We understand that it is important for you to protect your privacy when using our online services. We take the protection of your personal data very seriously, and we have therefore taken the necessary technical and organisational measures to ensure full compliance with the legal regulations on data protection.

This privacy statement explains how Bundesvereinigung Logistik e.V. (referred to as "BVL" in the following) handles the personally identifiable data of people who use our online sites (website and social media profiles of BVL):

A. Responsible entities

1.    Name and address of the entity responsible for processing:

The responsible entity under the terms of the EU General Data Protection Regulation (GDPR) is:

Bundesvereinigung Logistik (BVL) e.V.

Schlachte 31

28195 Bremen

Phone: +49 (0)421  173 84 0

Fax: +49 (0)421  16 78 00

E-mail: bvl@bvl.de

B. General

1.    Scope of processing of personally identifiable data

The use of our website is generally possible without prior registration and without providing personally identifiable data. We only collect and use personally identifiable data of our users where this is necessary in order to provide a functioning website and give you access to our content and services. If this is not the case, personally identifiable is only regularly used with the consent of the user. The only exception is in cases in which it is not possible to obtain prior consent for factual reasons and the processing of data is permitted by legal regulations.

2.    Legal basis for processing

Where we obtain consent from the persons concerned for processing procedures relating to personally identifiable data, the legal basis for this is provided by Art. 6 Para. 1 a of the EU General Data Protection Regulation (GDPR).

When we process personally identifiable data required for the fulfilment of a contract where the affected person is a party to the contract, the legal basis for this is provided by Art. 6 Para. 1 b GDPR. This also applies to processing procedures necessary to implement pre-contractual measures.

Where processing of personally identifiable data is necessary to meet a legal obligation to which we are subject, the legal basis for this is provided by Art. 6 Para. 1 c GDPR.

In the event that vital interests of the concerned person or another natural person render it necessary to process personally identifiable data, the legal basis for this is provided by Art. Para. 1 d GDPR.

If processing is necessary to protect a legitimate interest of our association or of a third party, and if the interests, basic rights and basic freedoms of the concerned person do not outweigh the first-named interest, the legal basis for processing is provided by Art. 6 Para. 1 f GDPR. The legitimate interest of our association consists in the performance of our business activities.

3.    Routine deletion and blocking of personally identifiable data

We only process and store personally identifiable data of the concerned person for as long as this is required to achieve the purpose of storage. Storage beyond this point is only possible if this has been provided for by the European or national legislator in legal regulations of the Union, acts or other provisions to which the entity responsible for processing is subject. As soon as the purpose of storage no longer exists or expires due to the storage period stipulated by the aforementioned regulations, the personally identifiable are routinely blocked or deleted.

4.    The security of your data

We take all appropriate technical and organisational measures to ensure the protection of your data. Moreover, all Web forms via which you transmit sensitive data to us are encrypted and therefore protected against authorised reading to the best possible degree. For the remainder, we would like point out that transmitting data via the Internet (e.g. communication via email) is generally unprotected, with the result that data may be accessed or falsified by third parties.

C. Utilisation data

1.    Logfiles

Every time you call up the website, we or the page provider collect data and information via an automated system. These data and this information is stored in the logfiles of the server.

The following data may be collected during this process:

• Information on the browser type and version used
• Operating system of the user
• The Internet service provider of the user
• The IP address of the user
• Date and time of access
• Websites from which the system of the user is forwarded to our website (referrer)
• Websites that are called up by the system of the user via our website

The processing of data enables us to serve the content of our website, to ensure the proper functioning of our IT systems and to optimise our website. The data in the logfiles are always stored separately from other personally identifiable data of users.

2.    Cookies

So-called "cookies" are used on our pages. Cookies are small text files that are stored on in the cache of your Internet browser for the duration of your browser session (so-called "session cookies") or on your harddisk for a specified period of time (so-called "permanent cookies"). The cookies permit recognition of the Internet browser so that you can be provided with content that is tailored to your needs and preferences more rapidly and systematically when you visit our website in future. We therefore use cookies in order to exercise our legitimate interest in offering a website tailored to the preferences of visitors. The cookies do not store any personally identifiable data.

How can I prevent the storage of cookies?

You can set your browser so that the storage of cookies is only accepted with your consent, and you can delete any existing cookies. If you deactivate cookies, however, the use of our Internet pages may be restricted. You can find information on how to deactivate cookies at wikihow.com.

3.    Google Analytics

This website uses Google Analytics, a Web analysis service of

Google Inc. ("Google")

1600 Amphitheatre Parkway

Mountain View, CA 94043

USA.

Google Analytics uses so-called “cookies” (text files stored on your computer) to enable the website to analyse how you use the site.

What happens with the data?

The information generated by the cookie about your use of this website (including your IP address) is transmitted to a "Google" server in the USA and stored there. Google uses this information to analyse your use of the website, to compile reports on website activities, and to provide additional services to the website operator related to website use and Internet use. Google may also pass on this information to third parties if this is stipulated by law or if third parties process these data on behalf of Google. In this event, Google will never make any connection between your IP address and other data held by Google.

How can I object to data collection and processing?

You can prevent the installation of cookies by setting your browser software accordingly; we would like to point out, however, that in this event you may not be able to make full use of all the functions of this website. By using this website, you consent to the processing of the data collected on you by Google in the manner outlined above and for the aforementioned purpose.

You can object to the collection and storage of your data at any time with effect for the future. To this end, you can prevent collection of the data generated by the cookie and relating to your use of the website (incl. your IP address), the transmission of these data to Google and the processing of these data by Google by downloading and installing the browser plug-in you can find at http://tools.google.com.

You can also prevent recording by "Google Analytics" by clicking on the following link. In this event, a so-called opt-out cookie is set that prevents future collection of your data when you visit this website:
https://tools.google.com/dlpage/gaoptout?hl=de.

In view of the debate on the use of analysis tools using full IP addresses, we would like to point out that IP addresses are only processed further on this website after they have been truncated. The use of Google Analytics with the extension "_anonymizeIp()" rules out the possibility that the collected data can be traced back to a specific person.

You can find the terms of use and the privacy statement of Google and Google Analytics at http://www.google.com/analytics/terms/de.html and https://www.google.de/intl/de/policies/.

Google Analytics is also used to evaluate data from AdWords and the Double-Click cookie for statistical purposes. If you want to prevent this, you can do so by deactivating this feature via the ad default manager at http://www.google.com/settings/ads/onweb/?hl=de.

As Google is located in the USA, data is transmitted to a third country outside the EU and the EEA. However, the safety of your data is still guaranteed, as Google is subject to the EU-US Privacy Shield agreement. In line with the decision of the EU Commission of Dec 7, 2016, therefore, Google offers an appropriate data protection standard.

4.    Google AdWords

What happens with the data?

The Google tag is used to show visitors to our website interest-based advertisements within the context of the Google Display network and the Google search feature ("Google Advertising Network") as well as for the purpose of conversion tracking. When you visit our website, a cookie is stored on your computer for this purpose. The cookie enables Google to recognise the visitor when he or she calls up our webpages that belong to the advertising network of Google. Our advertisements can be shown to the visitor on these pages ("remarketing").

Moreover, Google uses the Google tag to generate a list of persons who are anonymous to us, and we use this list for remarketing in the display of Google AdWords during Google searches. In the event that you search with Google for certain search terms and the cookie on your computer has been identified by Google, our advertisement can then be displayed to you in the search results.

Finally, we use the Google tag for conversion tracking so that we can measure the success of our advertisements for the International Supply Chain Conference in Google Display by implementing a JavaScript code snippet on the confirmation and thank-you page that is executed after you have successfully registered for the conference. If you click on one of our advertisements in the Google advertising network, a cookie with a limited duration period (90 days) is stored on your computer or mobile device in order to record your registration statistically. When you complete your registration for the International Supply Chain Conference, this "conversion" is reported to Google via the code snippet on the basis of the cookie, thereby enabling us to track the statistics and reports provided by Google on the number of recorded "conversions" per advertisement. This makes it easier for us to optimise the ads and permits us to evaluate our advertising campaign.

We are not able to identify you as a user or as a specific or identifiable person based on the information obtained from the Google tag or the cookie. In other words, we cannot assign the conversion data to any specific visitors but only have access to the overall data for our ads and keywords.. In particular, we also do not connect the data with any personally identifiable data that we may have collected about you by other means. You remain completely anonymous to us.

You can find more information on Google conversion tracking at https://support.google.com/adwords/answer/1722022?hl=de

How can I object to data collection and processing?

If you do not want the Google tag to track your activities, you can deactivate its use at https://www.google.com/settings/ads/. You can also object to the use of a Google tag for the aforementioned purpose at http://www.youronlinechoices.com/de/praferenzmanagement/ or http://optout.aboutads.info/#!/. Alternatively, you can set your browser to delete all cookies or deactivate cookies in your browser in order to prevent the use of cookies to track your activities. See the "Help" feature of your browser for information on deleting or deactivating cookies. Please note, however, that your use of our website and services may then be restricted and that deleting cookies does not prevent a new cookie being created when you visit our website again.

5. Facebook pixel

We use the Facebook pixel provided by

Facebook Inc. (“Facebook”)

1601 S. California Ave

Palo Alto, CA 94304

USA

The Facebook pixel is a JavaScript code snippet that we use for our advertising campaigns on Facebook for the events we stage in order to analyse, optimise and create target groups, to measure "conversions" and to enable us to create dynamic advertisements.

What happens with the data?

Facebook uses the data on your actions – e.g. cross-device registration for an event made by you on our website - obtained via the Facebook pixel in order to provide us with insights into the effectiveness of our advertising and the use of our website (in the form of statistics, for example) and optimises the ads we insert on Facebook.

We also use the Facebook pixel to track the number of registrations ("conversion tracking") so that we can measure the success of our advertisements for the International Supply Chain Conference by implementing a Facebook pixel on the confirmation and thank-you page displayed after you have successfully registered for the conference. If you click on a Facebook advertisement, a cookie with a limited duration period (180 days) is stored on your computer or mobile device in order to record your registration statistically. We use this procedure to record the number of registrations resulting from our advertising campaign. When you complete your registration for the International Supply Chain Conference, this "conversion" is reported to Facebook via the Facebook pixel on the basis of the cookie, thereby enabling us to track the statistics and overviews provided by Facebook on the number of recorded "conversions" per advertisement. This makes it easier for us to optimise the ads and permits us to evaluate our advertising campaign.

We do not limit our advertising to specific target groups using any personally identifiable data but address our advertising to all visitors to our website. We are not able to identify you as a user or as a specific or identifiable person based on the information obtained from the Facebook pixel or the cookie. In other words, we cannot assign the conversion data to any specific visitors. In particular, we also do not connect the data with any personally identifiable data that we may have collected about you by other means. You remain completely anonymous to us. However, Facebook can assign the visit to our website to your Facebook user account and identify you as a user across different devices in order to show you our advertising, in particular if you are logged on to your Facebook profile when you call up our website. However, Facebook does not transmit any personally identifiable information about you to us for this purpose.

We use the Facebook pixel with your consent, which you gave to us by clicking on the following button when visiting our website:

"I agree to the use of the visitor action pixel of Facebook. Moreover, I agree to anonymous utilisation data being transmitted to the USA by the visitor action pixel of Facebook."

You consent to us using the Facebook pixel to improve our advertising campaigns, optimise our advertisements, track conversions, insert dynamic advertisements, create a customer-specific audience for the purpose of remarketing and track certain events on our website.

Consent to the use of the visitor action pixel may only be given by users who are above 13 years of age. If you are below this age, please ask your parent or guardian for permission.

How can I object to data collection and processing?

You can revoke this consent to the use of the Facebook pixel for the aforementioned purpose at any time at http://www.youronlinechoices.com/de/praferenzmanagement/ or http://optout.aboutads.info/#!/. Alternatively, you can set your browser to delete all cookies or deactivate cookies in your browser in order to prevent the use of cookies to track your activities. See the "Help" feature of your browser for information on deleting or deactivating cookies. Please note, however, that deleting cookies does not prevent a new cookie being created when you visit our website again. You can edit the settings for Facebook's advertisements via the following link: https://www.facebook.com/ads/website_custom_audiences/.

6. Use of Google Maps

The Google Maps service is integrated in the website of Bundesvereinigung Logistik in order to visualise and display the contact address. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you use this feature, Google collects and processes data on the use of the map function by the user. You can find more information on this data processing in the Google privacy statement.

7. Use of Google reCAPTCHA

Our website uses the reCAPTCHA service by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The request serves to distinguish whether the input was made by a human or automatic machine processing. The request includes the submission of the IP address and any other data required by Google for the reCAPTCHA service. For this purpose your input will be transmitted to Google and used further there. Google will, however, shorten your IP address beforehand within the Member States of the European Union or other signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website in order to assess your use of this service. The IP address transmitted by your browser as part of reCAPTCHA is not associated with any other data held by Google. Your data may also be transmitted to the USA. Transmission of data to the USA is covered by an adequacy decision by the European Commission, the “Privacy Shield”. Google participates in “Privacy Shield” and has submitted to its requirements. By activating the request you agree to the processing of your data. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal.You can find more detailed information on Google reCAPTCHA and the associated data protection declaration at: https://policies.google.com/privacy

D. Your personal data (inventory data)

1. What are "personally identifiable data"?

Personally identifiable data constitute information on your person that permits conclusions as to your identity or that are indirectly or directly related to your person, such as your name, your address or your telephone number. Information that does not permit conclusions as to a specific or identifiable person do not constitute personally identifiable data.

2. Your registration with BVL

If you use the option of registering on the website of BVL providing personally identifiable data, these data are transmitted to BVL in the respective input mask. The data are stored solely for the purpose of internal use at BVL. During the registration process, the IP address of the user and the date and time of registration are stored alongside the data outlined below. This serves to prevent misuse of the services. The data are not passed on to third parties. The only exception is when there is a legal obligation to pass on these data.

Registered persons can have the stored data deleted or changed at any time. The concerned person can receive information on the personally identifiable stored about him or her at any time.

Registration is performed on the basis of our legitimate interests. By offering the option of registration, we provide our visitors with a convenient means of regularly logging in once again and having their data stored permanently.

During the registration process, we need certain details form you such as name, telephone number, e-mail address and address. The fields of data that are required for registration and have to be entered are marked as compulsory fields in the registration menu. You have the option of providing further data (such as your mobile phone number). The data you provide are stored by us and are used solely for the purpose of providing you with the requested services and therefore fulfilling our contracts with you – e.g. reduced fees for national events and special-interest forums of BVL, for participation at seminars and courses staged by BVL Seminars and DAV, and for studies and publications of BVL in the DVZ Shop. Where necessary, the data are passed on to commissioned service providers and cooperation partners of BVL for this purpose.

3. Social plug-ins

"Social plug-ins" of social networks are used on this website to enable you to also use the interactive options provided by the social networks you use on our Internet pages. Separate data protection and liability regulations apply to the social networks and in general to websites of third-party providers. The storage and use of personally identifiable data by the respective website operator (service provider) resulting from the use of their services may exceed the scope of this privacy statement. BVL has no influence on which data are recorded by an activated plug-in and how these data are used by the provider. BVL itself does not collect any personally identifiable via the social plug-ins or based on the use of these plug-ins.

In order to enhance the level of protection for your data, the plug-ins are not integrated in the page in an unrestricted way but only using an HTML link (so-called "Shariff solution" of c‘t). This mode of integration ensures that when you call up a page containing these types of plug-in, this in itself does not create any connection to the servers of the provider of the social network in question. If you click on one of the buttons, a new window opens in your browser and calls up the page of the respective service provider on which you can, for example, click the "Like" or "Share" button (where applicable after entering your login data).

Please see the privacy information of the providers for the purpose and scope of data collection and the further processing and use of the data by the providers on their pages as well as for information on your relevant rights and setting options to protect your private sphere.

Facebook

Operator: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA

Website: https://www.facebook.com

Data protection: http://www.facebook.com/policy.php

Twitter

Operator: Twitter Inc., One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland

Website: https://twitter.com

Data protection: https://twitter.com/de/privacy

Google+

Operator: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Website: http://www.google.com/intl/de/+/learnmore/

Data protection: http://www.google.com/intl/de/+/policy/+1button.html

Xing

Operator: XING SE, Dammtorstraße 30, 20354 Hamburg, Deutschland

Website: https://www.xing.com

Data protection: https://privacy.xing.com/de/datenschutzerklaerung

YouTube

Operator: YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA

Website: https://www.youtube.com

Data protection: https://policies.google.com/privacy?hl=de&gl=de

LinkedIn

Operator: LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA

Website: https://www.linkedin.com

Data protection: https://www.linkedin.com/legal/privacy-policy

Instagram

Operator: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA

Website: https://www.instagram.com

Data protection: https://instagram.com/about/legal/privacy/

4. Options for making contact

There is a contact form on the page https://www.bvl.de that can be used to make contact by electronic means. If you wish to use the contact form, you enter your name, your e-mail and your message so that we can handle your inquiry and respond to you accordingly. The provision of a contact form is based on our legitimate interests, as this provides us with a broader range of options to make contact with you. Alternatively, you can make contact via the specified e-mail address. If the person concerned makes contact with the entity responsible for processing via one of these channels, the personally identifiable data transmitted by the person in question are automatically stored. This storage is solely for the purpose of handling the inquiry or making contact with the person in question. These data are not passed on to third parties. The data is used on the basis of our legitimate interests (Art. 6 Para. 1 Clause 1 f GDPR). We have an interest in providing as many contact routes as possible for our visitors and in responding promptly to their inquiries.

5. Filesharing

When you use this service, we collect, process and use your data and related information even if they contain personally identifiable data. If you give your consent, our service shows other users these data. By giving your consent, you provide other users with access to your information and files.

6. Your rights as the affected person ("data subject")

You have the right:

• to demand information pursuant to Art. 15 GDPR about your personally identifiable data that we process. In particular, you can demand information on the processing purposes, the category of personally identifiable data, the categories of recipients to whom your data were disclosed, the planned storage duration, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right of complaint, the origin of your data where they were not collected on our website, and the existence of a system for automatic decision-making including profiling pursuant to Art. 22 Para. 1 and 4 GDPR as well as any robust information on the details of such a system. You have the right to demand information concerning whether the personally identifiable data that relate to you are transmitted to a third country or an international organisation. In this connection, you can demand to be informed of the suitable guarantees pursuant to Art. 46 GDPR in connection with such transmission.
• to demand correction without delay of incorrect or the completion of personally identifiable data stored by us pursuant to Art. 16 GDPR.
• to demand the deletion of your personally identifiable data stored by us pursuant to Art. 17 GDPR, as long as this processing is not necessary to exercise the right to freedom of expression and information, to meet a legal obligation, for reasons of public interest or to assert, exercise or defend against legal claims or for archiving purposes, scientific or historical research purposes that are in the public interest or for statistical purposes pursuant to Art. 89 Para. 1 GDPR, to the extent that the said right is likely to render impossible or seriously impair the realisation of the goals of this processing.
• to demand the restriction of the processing of your personally identifiable pursuant to Art. 18 GDPR, to the extent that you dispute the accuracy of the data, the processing is unlawful but you reject the deletion of these data and we no longer require these data but that you need these data to assert, exercise or defend against legal claims or you have filed an objection to processing pursuant to Art. 21 GDPR; if the processing of the personally identifiable data that concern you has been restricted, these data may only be processed with your consent or to assert, exercise or defend against legal claims or to protect the rights of another natural person or legal entity, or for reasons of important public interest of the Union or of a member state and you are informed by the responsible entity before the restriction is lifted.
• to receive your personally identifiable data that you have provided to us in a structured, common and machine-readable format pursuant to Art. 20 GDPR or to demand transmission to another responsible entity, to the extent that this does not impair the freedoms and rights of others. This right to data transferability does not apply to the processing of personally identifiable data required for the performance of a task that is in the public interest or in the exercise of public powers that have been assigned to the responsible entity.
• to revoke any consent that you have given us at any time pursuant to Art. 7 Para. 3 GDPR. The consequence of this revocation is that we are in future no longer permitted to perform data processing based on this prior consent.
• to not to be subjected, pursuant to Art. 22 GDPR, solely to a decision based on automated processing – including profiling – that has a legal effect with regard to your person or that seriously impacts you in similar fashion unless the decision is not required for the conclusion or fulfilment of a contract between you and us, is permissible based on legal regulations of the Union or the member states to which the responsible entity is subject and these legal regulations include appropriate measures to protect your rights and freedoms as well as your legitimate interests or the above is based on your explicit consent. These decisions may not be based on special categories of personally identifiable data pursuant to Art. 9 Para. 1 GDPR unless Art. 9 Para. 2 a or g applies and suitable measures have been taken to protect your rights and freedoms as well as your legitimate interests.
• to complain to a regulatory authority pursuant to Art. 77 GDPR. As a rule, you can file the complaint with the regulatory authority in your normal place of residence or employment, or at our domicile. The regulatory authority with which the complaint is filed informs the complainant of the status and outcome of the complaint including the option of a judicial remedy pursuant to Art. 78 GDPR.

7. Right of objection

If your personally identifiable are processed based on legitimate interests pursuant to Art. 6 Para. 1 Clause 1 e or f GDPR, you have the right to file an objection to the processing of your personally identifiable data pursuant to Art. 21 GDPR if reasons exist resulting from your particular situation or the objection is to direct advertising. In the latter case, you have a general right to object and we will comply with this objection without being provided with details of the particular situation.

If you would like to exercise your right of revocation or objection, it is sufficient to send an e-mail to bvl@bvl.de.