Privacy Policy
Website corporate carbon footprint calculator for companies / corporate carbon footprint calculator for events
I. Name and address of the controller
The controller within the meaning of data protection laws, in particular Article 4 of Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter "GDPR"), is
KlimAktiv Consulting GmbH
(hereinafter referred to as "KlimAktiv")
Gartenstr. 235
72074 Tübingen
Tuebingen, Germany
Phone: +49 7071 5393 650
E-Mail: info@klimaktiv.de
Data protection concerns: datenschutz@klimaktiv.de
Website: www.klimaktiv.de
The protection of your personal data is important to us - especially with regard to the protection of your personal rights when processing and using this information.
In the following, we inform you about which personal data is collected when you use our website.
II Definition of terms
This data protection declaration is based on the terms used by the European legislator for the adoption of the GDPR. Our privacy policy should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance.
We use the following terms, among others, in this privacy policy:
a) personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
b) Data subject
Data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible for the processing.
c) Processing
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
d) Restriction of processing
Restriction of processing means the marking of stored personal data with the aim of limiting their processing in the future.
e) Pseudonymisation
Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
f) Controller or controller responsible for the processing
The controller or controller responsible for the processing means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
g) Processor
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
h) Recipient
Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients. The processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
i) Third party
A third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process the personal data.
j) Consent
Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
III Purposes of data processing by the controller and third parties
We process your personal data only for the purposes stated in this privacy policy. Your personal data will not be transferred to third parties for purposes other than those stated. We only pass on your personal data to third parties if
- You have given your express consent to this,
see point (a) of Article 6 (1) GDPR; - the processing is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract,
see point (b) of Article 6 (1) GDPR; - processing is necessary for compliance with a legal obligation,
cf. point (c) of Article 6 (1) GDPR - processing is necessary to safeguard legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
see point (f) of Article 6 (1) GDPR.
IV. Deletion or blocking of the data
We adhere to the principles of data avoidance and data minimisation. We therefore only store your personal data for as long as is necessary to achieve the purposes stated in this privacy policy or as provided for by the various storage periods stipulated by law. Once the respective purpose no longer applies or these periods have expired, the corresponding data will be routinely blocked or deleted in accordance with the statutory provisions.
V. Rights of the data subject
a) Right to confirmation
Each data subject shall have the right granted by the European legislator to obtain from the controller the confirmation as to whether or not personal data concerning them are being processed. If a data subject wishes to avail himself of this right of confirmation, he or she may, at any time, contact any employee of the controller.
b) Right to information
Any person affected by the processing of personal data has the right, granted by the European legislator, to obtain information free of charge at any time from the controller about the personal data stored about him/her and a copy of this information. Furthermore, the European legislator has granted the data subject access to the following information:
§ the purposes of the processing;
§ the categories of personal data being processed;
§ the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
§ where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
§ the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
§ the existence of the right to lodge a complaint with a supervisory authority;
§ if the personal data are not collected from the data subject: All available information about the origin of the data;
§ the existence of automated decision-making, including profiling, referred to in Article 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Furthermore, the data subject has a right to information as to whether personal data has been transferred to a third country or to an international organisation. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards in connection with the transfer.
If a data subject wishes to exercise this right of access, he or she may contact an employee of the controller at any time.
c) Right to rectification
Any person affected by the processing of personal data has the right granted by the European legislator to demand the immediate correction of incorrect personal data concerning them. Furthermore, taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
If a data subject wishes to exercise this right to rectification, he or she may, at any time, contact any employee of the controller.
d) Right to erasure (right to be forgotten)
Each data subject shall have the right granted by the European legislator to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies, as long as the processing is not necessary:
§ The personal data have been collected or otherwise processed for purposes for which they are no longer necessary.
§ The data subject withdraws consent on which the processing is based according to point (a) of Article 6 (1) of the GDPR, or point (a) of Article 9 (2) of the GDPR, and where there is no other legal ground for the processing.
§ The data subject objects to the processing pursuant to Article 21 (1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21 (2) of the GDPR.
§ The personal data have been processed unlawfully.
§ The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
§ The personal data have been collected in relation to the offer of information society services referred to in Article 8 (1) GDPR.
If one of the aforementioned reasons applies, and a data subject wishes to request the erasure of personal data stored by KlimAktiv, he or she may, at any time, contact any employee of the controller. The relevant employee will ensure that the request for erasure is complied with immediately.
If the personal data has been made public by KlimAktiv and our company is obliged to erase the personal data in accordance with Article 17 (1) GDPR, KlimAktiv shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform other data controllers who process the published personal data, that the data subject has requested the erasure of all links to this personal data or of copies or replications of this personal data from these other data controllers, insofar as the processing is not necessary. An employee of KlimAktiv will arrange the necessary measures in individual cases.
e) Right to restriction of processing
Each data subject shall have the right granted by the European legislator to obtain from the controller restriction of processing where one of the following requirements applies:
§ The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
§ The processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
§ The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims.
§ The data subject has objected to the processing pursuant to Article 21 (1) GDPR, pending the verification of whether the legitimate grounds of the controller override those of the data subject.
If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored by the controller, he or she may at any time contact any employee of the controller. The employee of will arrange the restriction of the processing.
f) Right to data portability
Any person affected by the processing of personal data has the right, granted by the European legislator, to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format. He or she also has the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent pursuant to point (a) of Article 6 (1) GDPR or point (a) of Article 9 (2) GDPR or on a contract pursuant to point (b) of Article 6 (1) GDPR and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, in exercising his or her right to data portability pursuant to Article 20 (1) of the GDPR, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible and when doing so does not adversely affect the rights and freedoms of others.
In order to assert the right to data portability, the data subject may at any time contact any employee of KlimAktiv.
g) Right to object
Any person affected by the processing of personal data has the right granted by the European legislator to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6 (1) GDPR. This also applies to profiling based on these provisions.
KlimAktiv will no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
If KlimAktiv processes personal data for direct marketing purposes, the data subject has the right to object at any time to processing of personal data concerning him or her for such marketing. This also applies to profiling insofar as it is associated with such direct advertising. If the data subject objects to KlimAktiv to the processing for direct marketing purposes, KlimAktiv will no longer process the personal data for these purposes.
In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her by KlimAktiv for scientific or historical research purposes, or for statistical purposes pursuant to Article 89 (1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
In order to exercise the right to object, the data subject may contact any employee of KlimAktiv. The data subject is also free, in the context of the use of information society services and notwithstanding Directive 2002/58/EC, to exercise his or her right to object by automated means using technical specifications.
h) Automated decisions in individual cases including profiling
Each data subject shall have the right granted by the European legislator not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her, or similarly significantly affects him or her, provided that the decision (1) is not necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, or (3) is based on the data subject's explicit consent.
If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) it is based on the data subject's explicit consent, KlimAktiv will implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision.
If the data subject wishes to exercise the rights concerning automated individual decision-making, he or she may, at any time, contact any employee of the controller.
i) Right to withdraw consent under data protection law
Any person affected by the processing of personal data has the right granted by the European legislator to withdraw consent to the processing of personal data at any time.
If the data subject wishes to exercise their right to withdraw consent, they may contact an employee of the controller at any time.
You can contact the supervisory authority responsible for you at any time with a complaint. Your competent supervisory authority depends on the federal state of your place of residence, your work or the suspected infringement. A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
VI Automated data collection and processing by the browser - server log files
When you visit our website, information is automatically transmitted to our server by the browser used on your device and temporarily stored in so-called server log files - unless you have deactivated this function. The following technically required data is collected:
- IP address of the requesting computer;
- File request of the client;
- HTTP response code;
- Website from which you accessed our website (referrer URL);
- Time of the server request;
- Browser type and version;
- Operating system of the requesting computer.
These server log files are not analysed on a personal basis. The data cannot be assigned to specific persons at any time. The data is not merged with other data sources. We do not use your data to draw conclusions about your person or your company. Recipients of the data are only the controller and, if applicable, processors.
The legal basis for the processing is our legitimate interest in accordance with point (f) of Article 6 (1) GDPR to provide you with our website and to ensure its stability and security.
VII Cookies
Cookies are small text files that are stored by your browser on your end device to store certain information.
This website only uses one technically necessary cookie. This is necessary to ensure the basic functionality and secure use of our website. The cookie used is a so-called session cookie and is automatically deleted at the end of your visit.
The legal basis for the processing is point (f) of Article 6 (1) GDPR to safeguard our legitimate interests, as the cookie is necessary to ensure the operation and security of the website.
No cookies are used for analysis, tracking or advertising purposes.
VIII Contacting us and processing personal data
If you send us personal data by e-mail or via our website when contacting us (e.g. surname, first name, e-mail address, postal address), this is always done on a voluntary basis. The data transmitted will be used and stored for the purpose of processing a contractual relationship, processing your enquiries and for possible follow-up questions.
We delete the data collected in this context as soon as its storage is no longer required or restrict its processing if there are statutory retention obligations.
The legal basis for the processing is point (b) of Article 6 (1)GDPR in the context of (emerging) contractual relationships and point (f) of Article 6 (1) GDPR to safeguard our legitimate interest in responding to your enquiries.
IX. Registration on our website (login function)
When you register to use the application, some personal data is collected, such as your surname, first name, company name and email address. If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option of changing or deleting the data provided during registration at any time. Of course, we will also provide you with information about the personal data we have stored about you at any time. We will also be happy to correct or delete this data at your request, provided there are no statutory retention obligations to the contrary. To contact us in this regard, please use the contact details provided at the end of this privacy policy. An overview of the aforementioned rights as a data subject can be found above in this privacy policy under "V Rights of the data subject".
The legal basis for the processing is point (a) of Article 6 (1)GDPR, provided that you give us your consent to process the personal data concerned as part of or for the above-mentioned registration process;
Point (b) of Article 6 (1) GDPR in the context of contractual relationships and
Point (f) of Article 6 (1) GDPR to protect our legitimate interest in processing your registration/registration enquiry.
X. Provision of chargeable services
In order to provide chargeable services, we request additional data, such as payment details, in order to be able to fulfil your order. We store this data in our systems until the statutory retention periods have expired.
The legal basis for the processing is point (a) of Article 6 (1) GDPR, provided that you give us your (implied) consent to the processing of the personal data concerned by providing us with your additional data (see above);
Point (b) of Article 6 (1)GDPR for the fulfilment of a contract or for the implementation of pre-contractual measures taken at the request of the data subject; and
Point (f) of Article 6 (1) GDPR to protect our legitimate interest in processing your enquiries.
XI. Amendment of our data protection provisions
We reserve the right to amend this privacy policy if necessary, in order to adapt it to current legal developments or changes to our offers - for example when introducing new functions or services.
The current version of the privacy policy will apply when you visit our website again.
XII. Questions to the data protection officer
If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organisation directly:
Status: 09/05/2025