Privacy Policy

ifok GmbH takes the protection of your personal data very seriously. In order to make full use of our website, it is necessary to collect certain information when you visit our site. This privacy policy informs you about when we collect which data, how we use it, and what rights you have as a user of our online services.

I. Who is the controller according to the General Data Protection Regulation (GDPR)?

This website and its services are operated by the data processor:

olli design GmbH
Ludwig-Erhard-Straße 6
20459 Hamburg

on behalf of the Federal Ministry for the Environment, Nature Conservation, Nuclear Safety and Consumer Protection (BMUKN) and commissioned by ifok GmbH.

 

II. Contact details of the Data Protection Officers

Data Protection Officer of ifok GmbH

If you have any questions regarding the protection of your personal data, please contact ifok GmbH:

ifok GmbH
Berliner Ring 89
D-64625 Bensheim
Phone: +49 6251 8263-100
Email: info@ifok.de
Website: https://ifok.de/
 

Data Protection Officer of the BMUKN

Data Protection Officer at BMUKN
Federal Ministry for the Environment, Nature Conservation, Nuclear Safety and Consumer Protection (BMUKN)
Stresemannstraße 128-130
10117 Berlin
Phone: 030 18 305-0

 

III. What information do we collect and for what purpose?

1. Visiting the website

When you visit the website, the servers of DIALOG BOX temporarily store each access in a log file. These log files are accessible directly and exclusively to administrators for up to 24 hours. After that, they are only indirectly available through backup reconstruction and are permanently deleted after 7 days. The following data is collected automatically and stored until automated deletion, even if you are not a registered user:

  • Date and time of access
  • Name and URL of the accessed file
  • Website from which the access originated
  • Operating system and browser used
  • Name of your internet service provider
  • IP address

This data is processed to enable the use of the website (connection setup), ensure long-term system security and stability, manage the technical infrastructure, and optimize our online services. The IP address is collected temporarily as described above and is only analyzed in the event of attacks on the website’s network infrastructure.

2. Cookies

Cookies are small text files used to store information locally on your computer for a limited time and to transmit it back to the server upon request.

Most web browsers are set to accept cookies automatically. However, you can disable this function or configure your browser to delete cookies when it is closed. Cookie information is not combined with personal data.

Only technically necessary cookies are used on this website. The session cookies used do not contain personal data and are deleted after submitting forms or closing the browser.

There is no combination of this information with personal data.

Functions using cookies:

  • Use of session cookies (JSESSIONID):
    The platform uses session cookies (JSESSIONID) to identify you as a user without requiring a separate login. Navigation on the site is not possible without this cookie. Session cookies are temporary and are automatically deleted when you leave the website. These cookies are used solely to ensure the website functions properly. The information generated by the cookie is not shared with third parties.
  • Use of a session cookie (JSESSIONID) for the “stay logged in” function:
    The “stay logged in” function allows you to use the website without logging in each time. This session cookie (JSESSIONID) is optional and requires your consent. You should not use this function on shared computers. This feature is not available if your browser is set to delete cookies after each session.

3. Entering personal data when registering for an event

You can enter personal data on the website to register for events. When registering, your name (first and last) and email address are required. Optionally, you may provide: title, gender, address, and phone number.

Providing this data is voluntary. Only the data necessary for organizing the event is requested. We treat your data confidentially and use it only for the purposes for which it was collected.

If storing your personal data is necessary for the event, it will only be retained as long as required to fulfill the services or tasks of ifok GmbH for which the data was collected.

Once the event is completed, canceled, or your participation is withdrawn, your personal data will be permanently deleted within six weeks.

4. Participation in surveys

Participation in surveys is optionally possible as a guest. To prevent misuse (e.g., multiple submissions), we store your email address as part of a double opt-in process. Entering your email address does not create a user account on the platform. The email address is not stored in connection with your other responses.

5. Communication via contact form or email

If you send us a message via the contact form or directly by email, the data you provide will be used for correspondence with you.

Email communication may have security vulnerabilities. Emails can be intercepted and read by skilled internet users. If we receive an email from you, we assume we are authorized to respond via email. Otherwise, please consider using another form of communication, such as postal mail.

When you send emails via forms, the system also stores information about your browser version and operating system. IP addresses are not stored. This data is not processed and is only used to fix errors in individual cases. This information is automatically deleted after 28 days.

6. Sending of a Newsletter

You can subscribe to receive a project-related newsletter using your email address (legal basis: Art. 6(1)(a) GDPR). You may unsubscribe from the newsletter at any time using the unsubscribe function provided in each newsletter.

The newsletter is sent by ifok GmbH, Berliner Ring 89, 64625 Bensheim. ifok uses the tool CleverReach. ifok has concluded a data processing agreement with the provider.

7. Links to External Websites and Social Media

Our website contains links to external websites and social media platforms. Please note that these providers process user data according to their own privacy policies. ifok GmbH has no influence over whether these providers comply with data protection regulations.

 

IV. Social Plugins

This website does not use links to social networks that include embedded code from the respective external networks, known as “social plugins.” Instead, the website only contains simple links created by ifok GmbH. Therefore, no data is transmitted to external site operators while you are visiting our website.

 

V. How Do We Protect Children and Adolescents (Protection of Minors)?

Use of the website is permitted for individuals aged 16 and older. Use by minors requires the consent of a parent or legal guardian. In such cases, you confirm to ifok GmbH that you have obtained the consent of your legal guardian.

 

VI. On What Legal Basis Do We Collect Personal Data?

In general, you can use our website without providing personal information. If we collect personal data on this site, it is done solely with your freely given and revocable consent (e.g., when registering on the website to participate in dialogue offerings for the duration of the web service, based on Article 6(1)(a) GDPR). Please also refer to the terms of use. If you do not register, only the usage data transmitted by your browser that is technically necessary to display the website will be processed (legal basis: Art. 6(1)(e) GDPR).

In all other cases, we process personal data only if we are legally required to do so (according to Article 6(1)(c) GDPR), or if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in ifok GmbH (according to Article 6(1)(e) GDPR in conjunction with Section 3 of the Federal Data Protection Act – BDSG).

 

VII. What Rights Do You Have as a Data Subject?

As a user of the online services provided by ifok GmbH, you have the rights listed in Articles 12 to 22 of the GDPR regarding the processing of your personal data:

  • Right of Access (Art. 15 GDPR):
    You have the right to obtain comprehensive information about your personal data and other important aspects such as the purposes of processing and the duration of storage. Exceptions to this right are regulated in Section 34 BDSG.
  • Right to Rectification (Art. 16 GDPR):
    You have the right to request the correction of inaccurate personal data concerning you.
  • Right to Erasure (Art. 17 GDPR):
    You have the right to request the deletion of your data, provided it is no longer necessary, has been unlawfully processed, or you have withdrawn your consent. Exceptions are regulated in Section 35 BDSG.
  • Right to Restriction of Processing (Art. 18 GDPR):
    You have the right to temporarily restrict the processing of your personal data, especially during the review of other rights.
  • Right to Data Portability (Art. 20 GDPR):
    You have the right to receive your personal data in a commonly used, machine-readable format (e.g., PDF) and to transmit it to another controller if necessary.
  • Right to Object (Art. 21 GDPR):
    You have the right to object to the further processing of your personal data in a specific situation, provided the processing is based on public interest or legitimate interests. According to Section 36 BDSG, this right does not apply if a public authority is legally obligated to process the data.
  • Right to Withdraw Consent (Art. 7(3) GDPR):
    You have the right to withdraw your consent at any time with future effect. A corresponding option to withdraw consent is provided with each online service for which your consent was obtained.

 

VIII. To Whom Do We Disclose Data?

To provide our online services, we work with external service providers. If personal data must be processed in this context (e.g., for participation in dialogue offerings), we have implemented technical and organizational measures to ensure that these service providers also comply with data protection regulations.

This website is technically part of the DIALOG BOX client platform (hereinafter referred to as “DIALOG BOX”), which is operated by ifok GmbH, Ludwig-Erhard-Straße 6, 20459 Hamburg (hereinafter “ifok GmbH”). The website represents a DIALOG BOX client. Your master data (i.e., first name, last name, email address, password) will only be stored on the DIALOG BOX servers if you register on this website, and a central user account will be created for you. This requires your explicit consent. These master data are stored and processed by ifok GmbH as part of the user relationship (legal basis: Art. 6(1)(a) GDPR). ifok GmbH does not use your data for advertising purposes and does not share your data with third parties without your consent. Otherwise, ifok GmbH processes your personal data in compliance with applicable data protection laws.

If you additionally register on other DIALOG BOX clients operated by ifok GmbH (also referred to as “participation websites”) for the purpose of participating in online consultations, your master data will be transferred from your central user account to each additional DIALOG BOX client. This allows you to log in with a single set of credentials, as ifok GmbH processes these master data centrally.

All data processing and storage within the DIALOG BOX takes place exclusively in Germany. For operational processes, ifok GmbH is supported by its office at Ludwig-Erhard-Straße 6, 20459 Hamburg. The data center infrastructure is certified according to ISO 27001 based on IT baseline protection standards.

The implementation of the dialogue process, the evaluation of user-generated content, and the distribution of the project-related newsletter are carried out by ifok GmbH, Berliner Ring 89, 64625 Bensheim. Parts of the dialogue process and limited evaluation of user-generated content are supported by VDI Technologiezentrum GmbH, VDI-Platz 1, 40468 Düsseldorf, on behalf of the BMUKN. The evaluation supports the stakeholder consultation process for developing a National Circular Economy Strategy (NKWS).

 

Tracking with Matomo

We use Matomo (formerly Piwik) for statistical analysis of visitor activity on our website www.kreislaufwirtschaft-deutschland.de. Matomo is a privacy-friendly, open-source web analytics software.

We use Matomo in a particularly privacy-conscious configuration:

  • Tracking is performed without the use of cookies.
  • Visitors’ IP addresses are anonymized before storage by masking the last two bytes (e.g., 192.168.xxx.xxx).
  • No personal data is transmitted to third parties.

Thanks to these settings, we can use Matomo without requiring user consent or displaying a cookie banner. Data processing is based on our legitimate interest in statistical analysis of user behavior for optimization purposes, in accordance with Art. 6(1)(f) GDPR.

The data collected with Matomo is stored and processed exclusively on servers located in Germany. No data is shared with third parties.

If you do not agree to the anonymized tracking of your data by Matomo, you can opt out at any time by adjusting the setting in the paragraph below.