Privacy Policy

The WISE Horizons project is coordinated by Universiteit Leiden (Institute of Environmental Sciences, CML). ZOE Institute for Future-Fit Economies gUG is responsible for the website and project communications. For the personal data processed in this context, the two organisations act as joint controllers within the meaning of Article 4(7) and Article 26 GDPR.

Controller 1: website and communications:

ZOE Institute for Future-Fit Economies gUG

Pilgrimstraße 6
50674 Cologne

Email: wise@zoe-institut.de

Represented by its Managing Directors:

Jakob Hafele and Zoe Elsner

If you have any questions or concerns regarding your personal data, you may contact us at the address above.

Controller 2: project coordination:

Institute of Environmental Sciences (CML) – Universiteit Leiden
Rapenburg 70, 2311 EZ Leiden, Netherlands

wise@leidenuniv.nl

Essence of the arrangement: ZOE is responsible for the website, the WISE Horizons Network mailings and related enquiries, and acts as the primary point of contact for data subjects; Universiteit Leiden coordinates the project. Irrespective of this arrangement, you may exercise your GDPR rights with respect to, and against, each of the joint controllers (Article 26(3)).

Data protection contact: wise@zoe-institut.de

You can reach ZOEs Data Protection Officer at ext-dsb@b3-datenschutz.de

Where we ask you to provide personal data, you are free to decide whether or not to provide it. We only process such data on the legal bases set out below. If you do not provide requested data, we may be unable to process your subscription or respond to your enquiry.

Our website can be used without actively providing personal data. When you visit the website, your browser automatically transmits technical information that we store temporarily in a server log file. This typically includes the abbreviated/anonymised IP address, the date and time of the request, the page requested, the referrer URL, the browser type and version, and the operating system.

Purpose: displaying the website correctly and ensuring its stability and security.

Legal basis: Article 6(1)(f) GDPR (our legitimate interest in a secure, functioning website).

Our website is hosted by ALL-INKL.COM, Hauptstraße 68, D-02742 Friedersdorf, acting as our processor under a data processing agreement pursuant to Article 28 GDPR.

Our website uses cookies. Technically necessary cookies are required for the website to function and are used on the basis of Article 6(1)(f) GDPR (in conjunction with § 25(2) TDDDG where an exemption applies). All other cookies — in particular analytics cookies — are only set with your consent (Article 6(1)(a) GDPR, § 25(1) TDDDG). You can give, refuse and withdraw your consent at any time via our Cookie Consent manager. Details on the individual cookies are set out in our separate Cookie Policy.

With your explicit consent, we use the open-source software Matomo to analyse and statistically evaluate the use of our website. For this purpose, cookies may be stored on your device. The information generated is transmitted exclusively to our own secure, self-hosted servers and aggregated into pseudonymous usage profiles.

IP addresses are anonymised (IP masking) immediately, so that they cannot be attributed to an individual user. The data is not passed on to third parties.

Purpose: needs-based design and ongoing improvement of the website user experience.

Legal basis: Article 6(1)(a) GDPR (your consent).

You can withdraw your consent at any time with effect for the future via our Cookie Consent manager or by deleting the cookies in your browser. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

When you subscribe to a WISE Horizons Network email list, we process the email address you provide (and any name or further details you voluntarily add) in order to send you the mailing you requested.

We use a double opt-in procedure: after entering your email address, you receive an email with a confirmation link. The subscription only becomes active once you click that link. If you do not confirm, the registration data is deleted. To provide proof of consent, we store the date, time and IP address of your registration and confirmation.

Legal basis: Article 6(1)(a) GDPR (your consent) for the mailings; Article 6(1)(f)/(c) GDPR for logging the consent (interest in / obligation to be able to demonstrate consent).

Storage period: until you unsubscribe. You can unsubscribe at any time via the link in every mailing; on unsubscription your data is deleted from our active mailing database, except data we must retain as proof of the prior consent.

We use the email platform Brevo (Brevo GmbH, Köpenicker Straße 126, 10179 Berlin). By subscribing, you acknowledge that the data you provide is transferred to Brevo for processing. We have concluded a data processing agreement (Article 28 GDPR) with Brevo. Further information is available in Brevo’s privacy policy https://www.brevo.com/de/legal/privacypolicy/

If you contact us by email or via a contact form, we process the personal data you provide (e.g. name, email address, content of your message) in order to handle your enquiry.

Legal basis: Article 6(1)(b) GDPR where your enquiry concerns a (pre-)contractual matter, otherwise Article 6(1)(f) GDPR (our legitimate interest in responding to enquiries).

Processor: where a contact form is delivered via Brevo, the data is processed by Brevo on our behalf under Article 28 GDPR (see section 7).

Storage period: we delete this data once your enquiry has been dealt with, unless statutory retention obligations apply.

Within the organisations of the joint controllers, only those who need it for the purposes described above have access to your data. In addition, we use carefully selected processors (e.g. the hosting provider and Brevo), each bound by a data processing agreement under Article 28 GDPR. We do not sell your personal data.

The joint controllers and the processors we use process personal data within the EU/EEA. We do not transfer personal data to countries outside the EU/EEA.

We do not use automated decision-making, including profiling, within the meaning of Article 22 GDPR.

We use appropriate technical and organisational measures, including TLS/SSL encryption, to protect your data against unauthorised access, loss or manipulation.

You have the right to:

• access to your personal data (Article 15 GDPR);
• rectification of inaccurate data (Article 16 GDPR);
• erasure (Article 17 GDPR);
• restriction of processing (Article 18 GDPR);
• data portability (Article 20 GDPR);
• object to processing based on Article 6(1)(e) or (f) GDPR (Article 21 GDPR);
• withdraw consent at any time with effect for the future where processing is based on Article 6(1)(a) GDPR (Article 7(3) GDPR), without affecting the lawfulness of processing before withdrawal.

To exercise these rights, please contact wise@zoe-institut.de. As joint controllers, ZOE Institute and Universiteit Leiden are each available to receive your request (Article 26(3) GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR). The German authority competent for ZOE Institute is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany

As the processing also involves a joint controller established in the Netherlands, you may alternatively contact the Dutch supervisory authority (Autoriteit Persoonsgegevens). In any event, you may lodge a complaint with the supervisory authority of your habitual residence or the place of the alleged infringement.

We may update this privacy policy to reflect changes to our processing activities or legal requirements. The current version is always available on this page.