Privacy Policy

Data privacy statement

I. Name and Address of the Accountable

The controller in the sense of the General Data Protection Regulation and other national data protection laws of the Member States as well as other provisions pertaining to data privacy and protection laws is:

Delegation der Deutschen Wirtschaft für Saudi-Arabien, Bahrain und Jemen / German-Saudi Arabian Liaison Office for Economic Affairs (GESALO)
Pure, Block B, 1st Floor
Takhassusi Branch Road
8006 Al Mohammadiyyah 3239
Riyadh 12364
Kingdom of Saudi Arabia

P.O. Box 61695, Riyadh 11575

Phone: +966 11 439 0710 Ext. 100
Email: rohte@ahk-arabia.com

II. Name and Address of the Data Protection Officer

The data protection officer of the controller is:

Delegation der Deutschen Wirtschaft für Saudi-Arabien, Bahrain und Jemen / German-Saudi Arabian Liaison Office for Economic Affairs (GESALO)
Dr. Dalia Samra-Rohte

Pure, Block B, 1st Floor
Takhassusi Branch Road
8006 Al Mohammadiyyah 3239
Riyadh 12364
Kingdom of Saudi Arabia

P.O. Box 61695, Riyadh 11575

Phone: +966 11 439 0710 Ext. 100
Email: rohte@ahk-arabia.com

III. General information on data processingg

1. Scope of processing of personal data

We generally only process personal data of our users as is necessary to provide a functioning website and to provide our content and services. We only process personal data of our users on a legal basis under the General Data Protection Regulation (GDPR). Legal basis can be a contractual obligation, our legitimate interest or consent provided by the individual user. Sometimes prior consent cannot be obtained and thus the processing of personal data is permitted by law.

2. Lawful basis for processing of personal data

The individual has given her/his consent to the processing of her/his data for one or more specific purposes (Article 6 (1) (a) GDPR). It is necessary for entering into or performing a contract with the individual (Article 6 (1)(b) GDPR). It is necessary for the purposes of legitimate interests pursued by the controller or a third party, except where these interests are overridden by the interests or the fundamental rights and freedoms of the individual which require protection of personal data (Article 6 (1)(f) GDPR).

3. Data deletion and storage

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the retention period for personal data, we consider the amount, nature, sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

I. Provision of the website and creation of logfiles

1. Description, scope and purpose of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

(1) Information about the browser type and its version

(2) The user’s operating system

(3) The user’s internet service provider

(4) The user’s IP address

(5) Date and time of access

(6) Websites accessed by the user's system through our website

The temporary processing of the IP address is necessary in order to deliver the website to the user’s computer. For this purpose the user’s IP address needs to be saved for the duration of the usage. The logfiles are saved to ensure the functionality of our website. This data enables us to optimise our website and to ensure the security of our information technology systems. In this context, we will not process personal data for any other purposes.

2. Legal basis for the processing

The processing of the data for the provision of our website and storage of data in logfiles is necessary for the operation of the website. Legal basis for the temporary processing is our legitimate interest (GDPR Article 6 (1) (f)).

3. Data storage

We will delete your data when the processing of the data is no longer required to fulfil the purposes we collected it for. When we process the data for the provision of our website, your data will be deleted when the website session ends. When we process data in logfiles, we will generally delete the data 7 days after the processing. Extended storage is possible. In this case, the user’s IP address will be deleted or pseudonymised in order to prevent the identification of the user.

II. Use of Cookies

a) Description, scope and purpose of data processing

We use cookies for the purposes of improving the quality of our website and its contents. We also analyse your usage of our website through cookies so that we can constantly optimise our offering. Additionally, some features of our website cannot be offered without the use of cookies (technically necessary cookies).

Therefore, it is necessary that the browser is recognised when moving from one page to another. The data of the users collected in this way is pseudonymised, and an identification of the user is not possible. When first accessing our website, users are informed about the use of cookies for analysis purposes.

You can disable tracking in the Google Analytics section of this privacy policy should you wish to do so.

b) Legal basis for the processing

Legal basis for the processing of personal data with cookies which are technically necessary is our legitimate interest (Article 6 (1) (f) GDPR).

Legal basis for the processing of personal data with using cookies for the purposes of analysis is the individual’s consent (Article 6 (1) (a) GDPR).

c) Storage of data and individual’s rights

Cookies are stored on the user’s computer and are transmitted from there to our website. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, you may not be able to complete all the services or functionality on offer.

III. Website analysis with PiwikPro

The data controller has integrated the Piwik PRO Marketing Suite component on this website.

Piwik PRO Marketing Suite collects first-party information about website visitors based on cookies, IP numbers and browser fingerprints, creates user profiles based on browser history, and calculates metrics related to website usage such as bounce rate, intensity of visits, page views, etc.

The data are stored in reports for a period of 2 years for raw data and 3 years for aggregated data.

(Purpose of data processing: analysis, conversion tracking on the basis of your consent, legal basis: Art. 6 para. 1 letter a) DS-GVO)

Further information and Piwik’s current privacy policy can be found at: https://piwik.pro/privacy-policy/.

Rights of the data subject

If incorrect personal data is processed, you have the right to correction of such (Section 16 GDPR).

If legal requirements are given, you have the right to request the deletion or limitation of processing, and you have the right to object to such processing (Sections 17, 18 and 21 GDPR).

If you have given your consent to data processing or if a contract exists pertaining to data processing and if such data processing is carried out via automated processes, you have a right to data portability where applicable (Section 20 GDPR).

Should you exercise your above-mentioned rights, the DIHK e.V. will review whether statutory requirements are met.

For appeals pertaining to data privacy laws, you may contact the competent supervisory authority.

IV. Newsletter

1. Description, scope and purpose of the data processing

On our website, you are able to subscribe to our Chamber newsletter and communication that is available for our subscribers free of charge. By subscribing to our newsletter and communication services we will transfer the data you provided in our iFrame input form to our service provider for our newsletter mailings. We will process the following data:

Firstname
Lastname
Company name
City
E-Mail
Language selection: German/English

We will further process the following data: date and time of the subscription

For the processing of your personal data we will ask for your consent in the subscription process and provide a link to this privacy policy for you. We will not transfer your personal data that we process for your newsletter and communication subscription to any party other than the service provider for our newsletter mailings. Your personal data will exclusively be used for your newsletter and communication subscription with us.

2. Legal basis for data processing

Legal basis for the processing of your personal data supplied to us through your newsletter and communication subscription is the consent provided by you (Article 6 (1)(a) GDPR). If you receive the newsletter because you are an AHK Member to the contact details you registered with us the legal basis is Article 6 (1)(b) GDPR).

3. Storage of personal data

We will process your personal data as long as required to fulfil the purposes we collected it for. Your personal data will be deleted in accordance with our data retention rules and/or legal obligations.

4. Newsletter-Tracking

To optimise our newsletter and communication services we use personalised newsletter tracking tools. We will not only process your email address but also your activity in connection with our newsletter and communication services (e.g. clicks on articles/events).

5. Individual’s rights

You can unsubscribe from our newsletter and communication services at any time. A link to unsubscribe will be provided with every newsletter sent by us. You can also send us an email to unsubscribe from our newsletter: info(at)ahk-arabia.com.

6. Use of Google reCAPTCHA

We use Google's reCaptcha service to determine whether a human or computer makes a specific entry in our contact or newsletter form. Google uses the following data to check whether you are a human or a computer: IP address of the end device used, the website that you are visiting and on which the Captcha is integrated, the date and duration of the visit, the identification data of the browser and operating system type used, Google account if you are on Google are logged in, mouse movements on the reCaptcha areas as well as tasks where you have to identify images. The legal basis for the data processing described is Article 6 Paragraph 1 Letter f of the General Data Protection Regulation. There is a legitimate interest on our part in this data processing, to ensure the security of our website and to protect us from automated input (attacks).

V. Registration (events & publications)

1. Description, scope and purpose of data processing

On our website you can register for our events and order publications by supplying personal data to us. Your data will be provided in an input form on our website and will then be transmitted to us. We will process your personal data. We will generally not transfer personal data to third parties. We will process the following data:

Title
Firstname
Lastname
Company
Phone number
E-mail
Name of the event you wish to attend

We will further process the following data:

Date and time of the registration
used browser
Operating System

2. Legal basis for processing

Legal basis for the processing of your personal data supplied to receive our newsletter and communication subscription is the consent provided by you (Article 6 (1)(a) GDPR).

3. Storage of personal data

You can make a request to delete or amend your personal data with us at any time. Please contact us via info@ahk-arabia.com. If we need your personal data for pre-contractual considerations, to fulfil our contractual obligations with you or to adhere to any other obligation, an early deletion is only possible in accordance with our contractual and/or legal obligations.

V. E-Mail contact

1. Description, scope and purpose of data processing

It is possible to contact us by email. We will then collect and process your personal data provided to us in this email. There will be no transfer of your personal data to third parties. We will only use your personal data in order to communicate with you about your enquiry.

2. Legal basis for processing

Legal basis for the processing of your personal data provided to us by email is our legitimate interest (GDPR Article 6 (1) (f)). Should your contact with us through email, result in a contract, the basis for processing is the fullfilment of our contractual obligation to you (GDPR Article 6 (1) (b)).

3. Data storage

4. Individual’s rights

VI. Transfer of personal data to third parties

1. Website operators

In line with processing, personal data is forwarded to the agency commissioned to run the website as well as to the technical service provider. Such is regulated via a corresponding agreement with the service provider.

2. Social media sharing button

General notice: Social media plugins usually lead to the fact that every visitor to a website is immediately captured by such services by means of his IP address and that his subsequent browser behavior is logged. This can also occur if you do not press the button. To prevent this, we use the Shariff method. Here, our social media buttons only establish direct contact between the social network and you only if you click on the respective sharing button. If you are already logged in with a social network, this is done without an extra window for Facebook and Google+. Twitter displays a pop-up window in which the text of the tweet can still be edited. This way, you may publish our content in social networks without such networks being able to compile complete surfing profiles. Twitter

Our website uses plugins of the social network Twitter Inc., 795 Folsom Street, Suite 600, San Francisco, CA 94107, USA. By using the Shariff method, Twitter only gains knowledge of your IP address and your visit to our website if you click the button. We have no knowledge of any subsequent potential collection and use of your data by Twitter and also have no influence on such. More information can be found in the data privacy statement of Twitter at twitter.com/privacy. Regarding the general handling with and the disabling of cookies, we also always refer to our general description in this data privacy statement.

Our website uses the LinkedIn share plugin of the social network LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. By clicking the button, your browser connects to LinkedIn to carry out the functions of the plugin. In this context, no personal data is stored by LinkedIn, and your use is also not recorded via a cookie. More information can be found in the data privacy statement of LinkedIn at www.linkedin.com/legal/privacy-policy. Regarding the general handling with and the disabling of cookies, we also always refer to our general description in this data privacy statement.

YouTube videos

In some instances, we have embedded YouTube videos on our website that are stored on the servers of the provider YouTube and that are playable by our website via such embedding. Embedding of the videos is carried out with the activated option for advanced data privacy settings. If you play these videos, YouTube cookies and DoubleClick cookies are stored on your computer, and data is potentially transmitted to Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, as the operator of YouTube. When playing videos stored by YouTube, according to current information, at the very minimum the following data is transmitted to Google Inc. as operator of YouTube and operator of the DoubleClick network: IP address and cookie ID, the specific address of our accessed page, system date and time of access, your browser ID. Transmission of such data is carried out independent of whether you have a Google user account via which you are logged in or you do not have a user account. If you are logged in, such data is potentially directly allocated to your account by Google. If you do not want such allocation to your profile, you have to log out prior to activating the playback button for the video. YouTube or Google Inc. store such data as usage profiles and, if applicable, use such for purposes of marketing, market research and/or for the demand-driven design of their websites. Such an analysis is carried out in particular (also for users who are not logged in) to provide demand-driven advertising and to inform other users about your activities on our website. You have the right to object to the creation of such usage profiles; to exercise your right, you will have to contact Google as the operator of YouTube.

Google Maps

This website uses the web mapping service Google Maps of Google Inc. By using this website you give your consent to the collection, processing and exploitation of data potentially collected in an automated fashion by Google and its representatives. Terms of use of Google Maps. Further information pertaining to the purpose and scope of data collection and processing by Google can be found on this information page.

Website analysis with Google Analytics

This website uses the service “Google Analytics” provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) for the analysis of website usage by users. The service uses cookies - text files that are stored on your end device. Information collected via these cookies is generally transmitted to a Google server in the US and stored there. IP anonymization is active on this website. The IP address of the users is shortened within the Member States of the EU and the European Economic Area. Due to such shortening, the personal reference to your IP address is eliminated. In line with the data processing agreement the website operators have entered into with Google Inc., Google Inc. compiles an analysis of website usage and website activity by means of collected data and provides services connected to the use of the internet. You have the option to prevent the storing of cookies on your device by making the corresponding changes to your browser settings. It is not guaranteed that you will be able to use all functions of this website if your browser does not accept cookies. Furthermore, by using a browser plugin, you can prevent that information collected by cookies (including your IP address) is sent to Google Inc. and is exploited by Google Inc. The following link will take you to the respective plugin: tools.google.com/dlpage/gaoptout. You may prevent the capture by Google Analytics by clicking on the below link. An opt-out cookie is placed that prevents the future recording of your data when visiting this website:

Disable Google Analytics

You can find more information regarding the use of data by Google Inc.: support.google.com/analytics/answer/6004245.

VII. Rights of the data subject

You have the following rights according to the EU General Data Protection Regulation: If your personal data is processed, you have to right to obtain information regarding the storage of your personal data (Section 15 GDPR). If incorrect personal data is processed, you have the right to correction of such (Section 16 GDPR). If legal requirements are given, you have the right to request the deletion or limitation of processing, and you have the right to object to such processing (Sections 17, 18 and 21 GDPR). If you have given your consent to data processing or if a contract exists pertaining to data processing and if such data processing is carried out via automated processes, you have a right to data portability where applicable (Section 20 GDPR). Should you exercise your above-mentioned rights, GESALO will review whether statutory requirements are met.