The DVGW

Your network of excellence in the gas and water industry

The DVGW supports the gas and water industry in all technical and scientific areas. The main focus of the Association’s work is on safety and hygiene as well as environmental and consumer protection. The DVGW elaborates technical rules designed to promote the technical self-management of the German gas and water industry, thus ensuring the safe and secure supply of gas and water according to the highest international standards. The Association, which was founded in 1859, currently has approximately 14,000 members. The DVGW is free from economic and political influences.

www.dvgw.de/english-pages

DVGW Research Center at Engler-Bunte-Institut of Karlsruhe Institute of Technology (KIT)
DVGW Research Center at Engler-Bunte-Institut of KIT
Bitte auf den Obermenüpunkt klicken!

Privacy policy

We take privacy seriously. We have therefore compiled an overview of the most important information on how your data are handled.

‏‏‎

Privacy policy of the DVGW Research Center at the Engler-Bunte-Institut of the KIT

The following provides an insight into the personal data concerning you that we collect and how we process it. It also provides an overview of your rights under the applicable data protection law. We have also appointed contacts for any further questions you may have. 

This privacy policy was last revised on 11/01/2021. We reserve the right to update it as necessary.

1 Name and address of the controller

As the controller in line with the applicable data protection legislation, we

DVGW Research Center at the Engler-Bunte-Institut
of the Karlsruhe Institute of Technology
Engler-Bunte-Ring 1 – 9
76131 Karlsruhe
Germany
Tel.: +49 721 608-42581
Write email
Website: www.dvgw-ebi.de

take all necessary measures under the applicable data protection law to ensure the protection of your personal data.

For all questions on data processing in our association and to exercise your rights, you can also contact our data protection officer free of charge.

2B Advice GmbH
Johannes Baeck
Joseph-Schumpeter-Allee 25
53227 Bonn
Germany
Tel.: +49 228 926165 121
Write email
Website: www.2b-advice.com

2 Scope of the privacy policy

The legislator considers the processing of personal data to include activities such as the collection, acquisition, organisation, arrangement, storage, adaptation or modification, read-out, requesting, use, disclosure via transmission, dissemination or any other form of provision, the reconciliation or linking, restriction, erasure or destruction of personal data.

Personal data is all information that relates to an identified or identifiable natural person.

This privacy policy refers to the personal data of customers, prospective customers or visitors.

3 What personal data do we process?

We collect your personal data when you establish contact with us, e.g. as a potential customer or customer. For example, this can occur if you are interested in our services, register for our events, contact us using our communication channels or if you use our services as part of existing business relationships.
We process the following types of personal data:

  • Information for personal identification
    e.g. first name and second name, address details, email address, telephone number, fax number, member number, date of joining the association
  • Order data
    e.g. customer number, order number, invoice data
  • Company data
    e.g. company name, department, activities
  • Data on your online behaviour
    e.g. IP addresses, username, data on your visits to our website, actions performed on our websites, place of access
  • Information on your interests and requests that you communicate to us
    e.g. via our contact form or other communication channels

as well as other information comparable with these data categories.

3.1 Sensitive data

Sensitive data, i.e. special categories of personal data, such as information on health, political opinions, religious or union affiliation, are not collected using this channel.

3.2 Personal data of minors

Personal data of children or minors are only collected if they use our communication channels. If we become aware that the personal data of minors was processed without the guardian’s consent, these data will immediately be erased.

3.3 Use of cookies

Cookies are files that are stored on your computer by our website when you access the site. These files store information that enable the more efficient use of this site.

We use etracker and Matomo as the web analysis service to analyse usage behaviour on the website. For this analysis, the user information (including the user’s abbreviated IP address) generated by the cookie is transferred to our server and stored for usage analysis purposes. We use the usage analysis to optimise our own websites, customer contact and other advertising measures as well as for market research purposes. As part of this process, the user’s IP address is immediately shortened so that the user can no longer be identified via the IP address.

Every user who does not consent to the storage and evaluation of their anonymised user data on their visit to our website can object to this storage and use at any time.

Your visit to this website is currently being recorded by etracker and Matomo. Please click here to stop your visit from being recorded:

Disable data collection with Matomo

4 For what purpose do we process your personal data?

4.1 Fulfilment of the contract

We process your data to be able to fulfil our contracts. This also applies for information that disclose to us as part of precontractual correspondence. The specific purposes of the data processing depend on the specific service and the submitted request and can also be used to analyse your requirements and check which services may apply to you.

To execute the contractual relationship, we need your name, address, telephone number and your email address to contact you.

4.2 Measures for your security

We use your personal data in the following cases, among others:

  • To improve the reliability of our web applications our IT Support works closely together with you in case of technical problems. We also assess logs of site access, actions performed, etc., for this purpose.
  • To improve IT security
  • To record and verify matters in case of possible legal disputes

4.3 Contact forms

Our website uses contact forms to give you the opportunity to contact us. The data collected in the contact for are exclusively stored for the described purposes and erased following the final processing of the request.

4.4 Consent and revocation

If you have consented to the processing of your personal data for one or more specific purpose, we are permitted to process your data. You can revoke this consent with respect to the future at any time without incurring any charges apart from the transmission costs as per the base rates (costs of your internet connection). However, the revocation of consent does not affect the lawfulness of the processing up to the point in time at which the revocation was submitted.

5 Where do we transfer data and why

5.1 Data use within DVGW-EBI at the KIT

Within DVGW-EBI, access to your personal data is limited to the positions that require these data to fulfil our contractual or statutory obligations or to safeguard our legitimate interests.

5.2 Data use outside DVGW-EBI at the KIT

We ensure the protection of your personal data and only disclose information concerning you, if this is required by law, you have provided your consent or this is necessary to fulfil contractual obligations.

For example, a legal obligation to disclose your personal data may be necessary for the following recipients:

  • Public bodies or regulatory authorities, e.g. tax offices, customs authorities
  • Judicial and law enforcement authorities, e.g. police, courts, public prosecutor’s office
  • Lawyers or notaries, e.g. in case of legal disputes
  • Auditors

We cooperate with other companies in order to fulfil our contractual obligations. These include:

  • Transport service providers and freight forwarders
  • Banks and financial service providers for transacting financial matters

Own service providers

To structure our operation as efficiently as possible, we use the services of external service providers, which may receive personal data concerning you to fulfil the described purposes, including IT service providers as well as printing and telecommunication service providers.

Important: We always pay close attention to your personal data!

To ensure that the service providers comply with the same data protection standards that apply in our company, we have concluded associated data processing contracts. Among other things, these contracts regulate:

  • that third parties only receive access to the data that they need to complete their assigned tasks
  • that only service provider employees who have explicitly committed to complying with the data protection regulations receive access to your data
  • that the service providers take technical and organisational measures that ensure data security and data protection
  • what happens with the data when the business relationship between the service provider and us ends

We implement special security measures (e.g. by using specific contract clauses) for service providers that are domiciled outside the European Economic Area (EEA) to ensure that the data are handled with the same care as they are in the EEA. We regularly audit all of our service providers for compliance with our requirements.

Important: We never sell your personal data to third parties!

6 Are you obliged to disclose personal data to us?

In the context of the business relationship between you and the BVGW, we require the following categories of personal data:

  • all necessary data for establishing and executing a business relationship
  • data required to fulfil contractual obligations
  • data that we are legally obliged to collect

Without these data, we are not able to enter into or execute contracts with you.

7 Erasure periods

As defined in the applicable data protection provisions, we do not store your personal data any longer than required for the specific purposes of the processing. If the data are no longer required to fulfil contractual or statutory obligations, we regularly erase or block the use of these data, unless their temporary storage remains necessary. Further storage may be necessary for the following reasons:

  • Compliance with commercial or tax storage obligations: the storage periods based primarily on the regulations of the German Commercial Code and the German Fiscal Code extend to up to 10 years
  • To preserve evidence in case of legal disputes within the scope of the statutory limitation rules: limitation periods may extend to up to 30 years under civil law, but the regularly period of limitation is three years

8 Your rights

You also have certain rights within the scope of the processing of your personal data. The details can be found in the relevant regulations of the General Data Protection Regulation (Articles 15 to 21).

8.1 Right of access and right to rectification

You are entitled to receive information about the personal data concerning you that we are processing. If this information is not (no longer) correct, you can request that we correct the data or complete any incomplete information. If we have transferred your data to third parties, we will inform the relevant third parties based on the applicable legal situation.

8.2 Right of erasure

You can request the immediate erasure of your personal data under the following circumstances:

  • If your personal data are no longer required for the purposes for which they were collected
  • If you have revoked your consent and there is no longer legal basis for processing the data
  • If you object to the processing and no overriding legitimate reasons exist for processing the data
  • If your data are unlawfully processed
  • If your personal data need to be erased to fulfil legal obligations

Please note that, before erasing your data, we need to check whether a legitimate reason for processing your personal data exists.

8.3 Right to restriction of processing (“right to block”)

You can ask us to restrict the processing of your personal data for one of the following reasons:

  • If you are disputing the accuracy of the data, until we have had the opportunity to convince ourselves of the accuracy of the data
  • If the data are unlawfully processed, but you merely request the restriction of the use of the personal data rather than erasure
  • If we no longer require the personal data for the purposes of the processing, but still need them to asset, exercise or defend against legal claims
  • If you have lodged an objection to the processing and uncertainty still exists as to whether your legitimate interests override our own

8.4 Right to object

8.4.1 Right to object on a case-by-case basis

If the processing takes place in the public interest or based on a balancing of interests, you have the right to object to the processing for reasons concerning your specific situation. If an objection is lodged, we will no longer process your personal data unless we can provide evidence of compelling legitimate grounds for processing your data that override your interests, rights and freedoms or because your personal data are required to assert, exercise or defend against legal claims. The objection does not affect the lawfulness of the processing that has taken place up to the time the objection was lodged.

8.4.2 Objection to advertising

In the cases in which your personal data are used for advertising purposes, you can object to this form of processing at any time. We will then no longer process your personal data for these purposes.

An informal objection is sufficient and can be addressed to:

DVGW Research Center at the Engler-Bunte-Institut of the KIT
Engler-Bunte-Ring 1 – 9
76131 Karlsruhe
Write email

8.5 Right to data portability

You have the right to receive personal data that you have disclosed to us for processing in a transferrable and machine readable format upon request.

8.6 Right to lodge a complaint with the supervisory authority (Art. 77 GDPR)

We always endeavour to process your requests and demands as quickly as possible in order to safeguard your rights accordingly. But, depending on the frequency of the requests, it may take up to 30 days before we can provide further information on your concerns. If it takes longer, we will promptly inform you of the reasons for the delay and discuss the next steps with you.

In some cases, we are not permitted to or cannot provide any information. If permitted by law, we will inform you of the reason for the refusal to provide information.

But if you are still not satisfied with our answers and responses or are of the view that we are breaching data protection law, you can lodge a complaint with our data protection officer as well as the competent supervisory authority. In our case, the competent supervisory authority is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4
40213 Düsseldorf
Phone: +49 (0) 211 384 24-0
Write email

9 Duty of disclosure to participants in an online meeting using Microsoft Teams

9.1 Specification of the processing activities

The privacy notice is provided in connection with the participation in an online meeting using Microsoft Teams.

9.2 Purposes and legal bases of the processing

Your data are processed to enable participation in an online meeting using Microsoft Teams.

In this case, your personal data are processed in the form of video or audio. You can independently decide whether to turn the camera and microphone on or off. In addition, you are free to decide whether to share contents and can stop sharing content at any time. If you participate in the chat function, we process the personal data contained in the chat texts and these contents are also disclosed to the other participants. If you dial-in to the online meeting by phone, we process your telephone number. The online meeting may be recorded by the IHK Nord Westfalen chamber of commerce and industry. In this case, you will be notified of the recording. After the online meeting, the recording will be stored in Microsoft Stream and we may release the recording for other participants. Providing access to an online meeting requires the temporary storage of the IP address by the system to enable the website to be delivered to your computer. To do so, the IP address must be stored for the duration of the session. Moreover, the data are logged in log files to identify and eliminate disruptions and misuse. Log files are stored to ensure the functionality of the website, to optimise the contents of the website and to ensure the security of our information systems.
Your data are processed based on your consent in line with Art. 6(1) lit. a GDPR or based on our legitimate interest in line with Art. 6(1) lit. f GDPR.

9.3 Recipients or categories of recipients of the personal data

Your personal data must be transmitted to the service provider for the online meeting. Microsoft Teams is part of Microsoft Office 365. Microsoft Teams is a collaboration tool that also contains an audio/video conference function. Microsoft Office is a software provided by the Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399 USA. Microsoft provides information on processing personal data at https://privacy.microsoft.com/de-DE/privacystatement and https://docs.microsoft.com/de-de/microsoftteams/teams-privacy?view=o365-worldwide.
Microsoft Teams is part of the Office 365 cloud application. Our service provider has concluded privacy agreements and EU standard contracts with the provider Microsoft Corporation to guarantee maximum privacy. Please note that we have no influence on Microsoft’s data processing operations. If Microsoft Teams processes personal data in conjunction with Microsoft’s legitimate business processes, Microsoft is the independent controller for this use and, as such, is responsible for complying with all applicable laws and obligations incumbent on a controller.

9.4 Transmission of personal data to a third country

Microsoft also processes your personal data in the USA. EU standard contracts with Microsoft on Office 365 and Teams are concluded via our service provider. You can access the EU standard contractual clauses online.

9.5 Duration of the storage of the personal data

We only store your personal data collected as part of an online meeting for the duration and follow-up of the online meeting. In particular, the chat record is automatically erased for all participants after 28 days.