Privacy Policy

Last updated: March 2020

Please note that this is the convenience translation of the German version. The German version can be found here https://atenekom.eu/impressum/datenschutz/ .
In case of inconsistencies between the English and the German version, the German version shall always prevail.

Thank you for your interest in our website. Below, we have provided you with information about what data we collect and process, and for what purposes, when you use our website.

Contact
The contact and controller under the EU General Data Protection Regulation (GDPR) for the collection, processing and use of personal data belonging to the website visitor (hereinafter referred to as ‘you’) is

atene KOM GmbH
Invalidenstrasse 91
10115 Berlin, Germany

Phone: +49 (0)30 22183-0

Please do not hesitate to contact us if you have any questions or suggestions on the topic of data protection. You are also welcome to send any data protection issues you might have to our data protection officer by emailing datenschutz@atenekom.eu. You will also find our complete contact details here.

2. Data processing when using our website

2.1 Visiting the site. Generally speaking, you can visit our website without any need to provide personal data. Personal data is only collected insofar as doing so is necessary for technical reasons for use of our site, or if you use certain functions or services offered on our website, such as the contact form. The following access data is automatically collected each time you use our website:

  • Date and time of access
  • Name of the requested file
  • The page that the file was requested from
  • Access status (e.g. file transferred, file not found)
  • The web browser you use and your device’s operating system
  • The requesting device’s IP address

This data needs to be processed to enable the visit to the website and to ensure that our systems are permanently functional, available and secure. The legal basis for such data processing activities is Art. 6 (1), sentence 1, (b) of the GDPR. For the purposes described above, the access data is also temporarily stored in internal log files to generate statistical data about how our website is used, to further develop our website with regard to our visitors’ usage habits (e.g. if the proportion of mobile devices used to access the pages increases), and for general administrative maintenance of our website. The legal basis for such data processing activities is Art. 6 (1), sentence 1, (f) of the GDPR, based on our legitimate interest in properly optimising our website. The information stored in the log files does not allow any direct conclusions to be drawn about you as a person; in particular, we only store IP addresses in truncated, anonymised form. The log files are stored for six months and then deleted.

2.2 Contact form
We offer you the option of sending us messages directly using a contact form. You must provide an email address that we can contact you on when doing so. We also ask for your name so that we can address you. The mandatory fields are marked as such. We process the data that you provide in the contact form to answer your enquiry. To be able to process your enquiry properly, we may disclose the data provided in the contact form to one of our regional offices listed on the locations overview page. This is done so that the team responsible for your region can properly answer your enquiry. The legal basis for the described data processing activities is Art. 6 (1), sentence 1, (b) of the GDPR. The data collected when the contact form is used shall automatically be deleted once your enquiry has been processed.

2.3. atene-Newsletter

You have the option to order our newsletter, which regularly informs you about new projects, events, dates and current information on the topics of regional development, broadband, digitalization as well as publications by atene KOM GmbH and among others provides information in the field of geographic information systems. When registering, we ask you to provide your name in order to be able to contact you and to provide your email address so that we can send you the newsletter. You also have the option of providing further voluntary information.

We use the so-called double opt-in procedure, which means we will only send you information by email when you click on a link in our notification email to confirm that you are the owner of the email address provided. If you confirm your email address, we will save your email address, the time of registration and the IP address assigned during registration until you unsubscribe from the newsletter. The storage of this information serves the sole purpose of sending you the newsletter and being able to prove your registration. You can unsubscribe from the newsletter at any time. There is a corresponding unsubscribe link in every email. A message to the contact details given above or in the individual emails (e.g. by email or letter) is of course also sufficient for this. The legal basis for processing is your consent in accordance with Art. 6 (1), sentence 1, (a) GDPR.

 2.4 Password-protected area (customer portal)
As a member of the atene KOM network, you gain access to our customer area. More information about funding or our media observations is available here. Please contact us about membership by email.

2.5 Online shop
You can purchase the loose-leaf collection using our online shop. The order data is stored for the purpose of processing the purchase contract. Processing of the purchase contract means that the delivery data needs to be disclosed to the shipping company. This data is not disclosed to other third parties. The legal basis for storing your order data is Art. 6 (1), sentence 1, (b) of the GDPR.

The order data that you provide shall be deleted once the two-year warranty period has elapsed, unless legal retention requirements stipulate a longer storage period.

2.6 E-learning platform
We offer you the opportunity to prepare for, attend and follow-up on online events on an e-learning platform. You must register in the platform’s closed area for this purpose. If you would like to register, we ask for your first name, surname and email address. These are visible to the attendees of the e-learning course.

Exam or test results are not publicly visible. You, the instructor and the administrator have access to them. The legal basis for the described data processing activities is Art. 6 (1), sentence 1, (b) of the GDPR.

2.7 Google APIs
A web service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as ‘Google APIs’) is downloaded on our website. We use this data to guarantee the full functionality of our website. Your browser may transfer personal data to Google APIs in this regard. The legal basis for data processing is Art. 6 (1) (f) of the GDPR. The legitimate interest is to ensure error-free operation of the website. Google APIs has certified itself in the context of the EU/US Privacy Shield Agreement (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Data is deleted as soon as the purpose of its collection has been fulfilled. You will find further information about how the transferred data is handled in the Google APIs privacy policy: https://policies.google.com/privacy

2.8 gstatic
A web service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as ‘gstatic’) is downloaded on our website. We use this data to guarantee the full functionality of our website. Your browser may transfer personal data to gstatic in this regard. The legal basis for data processing is Art. 6 (1) (f) of the GDPR. The legitimate interest is to ensure error-free operation of the website. gstatic has certified itself in the context of the EU/US Privacy Shield Agreement (cf. https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Data is deleted as soon as the purpose of its collection has been fulfilled. You will find further information about how the transferred data is handled in gstatic’s privacy policy: https://policies.google.com/privacy

2.9 Google Fonts
We embed the fonts (‘Google Fonts’) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This website integrates external fonts from Google Fonts. Google Fonts is a service provided by the company Google Inc. (USA). The fonts are embedded by a server call at Google in the USA, whereby it is to be assumed that enquiries are stored by Google. If your browser does not support this function, your computer uses a standard font.

You will find further information about Google Web Fonts at https://developers.google.com/fonts/faq?hl=en-GB&csw=1

Privacy policy: https://www.google.com/policies/privacy/

Opt out preference: https://adssettings.google.com/authenticated

3. Cookies and usage analysis

3.1 General use of cookies
A variety of cookies are set when you visit and use our website. Cookies are small text files that are stored in your web browser’s cache and contain information that allows web servers to recognise you on subsequent visits. Cookies cannot run any programs or transfer viruses to your computer.

The main purpose of our own cookies is to make using our services as time-saving and user-friendly as possible.

We use our own cookies particularly

  • for load distribution;
  • to save language settings;
  • to save login data (for our customer portal);
  • to save contents of form fields;
  • to indicate that information placed on our website has been shown to you so that it won’t be displayed again the next time you visit the website.

By doing this, we want to enable you to use our website in a way that is more convenient and unique to you. The relevant cookies are processed based either on the consent that you have given or on our aforementioned legitimate interests. The legal basis in this respect is Art. 6 (1), sentence 1, (a) and (f) of the GDPR.

You can prevent cookies from being saved by preventing them from being accepted using this website in your browser settings. If you do not accept cookies, this may, however, lead to considerable functional restrictions on our website in individual cases.

3.2 Google Analytics
Our website also uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’). Google Analytics uses cookies that are valid for 14 months to record your access data when you visit our website. On our behalf, Google combines the access data to create pseudonymous usage profiles and transfers them to a Google server in the USA. Your IP address is anonymised beforehand. We are therefore unable to determine which usage profiles belong to a particular user. Consequently, we can neither identify you nor determine how you use our website based on the data that Google collects. In the event that, exceptionally, personal data is transferred to the USA, Google has subjected itself to the EU/US Privacy Shield Agreement. This means that Google has committed to the European data protection principles and the local data protection level, including in the context of data processing activities undertaken in the USA.

Google will use this information generated by the cookie on our behalf to evaluate your use of our website, compile reports on website activities and provide us with other services relating to website and internet use. You will find more information about this topic in Google Analytics’ privacy policy.

The usage data in the context of Google Analytics is processed based on our legitimate interest in designing and optimising our website as needed. The legal basis in this respect is Art. 6 (1), sentence 1, (a) of the GDPR. You can object to Google’s web analytics activities at any time. There are several possible ways of doing so:

  • You can make settings in your browser so that Google Analytics’ cookies are blocked.
  • You can adjust your Google advertising settings.
  • You can set a disabling cookie by clicking here: Disable Google Analytics
  • You can install the disabling plugin provided by Google by clicking on the following Google link in your Firefox, Internet Explorer or Chrome browsers (this variant does not work on mobile devices): Browser plugin link

You will find more information about Google Analytics in Google’s privacy policy.

3.3 Google Tag Manager
We use Google Tag Manager, which is a solution provided by Google Inc. that allows companies to manage website tags via an interface. It is a cookie-less domain that does not collect any personal data. Google Tag Manager is responsible for triggering other tags, such as Google Analytics, which may in turn collect data. This data is not accessed via Google Tag Manager. If you prevent the acceptance of cookies via this site in your browser settings, this shall remain applicable for all tracking tags.

3.4 Google Maps
This website uses Google Maps to display interactive maps and to provide directions. Google Maps is a map service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you use Google Maps, information about your use of this website – including your IP address and the (start) address entered in the route planner function – may be transmitted to Google in the USA. When you view a page on our website that has Google Maps integrated, your browser establishes a direct connection with the Google servers. The map’s content is transmitted directly to your browser by Google and integrated into the website by the same. We therefore have no influence over the extent of the data that Google collects in this way. As far as we are aware, the following data is collected at the very least:

  • The date and time of the visit to the web page in question;
  • The web address or URL of the web page viewed;
  • The IP address and (start) address entered in the context of route planning.

We have no influence over the way in which Google further processes and uses the data and cannot, therefore, assume any responsibility for this.
If you would not like Google to collect, process or use data about you via our website, you can disable JavaScript in your browser settings. However, if you do so, you will be unable to use the map screen.
Please refer to Google’s privacy policy (https://policies.google.com/privacy?hl=en-gb) to find out about the purpose and scope of data collection, further processing and use of the data by Google, your rights in this regard and possible settings you can make to protect your privacy.
By using our website, you consent to the processing of data collected about you by the Google Maps route planner in the manner and for the purposes set out above.

4. Links to other websites and online offers

This website may contain links to the websites and online services belonging to other providers that are not affiliated with us. If you click on these links, we naturally no longer have any influence over what data is collected by the providers in question and what data is recorded by them. You will find detailed information about data collection and use in the relevant provider’s privacy policy. Since we do not have any control over the way in which third parties collect and process data, we cannot accept any responsibility for the same.

5. Social network features

Social plugins provided by social networks are integrated on our website:

Additional notes on data protection: Agreement on joint processing of personal data on Facebook pages: https://www.facebook.com/legal/terms/page_controller_addendum, privacy policy for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data.

Privacy Shield (guarantee concerning the level of data protection when data is processed in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active

Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

You can recognise social plugins by the relevant providers’ logos.

If you view an article or a sub-page on our website that contains these social plugins, a direct connection is established with the relevant social networks’ servers and, from there, the image of the plugin visible to you and the functions behind it are transmitted directly to your browser, which integrates them into our site’s display. If you are logged into the relevant social network with your username and password at that time, the information that you are visiting our site will be transmitted to the social network and the provider in question can assign this information to your user account. If you interact with the social plugins – i.e. use the Facebook ‘Like’ function, for example – the contents of our pages are linked to your Facebook profile.

If you are not a member of the relevant social networks or have logged out of the providers’ websites before visiting our website, your IP address at least may still be transmitted to and stored on the social networks.

We would like to point out that the content and scope of the data collected by the social plugins is directly collected by and transferred to the social networks, and the storage duration of up to 250 days and the intended purpose is exclusively determined by the providers in question. We have no influence over the content of the plugins or over the transfer of information. Please refer to the providers’ privacy policies linked above for more information.

The legal basis for the integration is Art. 6 (1), sentence 1, (f) of the GDPR, based on our legitimate interest in providing the aforementioned social network functions.

6. Disclosure of Data

Generally speaking, the data we collect shall only be disclosed if:

  • you have given your express consent to this effect according to Art. 6 (1), sentence 1, (a) of the GDPR;
  • disclosure according to Art. 6 (1), sentence 1, (f) of the GDPR is necessary to establish, exercise or defend legal claims, and there is no reason to believe that you have an overriding legitimate interest in your data not being disclosed;
  • we are legally obligated to disclose the information according to Art. 6 (1), sentence 1, (c) of the GDPR; or
  • doing so is legally permissible and – according to Art. 6 (1), sentence 1, (b) of the GDPR – is required for the handling of contractual relationships with you or for the implementation of pre-contractual measures that are carried out at your request.

Some of the data processing activities described in this privacy policy may be carried out by our service providers. In addition to the service providers mentioned in this privacy policy, this may particularly include data centres that store our website and databases, IT service providers that maintain our systems, and consulting firms. If we disclose data to our service providers, they may only use the same to complete their tasks. All service providers were carefully selected and engaged by us. They are contractually bound to our instructions, have suitable technical and organisational measures to protect data subjects’ rights, guarantee an appropriate level of data protection and are carefully monitored by us.

In addition, information may be disclosed in connection with governmental requests, court orders and legal proceedings if doing so is necessary for prosecution or enforcement purposes.

7. Your Rights

You have the right to request information about whether we process your personal data at any time. In the context of granting you access, we will explain the data processing activities to you and provide you with an overview of the data stored about you.

If the data we have stored is incorrect or out-of-date, you have the right to have this information rectified.

You can also request that your data be erased. If, in exceptional cases, erasure is not possible due to other legal provisions, the data is blocked so that it is only available for this legal purpose.

You can also have the processing of your data restricted if, for example, you believe that the data we have stored is incorrect. You also have the right to data portability. In other words, on request we will forward you a digital copy of the personal data you provided.

You also have the right not to be subjected to a decision based solely on automated processing, including profiling.

You can contact us using the contact details provided in (1) above at any time to exercise your rights described here. This also applies if you wish to receive copies of guarantees to demonstrate that our level of data protection is adequate.

You also have the right to object to data processing based on Art. 6 (1), sentence 1, (e) or (f) of the GDPR or for the purposes of direct advertising. Finally, you have the right to lodge a complaint with our competent data protection supervisory authority. You can exercise this right before a supervisory authority in the member state that you are resident in, that you work in or that the suspected violation occurred in. In Berlin, the competent supervisory authority is: Berlin Representative for Data Protection and Freedom of Information, Friedrichstrasse 219, 10969 Berlin, Germany.

Right of revocation and right to object

According to Art. 7 (2) of the GDPR, you have the right to revoke the consent you gave to us at any time. If you do so, we may no longer process your data based on this consent with effect for the future. Revocation of consent does not affect the lawfulness of processing carried out based on consent up until the same is revoked.

Insofar as we process your data based on legitimate interests according to Art. 6 (1) (f) of the GDPR, you have the right according to Art. 21 of the GDPR to object to the processing of your data and to inform us of the grounds resulting from your particular situation that you believe speak in favour of your legitimate interests. If you are objecting to data processing for the purposes of direct advertising, you have a general right to object, which we implement without needing to be provided with any reasons.

If you would like to assert your right of revocation or your right to object, all you need to do is send an informal message to us using the aforementioned contact details.