Privacy policy

‘Personal data’ means any information relating to an identified or identifiable natural person (e.g. name, address, telephone number, date of birth, email address or user behaviour). 

‘Processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. 

Purpose of processing, data categories and legal bases 

Provision of online services (including functions and content) 

If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we collect the data that is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 (1) sentence 1 lit. f GDPR). This includes: 

• IP address 

• Date, time and time zone of the request 

• Content of the request (specific page) 

• HTTP status code 

• Operating system incl. version 

• Language and version of the browser software 

We do not assign this data (so-called log files) to specific persons. For security reasons and to identify faults, this data is stored for a maximum of 30 weeks and then deleted. However, if this information needs to be stored for evidence purposes (e.g. in the context of investigating abuse or fraud), it will not be deleted until the respective incident has been conclusively clarified. 

Cookies for web analysis  

We use technically necessary cookies to provide the website. Without these cookies, the website cannot function properly (legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR). We also use cookies to make our website more user-friendly and effective and to analyse the website (legal basis: Art. 6 para. 1 sentence 1 lit. a GDPR, Art. 7 GDPR). You can find detailed information in our cookie policy. 

Website forms (contact requests, surveys, etc.) 

Personal data that you voluntarily provide to us (such as first and last name, email address, telephone number) will be processed to handle the contact request, survey and its execution (legal basis: Art. 6 (1) (b) GDPR). 

Newsletter 

With your consent, you can subscribe to our newsletter, in which we inform you about our current projects and events. 

We use the so-called double opt-in procedure for registering for our newsletter. This means that after you register, we will send an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 48 hours, your information will be blocked and automatically deleted. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to be able to verify your registration and, if necessary, to clarify any possible misuse of your personal data. 

The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending you the newsletter. The legal basis for this is Art. 6 para. 1 sentence 1 lit. a DS-GVO, Art. 7 DSGVO in conjunction with § 7 para. 2 no. 3 UWG. 

You can revoke your consent to receive the newsletter at any time by clicking on the unsubscribe link contained in the newsletter 

Inclusion of third-party services and content 

Our website uses links to third-party providers in order to include videos or fonts, for example. This is done on the basis of Article 6 (1) (1) (f) GDPR. 

YouTube 

We use the YouTube platform to integrate our videos: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, represented by Sundar Pichai (Chief Executive Officer). According to their privacy policy, you have the option to object to the processing of your personal data on the platform (opt-out): https://adssettings.google.com/authenticated  

X 

Within our website, we use links to X (Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland) profiles. If the user is a member of Twitter, Twitter can assign the access to the above-mentioned content and functions to the user's profiles there. According to their privacy policy, you have the option to object to the processing of your personal data (opt-out): https://x.com/settings/account/personalization. 

LinkedIn 

We use links to LinkedIn (LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, CA 94085, USA) on our website and in our mailings. If you are a member of LinkedIn, LinkedIn can assign the access to the content and functions on our website and in our mailings to your profile there. According to their privacy policy, you have the option to object to the processing of your personal data by LinkedIn (opt-out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.  

Further information can be found in LinkedIn's privacy policy: LinkedIn Privacy Policy. 

Google Fonts 

We integrate fonts from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, represented by Sundar Pichai (Chief Executive Officer). According to their privacy policy, you have the option to object to the processing of your personal data (opt-out): https://adssettings.google.com/authenticated. 

Links to third-party websites 

Our website also contains links to third-party websites. Once you click on the link, we no longer have any influence over the collection, storage and processing of your personal data (e.g. IP address or URL of the page on which the link is located). 

Facebook 

Within our website, we use links to Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). Privacy Policy: https://de-de.facebook.com/privacy/explanation  

Types of data processed 

We process the following personal data of contact persons of cooperation partners, clients, project partners, contractors, public authorities and other business contacts (each a business contact): 

• Contact details, such as first and last name, business address/telephone number/fax/email address 

• Information that needs to be processed in the context of a project, the initiation of a contract or the execution of a contractual relationship with dena (this also includes payment data) or that is voluntarily provided by business contacts, e.g. in the context of enquiries, and 

• personal data collected from publicly available sources, information databases or credit reference agencies. 

Purposes and legal basis of processing 

We process personal data for 

• planning, executing, managing and processing contractual relationships 

• communicating with business contacts about our events, services and products 

• maintaining and protecting the security of our products and services (including our websites) 

• fulfilling legal obligations (in particular tax and commercial law retention obligations) 

• enforcement of existing contracts and for the assertion, exercise and defense of legal claims and 

• conducting satisfaction surveys, marketing campaigns, market analyses, competitions 

Unless otherwise expressly stated when personal data is collected, it will be processed 

• on the basis of your express consent (Art. 6 (1) 1 lit. a GDPR), 

• based on your request for information as part of the contract initiation (Art. 6 (1) 1 lit. b GDPR), 

• for the execution and fulfillment of contracts (Art. 6 (1) 1 lit. b GDPR), 

• to comply with legal obligations (Art. 6 (1) 1 (c) GDPR) or 

• to protect the legitimate interests of dena (business contact management and marketing, Art. 6 (1) 1 (f) GDPR). 

Your personal data will only be disclosed, transmitted or otherwise granted access to third parties on the basis of legal permission (e.g. for the performance of a contract, if you have given your consent, on the basis of our legitimate interests or in the case of a legal obligation). 

If third parties are commissioned to process data on the basis of a data processing agreement, they may only process this personal data in accordance with Art. 28 GDPR and only in accordance with our instructions. 

Transfer to third countries 

It is ensured that, before personal data is passed on, either an adequate level of data protection exists or the agreement of so-called EU standard contractual clauses of the European Union with the recipient or sufficient consent of the data subject is in place. 

If you have given us permission to process your personal data, you have the right to revoke this permission at any time with effect for the future. All you need to do is send an e-mail to Widerruf-Einwilligung(at)dena.de. The revocation does not affect the lawfulness of the processing carried out before the revocation on the basis of the consent. After the revocation, we may only process your personal data to the extent that there is another legal basis for doing so. 

In accordance with the statutory provisions, you have the following rights with respect to the personal data concerning you: 

• Right of access in accordance with Art. 15 GDPR, 

• Right to rectification or erasure in accordance with Art. 16, 17 GDPR, 

• Right to restriction of processing in accordance with Art. 18 GDPR 

• Right to object to processing in accordance with Art. 21 GDPR, 

• Right to data portability in accordance with Art. 20 GDPR 

You also have the right to complain to a data protection supervisory authority about our processing of your personal data.   

Your data will only be stored for as long as is necessary to provide our services and online offers and provided there is no legal obligation to store it. Data that is subject to a legal retention period will be blocked until the end of the relevant retention period. This data will no longer be available for further use. 

You can contact our data protection officer at datenschutz(at)dena.de or at our postal address, for the attention of the data protection officer.