Legal Notice

FSC Brand Hub is a web-based platform available to FSC Licence Holders, FSC Network and Certification Bodies. It provides access to licensed materials, marketing and supporting materials and the most recent version of the Trademark Registration List.   

The duties of hosting, maintenance and data processing are conducted by FSC International IT Services of FSC Global Development GmbH and the code is hosted by Pantheon.  

FSC GD is the ´controller´ of the personal data you provide to the FSC Brand Hub and FSC International IT Services acts in a function of a ‘processor’ in providing the technical infrastructure of the platform. 

In order to provide the services, we may need to collect or store some personal data. The personal data we process can include the following: 

• Full name (title, first name, middle name, last name) 

• Job title 

• Organization name you work for 

• Working address 

• Contact information (e.g., email address, phone number) 

• Certification Code  

• License Code  

• Username 

• Encrypted password 

• Language 

• State of activities 

• Log-in times to the platform  

• IP address 

We will not collect any personal data from you that we do not need to provide and oversee this Service to you. 

We process personal data provided to us directly by you as well as by your certification body. You, as a user of the FSC Brand Hub are responsible to provide accurate, complete, and up-to-date information.  

Personal Data your certification body provides to us includes your full name (first name, last name), email address, FSC License code and language. If the personal data needs to be corrected, please contact the respective certification body.  

During the use of the FSC Brand Hub we will log personal data concerning your activities and log-in times to the FSC Brand Hub, for purposes of supporting the Service (log files of the webserver). We collect anonymized analytics via Matomo, which honours “Do not track me”, if you configure your browser accordingly. For details on our use of Matomo cookies, please see the respective section below. 

We are not using your personal data for anything else beyond providing the Services or the processing described in this Privacy Statement. We can share data with the respective FSC national partner on a need-to-basis. Our technical staff will use the log files for purposes of troubleshooting, and for providing help to end users. The collected analytics anonymized and aggregated information is used to improve the platform. 

In detail, we use your personal data to provide our Services, improve and update our Services, communicate with you, secure against fraud and abuse, troubleshoot issues and as necessary for safety and integrity based on our legitimate interest (Art. 6 para. 1 lit. f GDPR). In addition, we use your personal data as is required by law (Art. 6 para. 1 lit. c) GDPR). 

All personal data we process in this portal is processed by FSC, for the purposes of IT hosting and maintenance. Our service provider Microsoft Dynamics 365 as the processor maintains the information on servers located in West Europe (Netherlands) and Northern Europe (Ireland).  

If the personal data that we collect from you needs to be transferred to and processed by a processor based outside of the European Economic Area (EEA), we will take steps, such as including contractual clauses into our contracts with such processors or controllers, that would ensure that your personal data is safe and treated securely and in accordance with this Privacy Statement. Other than that, we do not share personal data with other third parties, unless described in this Privacy Statement or required to do so by law. 

We will keep your personal data for a maximum of 7 years following the termination of your user account on our (FSC Brand Hub). Upon your request, we provide you with information about the personal data we hold about you. Furthermore, upon request, we rectify or delete your personal data, as far as no statutory storage requirements apply. For details on your rights, please see the respective section below. 

We are committed to ensuring the privacy of your personal data. In order to prevent unauthorized access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the personal data we collect online. 

We would like to make sure you are fully aware of all your data protection rights. You are entitled to the following: 

• The right to access enables you to receive information on whether we process your personal data as well as a copy of the personal data we process about you.  

• The right to rectification enables you to have any incomplete or inaccurate personal data we hold about you corrected, though we may need to verify the accuracy of the new personal data you provide to us. 

• The right to erasure enables you to ask us to delete or remove personal data where there is not a good reason or legitimate interest for us to continue to process it. 

• The right to restrict processing enables you to ask us to suspend the processing of your personal data under specific circumstances. 

• The right to data portability enables you to request that we provide you or a third party of your choosing with the personal data which you have provided to us (in a structured, commonly used, machine-readable format). 

• The right to object enables you to object to our processing of your personal data where we rely on our legitimate interest as a legal basis. In some cases, we may demonstrate that we have compelling legitimate grounds to process your personal data which override your rights and freedoms. 

• The right to make a complaint to the competent data protection authority. We would, however, appreciate the chance to deal with your concerns so if you have any questions or concerns regarding our processing of your personal data, please contact us at privacy@fsc.org. 

If you would like to exercise one of your data protection rights, please do not hesitate to contact us at privacy@fsc.org or our Data Protection Officer at the contact details set out below. 

What are cookies? 
Like many other websites, we also use "cookies". Cookies are text files placed on your computer, to help the website analyse how users use the site. This automatically gives us certain personal data, such as IP address, browser used, operating system from your computer and your connection to the Internet.  

How do we use cookies? 

This website uses cookies in order to improve the user experience and provide additional functionality. 

We only use the necessary cookies which are needed to make the FSC Brand Hub function in a proper way. We do not analyse the collected information for trends and statistics.  

Only the people from within the FSC Group which may include affiliates of FSC who need the data to approach you or to respond to your communication will use your personal data. 

You can view our application without cookies. You can refuse the use of cookies by selecting the appropriate settings (“do not accept cookies”) on your browser. Please note that if you do this you may not be able to use the full functionality of this application.  

List of cookies  

If you have questions about this Privacy Statement, the personal data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us: 

Email us at: privacy@fsc.org  

Postal Address and further company details: 

IT Development and Maintenance: 
FSC Global Development GmbH 
FSC International IT Services 
Adenauerallee 134 • 53113 Bonn • Germany 
Phone: +49 (0) 228 367 66-0,  
Fax: +49 (0) 228 367 66-30 

Managing Director: Managing Directors, Dr. Subhra Bhattacharjee and Marion Barriskell 

Commercial register: Bonn HRB 15990 
VAT-Ident-No: DE258067376 

If you have a complaint about our use of your personal data, please contact our Data Protection Officer to address your complaint: 

Scheja & Partner Rechtsanwälte  
Mr. Boris Reibach 
Adenauerallee 136, 53113 Bonn  
Tel.: +49 (0) 228-227 226-0  
Fax: +49 (0) 228-227 226-26  
E-mail: info@scheja-partner.de   
Contact form: http://www.scheja-partner.de/kontakt/kontakt.html 
Website: www.scheja-partner.de 

We reserve the right to unilaterally change this Privacy Statement from time to time to ensure that it complies with current legal requirements or to implement changes to our Services in the Privacy Statement, for example, when introducing new services.  

In this case, FSC will inform you when the Privacy Statement has been updated upon your login.    

This Privacy Statement was last updated on 14 March 2025.