Data Protection

Data Protection

1. General information
The following data protection declaration provides a simple overview of what happens to your personal data when you visit this website. Personal data is all information that relates to an identified or identifiable natural person. For detailed information on data protection, please refer to our data protection declaration listed under this text.

Data protection officer:

The responsible party for this website is the City of Frankfurt am Main, Environmental Agency, Zero Waste Frankfurt Project (see Imprint)
Data Protection Officer:
Division for Data Protection and Information Security
Sandgasse 6
60311 Frankfurt a. M.
Email: datenschutz@stadt-frankfurt.de


Data collection on this website

How do we collect your data?
Your data is collected when you provide it to us. This could be data that you enter in a contact form, for example.
Other data is collected automatically or with your consent when you visit the website through our IT systems. These are mainly technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter this website. What do we use your data for? Part of the data is collected to ensure that the website is provided without errors. When you visit this website, your surfing behavior can be statistically evaluated. This is mainly done with so-called analysis programs.
You can find detailed information on these analysis programs below. What rights do you have regarding your data? We would like to expressly point out your rights to information, correction, deletion, restriction of processing and objection regarding all of your processed personal data. The legal basis for this is Art. 15 to 21 GDPR. If the processing of personal data is based on your consent, you can revoke this at any time with effect for the future. You have the right to lodge complaints with the Hessian Data Protection Officer. Postal address: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Tel.: 0611 / 1408-0 or email: poststelle@datenschutz.hessen.de

Web Hosting by edition3 GbR

Our website is hosted by edition3 GbR, Löwengasse 27 B, 60385 Frankfurt (Germany).
edition3 GbR provides us with hosting and related infrastructure services (e.g., provision of server capacities, storage space, security and maintenance services) that are necessary for the operation of this website.

In this process, edition3 GbR processes personal data that is technically necessary when accessing this website to enable its display and to ensure its stability and security. This data includes, in particular:

  • IP address of the accessing device,

  • Date and time of access,

  • Accessed file / URL,

  • Amount of data transferred,

  • Source / reference from which you accessed the page (referrer URL),

  • Browser type, language, and version,

  • User’s operating system,

  • Error messages (error logs), if applicable.

Legal basis for processing
The processing of this data is based on Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in the secure and technically flawless provision and optimization of our website.

Retention period
edition3 generally stores technical log data for up to 7 days. After this period, the data is automatically deleted, unless there is a security-related or technical necessity for longer storage (e.g., for investigating attacks or disruptions).

Data Processing Agreement
Our appointed agency VON WEGEN has concluded a data processing agreement with edition3 GbR in accordance with Art. 28 GDPR. Under this agreement, edition3 GbR is obliged to process all data exclusively according to our instructions, to ensure data security in accordance with Art. 32 GDPR, and to treat personal data confidentially.

For the technical provision of its hosting infrastructure, edition3 uses a sub-processor with servers located in Germany or the EU. This integration is based on a data processing agreement in accordance with Art. 28 para. 4 GDPR. No transfer of personal data to third countries takes place.


Server Log Files

Each time our website is accessed, so-called server log files are automatically created. These contain access data (e.g., IP address, date, time, retrieved file, browser type, operating system).
The server log files are used exclusively for technical monitoring and system stability, as well as for abuse detection (e.g., to ward off attacks).
This data is not merged with other data sources.

Server log files are stored for a maximum of 7 days and are then automatically deleted.
The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in a secure and functional website).

Cookies

Our website uses so-called “cookies”. Cookies are small text files and do not cause any damage to your device. They are either temporarily stored on your device for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

Cookies have various functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g. the display of videos). Other cookies are used to evaluate user behavior or display advertising.

Cookies that are required to carry out the electronic communication process (necessary cookies) or to provide certain functions that you have requested (functional cookies) are based on Art. 6 Para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies has been requested, the cookies in question are stored exclusively on the basis of this consent (Art. 6 Para. 1 lit. a GDPR); consent can be revoked at any time. Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you about this within the scope of this data protection declaration and obtain your consent.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
When all optional cookies are rejected, no data is collected and stored. Therefore, no information about the device or the user (personal data) can be traced.

Newsletter

Newsletter Data

If you wish to subscribe to the newsletter offered on the website, we require your email address and information that allows us to verify that you are the owner of the provided email address and agree to receive the newsletter. No further data is collected, or only on a voluntary basis. For the processing of the newsletter, we use newsletter service providers, which are described below.

Rapidmail

This website uses Rapidmail for sending newsletters. The provider is rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany.

Rapidmail is a service that, among other things, can organize and analyze the sending of newsletters. The data you enter for the purpose of receiving the newsletter is stored on Rapidmail’s servers in Germany.

Data Analysis by Rapidmail

For analysis purposes, emails sent with Rapidmail contain a so-called “tracking pixel” that connects to Rapidmail’s servers when the email is opened. This way, it can be determined whether a newsletter message has been opened.

Furthermore, with the help of Rapidmail, we can determine whether and which links in the newsletter message are clicked. All links in the email are so-called tracking links, which can count your clicks. If you do not want analysis by Rapidmail, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message.

Further details on Rapidmail’s analysis functions can be found at the following link: https://de.rapidmail.wiki/kategorien/statistiken/.

Legal Basis

Data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. The legality of data processing operations already carried out remains unaffected by the revocation.

Retention Period

The data you have provided to us for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after unsubscribing. Data stored by us for other purposes remains unaffected by this.

After you unsubscribe from the newsletter distribution list, your email address may be stored by us or the newsletter service provider in a blacklist, if this is necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements for sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Storage in the blacklist is not time-limited. You can object to the storage if your interests outweigh our legitimate interest.

Further details can be found in Rapidmail’s data security notices at: https://www.rapidmail.de/datensicherheit.

Order processing

The agency Lust auf Besser Leben gGmbH, commissioned by us for the newsletter, has concluded a data processing agreement (DPA) for the use of the aforementioned service. This is a contract required by data protection law, which ensures that personal data of our website visitors is processed only according to our instructions and in compliance with the GDPR.