Naturland Academy

Name and address of the person responsible

The person responsible within the meaning of the German Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG-neu) for offering the learning platform under www.academy.naturland.org:

Naturland - Verband für ökologischen Landbau e.V.
Kleinhaderner Weg 1
82166 Gräfelfing
Tel: +49 (0)89 898082-0
Fax: +49 (0)89 898082-90
naturland@naturland.de

Contact information of the Data Protection Officer (DPO)

The DPO can be reached at:
Naturland - Association for Organic Agriculture e.V.
Kleinhaderner Weg 1
82166 Gräfelfing
Tel: +49 (0)89 898082-0
Fax: +49 (0)89 898082-90
datenschutz@naturland.de

1. Circumference

In principle, your personal data is only processed in order to be able to use the learning platform.

2. Legal basis

The legal basis for processing your personal data results from Art. 6 (1) of the EU General Data Protection Regulation (DSGVO). In the event that your consent is required for the processing of your personal data, this results from Art. 6 (1) lit. a DSGVO. If the processing of your personal data is necessary for the fulfilment of a contract or pre-contractual measures, Art. 6 para. 1 lit. b DSGVO serves as the legal basis. Art. 6 para. 1 lit. c DSGVO is the legal basis for processing your personal data to fulfil legal obligations. For the protection of vital interests, Art. 6 para. 1 lit. d DSGVO is the legal basis, for public interests Art. 6 para. 1 lit. e DSGVO applies. If the processing of personal data is necessary to safeguard the legitimate interests of us or other third parties and the interests, fundamental rights and freedoms of the data subjects do not prevail, Art. 6 (1) lit. f DSGVO is the legal basis.

3. Duration of data storage and data deletion

As a matter of principle, we delete your personal data when the purpose for storing it no longer exists. However, it is conceivable that storage beyond this may result from European or national laws, regulations or other provisions to which we are subject as the responsible party. Such data will only be deleted when the corresponding storage periods resulting from the aforementioned legal sources end.

Visit our learning platform:

1. Description and scope of data processing

Whenever you visit our learning platform, we automatically collect information and data from your computer system or mobile device. We receive the following data:

a. Information about the browser type and version used
b. The operating system used
c. Your internet service provider
d. Your IP address
e. Date and time of your access
f. Websites from which you access our learning platform
g. Websites that are accessed from your system via our learning platform

The collected data is stored in log files. We do not store this data together with any other personal data about you.

2. Legal basis for the data processing

Art. 6 para. 1 lit. f DSGVO is the legal basis for the temporary storage of the data or log files.

3. Purpose of the data processing

For the duration of your session, it is necessary to save your IP address in order to be able to deliver our learning platform to your computer or mobile device.The uniform storage in log files ensures the functionality of our learning platform and makes an important contribution to the security of the IT systems.

4. Duration of the storage

Stored log files are usually deleted after seven days. Only if longer storage is necessary, the IP address is alienated so that it is no longer possible to assign it to you.

5. Possibility of objection and removal

There is a right to object. However, as the data is absolutely necessary for the provision of our learning platform, you would no longer be able to use it afterwards.

Registration on our learning platform:

1. Description and scope of data processing

To register on our learning platform and to send information emails, the following login data is collected from you:

a. Salutation
b. Your first name
c. Your name
d. Your self-selected password
e. Your email address
f. Naturland membership

2. Legal basis for the data processing

Art. 6 para. 1 lit. a DSGVO and thus your consent is the legal basis for processing your personal data.

3. Purpose of the data processing

Only by providing your personal data can you register on our learning platform and subsequently use it. In order to send you access data and, if necessary, to remind you of unfinished learning units, it is necessary to provide your e-mail address.

4. Duration of the storage

The personal data collected from you during the registration process will be stored until your account is deleted.

5. Possibility of revocation and removal

You have the possibility to delete your account at any time by clicking on the corresponding field within the learning platform or by informing the responsible person directly.

Use of our learning platform:

1. Description and scope of data processing

To use our learning platform, the following personal data is collected from you:

a. Salutation
b. Your first name
c. Your name
d. Your email address
e. Course evaluation (e.g. access time, session duration, test results)
f. Your forum posts, your chat posts, your wiki posts

This data is summarised in a user profile.

2. Legal basis for the data processing

Art. 6 para. 1 lit. a DSGVO and thus your consent is the legal basis for processing your personal data.

3. Purpose of the data processing

You can only access and use the learning platform by providing your personal data.

4. Duration of the storage

Your user profile data will be stored until your user profile is deleted. Likewise, user profile data is deleted as soon as a course is removed from the learning platform.

5. Possibility of revocation and removal

You have the option of deleting your user profile at any time by clicking on the corresponding field within the learning platform or by informing the person responsible directly.

We share your information with service providers who help or support us. These are companies from the group of affiliated companies or third parties with whom we have concluded appropriate contracts, both within and outside the European Union or EEA. We may also share your data with public authorities such as the police or tax authorities where required by applicable law.

Within the framework of the provisions of the EU General Data Protection Regulation, we transmit personal data in the following cases:

1. Processor

We use providers who process your personal data only on our instructions and act as data processors on our behalf. They support us in setting up or managing the learning platform, ensuring functionality and complying with data protection requirements. They also provide services that cover certain functions of our offering (e.g. sending emails), hosting services, customer service support and services related to tracking and responding to security incidents, troubleshooting and problem solving in the service or on the website for the purpose of analysing website traffic.

2. Requests from authorities

We share data with government agencies when required by law. This is the case, for example, if there is a valid criminal summons, we have to comply with another legal procedure, or we receive a written request from a public authority.

Your rights as a data subject

1. Right of access (Art. 15 GDPR)

You have the right to be informed whether and which of your personal data we process. In accordance with the GDPR, we will provide you with a summary of the personal data upon request. We have a 30-day period under the GDPR to respond to your request for information.

2. Right of rectification (Art. 16 GDPR)

If you inform us that the data we have processed from you is incorrect or incomplete, we will adjust it immediately after a positive check.

3. Right to erasure (Art. 17 GDPR)

We delete personal data immediately upon request, provided that none of the reasons stated in Art. 17 DSGVO prevent this. A deletion can always only take place for the future.

4. Right to restriction of processing (Art. 18 GDPR)

If you so wish, we will restrict the processing of your data if one of the conditions set out in the GDPR applies.

5. Right to notification (Art. 19 GDPR)

We will notify recipients (e.g. data processors) of requests for personal data if we have received a request to correct, restrict or delete your personal data.

6. Right to data portability (Art. 20 DSGVO)

Upon request, we will provide your data in a commonly used, machine-readable format and transfer your personal data to another data controller upon request.

7. Right to object (Art. 21 GDPR)

You may object to the processing of personal data relating to you at any time, provided that the processing is based on Art. 6 para. 1 lit. e or f DSGVO.

8. Revocation

In principle, you can only revoke the processing of your personal data if you have previously given your consent in accordance with Art. 6 para. 1 lit. a DSGVO. A revocation applies exclusively for the future.

International data transmission

In principle, recipients of personal data must be based in the European Union (EU) or the European Economic Area (EEA). Otherwise, data transfer to third countries is only permitted if there is an adequacy decision by the EU Commission, standard contractual clauses approved by the EU Commission are used or approved codes of conduct or corporate rules are involved. The EU Commission adopted an adequacy decision for data transfers to the UK on 28 June 2021. In the absence of an adequacy decision or appropriate safeguards for data transfers to the US, it cannot be ruled out that authorities in the respective third country (e.g. through intelligence collection powers) may gain access to the transferred data in order to collect and analyse it. The enforcement of your data subject rights can therefore not be guaranteed. The processing can be consented to accordingly via the cookie banner or an already granted consent can be revoked.

Right to complain to a supervisory authority

If you believe that the processing of personal data concerning you is not in compliance with the GDPR, you have the right to lodge a complaint with a competent supervisory authority. You are also welcome to contact our data protection officer in advance, who will also be happy to help clarify your questions. An overview of the supervisory authorities in the Federal Republic of Germany can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Our learning platform uses cookies that are temporarily stored on your device. The cookies placed here are exclusively of an essential nature and may therefore be used without your consent, pursuant to Art. 6 (1) lit. f DSGVO. However, you have the right to object. If you object to the use of essential cookies, you must assume that our learning platform will no longer function. No non-essential cookies or social media plugins are used on our learning platform. If videos from corresponding platforms, such as Youtube or VIMEO, are embedded on our learning platform, we have taken technical precautions on our learning platform to prevent the setting of cookies from such third-party providers as far as possible. However, in order to fully ensure this, you should deactivate the "third-party cookies" function in your browser settings. Only then can you be sure that no data is sent outside the EU or EEA.

Terms of use/copyright protection

All documents made available on the learning platform by the responsible person or a user are exclusively for the personal use of the participants, their colleagues or other employees. In particular, since personal data is also used within the framework of the learning platform or for copyright reasons, translation, reprinting or copying of the participant documents is prohibited. Only the person responsible can grant permission for this.