WFL Wirtschaftsförderung Lörrach GmbH takes the protection of your personal data very seriously. The following Privacy Policy provides you with an overview of which personal data is collected when you visit our website and how it is used. Personal data refers to all data that identifies you personally. 
 
Privacy Policy 
 
1.    Name and contact details of the Data Controller 
 
WFL Wirtschaftsförderung Lörrach GmbH 
Marie-Curie-Str. 8 
79539 Lörrach 
Germany 
Phone: +49 7621 5500-0 
Email: info[at]wfl-loerrach.de 
Mrs. Marion Ziegler-Jung 
 
2.    Name and contact details of the Data Protection Officer 
 
Franziska Malik c/o OFFICE KOMPLETT Computer Service GmbH 
Friedrichstr. 2 
D-79664 Wehr 
 
Phone: +49 (0)7762 7088-60 
Email: datenschutzbeauftragte@wfl-loerrach.de 
 
You can reach our external data protection officer, Franziska Malik, directly both via the email address provided and at the aforementioned postal address. Please send postal communications to Mrs. Franziska Malik directly or mark them "Confidential". 
  
3.    Processing your personal data 

 
a)    Visiting our website 
Data is collected automatically by visiting our website. Collection takes place automatically and anonymously as soon as you enter our website and is used exclusively for statistical purposes. This means that you can visit our website without providing any personal information about yourself. 
This data is collected to make sure that we can provide a website that functions without errors. Furthermore, we reserve the right to anonymise the data you provide, to keep it in aggregated form and, if necessary, combine it with other data to create anonymous statistics. 
Personal data such as your name, address, phone number, email address or other identifying data is not collected. 
 
b)    Contact by email/contact form 
When you establish contact with us by email or over our contact form, the personal data you transfer is saved automatically. We only process your personal data to answer your enquiries and address any 
follow-up questions if there are any, or we store it to establish further contact with you. 
 
c)    Registration for events 
When you provide personal information over our registration form to take part in our 
"connect Dreiländereck " and "BioValley-Treffpunkt " events, it is forwarded to our 
network coordination points and added to the mailing list for the respective event. The mailing lists are used to send you all the information you need and the invitations to the events. 
 
As a result, the personal data you entered on your person is processed subject to your consent alone. You can revoke the consent you have given at any time. To do so, simply send us an informal message. The legality of the data processing operations we perform up until the point of you revoking your consent remains unaffected by this. 
The personal data you have transferred remains in our possession until you ask us to delete it, revoke your consent to its storage or the purpose for storing your data no longer applies (e.g. after your enquiry has been processed in full). Mandatory statutory provisions – especially retention periods – remain unaffected by this. 
  
4.    Duration of the storage of your personal data 
 
Processing the personal data you provide takes place based on a purpose. After the purpose ceases, the data you provided will be processed in order to comply with statutory retention requirements or based on our legitimate interests. It is deleted once the statutory retention periods have expired and/or legitimate interests have ceased. 

5.    Disclosure of your personal data to third parties 
 
Your personal data is not disclosed to unauthorised third parties. We only disclose your personal data if it is necessary for fulfilling the contract. 
However, we would like to point out that we may be required to disclose your personal data owing to a legal obligation or by way of administrative or court order. This may be required, for example, to justify or protect legal claims, defend against actions, owing to an audit or revision and in connection with the sale, assignment or other form of transfer of the business or to prevent abuse and other illegal activities.
 
6.    Your rights when your personal data is processed 
 
To exercise your rights, please contact the office responsible at WFL Wirtschaftsförderung Lörrach GmbH. An informal email message to us is sufficient in this regard. The legality of the data processing we perform up to the point of you revoking your consent remains unaffected by this. 
  
a)    Right to information 
You are entitled to request information about the personal data on your person that we process. In this regard, you can request information about: processing purposes; categories of personal data; categories of recipients to whom the personal data relating to your person has been disclosed or is still being disclosed; retention period; existence of a right to rectification, cancellation, limitation in processing or objection; existence of the right of appeal to a supervisory authority; the origin of your data if we did not collect it; existence of automated decision-making including profiling. 
 
b)    Right to rectification 
You have the right to have incorrect or incomplete personal data on your person corrected or completed immediately. 
 
c)    Right to deletion (right to be forgotten) 
You are entitled to have your personal data deleted immediately ("right to be forgotten"), for example if the purpose of processing is no longer required, in the event that you revoke your consent or in the absence of a legal basis for processing your personal data. 
 
d)    Right to restrict processing 
You have a right to restrict your personal data being processed, for example if the accuracy of the data is disputed, its processing is unlawful and you refuse its deletion but require its use to be restricted instead, and we no longer need it for the processing purposes, but you need it to assert, exercise or defend legal claims or have objected to its processing. 
 
e)    Right to data portability 
You are entitled to have the personal data you provided to us on your person handed over to you in a standard, structured and machine-readable format, or to transfer it to another data controller, as far as processing takes place automatically. 
A direct transfer of your personal data to another data controller only takes place insofar as it is technically feasible. 
 
f)    Right to object 
For reasons arising from your particular situation, you are entitled at any time to submit an objection to personal data on your person being processed. Following revocation on your part, we will no longer process your personal data unless we can establish compelling legitimate grounds for processing it that outweigh your interests, rights and freedoms, or for purposes of asserting, exercising or defending legal claims. 
Furthermore, you can always object to your personal data being processed for direct marketing purposes. 
 
g)    Rights when automated decision-making including profiling takes place 
You have the right not to be bound solely by an automated decision, including profiling. This means that you have the right to question this decision and, if necessary, have it corrected. 
 
h)    Right to appeal to a competent supervisory authority 
You have the right of appeal to a competent supervisory authority in the event that your data protection rights are violated or if you believe that processing your personal data is inadmissible. 
In this regard, you can contact the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg concerning data protection issues. 
www.baden-wuerttemberg.datenschutz.de 
 
7.    The security of your data 
 
This website does not use SSL or TLS encryption and the data you submit to us may be read by third parties. 
We would like to point out that transferring data over the Internet (for example when communicating by email) can be vulnerable to security gaps.
It is impossible to fully protect data against unauthorised access by third parties. 
It is your responsibility to make sure that the computer you are using is properly secured and protected against malware. For this reason, we can take no responsibility for the security of your data during the transfer and disclaim any liability. 
 
8.    Automatic collection of data on our website 
 
a)    Server log files 
The provider of this website automatically collects and stores information in what are referred to as server log files that your browser sends us automatically. This comprises: 
-    Browser type/Browser version 
-    Operating system used 
-    Referring URL 
-    The host name of the computer accessing our website 
-    The time of the server request - IP address 
This data is not merged with other data sources. 
 
b)    Cookies 
This website make use of what are referred to as 'cookies'. Cookies in no way harm your computer and do not contain viruses. We use cookies to make our service more user-friendly, effective and secure. Cookies are made up of small text files that are stored on your computer and used by your browser. 
Most of the cookies we use are what are referred to as "session cookies”. They are automatically deleted once you leave our website. Other cookies remain stored on your device until you delete them. These cookies allow us to recognise your browser the next time you visit our website. 
You can set your browser to inform you that cookies are being used. You can also enable cookies in individual cases only, enable the acceptance of cookies in specific cases, or generally rule out the use of cookies altogether and automatically delete them when you close your browser. If you disable cookies, it may limit your ability to use this website to its full extent. 
Cookies used to perform the electronic communications process or to provide certain functions you wish to use (e.g. the shopping cart function) are saved subject to Sec 6. (1) (f) GDPR. The website operator has a legitimate interest in storing cookies to ensure the error-free technical and optimised provision of its services. If other cookies (e.g. cookies for analysing your surfing behaviour) are stored, they are handled separately in this Privacy Policy. 
   
9. Analysis tools and third-party tools 
 
a)    Google Web Fonts 
This site uses what are referred to as Web Fonts, which are provided by Google. When you visit a page, your browser loads the Web Fonts required into the browser cache to correctly display texts and fonts. 
To do so, your browser needs to connect to Google servers. As a result, Google learns that our website has been accessed over your IP address. The use of Google Web Fonts takes place in the interest of the consistent and attractive presentation of our online services. This constitutes a legitimate interest in terms of Sec. 6 (1) (f) GDPR. 
Your computer uses a default font if your browser does not support Web Fonts. 
For more information about Google Web Fonts, visit developers.google.com/fonts/faq and the Google Privacy Policy: www.google.com/policies/privacy/
 
b)    Google Maps 
This website uses the map service from Google Maps over an API. Google Analytics is a service provided by Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. 
In order to use the features of Google Maps, your IP address needs to be stored. The information is usually transferred to a Google server in the USA and stored there. The provider of this website has no influence over the transfer of this data. 
The use of Google Maps takes place in the interest of attractively presenting our online services and making the places we have indicated on the website easily locatable. This constitutes a legitimate interest in terms of Sec. 6 (1) (f) GDPR. 
Please refer to the Google privacy policy at:
www.google.de/intl/en/policies/privacy for further information on how user data is processed 

c) reCAPTCHA
We use Google's reCaptcha service to determine if a human or computer is typing in our contact or newsletter form. Google uses the following data to check whether you are a human or a computer: the IP address of the device used, the website you visit, the captcha, the date and duration of the visit, the identification data of the device used Browser and OS type, Google Account, when you're logged in to Google, mouse movements on the reCaptcha surfaces, and tasks that require you to identify images. The legal basis for the described data processing is Art. 6 para. 1 lit. f General Data Protection Regulation. There is a legitimate interest on our part in this data processing to ensure the security of our website and to protect us from automated input (attacks).