Logo of The German Chambers of Commerce Abroad

Data Privacy Policy

This privacy notice informs you about the processing of your personal data in connection with the use of our website www.ahk.de (hereinafter collectively referred to as the “website”).

Data Privacy Policy

I. Name and address of the controller

The data controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States, as well as other data protection provisions, is:

Deutsche Industrie- und Handelskammer
Breite Straße 29 
10789 Berlin
info@dihk.de
Website: www.ahk.de
 

II. Name and address of the data protection officer

The data protection officer of the controller is:

Kei-Lin Ting-Winarto
Breite Straße 29
10789 Berlin
Germany
Tel.: +49 (0)3020308-2717
Email: ting-winarto.kei-lin@dihk.de 
 

III. Provision of the Website and Creation of Server Log Files

1. Categories of Data and Description of Data Processing

The following data is processed each time our website is accessed:

  • IP address;
  • date and time of access;
  • time zone difference to Greenwich Mean Time (GMT);
  • specifically accessed website;
  • access status/HTTP status code;
  • amount of data transmitted;
  • website from which you accessed our site;
  • browser;
  • operating system and its interface;
  • language and version of the browser software;
  • internet service provider


(collectively referred to as “Server Log Files”)."
 

2. Legal Basis and Purpose of Data Processing

We process your personal data in connection with your use of our website based on Article 6(1)(e) and Article 6(3) of the General Data Protection Regulation (GDPR), in conjunction with Section 10a of the German Act on Chambers of Industry and Commerce (IHKG). This processing is necessary for the performance of public tasks assigned to us.
 

These tasks include:

  • Representing the collective interests of affiliated businesses in Germany at national, European, and international levels,
  • Promoting the commercial economy,
  • Coordinating and supporting the global AHK (German Chambers of Commerce Abroad) network, including delegate offices and representations,
  • Supporting the foreign trade promotion efforts of the Federal Republic of Germany.


To fulfill these responsibilities, we operate a functional website and process personal data as required for its operation and improvement.
 

3. Duration of Storage

Server log files are deleted no later than seven days after their creation.

In the event of an error, additional logs are generated, which are stored for a period of 30 days for error analysis and problem tracking purposes, and subsequently deleted.

 

4. Recipient

Those employees of the data controller who are entrusted with maintaining the website have access to server log files. In this context, employees of DIHK DEinternational GmbH may gain access to your personal data. For this reason, DIHK and DIHK DEinternational GmbH have entered into a data protection group agreement that governs the processing and transmission of personal data.

We also use third-party services on our website. Further information on these services and the related data processing can be found in [Part B] and in the cookie settings.

 

IV. Website Analysis with PIWIK Pro Analytics Suite

1. Data Categories and Description of Data Processing

We use Piwik PRO Analytics Suite as our website analytics software. We collect data about website visitors in the form of server log files and on the basis of cookies.

An overview of possible cookies used in this context can be found at the following link: https://help.piwik.pro/support/privacy/cookies-created-for-piwik-pro-users/.
 

2. Legal Basis and Purpose of Data Processing

The purpose of using the Piwik PRO Analytics Suite is to track specific usage patterns, such as bounce rates, page views, and session duration, in order to understand how our website is used. We may also create visitor profiles based on browsing history to analyse visitor behaviour, display personalized content, and conduct online campaigns.

The legal basis for analytics and conversion tracking is your consent pursuant to Article 6(1) (a) of the GDPR.
 

3. Duration of Storage

If you grant us your consent for analytics and conversion tracking, we will store your personal data for a period of 25 months and subsequently delete it, unless you have revoked your consent in this regard. In the event of a revocation, we will cease the processing of personal data from the time your withdrawal of consent is received. Your withdrawal of consent shall only take effect for the future and shall not affect the lawfulness of data processing carried out prior to your withdrawal.
 

4. Recipient

Recipients of your personal data include employees of the DIHK and DIHK DEinternational GmbH who are responsible for the maintenance of the website. Additionally, it may occur (for instance, in troubleshooting cases) that employees of Piwik PRO Analytics Suite obtain access to your personal data. In the course of providing its services, Piwik PRO Analytics Suite utilises third-party service providers, some of whom are based in the United States, thereby potentially resulting in the transfer of your personal data to such third parties. Further information can be found in the Piwik PRO Privacy Policy

V. Use of cookies

1. Data Categories and Description of Data Processing

We use Piwik PRO to manage consents and collect personal data through cookies for this purpose. Additionally, we employ cookies to enhance the user-friendliness of our website. Cookies are small text files stored on your device. An overview of possible cookies used in this context can be found at the following link: https://help.piwik.pro/support/privacy/cookies-created-for-visitors-by-piwik-pro/. Some of the cookies we use are deleted from your device at the end of your browser session (‘session cookies’). Furthermore, we also use persistent cookies that remain on your device, for example, to recognise you upon your next visit to our website.

Where cookies are set, they process certain user information to varying extents as described in the above link.

You can control the use of cookies at any time via your browser settings. There you have the option to delete or block cookies. However, this may result in the functionality of our website being restricted. We also use social media buttons on our website; for more information, please refer to the "Social Media Buttons" below.
 

2. Legal Basis and Purpose of Data Processing

The legal basis for the management of consents by PIWIK PRO is our legitimate interest pursuant to Art. 6 (1) (f) GDPR in ensuring legally compliant and usage-specific consent management.

Where personal data are processed through individual cookies set by us, such processing is conducted on the following legal bases depending on the respective cookie:

  • Necessary cookies: The processing of personal data by necessary cookies is based on our legitimate interests pursuant to Art. 6 (1) (f) GDPR, as these cookies are necessary for the proper functioning of the website. The setting of cookies is also based on Section 25 (2) No. 2 of the German Telemedia Act (TDDDG), according to which the storage of information on your device or access to information already stored on your device is absolutely necessary in order for us to provide a digital service that you have expressly requested – our website.
  • All other cookies: The setting of these cookies in accordance with Section 25 (1) German Telemedia Act (TDDDG) and the processing of personal data is based on your consent in accordance with Article 6 (1) (a) GDPR. These cookies collect information about your use of our website, which we use to improve its functionality and your user experience.
     

3. Duration of Storage

Data for the management of consents are retained for a period of 25 months.

An overview of the cookies set by us and their respective retention periods can also be found at the following link: https://help.piwik.pro/support/privacy/cookies-created-for-visitors-by-piwikpro/.
 

4. Recipient

Your personal data will be accessed by those employees of the data controller who are responsible for maintaining the website. In addition, it may occur (e.g. in troubleshooting cases) that PIWIK PRO employees gain access to your personal data. Insofar as PIWIK PRO employees have access to personal data, we have entered into the necessary agreements to protect your personal data, in particular, data processing agreements in accordance with Art. 28 GDPR, in which PIWIK PRO is obliged to maintain confidentiality.


VI. Map Service

i. Data Categories and Description of Data Processing

We have integrated the map service 'OpenStreetMap' (‘OSM’) into our website. This service is offered by the OpenStreetMap Foundation, whose registered office is at St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom, and which is the data controller within the meaning of Article 4(7) of the GDPR for OSM.

The map display will only be shown once you have given your consent.

In order to display OSM, server log files are transmitted to the OpenStreetMap Foundation. For information on how your personal data is processed by the OpenStreetMap Foundation, please refer to the OpenStreetMap Foundation’s privacy policy at https://osmfoundation.org/wiki/Privacy_Policy.
 

ii. Legal Basis and Purpose of Data Processing

The legal basis for the processing of your personal data is your consent pursuant to Article 6(1)(a) of the GDPR. The processing of your personal data serves the purpose of displaying a map for the purposes of location display and route planning
 

iii. Duration of Storage

For information on processing and storage periods, please refer to: https://osmfoundation.org/wiki/Privacy_Policy
 

iv. Recipient

The OpenStreetMap Foundation is the recipient of your personal data.


VII. Automated Decision-Making and Profiling  

Except for the processing described under Section V, your personal data will not be processed by us for automated decision-making and/or profiling.


VIII. Obligation to Provide Personal Data 

You may choose not to provide us with your personal data or provide such data only incompletely. In such cases, for example if you prevent the storage of a cookie, this may result in you being unable to use all functionalities of our website. If you wish to become a member and do not provide us with your personal data, we may not be able to process your membership application.


IX. Rights of the Data Subject

You may contact the DIHK directly in writing or by email (ahk[at]ahk.de) to exercise the following rights:

  • Request the disclosure of information about your data so that you can check and verify it
  • Obtain a copy of your personal data,
  • Request the correction, deletion or restriction of processing of your data, including the right to complete any incomplete or incorrect data by means of supplementary communication
  • To object the processing of your data; please note that, pursuant to Art. 21 GDPR, you have the right to object to the processing of personal data that we process on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR; An objection may be made on grounds relating to your particular situation. If your objection concerns the processing of personal data for direct marketing purposes, you have a general right to object without having to specify any particular situation.


You may receive your provided data in a structured, commonly used and machine-readable format and transmit this data to another data controller, provided that you have given your consent to the processing or the processing is based on a contract.

If you have given us your consent for the processing of your personal data, you may withdraw this consent at any time with effect for the future.


You also have the right to lodge a complaint with a supervisory authority concerning the processing of your personal data. To exercise this right, you may contact the competent authority:


Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstraße 219
10969 Berlin

1. Contact form and email contact

i. Data Categories and Description of Data Processing


When you use the contact form embedded on our website to get in touch with us, we process the following data:
 

  • Your full name,
  • Your email address,
  • Your company,
  • A message.


The above data fields are marked as mandatory.


You may also voluntarily provide us with the following information:

  • Salutation,
  • Your telephone number,
  • Information regarding your area of interest in terms of ‘industry’,
  • Information regarding your area of interest in terms of ‘country/region’


We also process server log files (see Section III. 1.) in addition to the personal data described here, when you access our contact form.

As an alternative to our contact form, you can also contact us via the email address provided.

In this case, the user’s personal data transmitted with the email will be processed.


ii. Legal Basis and Purpose of Data Processing

The legal basis for processing your data marked as mandatory fields is, pursuant to Article 6(1)(b) GDPR, your inquiry submitted to us. The same applies to any contact made by you via email.

The legal basis for processing data that are not marked as mandatory and are voluntarily provided by you is your consent pursuant to Article 6(1)(a) GDPR. You may revoke your consent regarding the data you have voluntarily provided at any time. You can declare such revocation via email to ahk[at]ahk.de. We retain your data until we receive your revocation.

We process your personal data for the purpose of handling and responding to your inquiry.


iii. Duration of Storage

Your personal data will be deleted as soon as your enquiry has been answered conclusively. If you have given us your consent, we will process your data until you revoke your consent or your enquiry has been conclusively answered.


iv. Recipient

Access to your personal data is granted to those employees of AHK and DIHK DEinternational GmbH who are entrusted with responding to inquiries. For this purpose, we have concluded an intra-group data transfer and processing agreement with the aforementioned parties. This agreement governs the secure and GDPR-compliant handling of personal data exchanged within the group and ensures adherence to the obligations set forth under Article 28 GDPR regarding data processing, confidentiality, technical and organisational measures, and data subject rights.


2. Support for Expansion Abroad

i. Data Categories and Description of Data Processing

If you would like to contact us or a member of the AHK network for assistance with expanding abroad, you can use the “Support for expansion abroad” function on the website https://www.ahk.de. In order to be matched with a suitable contact, it is initially required that you provide basic background information about your expansion plans, such as:
 

  • the region in which expansion is planned, e.g. Asia-Pacific, MENA, etc., or an indication that there is no preference for a region yet,
  • the sector in which expansion is planned, such as manufacturing, energy and the environment, or any other sector that requires input, and
  • what services the AHK can help you with, such as finding a suitable business partner, market analyses and location analyses, setting up a company, or anything else that requires input.


After you provide us with some basic background information about your expansion plans, we then require your personal data in order to contact you and to provide the support requested by the AHK. For this purpose, we need the following data categories, which are marked as mandatory fields
 

  • Your first name and last name and
  • Your business email address,


In addition, you may also voluntarily provide us with the following information:
 

  • Your business telephone number
  • Company name,
  • Company size, in particular, number of employees, and
  • Questions and comments that you can enter in a free text field.


In addition to the personal data mentioned above, we also process server log files (see Section iii. 1.) as soon as you access this website.


If available, you also have the option of booking an appointment with the relevant AHK via a connected appointment booking system using a link that will be displayed immediately after you have entered your details. By clicking on this link, you will leave the website https://www.ahk.de and be redirected to the AHK responsible for your area based on your entries. Please note that, in this case, the data protection information of the respective AHK applies.


ii. Legal Basis and Purpose of Data Processing

The legal basis for processing your personal data provided as mandatory fields within your input is your request to us pursuant to Article 6(1)(b) GDPR. The legal basis for processing data that is not marked as mandatory and which you voluntarily provide to us is your consent pursuant to Article 6(1)(a) GDPR. You may revoke your consent regarding the data you have voluntarily provided at any time. Such revocation can be declared by email to ahk[at]ahk.de. We will retain your data until receipt of a corresponding revocation.


We process your personal data in order to handle and respond to your enquiry.


iii. Duration of Storage

Your personal data will be deleted as soon as your enquiry has been answered conclusively. If you have given us your consent, we will process your data until you revoke your consent or your enquiry has been conclusively answered.


iv. Recipient

Those employees of the AHK who are responsible for responding to your enquiry will have access to your personal data. In addition, employees of DIHK DEinternational GmbH and/or other AHKs may also have access to your personal data. To this end, we have concluded an intra-group data transfer and processing agreement with AHK-Netz, which includes the EU standard contractual clauses. The EU standard contractual clauses can be found at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de


3. Social Media Buttons


On our website, you will find social media buttons for the following social networks:


i. LinkedIn

The operator of the social media button is LinkedIn Ireland Unlimited Company (hereinafter referred to as “LinkedIn”), Wilton Place, Dublin 2, Ireland. When you click on the social media button, your browser connects to LinkedIn’s servers. Your personal data will be transferred to LinkedIn. If you are logged into your LinkedIn account while visiting our website, LinkedIn may associate this information with your personal LinkedIn account. Information on the processing of your personal data by LinkedIn can be found in LinkedIn’s privacy policy at www.linkedin.com/legal/privacy-policy. The legal basis for your use of the social media button is your consent in accordance with Art. 6 (1) (a) GDPR.

 

ii. YouTube videos

If we embed YouTube videos on our website, these videos are hosted on servers belonging to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “YouTube”). We have embedded the videos using the so-called “advanced privacy settings”. This means that your personal data is not directly transmitted to YouTube when you visit our website. Only when you actively click on the video to play it will your personal data – in the form of server log files and cookie IDs – be transmitted to YouTube, and only at this point will cookies be set by YouTube.


This data is transferred regardless of whether you have a Google user account that you are logged into or whether you do not have a user account. If you are logged into a Google account while visiting our website, this data will be associated with your account by Google. If you do not want the video to be linked to your Google account, you must log out of your Google account before activating the video. For information on how YouTube processes your personal data, please refer to YouTube’s privacy policy, which you can access here: Privacy policy – Privacy policy & Terms of Use – Google


5. LinkedIn Insight Day

i. Data Categories and Description of Data Processing


We use the “LinkedIn Insight Tag” from LinkedIn Ireland Unlimited Company on our website. This tool creates a text file (cookie) in your browser that collects various data, including your IP address, device and browser characteristics, and page events (e.g. your page views). This enables us to better analyse user actions and behaviour on our website, thereby improving our offering and ensuring that our advertising campaigns only reach those people for whom they are relevant.


LinkedIn does not share any personal data with us in this analysis, but provides anonymised reports on the website audience and ad performance. In addition, LinkedIn offers the option of retargeting via the Insight Tag. This enables us to display targeted advertising outside our website without identifying you personally as a website visitor.


For more information on data protection at LinkedIn, please refer to the LinkedIn privacy policy. LinkedIn members can control the use of their personal data for advertising purposes in their account settings.


To deactivate the Insight tag on our website (“opt out”), click here.
 

  • Categories of data subjects: Website visitors
  • Categories of personal data processed: Telemetry and statistical data: this includes IP address, browser type/version, operating system, date, time and time zone, cookie version and cookie lifetime, language, domain and path of the website visited, consents, UID, location information, user agent, screen resolution, referrer URL, information about downloaded files, links clicked, search terms from search engines used.


ii. Legal Basis and Purpose of Data Processing

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR. This may be revoked at any time with effect for the future. We will store your data until we receive a corresponding revocation.

The purpose of processing is to evaluate visitor information in order to optimise our website.


iii. Duration of Storage

Direct identifiers via LinkedIn Insight tags are removed within seven days to pseudonymise the data. The resulting pseudonymised data will be deleted within 180 days.


iv. Recipient

The following entities are recipients of the processed data:

  • LinkedIn Ireland Unlimited, Wilton Place, Dublin 2, Ireland

Privacy settings

Here you can manage your data privacy and consent settings for this website. We request certain data to continually improve your experience on our website. We will only collect and use data for specific uses you have consented to. See the settings page for more details.