Website User Policy

I. Name and address of the person responsible

The person responsible within the meaning of the General Data Protection Regulations (GDPR) and other national data protection laws of the member states as well as other data protection regulations is the:

German-New Zealand Chamber of Commerce Inc.
Level 13 HSBC Tower, 188 Quay Street
Auckland 1010 New Zealand
Tel .: +64 9 304 0120
E-Mail: admin@germantrade.co.nz
Website: www.germantrade.co.nz; www.neuseeland.ahk.de/

II. Name and address of the data protection officer

Daniela Collins, Administration & Events Coordinator
German-New Zealand Chamber of Commerce Inc
Level 13 HSBC Tower, 188 Quay Street
Auckland 1010 New Zealand
Tel .: +64 9 304 0700
E-Mail: dcollins@germantrade.co.nz
Website: www.germantrade.co.nz; www.neuseeland.ahk.de/

III. General information about data processing

1. Scope of processing of personal data

In principle, we process personal data of our users only insofar as this is necessary to provide a functioning website and our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies to cases in which prior consent cannot be obtained for legitimate reasons and the processing of the data is permitted by law.

2. Legal basis for the processing of personal data

If we obtain the consent to process personal data of the person to whom the data relates, Art. 6 para. 1 lit. from the EU General Data Protection Regulations (GDPR) serves as the legal basis for the processing that personal data. Art. 6 para. 1 lit. from the GDPR also serves as the legal basis for processing the personal data of the person who is a party to a contract in relation to the performance of that contract. This also applies to pre-contractual processing operations. If processing is necessary to safeguard the legitimate interests of our organisation or a third party, and if the interests, fundamental rights and freedoms of the person to whom the data relates, do not prevail over the other party's interests, Art. 6 para. 1 lit. of the GDPR forms the legal basis for processing that data.

3. Data deletion and storage duration

Personal data will be deleted or blocked as soon as the purpose of the storage is fulfilled. In addition, such storage may take place if permitted by the European or national legislator of EU regulations, laws or other regulations applicable to the organisation or the data protection officer. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned above expires, unless there is a need for further storage of the data to finalise a contract or fulfil contractual obligations.

I. Provision of the website and creation of logfiles

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the other server.
The following data is collected:
(1) Information about the browser type and version used
(2) The operating system of the user
(3) The Internet service provider of the user
(4) The IP address of the user
(5) Date and time of access
(6) Web sites accessed by the user's system through our website

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. from the GDPR.

3. Purpose of the data processing

The temporary storage of the IP address by the system is necessary to allow access to the website from the computer of the user. To do this, the user's IP address must be kept for the duration of the session.
Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. If the data is collected in order to provide access to the website, the deletion will take place when the relevant session is completed.

Where the data is collected for storage in log files, the deletion will take place within seven days. A longer storage period is possible, in such cases, the IP addresses of the users will be deleted or altered, so that the user can no longer be identified.

5. Opposition and removal possibility

The collection of data to enable access to the website and the storage of the data in log files is essential for the operation of the website. Accordingly, anyone seeking access to the website does not have a right to object.

II. Use of cookies

a) Description and scope of data processing

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser be identified even after a page break. However, no personal data is collected.

The following data is stored and transmitted in the cookies:

(1) fonts = standard cookie variable which is used by us to reload the fonts in the browser during an update.

(2) fullcss = standard cookie variable which we use to reload the CSS file in the browser during an update.

Maximum lifetime of cookies: 730 days
In addition, we use cookies on our website that allow an analysis of users' browsing behavior. The following data can be transmitted as part of that process:

_ga = Unique identifier of Google Analytics for individual user identification (composed of Client ID + timestamp) | Standard expiry period 2 years
_gat = parameter which causes Google Analytics to reduce the query rate
_gid = Unique Identifier of Google Analytics to Identify a User (composed of Client_ID + Timestamp) | Standard expiry period 24 hours

The data of the users collected in this way is anonymised by technical precautions so that the user can no longer be identified. The data will not be stored alongside any other personal data of the user.

When accessing our website, users are informed via an information banner about the use of cookies for analytical purposes with a cross reference to this privacy policy and instructions on how the storage of cookies in the browser settings can be prevented.
If you do not want tracking, you can disable it in the Google Analytics section of this privacy policy.

b) Legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies is Article 6 (1) lit. of the GDPR. The legal basis for the processing of personal data using cookies for analytical purposes is the consent of the user Art. 6 para. 1 lit. of the GDPR.

c) Purpose of the data processing

If technically necessary cookies are used:

The purpose of using technically necessary cookies is to facilitate the use of websites for users. Some features of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page break.

We require cookies for the following applications:

(1) fonts = standard cookie variable which is used by us to reload the fonts in the browser during an update.
(2) fullcss = standard cookie variable which we use to reload the CSS file in the browser during an update.

Maximum lifetime of the cookie: 730 days

The user data collected through technically necessary cookies will not be used to create user profiles.
The use of the analytical cookies is for the purpose of improving the quality of our website and its contents. Through the use of analytical cookies, we learn how the website is used, so we can constantly optimize our offer.

In this way, the following data can be transmitted:

_ga = Unique identifier of Google Analytics for identifying a user (composed of Client_ID + timestamp) | Standard expiry period 2 years

_gat = parameter which causes Google Analytics to reduce the query rate

_gid = Unique Identifier of Google Analytics to Identify a User (composed of Client_ID + Timestamp) |Standard expiry period 24 hours

e) Duration of storage, objection and disposal option

Cookies are stored on the computer of the user and transmitted to us. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to fully use all the functions of the website.

III. Newsletter

1. Description and scope of data processing

You can subscribe to a free newsletter on our website. When registering for the newsletter, the data from an input template entered with iFrame is transmitted to the service provider for e-mail marketing software providers commissioned by us.

The following data is recorded:
- Title
- Name
- Surname
- E-mail address

In addition, the following data is collected upon registration:

- Date and time of registration

For the processing of the data, your consent is obtained during the registration process and reference is made to this privacy policy.

In connection with the processing of data for sending of newsletters, with the exception of the provider of the e-mail marketing software, there is no disclosure of the data to third parties. The data will be used exclusively for sending the newsletter.

3. Legal basis for data processing

The legal basis for the processing of the data after the user has registered for the newsletter, is the consent of the user Art. 6 para. 1 lit. of the GDPR.

If we send a newsletter pursuant to a member's registration details on our system, the legal basis is Art. 6 para. 1 lit. Of the GDPR.

4. Purpose of the data processing

The collection of the user's e-mail address enables the delivery of the newsletter.

5. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. The e-mail address of the user is therefore stored for as long as the newsletter subscription is current.

6. Newsletter tracking

To optimize our newsletter offer, we use personalized newsletter tracking. In addition to the e-mail address, we also record the activities associated with newsletter delivery (clicking behavior).

7. Opposition and removal possibility

Subscription to the newsletter may be terminated at any time by the user concerned via a link provided in each newsletter. Alternatively, you can also send an e-mail to our e-mail address.

IV. Registration (application for membership, event registration, order of publication)

1. Description and scope of data processing

On our website, we offer users the opportunity to register with us by providing personal information. The data is entered into an input template and transmitted to us and stored. The data is not transferred to third parties. The following data is collected during the registration process: At this point the appropriate data will be listed.

- Company Name
-Address
-Email
-Position 
-Telephone number
-Fax number -Website
-CEO /Principal
-Year of establishment
-Number of employees
-Parent Company
-Parent Company address

At the time of registration, the following data is also stored:
- Date and time of registration
- Browser used
- Operating system
As part of the registration process, the consent of the user to process this data is obtained.

2. Legal basis for data processing

Legal basis for the processing of the data is the consent of the user Art. 6 para. 1 lit. of the GDPR.

If the registration forms part of the fulfillment of a contract to which the user is a party or the implementation of pre-contractual steps, an additional legal basis for the processing of the data is Art. 6 para. 1 lit. of the GDPR.

3. Purpose of the data processing

A registration of the user is necessary to fulfill a contract with the user or to carry out pre-contractual steps.
Your registration may be in the form of an application for membership or registration for an event. Further information can be found in our information requirements:

Information requirement for membership applications
Information obligation for event registration

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection.

This is the case if during the registration process for the performance of a contract or for the performance of pre-contractual steps it becomes apparent that the data is no longer required. Even after the conclusion of the contract, there may be a need to store personal data of the contracting party in order to comply with contractual or legal obligations.

5. Opposition and removal possibility

As a user, you have the option of canceling the registration at any time. You can change the data stored about you at any time. To add or delete your data, please write admin(at)germantrade.co.nz.

If the data is required to fulfill a contract or to carry out pre-contractual steps, premature deletion of the data is only possible, to the extent that contractual or legal obligations do not preclude deletion.

V. Contact form and e-mail contact

1. Description and scope of data processing

A contact form is available on our website. This can be used to establish electronic contact. If a user has accepted this option, the data entered on the input template will be transmitted to us and saved.

At the time of sending the message, the following data is also stored:
- Date and time of registration
- Browser used
- Operating system
Your consent for the processing of the data is obtained in the context of the sending process, and a reference is made to this privacy statement.
Alternatively, contact is possible via the e-mail address you provided. In this case, the user's personal data transmitted by e-mail will be stored.
In this context, there is no disclosure of the data to third parties. The data is used exclusively for processing the conversation.

2. Legal basis for data processing

The legal basis for the processing of the data is in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR.
The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) lit. f DSGVO. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.

3. Purpose of the data processing

The processing of the personal data from the input template is provided to us solely for the purpose of processing your contact initiation. In the case of contact via e-mail, this also includes our legitimate interest in processing the data.
Other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. Therefore, the personal data collected from the contact form and those sent by e-mail, will be deleted when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant subject matter has been finally clarified.

The additional personal data collected during the sending process will be deleted at the latest after a period of three months.

5. Opposition and removal possibility

The user may at any time revoke the user's consent to the processing of the personal data. If the user contacts us by e-mail, the user may object to the storage of their personal data at any time. In such a case, the conversation will not continue.

The revocation of the consent and the objection against the storage, can be delivered to us in writing by e-mail to: admin(at)germantrade.co.nz

In such cases, all personal data stored in the course of contacting each other will be deleted.

VI. Transfer of personal data to third parties

1. Website operator
In the context of order processing, personal data is passed on to the agency tasked with the operation of the website and the technical service provider. The agreement with the service provider is governed by a separate agreement with the service provider.

2. Social Media Sharing Button
Social media plugins usually cause every visitor to a page to be immediately tracked by these services with their IP address and their other browsing behavior logged. This can be done even if you do not press the button. To prevent this, we use the Shariff method. In doing so, the direct contact between the social network and you will not be established by our social media buttons until you click on the respective share button. If you are already logged in to a social network, this will be done on Facebook and Google+ without another window. On Twitter, a pop-up window appears where you can still edit the tweets text. You can publish our content on social networks without them being able to create complete surf profiles.

Google +
Our site uses plugins from Google + Google's social network, 1600 Amphitheater Parkway, Mountain View, CA 94043, United States. The Shariff method tells Google if you have pressed the button. If you activate the plugin while you are logged in to Google + at the same time, Google + can assign your usage to your user account. We are not aware of the possible collection and use of your data by Google +. For more information, please see the Google Privacy Policy at www.google.com/intl/en/policies/privacy/. In addition, we refer you to the general handling and deactivation of cookies on our general presentation in this privacy policy.

Xing
Our site uses the Xing Share plugin of the social network Xing, XING AG, Dammtorstraße 30, 20354 Hamburg, Germany. If you click this button, your browser connects to Xing to perform the functions of the plugin. However, no personal data will be stored from you by Xing, nor will your use be recorded via a cookie. For more information, see Xing's privacy policy at www.xing.com/privacy. In addition, we refer you to the general handling and deactivation of cookies on our general presentation in this privacy policy.

LinkedIn
Our site uses LinkedIn's social networking plugin, from LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. If you click this button, your browser connects to LinkedIn to perform the functions of the plugin. However, no personal data is stored by you through LinkedIn, nor is your use recorded via a cookie. For more information, visit the LinkedIn privacy statement See www.linkedin.com/legal/privacy-policy. In addition, we refer you to the general handling and deactivation of cookies on our general presentation in this privacy policy.

YouTube videos
We have occasionally included YouTube videos on our website, which are stored on the servers of the provider YouTube and are playable from our website via an embedding. Embedding the videos is done with the advanced privacy option enabled. When you play these videos, your computer will store YouTube cookies and DoubleClick cookies and may transfer data to YouTube Inc., Amphitheater Parkway, Mountain View, CA 94043, as the YouTube operator.
When playing videos stored on YouTube, at least the following information will be transmitted to Google Inc. as the YouTube operator and operator of the DoubleClick network as of today: IP address and cookie ID, the specific address of the page we visited, system date and time the call, identifier of your browser.
Whether you have a Google Account on which you are logged in or whether you do not have a user account, the transfer of this information occurs. If you're signed in, Google may directly associate this information with your account. If you do not want to be assigned to your profile, you must log out before activating the play button for the video.

Google Maps
This website uses the Google Maps software provided by Google Inc. By using this site, you consent to the collection, processing and use by Google and its agents of any automated data collected.

Terms of Use Google Maps.
https://maps.google.com/help/terms_maps.html

Further information on the purpose and extent of the data collection and its processing by Google can be found on this information page. https://policies.google.com/privacy?hl=en

Website analysis with Google Analytics
This website uses the "Google Analytics" service provided by Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA) to analyze users' website usage. The service uses "cookies" - text files stored on your device. The information collected by the cookies is usually sent to a Google server in the US and stored there.

This website accesses the IP anonymization. The IP address of users is shortened within the member states of the EU and the European Economic Area. This reduction eliminates the personal reference of your IP address. Under the terms of the agreement, which website operators have entered into with Google Inc., they use the information collected to compile an evaluation of website activity and site activity, and provide Internet-related services.

You have the option to prevent the storage of cookies on your device by making the appropriate settings in your browser. There is no guarantee that you will be able to access all features of this website without restriction if your browser does not allow cookies.

Furthermore, you can use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. The following link leads you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=en

You can prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie will be set which prevents the future collection of your data when visiting this website:

Google Analytics deactivate
Here's more information on Google Inc's data usage:
https://support.google.com/analytics/answer/6004245?hl=en

VII. Rights of the data subject

Under the EU Data Protection Regulation, you have the following rights: If your personal data is processed, you have the right to obtain information about the data stored about you (Art. 15 GDPR).

If incorrect personal data is processed, you are entitled to a correction (Art. 16 DSGVO).

If the legal prerequisites exist, you can request the deletion or limitation of the processing and appeal against the processing (Articles 17, 18 and 21 DSGVO).

If you have consented to the data processing or a data-processing contract and the data processing is carried out using automated procedures, you may be entitled to data transferability (article 20 GDPR).

If you make use of your rights mentioned above, the German New Zealand Chamber of Commerce checks whether the legal requirements for this are met.