I. Controller (responsible entity)
Company management: Dr. Christian A. Rumpke
Babelsberger Str. 12
14473 Potsdam
Tel: 0331 – 298 71-0
Fax: 0331 – 298 71-77
E-Mail: info@vzb.de
II. Provision of the website and creation of log files
1. Scope of the data processing
Each access to our website and each download of a file stored on this website is logged in order to enable the use of the website.
- Name of the retrieved webpage,
- The date and time of access,
- Amount of data transmitted,
- Duration of the visit,
- Notification of successful retrieval,
- Requesting domain,
- IP address,
- Browser used and
- Operating system used.
The data is likewise also stored in the log files of our system. A storage of this data together with other personal data of the user does not take place.
III. Use of cookies
1. Scope of the data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or respectively in the Internet browser on the user's computer system. When a user accesses a website, a cookie may as such be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is accessed again. Session cookies store information that is used during your current webpage visit. These cookies are automatically deleted when you leave our webpage.
IV. Legal Tech
1. Data Processing Scope
In different parts of our websites and pages, you will find support tools in the form of what we refer to as Legal Tech applications. These include a consulting tool for consumers affiliated with collections services. Also available are a variety of document generators that allow you to compile customized correspondence to providers or government agencies by completing online questionnaires.
The following data are generated when you access the pages on which these tools are provided:
- The user’s IP address
- Date and time
In addition, for the duration of the session, the personal data that you may enter as a user in the questionnaires will be processed, and these will then be reflected in your individual letter that you can send. For instance, this information may include your name and address, your date of birth, but also customer numbers or contract numbers. These data will not be analyzed for marketing purposes in connection with this process.
To enable us to provide the above applications, we utilize the services of the following companies
- Codiac Knowledge Engineering GmbH, Herrengraben 72, 20459 Hamburg, Germany, for the "Inkasso-Check" (collections service)
- Bryter GmbH, Uhlandstraße 175, 10719 Berlin, Germany, for document generator applications.
Document generator applications are identified as "interaktive Briefvorlage" or "Dokumentengenerator" on our website.
2. Legal Foundation
The legal foundation for the processing of personal data you as the user may be entering into the questionnaires while you are using the Legal Tech tools, is Art. 6 Sect. 1 lit. a GDPR.
The legal foundation for the temporary collection and storage of the data and of the log files is Art. 6 Sect. 1 lit. f GDPR.
3. Purpose
Depending on the Legal Tech tool you are using, the personal data you may be entering into the questionnaires affiliated with the Legal Tech tools are processed for the purpose of compiling information or notification text that is tailored to your specific case or for the compilation of a customized letter to the provider or the government agencies, which already contain your personal data, so that all you have to do is send out the correspondence. This is also the basis for our legitimate interest in the processing of this information.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. To do this, the user's IP address must remain stored for the duration of the session. The information is stored in log files to ensure the website’s functional capabilities. We also use the data to optimize the website and to ensure the security of our information technology systems. The data are not analyzed for marketing purpose in connection with these processes.
4. Storage Time
The data will be deleted as soon as they are no longer needed to attain the purpose for which they were collected.
Personal information that is recorded for the compilation of customized information and notification texts or custom correspondence will be deleted as soon as the respective session has ended.
Personal information that is recorded to provide the website will be deleted as soon as the respective session has ended. The data stored in log files will be deleted after no more than 30 days.
5. Objection and Eradication Option
If you intend to use our offer to obtain customized texts for information and notification purposes or personalized correspondence, the recording of personal data is absolutely necessary. Given that this information is not archived beyond the ongoing session, it is not possible to raise objections against this temporary storage process.
The recording of data for the provision of the website and the subsequent storage of data in log files are absolutely necessary for the operation of the website. Hence, an option to demand the deletion of this information does not exist.
V. Newsletter
On our webpages, you have the possibility of registering for our free newsletter. When registering for the newsletter, the data from the entry form is transmitted to us.
When this happens, the following data is collected:
- Email address
- IP address of the requesting computer
- The date and time of registration
We use what is termed the double-opt-in procedure to ensure that the newsletter is only sent once consent has been given. During this procedure, the potential recipient can be added to a mailing list. Subsequently, the user is given the opportunity to confirm registration in a legally compliant manner by means of a confirmation email. The address will be actively included in the mailing list only if confirmation is given.
We use the provider Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, to provide the newsletter service. Sendinblue GmbH is prohibited from selling your data and using it for purposes other than sending newsletters.
The email address and date of registration are stored until the subscription to the newsletter is terminated. If there are several newsletter subscriptions for the same address, the email address and registration data for the subscriptions which still exist will continue to be stored until these are also terminated.
You can find further information at:
https://de.sendinblue.com/informationen-newsletter-empfaenger/?rtype=n2go
Your consent to the storage of the data and the email address, and their use for sending the newsletter can be revoked at any time, for example, via the ‘unsubscribe’ link in the newsletter.
VI. Podcasts
We make podcasts available on our websites.
When you call up the websites containing these podcasts, the following data is collected:
- IP address of the user
- Date and time
- Information about the end device and the operating system of the user
The legal basis for the processing of this data is Art. 6 Sec. 1 Clause f. of the GDPR.
3. Objective
The service provider, Podigee, processes IP addresses and device information to enable podcast downloads and podcast playbacks and to determine statistical data, e.g. call-off figures.
4. Duration of data retention, Right to object and to erasure
The collected data is anonymised or pseudonymised before it is saved in the Podigee database, insofar as it is not necessary for making the podcasts available.Further information, as well as the possibility to object to such data processing, can be found in the data privacy statement of Podigee: https://www.podigee.com/de/about/privacy/.
VII. Contact forms and e-mail contact
At the time of sending the message, the following data is also stored:
- IP address of the user
- Date and time
The data will be deleted as soon as it is no longer required to achieve the purpose of its collection. With regard to the personal data from the input form of the contact form and those sent by e-mail, this is the case when the respective communication with the user has ended. The communication is deemed to have ended, if it can be inferred from the circumstances that the relevant facts have been finally clarified.
VIII. Appointment scheduling
- Personal data: first and last name, full address
- IP address
- Communication data: telephone numbers, e-mail addresses
- Data about providers or affected contracts
- Further information necessary for the appointment scheduling: Description of your request
Optional calendar function: You can download the booked appointment to your electronic calendar (no automatic download, an active action on your part is necessary). For this purpose, your specified data will be made available for download in an appointment invitation.
Technically, the appointment scheduling is carried out over the online appointment booking application Terminland® within the framework of order processing. (Art. 28 of the GDPR) The online appointment booking application Terminland® is a commercial offer of Schulz & Löw Consulting GmbH, Wiesbaden. The scheduler runs over SSL encryption. This thereby encrypts your personal information and transmits it securely over the Internet during transmission.
Your data will be stored on the servers of the online appointment booking application Terminland® in Germany for the purpose of the appointment scheduling. The servers of the online appointment booking application Terminland® are in a high-performance data centre that is security-monitored 24 hours a day, 7 days a week. Your data will not be transmitted to third parties for advertising purposes.
We to the extent necessary, process and store your personal data for the duration of our business relationship, which for example also includes the initiation and execution of a contract.
In order to prevent misuse of our service, we will store your IP address for a maximum of 90 days from the date of appointment scheduling. The data is stored in the log files of the online appointment booking application Terminland®. This data is not stored together with the user’s other personal data. Protection against misuse constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f of the GDPR.
In addition, we are subject to various storage and documentation obligations, which result, inter alia, from the German Commercial Code (Handelsgesetzbuch) and the Tax Code (Abgabenordnung). The deadlines for storage and documentation are two to ten years.
Finally, the retention period is also judged according to the statutory limitation periods, which, according to §§ 195 et seq. of the German Civil Code (Bürgerliches Gesetzbuch), can generally amount to three years and in certain cases up to thirty years.
If you have granted us your consent for the disclosure of your data, you nevertheless reserve the right to revoke your declaration at any time with effect for the future.
You can address the objection or revocation of the declaration of consent to the central address widerspruch@vzb.de.
IX. Online Consulting
Before you send us your request, we request you to register once with your personal data. We collect the following data here:
- Name
- Address
- E-mail address
- Phone number
- Password
- Description of your concern
- IP address
- Date and time
The legal basis for processing the data is Art. 6 (1) lit. b of the GDPR and for transfer to other consumer organisations (Verbraucherzentralen), Art. 6 (1) lit. f of the GDPR. In cases where you have granted us your consent, the legal basis for the disclosure of your information, is Art. 6 (1) lit. a of the GDPR, for the transmission of information also § 7 (2) no. 3 of the German Fair-Trade Practices Act (Gesetz gegen den unlauteren Wettbewerb).
We use the data collected to electronically validate your request, execute it and verify the payment process. The joint operation of the consulting platform takes place in order to adapt our consulting services to changing consumer needs. The forwarding of pseudonymized data also takes place for this purpose, as well as and to recognize structural problems and make them visible. This also constitutes our legitimate interest in the transfer of data to other consumer organisations (Verbraucherzentralen).
Where expedient, we forward your data to other Consumer Centres (Verbraucherzentralen) and the Federation of German Consumer Organisations (Verbraucherzentrale Bundesverband e.V.), which likewise also ensure a high level of data protection, and if you have granted us your consent, also to censured companies, journalists and supervisory authorities.
Your request and response will remain in your personal account on our website until you delete it yourself.
The customer account that has been created can be deleted at any time without stating reasons.
You can address the objection or revocation of the declaration of consent to the central address widerspruch@vzb.de.
X. Web analysis using Matomo (formerly PIWIK)
We use the open-source software tool Matomo (formerly PIWIK) on our website to analyse the surfing behaviour of our users. The software sets a cookie on the user's computer (for cookies see above under III.). If individual webpages of our website are accessed, the following data is stored.
- 2 bytes of the IP address of the user's accessing system
- The accessed webpage
- The webpage from which the user accessed the website (Referrer)
- The sub-webpages that are accessed from the webpage you are visiting
- The length of stay on the webpage
- The frequency with which the webpage is accessed
The software runs exclusively on the servers of our webpage. This data is only stored there. The data is not transferred to third parties. The software is set so that the IP addresses are not completely stored, but 2 bytes of the IP address are masked (e.g. 192.168.xxx.xxx). In this way, the truncated IP address cannot be assigned to the accessing computer.
The legal basis for the processing of the data, of the user, is Art. 6 (1) lit. f of the GDPR.
The processing of this personal data enables us to analyse the surfing behaviour of our users. By analysing the data obtained, we are able to compile information about the use of the individual components of our webpage. This helps us to constantly improve our webpage and its user-friendliness. In this regard, we have a legitimate interest in the processing the data pursuant to Art. 6 (1) lit. f of the GDPR. The anonymisation of the IP address takes sufficient account of users' interest in the protection of their personal data.
Cookies are stored on the computer of the user and transmitted by these to our webpage. Therefore, as a user, you have full control over the use of cookies. By changing the relevant settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website to the full extent.
XI. Establishment of contact over the phone for consultation
If you arrange an appointment with us by phone, we collect the following data:
- Name
- Address
- E-mail address
- Phone number
- Description of your concern
- Where expedient, account details
In appropriate cases, we forward data collected in the course of the consultation, in pseudonymised form, to other Consumer Centres (Verbraucherzentralen) and the Federation of German Consumer Organisations (Verbraucherzentrale Bundesverband e.V.). The forwarding of information is thereby in principle carried out without names, addresses, telephone numbers and e-mail addresses. In specific cases, it may be purposeful to forward documents to a supervisory authority. The documents are thereby blacked out and anonymized so that third parties cannot trace these documents back to the consumer.
The legal basis for the processing of the data, is Art. 6 (1) lit. b of the GDPR and for the disclosure to other consumer organisations (Verbraucherzentralen), Art. 6 (1) lit. f of the GDPR. In cases where you have granted us your consent, the legal basis for the disclosure of your information, is Art. 6 (1) lit. a of the GDPR.
We use the data collected to reserve and organize the appointment, to provide advice and to collect the fee for the consultation. The forwarding of pseudonymous data takes place in order to adapt our consulting services to changing consumer needs, to recognize structural problems and to make them visible. This also constitutes our legitimate interest in the forwarding of data to other consumer organisations (Verbraucherzentralen).
Where expedient, we forward your data to other Consumer Centres (Verbraucherzentralen) and the Federation of German Consumer Organisations (Verbraucherzentrale Bundesverband e.V.), which also ensure a high level of data protection, and if you have granted us your consent, to censured companies, journalists and supervisory authorities.
The data is deleted from our internal systems as soon as it is no longer required to achieve the purpose of its collection.
In the case of a contract for consultation, the storage of your data is initially necessary for its implementation. Even after termination of the contract, contractual or statutory obligations may preclude deletion of the personal data of the contract partner. We are subject to commercial and tax retention periods of six or ten years. In addition, statutory limitation periods are to be observed, which are usually three years.
If you do not want information from your consultation or complaint to be included in an investigation by other consumer organisations, you may object to the use of the pseudonymized data. A consultation is possible in this case despite the objection.
XII. Consultation over the phone
If you use our consultation over the phone, we collect the following data:
- Name
- Phone number
- Description of your concern
In appropriate cases, we forward data collected during the consultation, in pseudonymised form, to other Consumer Centres (Verbraucherzentralen) and the Federation of German Consumer Organisations (Verbraucherzentrale Bundesverband e.V.). The forwarding of information is thereby in principle carried out without names, addresses, telephone numbers and e-mail addresses. In specific cases, it may be purposeful to forward documents to a supervisory authority. The documents are thereby blacked out and anonymized so that third parties cannot trace these documents back to the consumer.
The legal basis for the processing of the data, is Art. 6 (1) lit. b of the GDPR and for the disclosure to other consumer organisations (Verbraucherzentralen), Art. 6 (1) lit. f of the GDPR. In cases where you have granted us your consent, the legal basis for the disclosure of your information, is Art. 6 (1) lit. a of the GDPR.
We use the collected data to consult you regarding your concerns. The forwarding of pseudonymous data takes place in order to adapt our consulting services to changing consumer needs, to recognize structural problems and to make them visible. This also constitutes our legitimate interest in the forwarding of data to other consumer organisations (Verbraucherzentralen).
Where expedient, we forward your data to other consumer advisory centres (Verbraucherzentralen) and the Federation of German Consumer Organisations (Verbraucherzentrale Bundesverband e.V.), which likewise also ensure a high level of data protection, and if you have granted us your consent, also to censured companies, journalists and supervisory authorities.
On the part of our internal systems, the data is deleted as soon as it is no longer necessary to achieve the purpose of its collection.
If you do not want information from your consultation or complaint to be included in an investigation by other consumer organisations, you may object to the use of the pseudonymized data. A consultation is possible in this case despite the objection.
XIII. Inquiries from media representatives
If you send us an interview request, we collect the following data:
- Name
- Phone number
- Medium
- Description of your concern
The legal basis for the processing of the data, is Art. 6 (1) lit. f of the GDPR.
We use the personal data to facilitate communication between the responsible officer / clerk and you. Where expedient, we store your name, your medium and a keyword for the content of the interlocution for documentation purposes.
On the part of our internal systems, the data is deleted as soon as it is no longer necessary to achieve the purpose of its collection. When documenting contacts with journalists, this is the case if inquiries are no longer to be expected and the evaluation has been carried out for statistical purposes.
If you contact us, you can object to the storage of your personal data at any time. In such a case, the communication cannot continue.
XIV. Rights of the data subject
- Right to demand information pursuant to Art. 15 of the GDPR (Restrictions pursuant to § 34 of the Federal Data Protection Act (Bundesdatenschutzgesetz) possible)
- Right to demand rectification pursuant to Art. 16 of the GDPR
- Right to demand deletion pursuant to Art. 17 of the GDPR (Restrictions pursuant to § 35 of the Federal Data Protection Act (Bundesdatenschutzgesetz) possible)
- Right to demand restriction of the processing pursuant to Art. 18 of the GDPR
- Right of objection pursuant to Art. 21 of the GDPR
- Right to demand data portability pursuant to Art. 20 of the GDPR
- Right to lodge a complaint with a supervisory authority pursuant to Art. 77 of the GDPR in conjunction with § 19 of the Federal Data Protection Act (Bundesdatenschutzgesetz)
If you have granted us consent for the processing of personal data, you nevertheless reserve the right to revoke your declaration at any time with effect for the future.
XV. Events
1. Scope and Purpose of the Processing of Personal Data
The VZB sends out e-mails in conjunction with the organization of events. These e-mails may be reminders related to dates or invitations. They are sent to select groups of individuals. Such correspondence is sent on the legal basis that the recipient has given his or her prior consent for or where the VZB has a legitimate interest in sending such correspondence pursuant to Art. 6 Sect. 1 Para. 1 Letter a GDPR. The registration for VZB events is optional. The registration process is completed via the e-mail address stipulated in the invitation. We need your title, first name, last name and your institution/workplace for the registration process for events. Your personal data will be deleted after the event.
We will use your data for the following purposes:
(1) For the organization, implementation and handling of the event.
(2) To facilitate the networking between participants. For this purpose, we issue nametags (title, first and last name as well as the name of the institution/workplace) and we also make a list of participants available. The list of participants also contains the title, first and last name, and the institution/workplace of each participant. If a list of participants for an event exists, you have the option of whether to consent to the use of this information or not when you register.
(3) As evidence that we have permission to process your data and to send you information via e-mail.
(4) For documentation purposes, including photographs and video material, which may also be used for public relations work by the VZB.
2. Legal Basis for the Processing of Personal Data
In ref. to (1): The legal basis for the processing of data for the organization, implementation and handling of an event is your prior consent or a legitimate interest of the VZB pursuant to Art. 6 Sect. 1 Para. 1 Letter f GDPR.
In ref. to (2): The legal basis for the processing of data for the purpose of networking event participants is your prior consent or a legitimate interest of the VZB pursuant to Art. 6 Sect. 1 Para. 1 Letter a GDPR.
In ref. to (4): The legal basis for the production of photographs and video material as well as the subsequent processing of the former is §23 Sect. 1 No. 3 KunstUrhG (German Art Copyright Act).
3. Recipients of Your Data
Employees of the Consumer Centres who organize and implement the event have access to your data. For networking purposes, your name and institution will also be accessible to the other participants of the event, if you have agreed to this type of use when you registered and provided a list of participants is made available. Photographs and video recordings which are published or used in any other way for documentation purposes or public relations work may be accessible to anyone and to the public.
Your data will be processed by us or on our behalf exclusively in the European Union.
4. Revocation
You may revoke your consent to the receipt of information e-mails for specific VZB events at any time. A link is provided at the end of every e-mail for this purpose.
XVI. Online events
1. Scope of data processing
Via our website, you can register to take part in a Verbraucherzentrale Brandenburg online event.
In order to make available these applications, we use services provided by the company edudip (edudip GmbH, Jülicher Straße 306, DE 52070 Aachen, data protection information).
We have concluded a commissioned data processing agreement with edudip for this purpose. Under the terms of this agreement, we process the following data:
- the data you provide when registering for an online event: First name and surname (pseudonym possible), e-mail address, possibly voluntary data such as questions
- User information in the digital event room: Display name, chat record, dial-in time, participation duration
Edudip processes other technical data (e.g. IP addresses, passwords) in order to be able to hold the online events. Any processing of personal data takes place exclusively within a member state of the European Union or in another European Economic Area (EAA) signatory state.
2. Legal basis
The legal basis for the processing of data for participation in online events is consent or a legitimate interest in accordance with Art. 6 Sect. 1 lit. f of the GDPR. You give your consent by entering your data via the online registration form and actively agreeing to the data protection provisions.
3. Purpose
The data are needed to provide the digital event room, the chat function and communication within the room (event reminders, event follow-up work) and for internal quality assurance purposes.
After you have registered for an event, the e-mail address is needed to send to you via e-mail an activation link, event reminders and, at least 24 hours after the event ends, additional event information and materials. The surname and first name that you have given will also appear in the chat room.
4. Retention period
We always delete personal data if there is no need to retain them any longer. The personal data which we collect and process are retained for the time it takes to hold online events and carry out internal quality assurance procedures. With the exception of the chat record, personal data will be deleted after a month. The chat record will be deleted after 12 months at the latest.
5. Opt-out option
You can opt out of having your data processed at any time. If you do this before the end of the online event, you will no longer be able to take part. If you wish to opt out, contact us at the central address widerspruch@vzb.de.
