Thank you for your interest in our homepage, our activities and the information we provide. We do of course take the protection of the personal data we collect, process and use whenever you visit our websites very seriously. This Data Privacy Statement applies to the website of the European Cement Research Academy GmbH (ECRA) which can be accessed through the internet address www.ecra-online.org. The following statement fulfils our legal obligation to provide information and informs you about the processing of data, the nature of this data, its purpose, the legal bases for processing, your rights with regard to the processing of personal data and our identity.

I. Name and address of data controllers

The data controllers as defined by the General Data Protection Regulation (GDPR), national data privacy laws of the member states and the provisions of other data privacy laws are:

European Cement Research Academy GmbH
Toulouser Allee 71
40476 Duesseldorf

Germany
Phone: +49-211-23 98 38 0
Fax: +49-211-23 98 38 500
E-Mail: info@ecra-online.org
www.ecra-online.org

Chairman of the Technical Advisory Board: N. N.
Managing Director: Dr Martin Schneider

Registered office: Duesseldorf
Court of registration: Duesseldorf
Commercial registration no.: HRB no. 47580

Turnover tax identification number in accordance with § 27 a Turnover Tax Law:
DE 813632181

II. Name and address of data protection officer

The company data protection officer of the data controllers is:

Dipl. Vw. Dennis Behrouzi
Kochstrasse 6-7
10969 Berlin, Germany
Phone: +49-30-28 02-220

III. General information on data processing

1. Scope of processing of personal data

We only ever collect and use the personal data of our users to the extent necessary to provide a functioning website and to present the content and our services. The foundation for the collection and use of the personal data of our users is always provided by one of the legal bases explained in the following section.  The information processed is stored on our server at a data centre in Germany. This is the only place where the personal data of users is stored. Data is not passed on to third parties.

2. Legal basis for the processing of personal data

Art. 6 Para. 1 Point a of the EU General Data Protection Regulation (GDPR) serves as legal basis for the processing of personal data insofar as we obtain the consent of the data subject for the processing of personal data.
Art. 6 Para. 1 Point b of the GDPR serves as legal basis for the processing of personal data necessary for the performance of a contract to which the data subject is party. This also applies to processing necessary in order to take steps prior to entering into a contract.
Art. 6 Para. 1 Point c of the GDPR serves as legal basis insofar as the processing of personal data is necessary for compliance with a legal obligation to which our company is subject.
Art. 6 Para. 1 Point d of the GDPR serves as legal basis in cases where processing is made necessary by the vital interests of the data subject or of another natural person.
Art. 6 Para. 1 Point f of the GDPR serves as legal basis for processing if processing is necessary for the purposes of the legitimate interest pursued by our organisations or by a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not override the first-mentioned interest.

3. Erasure of data and retention period

The personal data of the data subject will be erased or blocked as soon as the purpose of retention no longer applies. Retention above and beyond this is also possible if such retention is provided for by European or national legislation in European Union directives, laws or other regulations to which the data controllers are subject. The data will also be erased or blocked at the end of a storage limitation period specified by the above-mentioned standards, unless further retention of the data is necessary for the conclusion of a contract or for the performance of a contract.

IV. Provision of website and creation of log files

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system accessing the website. The following data is collected in this process:

(1)  Your IP address (in partially anonymised form, i.e. without the last number block (e.g. 192.168.100.xxx))

(2)  URL of the websites visited

(3)  The type of browser used

(4)  The user's operating system

(5)  Date and time of access

(6)  Search engines used

(7)  Names of files downloaded

(8)  Websites from which the user's system accesses our website

(9)  Websites accessed by the user's system via our website

The data are also stored in the log files of our system. This does not apply to the IP addresses of the user or other items of data permitting assignment of the data to a user. Such data is not stored together with other personal data of the user. The information processed is stored on our server at a data centre in Germany. This is the only place where the personal data of users is stored. Data is not passed on to third parties.

2. Legal basis for data processing

Art. 6 Para. 1 Point f of the GDPR serves as legal basis for the temporary storage of data.

3. Purpose of data processing

Temporary storage of the IP address by the system is necessary to allow delivery of the website to the user's computer. For this purpose, the IP address of the user has to be retained for the duration of the session.

The purpose of storage in log files is to ensure the functionality of the website. We also use the data to optimise the website and to guarantee the security of our IT systems. Evaluation of the data for other purposes does not take place in this context.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 Para. 1 Point f of the GDPR.

4. Period of retention

The data is erased as soon as it is no longer required for the fulfilment of the purpose of its collection. With regard to the collection of data for provision of the website, this is the case at the end of each particular session.

With regard to the storage of data in log files, this will be the case after 14 days at the latest to permit subsequent tracing of misuse of the website. Storage above and beyond this is also possible in this connection.

5. Objection and removal option

The collection of data for provision of the website and storage of the data in log files are absolutely essential for operation of the website. To this extent, no objection option is consequently available to the user.

V. Use of cookies and web analytics by Matomo (formerly PIWIK)

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user visits a website, a cookie can be stored in the user's operating system. With the exception of the information stated below, the cookies we place do not contain any information permitting the identification of a user.
Our website uses the open-source software tool Matomo (formerly PIWIK) for statistical evaluation of visits to a website. The software places a cookie on the user's computer. The following data is stored on visits to individual pages of our website:

(1)  Your IP address (in partially anonymised form, i.e. without the last two number blocks (e.g. 192.168.xxx.xxx))

(2)  URL of the website visited

(3)  Websites from which the user has accessed the website visited

(4)  Subpages accessed from the website visited

(5)  Duration of visit to the website

(6)  Frequency of visits to the website

The information generated by the cookie concerning your use of this website is stored on our server at a data centre in Germany. This is the only place where the personal data of users is stored. Data is not passed on to third parties.
The software is set such that your IP address is partially anonymised on collection. It is thus not possible to trace back your visit to our website (e.g.: 192.168.100.xxx).
You can agree to the use of cookies by actively giving your consent on visiting the website. Please note that without the use of cookies it may not be possible to utilise all the functions of this website in full.

2. Legal basis for the processing of personal data

Art. 6 Para. 1 Point a of the GDPR serves as legal basis for the processing of users' personal data.

3. Purpose of data processing

The processing of users' personal data enables us to analyse the browsing behaviour of our users. Evaluation of the data acquired allows us to compile information on usage of the individual components of our website. This helps us to constantly improve our website and make it more user-friendly.

4. Period of retention

The data is erased as soon as it is no longer required for our recording purposes. In our case, this means at the end of the particular month under review (however at the latest after 31 days).

VI. Newsletters/E-Mailings about seminars and events

1. Description and scope of data processing

Our website offers the option of subscribing to free newsletters and e-mailings about seminars and events. The following data from the input mask is transmitted to us on registration for the newsletter/e-mailings:

(1)  E-mail address of the subscriber

(2)  Date and time of registration

(3)  IP address of the subscriber

As part of the subscription procedure, your consent will be requested for processing of the data and reference will be made to this Data Privacy Statement.
The data is used solely for the purpose of sending the newsletter or e-mailing in question. The information processed is stored on our server at a data centre in Germany. This is the only place where the personal data of users is stored. Data is not passed on to third parties.

2. Legal basis for data processing

User consent in accordance with Art. 6 Para. 1 Point a of the GDPR forms the legal basis for the processing of data following registration for the newsletter/e-mailing by the user.

3. Purpose of data processing and period of retention

The purpose of collecting the e-mail address of the user is to deliver the Newsletter or e-mailing. The data is erased as soon as it is no longer required for the fulfilment of the purpose of its collection. Accordingly, the e-mail address of the user will be retained for as long as the subscription to the particular newsletter/e-mailing is active.

4. Objection and removal option

Subscription to the newsletter/e-mailing can be terminated at any time by the user concerned. Each newsletter/e-mailing contains an appropriate link for this purpose.

VII. Contact form and e-mail contact

1. Description and scope of data processing

A contact form is provided on our website for the purpose of electronic communication. If use is made of this option, the data entered in the input mask will be transmitted to us and stored. This data includes:

(1)  Name

(2)  E-mail address

(3)  Message

Alternatively, the e-mail address provided can be used to make contact. In this case, the user's personal data transmitted with the e-mail will be stored. The information processed is stored on our server at a data centre in Germany. This is the only place where the personal data of users is stored. Data is not passed on to third parties.

2. Purpose of and legal basis for data processing

The processing of personal data in the context of the contact options serves the purpose of implementing the communication initiated by the user and/or providing the information requested by the user. Art. 6 Para. 1 Point b of the GDPR serves as legal basis for the processing of the user's data.

Art. 6 Para. 1 Point f of the GDPR serves as legal basis for the processing of the data transmitted in the course of sending an e-mail. Art. 6 Para. 1 Point b of the GDPR serves as additional legal basis for processing if the aim of the e-mail contact is to conclude a contract.

3. Period of retention

The data is erased as soon as it is no longer required for the fulfilment of the purpose of its collection. With regard to the personal data from the input mask of the contact form and the data sent by e-mail, this is the case when the particular correspondence with the user is ended. The correspondence is deemed to have ended when it is apparent from the circumstances that the matter concerned has been conclusively settled.

The personal data additionally collected during the sending process will be erased at the latest after a period of seven days.

4. Objection and removal option

Users can withdraw their consent to the processing of personal data at any time. Users who contact us by e-mail can object to the storage of their personal data at any time. The correspondence cannot be continued in such cases. All personal data stored in the course of communication will be erased in this case.

VIII. Registration forms for events and seminars

1. Description and scope of data processing

Our website contains various forms which can be used to register for events and seminars. The data entered in the input mask during registration is transmitted to us and stored. This data includes:

(1)  Form of address

(2)  Title (optional)

(3)  First name, surname

(4)  Company / organisation

(5)  Department (optional)

(6)  Position (optional)

(7)  Street and house number

(8)  Post code

(9)  Place

(10)  Country

(11)  E-mail address

(12)  Telephone number

(13)  Fax (optional)

(14)  Turnover tax ID no.

(15)  Different invoice address (optional)

(16)  Comment (optional)

(17)  Special dietary requirements (optional)

The information processed is stored on our server at a data centre in Germany. This is the only place where the personal data of users is stored. Data is not passed on to third parties. The data is used solely for the processing of the correspondence.

2. Purpose of and legal basis for data processing

The purpose of processing is registration for the particular event or seminar. Art. 6 Para. 1 Point b) of the GDPR serves as legal basis for the processing of the user's data.

3. Period of retention

The data is erased as soon as it is no longer required for the fulfilment of the purpose of its collection. With regard to the personal data from the input mask of the registration form and any data sent by e-mail, this is the case when the event or seminar and all procedures connected with this have ended (e.g. payment, attendance certificates). In keeping with the obligation to preserve business records, personal data for invoicing purposes will be erased after 10 years.

4. Objection and removal option

Users can withdraw their consent to the processing of personal data at any time, insofar as this data is not necessary for compliance with legal obligations.

IX. Passing-on of data for contract completion

Your personal data will only be passed on or otherwise transmitted to third parties if passing-on is necessary for the purpose of contract completion (for the sending of publications ordered, for invoicing purposes or for the collection of payments) or if you have given your express consent. The service providers appointed for the above purposes will only receive the information necessary to perform their respective tasks.

Appointed service providers and thus possible recipients of the data are:

(1)  Logistics and shipping service providers
(2)  Payment service providers
(3)  Financial and invoicing service providers
(4)  External warehousing service providers

X. Rights of the data subject

If your personal data is processed, you are deemed to be the data subject as defined by the GDPR and you have the following rights vis-à-vis the data controllers:

1. Right of access

You have the right to demand information from the data controllers about whether we process personal data affecting you. If this is the case, you have the right to demand information on the following items from the data controllers:

(1)    The purposes for which the personal data is being processed
(2)    The categories of personal data being processed
(3)    The recipients or categories of recipient to whom your personal data has been or is still being disclosed
(4)    The envisaged period of retention of your personal data or, if no concrete information is possible, the criteria used to determine the period of storage
(5)    The existence of a right to rectification or erasure of your personal data, of a right to restriction of processing by the data controllers or of a right to object to such processing
(6)    The existence of a right to lodge a complaint with a supervisory authority
(7)    All available information on the origin of the data if the personal data is not collected from the data subject
(8)    The existence of automated decision-making, including profiling in accordance with Art. 22 Para. 1 and 4 of the GDPR and – at least in such cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to demand information on whether your personal data is being transmitted to a third country or to an international organisation. In this context you can demand to be informed of the appropriate safeguards in accordance with Art. 46 of the GDPR relating to transmission.

2. Right to rectification

Insofar as your processed personal data is inaccurate or incomplete, you have a right to rectification and/or completion vis-à-vis the data controllers. The data controllers are obliged to perform rectification without delay.

3. Right to restriction of processing

Given the following prerequisites, you have the right to demand restriction of the processing of your personal data:

(1)    If you contest the accuracy of your personal data for a period enabling the data controller to check the accuracy of the personal data

(2)    If processing is unlawful and you decline erasure of the personal data and demand restriction of use of the personal data instead
(3)    If the data controller no longer requires the personal data for the purposes of processing, but you require this data to assert, exercise or defend legal claims, or
(4)    If you have objected to processing in accordance with Art. 21 Para. 1 of the GDPR and it has not yet been established whether the legitimate grounds of the data controllers override your grounds

Where processing of your personal data has been restricted, such data shall – with the exception of storage – only be processed with your consent or to assert, exercise or defend legal claims, or for the protection of the rights of some other natural or legal person, or for reasons of important public interest of the European Union or of a member state.

If processing has been restricted on the basis of the above-mentioned prerequisites, you will be informed by the data controllers before the restriction is lifted.

4. Right to erasure

a) Erasure obligation

You have the right to demand that the data controllers erase your personal data without delay, and the data controllers are obliged to erase this data without delay insofar as one of the following grounds applies:

(1)    Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed
(2)    You withdraw your consent on which processing in accordance with Art. 6 Para. 1 Point a or Art. 9 Para. 2 Point a of the GDPR was based, and there is no other legal basis for processing
(3)    You object to processing in accordance with Art. 21 Para. 1 of the GDPR and there are no overriding legitimate grounds for processing, or you object to processing in accordance with Art. 21 Para. 2 of the GDPR
(4)    Your personal data has been unlawfully processed
(5)    Erasure of your personal data is necessary for compliance with a legal obligation in accordance with European Union or member state law to which the data controller is subject
(6)    Your personal data was collected in relation to information society services offered in accordance with Art. 8 Para. 1 of the GDPR

b) Information to third parties

Where the data controllers have made your personal data public and are obliged, in accordance with Art. 17 Para. 1 of the GDPR, to erase this data, they shall, taking into account the technology available and the costs of implementation, take reasonable action, also of a technical nature, to inform data controllers who process the personal data that you as data subject have demanded that they erase all links to this personal data as well as copies or replications of this personal data.

c) Exceptions

The right to erasure shall not apply insofar as processing is necessary

(1)    For exercising the right to freedom of expression and information
(2)    To comply with a legal obligation which requires processing in accordance with European Union or member state law to which the data controller is subject, or for the performance of a task which is in the public interest or is performed in the exercising of official authority conferred on the data controller
(3)    For reasons of public interest in the area of public health in accordance with Art. 9 Para. 2 Point h and i as well as Art. 9 Para. 3 of the GDPR
(4)    For archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 of the GDPR, insofar as the right referred to in clause a) is likely to render impossible or seriously impair the achievement of the objectives of such processing, or
(5)    To assert, exercise or defend legal claims

5. Right to notification

If you have asserted your right to rectification, erasure or restriction of processing vis-à-vis the data controllers, they shall be obliged to notify all recipients to whom your personal data has been disclosed of this rectification or erasure of data or restriction of processing, unless this proves to be impossible or is associated with disproportionate effort.
You have the right to be notified of these recipients by the data controller.

6. Right to data portability

You have the right to receive the personal data you have supplied to the data controllers in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another data controller without hindrance by the data controllers to whom the personal data has been supplied, insofar as
(1)    Processing is based on consent in accordance with Art. 6 Para. 1 Point a of the GDPR or Art. 9 Para. 2 Point a of the GDPR or on a contract in accordance with Art. 6 Para. 1 Point b of the GDPR and
(2)    Processing is carried out by automated means
In exercising this right, you additionally have the right to have your personal data transmitted directly from one data controller to another data controller, where this is technically feasible. This must not adversely affect the freedoms and rights of others.
The right to data portability does not apply to the processing of personal data which is necessary for the performance of a task which is in the public interest or is performed in the exercising of official authority conferred on the data controllers.

7. Right to object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data performed on the basis of Art. 6 Para 1 Point e or f of the GDPR.
Following your objection, the data controllers shall no longer process your personal data, unless they can furnish proof of compelling legitimate grounds for processing which override your interests, rights and freedoms, or processing serves the purposes of asserting, exercising or defending legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purposes of such advertising; this also applies to profiling, insofar as this is in connection with such direct marketing.
If you object to processing for the purposes of direct advertising, your personal data will no longer be processed for such purposes.
In the context of the use of information society services – and notwithstanding Directive 2002/58/EC – you have the option of exercising your right to object by automated means using technical specifications.

8. Right to withdraw data protection declaration of consent

You have the right to withdraw your data protection declaration of consent at any time. Withdrawal of consent does not affect the lawfulness of the processing performed by reason of the consent prior to withdrawal.

9. Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces a legal effect for you or has a similar significant adverse effect on you. This does not apply if the decision

(1)    Is necessary for the conclusion or performance of a contract between you and the data controllers
(2)    Is permissible on the basis of European Union or member state law, to which the data controllers are subject, and such legal provisions contain appropriate measures for safeguarding your rights and freedoms as well as your legitimate interests, or
(3)    Is taken with your express consent

These decisions must however not be based on special categories of personal data in accordance with Art. 9 Para 1 of the GDPR, insofar as neither Art. 9 Para 2 Point a nor g applies and appropriate measures have been taken to safeguard rights and freedoms as well as your legitimate interests.

With regard to the cases referred to in (1) and (3), the data controllers shall take appropriate action to safeguard rights and freedoms as well as your legitimate interests, which at least include the right to obtain human intervention on the part of the data controllers, to express your point of view and to contest the decision.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the presumed infringement, if you are of the opinion that the processing of your personal data contravenes the GDPR.
The supervisory authority with which the complaint was lodged shall inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 of the GDPR.