Privacy Policy

1. Preamble

DKE-Data GmbH & Co. KG (hereinafter: "DKE") takes the protection of your personal information very seriously and strictly adheres to all applicable data protection laws and regulations, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the TDDDG.

In the following, we inform you in accordance with Art. 12 et seq. GDPR about the collection of personal data when using our websites or when contacting us via the contact options listed on our website. Personal data is all information that can be related to you as a natural person (e.g., name, address, email address). Unless otherwise stated in this privacy policy, the terms used here have the meaning defined in Art. 4 GDPR.

2. Controller and Data Protection Officer

The controller within the meaning of the General Data Protection Regulation is

You can reach our Data Protection Officer at privacy@dke-data.com or at our postal address with the addition "The Data Protection Officer".

3. Data Security

We implement technical and organizational security measures to protect the data we process from accidental or intentional manipulation, loss, or destruction, as well as from access by unauthorized persons.

To protect the security of your data during transmission when using our websites, we use encryption methods that comply with the current state of the art.

4. Collection and Processing of Personal Data When Using the Website for Informational Purposes

We process various categories of your personal data for different purposes. Below, you can see which data we process in which context, for which purposes, and on which legal basis we base the respective processing.

When using our websites purely for informational purposes, i.e., when you do not contact us beyond the mere use of the websites or otherwise transmit information to us, we collect – in addition to information from cookies (on this in the next section) – only usage data that your internet browser automatically transmits to enable you to visit the websites.

In doing so, we collect and process the following data, which is technically required for us to display our websites to you and to ensure their stability and security:

• IP address,
• date and time of the request,
• time zone difference to Greenwich Mean Time (GMT),
• content of the request (specific page),
• access status/HTTP status code,
• amount of data transferred in each case,
• website from which the request originates,
• browser,
• operating system and its interface,
• language and version of the browser software.

Our legitimate interest in data processing also lies in the purposes described above. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. We delete the data collected in this context after it is no longer necessary to store it, or restrict processing if there are statutory retention obligations.

5. Collection and Processing of Personal Data When Contacting Us

If you provide us with certain personal data (e.g., your name, your telephone number, or your email address) to contact us via the contact options provided, we collect and process this data exclusively for the purpose of handling your inquiry. The legal basis in this case is Art. 6 para. 1 sentence 1 lit. b or lit. f GDPR.

After completing your inquiry, all data relating to the inquiry will be automatically deleted. However, in some cases, we may be obliged to continue storing your personal data, e.g., due to statutory retention periods.

6. Use of Cookies

In addition to the data mentioned above, cookies are stored on your computer, smartphone, or other device when you use our websites. We only use technically necessary cookies. These cookies are absolutely necessary for the functioning of our website and enable basic functions. We do not use any other cookies that go beyond the aforementioned purpose. The technically necessary cookies we use include cookies for language settings. These cookies remember your preferred language so that you can view our website directly in the correct language on future visits.

The use of technically necessary cookies is based on § 25 para. 2 no. 2 TDDDG, as their use is absolutely necessary to provide the telemedia service (our website) that you have expressly requested. Furthermore, in accordance with Art. 6 para. 1 lit. f GDPR, we have a legitimate overriding interest in providing a technically flawless, secure, and user-friendly website that is fully usable for you. Therefore, your explicit consent is not required for the use of technically necessary cookies.

Some of the third-party service providers we integrate may set cookies that are not exclusively technically necessary. If this is the case, we will inform you separately and obtain your explicit consent in each individual case.

7. Integration and Use of Third-Party Service Providers

We may disclose your personal data to certain recipients if such disclosure is necessary to fulfill our contractual and legal obligations.

In individual cases, we disclose personal data to our advisors in legal or tax matters, whereby these recipients act independently in their own data protection responsibility and are also obliged to comply with the requirements of the GDPR and other applicable data protection regulations. Furthermore, due to their professional position, they are bound by special confidentiality and secrecy obligations.

In the event of corporate transactions (e.g., sale of our company or part of it), we may disclose personal data to involved advisors or potential buyers/investors.

In addition, we also use services from various specialized companies, e.g., IT service providers, who process data on our behalf. We have concluded a data processing agreement with each service provider in the form of a data processing agreement in accordance with Art. 28 GDPR. A list of our current subprocessors can be found here.

In addition, other external services may also be integrated when using our website. You can find details on this in the following sections:

8. Registration and Use of an agrirouter Account

If you want to use agrirouter, you need an agrirouter account for this purpose.

During registration, we ask you to provide personal data (e.g., name, address, or email address). Some data is required for the use and administration of agrirouter or the agrirouter account. We process this data, which is marked as mandatory information, exclusively for the purpose of providing our contractual services within the framework of the agrirouter end user terms. The legal basis in this case is Art. 6 para. 1 sentence 1 lit. b GDPR. If you provide us with additional personal data during registration or use, we process this data on the basis of your consent within the meaning of Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time (see below "Your Rights").

For registration, we use the so-called double opt-in procedure. This means that after your registration, we will send you an email to the email address you provided, in which we ask you to confirm that you wish to register your agrirouter account. If you do not confirm your registration within one week, your information will be blocked and automatically deleted after one month. The legal basis for deletion in this case is Art. 6 para. 1 lit. c or lit. f GDPR.

When using agrirouter, data transmission takes place between the respective endpoint and agrirouter and is based on the settings in the control center. DKE has no interest in the content of the data to be transported. Nevertheless, in order to ensure the functions of agrirouter, data must be temporarily stored or temporarily held within the framework of the end user terms.

Billing (for the free use of agrirouter for end users) with hardware, software, or app providers or other service providers in connection with the use of agrirouter takes place without DKE accessing the content of the transported data or otherwise becoming aware of it. No personal data is exchanged during billing either.

However, hardware, software, or app providers or other third parties may process personal data of the end user in connection with the use of agrirouter. DKE has no influence on this and is not responsible for it.

9. An Account is Provided by Your Organization

If your organization, e.g., your employer or client, has provided you with an account for agrirouter.com, your organization is the sole data controller and thus solely responsible for all activities related to the processing of personal data in connection with your use of agrirouter.com. DKE only serves as a data processor commissioned by your organization to process personal data on behalf of your organization in this regard.

If your organization grants you access to agrirouter.com, your use is subject to your organization's internal policies, if any.

Therefore, please direct all inquiries regarding your data protection rights to your organization's contact person.

10. Registration for Events – Consent

With your consent, you can register for events organized by our company. The respective event is described in more detail in the relevant registration form on our respective website.

For registration to our events, we use the so-called double opt-in procedure. This means that after your registration, we will send you an email to the email address you provided, in which we ask you to confirm that you want to register for the event in question. If you do not confirm your registration within one week, your information will be blocked and automatically deleted after one month. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any misuse of your personal data. The legal basis for processing until deletion is Art. 6 para. 1 lit. c or lit. f GDPR.

The only mandatory information for registration to events is your email address. The provision of other, separately marked data is voluntary and is used to be able to address you personally. After your confirmation, we store your email address for the purpose of possibly sending you further information about the event and for follow-up questions. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.

The data you provide will be stored in order to take you into account for the event in question and to be able to send you messages in this regard if necessary. We delete the data incurred in this context within one week after you have revoked your consent, or restrict processing insofar as there are statutory retention obligations.

When registering for our events, there is usually also the option of registering for our newsletter. In this regard, what is explained under "Registration for Our Newsletter" applies. If you activate the corresponding field, the double opt-in procedure applies both to the registration for the event and to the confirmation of the newsletter registration. You can revoke your consents independently of each other.

11. Registration for Our Newsletter – Consent, Success Measurement, CleverReach

With your consent, you can register for our newsletter. With our newsletter, we inform you about our company, our products and services, as well as interesting events and occurrences in the fields of agriculture and digitalization.

For registration to the newsletter, we use the so-called double opt-in procedure. This means that after your registration, we will send you an email to the email address you provided, in which we ask you to confirm that you wish to receive our newsletter. If you do not confirm your registration within one week, your information will be blocked and automatically deleted after one month. The legal basis for this is Art. 6 para. 1 lit. c or lit. f GDPR. Upon confirmation of registration, the confirmation, the registration and confirmation time, as well as any changes to your data stored with our shipping service provider are logged. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any misuse of your personal data.

The only mandatory information for registration to the newsletter mailing is your email address. The provision of other, separately marked data is voluntary and is used to be able to address you personally. After your confirmation, we store your data for the purpose of sending the newsletter and the associated success measurement. The legal basis for this is your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

The data you provide will be stored in order to send you messages. We delete the data incurred in this context within one week after you have unsubscribed from the newsletter mailing, i.e., revoked your consent, or restrict processing insofar as there are statutory retention obligations.

CleverReach

For sending newsletters, we use the service "CleverReach" from CleverReach GmbH & Co. KG, Mühlenstraße 43, 26180 Rastede. This service organizes and analyzes the newsletter mailing. The data you enter for the purpose of receiving the newsletter (e.g., email address) are stored on CleverReach servers in Germany or Ireland. The service provider does not use your personal data for its own purposes.

The use of CleverReach enables us to analyze the behavior of newsletter recipients. Among other things, it can be determined how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called "conversion tracking," it can also be determined whether a predefined action took place after clicking the link in the newsletter. Further information can be found in the service provider's privacy policy, which is available here. The legal basis is your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

Success Measurement

Our newsletters contain a tiny image file (so-called "counting pixel" or "web beacon"), which is automatically loaded from the server of our shipping service provider when the newsletter is opened. In the process, technical information (e.g., about the browser and system used as well as your IP address and the time of retrieval) is collected, which is used to optimize the newsletter mailing. For this purpose, information is also collected about which links in newsletters were clicked. The information collected can be assigned to individual recipients and enables us to recognize the preferences and habits of the recipients of our newsletter and to adapt the content of our newsletter to them or to individualize it according to the interests of individual recipients. The legal basis is your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

12. Recipients of Data and Transfer to Third Countries

Your data is generally not disclosed to third parties. However, this does not apply to service providers whom we have commissioned with data processing to the extent of this privacy policy, in particular for providing the technical infrastructure of the websites and our system, for maintaining website content, for sending newsletters, for providing support and/or marketing services, and, with regard to any contact that may be made, for providing our email system.

As explained in the data transmission due to the above-described use of Google Maps, Google reCAPTCHA, or YouTube videos, your data may also be transmitted to other recipients, possibly to those based in the USA (as a so-called "third country"). In this third country, there may be a lower level of protection for your data than is the case within the EU. To ensure an adequate level of protection, we have concluded a contract with our service providers and other recipients of personal data based on standard data protection clauses. Otherwise, we ensure that a transfer only takes place if there is an adequacy decision regarding the respective third country and the recipient is, if necessary, approved under this. Upon request, for which please use the contact information provided above if necessary, you will receive from us a copy of the documents relevant to the processing of your data described in this paragraph.

13. Your Rights

As a data subject under the GDPR, you have various rights, which arise in particular from Art. 15 to 18, 21 GDPR:

13.1. Right to Access

Under the conditions of Art. 15 GDPR, you have the right to request confirmation from us at any time as to whether we are processing personal data concerning you. If this is the case, you can request information about your personal data processed by us in accordance with Art. 15 GDPR. In your request for information, you should specify your request to make it easier for us to compile the required data. Please note that your right to access may be restricted under certain circumstances in accordance with the legal provisions (in particular § 34 BDSG).

13.2. Right to Rectification

If the information concerning you is no longer correct, you can request rectification in accordance with Art. 16 GDPR. If your data is incomplete, you can request completion in accordance with Art. 16 GDPR.

13.3. Right to Erasure

You can request the deletion of your personal data under the conditions of Art. 17 GDPR. However, your claim to deletion depends, among other things, on whether the data concerning you is still needed by us to fulfill our legal obligations.

13.4. Right to Restriction of Processing

Within the framework of the provisions of Art. 18 GDPR, you have the right to request a restriction of the processing of the data concerning you.

13.5. Right to Object

You have the right under Art. 21 GDPR to object at any time, for reasons arising from your particular situation, to the processing of data concerning you that is based on Art. 6 para. 1 lit. e, lit. f GDPR. However, we cannot always comply with this. For example, if there are compelling legitimate grounds for the processing on our part that override other interests, or if we are obliged to continue processing by legal provisions.

13.6. Right to Data Portability

Under Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance, provided that the processing is based on your consent or on a contract between you and us and the processing is carried out using automated procedures. In this case, you may also have the right to have the data transmitted directly from us to another controller, insofar as this is technically feasible.

13.7. Revocation of Consent

If you have given us consent to process personal data concerning you, you can revoke this consent at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. Processing that took place before the revocation remains lawful. You can revoke your consent to the storage of cookies.

13.8. Complaint to a Supervisory Authority

Under the conditions of Art. 77 GDPR, you have the right to lodge a complaint with a competent supervisory authority. As a rule, the data subject can contact the supervisory authority of their usual place of residence or workplace or the place of the alleged violation for this purpose. A list of supervisory authorities (for the non-public sector) and their contact details can be found here. The competent supervisory authority for DKE is the State Commissioner for Data Protection of Lower Saxony.

13.9. Enforcement of Rights

If you wish to assert your rights described above or have questions about data protection, please contact our Data Protection Officer using the contact information provided above. If you have given us your consent to send you messages, you can also revoke your consent simply by clicking on the link provided in the respective message.

14. Obligation to Provide Personal Data

You are neither legally nor contractually obliged to provide us with your personal data. However, it is possible that certain functions of our websites depend on the provision of personal data. If you do not provide personal data in these cases, this may result in functions not being available or only being available to a limited extent.

15. Automated Decisions

The processing of your personal data carried out by us does not include automated decisions in individual cases within the meaning of Art. 22 para. 1 GDPR.

16. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy in the future to comply with any changing legal requirements or to take into account changes to our websites. If we make adjustments, we will mention the date of the last update above. Please check the privacy policy regularly to be informed about adjustments. The current version of the privacy policy can be accessed at any time at agrirouter.com.