Privacy Statement

I.       Controller, Scope of Application

The controller within the sense of the pertinent data protection regulations is INFORUM Verlags- und Verwaltungsgesellschaft mbH (hereinafter: the “Provider”). See the Legal Information for details about our valid address and representation authorisations.

The protection of your personal data has the highest priority for us. We have therefore compiled the information below explaining when we collect what data and how we handle your personal data. This privacy statement describes the collection and use of personal data when you are visiting and using the websites www.kernd.de, www.kernfragen.de, www.kerntechnik.com and other internet domains which automatically direct users to one of the aforementioned sites when accessed.

The website www.kernd.de operated by the Provider makes editorial content on the subject of nuclear technology available to users free of charge. Moreover, visitors have the opportunity to use the available shop functions to purchase products from the Provider’s portfolio, to register for an event or seminar or to book the insertion of advertising.

The Provider also uses personal data for statistical and market analysis purposes. Statistics such as customer groups, delivery areas or market areas are prepared and analysed in anonymised form. Details on these processes can be found in the relevant sections of this privacy statement.

Additional data protection provisions may apply to special services or actions (such as special campaigns). We will provide information about any such provisions when users begin to use the relevant service or action.

II.      General Information About Data Processing

1.     Scope of Processing of Personal Data

As a general principle, we process the personal data of our users solely to the extent this is necessary to provide a functional website and our content and services. Our users’ personal data are always processed solely with the users’ consent or on the basis of other legal provisions allowing data processing.

2.     Legal Basis for the Processing of Personal Data

Consent

In so far as we have obtained the data subject’s consent to process personal data, point (a) of Art. 6 (1) of the EU General Data Protection Regulation (GDPR) is the legal basis.

Contract or Steps Prior to Entering a Contract

During the processing of personal data required for the performance of a contract when the data subject is a party to the contract, point (b) of Art. 6 (1) GDPR is the legal basis. It is also the basis for the necessary steps taken prior to entering a contract.

Legal Obligation

In so far as the processing of personal data is required for compliance with a legal obligation to which our company is subject, point (c) of Art. 6 (1) GDPR is the legal basis.

Legitimate Interests

If processing is necessary for the purposes of the legitimate interests pursued by our company or a third party and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, point (f) of Art. 6 (1) GDPR is the legal basis for the processing.

3.     Data Erasure and Duration of Storage

As a general rule and in so far as not otherwise stated, your personal data are stored solely until the purpose of the collection and storage ceases to exist. Pursuant to your consent, data may be stored for a longer period of time as long as you do not withdraw the consent.

Storage of data may continue beyond this time if provision has been made by European or national legislatures in EU regulations, laws, or other statutes to which we are subject. Blocking or erasure of the data also occurs whenever the storage period required by the specified norm expires unless the continued storage of the data is required for the conclusion or performance of a contract.

4.     Transfer to Third Countries

Unless otherwise stated, any and all data processing takes place within the EU or the countries in the EEA.

Data processing by third parties located outside of the aforementioned geographical area may, wholly or in part, take place in the countries of the respective establishment or in accordance with the relevant data protection provisions.

The transfer of personal data outside of the EU or the EEA occurs solely and exclusively pursuant to an adequacy decision of the European Commission, including the adequacy decision on the EU-US Privacy Shield, or pursuant to standard contract clauses of the European Commission. A list of currently applicable adequacy decisions can be found on the website of the European Commission.

Information about the EU-US Privacy Shield and, in particular, about the participation of a specific company can be found on the website of the US Department of Commerce.

III.    Data Usage in General Form During the Provision of the Website and Creation of Log Files

Regardless of whether you place an order, we automatically store usage-related data about the usage transaction during the use of our website. Such data include in particular the URL of the accessed website, date and time of the access, transferred data quantity, HTTP status code of the response to the access, web browser, HTTP referrer and the IP address. We do not attribute this information to your person. We store the IP addresses for a limited time in the log files in so far as this is necessary for security purposes.

We collect these data to ensure that you are able to access our website. Furthermore, they are used to analyse, store and assess anonymously user behaviour patterns and to improve and develop further our service continuously. You will find additional details about the systems we use for this purpose in the sections on cookies and social media below.

We store your IP address solely for a limited time in the log files in so far as this is necessary for security purposes.

These purposes also represent our legitimate interests in the data processing pursuant to point (f) of Art. 6 (1) GDPR.

IV.    Use of Data During Placement of an Order or Registration for an Event

When you submit a purchase order or register for an event on our website, we collect and process the following personal data: form of address, surname, first name, title, organisation, address, email address, any deviating shipping address. We must have these data if we are to process your order or registration properly.

You may provide the following information voluntarily: department, date of birth. We process such data for statistical purposes, but separately from the other data relating to you. This enables us to gain statistical knowledge about the visitors to our online shop or our events without establishing any link to you; we use this knowledge to improve continuously our products and services and adapt them to the interests of our users. These purposes also represent our legitimate interests in the collection and usage pursuant to point (f) of Art. 6 (1) GDPR.

Moreover, we automatically collect the following data: regional origin, operating system and device, referring website, opened subsites. They do not, however, enable us to draw any conclusions about your civic identity.

We engage external service providers to handle orders or registration and, as necessary, we transfer your data to them. These service providers are in charge of the processing and shipment of your order or the organisation of the events (e.g. logistics companies, printers, congress agency). Such service providers process the data solely and exclusively on our behalf and for the purpose of performing the contract. Under no circumstances are your data used for the service providers’ own purposes. In so far as legally required, we have concluded contracts regarding the processing with all our service providers pursuant to Art. 28 GDPR.

In so far as you purchase products or services from our portfolio, we do not collect and process any payment data. We engage external payment service providers to handle payments, and they collect the payment data directly from you. We receive merely the confirmation that payment has been made.

The legal basis for the processing is point (b) of Art. 6 (1) GDPR.

V.      Use of Cookies

a)     Description and Scope of Data Processing

We use so-called cookies on various pages to make the visit to our website attractive and to make possible the use of certain functions. These are small text files that are placed on your computer. Some of the cookies we use are erased again at the end of your browser session, i.e. when you close your browser (so-called session cookies). Other cookies remain on your computer so that we or our partner companies recognise your browser when you come back for another visit (persistent cookies).

If you make the appropriate settings in your browser, you will be notified when cookies are placed on the computer and can decide on a case-by-case basis whether to accept them, to accept them for specific cases or to exclude their placement as a general rule. Moreover, you can delete cookies manually from your device at any time.

If cookies are blocked, the functionality of our website or app may be restricted.

Technical Cookies

We use cookies to make our website more user-friendly. Some of the elements on our internet site require the possibility to identify the accessing browser even when there has been a change from one page to another. In this case, information about (language settings, shopping cart contents, login information etc.) is stored.

The basis for the use of technical cookies is our legitimate interest in providing a functional and user-friendly service.

Cookies That Are Technically Not Required

In addition, we make use of cookies that are not technically required so that we can observe and analyse user behaviour for market analysis purposes. These are cookies from third-party providers who are addressed during the use of our services. You will find details about these cookies in the sections below.

We use cookies that are not technically required to analyse and continuously improve the use of our website. The statistics we obtain in this way enable us to improve our services and make them more interesting for you as a user. The legal basis is point (f) of Art. 6 (1) GDPR.

Google Analytics

We work with “Google Analytics”, a web analysis service provided by Google, Inc. As a rule, the information about your use of our website generated by the Google Analytics cookie is transferred to a Google server in the USA and stored there. IP anonymisation is activated on our website, so Google truncates users’ IP addresses within the member states of the European Union or in other states which are parties to the treaty on the European Economic Area before transferring them. The full IP address is transferred to a Google server in the USA and truncated there only in exceptional cases. Acting on our behalf, Google uses this information to analyse your use of the website, to compile reports about website activities and to perform additional services related to website and internet use for us. The IP address your browser provides within the scope of Google Analytics is not associated with other Google data. You can prevent the storage of cookies by making the appropriate settings in your browser software; however, we expressly point out to you that doing so may possibly prevent you from being able to use all of the functions on this website in their full scope. Moreover, you can prevent the capture of the data generated by the cookie and relating to your activities on the website (including your IP address) by Google and the processing of these data by installing the browser plugin from the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Alternatively, you can click on this link: Disable Google Analytics. This sets an opt-out cookie that prevents the future capture of your data when you visit this website.

You will find additional information regarding Google’s handling of your personal data in Google’s privacy statement: https://policies.google.com/privacy?hl=de.

Google AdWords Remarketing and Conversion Tracking

We use Google AdWords to advertise this website in the Google search results and on third-party websites. During your visit to our website, the so-called remarketing and conversion tracking cookie from Google is placed on your computer; using a pseudonym cookie ID and information about the sites you have visited, it automatically enables interest-based advertising that allows us or Google to track the advertisements you have clicked on and that have directed you to this website. Every Google AdWords customer receives a different cookie. It is therefore not possible for cookies to be traced via the websites of AdWords customers.

This serves the pursuit of our legitimate interests in an optimal marketing of our website as determined by a weighing of interests in compliance with point (f) of Art. 6 (1) GDPR. When this purpose ceases to exist and we no longer use Google AdWords Remarketing, the data collected in this context are erased.

More extensive data processing takes place solely in so far as you have given to Google your consent for Google to link your web and app browser history with your Google account and to use information from your Google account to personalise advertisements that you see on the web. If you are logged in to Google while visiting the pages of our website, Google uses your data in combination with Google Analytics data to create and define target group lists for remarketing across various devices. At this time, Google temporarily links your personal data with Google Analytics data to create target groups.

Google AdWords Remarketing is a service provided by Google LLC (www.google.de). Headquarters of Google LLC is in the USA and is certified under the EU-US Privacy Shield. You can view the currently valid certificate here. Based on this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified in accordance with the Privacy Shield.

You can disable the Remarketing cookie at this link. Moreover, you will find information about the placement of cookies and the appropriate settings at the Digital Advertising Alliance.

b)    Duration of the Storage, Right to Object and Erasure

Cookies are stored on the user’s computer and transmitted from it to our site. This gives you, the user, full control over the use of cookies. By making the appropriate settings in your internet browser, you can block or restrict the transmission of cookies. Cookies that have been stored on the computer can be deleted at any time. You can set your browser to do this automatically. If cookies for our website are blocked, however, you may possibly no longer be able to use all the functions of our website in their full scope.

VI.    Newsletter

You can register to receive our newsletter by entering your email address in the mask provided for this purpose. The entry of your name is voluntary. We use it solely to address you personally.

You will subsequently receive an automatic confirmation email containing a link at the address you have entered. The registration process is not completed until you click on this link.

When you give your consent to the receipt of our newsletter, we use your email address to send advertising and offers about our own products and services as well as those of our partner companies to you. These data are not disclosed to third parties. You may withdraw your consent to the receipt of newsletters at any time by objecting to the receipt of newsletters.

The basis for this form of data processing is the consent you have given.

If we have collected your email address during the purchase or use of our products or services, we may also send to you email newsletters for our products and services similar to the products or services you have ordered from us without your prior consent if you have not objected to the receipt of such newsletters. The basis for this action is Section 7 (3) UWG [Act Against Unfair Competition].

You may at any time object to the receipt of all types of newsletters from us without incurring any costs other than those of the transmission according to your basic rates (i.e. the costs of your internet provider, for instance). We explain to you your right to object when collecting your email address and in every newsletter.

VII.   Social Media Plugins

We use social media plugins from various providers to improve our services and make them more attractive for you. The basis for the related processing of personal data is point (f) of Art. 6 (1) GDPR.

Social Plugins of Facebook, Twitter using the Shariff Solution

Social buttons from social networks are used on our website.

This serves the pursuit of our legitimate interests in an optimal marketing of our products and services as determined by a weighing of interests in compliance with point (f) of Art. 6 (1) GDPR. These buttons are not integrated into the site as unrestricted plugins, but solely by the use of an HTML link; this enhances the protection of your data when you visit our website. This integration ensures that accessing a page of our website that contains such buttons does not immediately establish a connection with the servers of the provider of the related social network.

If you click on one of the buttons, a new window opens in your browser and accesses the page of the pertinent service provider where you can, for instance, click on the Like or Share button (as appropriate, after entering your login data).

The purpose and scope of the data collection and the further processing and use of the data by the providers on their sites as well as the contact opportunities and your rights and settings possibilities relating thereto for the protection of your private sphere can be found in the providers’ privacy policies:

Facebook: http://www.facebook.com/policy.php

Twitter: https://twitter.com/privacy

YouTube Video Plugins

Content from third-party providers is made available via the service YouTube on our website. YouTube is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

Enhanced privacy settings have been enabled for YouTube videos integrated into our site. This means that no information about website visitors is collected and stored by YouTube unless they play the video. The integration of the videos serves the pursuit of our legitimate interests in an optimal marketing of our products and services as determined by a weighing of interests in compliance with point (f) of Art. 6 (1) GDPR.

The purpose and scope of the data collection and the further processing and use of the data by the providers as well as the contact opportunities and your rights and settings possibilities relating thereto for the protection of your private sphere can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en .

VIII. Rights of the Data Subject

If your personal data are processed, you are a data subject within the sense of the GDPR and have the following rights with respect to the controller:

1.     Right of Access

You can request a confirmation from the controller as to whether we process personal data concerning you.

If data are being processed, you may obtain access to the following information from the controller:

(1)     The purposes of the processing of the personal data;

(2)     The categories of personal data concerned;

(3)     The recipients or categories of recipient to whom the personal data concerning you have been or will be disclosed;

(4)     The envisaged period for which the personal data concerning you will be stored, or, if not possible, the criteria used to determine that period;

(5)     The existence of the right to request rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or to object to such processing;

(6)     The right to lodge a complaint with a supervisory authority;

(7)     Where the personal data are not collected from the data subject, any available information as to their source;

(8)     The existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to be informed whether personal data concerning you are transferred to a third country or to an international organization. Where this is the case, you have the right to be informed about the appropriate safeguards relating to the transfer pursuant to Article 46 GDPR.

2.     Right to Rectification

You have the right to obtain from the controller without undue delay the rectification and/or completion of inaccurate or incomplete personal data concerning you.

3.     Right to Restriction of Processing

You have the right to obtain from the controller restriction of processing of the personal data concerning you under the following circumstances:

(1)     You contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;

(2)     The processing is unlawful, and you oppose the erasure of the personal data and request the restriction of their use instead;

(3)     The controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims; or

(4)     You have objected to processing pursuant to Article 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override your grounds.

Where processing of personal data concerning you has been restricted, such personal data may, with the exception of storage, be processed solely with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a member state.

If restriction of processing pursuant to the above circumstances has been obtained you will be informed by the controller before the restriction of processing is lifted.

4.     Right to Erasure

a)      Obligation to Erase

You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller has the obligation to erase these data without undue delay where one of the following grounds applies:

(1)     The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

(2)     You withdraw your consent on which the processing is based according to point (a) of Art. 6 (1) or point (a) of Art. 9 (2) GDPR and where there is no other legal ground for the processing;

(3)     Your object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR;

(4)     The personal data concerning you have been unlawfully processed;

(5)     The personal data concerning you have to be erased for compliance with a legal obligation pursuant to European Union or member state law to which the controller is subject;

(6)     The personal data concerning you have been collected in relation to the offer of information society services referred to in Art. 8 (1) GDPR.

b)      Information to Third Parties

Where the controller has made the personal data concerning you public and is obliged pursuant to Art. 17 (1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

c)       Exceptions

The right to erasure does not apply to the extent that processing is necessary:

(1)     For exercising the right of freedom of expression and information;

(2)     For compliance with a legal obligation that requires processing pursuant to European Union or member state law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

(3)     For reasons of public interest in the area of public health in accordance with points (h) and (i) of Art. 9 (2) as well as Art. 9 (3) GDPR;

(4)     For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Article 89 (1) GDPR in so far as the right referred to in point (a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or

(5)     For the establishment, exercise or defence of legal claims.

5.     Right to Notification

If you have exercised the right to rectification, erasure, or restriction of processing with respect to the controller, the latter is obligated to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort.

You have the right to request information about those recipients from the controller.

6.     Right to Data Portability

You have the right to receive the personal data concerning you which you have provided to a controller in a structured, commonly used and machine-readable format. Moreover, you have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

(1)     The processing is based on consent pursuant to point (a) of Art. 6 (1) GDPR or point (a) of Art. 9 (2) GDPR or on a contract pursuant to point (b) of Art. 6 (1) GDPR; and

(2)     The processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible. The exercise of this right must not adversely affect the rights and freedoms of others.

The right to data portability not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7.     Right to Object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Art. 6 (1) GDPR, including profiling based on those provisions.

The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing that override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Where personal data concerning you are processed for direct marketing purposes, you have the right, without giving your reasons, to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

Where you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.

8.     Right to Withdraw Consent Relating to Privacy Law

You have the right to withdraw your consent relating to privacy law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

9.     Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

IX.    Modifications of This Privacy Statement

The dynamic development of the internet means that new technologies and opportunities area constantly being developed. Since we would like to make it possible for you to enjoy the benefits of these opportunities and technologies as well, we reserve the right to modify this privacy statement in accordance with the introduction of new or additional services or service elements or the modification or expansion of existing services or service elements.

In so far as the modification of the privacy statement applies solely to data usage in general form and/or the usage of data during the ordering process and not the usage of data within the context of a user account as well, the new privacy statement becomes effective on the date it is updated on the website.

A modification of the privacy statement relating to the usage of data previously collected and stored in your user account is carried out solely if this is reasonable for you. If, and in so far as, modifications of the privacy statement are related to the data previously collected and stored in your user account, we will notify you in advance by email, on our website or in another form. You have the right to object to the application of the new privacy statement within six weeks of the receipt of the notification. If you object to its application, you will no longer be able to use the services available on the website. If no objection is raised during the aforementioned period, you will be deemed to have accepted the modified privacy statement. We will point out your right to object and the significance of the objection period in the notification.