Data protection declaration

Click here to view PDF, which includes this declaration in German and English

As of: May 2018

Legal Note: The only legally binding language of this Data Protection Declaration is German.

Preamble

With the following Data Protection Declaration we would like to inform you about the type, scope and purpose of the collection, processing and use of personal data when using the data collected by the International Union of Marine Insurance e. V., Große Elbstraße 36, 22767 Hamburg, Germany, phone: +49 40 2000 747-0 (hereinafter also referred to as "IUMI") on the websites https://iumi.com/.

Personal data is all data that can be referred to you personally, e.g. name, address, email address, user behaviour.

1. Who is responsible for data processing and who can I contact

Responsible pursuant to Article 4, para. 7 of the EU General Data Protection Regulation (hereinafter referred to as "GDPR")

International Union of Marine Insurance e.V.

Große Elbstraße 36

22767 Hamburg, Germany

phone: +49 40 2000 747-0

fax: +49 40 2000 747-0

email: data-protection@iumi.com

(see imprint https://iumi.com/imprint)

2. Your rights

You have the following rights vis-à-vis IUMI with regard to the personal data concerning you:

- Right of access pursuant to Article 15 GDPR,

- Right to rectification pursuant to Article 16 GDPR,

- Right to erasure (right to be forgotten) pursuant to Article 17 GDPR,

- Right to restriction of processing pursuant to Article 18 GDPR

- Right to restriction of processing pursuant to Article 21 GDPR (for more information see Clause 13),

- Right to data portability pursuant to Article 20 GDPR.

With regard to the right of access and the right to erasure, the restrictions pursuant to Sections 34 and 35 German Federal Data Protection Act (hereinafter referred to as “BDSG”) apply.

You also have the right to complain to a data privacy supervisory authority about the processing of your personal data by IUMI (Article 77 GDPR in conjunction with Section 19 BDSG).

3. Collection of personal data when contacting us

When you contact us by e-mail, the data provided by you (your e-mail address, possibly your name and telephone number) will be stored by IUMI in order to answer your question. IUMI deletes the data arising in this context after storage is no longer necessary or restricts the processing if legal storage obligations exist.

In case we use contracted service providers for individual features of our service or if we intend to use your data for commercial purposes, we will inform you in detail about the respective processes below. We also state the specified criteria for the storage duration.

4. Collection of personal data when visiting our website

If you use the website purely for informational purposes, i. e. if you do not register or otherwise provide us with information, IUMI only collects the personal data that your browser transmits to IUMI's server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website and to guarantee stability and security (the legal basis for which is Article 6, para. 1, p. 1, lit. f GDPR):

- IP address

- Date and time of the request

- Browser

In addition to the above-mentioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive, assigned to the browser you are using and through which certain information flows to the site that places the cookie (IUMI in this case). Cookies cannot run programmes or transmit viruses to your computer. They serve to make the internet offer more user-friendly and effective. We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit.

This website only uses Transient cookies:

Transient cookies are automatically deleted when you close your browser. This includes in particular the session cookies. These store a so-called session ID, with which different requests of your browser can be assigned to the common session. This means that your computer can be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.

You can configure your browser settings according to your wishes and, for example, refuse the acceptance of cookies. Please note that in this case you may not be able to use all of the website's features.

5. Collection of personal data for additional services

In addition to the purely informational use of our website, we offer various services that you can use if you are interested. In order to do this, you will usually be asked to provide further personal data that we use to provide the respective service and for which the aforementioned data processing principles apply.

We store and use data provided by you when opening a user account for the purpose of providing our services in accordance with the contract. This data usually includes, among other things, email address, password, name, title, employer.

The legal basis for the above data usage is

Article 6, para. 1, p. 1, lit. b) GDPR.

6. Web Analytics

Google-Analytics

This website uses Google Analytics, a web analytics service of Google Inc. (“Google”). Google Analytics uses so-called “Cookies” (text files that are stored on your computer and enable an analysis of the use of the website). The information generated by the cookies about your use of our website (including your IP address) is usually transferred to a server of Google and stored in the USA.

However, by activating the IP anonymisation your IP address will be shortened by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases the full IP address is transferred to a Google server in the USA and shortened there. Google will use this information to evaluate your utilisation of our website, to create a report about the website activities for the website owners, and to deliver further services that are linked to the utilisation of the website and internet.

The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data.

You can avoid the installation of cookies through a specific setting in your browser software; though we point out that you might not be able to use all features of this website to full extent.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of our website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available for deactivation under the following link: https://tools.google.com/dlpage/gaoptout?hl=en

We use Google Analytics to analyse and regularly improve the use of our website. We use the statistics gained to improve our service and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield,

https://www.privacyshield.gov/EU-US-Framework

The legal basis for the use of Google Analytics is Article 6, para. 1, p. 1, lit. f) GDPR.

Third party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

https://www.google.de/analytics/terms/de.html

An overview of data privacy law can be found here:

http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the data privacy declaration:

https://www.google.com/intl/de/policies/privacy/.

7. Newsletter

With your consent you can subscribe to our newsletter, with which we inform you about our current interesting offers.

For the registration to our newsletter we use the so-called double opt-in procedure. This means that after your registration we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you would like the newsletter to be sent. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

The only mandatory information for sending the newsletter is your full name and e-mail address. (The indication of further, separately marked data is voluntary and is used to be able to address you personally). After your confirmation we will save your e-mail address for the purpose of sending you the newsletter.

The information is stored for as long as you have subscribed to the newsletter.

The legal basis is Art. 6 para. 1 sentence 1 lit. a) DSGVO.

You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter e-mail, by e-mail to data-protection@iumi.com or by sending a message to the contact details stated in the imprint.

8. Social-Media-Plugins

We currently do not use social media plugins. Our website only offers a link to the following networks:

a. Twitter

b. LinkedIn

When using these links, no data is passed on by us. With regard to the data protection regulations of the networks, we refer to the information provided by the providers.

a. Twitter

Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA

Data privacy declarations:

https://twitter.com/privacy

Twitter has submitted to the EU-US Privacy Shield,

https://www.privacyshield.gov/EU-US-Framework

b. LinkedIn

LinkedIn is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA

Data privacy declarations:

https://www.linkedin.com/legal/privacy-policy

LinkedIn has submitted to the EU-US Privacy Shield,

https://www.privacyshield.gov/EU-US-Framework

9. Purpose of processing and its legal basis

We process the aforementioned personal data in accordance with the provisions of GDPR and the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). In detail:

a. For the fulfilment of contractual obligations (Article 6 para. 1 b DSGVO)

The processing of personal data is carried out for the purpose of providing services in the context of the membership opposite our members and opposite third parties, which take place on your request.

The purposes of data processing may include, among other things, the creation of a member account, the provision of educational content, the processing of user content and hosting of conferences.

b. In the context of the balancing of interests (Article 6, para. 1, p. 1, lit. f GDPR)

As far as necessary, we process your data beyond the actual fulfilment of the contract to protect legitimate interests of us or third parties. Examples:

— Advertising or market and opinion research, as far as you have not objected to the use of your data

— Ensuring IT security

— Prevention of crime

— Measures for business management and further development of services and products

c. On the basis of your consent (Article 6, para. 1, p. 1, lit. a GDPR)

Insofar as you have given us your consent to the processing of personal data for certain purposes (such as fulfilling contractual obligations), the legality of this processing is based on your consent. A given consent can be revoked at any time. This also applies to the revocation of declarations of consent issued to us prior to the application of the EU General Data Protection Regulation, i. e. before 25 May 2018. Please note that the revocation will only take effect in the future. Processing carried out prior to revocation shall not be affected. You can request a status overview of the consents you have given at any time from us.

10. Is data transferred to a third country

We work with certain external service providers to process your data. Data is only transferred to countries outside the EU or the EEA (so-called third countries) if this is necessary for the fulfilment of our contractual obligations, if it is legally required, if you have given us your consent or if the data transfer is carried out within the scope of commissioned data processing. If service providers are deployed in the third country, they are obliged to comply with the data protection level in Europe by the agreement of the EU standard contractual clauses.

The legal basis for this is Article 46, para. 1 GDPR.

11. How long is my data stored

We process and store your personal data as long as it is necessary for the fulfilment of our contractual and legal obligations. If the data is no longer required for the fulfilment of contractual or legal obligations, it is regularly deleted, unless its further processing - limited in time - is necessary for the following purposes:

— Fulfilment of commercial and fiscal retention periods: The Commercial Code (Handelsgesetzbuch) and the Tax Code (Abgabenordnung) are to be mentioned.

— Preservation of evidence under the statute of limitations. According to Sections 195 et seq. of the German Civil Code ( Bürgerliches Gesetzbuch, BGB), these periods of limitation can be up to 30 years, whereas the regular period of limitation is three years.

12. Is there an obligation for me to provide data

Within the scope of our business relationship, you must provide personal data that is necessary for the initiation and execution of our business relationship and the fulfilment of the associated contractual obligations or that we are legally obliged to collect. Without this data, we will usually have to reject the conclusion of the contract or the membership or will no longer be able to carry out an existing contract and may have to terminate it.

13. Miscellaneous

You may contact us any time if you have questions regarding the data protection practices or want us to delete your profile or any personal data.

In the course of the continuous development of our services and the implementation of new technologies, IUMI reserves the right to update this Data Protection Declaration any time. Therefore we suggest you read our Data Protection Declaration again once in a while on https://iumi.com .

Please do not hesitate to contact us if you have any questions about data protection. Simply send us an email to: data-protection@iumi.com or write to us at the above address.

14. Right of revocation and objection against the processing of your data

a. Revocation

If you have given your consent to the processing of your data, you can revoke it at any time. Such a revocation influences the admissibility of the processing of your personal data only after you have expressed it to us.

b. Objection

Your right of objection follows from Article 21 GDPR.

For reasons arising from your particular situation, you have the right to object at any time to the processing of personal data relating to you on the basis of Article 6, para. 1, p. 1, lit. e GDPR (data processing in the public interest) and Article 6, para. 1, p. 1, lit. f GDPR (data processing on the basis of a balance of interests).

If you exercise your right of objection, we will no longer process your personal data, unless we can prove compelling grounds worthy of protection for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Furthermore you have the right to object at any time to the processing of personal data concerning you for the purpose of direct advertising.

If you object to the processing for purposes of direct advertising, we will no longer process your personal data for these purposes.

The objection and revocation can be made without observing formal requirements under the following contact data:

International Union of Marine Insurance e.V.

Große Elbstraße 36

22767 Hamburg, Germany

phone: +49 40 2000 747-0

fax: +49 40 2000 747-0

email: data-protection@iumi.com