Data Protection

    Data Protection Information for rsci.online

    1. Contact details

    Body responsible for the data processing:

    Responsible Supply Chain Initiative e.V. (RSCI)
    Behrenstr. 35
    10117 Berlin

    Tel.: +49 30 897842-0
    Fax: +49 30 897842-600
    E-Mail: [email protected]

    Questions concerning your data privacy rights and other issues concerning personal data (section 6) can be posed to [email protected].

    2. Sources and data we use

    We only process personal data that is required for the purpose of the processing (cf. No. 3). This is data we have received from you directly (e.g. master data you have entered into a contact form), contact details of representatives at RSCI provided to us by business partners and which we have lawfully obtained from publicly accessible sources (e.g. internet, media, press etc.), which may be processed.

    3. Purpose for which we process your data (purpose of processing) and legal basis

    We process the above-mentioned personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The RSCI promotes sustainability in global supply chains within the automotive industry by offering a common assessment standard and collaboration opportunities for its members.

    a) Website
    RSCI would like to represent the interests through, among other things, a flawlessly functioning website and an optimized presentation of its services on the website. This constitutes a legitimate interest in the sense of Art. 6 (1) lit. f) EU General Data Protection Regulation for the data processing mentioned below (insofar as it involves the processing of personal data by RSCI in the first place).

    Server log files
    All access to our website and every retrieval of a file deposited there is recorded in a protocol. Storage serves internal, system-related and statistical purposes.

    Protocols record: the name of the file retrieved, the date and time of retrieval, the quantity of data transferred, notification of successful retrieval, web browser and domain placing the request. The IP addresses of computers placing requests are also recorded in a protocol. This data is also logged and stored in our system as so-called log files.

    Cookies
    The website sometimes uses so-called cookies. They enhance the user-friendliness, effectivity, and security of internet websites. Cookies are tiny text files stored locally in the cache of the internet browser of the visitor to the website. Cookies enable the internet browser to be recognized. You can prevent cookies through a corresponding setting in your browser. If you choose this option, you might not be able to use all interactive features of our website or all our services.

    We use the following cookies on our website:

    • Technically necessary cookies
      We use cookies that are technically necessary to make our website usable for you. In particular, they ensure basic functions such as page navigation and access to various areas of the website. The information necessary to provide the website is stored locally on your device. Providing a functioning website is in our legitimate interest. These cookies are absolutely necessary for the purposes mentioned within the meaning of Section 25 (2) No. 2 TTDSG. The legal basis for this processing is Art. 6 (1) lit. f) of GDPR.
    • Analysis tools – Matomo
      This website uses the open source web analytics service Matomo. Matomo enables us to evaluate your website usage in a privacy-friendly way in order to measure the success of our offers, to improve our offers and to make the content more interesting. For this purpose, Matomo does not set cookies on your end device. Instead, so-called fingerprinting is used, which records website usage with the help of automatically transmitted data (e.g. IP address, screen resolution, page URL) in combination with user browser settings. The IP address is pseudonymised directly. Due to these requirements, visits and individual page views can be recorded, but it is not possible to draw conclusions about the identity of individual users. If you wish to generally prevent the recording of your page visits, you have the option of activating the "Do Not Track" function in your browser. This measure is effective for all pages you visit that belong to the domain "rsci.online". The legal basis for the data processing is Art. 6 (1) lit. f) EU General Data Protection Regulation. Since only information that has already been automatically transmitted is used for the evaluation and no additional information is stored or read on terminal equipment, our use of Matomo does not fall under Section 25 (1) TTDSG.

    For this website, the collection of your page visits can also be prevented by the following opt-out option. Please note that when you activate this option, a cookie is stored on your system:

    You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy but will also prevent the owner from learning from your actions and creating a better experience for you and other users.

    [ ] You are not opted out. Uncheck this box to opt-out.

    Socal Media - "Share Page" function
    Our website enables the social media functions: Share or recommend page on the following social media platforms: Facebook, Google+, X. Our website enables users of social media platforms to share the RSCI website with others on these social media networks by incorporating links that are designated by corresponding symbols. By clicking on the relevant links, you will leave the RSCI website and access the website of the relevant social media platform. An exchange of data with the above-mentioned social media operators only takes place if the relevant symbol button is clicked. If you click such a symbol button, a page of the relevant social media operator will appear in a pop-up window. We would like to point out that data transmission between the user and the provider of the social media platform can take place simply by clicking the symbol button, and definitely after logging in to a social media platform. We are not aware and cannot influence what data is transmitted to the relevant provider in an individual case where the social plug-ins are activated, or the purpose for which the data is used there.

    Plug-ins and tools - YouTube
    Our website uses plug-ins from the YouTube site operated by Google. The website is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our webpages equipped with a YouTube plug-in, a connection to the YouTube servers will be established. In the course of this, the YouTube server receives information about which of our webpages you have visited. If you are logged in to your YouTube account, you enable YouTube to attribute your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used by us in the interest of an appealing presentation of our online products. This constitutes a legitimate interest in the sense of Art. 6 (1) lit. f) EU General Data Protection Regulation. Further information on the handling of user data can be found in the data privacy policy of YouTube at: https://www.google.de/intl/de/policies/privacy.

    b) Services on the website: In order to promote the interests of the automotive industry, RSCI offers various services to all interested parties on its website:

    • Organization of professional and information events: RSCI organizes professional and information events on topics of the automotive industry for professional and political discussions, for which you can register. To this end you have to complete a contact form with the data required for organization of the event. The data is processed in order to satisfy contractual obligations (Art. 6 (1) lit. b) EU General Data Protection Regulation). Should film recordings and/or photos be made at these events, with your participation you declare your consent to the making, processing and use of such images, video and sound recordings for documentation purposes and within the context of the PR work of RSCI. Your data is stored until revocation is declared to us by you. Should you not agree with this, please contact [email protected].
    • Ordering information material on topics concerning the automotive industry (e.g. publications, recommendations, teaching materials, training information). To this end you have to complete a contact form with the data required. The data is processed in order to satisfy contractual obligations (Art. 6 (1) lit. b) EU General Data Protection Regulation).
    • Operational activities: RSCI maintains business contacts for the purpose of operating (e.g. suppliers, catering). This includes the communication with and information provided to such business partners of RSCI. The data of such partners is processed for the satisfaction of contractual obligations (Art. 6 (1) lit. b) EU General Data Protection Regulation).

    c) Committee work, Association policy and public relations:

    • RSCI organizes its work and other matters through committees on various themes concerning the automotive industry and related industries. Committees are composed of member representatives whose data is processed for that purpose on the basis of performance of a contract in accordance with Art. 6 (1) lit. b) EU General Data Protection Regulation. To this end, and on the same legal basis, information on automotive themes is communicated and transmitted to member representatives (e.g. newsletter).
    • RSCI undertakes public relations work for the political and societal debate. The relevant data-processing takes place within the context of a balancing of interests (Art. 6 (1) lit. f) EU General Data Protection Regulation). To this end RSCI sends information to spokespersons, journalists and media representatives (e.g. invitations to press events). PR work also includes the dispatch of information materials on RSCI issues to other interested parties and interest groups from the automotive industry, with which RSCI maintains contact owing to the representation of interests of the automotive industry and related industries. Invitations to professional events of RSCI on automotive themes serve the same purpose.

    Contact form: RSCI offers a direct contact option. To this end you have to complete a contact form with the data required for communication purposes. The data entered on the form shall be processed by RSCI solely for the purpose of direct communication with you and on the basis of your consent (Art. 6 (1) lit. a) EU General Data Protection Regulation). The data you enter on the contact form shall remain with us until you ask us to delete it, revoke your consent to storage or until the purpose of data storage no longer exists (e.g. after processing of your query has been completed). Mandatory statutory provisions - especially retention periods - shall remain unaffected.

    4. Who receives my data?

    Access to your data within RSCI is restricted to those persons/bodies who require access in order to satisfy the purpose of the processing. In some cases, RSCI deploys service providers who receive data for that purpose. We only deploy service providers if they comply with our written directives on data privacy and the requirements of the EU General Data Protection Regulation.

    a. Internal recipients
    Within the RCSI, only those departments and employees working there who absolutely require such access to perform their functions or tasks have access to your personal data.

    b. External recipients
    We will only pass on your personal data to external recipients if this is necessary to fulfil the purposes mentioned above, if there is another legal permission or obligation or if we have your consent to do so. External recipients may be:

    • Contractual Data Processors
      External service providers that we use to provide services. We carefully select the processors and regularly check them to ensure that the legal requirements of data protection law are also complied with by these service providers. The service providers may only use the data provided by us for the purposes specified by us.
    • Public bodies
      Authorities and government institutions, such as tax authorities, to whom we must transmit personal data for legally compelling reasons.
    • Other bodies
      Other bodies may also be granted access to your personal data in accordance with data protection requirements. In this respect, the confidentiality required by law is guaranteed.

    5. Transfer to third countries

    If we transfer your data to recipients in third countries outside the EU or EEA, we ensure that either an adequacy decision is in place for the third country in question, the transfer is permitted due to legal exceptions (e.g. your express consent), or appropriate safeguards are in place to ensure an adequate level of data protection. You can contact us using the contact details above to receive a copy of the relevant appropriate safeguards.

    6. How long will my data be stored?

    Length of time for which your data will be stored depends on the purpose of the data processing. Hence we only store your data for as long as it is necessary for the purposes of the processing.

    If the data is no longer required in order to satisfy the purpose, it will as a rule be erased unless further processing is necessary in order to comply with retention obligations under commercial or tax law, or in order to preserve evidence within the context of the statute of limitation.

    7. Your data privacy rights

    Information, rectification, erasure, restriction of processing, right to object, data portability, complaint

    According to Art. 15 EU General Data Protection Regulation, you are entitled to obtain information at any time and free of charge about the origin, recipient and purpose of processing of the personal data concerning you. In addition, you have a right of rectification under Art. 16, a right of erasure under Art. 17, a right to restrict the processing under Art. 18, processing under Art. 21 and a right to data portability under Art. 20 of the EU General Data Protection Regulation. In certain cases, you may request that your personal data be deleted. The limitations under Sec. 34 and Sec. 35 of the German Federal Data Protection Act (BDSG) apply to the rights to information and erasure. You can pose questions at any time about both your data privacy rights and other issues concerning personal data, to [email protected]. Further contact details of the data controller and the data privacy officer can be found in section 1. In case of breaches of data privacy you are entitled to submit a complaint pursuant to Art. 77 EU General Data Protection Regulation in conjunction with Sec. 19 German Federal Data Protection Act (BDSG) to the competent data privacy supervisory body.

    Revocation
    The consent you grant us for processing of your data can be revoked by you at any time by sending us an informal e-mail message to [email protected]. The revocation only applies for the future. The processing of your data on the basis of your consent up to the date of revocation remains lawful.

    _________________________________________________________________

    Right to object under Art. 21 EU General Data Protection Regulation

    You are entitled to object to the processing of your personal data for advertising purposes - including profiling relating to direct marketing - at any time without stating any grounds.

    You also have a general right to object (cf. Art. 21 (1) EU General Data Protection Regulation). In that case the grounds for objecting to the data processing have to be stated.

    _________________________________________________________________