Data Protection Notice

1. Controller (Responsible Entity)

Gemeinschaft zur Förderung von Pflanzeninnovation e. V. (GFPi)
represented by Managing Director Stefan Lütke Entrup
Address: Kaufmannstraße 71–73
Phone: 0228-98581-40
Fax: 0228-98581-19
Email: gfpi@bdp-online.de

2. Security and Protection of Your Personal Data

We treat personal data confidentially and protect it through appropriate technical and organisational measures.
Processing is carried out in accordance with the GDPR and the German Federal Data Protection Act (BDSG).

3. Definitions (according to Art. 4 GDPR)

For better transparency, the most relevant GDPR terminology is explained below:

3.1 Personal Data

Any information relating to an identified or identifiable natural person.

3.2 Processing

Includes, for example:

  • collecting
  • storing
  • using
  • disclosing
  • deleting

3.3 Restriction of Processing

Marking stored personal data to limit future processing.

3.4 Profiling

Automated processing to evaluate personal characteristics.

3.5 Pseudonymisation

Processing personal data without direct identifiability.

3.6 Filing System

Structured collection of personal data.

3.7 Controller

Entity that determines the purposes and means of processing.

3.8 Processor

External entity processing data on behalf of the controller.

3.9 Recipient

Entity to whom personal data is disclosed.

3.10 Consent

Freely given, informed, and unambiguous indication of intention to allow processing.

4. Lawfulness of Processing

Processing is lawful if at least one of the following conditions is met:

  • Consent
  • Performance of a contract / pre-contractual measures
  • Legal obligation
  • Protection of vital interests
  • Public task
  • Legitimate interest of the controller

5. Collection of Personal Data When Visiting the BreedFides Data Portal

When visiting the portal, the following data are automatically collected:

  • IP address
  • date and time of access
  • time zone difference
  • accessed page
  • HTTP status code
  • amount of data transferred
  • referrer URL
  • browser type and version
  • operating system
  • language

Purpose: provision, security, and stability of the website
Legal basis: Art. 6(1)(f) GDPR

6. Collection of Personal Data When Using the Portal

6.1 Data Collected

  • name and title
  • business address
  • business contact details
  • user status (e.g. Hive user, Drone user)

6.2 Authorised Access

  • employees of GFPi e. V.
  • infotraX GmbH (technical operator)

6.3 Principles

  • no disclosure to unauthorised third parties
  • processing exclusively for portal-related purposes
  • right to withdrawal and deletion at any time

7. Use of Cookies

The following types of cookies are used:

7.1 Transient Cookies (Session Cookies)

  • automatically deleted when the browser is closed
  • store a session ID

7.2 Persistent Cookies

  • automatically deleted after a defined period

7.3 Browser Control

Cookies can be disabled via browser settings.
Note: this may limit functionality.

8. Children

This service is intended for adults.
Persons under 18 should not transmit personal data without parental consent.

9. Rights of the Data Subject

9.1 Withdrawal of Consent

Consent may be withdrawn at any time.

9.2 Right to Confirmation

You may request confirmation as to whether personal data concerning you are being processed.

9.3 Right of Access

You have the right to obtain information about:

  • processing purposes
  • categories of data
  • recipients
  • storage periods
  • source of the data
  • existing rights
  • automated decision-making / profiling

9.4 Right to Rectification

Incorrect or incomplete data can be corrected.

9.5 Right to Erasure (Right to Be Forgotten)

You may request deletion if:

  • data are no longer necessary
  • consent is withdrawn
  • objection is raised
  • data were unlawfully processed
  • deletion is required by law

Exceptions apply, for example:

  • freedom of expression
  • legal retention obligations
  • public interest
  • research
  • legal claims

9.6 Right to Restrict Processing

Possible if:

  • data accuracy is contested
  • processing is unlawful
  • processing purposes no longer apply
  • an objection is being reviewed

9.7 Right to Data Portability

You may request your data in a commonly used format or transfer them to another controller.

9.8 Right to Object

You may object to:

  • processing based on legitimate interests
  • direct marketing, including profiling

9.9 Automated Decision-Making / Profiling

Right to human intervention and to express your point of view.

9.10 Right to Lodge a Complaint

You may lodge a complaint with a data protection authority.

9.11 Right to Judicial Remedy

Available in cases of GDPR violations affecting your rights.

10. Use of Google Analytics

10.1 Functionality

Google Analytics uses cookies to analyse usage behaviour.
Data may be transferred to Google servers (including in the USA).
IP anonymisation is active.

10.2 Purposes

  • analysis of website usage
  • optimisation of the service
  • statistical evaluation

10.3 Opt-Out Options

10.4 Further Information

11. Retention and Deletion Periods

  • commercial and tax-related retention requirements (generally 10 years)
  • shorter retention periods (e.g. for job applications)
  • deletion after the processing purpose ceases

12. Processor

infotraX GmbH
Lindenstraße 6
50321 Brühl
Germany
Phone: +49 2232 1504141
Email: sarach-reuber@infotrax.de
Website: https://www.infotrax.de
Managing Director: Stephanie Sarach-Reuber
Commercial Register: HRB 72650, Local Court of Cologne

Last updated: 20.10.2025