Data protection

Data Protection

We appreciate your interest in using the website of the German Rectors’ Conference. The protection of your personal data is a top priority for us. Below, you will find information concerning the processing of your personal data and your rights when using our website.

1. Controller

The controller responsible for data processing is:
Stiftung zur Förderung der Hochschulrektorenkonferenz
Ahrstraße 39
53175 Bonn, Germany

Tel.: +49 (0) 228 887 100
Fax: +49 (0) 228 887 280
E-mail: posthrk.de

2. Data Protection Officer

You can contact our Data Protection Officer as follows:
Scheja & Partners GmbH & Co. KG
Florian Reichert
Adenauerallee 136
53113 Bonn, Germany
Telephone: 0228 2272260
Contact: www.scheja-partner.de/kontakt/kontakt.html

3. Your rights as a data subject

As a data subject, you have the following rights under the GDPR, provided that the relevant legal requirements are fulfilled:

Access: You have the right to receive information concerning the data relating to your person which is processed by us.

Rectification: You can request that incorrect data relating to your person is rectified. In addition, you can request that incomplete data is completed.

Erasure: In certain cases, you can request that your personal data is erased.
Restriction of processing: In certain cases, you can request that we restrict the processing of your data.

Data portability: Should you have provided us with data on the basis of a contract or your consent, you can request to be sent the data which you have provided in a structured, up-to-date and machine-readable format or that we transfer this to another controller.

Right to object
Right to object in individual cases
For reasons related to your specific situation, you have the right to raise an objection to the processing of your personal data which takes place under Article 6 Paragraph1 Sentence 1 e) GDPR or Article 6 Paragraph 1 Sentence 1 f) GDPR at any time; this also applies to profiling which is based on these provisions. In such a case, we will no longer process this personal data for these purposes, unless we can prove compelling legitimate grounds for processing which outweigh your interests, rights and freedoms or processing is necessary in order to assert, exercise or defend legal claims.

Right to object to the processing of data for the purposes of direct advertising
In individual cases, we process your data in order to carry out direct advertising. You have the right to object to the processing of your personal data for the purposes of such advertising at any time. This also applies to the profiling, should it be connected to such direct advertising. Should you object to processing for the purposes of direct advertising, your personal data will no longer be processed for these purposes.

Revocation of consent: Should you have granted us your consent for the processing of your data, you may revoke this at any time with effect for the future. The lawfulness of the processing of your data prior to the revocation shall remain hereby unaffected. In addition to the means stated under "Asserting your rights", you can also declare a revocation in accordance with the respective information on "Exercising revocation" in the "Services and cookies" section.

Asserting your rights: Please contact posthrk.de to assert your rights set out above or please contact the postal address indicated in Number 1 in the above. Please ensure that your person can be clearly identified during this process.

Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your usual place of residence, place of work or the location of the alleged breach, should you be of the opinion that the processing of your personal data is unlawful.

4. Details concerning services, cookies, etc.

4.1. Own services

Functionality	Data categories	Purpose(s)	Legal basis/bases	If applicable, pursued legitimate interests	Recipient or categories of recipients	Third-country transfer; determination of suitability (yes/no)	If applicable, guarantees for third-country transfer and possibility of accessing these	Storage periods or criteria for setting these	Obligation to provide personal data and any consequences of failure to do so	If applicable, exercising revocation	Source of the data
Display of services	Date and time of access, duration of the visit, type of end device, operating system used, functions you are using, volume of data sent, type of result, IP address, domain name	Provision of services	Article 6 Paragraph 1 b) and f) GDPR	Technical functionality	Hosting provider, external service provider for technical support	--	--	Immediately following delivery by the web server	No obligation to provide, automatic collection when services are accessed	--	Direct collection when the website/services is/are accessed
Log files	URL accessed, language used, IP address of the user, time and date of access, website from which the user accessed the requested site (so-called referrer), websites which are accessed by the system of the user via our website, information concerning the browser type and version used, operating system of the user	Statistical evaluations (the IP address is anonymised for this purpose), Improvement of the website, System security (for example prevention of misuse), troubleshooting	Article 6 Paragraph 1 b) and f) GDPR	See purposes	Hosting provider, external service provider for technical support, government bodies on request	--	--	7 days after creation or until the end of the anonymisation process	No obligation to provide, automatic collection when services are accessed	--	Direct collection when the website/services is/are accessed
Contact form	Name of the person attempting contact, email address, content of the message	Receipt and processing of enquiries, complaints or other feedback	Article 6 Paragraph 1 a), b) and f) GDPR	See purposes	Hosting provider, government bodies on request	--	--	Once processing of the matter has been concluded	Obligatory information in the contact form labelled with "*", other information allows your matter to be dealt with more quickly, however its specification is not mandatory	--	Direct collection in the contact form
Form for event registration	First name and surname, institution, role, e-mail address, any requested parallel forums/presentations, participation in any communal meals and, depending on the requirements of the specific event, your postal address and telephone number, optional: form of address, title, department, faculty, content of the message and, depending on the requirements of the specific event, postal address and telephone number	Receipt and processing of registrations for events, in the event that consent is granted: Contact with the user of the form for the purposes of sending further information	Article 6 Paragraph 1 a), b) and f) GDPR	See purposes	External service providers (for example moderators, service providers at the event location, co-organisers), government bodies on request	--	--	Until the event has ended	Obligatory information in the contact form labelled with "*", other information allows your matter to be dealt with more quickly, however its specification is not mandatory	--	Direct collection in the contact form
Form for ordering brochures	First name and surname, postal address, optional: e-mail address, content of the message	Receipt and processing of the order, in the event that consent is granted: Contact with the user of the form for the purposes of sending further information	Article 6 Paragraph 1 a), b) and f) GDPR	See purposes	Government bodies on request	--	--	Once the brochures have been sent	Obligatory information in the contact form labelled with "*", other information allows your matter to be dealt with more quickly, however its specification is not mandatory	--	Direct collection in the contact form
Form for signing up to the press mailing list	Name, e-mail address, medium/institution	Receipt and processing of inclusion in the mailing list	Article 6 Paragraph 1 a), b) and f) GDPR	See purposes	Government bodies on request	--	--	Until unsubscription	Obligatory information in the contact form labelled with "*", other information allows your matter to be dealt with more quickly, however its specification is not mandatory	--	Direct collection in the contact form

4.2. Incorporation of third-party services

We incorporate third-party services in order to provide you with the opportunity to use their functions, services and features. These incorporated third-party services are designed and provided by the respective providers. Therefore, we have no control over the design, content and function of these third-party services or the processing of personal data by their providers. Please make enquires with the providers of the integrated services directly in this respect. For all services, we use the Shariff solution, meaning that your browser does not establish a direct connection with the service until you have clicked on the corresponding button.

Service	Provider/Recipient	Purpose(s)	Legal basis/bases	If applicable, pursued legitimate interests	Privacy policy of the provider
Facebook social plugin	Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA	Communication with Facebook profiles	Article 6 Paragraph 1 f) GDPR	Enabling communication via Facebook profiles	https://www.facebook.com/policy.php
Twitter social plugin	Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA	Communication with Twitter profiles	Article 6 Paragraph 1 f) GDPR	Enabling communication via Twitter profiles	twitter.com/en/privacy
LinkedIn social plugin	LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland	Communication with LinkedIn profiles	Article 6 Paragraph 1 f) GDPR	Enabling communication via LinkedIn profiles	www.linkedin.com/legal/privacy-policy
Xing social plugin	XING SE, Dammtorstraße 30, 20354 Hamburg, Germany	Communication with Xing profiles	Article 6 Paragraph 1 f) GDPR	Enabling communication via Xing profiles	privacy.xing.com/en/privacy-policy
YouTube	YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (vertreten durch Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA)	Display of YouTube videos	Articel 6 Paragraph 1 f) GDPR	Enabling the viewing of YouTube videos	policies.google.com/privacy

4.3. Cookies

We use cookies on the website of the German Rectors’ Conference for the purposes of providing a compressive scope of functions to make use more convenient and optimise our services. Cookies are small text files that are generated by a web server and saved on your computer during your online visit via the web browser used.

We use so-called session cookies in this process. These are automatically deleted once your browser session has ended.

We also use persistent cookies, which are predominantly used to provide you with permanent, recurring settings as a user of our website. This allows us to adapt our website to your preferences on an individual basis. Persistent cookies also enable us to analyse the usage behaviour of users, however only within the framework of the period of validity of the cookie.

In addition, further cookies may be used in connection with the incorporation of certain third-party services (see above) by their providers (third-party cookies).

Should you prefer cookies not to be used, you can prevent the saving of cookies on your device by adjusting the settings of your Internet browser accordingly. Please note that the functional capability and scope of our offering may be restricted as a result. In addition, we will also only set certain cookies if you have agreed to this beforehand (see below). You can also make use of special rights to object for certain cookies (see below). Detailed information concerning the type, scope, purposes, legal bases and rights to object with regard to data processing in connection with these cookies can be found in the tables below.

Description	Data categories	Purpose(s)	Legal basis/bases	If applicable, pursued legitimate interests	Recipient or categories of recipients	Third-country transfer; determination of suitability (yes/no)	If applicable, guarantees for third-country transfer and possibility of accessing these	Cookie validity/storage period	Obligation to provide personal data and any consequences of failure to do so	If applicable, exercising revocation	Source of the data
cookie_accep t	Cookie ID	Display of the website	Article 6 Paragraph 1 b) and f) GDPR	Prevent the cookie warning from popping up every visit	Hosting provider, external service provider for technical support	--	--	365 days	Should you not accept the cookie, the cookie warning will pop up every visit	--	Direct collection when the website/services is/are accessed
fe_typo_user	Cookie ID	Technical operability	Article 6 Paragraph 1 b) and f) GDPR	--	Hosting provider, external service provider for technical support	--	--	Duration of the browser session	--	--	Direct collection when the website/services is/are accessed

4.3.1. Piwik

This website uses Piwik, open source software for the statistical evaluation of user access. Piwik enables us to analyse your use of our website. In this process, the following data is collected via Piwik: URL accessed, language used, anonymised IP address of the user, time and date of access, transferred data volume, website from which the user accessed the requested site (referrer), websites which are accessed by the system of the user via our website, information concerning the browser type and version used, operating system of the user.

Your IP address is immediately anonymised after processing and prior to its storage on servers for which we are responsible. As a result, it is not possible for us to assign the data collected by means of Piwik to a specific person.

You are free to choose in your browser as to whether Piwik may track your use of the website. Should you decide against this, please click the following link in order to store the Piwik deactivation cookie in your browser. Beyond that, Piwik does not store cookies in your browser.

As of May 2018