Privacy Policy IBPDI

Last update February 2021

Thank you for visiting the International Building Performance and Data Initiative (IBPDI) website (“Website”), your interest in our association or activities and/or your decision to join our association. This Privacy Policy explains how we process personal data of representatives of our members, visitors of our Website and other inquirers.

1. How to contact us

International Building Performance and Data Initiative (IBPDI)
Seestrasse 55
6052 Hergiswil (Nidwalden)
Switzerland

You can contact us via [email protected]

2. How we collect and process personal data

2.1. When, how and what kind of personal data we collect

We treat personal data in accordance with applicable data protection laws. We may collect your personal data in the course of our work, including through your use of our Website.

2.2. We may receive data submitted by you

The Website may include special forms through which you can request further information about us and our work. When you submit such a request or pass information to us in any other way (e.g. via e-mail) you may be asked to provide certain information, including, but not limited to, contact details such as your name, title, company, address, (mobile) phone number, e-mail address or line of business.

2.3. We may collect data of your device and account

You may also provide us with data regarding your device, your member, partner or supplier account, etc. This kind of data will in many circumstances be considered as personal data under applicable data protection legislation. If you choose to withhold any personal data requested by us, it may not be possible for you to gain access to or use certain parts or functions of the Website and for us to respond to your query.

2.4. We may automatically log certain technical information

By using our Website, certain technical and other information is automatically disclosed by your computer and logged by us (such as your network address, the type of your browser, the website that referred you to our Website) for operational and security purposes, and to better understand the usage of our Website.

3. Purpose of processing, categories of personal data, legal basis

3.1. With respect to our members

We may collect, store and share business contact data of representatives of our members for the purposes of our association, as laid out in our articles of association and our other regulations. Therefore, names of member representatives and references to the corresponding member entities can be published at communication activities, workshops or other events of our association at which they participate. The legal basis for these processing activities is the membership in our association.

3.2. With respect to visitors of our Website

If you only use our Website for information purposes, we only collect the personal data that your browser transmits to our server. If you wish to view our Website, we collect the following data, which is technically necessary for us to display our Website to you and to ensure stability and security:

  • IP address;
  • Date and time of the request;
  • Time zone difference to Greenwich Mean Time (GMT);
  • Content of the request (specific page);
  • Access status/HTTP status code;
  • Amount of data transferred in each case;
  • Website from which the request comes;
  • Operating system and its interface;
  • Language and version of the browser software.

We process this data on the basis of our legitimate interests to provide you access to our Website.

3.3. With respect to e-mail and contact form inquirers

When you contact us by e-mail or via a contact form on the Website, we will store and use the data that you provide to us (e.g. your e-mail address, name and/or your telephone number) to administer your request and to provide an appropriate response to you. The legal basis in this respect are either our legitimate interests (e.g. maintaining satisfaction or our partners or answering a request) or the need to fulfil contractual obligations or take pre-contractual steps at your request (e.g. sending or answering an offer).

To the extent we ask for input via our contact form that is not necessary to contact you, we mark this as optional information. Such information serves us to administer and to improve the processing of your request.

We use “Mailchimp”, a service by Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA as an e-mail service provider. Mailchimp receives and processes personal data on our behalf concerning the organisation and analyses of newsletter, in particular email address, IP address and device information. When you open an e-mail sent with Mailchimp, a file contained in the e-mail (so-called web beacon) connects to the Mailchimp servers. This allows Mailchimp and/or us to analyse whether a newsletter message has been opened and which links have been used. In addition, technical information is recorded (e.g. time of registration, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. They are used exclusively for statistical analyses of newsletter campaigns. The results of these analyses can be used to optimize the newsletter.

The data is processed on Mailchimp servers and might cause a transfer of personal data to the US. We have concluded Standard Contractual Clauses with Mailchimp in order to be able to guarantee compliance with European data protection standards in the US. Furthermore, Mailchimp guarantees to implement supplemental measures to the best of its ability to ensure compliance with all applicable data protection laws (https://mailchimp.com/help/mailchimp-european-data-transfers/).

We use Mailchimp based on your consent. If you want to stop analysis with Mailchimp, you must unsubscribe the newsletter. For this purpose, we provide a link in every newsletter. You can also withdraw your consent at any time by sending an e-mail to [email protected].

Find more information on Mailchimp and the processing of personal data here: https://mailchimp.com/legal/privacy/.

3.4. Google Services

Our Website uses Google Analytics and Tag Manager that are web services provided by Google LLC, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Both web services use cookies. A cookie is a small text file that a website stores on the visitor’s computer or mobile device. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the website. We concluded Standard Contractual Clauses with Google to guarantee an adequate level of data security in case of a transmission of your personal data to the United States of America.

3.4.1. Analytics

Google Analytics makes it possible to assign data, sessions and interactions across several devices to a pseudonymous user ID and thus to analyze the activities of a user across all devices.

Google Analytics uses cookies, which enable an analysis of the use of the Website by you. The information generated by the cookie about your use of the Website will generally be transmitted to and stored by Google on servers in Ireland. However, if IP anonymization is activated on our Website, your IP address will be shortened by Google in advance within Member States of the European Union/European Economic Area (EEA). Only in exceptional cases will the full IP address be transmitted to a Google server where it will be shortened. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. Further information on Google terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html or at https://policies.google.com/?hl=de.

The legal basis for this processing of personal data is your consent. You can withdraw your consent any time with effect for the future. In addition, you can prevent Google from (i) collecting the data generated by the applied cookie and related to your use of the Website (including your IP address) and (ii) processing this data by: downloading and installing the following tool – https://tools.google.com/dlpage/gaoptout?hl=de.

3.4.2. Tag Manager

In order to monitor system stability and performance, Google Tag Manager may collect some aggregated data about tag firing. This data does not include user IP addresses or any user-specific identifiers that could be associated with a particular individual. Other than data in standard HTTP request logs, all of which is deleted within 14 days of being received, Google Tag Manager does not collect, retain, or share any information about visitors, including page URLs visited. Further information on Google Tag Manager and related data can be found in Google’s related terms of service at https://support.google.com/tagmanager/answer/7157428.

The legal basis for this processing of personal data is your consent. You can withdraw your consent at any time with effect for the future.

4. Social media plugins

4.1. What are social media plugins (LinkedIn, Facebook, Twitter)

Social media plugins allow websites to integrate social media functionality for the convenience of users. Such Social Media Plugins are independent extensions of the providers of the respective social media network. We have no influence over the type and amount of data collected through such social media plugins and stored by their providers. If you use social media plugins you will be sending identifiable information to the respective social media platform. If a social media plugin provider has placed cookies on your system, it can record your browsing behavior and create detailed user profiles using tracking data.

4.2. How we use social media plugins

The functions of social media plugins are deactivated by default to prevent any automatic disclosure of the user data to the provider. We implemented the social media plugins in a way that they only send data once they have been activated, i.e. clicked by the user. Your Internet browser then sends the log files (including your IP address) directly to the social media plugin provider’s server where they may be stored. The server may be located outside the EU or the EEA (e.g. in the United States of America).

If you want to prevent a data exchange between your system and social media plugins, you should log out of the social media before using our Website. You should also activate the private mode in your browser’s data privacy settings. It also helps to deactivate or limit cookies in your browser settings so that third parties cannot track your browsing behavior. You can also prevent social media plugins from loading altogether by using a script blocker as an add-on in your browser.

Any comments or activity arising from persons using social media plugins is not controlled or endorsed by us and we shall not be held responsible or liable for such. Persons who share our content via social media plugins are not authorized to speak for or represent IBPDI. Their views and opinions must be strictly regarded as their own and not IBPDI’s.

Please take note of the privacy information of the relevant providers:

https://www.linkedin.com/legal/privacy-policy
https://www.facebook.com/policy.php
https://twitter.com/privacy

5. Pictures/videos of our events

We may be taking pictures or record video footage on our IBPDI events to publish them on the internet or in printed promotional material. Our events (on-site and online) are public with controlled access. We are only using portrait pictures of you, when you are the speaker or a special guest and you appear to agree with the taking or recording and publishing. Apart from that, we do not intend to take/record you directly but groups or overview pictures and video sequences of the event setup. We will not use the footage when you seem to disagree being pictured or recorded.

We are taking/recording and publishing the footage based on our legitimate interests. The right to object to the taking/recording and publication is limited to exceptional cases and if there is an important reason.

6. How long will the data be stored?

We store your personal data as long as it is necessary to fulfil the processing purposes and legal and contractual obligations.

Should storage of the data no longer be necessary for the fulfilment of contractual or statutory obligations or other purposes for which we collected it, your data will be deleted unless further processing is necessary for the following purposes:

  • Compliance with commercial and tax retention obligations.
  • Preservation of evidence within the framework of the legal statute of limitations.

7. What rights do you have in terms of processing your data?

Subject to applicable law, you may have some or all of the following rights in respect of your personal data: the right to withdraw your consent, the right of objection, the right of information, the right of correction, the right of deletion, the right of limitation of processing and the right of data transfer.

7.1. Withdrawal of consent

You can revoke your consent to the processing of personal data at any time. Please note that the revocation is only applicable for the future.

7.2. Right of objection

You can object to the use of your data for advertising purposes using electronic mail at any time without incurring any costs other than the transmission costs according to the basic tariffs.

7.3. Processing on the basis of our legitimate interests

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data on the basis of legitimate interests; this also applies to profiling based on this provision.
In the event of your objection, we will no longer process your personal data unless we can prove compelling reasons for the processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

7.4. Right of information

You can request information on whether we have stored personal data about you. If you so wish, we will inform you of the data concerned, the purposes for which the data is processed, to whom this data is disclosed, how long the data is stored and what other rights you have regarding this data.

7.5. Additional rights

In addition, you have the right to correct incorrect data or to delete your data. If there is no reason for further storage, we will delete your data, otherwise we will restrict processing. You may also request that we provide any personal information you have provided to us in a structured, common and machine-readable format either to you or to a person or company of your choice.

In addition, you have the right to appeal to the respective data protection supervisory authority.

7.6. Safeguarding your rights

To take advantage of your rights, you can contact us using the contact details set forth under section 1 “How to contact us”. We will process your enquiries immediately and in accordance with the legal requirements and inform you which measures we have taken. You will need to include your personal details as well as some means of verifying your identity (e.g. a copy of your identity card or driving license). If the request is submitted by a person other than you, without providing evidence that the request is legitimately made on your behalf, the request will be rejected.

8. Is there an obligation to provide your personal data?

In order to enter into a business relationship, you must provide us with the personal data that is required for the execution of the contractual relationship or which we must collect due to legal requirements. If you do not provide us with this data, we will not be able to carry out and process the contractual relationship.

9. Data security

We always strive for the highest security standards when it comes to your data. We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.

10. Change to this Privacy Policy

We reserve the right, at our sole discretion, to change, modify, add, or remove portions from this Privacy Policy at any time. Should the purpose or method of processing your personal data change significantly, we will update this Privacy Policy and notify any such changes in accordance with applicable data protection legislation. We encourage you to regularly review this Privacy Policy to make sure you are familiar with how we use your personal data.