Data privacy

1. Introduction

It is the policy of the German Association of the Tobacco Industry and New Products (BVTE), with its registered office at Unter den Linden 42, 10117 Berlin, to take the protection of your personal data seriously and wish for visitors to their website to feel safe. As the controller of this website, as defined by the European General Data Protection Regulation (GDPR) and Germany’s Federal Data Protection Act (BDSG), we process the user’s personal data in accordance with the relevant data protection regulations. The following privacy notice applies solely to the website www.bvte.de. This may contain links to websites operated by other providers not covered by this privacy notice. The BVTE is not responsible for the content on these sites nor for the handling of personal data by the respective operators.

2. Data types and purposes

Personal data (e.g. email address, first and last name, the user’s IP address) is only processed when the user voluntarily agrees to this or when this is needed for certain services such as running this website. By submitting the contact form on the website, the user is consenting to the processing of this personal data. The purpose of which is for direct correspondence between us and the user.

3. Confidentiality of the user’s personal data

The BVTE guarantees the confidentiality of your personal data by ensuring that its employees observe their confidentiality obligations and that its safety measures correspond with the current state of technology.

4. Transferring user data to third parties

Third parties (so-called processors) used by us may receive personal user data. The user data is only transferred to vicarious agents and service providers (e.g. IT service providers that administer and host our website) commissioned by us that operate our online offer in our name or when this is necessary for carrying out the service in question, provided the required data falls into the scope of the communication purpose described in Section 2. Third-party processing of user data is carried out only on our behalf and on our instructions (commissioned data processing). Transferring data to locations outside the EU shall in principle not take place. Furthermore, we ensure that the personal data of the user is not transferred to third parties unless we are legally bound to do so or we have asked and received the user’s approval in advance.

5. Data transferred by browser/internet technology

Each visit to our website is logged. The data recorded comprises the current IP address used by the user’s PC, the date and time, the browser type, the PC’s operating system and the page accessed by the user. Personal identification is not possible. The data is analysed in an anonymised way for statistical purposes. No personal user profile or similar is created or processed (no automated decision-making including profiling).

6. Cookies

Cookies are small text files that are stored on the internet user’s PC. Their purpose is, for instance, to manage the connection to the website during your visit. Cookies cannot infiltrate and cause damage to the user’s system. The BVTE uses cookies on this website to offer safe, personalised functions to users.
Browser configuration options are available to you to inform you of cookies being used, to allow them on an individual basis, to allow them for specific cases, to block them in general, or to delete them automatically when closing the browser. Deactivating cookies may limit the functionality of this website.

7. The use of Google Analytics

We use Google Analytics and thereby cookies for the purpose of statistically analysing the use of our website and the surfing behaviour of users. In doing so, we can improve the quality of our website and its content. We are able to discover how the site is being used and can therefore continually optimise our offer.
The information generated by the cookie concerning your use of our website will in general be transferred to a Google server in the USA and stored there. In cases of IP anonymisation being activated on our website, your IP address will firstly be truncated within EU member states or in other states party to the agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On our behalf, Google will use this information to evaluate the use of the website, to compile reports on the website activity and generate additional services relating to website and internet use for the website operator. The IP address transmitted by you browser will not be combined with other data from Google within the scope of Google Analytics.
This website uses the Google Analytics extension ‘_anonymizeIp()’ which processes IP addresses in truncated form and therefore rules out any individual identification of the user.
By adjusting the browser software settings accordingly, you can prevent cookies from being used. We shall like to point out, however, that this will prevent you from fully using all of our website’s functions.
The cookie-generated data about how you use our website (including your IP address) can be prevented from being captured, being forwarded to Google and being processed by Google by downloading and installing the browser plugin in the following link: http://tools.google.com/dlpage/gaoptout?hl=de
Further information on the terms of use and the privacy policy of Google Analytics can be found at http://www.google.com/analytics/terms/de.html and https://www.google.de/intl/de/policies/
As an alternative to the browser add-on or regarding browsers on mobile devices, click on this link to prevent Google Analytics recording any future data from this website (the opt-out only works in this browser and only on this domain). In doing so, an opt-out cookie will be stored on your device. If you delete your cookies in this browser, you will have to click the link again.

8. The use of Matomo (formerly Piwik)

This website uses the open-source web analysis service Matomo. Matomo uses cookies which are text files that are stored on your computer and allow analysis to take place on how you use the website. Information generated by the cookie on using this website is stored on our server in the process. The IP address is anonymised before being stored. Matomo cookies remain on your end device until you delete them. The information generated by the cookie about the use of this website is not passed on to third parties. You can prevent the cookie being stored by adjusting your browser settings accordingly. We shall like to point out, however, that this will prevent you from fully using all of our website’s functions.
You have the option to prevent your actions on this website from being analysed and linked. This will protect your privacy but will also prevent the website owner from learning from your actions and improving the usability for you and other users.

9. Legal basis and duration of the data storage

We process your personal data to safeguard our legitimate interests pursuant to Article 6 (1) lit. f of the GDPR. Our legitimate interest is in the technically safe operation of a user-friendly and needs-based website and in the proper response to contact inquiries via the website.
When using our website purely for information purposes, we store your personal data on our servers for the duration of your visit to our website. Once you have left our website, your personal data will be deleted without delay. Server log files will however be stored for the duration of one month.
The cookies we install will usually also be deleted once you have left our website. This however does not apply for cookies installed by the web analysis tools Google Analytics and Matomo (formerly Piwik). These will be stored for up to two years on your device. You have the option to delete installed cookies yourself at any time.
Regarding contact enquiries, we will store your personal data for answering your enquiry up until the start of the limitation period of possible legal claims at the latest; the regular limitation period in accordance with the German Civil Code is three years. We will delete your personal date by the start of the limitation period unless there is a legal obligation to retain it.

10. Rights of the user

The BVTE facilitates affected persons to exercise their rights pursuant to Articles 15 to 22 of the GDPR. These include the right to information on all personal data concerning them as well as the right for inaccurate data to be corrected, deleted or erased. It also includes restricting data or objecting to data being processed. Affected persons have the right due to reasons that have arisen from their own particular situation to object at any time to the data of the affected person being processed on the grounds of Article 6 (1) lit. e or f of the GDPR. You may withdraw your given consent for your data being processed at any time. An informal note per email is sufficient for this purpose. By withdrawing your consent, the lawfulness of the processing from the time of consent until the withdrawal shall not be affected. Moreover, affected persons may lodge a complaint to the responsible data protection authorities in the case of a violation of data protection requirements. We however recommend that you firstly contact the BVTE (datenschutz@bvte.de).

11. Updating the data protection regulations.

In the event of a change in the law or the BVTE changing its internet procedures on the website www.bvte.de, or when there are new developments to the internet and IT security technologies, this privacy notice must be updated where appropriate. We therefore reserve the right to change or supplement our privacy notice as required. Changes will be published here. The current version is as per 02.09.2019.

12. Further questions

Every affected person may contact us at any time with further questions. Please send an email to datenschutz@bvte.de.
Controller for the purposes of Art. 24 GDPR:
Bundesverband der Tabakwirtschaft und neuartiger Erzeugnisse (BVTE)
Unter den Linden 42
10117 Berlin
Telephone: +49 30 8145936-50
datenschutz@bvte.de