Source: https://digital.francke-halle.de/wiki/privacy
Timestamp: 2019-04-22 12:12:16+00:00

Document:
The data collected is solely processed to guarantee the proper operation of the databases and to improve their user friendliness, and to compile annual user statistics in an entirely anonymised form. The data is never assigned to specific persons, personal user profiles are not created. The data is not combined with other data sources. The legal basis for the processing of personal data is Art. 6 (1) point (f) GDPR. The legitimate interest of the Study Centre is hereby, to improve, on the basis of the anonymised research behaviour of the users, the databases with regard to their content and functionality, and to thus make the holdings of the Archive and Library of the Francke Foundations accessible to the general public. The statistical data is part of the annual working report, with which the Study Centre fulfils its accountability to the Administration and the Board of Trustees of the Francke Foundations, in accordance with section 7, clause 7 of the statute of the Francke Foundations, and to third-party donors. The legal basis for the processing of personal data is Art. 6 (1) point (c) GDPR.
The personal data gathered in the log files is solely processed in the August Hermann Francke Study Centre by the archivist responsible for the databases. There is no transfer of personal data to additional places within or outside the Francke Foundations or to a third country.
The data is not transferred to third countries.
The data you provide us with is only stored for the duration of the given purpose. The log files are regularly erased after finalisation of the annual report.
If you contact us, we save your information in order to process the enquiry, and for the event of additional queries. Within the framework of your contacting us, your personal data is processed and used for the purpose of answering your query. The legal basis for the processing and storage of data is our legitimate interest in handling your enquiry in accordance with Art. 6 (1) point (f) GDPR. Please note that email communication cannot be entirely protected from access by third parties. Once your query has been answered, your data is erased, insofar as this does not contradict statutory retention periods.
You have the right to be provided with information at any time about your personal data processed by us. Please find a summary of your rights below.
You have the right to obtain from us confirmation as to whether personal data relating to you is being processed. If this is the case, you have the right to obtain information from us, free of charge, about personal data relating to you which we have saved.
You have the right to request us to immediately rectify inaccurate personal data relating to you. Taking thereby the purposes of processing into consideration, you have the right to request that incomplete personal data is completed, including by means of providing a supplementary statement.
The purpose for which personal data was processed has lapsed.
You withdraw the consent on which the processing was based and there is no other legal ground for the processing.
You object to the processing pursuant to Art. 21 (1) GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
The personal data has been unlawfully processed.
The personal data was collected in relation to the offer of information society services as defined in Art. 8 (1) GDPR.
The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
The processing is unlawful, and you oppose the erasure of the personal data and request the restriction of its use instead.
We no longer need the personal data for the purposes of processing, but it is required by you for the establishment, exercise or defence of legal claims.
You have objected to processing pursuant to Art. 21 (1) GDPR pending a decision on whether our legitimate grounds override yours.
In accordance with Art. 20 GDPR you have the right to receive the personal data relating to you, which you have provided to us, in a structured, commonly used and machine-readable format. Moreover, you have the right to transmit this data to another controller without hindrance from us, insofar as the processing is based on consent pursuant to Art. 6 (1) point (a) GDPR or Art. 9 (2) point (a) GDPR or based on a contract pursuant to Art. 6 (1) point (b) GDPR and the processing is carried out by automated means, unless processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Furthermore, when exercising your right to data portability pursuant to Art. 20 (1) GDPR, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible and where this does not adversely affect the rights and freedoms of others.
You have the right, on grounds relating to a particular situation, to object at any time to the processing of personal data relating to you which is necessary due to a legitimate interest on our part or to perform a task carried out in the public interest or in the exercise of official authority. If you make use of your right, we will no longer process your personal data, unless we are able to demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
If you have given us consent, you have the right to withdraw your consent at any time. In this event, any data processing performed by us until such withdrawal shall remain lawful. With regard to this please notify us at datenschutz@francke-halle.de.
You have the right to lodge a complaint with a supervisory authority at any time, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you believe that the processing of personal data relating to you violates applicable law. Nevertheless, we would appreciate it if you could contact us before doing so.
We do not use automated decision-making incl. profiling (Art. 22 GDPR).

References: Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 21
 Art. 8
 Art. 21
 Art. 20
 Art. 6
 Art. 9
 Art. 6
 Art. 20