NEU: Bitte auf den Obermenüpunkt klicken!
Datenschutz beim DVGW

Privacy policy

Data protection and data security have a high priority for us. What this means in detail is explained here in conformity with the new General Data Protection Regulation (GDPR)

© iStock.com/NicoElNino
1. Data Protection Statement DVGW e.V.
1.1. Introduction

Regardless of whether you are a member, customer, prospective customer or visitor to our website: We (hereinafter: “DVGW“, “we“) take the protection of your personal data seriously. But, what does this mean in concrete terms?

Below we provide you with an insight into what personal data we collect from you and in what form we process it. Furthermore, you will receive an overview of the rights you are entitled to according to the applicable data protection law. In addition we will designate a contact person, in case that you have further questions.

1.1.1. About us

DVGW Deutscher Verein des Gas- und Wasserfaches e. V.  - German Technical and Scientific Association for Gas and Water - promotes the gas and water industry sectors with a special focus on safety, hygiene and environmental protection. The DVGW has more than 13,700 members and has elaborated the overall recognised technical rules for gas and water. The association initiates and furthers research projects and provides training on the entire range of topics associated with gas and water. It additionally offers testing and certification services for products and individuals as well as companies. The DVGW technical rules are the foundation of the technical self-management and accountability of the gas and water industry sectors in Germany. They guarantee safe gas and water supply at highest international standards. The non-profit association was founded in Frankfurt am Main, Germany, in 1859. The DVGW is free from economic lobbyism and politically neutral.

Within the meaning of applicable data protection laws, we

DVGW
Deutscher Verein des Gas- und Wasserfaches e.V. – Technisch-wissenschaftlicher Verein
Josef-Wirmer-Str. 1-3
D-53123 Bonn
Phone: +49 (0) 228 91 88-5
Fax:  +49 (0) 228 91 88 990
Email: info(at)dvgw.de

take all measures required by applicable data protection laws to ensure the protection of your personal data.

If you have any questions regarding the processing of data in our association and how to assert your rights please contact our Data Protection Officer free of charge.

DVGW
Data Protection Officer
2B Advice GmbH
Joseph Schumpeter Allee 25
D-53227 Bonn
Phone: +49 (0) 228 926165 120
Email: dvgw(at)2b-advice.com

1.2. Scope of the data protection statement

The legislator understands processing of personal data among others as activities such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.

Personal data is all the information that relates to an identified or identifiable natural person.

This data protection statement concerns the personal data of customers, members, interested parties and visitors.

1.3. Which personal data do we process?

When you contact us e.g. as a member, an interested party or customer, we collect your personal data. This may happen, for example, if you are interested in our products, register for our online services, contact us via our communication channels or if you use our products or services in the context of existing business relationships.

We process the following types of personal data:

  • Personally identifiable information (PII)

    • e.g. first and last name, address data, email address, telephone number, fax number,  membership number, date when you joined the association

  • Contract data

    • e.g. customer number, order number, invoice data

  • Company-related data

    • e.g. company name, department, activity

  • Data regarding your online behaviour

    • e.g. IP addresses, user names, data about your visits to our websites, actions carried out on our websites, place of access

  • Information about your interests and wishes, which you communicate to us

    • e.g. via our contact form or other communication channels

 and other information comparable to these categories of data.

1.3.1. Sensitive data

Sensitive data, i.e. special categories of personal data such as information about health, political opinion, or religious affiliation or trade union membership, are not collected in this way.

1.3.2. Personal data of minors

Personal data of children or minors is only collected when these use our communication channels. To the extent that personal data of minors recognisable to us as such was processed without the consent of the parent or legal guardian it will be immediately deleted.

1.3.3. Use of cookies

1.3.3.1. What are cookies?

Cookies are files that are placed on your computer by our websites when you visit the sites. These files store information that makes your use of this site more efficient.

We use the etracker and Matomo web analysis service to analyse user behaviour on our websites. For this analysis, the use-related information generated by the cookie (including the shortened IP address of the user) is transmitted to our servers and stored for usage-analysis purposes. We use the usage analysis to optimise our own websites, our customer approach and other advertising measures as well as for market research purposes. The IP address of the user is immediately shortened during this process, so that the identification of the user via the IP address is no longer possible.

Any user who does not agree to the storage and analysis of their anonymised user data when visiting our website can object to this storage and use at any time.

Data of your visit to this website is currently collected by etracker and Matomo. Please click here to stop collection of this data:

1.4. What do we process your personal data for - and on what legal basis?

1.4.1. Performance of the contract

We process your data in order to fulfil our contracts. This also applies to information that you provide to us in the context of pre-contractual correspondence. The specific purposes of the data processing depend on the respective product and the submitted request and can also be used to analyse your needs and to check which products and services are suitable for you.

1.4.1.1. Performance of the contractual relationship

For the execution of the contractual relationship we need your name, your address, your telephone number or your e-mail address so that we can contact you.

1.4.1.2. Offering goods and services

We also need your personal data to be able to check whether and which products and services we can and may offer you.

Details on the respective purposes of data processing can be found in the contractual documents and our General Terms and Conditions.

1.4.2. Balancing interests: we improve our services and offer you suitable products and services

1.4.2.1. Data processing ans analysis for marketing purposes

Your needs are important to us and we try to provide you with information about products and services that suit you perfectly. For this purpose, we use the findings of our joint business relationship and market research. Our main goal is to adapt our product and service portfolio to your needs. In this context, we guarantee that we always process the data in accordance with applicable data protection law.

Important: You can object to the use of your personal data for this purpose at any time.

What exactly do we analyse and process?

  • Results of our marketing activities to measure the efficiency and relevance of our campaigns
  • Information from your visits to our website
  • We analyse the potential demand for our products and services

1.4.2.2. Newsletter

You can register for our newsletter on our website. We only need your e-mail address to send it to you; any other information is voluntary and only serves to personalise the newsletter. Only after successful completion of a double opt-in process will you receive our newsletter. You have the right to unsubscribe from the newsletter at any time. Every newsletter includes a link for that purpose. If you unsubscribe from our newsletter, we will immediately delete your contact details from our newsletter distribution list.

The effectiveness of an electronic consent, which is e.g. used for registration for the newsletter, is subject to certain legal requirements. This also includes recording your declaration of consent. We therefore log the date and time of consent, the text of the declaration of consent, your e-mail address and all other voluntary information. We also log the date and time of the click on the confirmation link and on the link in the confirmation email. We collect this information exclusively in order to comply with legal obligations.

We use the Google reCaptcha service in order to know whether a human being or a computer makes a certain entry into our newsletter form. Google uses the following data to verify whether you are a human being or a computer: IP-address of the terminal used; our websites that you visit and in which the reCaptcha is embedded; date and length of the visit; identification of the browser system and the type of operating system; Google account if you are logged in to Google as well as mouse movements on the reCaptcha fields. The legal basis for processing the data as described above is Art. 6 (1) lit f of the General Data Protection Regulation. We have a legitimate interest in processing the data on our website, to ensure security of our website and to protect ourselves against automated entries (attacks).

The DVGW uses the services provided by CleverReach GmbH & Co. KG, Mühlenstraße 43, D - 26180 Rastede (hereinafter "CleverReach") for registering subscribers and sending newsletters. Your data will be stored there. You will be routed to CleverReach servers when you read the online newsletter, the newsletter archives and the registration and cancellation forms. You will find the CleverReach data protection policy here.

We use tracking software in conformance with data protection regulations for the sole purpose of improving the quality of our newsletter. We anonymise users’ IP addresses by shortening them.

By subscribing to our newsletter you agree to receive it from us, and you agree to the procedure described above.

1.4.2.3. Social Media Buttons und Plugins

1.4.2.3.1.  Share-Buttons / Shariff

We exclusively use the c't-Projekt Shariff by Heise for sharing the content of our sites. Shariff replaces the standard share buttons used by social media and social networks.

The standard share buttons used by social media transmit user data to Facebook etc. each time you call up a page and pass on detailed information about your surfing behaviour to the social networks (user tracking), even if you are neither logged in nor a member of the network.

The Shariff button, by contrast, establishes a direct link between a social network and the user only when the latter actively clicks on the share button. Shariff thus protects you from leaving digital traces on every site you visit and, consequently, improves data protection.

1.4.2.3.2. YouTube

We integrate YouTube videos with extended data protection mode in our websites, and we use YouTube as a provider of streaming services in order to ensure improved performance. For YouTube's Data Privacy Policy please click here.

If you would like to ensure that YouTube does not collect any of your data please do not click on the integrated videos. You also have the right to object to YouTube profiling, but in order to exert this right your objection has to be addressed directly to YouTube.

1.4.2.4. Measures for protection of personal information

We use your personal data in the following cases, among others:

  • We analyse your data to protect you or your company from fraudulent activity. This may happen, for example, if you have been the victim of identity theft or if unauthorised persons have otherwise gained access to your user account
  • Our IT support closely cooperates with you in case of technical problems to improve the reliability of our web applications. In this context, we also evaluate logs of website accesses, actions performed, etc
  • To be able to guarantee IT security
  • In order to be able to record and prove facts in the event of possible legal disputes

1.4.3. On the basis of your consent

If you have consented to the processing of your personal data for one or more specific purposes, we may legitimately process your data. You can withdraw this consent at any time for the future without incurring any costs other than the transmission costs according to the basic tariffs (costs of your Internet connection). However, the withdrawal of consent does not affect the legality of the processing up to the withdrawal.

1.4.3.1. Contact and order forms

We use contact and order forms on our websites to enable you to enter into contact with us. The data collected there is exclusively used for the respective purposes stated and is deleted following the processing of the request / order.

1.4.3.2. Press distribution list

If you are added to the DVGW press distribution list the data collected there is exclusively stored for the purposes described there. You may unsubscribe from the DVGW press distribution list at any time by sending an email to presse(at)dvgw.de. Your data will be stored until the withdrawal.

1.5. To whom do we transmit data and why

1.5.1. Use of data within DVGW

Within the DVGW only those entities or persons will have access to your personal data on a need-to-know basis who need it in order to fulfil our contractual or legal obligations or to protect our legitimate interest.

1.5.2. Use of data outside DVGW

We respect the protection of your personal data and we disclose information about you only if required by law, if you have given your consent or to fulfil contractual obligations.

We may e.g. be legally obliged to disclose your personal data to the following recipients:

  • Public authorities or supervisory authorities, e.g. tax authorities, customs authorities
  • Judicial and law enforcement authorities, e.g. police, courts, public prosecutors
  • Lawyers or notaries public, e.g. in legal disputes
  • Auditors

In order to fulfil our contractual obligations, we cooperate with other companies. These include:

  • Transport service providers and freight forwarders
  • Professional organisers and training service providers, if you have registered through us for certain trade fairs or events
  • Banks and financial service providers to handle all financial matters

 

Our own service providers

In order to make our operations more efficient, we use the services of external service providers to whom we may transmit your personal data for the purposes described, including IT service providers as well as printing and telecommunication service providers.

Important: We pay close attention to your personal data!

In order to ensure that the service providers comply with the same data protection standards that apply in our company, we have concluded appropriate contracts for order processing. These contracts regulate, among other things:

  • that third parties have access only to the data they need to know in order to carry out the tasks assigned to them
  • that the service providers only grant access to your data to employees who have explicitly committed themselves to comply with data protection regulations
  • that the service providers comply with technical and organisational measures that guarantee data security and data protection
  • what happens to the data when the business relationship between the service provider and us is terminated

For service providers based outside the European Economic Area (EEA), we take special security measures (e.g. by using special contractual clauses) to ensure that the data is treated with the same level of caution that is exercised in the EEA. We regularly check all our service providers for compliance with our specifications.

Very important: Under no circumstances do we sell your personal data to third parties!

1.5.3. Use of data within the DVGW group

In order to provide you with the best possible service, we occasionally exchange data within the DVGW Group. We guarantee that the applicable data protection regulations are observed and that your personal data is adequately protected at all times.

For this reason, we have taken appropriate measures to ensure compliance with data protection within the Group:

We have concluded appropriate contracts with the individual subsidiaries to ensure that personal data shared within the DVWG Group remains protected at all times.

In accordance with these contracts and applicable data protection laws, we transfer personal data to our service entities only for the purposes stated in this data protection statement. In doing so, we support our subsidiaries both in their operations and in their compliance with the technical and organisational measures that we also use at DVGW e.V. to guarantee the security of your personal data. If possible, we protect your data by using pseudonymisation or anonymisation measures.

1.6. Are you obliged to provide us with personal data?

In the context of the business relationship between you and the DVGW we require the following categories of personal data from you:

  • all data required for establishing and implementing a business relationship
  • data required for the fulfilment of contractual obligations
  • data that we are legally obliged to collect

Without this data it is not possible for us to enter into or execute contracts with you.

1.7. Deletion periods

In accordance with the applicable data protection regulations, we do not store your personal data longer than we need for the purposes of the respective processing. If the data is no longer required for the fulfilment of contractual or legal obligations, it will be regularly deleted by us or its use blocked, unless its temporary retention is still necessary. There may be the following reasons for further storage:

  • Obligations under commercial and tax law to retain data must be observed: The retention periods are primarily governed by the provisions of the German Commercial Code and the Fiscal Code and may be up to 10 years.
  • To obtain evidence in the event of legal disputes within the framework of statutory limitation periods: Statutory limitation periods under civil law may be up to 30 years; the regular limitation period is, however, three years
1.8. Your rights

When your personal data is processed, you also have certain rights. More detailed information can be found in the corresponding provisions of the General Data Protection Regulation (Articles 15 to 21).

1.8.1. Right to information and correction

You have the right to obtain information from us on which of your personal data we process. If this information is not (no longer) correct, you can ask us to correct the data, or, if it is incomplete, to complete it. To the extent that we disclose your data to third parties we will inform the relevant third parties in the event of a corresponding legal situation.

1.8.2. Right to deletion

You can request the immediate deletion of your personal data under the following circumstances:

  • When your personal information is no longer needed for the purposes for which it was collected
  • If you have withdrawn your consent and there is no other legal basis for data processing
  • If you object to the processing and there are no overriding legitimate reasons for data processing
  • If your data is processed unlawfully
  • If your personal data must be deleted in order to comply with legal obligations

Please note that before deleting your data we must check whether there is no legitimate reason for processing your personal data.

1.8.3. Right to restriction of processing ("Right to block")

You may request us to restrict the processing of your personal data for one of the following reasons:

  • If you dispute the accuracy of the data until we have had the opportunity to verify the accuracy of the data
  • If the data is processed unlawfully, but instead of being deleted, you merely request the restriction of the use of personal data
  • If we no longer need the personal data for the purposes of processing, but you still need them to assert, exercise or defend legal claims
  • If you have filed an objection against the processing and it is not yet clear whether your legitimate interests outweigh ours

1.8.4. Right to object

1.8.4.1. Right to object on a case-by case basis

If the processing is carried out in the public interest or on the basis of a balance of interests, you have the right to object to the processing for reasons arising from your particular situation. In the event of an objection, we will not process your personal data further, unless we can prove compelling reasons for processing your data, which outweigh your interests, rights and freedoms, or because your personal data serve to assert, exercise or defend legal claims. The objection shall not preclude the legality of the processing carried out up to the time of the objection.

1.8.4.2. Right to object against the use of data for advertising purposes

In cases where your personal information is used for advertising purposes, you can object to this form of processing at any time. We will then no longer process your personal information for these purposes.

The objection can be made informally and should be addressed to:

DVGW
Josef-Wirmer-Str. 1-3
D-53123 Bonn
Mailto: widerspruch(at)dvgw.de

1.8.5. Right to data portability

Upon request you have the right to receive personal data that you have given us for processing in a transferable and machine-readable format.

1.8.6. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

We try to process your requests and claims as quickly as possible in order to protect your rights appropriately. Depending on the frequency of enquiries, however, it may take up to 30 days before we can provide you with further information about your request. Should it take longer, we will inform you promptly of the reasons for the delay and discuss the further process with you.In some cases we may not or cannot give you any information. If legally permissible, we will inform you about the reason for the refusal to disclose the information.However, should you not be satisfied with our answer and responses or should you be of the opinion that we violate the current data protection law, you are free to file a complaint with our Data Protection Officer as well as with the relevant supervisory authority. The supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2-4
D-40213 Düsseldorf
Phone: +49 (0) 211 384 24-0
Email: poststelle(at)ldi.nrw.de

2. Version

This Data Protection Statement is valid as of 23 May 2018. We reserve the right to update our data protection statement from time to time.