This is the English translation of the German data protection declaration. In case of deviations, the German version is decisive.

Data Protection

We appreciate your interest in using the website of the German Rectors’ Conference. The protection of your personal data is a top priority for us. Below, you will find information concerning the processing of your personal data and your rights when using our website.

1. Controller

The controller responsible for data processing is:
Stiftung zur Förderung der Hochschulrektorenkonferenz
Ahrstraße 39
53175 Bonn, Germany

Tel.: +49 (0) 228 887 100
Fax: +49 (0) 228 887 280
E-mail: postnospam-hrk.de

2. Data Protection Officer

You can contact our Data Protection Officer as follows:
Scheja und Partner Rechtsanwälte mbB
Florian Reichert
Adenauerallee 136
53113 Bonn, Germany
Telephone: 0228 2272260
Contact: www.scheja-partner.de/kontakt/kontakt.html

3. Your rights as a data subject

As a data subject, you have the following rights under the GDPR, provided that the relevant legal requirements are fulfilled:

Access: You have the right to receive information concerning the data relating to your person which is processed by us.

Rectification: You can request that incorrect data relating to your person is rectified. In addition, you can request that incomplete data is completed.

Erasure: In certain cases, you can request that your personal data is erased.
Restriction of processing: In certain cases, you can request that we restrict the processing of your data.

Data portability: Should you have provided us with data on the basis of a contract or your consent, you can request to be sent the data which you have provided in a structured, up-to-date and machine-readable format or that we transfer this to another controller.

Right to object
Right to object in individual cases     
                              
For reasons related to your specific situation, you have the right to raise an objection to the processing of your personal data which takes place under Article 6 Paragraph1 Sentence 1 e) GDPR or Article 6 Paragraph 1 Sentence 1 f) GDPR at any time; this also applies to profiling which is based on these provisions. In such a case, we will no longer process this personal data for these purposes, unless we can prove compelling legitimate grounds for processing which outweigh your interests, rights and freedoms or processing is necessary in order to assert, exercise or defend legal claims.

Right to object to the processing of data for the purposes of direct advertising            
In individual cases, we process your data in order to carry out direct advertising. You have the right to object to the processing of your personal data for the purposes of such advertising at any time.  This also applies to the profiling, should it be connected to such direct advertising. Should you object to processing for the purposes of direct advertising, your personal data will no longer be processed for these purposes.

Revocation of consent: Should you have granted us your consent for the processing of your data, you may revoke this at any time with effect for the future. The lawfulness of the processing of your data prior to the revocation shall remain hereby unaffected. In addition to the means stated under "Asserting your rights", you can also declare a revocation in accordance with the respective information on "Exercising revocation" in the "Services and cookies" section.

Asserting your rights: Please contact postnospam-hrk.de to assert your rights set out above or please contact the postal address indicated in Number 1 in the above. Please ensure that your person can be clearly identified during this process.

Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your usual place of residence, place of work or the location of the alleged breach, should you be of the opinion that the processing of your personal data is unlawful.

4. Details concerning services, cookies, etc.

4.1. Own services

Functionality

Data categories

Purpose(s)

Legal basis/bases

If applicable, pursued legitimate interests

Recipient or categories of recipients

Third-country transfer; determination of suitability (yes/no)

If applicable, guarantees for third-country transfer and possibility of accessing these

Storage periods or criteria for setting these

Obligation to provide personal data and any consequences of failure to do so

If applicable, exercising revocation

Source of the data

Display of services

Date and time of access, duration of the visit, type of end device, operating system used, functions you are using, volume of data sent, type of result, IP address, domain name

Provision of services

Article 6 Paragraph 1 b) and f) GDPR 

Technical functionality

Hosting provider, external service provider for technical support

--

--

Immediately following delivery by the web server

No obligation to provide, automatic collection when services are accessed

--

Direct collection when the website/services is/are accessed

Log files

URL accessed, language used, IP address of the user, time and date of access, website from which the user accessed the requested site (so-called referrer), websites which are accessed by the system of the user via our website, information concerning the browser type and version used, operating system of the user

Statistical evaluations (the IP address is anonymised for this purpose), Improvement of the website, System security (for example prevention of misuse), troubleshooting

Article 6 Paragraph 1 b) and f) GDPR

See purposes

Hosting provider, external service provider for technical support, government bodies on request

--

--

7 days after creation or until the end of the anonymisation process

No obligation to provide, automatic collection when services are accessed

--

Direct collection when the website/services is/are accessed

Contact form

Name of the person attempting contact, email address, content of the message

Receipt and processing of enquiries, complaints or other feedback

Article 6 Paragraph 1 a), b) and f) GDPR

See purposes

Hosting provider, government bodies on request

--

--

Once processing of the matter has been concluded

Obligatory information in the contact form labelled with "*", other information allows your matter to be dealt with more quickly, however its specification is not mandatory

--

Direct collection in the contact form

Form for event registration

First name and surname, institution, role, e-mail address, any requested parallel forums/presentations, participation in any communal meals and, depending on the requirements of the specific event, your postal address and telephone number, optional: form of address, title, department, faculty, content of the message and, depending on the requirements of the specific event, postal address and telephone number

Receipt and processing of registrations for events, in the event that consent is granted: Contact with the user of the form for the purposes of sending further information

Article 6 Paragraph 1 a), b) and f) GDPR

See purposes

External service providers (for example moderators, service providers at the event location, co-organisers), government bodies on request

--

--

Until the event has ended

Obligatory information in the contact form labelled with "*", other information allows your matter to be dealt with more quickly, however its specification is not mandatory

--

Direct collection in the contact form

Form for ordering brochures

First name and surname, postal address, optional: e-mail address, content of the message

Receipt and processing of the order, in the event that consent is granted: Contact with the user of the form for the purposes of sending further information

Article 6 Paragraph 1 a), b) and f) GDPR

See purposes

Government bodies on request

--

--

Once the brochures have been sent

Obligatory information in the contact form labelled with "*", other information allows your matter to be dealt with more quickly, however its specification is not mandatory

--

Direct collection in the contact form

Form for signing up to the press mailing list

Name, e-mail address, medium/institution

Receipt and processing of inclusion in the mailing list

Article 6 Paragraph 1 a), b) and f) GDPR

See purposes

Government bodies on request

--

--

Until unsubscription

Obligatory information in the contact form labelled with "*", other information allows your matter to be dealt with more quickly, however its specification is not mandatory

--

Direct collection in the contact form

4.2. Incorporation of third-party services

We incorporate third-party services in order to provide you with the opportunity to use their functions, services and features. These incorporated third-party services are designed and provided by the respective providers. Therefore, we have no control over the design, content and function of these third-party services or the processing of personal data by their providers. Please make enquires with the providers of the integrated services directly in this respect. For all services, we use the Shariff solution, meaning that your browser does not establish a direct connection with the service until you have clicked on the corresponding button.

 

Service

Provider/Recipient

Purpose(s)

Legal basis/bases

If applicable, pursued legitimate interests

Privacy policy of the provider

Facebook social plugin

Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA

Communication with Facebook profiles

Article 6 Paragraph 1 f) GDPR

Enabling communication via Facebook profiles

https://www.facebook.com/policy.php


Twitter social plugin

Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA

Communication with Twitter profiles

Article 6 Paragraph 1 f) GDPR

Enabling communication via Twitter profiles

twitter.com/en/privacy


LinkedIn social plugin

LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland

Communication with LinkedIn profiles

Article 6 Paragraph 1 f) GDPR

Enabling communication via LinkedIn profiles

www.linkedin.com/legal/privacy-policy

Xing social plugin

XING SE, Dammtorstraße 30, 20354 Hamburg, Germany

 

Article 6 Paragraph 1 f) GDPR

Enabling communication via Xing profiles

privacy.xing.com/en/privacy-policy

 

 

4.3. Cookies

We use cookies on the website of the German Rectors’ Conference for the purposes of providing a compressive scope of functions to make use more convenient and optimise our services. Cookies are small text files that are generated by a web server and saved on your computer during your online visit via the web browser used.

We use so-called session cookies in this process. These are automatically deleted once your browser session has ended.

We also use persistent cookies, which are predominantly used to provide you with permanent, recurring settings as a user of our website. This allows us to adapt our website to your preferences on an individual basis. Persistent cookies also enable us to analyse the usage behaviour of users, however only within the framework of the period of validity of the cookie.

In addition, further cookies may be used in connection with the incorporation of certain third-party services (see above) by their providers (third-party cookies).

Should you prefer cookies not to be used, you can prevent the saving of cookies on your device by adjusting the settings of your Internet browser accordingly. Please note that the functional capability and scope of our offering may be restricted as a result. In addition, we will also only set certain cookies if you have agreed to this beforehand (see below). You can also make use of special rights to object for certain cookies (see below). Detailed information concerning the type, scope, purposes, legal bases and rights to object with regard to data processing in connection with these cookies can be found in the tables below.

Description

Data categories

Purpose(s)

Legal basis/bases

If applicable, pursued legitimate interests

Recipient or categories of recipients

Third-country transfer; determination of suitability (yes/no)

If applicable, guarantees for third-country transfer and possibility of accessing these

Cookie validity/storage period

Obligation to provide personal data and any consequences of failure to do so

If applicable, exercising revocation

Source of the data

cookie_accep
t

Cookie ID

Display of the website

Article 6 Paragraph 1 b) and f) GDPR

Prevent the cookie warning from popping up every visit

Hosting provider, external service provider for technical support

--

--

365 days

Should you not accept the cookie, the cookie warning will pop up every visit

--

Direct collection when the website/services is/are accessed

4.3.1. Piwik

This website uses Piwik, open source software for the statistical evaluation of user access. Piwik enables us to analyse your use of our website. In this process, the following data is collected via Piwik: URL accessed, language used, anonymised IP address of the user, time and date of access, transferred data volume, website from which the user accessed the requested site (referrer), websites which are accessed by the system of the user via our website, information concerning the browser type and version used, operating system of the user.

Your IP address is immediately anonymised after processing and prior to its storage on servers for which we are responsible. As a result, it is not possible for us to assign the data collected by means of Piwik to a specific person.

You are free to choose in your browser as to whether Piwik may track your use of the website. Should you decide against this, please click the following link in order to store the Piwik deactivation cookie in your browser. Beyond that, Piwik does not store cookies in your browser.

As of May 2018