We collect and process your personal data only for the purposes outlined below. “Personal data” means any information relating to an identified or identifiable natural person, such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

• Membership: When you apply to join the DIS, we ask for your name, affiliation, date of birth, and contact information. We need this information to evaluate your eligibility for DIS membership in accordance with the DIS-Statutes, to communicate with you about your application, to manage your membership, and to perform certain legal obligations as an association (e.g. to convene a general assembly).
• Member area and directory: We maintain a public directory of our members, including name, title, (business) address, and contact information. You may choose to provide additional information to be included in the directory, such as a profile picture, your professional focus, and arbitration experience. We will not make your personal data publicly available without your consent, and we will remove any information from our member directory upon your request, or when your membership ends.
• Member communications: If you are a member of the DIS, we may use your contact information to communicate with you about your membership, to send you the German Arbitration Journal (SchiedsVZ) and to inform you about events, DIS publications, and other membership benefits.
• For applicants: Please note the supplementary privacy policy for applicants (Datenschutzinformation für Bewerber, in German).
• Awards and sponsorships: When you apply to be considered for an award or sponsorship, we will ask you to submit your contact information, (doctoral) thesis, academic evaluations and other relevant information. We need this information to evaluate your application and communicate with you about the result, and to comply with tax and accounting rules.
• Events: We process the personal data you provide when registering for an event in order to execute the contract for the event. As a general rule, we compile a list of participants for events, which only contains your first name and surname, any titles, and your company, industry, profession and/or location details, and which is made available to all participants at the respective event. The list of participants does not contain the contact details you provided when registering. We will also not publish the contact data. You may object to the inclusion in the list of participants before the event.
  
  During our events, which take place in the presence of the participants, we may take photographs in which you may also be seen as a participant. Our photographers are identifiable as such, and you have the option to let the photographers know if you do not agree to a photograph being taken. We will use the photographs for internal event documentation and for communication to our members and the public, including but not limited to our website, brochures or similar materials, and our social media channels. We take and use the photographs and process the personal data in connection with the photographs to protect our legitimate interest in internal and external communication about our events pursuant to Art. 6 para 1, subpara 1, lit. f) GDPR. The photographs will be stored for the duration of our legitimate interest.
  
  For our events that (also) take place online, we may take screenshots. On these screenshots you may be recognizable as a participant if you have activated your camera while participating. We use the screenshots for internal event documentation and for communication to our members and the public, in particular on our website, in brochures or similar materials and our social media channels. We create and use the recordings and screenshots and process the personal data in connection with the screenshots to protect our legitimate interest in internal and external communication about our events pursuant to Art. 6 para 1, subpara 1, lit. f) GDPR. The screenshots are stored for the duration of our legitimate interest. If you do not wish to appear on the screenshots we take, you can turn off your camera or let us know at least 7 days before the start of the event (e.g. by email to events@disarb.org).
  
  We may record our events that (also) take place online in order to make them available to our members or the public in whole or in part following the respective event, in particular via our website. You may be recognizable in these recordings if you have activated your camera during online participation or if you speak during the event. We create and use the recordings and process the personal data in connection with the recordings to protect our legitimate interest in documenting our events internally and externally pursuant to Art. 6 para 1, subpara 1, lit. f) GDPR. The recordings are stored for the duration of our legitimate interest. If you do not wish to appear in the recordings we make, you may deactivate your camera and submit your request to speak (e.g. via the chat function) or you are welcome to let us know at least 7 days before the start of the event (e.g. by email to events@disarb.org). The creation of the screenshots and recordings, as well as the processing of the personal data in connection with our events, is carried out to protect the legitimate interest of the event participants in receiving information about the (other) participants in the respective event, as well as our legitimate interest in the internal and external communication about our events, all based on Art. 6 para 1, subpara 1, lit. f) GDPR.
• Payment processing: When you make payments to us, we may learn details about the payment method you used, such as your bank account or credit card information. We need this information to process your payment, and to comply with tax and accounting rules.
• Other third parties and their contact persons: For the purposes of communication, contract initiation, contract conclusion and implementation, we process the data required for this or for the fulfilment of the legitimate interest.

We engage service providers who may only process your personal data on our behalf and at our documented instructions, and who are bound by contractual data security and confidentiality obligations. Additionally, we may disclose your personal data when required or permitted by applicable EU law, for example in connection with requests from law enforcement officials and in connection with court proceedings.

If you are a member of the DIS, we may share your contact information with Publishers C.H. Beck (Verlag C. H. Beck) to enable them to send you the German Arbitration Journal (SchiedsVZ) on our behalf. If you choose to be included in our public member directory, your directory profile will be publicly accessible via the internet.

We may also share aggregated and anonymized statistical information with third parties as permitted by applicable law. For example, we may publish statistics about our association’s members.

We protect the security and confidentiality of your personal data. In particular, we maintain appropriate administrative, technical and physical safeguards to protect the personal data relating to you, in accordance with applicable law. We restrict access to personal data on a need-to-know basis. We may apply different security measures depending on the type of data, and how it is collected and stored.

We will retain your personal data for the period necessary to fulfil the purposes outlined in this privacy policy unless a longer retention period is required or permitted by law. If you are a member of the DIS, we may retain your name, city, country and the period of your membership for historical purposes, based on our legitimate interest in maintaining historical records of the association. Also note that we need to retain certain payment information for tax and accounting purposes.

We do not transfer your personal data to countries outside of the European Union, unless it is necessary or permissible in order to fulfil the contractual agreements made with you or orders placed by you or based on your consent.

You are generally not obligated to provide your personal data to us. However, if you choose not to provide any personal data or if you choose to withdraw your consent with regard to publication of certain data, we may not be able to provide the services you have requested. For example, we cannot administer your membership without your contact information, or without processing your payment.  When we process your personal data with your consent, you have the right to withdraw your consent at any time and free of charge.  We will apply your preferences going forward; this will however not affect the lawfulness of the processing before you withdraw consent. 

Subject to applicable law, you may have the right to request access to and to receive information about the personal data we process about you, to update, rectify or erase your personal data, to restrict or to object to the processing of your personal data, and where applicable, a right to data portability that allows you to easily communicate your information to another company. Please note that there are exceptions and limitations to each of these rights. You always have the right to lodge a complaint with a data protection authority, including in your country of residence, place of work or where you think a violation of your rights occurred.

When you visit our website, we collect certain information about your use of the website, such as the IP address of your computer, the name of your Internet service provider, your browser type and version, your operating system, the website that referred you to us, the pages you view on our website and the time and duration of your visit. We collect this information in part because it is necessary for the operation of our website, but also to understand how our website is used and how we can improve it.

Cookies are small files which can be used as identifiers. When you visit our website, we ask your web browser to store certain cookies, and we try to retrieve these cookies during your current or subsequent visits to our website. In doing so, we can learn about how you use our website (known as web analytics).

We use a so-called Consent Management Tool on our website to obtain and manage your consent. This tool gives you the opportunity to decide on the setting of cookies on our websites according to your specifications. You may change the Tool's setting options and grant or withdraw your consent at any time.

We use Cookiebot on our website. The company behind Cookiebot is Cybot A/S, Havnegade 39, 1058 Copenhagen, DK. Among other things, Cookiebot offers us the opportunity to provide you with a comprehensive cookie notice (also known as a cookie banner). By using this function, your data can be sent to Cybot and be stored and processed by them.

We use Cookiebot to obtain your consent to the storage of certain cookies in your browser and to document this in compliance with data protection regulations. In addition, the technology behind Cookiebot scans, monitors and analyses all cookies and tracking measures on this website.

The data mentioned under point 6 is processed by Cookiebot. Furthermore, an encrypted, anonymous key is generated and stored, which stores a proof of consent (via a cookie).

The use and storage of consent is permissible pursuant to Art. 6 para. 1 lit. c GDPR, as we are legally obliged to be able to prove consent (Art. 5 para. 2 GDPR). The possibility to switch off cookies is made possible by the so-called cookie banner.

This website uses Google Analytics, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, ("Google") to analyse and optimize our online services. Google Analytics uses "cookies", text files which are saved on your computer and which enable an analysis of your usage of the website. Information generated by the cookie about your usage of this website (including your IP address) is transferred to a Google server in the United States and stored there. Google will use this information to evaluate your usage of the website in order to compile reports about the website activities and to provide the website operator with additional services in connection with the usage of the website and the internet. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

Google will not associate your IP address with any other data stored by Google. We would like to point out that on this website Google Analytics has been extended by the code "gat._anonymizeIp();" in order to guarantee an anonymized collection of IP addresses (so-called IP-Masking).

You can prevent or opt-out the storage of cookies by making the appropriate setting in our Consent Management Tool (see point 7.1).

We use on our website "Google Tag Manager", a service provided by Google Ireland Limited, ("Google"). Google Tag Manager is used to set up and manage tags. Tags are codes that are used to measure visitor traffic and visitor behaviour. Google Tag Manager is a domain, which does not use cookies and does not collect any personal information. Google Tag Manager triggers other tags that may collect data, but the service itself does not access that data.

Google Tag Manager serves the correct integration of the Consent Management Tool used on these pages. It is in our legitimate interest to make a working implementation of tracking and analysis tools taking into account the chosen settings of the website visitors.

If a deactivation has been made on domain or cookie level, it will remain for all tracking tags implemented with Google Tag Manager.

The legal basis upon which we process your data is Art. 6 para. 1 lit. f DSGVO.

We use the Google reCAPTCHA service on our website. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’). This service is used to distinguish natural persons from so-called ‘bots’ (machine and automated processing) in forms. The IP address may be passed on to Google. This results in the transfer of personal data to Google. The legal basis for the transfer of personal data to Google is the necessity for the technical protection of the operation of our website. In the event that personal data is transferred by Google to the parent company based in the USA (Google LLC), Google has agreed to ensure a comparable level of data protection when transferring data to the third country by concluding so-called standard data protection clauses (SDC) in accordance with Art. 46 para. 2 lit. c GDPR. Further information can be found at https://privacy.google.com/businesses/compliance/#!#gdpr. Further information on Google reCAPTCHA and Google's privacy policy can be found at: https://policies.google.com/privacy?hl=de.

If you have further questions about data protection or if you wish to exercise your rights, please contact us or our Data Protection Officer via email at privacy(at)no_spamdisarb.org or via regular mail at:

German Arbitration Institute (DIS)
Attn: Data Protection Officer
Marienforster Str. 52
53177 Bonn
Germany

Furthermore, there is a contact form on our website that can be used to contact us electronically. If you use this option, the data entered in the input mask (first name, surname, e-mail address and your message) will be transmitted to us and stored. The processing of this data serves us solely to process the contact. They are deleted as soon as they are no longer required to fulfil the purpose for which they were collected. This is the case for personal data from the contact form when the respective conversation has ended. The conversation has ended when it can be concluded from the circumstances that the matter in question has been resolved.

Your consent is obtained for the processing of the data as part of the sending process and reference is made to this privacy policy. Your consent is the legal basis for the processing of the data (Art. 6 para. 1 lit. a GDPR).

The data will not be passed on to third parties in this context. The data is used exclusively for processing the conversation.
 

Last updated: 8 November 2024