PRIVACY STATEMENT

CLARA CARBON is a trading name of CLARA TERRA Ltd (“Clara Carbon” or “we”) is the operator of the website httpsss://www.claracarbon.com (the “Website”) and collects and processes personal data of individuals using the Website (the “User” or “you”). The protection and confidentiality of your personal data is of particular importance to us. We treat your personal data confidentially and in accordance with the applicable legal data protection laws, in particular with the EU General Data Protection Regulation (the “GDPR“). We process your personal data according to the data processing purposes as listed below.

Any data directly or indirectly referring to you are considered personal data, e. g. name, e-mail address, IP address, etc. We collect and process your personal data on the basis of your express consent or where processing of personal data is permitted by applicable data protection laws. At any rate, we will inform you on the legal basis for the processing of personal data.

We will delete your personal data as soon as the purpose of the storage no longer applies. In addition, data may also be stored if applicable European or national legislature has provided for storage in Union regulations, laws or other provisions which CLARA CARBON is subject to. In particular, CLARA CARBON may be obliged by applicable European or national laws to retain data.

In the following, we inform you on which data are collected in connection with the use of the Website, the legal basis for the processing of personal data, the data processing purposes and how your personal data are processed, the duration of data storage and your rights in connection with data processing carried out by us.

 

1. Name and contact details of the responsible body

The responsible body (the “Controller”) for processing of your personal data is:

CLARA CARBON

Address Arranmore,

9 Killincarrig Road,

Greystones Co wicklow

Ireland

E-Mail: info@claracarbon.com

Website: httpsss://www.claracarbon.com

 

2. Provision of the Website and creation of log files

We automatically collect and store information in so-called server log files, which the computer system of the computer used to use the Website automatically transmits to us: (i) browser type and browser version; (ii) operating system used; (iii) your internet service provider; (iv) your IP address; (v) hostname of the accessing computer; (vi) time of the server inquiry; (vii) websites from which your system reaches our Website; (viii) websites accessed by your system via our Website.

The data are stored in the log files of our system. These data are not stored together with other User’s personal data and are not combined with other data sources.

The legal basis for the temporary storage of data and log files is Art. 6 paragraph 1 lit. f) GDPR. The temporary storage by the system is necessary to enable the Website to be delivered to your computer. The storage in log files is done to ensure the functionality of the Website. In addition, the data are used to optimize the Website and to ensure the security of our information technology systems. For these purposes, the data must be stored for the duration of the session. Our legitimate interest in data processing pursuant to Article 6 paragraph 1 lit. f) GDPR also lies in these purposes. Without collection and storage of data as described, the operation of the Website is not possible.

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. This is the case when the respective session has ended.

 

3. Contact

You have the possibility and you are invited to get in touch with us by sending us an e-mail to the e-mail address provided on our Website. We welcome  your message, suggestion, question or whatever you want to tell us. We store any personal data you transmit with your e-mail to us. They are stored exclusively in order to communicate with you. By entering and submitting your data, you are giving your consent for processing the entered data.

The legal basis for storage and processing of data entered in the contact form is your consent in accordance with Article 6 paragraph 1 lit. a) GDPR, for the storage of personal data transmitted via e-mail Article 6 paragraph 1 lit. f) GDPR. The storage of the latter is necessary for communication with you being the legitimate interest in data processing pursuant to Article 6 paragraph 1 lit. f) GDPR.

We will delete your personal data as soon as the purpose of the storage no longer applies.

NOTES ON EMAIL COMMUNICATION

We will of course make every effort to store your personal data in such a way that they are not accessible to third parties by using all technical and organisational means. However, full data security cannot be guaranteed when communicating by email, so we recommend that you send confidential information by post to our registered address above.

NOTES ON SSL ENCRYPTION

Our Website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as requests you send to us as the site operator. An encrypted connection can be recognized by the fact that the address line of the browser changes from “https://” to “httpsss://” and the lock symbol in your browser line.

If SSL encryption is enabled, the information you provide to us cannot be read by third parties.

 

4. Social plugins

4.1 Our Website uses several social network plugins: “Share function” of plugin Providers, namely:

  • the “share function” of the social network facebook.com which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook“). The list and the appearance of the Facebook plugins can be viewed here:

httpsss://developers.facebook.com/docs/plugins/; the “share” button can be recognized by a blue rectangle with a

lowercase white “f“. Note that Instagram privacy settings are  covered by the Facebook policy.

  • the “share function” of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA (“LinkedIn“), recognizable by the logo of LinkedIn. In this case a blue rectangle with a lowercase white “in“.
  • the “share function” of Twitter Inc., One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (“Twitter”), recognizable by the logo of Twitter, which looks like a blue rectangle with a white stylized bird.The scope and purpose of the data collection and the further processing and use of the data by the plugin Provider, as well as the rights and options for privacy protection in this respect, can be found in the respective plugin Provider’s privacy policy:

Facebook: httpsss://www.facebook.com/about/privacy.

LinkedIn: httpsss://www.linkedin.com/legal/privacy-policy.

Twitter: https://twitter.com/privacy.

By clicking on the “share” button, the corresponding information is sent directly from your device to the respective plugin Provider and stored there. The data is transferred regardless of whether you have an account with the Plugin Provider and are logged in there. If you are logged in with the respective social network site, your data collected with us will be directly assigned to your existing account with the social network site. If you click the activated button and, for example, link the page, the plugin Provider also stores this information in your user account and shares it publicly with your contacts.

4.2 Data processing in case of use a “share” button

For example, if you like one of our blog posts and want to share it with your Facebook, LinkedIn or Twitter friends by clicking the corresponding button, we can receive information about this activity associated with your public Facebook profile. These are your user name or user ID, your age group and your country or language, your friends list and – theoretically – any information you share with your friends. Your privacy settings on Facebook are also important here.

Theoretically, the plugin Providers have certainly already informed you about the data collected, stored, processed, evaluated.

4.3 Our Website uses also the social plugin: “follow” function provided by Instagram LLC, 1601 Willow rd., Menlo Park CA 94025, USA (“Instagram”), recognizable by the logo of Instagram, which is a blue rectangle with a stylized camera in a thin white line.

When you click the button, Instagram collects the technical data (your device, your IP address, your browser and its version, etc.) and the data associated with your activity (“follow”) and adds them to your account information.

4.4 The legal basis for integrating social plugins is Article 6 paragraph 1 lit. f) GDPR.

4.5  If personal data are collected/ processed at all, they are deleted at regular intervals.

 

5. Your rights in connection with processing of personal data

In the following, we inform you on your rights that you have in connection with the processing of personal data by us and may exercise according to applicable data protection laws, in particular to the GDPR.

5.1 Right of access

You have the right at any time to demand information on if we process your personal data. In the event of such processing, you may request the following information from us: (i) the purposes for which personal data are processed; (ii) the categories of personal data which are processed; (iii) the recipients or categories of recipients to whom your personal data have been or will be disclosed; (iv) the planned duration of the storage of your personal data or, if specific information is not possible, criteria for determining the storage duration; (v) the existence of a right to correct or delete your personal data, a right to restrict the processing by us or a right of objection to such processing; (vi) the existence of a right of appeal to a supervisory authority; (vii) all available information on the origin of the data if the personal data are not collected directly from you; (viii) the existence of automated decision-making, including profiling in accordance with Article 22 paragraph 1 and 4 GDPR and, at least in these cases, meaningful information on the logic involved and the scope and intended impact of such processing on you.

You have the right to request information on whether your personal data are transferred to a third country or to an international organisation. In this context, you may request to be informed on the appropriate guarantees in connection with the transfer of data.

5.2 Right to rectification

You have the right to demand us to correct and/or complete your personal data if your personal data processed is incorrect or incomplete.

5.3 Right to erasure

You may demand your personal data to be deleted if (i) the personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed; (ii) you revoke your consent to the processing and there is no other legal basis for the processing; (iii) you submit an objection to data processing and there are no predominant justifiable reasons for the processing; (iv) your personal data have been processed illegally; (v) the deletion of your personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we are subject.

5.4 Right to restriction of processing

You may request to restrict the processing of your personal data if (i) you deny the accuracy of the personal data for a period of time that enables us to verify the accuracy of the personal data; (ii) the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data; (iii) we no longer need your personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims; (iv) if you have lodged an objection against the processing and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your grounds.

5.5 Right to data portability

You have the right to obtain your personal data in a structured, commonly used and machine-readable format. You have the right to transmit your data to another Controller. Where technically feasible, you have the right to have your data transmitted directly from us to another Controller.

5.6 Right to object

On grounds relating to your particular situation, you have the right to object at any time to the processing of your personal data which is carried out on the basis of Article 6 paragraph 1 lit. f) GDPR. Such grounds exist, in particular, if they underline your interests and outweigh our interest in the respective data processing. If your personal data are processed in order to carry out direct advertising, you have the right to object at any time to the processing of personal data for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct advertising.

5.7 Right to revoke the declaration of consent under data protection law

If you give us the consent to process your personal data, you have the right to revoke your consent at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

5.8 Right to lodge a complaint with the supervisory authority

You have the right to address the supervisory authority for any questions or complaints.

 

6. Transfer of data to third party companies

We may also transfer your personal data to affiliated companies, i.e. group companies. For the purpose of internal administration, we have a legitimate interest in the transfer of the data to our group companies in accordance with Art. 6 (1) (f) GDPR.

6.1 Your personal data collected via the customer database will be stored on the Microsoft Azure  platform.

6.2. Your data, which are generated directly via our website, are sent to our hosting provider; Azure, which will store it on their servers. We have concluded a third-​party data processing agreement in accordance with Art. 28 GDPR. We use the hosting services of a third-​party provider on the basis of our legitimate interest in the correct display of our website contents and services, Art. 6 (1) (f) GDPR.

6.3.  If you additionally wish to receive a regular newsletter and have given your consent to the receipt of the newsletter pursuant to point (a) of Art. 6 (1) GDPR, we will forward your data to the newsletter delivery provider Mailchimp. The data are forwarded on the basis of the processing contract as our legitimate interest pursuant to point (f) of Art. 6 (1) GDPR.

6.4. For the purpose of performing the contract pursuant to point (b) of Art. 6 (1) GDPR, we may also transmit your personal data to any party to which we assign rights resulting from the contractual relationship with you.

 

7.  Forwarding of Your Personal Data to Third Countries

Where your data are transmitted to a third country, we make sure that the data are only transmitted to countries with an adequate level of protection in the meaning of Art. 45 (1) GDPR or that the controller domiciled in the respective third country has established suitable data protection safeguards. For example, these safeguards could be

7.1.    Binding corporate data protection rules pursuant to Art. 47 GDPR; or

7.2.    standard contractual clauses issued by the European Commission in accordance with the examination procedure referred to in Art. 93 (2) GDPR.

 

8. Newsletter

8.1. With your consent, you can subscribe to our newsletter, in which we inform you about our current offers, climate protection and education projects, our partners and our company. The legal basis for this is point (a) of Art. 6 (1) sentence 1 GDPR.

8.2. For the subscription to our newsletter, we use the so-​called double opt-​in procedure. This means that following your subscription, we send an e-​mail to the specified e-​mail address, asking you for confirmation that you wish to receive the newsletter. If you do not confirm your subscription within 24 hours, your information will be blocked and automatically erased after one month. Apart from this, we store your respective IP addresses as well as the times of subscription and confirmation. The purpose of this procedure is to be able to furnish evidence of your subscription and, if necessary, to clarify any abuse of your personal data.

8.3. For the delivery of the newsletter, the specification of your e-​mail address, country and language is mandatory. The specification of further, separately marked data is voluntary; these data are used to address you personally. Following your confirmation, we will store your e-​mail address for the purpose of sending you the newsletter.

8.4. You can withdraw your consent to the delivery of the newsletter and unsubscribe from the newsletter whenever you wish. You can do this by sending a message to unsubscribe@claracarbon.com or by using the link provided for this purpose in the newsletter.

8.5. Please note that when delivering the newsletter, we analyse your user behaviour. For this analysis, the transmitted e-​mails contain so-​called web beacons or tracking pixels, i.e. one-​pixel image files that are stored on our website. The links transmitted in the newsletter also contain this ID. Based on these data, we create a user profile in order to custom-​tailor the newsletter to your individual interests. In this context, we ascertain when you read our newsletters and which links you click in it; on this basis, we derive conclusions regarding your personal interests. We combine these data with the actions you perform on our website.

8.6. You can object to this tracking at any time by clicking the separate link that is provided in every e-​mail or by informing us via another contact method. The information will be stored for as long as your newsletter subscription continues. If you unsubscribe, we will only store the data statistically and anonymously.

8.7.  The transmission of the newsletter takes place via MailChimp, a newsletter delivery platform of the provider. Your e-​mail address and IP address, the time of subscription and confirmation and the times of access to our newsletters are stored on the servers of MailChimp. Our newsletters contain a web beacon, i.e. a file that is accessed by the server of MailChimp when the newsletter is opened. Within the scope of this access, information on your browser and your system as well as your IP address and the access time are collected. This information is used for the technical improvement of the services according to the technical data, the target audiences and their reading behaviour on the basis of their access locations or access times. Furthermore, the data serve the determination whether and when the newsletter is opened and which links are clicked. Moreover, MailChimp uses this information for the delivery and analysis of the respective newsletter by our order pursuant to Art. 28 GDPR. Due to this processing relationship with MailChimp, we have a legitimate interest in forwarding your data to MailChimp pursuant to point (f) of Art. 6 (1) GDPR. As a German company, MailChimp is also under the obligation to comply with EU data protection regulations. Under the processing contract concluded with MailChimp, MailChimp undertakes to process the personal data of our customers according to applicable data protection provisions and especially not to forward them to any third parties.

 

9. Cookies

9.1. Additionally, cookies will be stored on your computer when you use our website. Cookies are little text files that are associated with the browser you use and stored on your hard disk, through which the party that sets the cookie (i.e. we) receives certain information. Cookies cannot run any programs or transfer viruses to your computer. They merely serve the purpose of making the website as a whole more user-​friendly and effective.

9.2. This website uses transient and persistent cookies, whose scope and functionality are explained below:

9.2.1. Transient cookies are deleted automatically when you close the browser. This especially includes session cookies. These cookies store a so-​called session ID with which various requests of your browsers can be allocated to the joint session. In this way, your computer can be recognised when you return to our website. Session cookies are deleted upon logout or when you close the browser.

9.2.2. Persistent cookies are deleted automatically after a predefined period that may vary depending on the cookie. You can delete the cookies in your browser’s security settings whenever you wish.

9.3.  You can configure your browser settings according to your preferences and e.g. refuse to accept third-​party cookies or all cookies. Please note that if you do so, you might not be able to use all functions of this website.

9.4.  If you have given your consent to the use of cookies based on a notification on our website (“cookie banner”), the legality of using cookies is based on Art. 6 (1) (a) GDPR. The cookie banner gives you the option of choosing which cookies you consent to. You may, for instance, allow cookies for preferences, statistical purposes, and/or marketing purposes. We always use necessary cookies which ensure the functionality of the website. We have a legitimate interest in maintaining the functionality of the website in accordance with Art. 6 (1) (f) GDPR.

9.5  It is also possible to use our Website without cookies. For more information on blocking cookies, please refer to the help pages of your internet browser. Stored cookies can be deleted in the system settings of your internet browser.

9.6 A general objection to the use of cookies used for online marketing purposes can be declared for many of the services, especially in the case of tracking, via the US site https://www.aboutads.info/choices/or the EU site https://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by deactivating them in the browser settings. Please note that in this case not all functions of our online offer can be used.

 

10. Use of Web Analysis Tools

10.1. Google Analytics

10.1.1. This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses cookies ? text files that are stored on your computer and that enable an analysis of your use of the website. The information about your use of this website, which is generated by the cookie, is usually sent to a Google server in the USA and stored there. If IP anonymisation is activated on this website, Google will first abbreviate your IP address in Member States of the European Union or other Contracting States to the Agreement on the European Economic Area. The full IP address will only be transmitted to and abbreviated on a Google server in the USA in exceptional cases. By order of the operator of this website, Google will use this information to analyse your use of the website, to compile reports about the website activities, and to perform other services related to the use of the website and of the Internet in general to the website operator.

10.1.2. The IP addresses sent by your browser within the scope of Google Analytics will not be consolidated with other data of Google.

10.1.3.    You can prevent the storage of cookies by configuring your browser software accordingly; in this case, however, you might not be able to use all functions of this website. Moreover, you can prevent the collection of data concerning your use of the website (including your IP address), which are generated by the cookie, and the processing of these data by Google by downloading and installing the browser plug-​in that is available under the following link: httpsss://tools.google.com/dlpage/gaoptout?hl=de

10.1.4. This website uses Google Analytics with the “_anonymizeIp()” extension. In this way, IP addresses are further processed in truncated form, making it impossible to allocate them to specific persons. Where the data collected about you could be allocated to you, this is made impossible immediately, and the personal data are thus erased immediately.

10.1.5. We use Google Analytics in order to analyse the use of our website and continually improve it. The statistics we gain enable us to improve our offer and make it more interesting for you as a user. We use Google Analytics on the basis of your consent granted via the cookie banner on our website, in accordance with Art. 6 (1) (a) GDPR.

For the exceptional cases in which personal data are transmitted to the USA, Google participates in the EU-US Privacy Shield. For information, see httpsss://www.privacyshield.gov/EU-​US-Framework

10.1.6. Information of the third-​party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001. Terms of use: httpsss://www.google.com/analytics/terms/de.html, privacy information: httpsss://www.google.com/intl/de/analytics/learn/privacy.html, privacy policy: httpsss://www.google.de/intl/de/policies/privacy.

 

11. Internet Advertising

11.1. Google AdWords

11.1.1. We use the Google AdWords service in order to draw attention to our offers and effective climate protection by means of advertisements (so-​called Google AdWords) on external websites. In this way, we pursue the legitimate interest pursuant to point (f) of Art. 6 (1) GDPR to show you ads that are of interest to you, to make our website more attractive for you and to achieve fair calculation of advertising costs. If you have given your consent to the use of cookies based on a notification on our website (“cookie banner”), the legality of use is based additionally on Art. 6 (1) (a) GDPR.

11.1.2. These advertisements are delivered by Google via ad servers. For this, we use ad server cookies, which can measure certain success measurement parameters such as the display of ads or user clicks. If you reach our website via a Google ad, Google AdWords will store a cookie on your PC. These cookies usually expire after 30 days and are not used to identify you personally. For this cookie, the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-​view conversions) as well as opt-​out information (indication that the user no longer wants to be addressed) are stored as analysis values.

11.1.3.These cookies enable Google to recognise your Internet browser. If a user visits certain pages of the website of an AdWords customer and the cookie stored on his computer has not yet expired, Google and the customer can see that the user has clicked the ad and has been redirected to the respective page. A different cookie is assigned to every AdWords customer. Thus, cookies cannot be tracked via the websites of AdWords customers. In the context of the said advertising measures, we do not collect and process any personal data. Google merely provides us with statistical analyses. Based on these analyses, we learn which of the advertising measures used are especially effective. We do not receive any further data from the use of the ads; in particular, we cannot identify users on the basis of this information.

11.1.4. Due to the marketing tools used, your browser will automatically establish a direct connection to the Google server. The scope and further use of the data collected by Google due to this tool is beyond our control and we are thus informing you about what we do know: Through the embedding of AdWords Conversion, Google is informed that you have accessed the respective part of our website or clicked one of our ads. If you are registered with a Google service, Google can map the visit to your account. Even if you are not registered with Google or not logged in, the provider may learn and store your IP address.

11.1.5. You can prevent the participation in this tracking procedure in various ways:

By configuring your browser settings accordingly; for example, you will not receive any third-party advertisements if you block third-party cookies.

By deactivating the cookies for conversion tracking by configuring your browser in such a way that cookies from the domain “www.googleadservices.com” are blocked, or via httpsss://www.google.de/settings/ads. However, this setting will be deleted if you delete your cookies.

By deactivating personalised ads of the providers who have joined the self-regulation campaign “About Ads” httpsss://www.aboutads.info/choices However, this setting will be deleted if you delete your cookies.

By permanently deactivating personalised ads in your browser (Firefox, Internet Explorer or Google Chrome) by using the plugin as described at httpsss://www.google.com/settings/ads/plugin. Please note that if you do so, you might not be able to use all functions of this website.

11.1.6. The legal basis for the processing of your data is point (f) of Art. 6 (1) sentence 1 GDPR. Further information on the data protection at Google is available here: httpsss://www.google.com/intl/de/policies/privacy and httpsss://services.google.com/sitestats/de.html. Alternatively, you can visit the website of Network Advertising Initiative (NAI) at httpsss://www.networkadvertising.org. Google participates in the EU-US Privacy Shield; httpsss://www.privacyshield.gov/EU-​US-Framework.

11.1.7.In connection with our use of the Google AdWords offer, the Google Grants program is also used. Google Grants provides free advertising to eligible non-​profit organisations worldwide. Google Grants thus helps non-​profit organisations like us to use AdWords in order to reach persons who use the Google search engine to find information that is relevant to such organisations.

11.2. Google Remarketing

11.2.1. We use Google Remarketing. This is a procedure for addressing you anew. This application enables the display of our ads as you continue using the Internet after visiting our website. This is done with the help of cookies stored in your browser, by means of which Google collects and analyses your user behaviour when visiting various websites. In this way, Google can identify your previous visit to our website. According to Google, the data collected in the context of remarketing is not associated with your personal data that may be stored by Google. In particular, Google points out that pseudonymisation is used for remarketing. The legal basis for this is Article 6 (1) (a) GDPR.

11.2.2. For the exceptional cases in which personal data are transmitted to the USA, Google participates in the EU-US Privacy Shield. For information, see httpsss://www.privacyshield.gov/EU-​US-Framework.

11.3. Microsoft Bing Ads

11.3.1 We use the conversion tracking function of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-​6399, USA, on our website. This entails Microsoft Bing Ads storing a cookie on your computer, provided you have reached our website via a Microsoft Bing ad. This enables Microsoft Bing and us to see that someone clicked on an ad, was forwarded to our website, and reached a pre-​set target (conversion) site. We only find out about the total number of users who have clicked on a Bing ad and were forwarded to the conversion site. No personal information regarding the identity of the user is disclosed.

11.3.2 If you do not wish information regarding your user behaviour to be used as explained above, you may reject the setting of the cookie required for the process – for example, by deactivating the automatic setting of cookies in your browser settings. In addition, you may prevent the collection of the data generated by the cookie and related to your use of the website and processing of these data by Microsoft by objecting via the following link: httpsss://account.microsoft.com/privacy/ad-​settings/signedout?lang=en-EN. Further information about data protection and the cookies used by Microsoft and Bing Ads is available at the Microsoft website at httpsss://privacy.microsoft.com/en-gb/privacystatement

 

12. Google Maps

12.1. We use the services of Google Maps on this website. This allows us to show you interactive maps directly on the website and enables you to use the maps function conveniently.

12.2. When you visit the website, Google receives the information that you have accessed the respective subpage of our website. Moreover, the data specified in section 3.1.3 are transmitted. This happens regardless of whether Google provides you with a user account into which you are logged in, or you have no user account. If you are logged in to Google, your data will be allocated directly to your account. If you do not wish this information to be allocated to your Google profile you must log out prior to activating the button. Google stores your data in the form of user profiles and uses them for the purpose of advertising, market research and/or needs-​oriented design of its website. This analysis is performed (even for users who are not logged in) especially in order to deliver needs-​oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right you will have to contact Google.

12.3. We use Google Maps to pursue our interest in an appropriate display of our online services and contents and to facilitate finding the locations specified on our website. This is a legitimate interest in terms of Art. 6 (1) (f) GDPR.

12.4. Further information on the purpose and scope of the collection of data and their processing by the plugin provider is available in the privacy policies of the provider. There, you can also see further information on your rights in this regard and on the configuration options to protect your privacy: https://www.google.com/intl/gb/policies/privacy. Google also processes your personal data in the USA and participates in the EU-US Privacy Shield; httpsss://www.privacyshield.gov/EU-US Framework.

 

13. YouTube

13.1. We have embedded YouTube videos on our website, which are stored at httpsss://www.YouTube.com and can be played directly from our website. All these videos are embedded in the “privacy-​enhanced mode”, i.e. no data about you as a user will be transmitted to YouTube as long as you do not play the videos. The data specified in section 10.2.2. will only be transmitted if you play the videos. This data transmission is beyond our control.

13.2. When you visit the website, YouTube receives the information that you have accessed the respective subpage of our website. This takes place regardless of whether YouTube provides a user account that you are logged into, or whether no user account exists. If you are logged in to Google, your data will be allocated directly to your account. If you do not wish the allocation to your profile in YouTube, you need to log out before you click the button. YouTube stores your data in the form of user profiles and uses them for the purpose of advertising, market research and/or needs-​oriented design of its website. This analysis is performed (even for users who are not logged in) especially in order to deliver needs-​oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of such user profiles. To exercise this right, please contact YouTube.

13.3. Further information on the purpose and scope of the collection of data and their processing by YouTube is available in the privacy policy. There, you can also see further information on your rights and configuration options to protect your privacy: httpsss://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and participates in the EU-US Privacy Shield; httpsss://www.privacyshield.gov/EU-​US-Framework.

 

14. Retention Periods and Criteria for the Retention of Your Personal Data

All processed personal data will only be stored for as long as and to the extent necessary for the performance of our contractual and statutory obligations. For accounting reasons and due to statutory retention obligations, we usually retain collected personal data for 10 years. Longer statutory retention obligations or reasons may apply. For the delivery of our newsletter, we will store your e-​mail address until you unsubscribe from the newsletter. All technical access data collected when visiting our website for information only are erased no later than seven days after the end of your visit to our site.

 

15.  Security Measures

15.1. Pursuant to Art. 32 GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, we implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including inter alia appropriate measures to ensure the confidentiality, integrity and availability of data by controlling the physical and system access to the data as well as the input, forwarding, protection of the availability and separation of the data. Furthermore, we have established processes to ensure the exercise of the rights of the data subjects, erasure of data and reaction to threats to data. Moreover, we already consider the protection of personal data in the development and selection of hardware, software and processes in accordance with the data protection principle by design and by default (Art. 25 GDPR).

15.2. In particular, the security measures included the encrypted transmission of data between your browser and our server.

 

16. Your Rights

16.1. You have the following rights vis-à-vis us with respect to the personal data concerning you:

Right of access (Art. 15 GDPR)

Right to rectification or erasure (Art. 16, 17 GDPR

Right to restriction of processing (Art. 18 GDPR)

Right to data portability (Art. 20 GDPR)

Right to object (Art. 21 GDPR)

On grounds relating to your particular situation, you have the right to object to the processing of personal data concerning you on the basis of point (f) of Art. 6 (1) GDPR (data processing due to a legitimate interest). If you object, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Moreover, you have the right to object at any time to the processing of data concerning you for direct advertising purposes (Art. 21 (2) GDPR). If you object to the processing for direct marketing purposes, we will no longer process your personal data for such purposes.

16.2.  To exercise your rights specified in section 12.1., please send an e-​mail to info@claracarbon.com or contact the address specified in section 1.2.

16.3 You also have the right to lodge a complaint with the responsible data protection supervisory authority about the processing of your personal data by us.

 

7. Amendments to This Privacy Policy

We may amend, supplement or replace this Privacy Policy in full or in part at any time and without prior announcement. The respective Privacy Policy published on the website is valid.