Data privacy
1. Introduction
It is the policy of the German Association of the Tobacco Industry and New Products (BVTE), with its registered office at Unter den Linden 42, 10117 Berlin, to take the protection of your personal data seriously and wish for visitors to their website to feel safe. As the controller of this website, as defined by the European General Data Protection Regulation (GDPR) and Germany’s Federal Data Protection Act (BDSG), we process the user’s personal data in accordance with the relevant data protection regulations. The following privacy notice applies solely to the website www.bvte.de. This may contain links to websites operated by other providers not covered by this privacy notice. The BVTE is not responsible for the content on these sites nor for the handling of personal data by the respective operators.
2. Data types and purposes
Personal data (e.g. email address, first and last name, the user’s IP address) is only processed when the user voluntarily agrees to this or when this is needed for certain services such as running this website. By submitting the contact form on the website, the user is consenting to the processing of this personal data. The purpose of which is for direct correspondence between us and the user.
3. Confidentiality of the user’s personal data
The BVTE guarantees the confidentiality of your personal data by ensuring that its employees observe their confidentiality obligations and that its safety measures correspond with the current state of technology.
4. Transferring user data to third parties
Third parties (so-called processors) used by us may receive personal user data. The user data is only transferred to vicarious agents and service providers (e.g. IT service providers that administer and host our website) commissioned by us that operate our online offer in our name or when this is necessary for carrying out the service in question, provided the required data falls into the scope of the communication purpose described in Section 2. Third-party processing of user data is carried out only on our behalf and on our instructions (commissioned data processing). Transferring data to locations outside the EU shall in principle not take place. Furthermore, we ensure that the personal data of the user is not transferred to third parties unless we are legally bound to do so or we have asked and received the user’s approval in advance.
5. Data transferred by browser/internet technology
Each visit to our website is logged. The data recorded comprises the current IP address used by the user’s PC, the date and time, the browser type, the PC’s operating system and the page accessed by the user. Personal identification is not possible. The data is analysed in an anonymised way for statistical purposes. No personal user profile or similar is created or processed (no automated decision-making including profiling).
6. Cookies
Cookies are small text files that are stored on the internet user’s PC. Their purpose is, for instance, to manage the connection to the website during your visit. Cookies cannot infiltrate and cause damage to the user’s system. The BVTE uses cookies on this website to offer safe, personalised functions to users.
Browser configuration options are available to you to inform you of cookies being used, to allow them on an individual basis, to allow them for specific cases, to block them in general, or to delete them automatically when closing the browser. Deactivating cookies may limit the functionality of this website.
7. Use of Matomo (without cookies)
We use Matomo, a web analysis tool, to analyze user behavior on our website. Unlike many other analysis tools, we use Matomo without cookies. This means that we do not use cookies to store information about you or to track your surfing behavior. Instead, we use Matomo in a way that is privacy-friendly and does not require cookies.
What does this mean for you?
- No cookies: We use Matomo in such a way that no cookies are stored on your device.
- Data anonymization: We anonymize your IP address and other potentially personal data that we collect via Matomo.
- No user profiles: We do not create individual user profiles.
Why do we use Matomo without cookies?
We want to offer you a privacy-friendly analysis experience. By operating Matomo without cookies, we minimize the collection of personal data and respect your privacy.
Legal basis for data processing
The legal basis for processing the data that we collect via Matomo is our legitimate interest in analyzing user behavior on our website in order to optimize it and improve it economically. We use Matomo to understand how visitors use our website, which pages they visit and how long they stay on them. This information helps us to improve our website and offer our users a better experience.
Data security
We host Matomo on our own servers and do not pass on the data collected to third parties. The data is treated confidentially and is only used to analyze user behavior.
Revocation option
You have the option to object to the processing of your data at any time. As we operate Matomo without cookies and anonymize your IP address, a direct opt-out function is not required. However, if you would like more detailed control over your data, you can contact us at any time to obtain information about the data we process.
8. The use of Matomo (formerly Piwik)
This website uses the open-source web analysis service Matomo. Matomo uses cookies which are text files that are stored on your computer and allow analysis to take place on how you use the website. Information generated by the cookie on using this website is stored on our server in the process. The IP address is anonymised before being stored. Matomo cookies remain on your end device until you delete them. The information generated by the cookie about the use of this website is not passed on to third parties. You can prevent the cookie being stored by adjusting your browser settings accordingly. We shall like to point out, however, that this will prevent you from fully using all of our website’s functions.
You have the option to prevent your actions on this website from being analysed and linked. This will protect your privacy but will also prevent the website owner from learning from your actions and improving the usability for you and other users.
9. Legal basis and duration of the data storage
We process your personal data to safeguard our legitimate interests pursuant to Article 6 (1) lit. f of the GDPR. Our legitimate interest is in the technically safe operation of a user-friendly and needs-based website and in the proper response to contact inquiries via the website.
When using our website purely for information purposes, we store your personal data on our servers for the duration of your visit to our website. Once you have left our website, your personal data will be deleted without delay. Server log files will however be stored for the duration of one month.
The cookies we install will usually also be deleted once you have left our website. This however does not apply for cookies installed by the web analysis tools Google Analytics and Matomo (formerly Piwik). These will be stored for up to two years on your device. You have the option to delete installed cookies yourself at any time.
Regarding contact enquiries, we will store your personal data for answering your enquiry up until the start of the limitation period of possible legal claims at the latest; the regular limitation period in accordance with the German Civil Code is three years. We will delete your personal date by the start of the limitation period unless there is a legal obligation to retain it.
10. Rights of the user
The BVTE facilitates affected persons to exercise their rights pursuant to Articles 15 to 22 of the GDPR. These include the right to information on all personal data concerning them as well as the right for inaccurate data to be corrected, deleted or erased. It also includes restricting data or objecting to data being processed. Affected persons have the right due to reasons that have arisen from their own particular situation to object at any time to the data of the affected person being processed on the grounds of Article 6 (1) lit. e or f of the GDPR. You may withdraw your given consent for your data being processed at any time. An informal note per email is sufficient for this purpose. By withdrawing your consent, the lawfulness of the processing from the time of consent until the withdrawal shall not be affected. Moreover, affected persons may lodge a complaint to the responsible data protection authorities in the case of a violation of data protection requirements. We however recommend that you firstly contact the BVTE (datenschutz@bvte.de).
11. Updating the data protection regulations.
In the event of a change in the law or the BVTE changing its internet procedures on the website www.bvte.de, or when there are new developments to the internet and IT security technologies, this privacy notice must be updated where appropriate. We therefore reserve the right to change or supplement our privacy notice as required. Changes will be published here. The current version is as per 02.09.2019.
12. Further questions
Every affected person may contact us at any time with further questions. Please send an email to datenschutz@bvte.de.
Controller for the purposes of Art. 24 GDPR:
Bundesverband der Tabakwirtschaft und neuartiger Erzeugnisse (BVTE)
Unter den Linden 42
10117 Berlin
Telephone: +49 30 8145936-50
datenschutz@bvte.de