Data protection

The Federal Ministry of Food and Agriculture (BMEL) takes the protection of personal data seriously. We treat your personal data confidentially and in compliance with the statutory data protection regulations and this privacy policy.

The use of this website (https://www.floriadeexpo2022germany.com) is generally possible without the need to provide personal data. If personal data (such as surname, first name or email address) is collected, this is done so on a voluntary basis where possible. This data will not be shared with any third parties without your express consent.

The categories of recipients of personal data in the context of managing and organising the German Garden at Floriade Expo 2022 include Hamburg Messe und Congress GmbH, Messeplatz 1, 20357 Hamburg, Germany, E-Mail: info@floriade2022germany.com in its role as the organising company that provides services on behalf of the BMEL as part of data processing activities.

The body responsible for processing personal data is

Federal Ministry of Food and Agriculture (BMEL)
Rochusstraße 1
53123 Bonn
E-Mail: poststelle@bmel.bund.de

If you have any specific questions about the protection of your personal data, you can also contact the

Data Protection Officer at the Federal Ministry of Food and Agriculture
Rochusstraße 1
53123 Bonn
E-Mail: bds@bmel.bund.de

We host our website with the support of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen (hereinafter: Hetzner), with whom we have concluded a data processing agreement (DPA).

You can find further details in Hetzner’s privacy policy: https://www.hetzner.com/de/rechtliches/datenschutz.

The website is hosted on the basis of Art. 6(1)(f) GDPR, because we have a legitimate interest in ensuring that the presentation of our website is as reliable as possible. If corresponding consent has been requested, the data is processed solely on the basis of Art. 6(1)(a) GDPR; this consent may be withdrawn at any time.

Various kinds of personal data are collected when you use our website. The following provisions explain which data we collect and the purposes for which we use it.

1. Contact form

   If you submit enquiries to us via the contact form, your details from the contact form including the contact data provided therein (surname, first name, email address) will be stored by us for the purpose of processing the enquiry and dealing with any follow-up questions. We will not share this data without your consent.

   The data supplied in the contact form is thus processed solely on the basis of legitimate interest (Art. 6(1)(1)(f) GDPR). If the aim of establishing contact via the contact form is to conclude a contract, the additional legal basis for processing the data is Art. 6(1)(1)(b) GDPR.

   We process the information from the contact form or your email message solely to manage our contact with you. Herein also lies the necessary legitimate interest in processing the data. The data supplied by you in the contact form will be stored in accordance with the provisions set out under Section 4. 

2. Handling applicant data

   We give you the option of submitting an application to us by email.

   Your personal data will be collected and processed by us to enable us to make a decision on forming an employment relationship. To this end, we use the services of the recruitment agency Blue Lynx Employment B. V., with whom we have concluded a data processing agreement (DPA).

   The legal basis for processing the data is Art. 6(1)(b) GDPR in conjunction with § 26 BDSG (German Federal Data Protection Act). Personal data may also be processed on the basis of other provisions of labour and social law, in particular those pertaining to the constitutional law for commerce. If personal data has to be processed in order to fulfil a legal obligation of the data controller, the legal basis is Art. 6(1)(1)(c) GDPR.

   Personal data processed for the purpose of making a decision as to whether to form an employment relationship will be deleted as soon as processing is no longer required to arrive at such a decision. Accordingly, the length of the data storage period depends on the duration of the decision-making process.

   In certain circumstances, your personal data may be used to assert, exercise or defend legal claims, provided that you or we have any such legal claims or assert them.

   The legal basis in such cases is 6(1)(1)(f) GDPR. The data controller's or any third party's legitimate interests shall then be the assertion, exercising or defence of a legal claim. If you consent to us processing your personal data, then the processing of your data shall (at least also) be based on this declaration of consent (Art. 6(1)(1)(a) GDPR).

   In individual cases, this may therefore result in the personal data being stored for a period that extends beyond the time at which a decision as to whether to form an employment relationship is made. This would be the case, for instance, if there were any indication that you were going to assert legal claims against the data controller. In such cases, the data will be stored for the length of time needed to assert, exercise or defend such legal claims. The criteria for determining an appropriate storage duration may include the terms stipulated by the German General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz or AGG; Section 15(4)(1)) and the German Labour Courts Act (Arbeitsgerichtsgesetz or ArbGG; Section 61(b)) as well as statute of limitations rules and statutory retention periods. The data may also be stored if required by the European or national legislator in EU regulations, laws or other provisions to which the data controller is subject. If you have consented to your data being stored for an unlimited time period, the deletion of your data shall depend on the withdrawal of your consent.

3. Cookies

   Parts of the website use so-called cookies. Cookies do not harm your computer and do not contain any viruses. Cookies are used to make our content more effective, secure and user-friendly. Cookies are small text files that are placed on your computer and stored by your browser.

   Most of the cookies we use are so-called session cookies. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognise your browser on your next visit.

   You can set your browser to notify you when cookies are stored and to allow cookies only in individual cases, to prevent the acceptance of cookies in certain situations or in general, and to automatically delete cookies when you close your browser. If cookies are deactivated, the functions of this website may be limited.

   1. Borlabs Cookie

      Our website uses the Borlabs Cookie consent technology to obtain your consent to store certain cookies in your browser or use certain technologies and document everything in a way that complies with data protection regulations. The supplier of this technology is Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg (hereinafter: Borlabs).

      Whenever you visit our website, a Borlabs cookie will be stored in your browser, recording any consent you have given or withdrawn. This data is not shared with the provider of the Borlabs cookie.

      The recorded data will be stored until you ask us to delete it or you delete the Borlabs cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected. You can find details on how Borlabs Cookie processes data by visiting https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

      Borlabs Cookie consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6(1)(c) GDPR.

4. Server log files

   The website provider automatically collects and stores information in so-called server log files, which your browser automatically sends to us. This information includes:

   - Browser type and version
   - Operating system used
   - Referrer URL
   - Host name of the computer accessing the website
   - Time of the server request
   

   This data cannot be ascribed to certain individuals, nor is the data merged with other data sources. We reserve the right to subsequently review this data if we have specific evidence of unlawful use. The basis for processing the data is Art. 6(1)(b) GDPR, which permits the processing of data to fulfil a contract or pre-contractual measures.

5. Google Tag Manager

   We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

   Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. Google Tag Manager itself does not create any user profiles, does not store cookies, and does not conduct any independent analyses. Its sole purpose is to manage and run the tools integrated within it. However, Google Tag Manager does collect your IP address, which may also be sent to Google’s parent company in the United States.

   Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the fast and straightforward integration and management of various tools on its website. If the relevant consent has been requested, the data is processed solely on the basis of Art. 6(1)(a) GDPR; the consent can be withdrawn at any time.

6. Google Analytics

   If you have granted your consent, Google Analytics will be used on this website, a Web analysis service developed by Google Ireland Limited (“Google”). The “Universal Analytics” service is running when users visit the website. This makes it possible to assign data, sessions and interactions across several devices to a pseudonymous user ID and thus analyse a user's activities across all devices.

   Google Analytics uses so-called cookies, text files that are stored on your computer and make it possible to analyse how you use the website. The information generated by the cookie about how you use this website is generally sent to a server maintained by Google in the USA, where it is stored. In the event of IP anonymisation being activated on this website, however, your IP address will be shortened beforehand by Google within member states of the European Union or in other signatory states to the European Economic Area Agreement. We wish to point out that on this website Google Analytics has been enhanced to include IP anonymisation in order to ensure anonymous collection of IP addresses (so-called IP masking). The IP address sent from your browser within the scope of the Google Analytics service will not be merged with any other data by Google.

   You can find further information on the terms and condition of use and data protection by visiting https://www.google.com/analytics/terms/en.html and https://policies.google.com/?hl=den.

   Purpose of processing On behalf of the operator of this website, Google shall use this information to analyse your use of this website, to compile reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet.

   Legal basis The legal basis for the use of Google Analytics is the website operator’s legitimate interest in accordance with Art. 6(1)(1)(f) GDPR.

   Recipients / categories of recipients The recipient of the collected data is Google.

   Sending data to third countries The European Union’s standard contractual clauses shall apply to the sending of data to third countries. By using standard contractual clauses in a contract concluded between parties who transfer data, personal data is considered protected when transferred from the EEA or the United Kingdom to countries not covered by an adequacy decision.

   You can find further information and the data protection provisions in Google’s privacy policy at: https://policies.google.com/privacy/frameworks

   Duration of data storage The data sent by us and linked with cookies or usernames (e.g. user ID) will automatically be deleted after two months. Data that has reached the end of its retention period will be automatically deleted once a month.

   Data subject rights You can withdraw your consent at any time by setting your browser software to prevent the storage of cookies; we wish to point out, however, that this may result in you not being able to use all the functions of this website to their full extent. Please click here if you want to view or change your cookie settings.

   Contract data processing We have concluded a contract data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.

7. Instagram plug-in

   Instagram functions have been integrated on this website. These functions are provided by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

   If you are logged into your Instagram account, you can link the contents of this website to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate the visit to this website with your user account.

   We wish to point out that, as the provider of the website, we have no knowledge of the content of the transmitted data or how it is used by Instagram.

   The data is stored and analysed on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in achieving the highest possible visibility on social media. If corresponding consent has been requested, the data is processed solely on the basis of Art. 6(1)(a) GDPR; the consent can be withdrawn at any time.

   Insofar as personal data is collected on our website with the help of the tool described here and shared with Facebook or Instagram, we and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for the processing of this data (Art. 26 GDPR).

   This joint responsibility is limited solely to the collection of the data and the sharing of it with Facebook or Instagram. The processing of the data by Facebook or Instagram after it has been forwarded does not constitute part of the joint responsibility. Our joint obligations have been set out in a joint processing agreement. You can find the text of the agreement by visiting:

   https://www.facebook.com/legal/controller_addendum.

   According to this agreement, we are responsible for providing data protection information when using the Facebook or Instagram tool and for making sure that the tool is integrated securely on our website under data protection law. Facebook is responsible for the data security of Facebook and Instagram products. You can assert your data subject rights (e.g. requests for information) relating to the data processed by Facebook or Instagram directly with Facebook. If you assert your data subject rights with us, we are obliged to forward the matter to Facebook.

   Data transferred to the USA is based on the EU Commission’s standard contractual clauses. You can find details here:
   https://www.facebook.com/legal/EU_data_transfer_addendum,
   https://help.instagram.com/519522125107875 and
   https://de-de.facebook.com/help/566994660333381.

   You can find further information on this matter in Instagram’s privacy policy: https://instagram.com/about/legal/privacy/.

In order to ensure that fonts are consistently displayed, this website uses so-called Web fonts developed by MyFonts Inc., 600 Unicorn Park Drive, Woburn, Massachusetts 01801 USA (hereinafter: MyFonts). These are fonts that are loaded onto your browser when you visit our website in order to guarantee a consistent typeface on the website.

The fonts are installed locally. No personal data is sent to MyFonts. The use of fonts is based on our legitimate interest in ensuring a consistent look for our website (Art. 6(1)(f) GDPR).

Your personal data will be deleted as soon as the storage purpose no longer applies. The data may be stored beyond this point if required by the European or national legislator in EU regulations, laws or other provisions to which the data controller is subject or if longer storage is required in individual cases due to the assertion or possible assertion of claims against us in connection with a contract or pre-contractual measures. If any statutory retention obligation precludes deletion of your data, we will initially merely block the data and only delete it upon expiry of the retention obligation period.

This provision applies to all data processing operations detailed in this declaration, unless otherwise specified in individual cases.

Withdrawal Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. An informal email sent to us is sufficient for this purpose. The legality of the data processing carried out until any such withdrawal of consent remains unaffected by the withdrawal.

The right to lodge a complaint with the relevant supervisory authority In the event of violations of data protection law, the data subject has the right to lodge a complaint with the relevant supervisory authority. The supervisory authority responsible for matters relating to data protection law is the state data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found via the following link:

www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

The right to data portability You have the right to demand that any data we automatically process on the basis of your consent or for the purpose of fulfilling a contract be surrendered to you or a third party in a commonly used, machine-readable format. If you ask for the data to be directly transferred to another responsible party, this will be done only if it is technically feasible.

The right to information, restriction of processing and erasure Within the scope of the statutory provisions, you have the right at any time to receive information on the personal data stored about you as well as information on the origin and recipients of such data, without having to pay for such information. Where applicable, you also have the right to rectify or erase this data or restrict its processing. If you require any further information in this regard or have any other questions on the subject of personal data, you can contact us at any time using the address provided in the legal notice.

We reserve the right to change our privacy policy if this is necessary due to the development of new technologies.

Please make sure you have the latest version. If fundamental changes are made to this privacy policy, we will announce these changes on our website.