PRIVACY POLICY
Interact ESG GmbH, Luckenwalderstr. 6b 10963 Berlin (“we”, “us”, or “our”) operates the website available at [https://esghub.digital/] and the associated sub-pages (hereinafter also referred to as the “website”).
With this privacy policy, we would like to inform you about how we process personal data when you visit our website. We hereby also fulfil our obligation to inform you in accordance with Art. 13 and Art. 14 General Data Protection Regulation (GDPR).
I. Identity of the controller
The controller responsible for processing data on this website is:
Interact ESG GmbH
Luckenwalderstr. 6b
10963 Berlin
E‑Mail: support@esghub.digital
II. Purposes and legal bases as well as period for which the personal data will be stored
1. General use of the website
The website provider automatically collects information about the visits on our website. Therefore, when you visit our website, certain technical data are automatically transmitted to us. This includes the following information:
- Your IP address;
- the name of the files accessed;
- information about the transmission;
- date and time of the connection;
- the amount of data transmitted;
- the requesting provider;
- the referrer; and
- the web browser/user agent.
We process your IP address only to allow your device to establish a connection to our webserver over the Internet as well as to help us identify, diagnose and fix security problems (such as DoS attacks). This processing is based on Art. 6 par. 1 lit. f) GDPR.
In order to maintain system security, our web host also creates log files to ensure the security and integrity of our IT systems. However, these log files are anonymous and do not contain any personal data. In particular, your IP address will not be saved.
We store these log files for a period of 90 days and delete them after expiration of the retention period.
2. Contact form
We offer you the opportunity to contact us, for example via our above-mentioned e-mail address or by filling out our contact form. In these cases, you can send us your e-mail address and, if applicable, your name, a subject and the content of the message. The processing is based on our legitimate interest to respond to your request (Art. 6 para. 1 lit. f) GDPR).
We store your e-mail requests for a period of 12 months and delete them after expiration of the retention period.
a. MAILCHIMP
This website uses the services of MailChimp to send newsletters. This service is provided by Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.
MailChimp is a service which organizes and analyzes the distribution of newsletters. If you provide data (e.g. your email address) to subscribe to our newsletter, it will be stored on MailChimp servers in the USA.
MailChimp is certified under the EU-US Privacy Shield. The Privacy Shield is an agreement between the European Union (EU) and the US to ensure compliance with European privacy standards in the United States.
We use MailChimp to analyze our newsletter campaigns. When you open an email sent by MailChimp, a file included in the email (called a web beacon) connects to MailChimp’s servers in the United States. This allows us to determine if a newsletter message has been opened and which links you click on. In addition, technical information is collected (e.g. time of retrieval, IP address, browser type, and operating system). This information cannot be assigned to a specific recipient. It is used exclusively for the statistical analysis of our newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to your interests.
If you do not want your usage of the newsletter to be analyzed by MailChimp, you will have to unsubscribe from the newsletter. For this purpose, we provide a link in every newsletter we send. You can also unsubscribe from the newsletter directly on the website.
Data processing is based on Art. 6 (1) (a) DSGVO. You may revoke your consent at any time by unsubscribing to the newsletter. The data processed before we receive your request may still be legally processed.
The data provided when registering for the newsletter will be used to distribute the newsletter until you cancel your subscription when said data will be deleted from our servers and those of MailChimp. Data we have stored for other purposes (e.g. email addresses for the members area) remains unaffected.
For details, see the MailChimp privacy policy at https://mailchimp.com/legal/terms/.
III. Recipients of the data
In case we are not able to provide services ourselves, we use external service providers. These service providers are primarily providers of IT services, such as our web host, e-mail provider or telecommunications provider.
If not specifically mentioned elsewhere in this privacy policy, we do not transfer your data to third countries.
IV. Your rights as a data subject
If the respective requirements are met, the GDPR grants you certain rights as a data subject.
– Art. 15 GDPR – Right of access: You shall have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and certain information.
– Art. 16 GDPR – Right to rectification: You shall have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
– Art. 17 GDPR – Right to erasure: You shall have the right to obtain from us the erasure of personal data concerning you without undue delay.
– Art. 18 GDPR – Right to restriction of processing: You shall have the right to obtain from us the restriction of processing.
– Art. 20 GDPR – Right to data portability: You shall have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you shall have the right to transmit those data to another controller without hindrance from us. You shall also have the right to have the personal data transmitted directly from us to another controller, where technically feasible.
– Art. 21 GDPR – Right to object: You shall have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, which is based on legitimate interests or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
In such case, we shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedoms or where the processing is necessary for the establishment, exercise or defence of legal claims.
– Art. 77 GDPR – Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
V. Your obligation to provide us with personal data
You have no statutory or contractual obligation to provide us with any personal data. However, we may not be able to provide you with our services if you decide not to do so.
VI. Existence of automated decision-making, including profiling
We do not use automated decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you.
VII. Internet specific processing or use of personal data
1. Cookies
For providing you the services of the website, we may use cookies. Cookies are small text files, which are transferred from the website and stored on your device. Cookies cannot execute programs or infect your device with computer viruses.
If you wish to prevent us from storing cookies on your device, your web browser or device may provide you with certain settings to do so. You may find an instruction on how to change your settings in the help section of your browser or device. The respective settings only apply to the device you are currently using. If you use another device, change your web browser or reinstall your browser you may have to change the respective settings again. Please, be aware that not accepting cookies may lead to you not being able to fully use the website.
2. Facebook pixel
We use the “Facebook pixel” of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”).
By displaying this pixel as well as by storing cookies by Facebook or third parties in your browser, Facebook can then recognize whether a Facebook Ad was successful, e.g. whether it led to an online purchase. We only receive statistical data from Facebook without reference to a specific person. This enables us to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes. In addition, the data collected by the pixel are used in certain situations to play out target-group-specific advertising. In particular, if you are logged into you Facebook account, we refer you to their data protection information https://www.facebook.com/about/privacy/.
The legal basis for the processing is Art. 6 para. 1 lit. f) GDPR. Our purpose to evaluate the effectiveness of Facebook advertisements constitutes our legitimate interest.
If you wish to prevent the use of pixel data for target-group-specific advertising, you can do so by making the necessary settings at https://www.facebook.com/ads/settings.
Alternatively, you can disable the Facebook pixel on the Digital Advertising Alliance page at http://www.aboutads.info/choices/.
The cookies have a functional duration of 12 months and will be deleted after expiration of this period.
3. Facebook “Custom Audiences from your website”
We use the feature “Custom Audiences from your website” of the social network Facebook of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”) within our website.
This feature allows Facebook to recognize that you have visited our website and display targeted advertisements to you. As mentioned above, the Facebook pixel is integrated on our pages. When you visit our pages, the pixel-code establishes a direct connection between your browser and the Facebook server. In addition to certain technical data, Facebook also receives information that our page has been accessed by your terminal device. If you are a Facebook user, Facebook can assign the visit to our pages to your user account. Please note that Facebook may be able to identify you across multiple websites. As the site provider, we have no knowledge of the content of the data transmitted and how the data are used by Facebook, so Facebook is responsible for the processing of your data. We can only choose to which segments of Facebook users (such as age, interests) our advertising should be displayed. In doing so, we use one of several Custom Audiences working methods in which, apart from the data collected by the pixel, no data records, in particular no e-mail addresses of our users – neither encrypted nor unencrypted – are transmitted to Facebook. You can find further information about data processing by Facebook in Facebook’s privacy policy at https://www.facebook.com/about/privacy/.
Please click here if you do not want to receive target-group-specific advertising via custom audiences: https://www.facebook.com/ads/settings. Alternatively, you can deactivate the Facebook Pixel on the Digital Advertising Alliance website at http://www.aboutads.info/choices/
The legal basis for the use of this service is Art. 6 para. 1 lit. f) GDPR. Our purpose to evaluate the effectiveness of Facebook advertisements constitutes our legitimate interest.
4. General opt-out regarding “Facebook Pixel” and Facebook “Custom Audiences from your website”
You can also prevent Facebook from processing the data described above as part of “Facebook Pixel” and Facebook “Custom Audiences from your website” by clicking on the following link:
https://www.facebook.com/full_data_use_policy
This causes a corresponding opt-out to set a cookie in your browser. Please note that this cookie is browser-related, so if you use more than one device and/or browser, you must also click the opt-out link there to set the cookie.
5. LinkedIn pixel
We use the “LinkedIn pixel” of LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland.
By displaying this pixel as well as by storing cookies by LinkedIn or third parties in your browser, LinkedIn can then recognize whether a LinkedIn Ad was successful, e.g., whether it led to an online purchase. We only receive statistical data from LinkedIn without reference to a specific person. This enables us to evaluate the effectiveness of LinkedIn advertisements for statistical and market research purposes. In addition, the data collected by the pixel are used in certain situations to play out target-group-specific advertising. In particular, if you are logged into you LinkedIn account, we refer you to their data protection information https://www.linkedin.com/legal/privacy-policy/.
The legal basis for the processing is Art. 6 para. 1 lit. f) GDPR. Our purpose to evaluate the effectiveness of Facebook advertisements constitutes our legitimate interest.
Alternatively, you can disable the LinkedIn pixel on the Digital Advertising Alliance page at http://www.aboutads.info/choices/.
The cookies have a functional duration of 12 months and will be deleted after expiration of this period.
6. Google Analytics
GOOGLE ANALYTICS
This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
Google Analytics cookies are stored based on Art. 6 (1) (f) GDPR – DSGVO. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.
IP anonymization
We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
Browser plugin
You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objecting to the collection of data
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics.
For more information about how Google Analytics handles user data, see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.
- Hotjar
This Website uses the Hotjar tracking of Hotjar Limited (Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta) (“Hotjar”).
This service primarily uses cookies to evaluate your use of the Website using pseudonyms, to compile reports on Website activity. Your IP address will be anonymized immediately during this process. Also, the usage data are not assignable neither for us nor for Hotjar.
You can prevent the collection of your data by Hotjar by clicking on the following link: https://www.hotjar.com/legal/compliance/opt-out.
For more information about Hotjar’s use of cookies and Hotjar’s Privacy Statement, see the information at https://www.hotjar.com/privacy
VIII. Changes to this privacy policy
We may modify this privacy policy from time to time. We will notify you of changes by posting changes here, or by other appropriate means.
Berlin, November 2019