Privacy Statement

Data Privacy Information

I. Name and address of the controller

The controller in the sense of the General Data Protection Regulation and other national data protection laws of the Member States as well as other provisions pertaining to data privacy and protection laws is:

Canadian German Chamber of Industry and Commerce Inc.
480 University Ave, Suite 1500
Toronto, ON M5G 1V2
Canada
Tel: +1 (416) 598 - 3355

E-Mail: info(at)germanchamber.ca

Website: http://kanada.ahk.de/

II. Name and address of the representative in the EU

Deutsche Industrie- und Handelskammer (DIHK)

Breite Straße 29
10178 Berlin
Germany
Tel.: +49 (0)30 20308-0
Fax: +49 (0)30 20308-1000

E-Mail: info(at)dihk.de

Website: www.dihk.de

III. General information regarding data processing

1. Scope of processing of personal data

In principle, we collect and use personal data of our users only to the extent it is required to provide a functioning website as well as for our content and services. The processing of personal data of our users regularly takes place with users consent. An exception applies in cases where it is not possible to obtain prior consent for factual reasons and where the processing of the data is permitted on the basis of statutory provisions.

2. Legal basis for the processing of personal data

To the extent that we obtain consent from the data subject for the processing of personal data, Section 6 Subsection 1 lit. a EU General Data Protection Regulation (GDPR) serves as legal basis for the processing of personal data. For the processing of personal data required to execute a contract whose contractual party is the data subject, Section 6 Subsection 1 lit. b GDPR serves as legal basis. This also applies to processing that is required for the execution of pre-contractually measures. If such processing is required to maintain a legitimate interest of our company or a third party, and if the interests, basic rights and fundamental freedoms of the data subject do not outweigh the former interest, Section 6 Subsection 1 lit. f GDPR serves as legal basis for such processing.

3. Data deletion and duration of storage

Personal data of the data subject will be deleted or blocked as soon as the purpose for storing such data no longer applies. Storage beyond such a period can be effected if such storage is prescribed by the European or national legislative body in provisions pertaining to European Union law or other provisions the data subject is subject to. Blocking or deletion of data is also effected if a storage period expires that is prescribed by the cited standards, unless there is a requirement for further storage of such data to enter into a contract or to execute a contract.

IV. Provisioning of website and creation of logfiles

1. Description and scope of data processing

Any time our web page is visited, our system collects data and information in an automated fashion from the computer system of the accessing computer. The following data is collected in the process:

(1) Information regarding the browser type and the version used

(2) The operating system of the user

(3) The internet service provider of the user

(4) The IP address of the user

(5) Date and time of access

(6) Websites that are accessed by the system of the user via our website

2. Legal basis for the processing of data

Legal basis for the temporary storage of data and the logfiles is Section 6 Subsection 1 lit. f GDPR.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to facilitate delivery of the website to the computer of the user. To do so, the IP address of the user must remain stored for the duration of the session. Storing of logfiles is effected to ensure the functionality of the website. In addition, such data helps us to optimize the website and to ensure the security of our information technology systems. An analysis of such data for marketing purposes will not be carried out in this context.

4. Duration of storage

Data is deleted as soon as it is no longer required to fulfill the purpose of its collection. In the event of collection of data for the provisioning of the website this is the case whenever the respective session ends. In the event of storing of data in logfiles this is after seven days the case at the latest. Storage to exceed such a period is not possible. In such a case, the IP addresses of the users are deleted or redacted so that an allocation of the accessing client is no longer possible.

5. Option for objection and removal

Collection of data for the provisioning of the website and storing of data in logfiles is required for the operation of the web page. Consequently, the user has no possibility to object.

V. Use of cookies

a) Description and scope of data processing

We use cookies to make our website more user-friendly. Some elements of our web page require that the accessing browser can also be identified when the user moves from one page to the next. No personal data is collected in the process.

To do so, the following files are stored and transmitted in the cookies:

(1) fonts = standard cookie variable used by us to reload the fonts in the browser after a page refresh.

(2) fullcss = standard cookie variable used by us to reload the CSS file in the browser after a page refresh.

Maximum cookie lifetime: 730 days

In addition, we use on our website cookies that enable an analysis of the surfing behavior of users.

When visiting our website, the users are informed via web banner about the use of cookies for analytical purposes and referred to this data privacy statement. In this context, it is also pointed out how the storing of cookies can be disabled in the browser settings. This service is provided via the Consent Manager of the Piwik PRO Analytics Suite.

Analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our offer.

We use cookies of the Piwik PRO Analytics:

_pk_id = Used to recognize visitors and hold their various properties. Expires after: 13 months if user consents; expires after 30 minutes if user does not consent

_ppms_privacy = Stores visitor’s consent to data collection and usage. Expires after: 365 days

_pk_ses = Shows an active session of the visitor. Expires after: 30 minutes

b) Legal basis for the processing of data

Legal basis for the processing of personal data while using technically required cookies is Section 6 Subsection 1 lit. f GDPR.

Legal basis for the processing of personal data while using cookies for analytical purposes is Section 6 Subsection 1 lit. a GDPR if the respective consent of the user is on hand.

c) Purpose of data processing

The purpose of using technically required cookies is the simplification of use of websites for the users. Some functions of our web page cannot be provided without the use of cookies. For such it is necessary that the browser is also recognized when the user moves from one page to the next.

We need cookies for the following applications:

(1) fonts = standard cookie variable used by us to reload the fonts in the browser after a page refresh.

(2) fullcss = standard cookie variable used by us to reload the CSS file in the browser after a page refresh.

Maximum cookie lifetime: 730 days

User data collected via technically required cookies is not used to create user profiles.

The use of analytical cookies also serves to improve the quality of our website and its content. From analytical cookies we gain knowledge of how the website is used; we are then able to constantly optimize our services.

We use cookies of the Piwik PRO Analytics:

_pk_id = Used to recognize visitors and hold their various properties. Expires after: 13 months if user consents; expires after 30 minutes if user does not consent

_ppms_privacy = Stores visitor’s consent to data collection and usage. Expires after: 365 days

_pk_ses = Shows an active session of the visitor. Expires after: 30 minutes

d) Duration of storage, option for objection and removal

Cookies are stored on the computer of the user and transmitted from such to our website. This is why you as the user have full control of the use of cookies. By changing your browser’s settings, you may disable or limit the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done in an automated fashion. If cookies are disabled for our website, it is possible that not all functions of the website may be used to the full extent.

VI. Newsletter

1. Description and scope of data processing

On our web page, there is the option to subscribe to a free newsletter. During the registration for the newsletter, data from the input mask is transmitted to the service provider commissioned by us for email marketing software provider CoreSend.

The following data is collected:

Title
First name(s)
Last name
Email address

Furthermore, the following data is collected upon registration:

Date and time of registration

For the processing of data, in line with the registration process, we obtain your consent and refer to this data privacy statement. In connection with the processing of data for the sending of newsletters, with the exception of the provider of email marketing software, data is not forwarded to third parties. Such data is only used for the newsletter to be sent to you.

2. Legal basis for the processing of data

Legal basis for the processing of data after registration for the newsletter by the user is Section 6 Subsection 1 lit. a GDPR if the consent of the user is on hand.

To the extent this pertains to the sending of a newsletter in line with membership to registered data of our database, legal basis is Section 6 Subsection 1 lit. b GDPR.

3. Purpose of data processing

Collection of the email address of the user is done to deliver the newsletter.

More information can be found in our information requirements:

Information requirements for newsletter

4. Duration of storage

Data is deleted as soon as it is no longer required to fulfill the purpose of its collection. The email address of the user is therefore stored for as long as the newsletter subscription is active.

5. Newsletter-Tracking

To optimize our newsletter offer, we use personalized newsletter tracking. In this context, besides the email address, we also collect activities connected to the newsletters (click behavior).

6. Option for objection and removal

A newsletter subscription may be cancelled by the respective user at any time. A special link is provided in every newsletter for this purpose. Alternatively, you may also send an email to mengdi.wang@germanchamber.ca.

VII. Registration (Membership Application, Event Registration)

1. Description and scope of data processing

On our web page we give our users the option to register while providing personal data. In the process, data is entered into an input mask, transmitted to us and stored. Forwarding of such data to third parties is not effected. At the time of registration, the following data is collected:

a. Membership Application

Company
Address
City
Zip code
Phone number
Fax number
Email
Website
Sector
Company profile
Number of employees
Contact person/representative contact person (Position/title, email, phone number, cellphone number)

b. Event Registration

Name
Email
Position/title
Company

At the time of registration, also the following data is stored:

Date and time of registration
Used browser
Operating system

In line with the registration process, consent is obtained from the user for processing of such data.

2. Legal basis for the processing of data

Legal basis for the processing of data is Section 6 Subsection 1 lit. a GDPR if the consent of the user is on hand. If the registration serves the execution of a contract whose contractual party is the user, or the execution of pre-contractual measures, the additional legal basis for the processing of data is Section 6 Subsection 1 lit. b GDPR.

3. Purpose of data processing

A registration of the user is required for the execution of a contract with the user, or for the execution of pre-contractual measures. Your registration may be an application for membership or an event registration.

More information can be found in our information requirements:

Information requirements for membership applications

Information requirements for events registration

4. Duration of storage

Data is deleted as soon as it is no longer required to fulfill the purpose of its collection. This is the case for data collected during the registration process for the execution of a contract or for the execution of pre-contractual measures if such data is no longer required for the execution of the contract. Even after having entered into a contract, the requirement to store personal data of the contractual partner may remain in existence to fulfill contractual or statutory requirements.

5. Option for objection and removal

As user, you have at any time the option to cancel the registration. Your stored personal data can be amended at any time. To amend or delete your data, please contact mengdi.wang(at)germanchamber.ca.

If the data is required for the execution of a contract or the execution of pre-contractual measures, a premature deletion of such data is only possible to the extent that contractual or statutory requirements do not preclude deletion.

VIII. Contact form and email-contact

1. Description and scope of data processing

On our web page, there is a contact form that can be used to contact us electronically. If a user utilizes this option, data entered into the input mask is transmitted to us and stored.

At the time the message is sent, also the following data is stored:

Date and time of registration
Used browser
Operating system

For the processing of data in line with the sending of the message, we obtain your consent and refer to this data privacy statement.

As an alternative, you may also contact us via the provided email address.

In such a case, the personal data of the user transmitted via email is stored. In this context, such data is not forwarded to third parties. Such data is only used for the processing of the conversation.

2. Legal basis for the processing of data

Legal basis for the processing of data transmitted in line with the sending of an email is Section 6 Subsection 1 lit. f GDPR.

If the purpose of the contact via email is the entering into a contract, the additional legal basis for processing is Section 6 Subsection 1 lit. b GDPR.

3. Purpose of data processing

If contact is established via email, our required legitimate interest is also in the processing of such data. Other personal data processed during the sending process only serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage

Data is deleted as soon as it is no longer required to fulfill the purpose of its collection. This is the case for personal data sent via email if the respective conversation with the user is finished. The conversation is finished if it can be deduced from the circumstances that the respective matter is clarified in a concluding fashion.

5. Option for objection and removal

The user has the option to revoke his consent for the processing of personal data. If the user contacts us via email, he may object at any time to the storing of his personal data. In such a case, the conversation cannot be continued. You may send your revocation of consent and objection to storage in writing via email to info(at)germanchamber.ca. All personal data stored in the process of establishing contact will be deleted in such a case.

IX. Forwarding of personal data to third parties

1. Website operators

In line with processing, personal data is forwarded to the agency commissioned to run the website as well as to the technical service provider. The processing of personal data is governed by a separate agreement with the service provider.

Third-party content

If you have given your consent to the display of third-party content in the consent management, we will integrate content from other websites and providers on our website, each of which is responsible for the data processing thereby taking place in accordance with Art. 4 No. 7 DSGVO. Your end device establishes a direct connection to the server of the respective provider, whereby the provider at least collects and processes your IP address to establish the connection and play out the content. Insofar as this is a process requiring permission under data protection law, the legal basis is your consent to the display of the content. We have no knowledge of whether and, if so, to what extent further processing takes place. The providers may, for example, monitor your behaviour and also create usage profiles, possibly also outside the EEA. You can decide at any time not to display third-party content in the future ("revocation") by setting the corresponding setting in the consent management.

2. Newsletter

In line with processing, personal data is forwarded to the email marketing software provider CoreSend. The processing of personal data is governed by a separate agreement with the service provider.

3. Events

In line with processing, personal data is forwarded to the email marketing software provider Constant Contact. The processing of personal data is governed by a separate agreement with the service provider.

4. Website Analysis with Piwik PRO

We use Piwik PRO Analytics Suite as our website/app analytics software and consent management tool. We collect data about website visitors based on cookies. The collected information may include a visitor’s IP address, operating system, browser ID, browsing activity and other information. See the scope of data collected by Piwik PRO.

We calculate metrics like bounce rate, page views, sessions and the like to understand how our website/app is used. We may also create visitors’ profiles based on browsing history to analyze visitor behavior, show personalized content and run online campaigns.

We host our solution on Microsoft Azure in Germany, and the data is stored for 25 months.

The purpose of data processing: analytics and conversion tracking based on consent. Legal basis: Art. 6 (1)(a) GDPR.

Piwik PRO does not send the data about you to any other sub-processors or third parties and does not use it for its own purposes. For more, read Piwik PRO’s privacy policy.

X. Rights of the data subject

As a subject of the processing of personal data, you have the following rights arising from Articles 7 and 15 to 22 of the GDPR. You are entitled to:

According to Art. 7 DSGVO: a right to revoke the processing, provided that it is based on your consent according to Art. 6. para. 1a). Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected. Please also note that we may have to retain certain data for different periods of time in order to comply with legal requirements, e.g. for accounting obligations.
According to Art. 15 DSGVO: a right to information about the processed data and to a copy,
According to Art. 16 DSGVO, a right of rectification if we process incorrect data about you,
According to Art. 17 DSGVO, a right to erasure, unless exceptions still apply as to why we are still storing the data, for example, retention obligations or limitation periods,
According to Art. 18 DSGVO, a right to restriction of processing,
According to Art. 19 DSGVO, the right to be informed about correction, deletion or restriction of processing of your personal data. We will inform you as a data subject if you request it.
According to Art. 20 DSGVO, a right to data portability,
according to Art. 21 DSGVO, a right to object to processing in the public or legitimate interest, unless exceptions apply why we need to continue processing the data, for example due to legal requirements and obligations.

You may contact the supervisory authority pursuant to Art. 77 DSGVO if you find that we are not processing your data properly. The Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information (https://www.datenschutz-berlin.de/) is responsible for us.

Canadian Privacy Statement

1. Our Privacy Commitment

At the Canadian German Chamber of Industry and Commerce Inc. (the “German Chamber”), we are committed to protecting the privacy of your personal information. As part of this commitment, we have developed this Privacy Policy, which outlines the principles and guidelines by which the German Chamber operates to protect the personal information we collect, use, disclose or otherwise manage in the course of our operations. Our policy and practices have been put in place in order to comply with the federal Personal Information Protection and Electronic Documents Act (“PIPEDA”) and any other applicable law.

2. What personal information does the German Chamber collect?

In the course of conducting business with you, the German Chamber collects both personal and non-personal information. Personal information is any information that identifies you, or by which your identity could be deduced, including, without limitation, your name, e-mail address, home address, telephone number, age, marital status, gender, income, date of birth, credit card number, and any other information that identifies who you are or would allow someone to contact you. In general, personal information does not include publicly available information, such as business addresses and telephone numbers that are listed in a public directory or made available through directory assistance.

3. Identifying Purposes for Collection of Personal Information

3.1 The German Chamber will make a reasonable effort to specify the identified purposes, either orally or in writing, for which it collects, uses, or discloses your personal information at the time of collection or after collection but before use. The German Chamber will only collect information that is reasonably necessary for the following purposes, additional information may also be collected, with your permission, if appropriate:

(a) to register members and collect membership dues;

(b) to administer German Chamber memberships;

and services, including, without limitation, sending out newsletters and other relevant information;

(d) to verify the identity of German Chamber members;

(e) to fulfill your requests for products, services or information;

(f) for transaction, billing, and record-keeping purposes;

(g) to provide quality customer service and determine your needs;

(h) to inform and/or register you for up-coming events, programs, and other opportunities that may be of interest;

(i) to update your contact information in the German Chamber database;

(j) to provide business information to jobseekers, institutions and other stakeholders;

(k) to measure and enhance the effectiveness of our marketing endeavors;

(l) to tailor our offerings to your preferences;

(m) to allow you to subscribe to our newsletter or mailing list;

(n) to protect you against fraud or error;

(o) to verify your identity for the purpose of obtaining access to our products and services;

(p) to meet legal, statutory and regulatory requirements; and

(q) such other purposes consistent with the foregoing purposes

3.2 If your personal information is to be used for a purpose not previously identified, the German Chamber will identify and document this purpose prior to such use and will provide you with an opportunity to opt out of this activity. The German Chamber will state the identified purposes in such a manner that you can reasonably understand how the information will be used and disclosed.

4. Use of cookies

4.1. We do use cookies. Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your Web browser (if you allow) that enables the sites or service providers systems to recognize your browser and capture and remember certain information.

4.2. Piwik Pro: We use Piwik PRO Analytics Suite as our website/app analytics software and consent management tool. We collect data about website visitors based on cookies. The collected information may include a visitor’s IP address, operating system, browser ID, browsing activity and other information. See the scope of data collected by Piwik PRO.

We host our solution on Microsoft Azure in Germany, and the data is stored for 25 months.

The purpose of data processing: analytics and conversion tracking based on consent. Legal basis: Art. 6 (1)(a) GDPR.

Piwik PRO does not send the data about you to any other sub-processors or third parties and does not use it for its own purposes. For more, read Piwik PRO’s privacy policy.

5. Consent

5.1 We will only collect, use, and disclose your personal information with your consent except where otherwise permitted or required by law. Your consent is implied if we ask you to provide personal information with a stated purpose.

5.2 By providing the German Chamber with your personal information, you agree and consent that we may collect, use and disclose your personal information in accordance with this Privacy Policy. If you provide us with the personal information of another individual, you represent that you have all necessary authority and/or have obtained all necessary consents from such individual to enable us to collect, use and disclose such personal information for the purposes set forth in this Privacy Policy.

6. Withdrawing Consent

You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. Please note, however, that withdrawing your consent may affect our ability to provide you with the services, products or information that may be of value to you. To withdraw your consent, simply contact us at the e-mail address or address listed in Section 14.1 below.

7. Accuracy

7.1 The German Chamber will use its best efforts to ensure that personal information is kept as accurate, complete, and up-to-date as is necessary and possible for the purposes for which it is to be used. The German Chamber will provide individuals with reasonable access to their personal information and will update or correct any deficiency. The individual concerned can provide the German Chamber with particulars of any required updates or corrections. (There are limited exceptions to this which are set out in the PIPEDA legislation.)

7.2 The German Chamber will rely exclusively on the representations made by you in determining the completeness, accuracy, and timeliness of the personal information and will have no further obligation to seek independent verification of any personal information supplied by you to the German Chamber.

8. Security Safeguards

8.1 The German Chamber strives to ensure that its security measures will protect personal information against such risks as loss or theft, unauthorized access, disclosure, copying, use, modification or destruction, regardless of the format in which the information is held. Such measures will vary depending on the sensitivity, amount, format, nature and storage of the information and will involve, as applicable, physical, administrative, technological, as well as electronic and online security measures.

8.2 The German Chamber assumes no liability if your personal information is stolen, intercepted, altered, misused or otherwise interfered with by a third party.

8.3 All employees of the German Chamber with access to personal information are required, as a condition of their employment, to keep such information confidential.

8.4 The German Chamber shall use reasonable efforts to ensure that upon disposal and/or destruction of records, confidentiality of information shall be maintained.

9. Third Party Links

The German Chamber’s website located at www.germanchamber.ca may provide links to third party websites as a convenience to the user. The inclusion of any link does not imply the German Chamber's endorsement of any other company, its websites, or its products and/or services. These linked websites have separate and independent privacy policies, which we recommend that you read carefully. We have no control over such websites and therefore assume no responsibility or liability for the manner in which the organizations that operate such linked websites may collect, use or disclose and otherwise treat your personal information.

10. Openness

The German Chamber is committed to being open about its policies and practices with respect to the collection and maintenance of personal information.We are pleased to answer any questions that you may have regarding the collection and maintenance of personal information. Please direct your inquiries to our Privacy Officer.

11. Limitations on Use, Disclosure and Retention of Personal Information

11.1 Personal information will not be used or disclosed for the purposes other than those for which it was collected, except with the consent of the individual or as required by law. Personal Information will be retained only for as long as is required or appropriate to fulfill the identified purpose.

11.2 The German Chamber will record any new purpose for which it has obtained an individual’s consent to use, retain or disclose information.

11.3 The German Chamber does not sell, rent or trade personal information. Personal information is only disclosed to third parties who have signed an agreement binding them to the German Chamber's Privacy Policy.

11.4 The German Chamber will establish criteria for the retention of personal information, including, as appropriate, minimum and maximum retention periods.

11.5 Personal information that has been used to make a decision about an individual will be retained for a reasonable period to allow the individual access to the information after the decision has been made.

12. Access to Personal Information

12.1 The German Chamber will respond to any requests for access to information within a within thirty (30) days of your inquiry. We will assist any individual who informs us that they require assistance in preparing a request. We will not, however, respond to frivolous or vexatious requests for access to information. At the time of your request, we will need specific information from you in order to verify your identity before we can provide you with the personal information we hold. We will advise you whether or not we hold your information, and will disclose that information along with particulars with respect to its source, unless such disclosure is prohibited by law.

12.2 While our response will typically be provided at no cost to the individual, depending on the nature of the request and the amount of information involved, the German Chamber reserves the right to impose a cost. In such circumstances, we will inform the individual of the approximate cost to provide the response and proceed upon payment by the individual of the cost. Requested information will be provided or made available to the individual in a form that is clear and understandable.

12.3 In providing an account of third parties to whom the German Chamber may have disclosed personal information about an individual, we will attempt to be as specific as possible. If it is not possible to provide a list of the organizations to which the German Chamber actually disclosed personal information, we will provide a list of organizations to which such information may have been disclosed.

12.4 If an individual successfully demonstrates the inaccuracy or incompleteness of personal information, the German Chamber will amend the information as required. If a challenge is not resolved to the satisfaction of the complainant, we will record the substance of the unresolved challenge. Where appropriate, the amended information or the existence of the unresolved challenge, as the case may be, will be transmitted to third parties having access to the information in question.

12.5 In certain circumstances, the German Chamber may be unable to provide access to some or all of the information it holds about an individual. Such circumstances include: (i) if disclosure would reveal confidential commercial information; (ii) if the information is protected by solicitor-client privilege; (iii) if the information was generated in the course of a formal dispute resolution process; or (iii) if the information was collected in relation to the investigation of a breach of an agreement or a contravention of a federal or provincial law. Where permitted, the reasons for denying access to the personal information will be provided to the individual upon request.

13. Will this Privacy Policy change?

This Privacy Policy may be updated and revised from time to time. All changes to our Privacy Policy will be posted on this website. Whenever we update this Privacy Policy, we will change the date to reflect the last date of revision. This policy was last modified in February 2014.

14. Questions or Concerns

14.1 The German Chamber is responsible for all personal information under its control and has designated a Privacy Officer to oversee the German Chamber’s compliance with PIPEDA. Other individuals within the German Chamber may be responsible for the day-to day collection and processing of personal information and may be delegated to act on behalf of the Privacy Officer.

If you have any questions, concerns or complaints about our Privacy Policy or the privacy of your personal information, please contact

Canadian German Chamber of Industry and Commerce Inc.
480 University Avenue, Suite 1500
Toronto, ON M5G 1V2,
Canada

Tel: (416) 598 - 3355

Fax: (416) 598 - 1840

Email: info@germanchamber.ca

14.2 The German Chamber will investigate all complaints as expeditiously as possible and, if a complaint is found justified, we will take all appropriate measure to resolve the matter to the satisfaction of the complainant.

14.3 If the German Chamber does not resolve the matter to your satisfaction, you may contact:

The Privacy Commissioner of Canada
112 Kent St
Ottawa, ON K1A 1H3
Canada