users who are not logged in) mainly to provide appropriate advertising and to inform other users of the social network about your activity on our website. You have the right to object the creation of such user profiles, but in order to do so you have to contact Google directly. An appropriate level of protection with regard to your data in the USA is being guaranteed by the fact that Google submitted to the EU-US Privacy Shield.
Subscriptions to our newsletter
On the websites of the Brandenburg-specific Clusters of Brandenburg Invest, users are given the opportunity to subscribe to our newsletter. The personal data required for receiving the newsletter, which will be sent to the controller for processing, can be deduced from the input mask used to subscribe.
Brandenburg Invest uses the newsletter to regularly inform its clients and business partners about its services and products. Our company newsletter can only be received by the data subject if (1) the data subject has a valid email address and (2) if the data subject has signed up for receiving the newsletter. For legal reasons the double opt-in process will be used and thus a one-time confirmation email will be sent to the email address the data subject has entered in order to receive the newsletter. This confirmation email serves the purpose of verifying whether the data subject as the owner of the email address has authorised the subscription of the newsletter.
When signing up for our newsletter we will also store the IP address (provided by the internet service provider) of the computer system the data subject used at the time of signing up for the newsletter as well as the date and the time when the data subject signed up. The collection of such data is necessary in order to, at a later time, be able to retrace (potential) abuse of the data subject’s email address, and thereby it also serves as the controller’s legal protection.
The personal data collected in the framework of signing up for the newsletter will be used exclusively for the sending of our newsletter. Furthermore, subscribers of our newsletter could receive informational emails in so far as such emails are necessary for providing the newsletter service itself or for newly signing up in the event of changes to our newsletter service or due to technical circumstances. The personal data collected in the framework of our newsletter service will not be forwarded to third parties.
The data subject can at any time unsubscribe from the newsletter subscription. The data subject can at any time withdraw his or her consent to the storing of his or her personal data provided by the data subject in the framework of our newsletter service. In order to withdraw the given consent, each newsletter also contains a link that can be used by the subscriber. Furthermore, it is at any time possible to unsubscribe from the newsletter on the website of the controller or to communicate this information to the controller via other means.
Our newsletter is being sent out by the email marketing service “MailChimp”, a platform for sending out newsletters by the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can find the data protection provisions of the email marketing service here. The Rocket Science Group LLC d/b/a MailChimp submitted to the EU–US Privacy Shield, and therefore it also submitted to maintaining the European data protection standards.
The email service is being used for the purposes of our legitimate interests according to point (f) of Article 6(1) of the GDPR and by a processor on behalf of the controller according to the first sentence of Article 28(3) of the GDPR.
The email marketing service can use the data of the recipients for statistical purposes or in order to optimise or improve its own service (e.g. the technical aspects of sending the newsletter or the way it is displayed) only if they are pseudonymised, i.e. not assigned to a specific user. However the email marketing service will not use the data of our newsletter subscribers to contact them directly or to forward their data to third parties.
Incorporating services and content of third parties
Based on our legitimate interests (i.e. interests in the analysis, optimisation and economic operation of our online content according to point (f) of Article 6(1) of the GDPR) we use services and content offered by third-party providers for our online content. This includes the incorporation of their content and services in the form of, for example, videos or font types (hereinafter jointly referred to as “content”).
This always implies that the third-party providers of said content will be aware of the IP address of the users as they are not able to send their content to a browser without an IP address. The IP address is thus necessary to bring the content to the user. We strive to use only content offered by providers that use IP addresses solely for the delivery of their content. Furthermore, third-party providers can use so-called pixel tags (invisible graphics also known as “web beacons”) for statistical or marketing purposes. “Pixel tags” enable the analysis of information, including user access to this website. The pseudonymised information might further be stored in cookies on the computer of the users and contain technical information about the browser or the operating system, referring websites, access periods and other information about the use of the online content; furthermore this information can be joined with similar information from other sources.
We can embed videos from the platform “YouTube” by the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
We strive to make our content attractive to visitors of our website. This is why we use “cookies” as they allow us to offer certain functions. Cookies are text files that are stored on your computer and that enable an analysis of your usage of the website. They store e.g. information about the operational system, the browser, your IP address, the websites you have previously visited (referrer URL) and the date and time of your visit to our website. The data will be collected and stored exclusively in a pseudonymised form and so-called user profiles will be created under a pseudonym. The data will not be used to individually identify the visitors of this website and the data will not be linked to the data of the holder of the pseudonym.
Notice and data security
We protect our website and our other systems by up-to-date technical and organisational measures against the loss, destruction, accessing, changing or dissemination of your data by unauthorised persons. You should always keep your access information confidential and close the browser window after you have finished communicating with us, especially if you share a computer with other users.
The information you provide us with through our website is being encrypted during the process of electronic transmission and is always treated as strictly confidential.
Routine erasure and blocking of personal data
The controller processes and stores the personal data of the data subject only for the period necessary to achieve the purpose of storage, or as far as this is granted by the European legislator or other legislators in laws or regulations to which the controller is subject to.
If the storage purpose is not applicable, or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data are routinely blocked or erased in accordance with legal requirements.
Rights of the data subject
a) Right of confirmation
Each data subject shall have the right granted by the European legislator to obtain from the controller the confirmation as to whether or not personal data concerning him or her are being processed. If a data subject wishes to exercise his or her right of confirmation, he or she may, at any time, contact any employee of the controller.
b) Right of access
Each data subject shall have the right granted by the European legislator to obtain from the controller free information about his or her personal data stored at any time and a copy of this information. Furthermore, the European legislator has given the data subject the right to the following information:
Furthermore, the data subject shall have a right to obtain information as to whether personal data are transferred to a third country or to an international organisation. Where this is the case, the data subject shall have the right to be informed of the appropriate safeguards relating to the transfer.
If a data subject wishes to exercise his or her right of access, he or she may, at any time, contact any employee of the controller.
c) Right to rectification
Each data subject shall have the right granted by the European legislator to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall furthermore have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
If a data subject wishes to exercise this right to rectification, he or she may, at any time, contact any employee of the controller.
d) Right to erasure (“Right to be forgotten”)
Each data subject shall have the right granted by the European legislator to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the following grounds applies, as long as the processing is not necessary:
Where Brandenburg Invest has made the personal data public and is obliged pursuant to Article 17(1) of the GDPR to erase the personal data, Brandenburg Invest taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers who are processing the published personal data that the data subject has requested the erasure of any links to, or copy or replication of, those personal data by such controllers, as far as processing is not required.
e) Right to restriction of processing
Each data subject shall have the right granted by the European legislator to obtain from the controller restriction of processing where one of the following applies:
If one of the aforementioned conditions is met and a data subject wishes to request the restriction of the processing of personal data stored by Brandenburg Invest, he or she may, at any time, contact any employee of the controller. The employee of Brandenburg Invest will arrange the restriction of the processing.
f) Right to data portability
Each data subject shall have the right granted by the European legislator to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format, and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent pursuant to point (a) of Article 6(1) of the GDPR or point (a) of Article 9(2) of the GDPR or on a contract pursuant to point (b) of Article 6(1) of the GDPR; and the processing is carried out by automated means, as long as the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, in exercising his or her right to data portability pursuant to Article 20(1) of the GDPR, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible and when doing so does not adversely affect the rights and freedoms of others.
In order to exercise the right to data portability, the data subject may, at any time, contact the Data Protection Officer of Brandenburg Invest.
g) Right to object
Each data subject shall have the right granted by the European legislator to object, at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her, which is based on point (e) or (f) of Article 6(1) of the GDPR. This also applies to profiling based on these provisions.
Brandenburg Invest shall no longer process the personal data in the event of the objection, unless Brandenburg Invest can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
If Brandenburg Invest processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing. This also applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to Brandenburg Invest to the processing for direct marketing purposes, Brandenburg Invest will no longer process the personal data for these purposes.
Furthermore, the data subject shall have the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her by Brandenburg Invest for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out in the public interest.
In order to exercise the right to object, the data subject may contact any employee of Brandenburg Invest or any other staff member. In addition, the data subject is free, in the context of the use of information society services and notwithstanding Directive 2002/58/EC, to use his or her right to object by automated means using technical specifications.
h) Right to withdraw data protection consent
Each data subject shall have the right granted by the European legislator to withdraw his or her consent to the processing of his or her personal data at any time. If the data subject wishes to exercise the right to withdraw the consent, he or she may, at any time, contact any employee of the controller.
You can (1) exercise the aforementioned rights or (2) ask questions or (3) file complaints against our processing of your personal data by contacting us.