2. Data Protection Officer
Contact details of our Data Protection Officer:
Dr. Gregor Scheja
Scheja & Partners GmbH & Co. KG
Adenauerallee 136
53113 Bonn
Germany
Tel: +49 228/2272260
Support making RiG more international!
Take part in our online survey at the end of your visit and share your valuable experiences and opinions. Duration: 7-10 min.
Data Privacy Statement
We – Deutscher Akademischer Austauschdienst e.V. (the German Academic Exchange Service), hereinafter referred to as either “we” or “DAAD” – are pleased to see you visiting the “Research in Germany” website. Thank you for your interest in our initiative. Your privacy is important to us. We take the protection of your personal data and their confidential treatment very seriously. Your data will be processed exclusively within the legal framework of the data protection provisions of the European Union, particularly the General Data Protection Regulation (hereinafter: “GDPR”). This data protection statement provides you with information about the processing of your personal data and your data protection rights when using this website.
1. Controller
The controller in the meaning of the GDPR is:
Deutscher Akademischer Austauschdienst e.V. (DAAD)
Kennedyallee 50
53175 Bonn
Germany
Tel: +49 228 882-0
E-Mail: datenschutz@daad.de
Insofar as certain processing activities are carried out jointly with other data controllers, please refer to the information on the respective processing described in Section No. 4 below for further details.
3. Rights of Data Subjects
In accordance with the GDPR, you are entitled to the following rights as a data subject, provided that the respective statutory requirements are met
- Access (Art. 15 GDPR): You have the right to obtain information about your personal data processed by us.
- Rectification (Art. 16 GDPR): You can obtain the rectification of inaccurate personal data concerning you. Furthermore, you can obtain the completion of incomplete personal data.
- Erasure (Art. 17 GDPR): In specific cases, you can obtain the erasure of your personal data.
- Restriction of processing (Art. 18 GDPR): In specific cases, you can obtain restriction of processing of your personal data.
- Data portability (Art. 20 GDPR): If you provided data to us based on a contract or your consent, you can demand that you receive the provided data in a structured, commonly used and machine-readable format or that we transmit the data directly to another controller.
Right to object
Individual right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Art. 6 subpara-graph 1 GDPR, including profiling based on those provisions.
We will then no longer process the personal data for those purposes, unless we can demon-strate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims.
Right to object to processing for direct marketing purposes
In some cases, we may process your data for direct marketing. You have the right to object to the processing of your personal data for those purposes at any time. This applies to profiling as far as it is associated with such direct marketing.
If you object to the processing for direct marketing purposes, your personal data will not be processed for those purposes any longer.
- Withdrawal of consent (Art. 7 subparagraph 3 GDPR): If you gave your consent to the processing of your personal data, you can withdraw your consent at any time with future effect. The lawfulness of the processing of your personal data until your withdrawal will not be affected. Your withdrawal regarding cookies can be exercised in the Cookie-Center. As far as you give your consent for individual services on our website, further information on how the right of withdrawal can be exercised can be found when giving your consent as well es under Section No. 4 ("exercise of the right of withdrawal”).
- Enforcement of your rights: To exercise the aforementioned rights, please contact datenschutz@daad.de or write a letter to the address above in Section No. 1. When doing so, please make sure an unambiguous identification of yourself is possible.
- Right of appeal: You have the right to lodge a complaint with a data protection supervisory authority, particularly one in the member state of your habitual residence, work place or the place of the suspected violation, if you are of the view that the processing of your personal data is unlawful.
This also applies to the supervisory authority responsible for us:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestr. 2-4
40213 Düsseldorf
Telefon: 0211/38424-0
Fax: 0211/38424-999
E-Mail: poststelle@ldi.nrw
4. Details on embedded services and functionalities
4.1. Our own services
4.1.1. Provision of the website
|
Categories of personal data concerned:
|
Date and time of access, duration of visit, your operating system, volume of data sent, type of access, IP address, domain name. |
|
Purpose(s): |
To provide the service, to ensure technical operation and to investigate and remove malfunctions. |
|
Legal basis (or bases): |
Art. 6 (1) (f) GDPR (legitimate interests). It is in our interest to ensure the use and technical operability of our website. |
|
Recipients or categories of recipients of the personal data: |
Hosting providers, internal departments, external provider for technical support. |
|
Transfer to a third country: |
No |
|
Storage period: |
Usually seven days unless, under exceptional circumstances, we need the data for a longer period for the above-mentioned purposes. In such a case, we erase the data as soon as they are no longer required for the relevant purpose. |
4.1.2. Logfiles
|
Categories of personal data concerned:
|
Date and time of access, type of access, URL, Exceptions. |
|
Purpose(s): |
Improving the website, system security (e.g. prevention of misuse) and troubleshooting. |
|
Legal basis (or bases): |
Art. 6 (1) (f) GDPR (legitimate interests). It is in our interest to improve the website and to maintain system security. |
|
Recipients or categories of recipients of the personal data: |
Hosting providers, internal departments, external provider for technical support. |
|
Transfer to a third country: |
No |
|
Storage period: |
Usually one month unless, under exceptional circumstances, we need the data for a longer period for the above-mentioned purposes. In such a case, we erase the data as soon as they are no longer required for the relevant purpose. |
4.1.3. Contact form for questions on research opportunities in Germany
|
Categories of personal data concerned:
|
Email address, subject of the inquiry, further details on a voluntary basis (such as country of residence or question). |
|
Purpose(s): |
Receiving and processing enquiries regarding questions on research opportunities in Germany. |
|
Legal basis (or bases): |
Art. 6 (1) (f) GDPR (legitimate interests). It is in our interest to receive and process enquiries regarding questions on research opportunities in Germany. |
|
Recipients or categories of recipients of the personal data: |
Hosting providers, internal department |
|
Transfer to a third country: |
No |
|
Storage period: |
Deletion as soon as contact request has been concluded; any additional personal data provided will be deleted, if they are no longer required for the purposes for which they were collected or otherwise processed. |
|
Obligation to provide personal data and, where applicable, consequences of a failure to provide such data: |
Mandatory details marked as such; further details are voluntary. |
4.1.4. Contact form for international promotion of German research positions
|
Categories of personal data concerned:
|
Name of institution, number and type of position, link to the position, application deadline and email address, provision of additional details is voluntary (such as the subject of the research position). |
|
Purpose(s): |
Receiving and processing enquiries regarding the promotion of German research positions internationally. |
|
Legal basis (or bases): |
Art. 6 (1) (f) GDPR (legitimate interests). It is in our interest to receive and process enquiries regarding the promotion of German research positions internationally. |
|
Recipients or categories of recipients of the personal data: |
Hosting providers, internal department |
|
Transfer to a third country: |
No |
|
Storage period: |
Deletion as soon as contact request has been concluded; any additional personal data provided will be deleted, if they are no longer required for the purposes for which they were collected or otherwise processed. |
|
Obligation to provide personal data and, where applicable, consequences of a failure to provide such data: |
Mandatory details marked as such; further details are voluntary. |
4.1.5. Contact form to upload your research news
|
Categories of personal data concerned:
|
Title of your entry, date of the news, your homepage, your inquiry, the organisation that provides the news, link to the news, teaser text for the news, email address and privacy consent, provision of additional details is voluntary (such as an X account). |
|
Purpose(s): |
Receiving and processing enquiries regarding the upload of your research news. |
|
Legal basis (or bases): |
Art. 6 (1) (f) GDPR (legitimate interests). It is in our interest to receive and process enquiries regarding the upload of your research news. |
|
Recipients or categories of recipients of the personal data: |
Hosting providers, internal department |
|
Transfer to a third country: |
No |
|
Storage period: |
Deletion as soon as contact request has been concluded; any additional personal data provided will be deleted, if they are no longer required for the purposes for which they were collected or otherwise processed. |
|
Obligation to provide personal data and, where applicable, consequences of a failure to provide such data: |
Mandatory details marked as such; further details are voluntary. |
4.1.6. Newsletter for information on the German research landscape
|
Categories of personal data concerned:
|
Email address, surname, first name. |
|
Purpose(s): |
Sending the newsletter, documentation of consent. |
|
Legal basis (or bases): |
Art. 6 (1) (a) GDPR (Consent), Art. 6 (1) (c), Art. 5 (1) (a), (2), Art. 7 (1) GDPR (fulfilment of legal obligation) Art. 6 (1) (f) GDPR (legitimate interests). We pursue the legitimate interest of being able to prove that consent has been given. |
|
Recipients or categories of recipients of the personal data: |
Internal departments, hosting providers, data processors for sending the newsletter. |
|
Transfer to a third country: |
No |
|
Storage period: |
Deletion after unsubscribing from the newsletter, insofar as this does not conflict with any legal obligations to retain data. |
|
Obligation to provide personal data and, where applicable, consequences of a failure to provide such data: |
Mandatory information in the registration form. |
|
Exercise of the right of withdrawal: |
Withdrawal can be exercised via the unsubscribe link in each newsletter. |
4.1.7. Newsletter for offers from “Research in Germany”
|
Categories of personal data concerned:
|
Email address, salutation, title, surname, first name, country, city, field of interest, institution, size of company, alignment of the operating business, working field. |
|
Purpose(s): |
Sending the newsletter, documentation of consent |
|
Legal basis (or bases): |
Art. 6 (1) (a) GDPR (Consent), Art. 6 (1) (c), Art. 5 (1) (a), (2), Art. 7 (1) 1 GDPR (fulfilment of legal obligation) Art. 6 (1) (f) GDPR (legitimate interests). We pursue the legitimate interest of being able to prove that consent has been given. |
|
Recipients or categories of recipients of the personal data: |
Internal departments, hosting providers, data processors for sending the newsletter. |
|
Transfer to a third country: |
No |
|
Storage period: |
Deletion after unsubscribing from the newsletter, insofar as this does not conflict with any legal obligations to retain data. |
|
Obligation to provide personal data and, where applicable, consequences of a failure to provide such data: |
Mandatory information in the registration form. |
|
Exercise of the right of withdrawal: |
Withdrawal can be exercised via the unsubscribe link in each newsletter.
|
4.2. Embedding of third-party services
4.2.1. YouTube Videos
|
Third party details:
|
Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland |
|
Cookies: |
CONSENT |
|
Categories of personal data concerned: |
See “Further notes” |
|
Purpose(s): |
Playing videos, data transfer to Google Ireland Limited |
|
Legal basis (or bases): |
Art. 6 (1) (a) GDPR (consent), Art. 6 (1) (f) GDPR (legitimate interests). We pursue the legitimate interest in enabling the provision of videos. |
|
Recipients or categories of recipients of the personal data: |
Google Ireland Limited, Google LLC (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) |
|
Transfer to a third country: |
We do not transfer personal data to third countries. With respect to transfer of your personal data to third countries by Google Ireland Limited we refer to Google’s Privacy Policy which can be accessed under: https://policies.google.com/privacy?hl=en |
|
Storage period: |
Your data will be stored until the withdrawal of your consent. |
|
Exercise of the right of withdrawal: |
Withdrawing your consent by deleting the YouTube-Cookie (see Section 4.2.2.) by clicking on this link. |
|
Further notes: |
Giving consent by clicking on the „play video“ button. Only then will your data be forwarded to Google Ireland Limited. Further information on data processing by Google can be found at:https://policies.google.com/privacy?hl=en |
4.2.2. YouTube Consent
|
Cookies: |
yt-noCookie |
|
Categories of personal data concerned: |
Accepted Cookie. |
|
Purpose: |
Technically necessary to save cookie settings (information about cookie acceptance status of user). |
|
Legal basis GDPR: |
Art. 6 (1) (f) GDPR (legitimate interests) |
|
Legitimate interests: |
Saving cookie setting. |
|
Recipients of the personal data: |
DAAD |
|
Storage period: |
365 days |
|
Information stored in device / gained access to: |
Cookies |
|
Access by: |
DAAD |
|
Legal basis TTDSG (German Telecommunications-Telemedia Data Protection Act): |
§ 25 (2) (2) TTDSG |
|
Duration device access: |
365 days |
4.2.3. chatbot
We offer a chatbot based on Microsoft LUIS/Botframework on our website. After the activation of the chat by clicking on the button, all entries made by you will be transmitted to us anonymously and stored on DSGVO compliant servers in the EU. Deanonymisation is excluded. In order to use the chatbot, you do not have to provide any further personal information.
We process this data based on regulations of the European Union, particularly the General Data Protection Regulation GDPR Article 6 (1) point a. The purpose of processing your data is solely to deal with your contact request.
For more information about Microsoft and the treatment of personal information, click this link please: https://privacy.microsoft.com/de-de/privacystatement
Definitions
- DAAD: German Academic Exchange Service, Kennedyallee 50, 53175 Bonn, Germany, datenschutz@daad.de (hereinafter „we“)
- Third Parties: Google LLC (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), represented in the EU by Google Inc. Ireland
- Cookies: Cookies are small files, which are saved to your device via your web browser.
- Improvement of website: We analyze how visitors use our website www.research-in-germany.org, so that we can make it even more intuitive.
- Website usage data: We process how you use our website www.research-in-germany.org. This includes, for example, information about what content and offers you have searched for and viewed (for how long) on our website, as well as information about previously visited third-party websites.
- Data processing: Any handling of personal data (e. g. collection, recording, organisation, structuring, storage, adaption, transmission of data). Data will not be transferred to third parties other than those expressly named in section 2.
- Third countries: Countries outside the European Economic Area (EEA) for which there are no adequacy decisions by the EU Commission (https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). Therefore, compliance with the data protection principles of Union law is not guaranteed, so that a violation of fundamental rights and freedoms may occur. The exercise of data subjects' rights under the General Data Protection Regulation (e. g. access, rectification, erasure, compensation) and their enforcement by authorities or in court may also be impeded or excluded.
- Withdraw: As the data subject, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal. You can withdraw your consent above.