1. Controller
Deutsch-Emiratischer Wirtschaftsclub e.V. Düsseldorfer Str. 50 47051 Duisburg Germany Telephone: +49 611 949109600 Email: president@german-emirati.org
Legal
Privacy Notice
Information about how personal data is processed on this website.
2. Scope
This notice covers personal data processed when you visit the website, contact the Club, submit a membership application or visit the Club’s LinkedIn presence. We process personal data only where necessary and in accordance with the GDPR, the German Federal Data Protection Act and the TDDDG.
3. Hosting and technical provision
The website is hosted through ChatGPT Sites. For operators based in the European Economic Area, the processor is: OpenAI Ireland Limited 1st Floor, The Liffey Trust Centre 117–126 Sheriff Street Upper Dublin 1, D01 YC43 Ireland When the website is accessed, technical connection and log data may be processed, including IP address, time of access, requested page, referrer, browser, operating system, device information, HTTP status and security events. Processing serves delivery, stability, security, error analysis and abuse prevention. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website. We do not have direct access to personal raw hosting logs. They are erased or anonymised when no longer required for operation, security, abuse prevention or legal obligations.
4. Automatic Sites analytics
ChatGPT Sites automatically records aggregated site statistics. The Club can see total page views, unique visitors and their development over time. We do not receive names, email addresses or directly identifiable visitor profiles through this view. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is understanding the general use and technical reach of the website. We do not add Google Analytics or a comparable third-party analytics SDK.
5. Processing outside the EEA
ChatGPT Sites does not currently provide binding data residency. Website data, database records and technical logs may therefore be processed outside Germany or the European Economic Area. OpenAI Ireland Limited relies on an adequacy decision under Article 45 GDPR or the European Commission’s Standard Contractual Clauses under Article 46(2)(c) GDPR for relevant transfers. Email notifications are sent through Plus Five Five, Inc. (Resend), whose primary processing operations take place in the United States. Resend’s data processing terms include the European Commission’s Standard Contractual Clauses for transfers where no adequacy decision applies.
6. Language versions
Arabic, English and German pages have separate URLs. The main address temporarily redirects to the best available language from the browser's Accept-Language setting. The language switch opens a stable URL for the selected language; this website does not write a language preference to local browser storage.
7. Membership applications
We process first and last name, company, position, country, email address, telephone number, membership type, motivation and, if voluntarily provided, a LinkedIn profile URL and visible professional information. The purposes are to receive and assess the application, verify its relevance to the Club’s purposes, contact the applicant, answer questions and prepare admission. For individual applications, the legal basis is Article 6(1)(b) GDPR. For contacts acting for an organisation, the legal basis is Article 6(1)(f) GDPR. The application is stored in the website database and sent to the Club by email through Resend. Access is limited to authorised board members and persons involved in admission or member administration, plus technical processors. Required fields are necessary to assess the application; providing a LinkedIn profile is voluntary. Rejected or withdrawn applications are erased no later than six months after the final decision or withdrawal, unless a legal obligation or legal hold requires longer storage. Admitted members’ necessary data is transferred to member administration. No solely automated admission decision or profiling under Article 22 GDPR takes place.
8. Contact requests
When you contact us, we process the information you provide, including name, optional company, email address, enquiry type and message. The legal basis is Article 6(1)(b) GDPR for enquiries relating to membership, events, cooperation or another prospective contractual relationship. General, institutional and media enquiries are processed under Article 6(1)(f) GDPR. The request is stored in the website database and sent to the Club by email through Resend. Contact requests are erased no later than twelve months after final handling unless they are still required for a membership or business relationship, legal claims or statutory retention duties.
9. Statutory retention
Documents with tax, accounting, commercial or legal significance may be retained for six, eight or ten years, depending on the document, in particular under § 147 AO and § 257 HGB. During a statutory retention period, processing is restricted to those purposes.
10. LinkedIn
The website contains a simple link to the Club’s LinkedIn presence. No LinkedIn plugin or embedded LinkedIn content is used. According to our technical configuration, data is sent to LinkedIn only after you follow the link. LinkedIn’s own rules then apply. If you contact us through LinkedIn, we process the message and profile information you provide under Article 6(1)(b) or (f) GDPR. https://www.linkedin.com/legal/privacy-policy
11. No additional marketing tracking
We currently do not use Google Analytics, Google Ads, Meta Pixel, LinkedIn Insight Tag, remarketing, embedded YouTube videos or social-media tracking plugins. We therefore do not currently use a consent banner for analytics or marketing technologies. Before any consent-requiring service is activated, this notice and the required consent controls will be updated.
12. Recipients
Recipients may include authorised board members and personnel, OpenAI Ireland Limited and its authorised subprocessors, Plus Five Five, Inc. (Resend) as the email delivery processor and its authorised subprocessors, professional advisers, banks and payment providers where necessary for member administration, and public authorities or courts where required by law. We do not sell personal data or disclose it for third-party advertising.
13. Your rights
Subject to the legal conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18), data portability (Article 20), objection (Article 21) and withdrawal of consent (Article 7(3)). Withdrawal does not affect processing carried out before withdrawal. Contact: president@german-emirati.org
14. Right to object
Where processing is based on Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then stop processing unless compelling legitimate grounds override your interests, rights and freedoms, or processing is required for legal claims. You may object to direct marketing at any time without giving reasons.
15. Complaint
You may lodge a complaint with a data protection authority. The authority responsible for the Club’s registered office is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen Kavalleriestraße 2–4 40213 Düsseldorf Germany Telephone: +49 211 38424-0 Email: poststelle@ldi.nrw.de https://www.ldi.nrw.de
16. Security
We use appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and disclosure. Transmission between your browser and this website is encrypted using HTTPS/TLS.
17. Status
Status: 4 September 2026. We update this notice when the website, service providers, processing activities or legal requirements change.