Privacy Information

This privacy information informs you in Part A about the processing of your personal data in connection with the use of our website [https://irland.ahk.de/ie] (hereinafter collectively referred to as the “Website”) and the functions provided via it; in Part B we inform you about local data protection requirements and special forms of processing.

I. Name and Address of the Controllers

The Website is operated by DIHK and DIHK DEinternational GmbH, both Breite Straße 29, 10178 Berlin, jointly responsible for topic-related content with

AHK Dublin
5 Fitzwilliam Street Upper
Dublin 2
D02 YH95
Ireland
patrick.bamming@ahk.ie

We are happy to provide you with excerpts from the joint controllership agreement. Please contact ahk[at]ahk.de.

Processing activities for which the AHK is the sole controller are described below in Part B.

II. Name and Address of the Data Protection Officer

The data protection officer of the controller is:

5 Fitzwilliam St Upper
Dublin 2
D02YH95
Ireland
Tel: +353 (0) 86 0478 222
patrick.bamming@ahk.ie

III. Provision of the Website and Creation of Server Logfiles

1. Categories of Data and Description of Data Processing

Each time our website is accessed, the following data is processed:

• IP address;
• Date and time of access;
• Time zone difference to Greenwich Mean Time (GMT);
• Specific website accessed;
• Access status/HTTP status code;
• Each amount of data transferred;
• Website from which you came;
• Browser;
• Operating system and its interface;
• Language and version of the browser software;
• Internet service provider
  (summarised as “server logfiles”).

2. Legal Basis and Purpose of Data Processing

The legal basis for processing your data on the occasion of your use of our website is Art. 6 (1) sentence 1 lit. e), (3) GDPR in conjunction with § 10a IHKG, the public tasks assigned to us, in particular the representation of the overall interests of affiliated traders in the Federal Republic of Germany at national, European and international level, the promotion of the commercial economy, and the coordination and promotion of the AHK network including delegate offices and representations and the foreign trade promotion of the Federal Republic of Germany.

To promote this purpose, the operation of a functional website and the associated processing of personal data is carried out.

3. Duration of Storage

Server logfiles are deleted at the latest after seven days.
In the event of errors, additional logs are created, which are stored for a period of 30 days for error analysis and problem tracking and then deleted.

4. Recipients

Employees of the controllers responsible for maintaining the website have access to server logfiles. In this context, employees of DIHK DEinternational GmbH may also gain access to your personal data. For this reason, AHK, DIHK and DIHK DEinternational GmbH have concluded a group data protection agreement governing the processing and transfer of personal data within the AHK network.

We also use third-party services on our website. Further information on these services and the related data processing can be found in Part B and the cookie settings.

IV. Website Analysis with PIWIK Pro Analytics Suite

1. Categories of Data and Description of Data Processing

We use Piwik PRO Analytics Suite as our website analytics software. We collect data about website visitors in the form of server logfiles and on the basis of cookies. An overview of the cookies set in this context can be found at the following link:
https://help.piwik.pro/support/privacy/cookies-created-for-piwik-pro-users/

A description of the server logfiles can be found under section III.1.

2. Legal Basis and Purpose of Data Processing

The purpose of using PIWIK PRO Analytics Suite is to understand certain usage patterns, such as bounce rate, page views and session duration, in order to understand how our website is used. We can also create visitor profiles based on browser history to analyse visitor behaviour, display personalised content and carry out online campaigns. The legal basis for analytics and conversion tracking is your consent under Art. 6 (1) sentence 1 lit. a) GDPR.

3. Duration of Storage

If you give us your consent for analytics and conversion tracking, we store your personal data for a period of 25 months and delete it afterwards, unless you have withdrawn your consent; in this case, we no longer store personal data from the time we receive the withdrawal. Your withdrawal only applies for the future and does not affect the processing carried out until the withdrawal.

4. Recipients

Recipients of your personal data are employees of DIHK DEinternational GmbH and the AHK entrusted with maintaining the website. It may also occur (e.g. in troubleshooting cases) that employees of PIWIK PRO Analytics Suite, AHK and DIHK DEinternational GmbH gain access to your personal data. PIWIK PRO Analytics Suite uses third-party providers as part of its service delivery, some of which are located in the USA; therefore, your personal data may be transferred to these third-party providers. Further information can be found in the PIWIK PRO privacy policy.

V. Use of Cookies

1. Categories of Data and Description of Data Processing

We use Piwik PRO to manage consents and, for this purpose, collect personal data via cookies. We also use cookies to make our website more user-friendly. Cookies are small text files stored on your computer. An overview of the cookies set in this context can be found at:
https://help.piwik.pro/support/privacy/cookies-created-for-visitors-by-piwik-pro/

Some of the cookies we use are deleted from your hard drive after the end of your browser session (“session”). In addition, we use permanent cookies that remain on your device to recognise you on your next visit to our website.

When cookies are set, they process certain user information to the extent described in the link.

You can control the use of cookies at any time via your browser settings. You can delete or block cookies there. However, this may limit the functionality of our website. Social media buttons are also used on our website; please refer to section VIII for more information.

2. Legal Basis and Purpose of Data Processing

The legal basis for consent management via PIWIK PRO is our legitimate interest pursuant to Art. 6 (1) sentence 1 lit. f) GDPR in compliant and user-specific consent management.

If personal data is processed by individual cookies we set, the processing is based on the following legal bases:

• Necessary cookies: Processing is based on our legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f) GDPR, as these cookies are required for the proper functioning of the website. The setting of the cookies is additionally based on § 25 (2) no. 2 TDDDG, according to which the storage of information on your device or access to information already stored on your device is absolutely necessary to provide a digital service explicitly requested by you – our website.
• All other cookies: Setting these cookies pursuant to § 25 (1) TDDDG and processing personal data is based on your consent under Art. 6 (1) sentence 1 lit. a) GDPR. These cookies collect information about your use of our website, which we use to improve functionality and user experience.

3. Duration of Storage

Data relating to consent management is stored for 25 months.
An overview of cookies and their storage periods can be found under:
https://help.piwik.pro/support/privacy/cookies-created-for-visitors-by-piwik-pro/

4. Recipients

Employees of the controllers responsible for maintaining the website have access to your personal data. In troubleshooting cases, PIWIK PRO employees may also have access. Where PIWIK PRO gains access to personal data, we have concluded the necessary agreements to protect your personal data, including data processing agreements pursuant to Art. 28 GDPR, obliging PIWIK PRO to confidentiality.

VI. Map Service

i. Categories of Data and Description of Data Processing

We have integrated the map service “OpenStreetMap” (“OSM”) into our website. This is a service provided by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom, which is the controller for OSM within the meaning of Art. 4 no. 7 GDPR.

The map display is only shown after you have given your consent.

To display OSM, server logfiles are transmitted to the OpenStreetMap Foundation. For information on how your personal data is processed by the OpenStreetMap Foundation, please see their privacy policy at:
https://osmfoundation.org/wiki/Privacy_Policy

ii. Legal Basis and Purpose of Data Processing

The legal basis for the processing of your personal data is your consent according to Art. 6 (1) sentence 1 lit. a GDPR. The processing serves the display of a map for the purpose of location display and route planning.

iii. Duration of Storage

Information on processing and storage period can be found at:
https://osmfoundation.org/wiki/Privacy_Policy

iv. Recipient

The OpenStreetMap Foundation is the recipient of your personal data.

VII. Automated Decision-Making and Profiling

With the exception of the processing described in section V, your personal data is not processed by us for automated decision-making and/or profiling.

VIII. Obligation to Provide Personal Data

You may choose not to provide us with your personal data or to provide it only incompletely. In such a case, for example if you prevent a cookie from being stored, you may not be able to use all functions of our website. If you wish to become a member and do not provide us with your personal data, we may not be able to process your membership application.

IX. Rights of the Data Subject

You may directly contact the AHK in writing or by e-mail [info@ahk.ie] to exercise the following rights:

• Access to your data in order to check and verify it,
• Receipt of a copy of your personal data,
• Rectification, erasure or restriction of processing, including the right to complete incomplete or incorrect data by providing supplementary information,
• Right to object to processing; please note that under Art. 21 GDPR you have the right to object to the processing of personal data processed by us on the basis of legitimate interests under Art. 6 (1) sentence 1 lit. f) GDPR; the right to object applies where processing is carried out for reasons relating to your particular situation; where the objection concerns processing for direct marketing purposes, you have a general right to object without the need to provide a particular reason,
• You may receive the data you have provided in a structured, commonly used and machine-readable format and transmit this data to another controller, provided that the processing is based on your consent or on a contract.

If you have given us your consent to process your personal data, you may withdraw it at any time with effect for the future.

You also have the right to lodge a complaint with a supervisory authority in connection with the processing of your personal data. To exercise this right, you may contact the authority responsible for your place of residence or the authority responsible for the AHK:

Data Protection Commission
6 Pembroke Row
Dublin 2
D02 X963
Ireland

Part B — Local Data Protection Requirements and Special Forms of Processing

I. Special Forms of Processing

1. Registration as a Member

i. Categories of Data and Description of Data Processing

On our website, we offer you the opportunity to submit an application for membership. For this purpose, we process:

• the amount of the membership fee, which depends on the size of the company,
• information about the company, such as company name, street, house number, postal code, city, email address, number of employees, annual turnover in million euros,
• information about the contact person, such as first name and last name, language skills, telephone number, email address.

The aforementioned data are mandatory fields in the form embedded in our website.

You may also voluntarily provide us with the following additional data:

• indication of whether a so-called premium membership is desired,
• function of the contact person,
• additional contact persons, for example from management, human resources, marketing and finance departments, in each case especially including
  • first name and last name,
  • function,
  • language skills,
  • telephone number, and
  • email address.

At the time of submitting the application, server logfiles are also processed.

ii. Legal Basis and Purpose of Data Processing

The legal basis for the processing of the data marked as mandatory fields is Art. 6 (1) sentence 1 lit. b GDPR, i.e. the processing is necessary for the performance of pre-contractual measures — in particular the review of your membership application — which take place at your request.

The legal basis for data not marked as mandatory and voluntarily provided by you is your consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR. The voluntarily provided information helps us to obtain a more complete picture of your membership.

iii. Duration of Storage

We store the data marked as mandatory fields for as long as you maintain your membership application. A separate privacy notice for members will be provided to you.

Regarding the data you provide to us voluntarily, you may withdraw your consent at any time. You may declare the withdrawal via email to info@ahk.ie. We store your data until we receive such a withdrawal.

iv. Recipients

Access to your personal data is granted to those employees of the AHK who are responsible for handling membership applications. In addition, it may occur that employees of other chambers of commerce abroad or employees of DIHK or DIHK DEinternational GmbH (collectively referred to as the “AHK network”) also gain access to your personal data, as the AHK receives support from DIHK DEinternational GmbH and DIHK with central services such as controlling, accounting, office, process and quality management, and IT services. For this purpose, we have concluded a group-internal data transfer and processing agreement with the AHK network.

2. Contact Form and Email Contact

i. Categories of Data and Description of Data Processing

If you use the contact form embedded on our website to contact us, we process:

• your full name,
• your company,
• your email address, and
• a message.
  These data are marked as mandatory fields.

We also process server logfiles (see IV.1) in addition to the personal data described here at the moment you access our contact form.

Alternatively, you may contact us via the email address provided.
In this case, the personal data transmitted with the email are processed.

ii. Legal Basis and Purpose of Data Processing

The legal basis for the processing of your data marked as mandatory fields is Art. 6 (1) sentence 1 lit. b GDPR, i.e. your request made to us. The same applies to contact made by email.

The legal basis for data not marked as mandatory and voluntarily provided by you is your consent according to Art. 6 (1) sentence 1 lit. a GDPR. You may withdraw your consent at any time by emailing info@ahk.ie. We store your data until the withdrawal is received.

We process your personal data in order to handle and respond to your enquiry.

iii. Duration of Storage

Your personal data will be deleted as soon as your enquiry has been fully processed. If you have given us consent, we process your data until you withdraw your consent or your enquiry has been fully answered.

iv. Recipients

Access to your personal data is granted to those AHK employees responsible for responding to enquiries. It may also occur that employees of DIHK DEinternational GmbH and/or other AHKs gain access to your personal data. For this purpose, we have concluded a group-internal data transfer and processing agreement with the AHK network, which incorporates the EU Standard Contractual Clauses. You can view the EU Standard Contractual Clauses at:
https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

3. Cookies

In addition to the cookies described in Part A set by Piwik, this local website also sets the following cookies:

Outlook

If you use functions on our website that are provided by Microsoft Outlook or Microsoft 365, such as calendar bookings, embedded forms, etc., these are services provided by Microsoft (hereinafter “Microsoft”) embedded in our website. Microsoft sets the following cookies on your device:

It follows from the overview that some cookies are deleted again from your device after you end your browser session. Additionally, some cookies are classified as “necessary cookies”: these are required to ensure that our website functions and displays correctly.

The legal basis for setting these cookies is your consent under Art. 6 (1) sentence 1 lit. a GDPR, except for necessary cookies, which may be set on the basis of our legitimate interest under Art. 6 (1) sentence 1 lit. f GDPR, as they are required for the proper functioning of the website. The setting of such cookies also relies on § 25 (2) no. 2 TDDDG, which allows storing or accessing information on your device when strictly necessary to provide a digital service expressly requested by you — our website.

Further information on data processing by Microsoft can be found in Microsoft’s Privacy Statement:
https://www.microsoft.com/de-de/privacy/privacystatement

It follows from the overview that some cookies are deleted after your browser session; these are known as “session cookies.”

The legal basis for setting these cookies is your consent under Art. 6 (1) sentence 1 lit. a GDPR. Further information about data processing by YouTube can be found in Google’s privacy policy:
How Google uses cookies – Privacy & Terms – Google

4. Social Media Button

On our website you will find social media buttons for the following social networks:

i. LinkedIn

The operator of the social media button is LinkedIn Ireland Unlimited Company (“LinkedIn”), Wilton Place, Dublin 2, Ireland.
When you activate the social media button, your browser connects to LinkedIn’s servers. Your personal data is transmitted to LinkedIn. If you are logged into your LinkedIn account while visiting our website, LinkedIn may associate this information with your personal LinkedIn account.

Information on the processing of your personal data by LinkedIn can be found in LinkedIn’s privacy policy at:
www.linkedin.com/legal/privacy-policy

The legal basis for your use of the social media button is your consent under Art. 6 (1) sentence 1 lit. a GDPR.

The transmission of this data takes place regardless of whether you have a Google user account through which you are logged in or whether you do not have a user account. If you are logged into a Google account while visiting our website, this data will be associated with your account. If you do not want this association, you must log out of your Google account before activating the video. Information on the processing of your personal data by YouTube can be found in YouTube’s privacy information:
Privacy Policy – Privacy & Terms – Google

ii. Facebook

The operator of the social media button is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
If you activate the social media button while simultaneously logged into your Facebook account, Facebook may associate your usage with your user account.

Further information about the handling of personal data when using Facebook can be found in Facebook’s privacy information at:
de-de.facebook.com/policy.php

iii. Instagram

The operator of the social media button that displays a camera icon is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Instagram”).
When you activate the social media button, your browser establishes a direct connection to Instagram’s servers, and your personal data is transmitted. If you are logged into your Instagram account while visiting our website, Instagram will associate your visit with your account.

Information on Instagram’s data processing can be found at:
https://privacycenter.instagram.com/policy

iv. X (formerly Twitter)

The operator of the social media button is Twitter International Unlimited Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07, Ireland (“X”).
When you activate the retweet button, your personal data is transmitted to X.
If you are logged into your X account during your visit, X may assign this information to your account.

Information on data processing by X can be found in X’s privacy policy.

v. Xing

The operator of the social media button for the social network Xing is New Work SE (“XING”), Am Strandkai 1, 20457 Hamburg, Germany.
When you activate the XING button, your browser connects to XING’s servers. Your personal data is transmitted to XING. If you are logged into your XING account during your visit, XING may associate this information with your personal account.

Information on XING’s data processing can be found in their privacy policy at:
www.xing.com/privacy

5. Support for Overseas Expansion – Appointment Scheduling With a Local AHK

i. Categories of Data and Description of Data Processing

If you have used the service “Support for Overseas Expansion” on the AHK.de website, entered your personal data there, and have now been redirected to our website via the appointment link, we now process your personal data to offer you an appointment with a suitable contact person. For this purpose, we process the following categories of data:

• your first and last name,
• your business email address,
• the rough background information you provided, such as region, industry and desired service, and
• the date and time of the appointment you have selected.

If you also entered the following voluntary personal data on the AHK.de website:

• your business telephone number,
• company name,
• company size, particularly number of employees, and
• questions and comments that you may enter in a free-text field,

then we also process these.

ii. Legal Basis and Purpose of Data Processing

The legal basis for processing the data originally marked as required fields, including the date and time of your requested appointment, is your request to us pursuant to Art. 6 (1) sentence 1 lit. b GDPR.

The legal basis for the data that are not marked as required and voluntarily provided by you is your consent under Art. 6 (1) sentence 1 lit. a GDPR. The voluntarily provided information helps us obtain a more complete picture regarding your membership.

iii. Duration of Storage

Your personal data will be processed for the duration of the expansion support process.

iv. Recipients

Access to your personal data is granted to employees of the AHK responsible for answering your enquiry. In addition, it may occur that employees of DIHK DEinternational GmbH and/or other AHKs also gain access to your personal data. For this purpose, we have concluded a group-internal data transfer and processing agreement with the AHK network, which incorporates the EU Standard Contractual Clauses. You can view the EU Standard Contractual Clauses at:
https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de