Data Protection Notice for the DFG Website
We appreciate your interest in using our website. The protection of personal data is our highest priority. Below, you will find information concerning the processing of your personal data and your rights when using our website.
- 1. Controlle
- 2. Data protection office
- 3. Your rights as a data subjec
- 4. Automated individual decision-making, including profilin
- 5. Details concerning services, cookies etc
1. Controller
The controller for the processing of your personal data is:
- Deutsche Forschungsgemeinschaft e. V.
Kennedyallee 40
53175 Bonn
Germany
Tel: +49 228 885-1
[email protected]
www.dfg.de/e
2. Data protection officer
You can contact our data protection officer as follows:
- Attorney-at-law Dr. Philip Lüghausen
BHO Consulting GmbH
Vorgebirgstraße 132
50969 Köln
Germany
Tel. +49 (0) 221 204 63 884
[email protected]
www.bho-consulting.com/e
3. Your rights as a data subject
As a data subject, you have the following rights under the General Data Protection Regulation (GDPR), provided that the relevant statutory requirements contained therein are present:
- Access to Information: You have the right to be informed about the data relating to your person which is being processed.
- Rectification: You can request that incorrect data relating to your person be corrected. In addition, you can request that incomplete data be completed.
- Erasure: In certain cases, you can request that your personal data be erased.
- Restriction of processing: In certain cases, you can request that the processing of your data be restricted.
- Data portability: Should you have provided data under a contract or with your consent, you can request to receive the data which you have provided in a structured, commonly used and machine-readable format or request that we transfer this data to another controller.
- Withdrawal of consent: Should you have given us your consent to the processing of your data, you can withdraw this at any time with effect for the future. The lawfulness of the processing of your data prior to the withdrawal remains unaffected by this.
- Asserting your rights: In order to exercise any of the rights listed above, please send an e-mail to [email protected] or send a letter to the address provided under Number 1. Please ensure that we are able to clearly identify you.
- Right to complain to the supervisory authority: You have the right to lodge a complaint with the supervisory authority, in particular in the Member State of your usual place of residence, place of employment or location of the alleged breach, should you consider that the processing of the personal data relating to you is unlawful.
4. Automated individual decision-making, including profiling
No automated decision-making in an individual case, including profiling as defined in Article 22 of the GDPR, takes place in connection with the use of our services.
5. Details concerning services, cookies etc.
5.1. Own services
- Categories of Data
Date and time of access, duration of the visit, type of end device, operating system used, the functions which you are using, quantity of data sent, type of event, IP address, domain name - Purpose(s)
Provision of the service - Legal basis
Point (f) of Article 6 Paragraph 1 GDPR - If applicable, legitimate interests being pursued
Technical functional capability - Recipient or categories of recipients
Hosting provider, IT department, external service provider for technical support - Third country transfer; adequacy decision (yes/no)
-- - If applicable, guarantees for third-party transfers and access to these
-- - Storage periods or criteria for determining these
3 months after creation - Obligation to provide the personal data and, if applicable, consequences of non-provision
No obligation to provide, collected automatically when service is accessed - If applicable, exercising of the right of objection or the withdrawal
-- - Source of the data
Collected directly when the website/service is accessed
- Categories of data
Accessed URL, user's IP address, date and time of access, transferred data quantity, Internet site from which the user accessed the requested page (so-called “referrer URL”), websites which are accessed via our website by the user's system, http status, information about the browser type and version used, user's operating system, user's Internet service provider - Purpose(s)
Statistical evaluations, improvement of the service, system security (for example prevention of misuse), error diagnosis - Legal basis
Point (f) of Article 6 Paragraph 1 GDPR - If applicable, legitimate interests being pursued
Statistical evaluations, improvement of the service, system security (for example prevention of misuse), error diagnosis - Recipient or categories of recipients
Hosting provider, IT department, external service provider for technical support, state bodies on request - Third country transfer; adequacy decision (yes/no)
-- - If applicable, guarantees for third-party transfers and access to these
-- - Storage periods or criteria for determining these
3 months after creation - Obligation to provide the personal data and, if applicable, consequences of non-provision
No obligation to provide, collected automatically when service is accessed - If applicable, exercising of the right of objection or the withdrawal
-- - Source of the data
Collected directly when the website/service is accessed
- Categories of data
First name and surname of the recipient, title, email address, date and time of registration - Purpose(s)
Sending of the newsletter for interested persons - Legal basis
Point (a) of Article 6 Paragraph 1 GDPR - If applicable, legitimate interests being pursued
-- - Recipient or categories of recipients
Internal departments, in particular press and PR, hosting provider, order processor for sending of the newsletter, state bodies on request - Third country transfer; adequacy decision (yes/no)
-- - If applicable, guarantees for third-party transfers and access to these
-- - Storage periods or criteria for determining these
Length of time between registering and deregistering for the newsletter - Obligation to provide the personal data and, if applicable, consequences of non-provision
No obligation to provide - If applicable, exercising of the right of objection or the withdrawal
De-registration link in each newsletter - Source of the data
Collected directly in the newsletter registration form
- Categories of data
Number of newsletter views, number of views of the links contained in the newsletter - Purpose(s)
Statistical evaluation of usage data in order to optimise the newsletter service - Legal basis
Point (f) of Article 6 Paragraph 1 GDPR - If applicable, legitimate interests being pursued
Statistical evaluation of usage data in order to optimise the newsletter service - Recipient or categories of recipients
Internal departments, in particular press and PR, hosting provider, order processor for sending of the newsletter, state bodies on request - Third country transfer; adequacy decision (yes/no)
-- - If applicable, guarantees for third-party transfers and access to these
-- - Storage periods or criteria for determining these
24 months after collection - Obligation to provide the personal data and, if applicable, consequences of non-provision
No obligation to provide - If applicable, exercising of the right of objection or the withdrawal
-- - Source of the data
Collected directly when newsletter is opened
- Categories of data
Cookie ID, shortened IP address of the user, webpage accessed, website from which the user accessed the requested page (so-called “referrer URL”), subpages which are viewed from the accessed webpage, duration of the website session, frequency of website access - Purpose(s)
Analysis of use for the purpose of optimisation - Legal basis
Point (a) of Article 6 Paragraph 1 GDPR, Paragraph 25 Section 1 TDDDG - If applicable, legitimate interests being pursued
-- - Recipient or categories of recipients
Internal departments, in particular press and PR - Third country transfer; adequacy decision (yes/no)
-- - If applicable, guarantees for third-party transfers and access to these
-- - Storage periods or criteria for determining these
13 months - Obligation to provide the personal data and, if applicable, consequences of non-provision
No obligation to provide, collected automatically when service is accessed - If applicable, exercising of the right of objection or the withdrawal
You can withdraw your consent to the processing of your data at any time via the cookie preferences on the DFG website. - Source of the data
Collected directly when the website/service is accessed
- Categories of data
Internal value subject to selection:
agreement to technically necessary cookies (value: “essential”) OR agreement to technically necessary and statistical cookies (values: “essential” and “analytics”) - Purpose(s)
Consent management - Legal basis
Point (f) of Article 6 Paragraph 1 GDPR OR Point (a) of Article 6 Paragraph 1 GDPR, Paragraph 25 Section 1 TDDDG - If applicable, legitimate interests being pursued
Consent management - Recipient or categories of recipients
Hosting provider, IT department, external service provider for technical support - Third country transfer; adequacy decision (yes/no)
-- - If applicable, guarantees for third-party transfers and access to these
-- - Storage periods or criteria for determining these
30 days after collection - Obligation to provide the personal data and, if applicable, consequences of non-provision
No obligation to provide - If applicable, exercising of the right of objection or the withdrawal
-- - Source of the data
Collected directly when giving the consent
- Categories of data
E-mail address, first name and surname, start page on the website, message, date and time of form submission - Purpose(s)
Making contact - Legal basis
Point (f) of Article 6 Paragraph 1 GDPR - If applicable, legitimate interests being pursued
Making contact - Recipient or categories of recipients
Scientific integrity - Third country transfer; adequacy decision (yes/no)
-- - If applicable, guarantees for third-party transfers and access to these
-- - Storage periods or criteria for determining these
Until the matter has been conclusively processed and resolved - Obligation to provide the personal data and, if applicable, consequences of non-provision
No obligation to provide - If applicable, exercising of the right of objection or the withdrawal
-- - Source of the data
Collected directly in the contact form
5.2. Integration of third-party services
We integrate third-party services in order to allow you to use their functions, services and features. These integrated third-party services are designed and provided by the respective providers. Therefore, we have no influence over the design, content and functions of these third-party services or the processing of personal data by their providers. Please familiarise yourself directly with the information issued by the providers of the integrated services.
- Provider/recipient
YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (represented by Google Inc, Amphitheatre Parkway, Mountain View, CA 94043, USA) - Categories of data
IP address, crash reports, system activities, date, time, referrer URL - Purpose(s)
Display of YouTube videos - Legal basis
Point (a) of Article 6 Paragraph 1 GDPR, Paragraph 25 Section 1 TDDDG (Consent)
By clicking on the slider in the video display (share external content from YouTube videos), by activating the checkbox below or activating the checkbox in the cookie settings, you agree to the data being processed.
Your consent also covers any data transfer from YouTube to unsafe third countries, in particular the USA (Point (a) of Article 49 Paragraph 1). The USA is assessed by the European Court of Justice as a country with an insufficient level of data protection by EU standards. In particular, due to the lack of an adequacy decision and without appropriate safeguards, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly also without redress. - If applicable, legitimate interests being pursued
Enabling viewing of YouTube videos - Data protection notice of the provider
https://policies.google.com/privacy?hl=de&gl=d - If applicable, exercising of the right of objection or the withdrawal
You can withdraw your consent at any time with effect for the future by changing the settings accordingly (share external content): to do this, deactivate the slider previously activated in the video display or the checkbox below. - Additional notes
The integration takes place by means of the “privacy-enhanced mode” of YouTube.
In the default setting no data is transferred to YouTube. Only if you agree to the use of YouTube does data exchange with YouTube take place (so-called 2-stage solution).
The selection you make (share external content from YouTube videos) is permanently stored in your browser (local storage).
If you change the setting and block external content as a result, the setting stored in your browser is deleted and your data will no longer be transferred to YouTube via our website.
Consent to use the YouTube Player
By selecting the checkbox on the "Cookie settings" page, you expressly consent to us processing and transferring your IP address to YouTube LLC along with crash reports, system activity, date, time, referral URL. Your consent also includes any data transfer from YouTube to unsafe third countries without an adequate level of data protection, in particular the USA. You can withdraw this consent at any time with effect for the future by deactivating the checkbox below. Data processing carried out based on this consent prior to your withdrawal remains lawful.
5.3. Cookies
We use cookies on our website in order to provide comprehensive functionality, to make the use of our website more comfortable and to optimise our services. Cookies are small text files that are placed on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies”. These are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to recognise your browser on your next visit.
You can configure your browser to notify you regarding the placement of cookies and only permit cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing your browser. The deactivation of cookies can restrict the functionality of this website.
Cookies that are required to conduct electronic communication or to provide certain functions that you requested are stored based on point (f) of Article 6 Paragraph 1 GDPR. We as the website operator have a legitimate interest in storing cookies for the technically error-free and optimised provision of our services. Insofar as other cookies are stored (such as statistical cookies to analyse user behaviour), these are dealt with separately in this data protection notice (in addition to technically essential cookies, we only use the Matomo web analytics service, cf. section 5.1. in this regard).