Source: https://trustee.ise.fraunhofer.de/view_data_protection
Timestamp: 2019-04-26 06:20:48+00:00

Document:
Within the use of this website we, as the data controller, collect and store the data you provided as long and so far this is necessary to fulfil the specified purposes and legal obligations. In the following we will inform you what data is involved, how the data is processed and what rights you have in this regard.
According to Article 4 no. 1 General Data Protection Regulation (GDPR) personal data means any information relating to an identified or identifiable natural person (in the following "data subject or user").
You can always reach out to our data protection officer directly if you have any questions about data protection law or about your rights as a data subject.
Data processing pursuant to numbers 1-6: The first sentence of Art. 6 Subs. 1 Sentence 1 lit. f GDPR (legitimate interests). Our legitimate interests in the processing of data are based on our desire to offer user-friendly optimised web pages.
After the set period of 30 days, our web server automatically deletes the above-mentioned data, unless we are obliged to longer storage under Art. 6 Subs. 1 Sentence 1 lit. c GDPR due to tax- and commercial-law retention and documentation duties, to comply with obligations following the Horizon 2020 agreement (e.g. a documentation obligation for 5 years following Art. 18 Grant Agreement Number 696140) or you have consented to a prolonged period under Art. 6 Subs. 1 Sentence 1 lit. a GDPR. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.
In addition, to open a user account you have to enter a password of your choice. Together with your username this provides access to your user account.
Our website offers an automatic standardized evaluation of submitted energy efficiency or renewable energy proposals for a possible financing or re-financing in the future. The use of this service requires prior registration. Recording of data upon registration by a user is used to process and evaluate proposals for a possible financing or re-financing of the project in the future.
After your user account is deleted, your personal data are automatically deleted, unless we are obliged to longer storage under Art. 6 Subs. 1 Sentence 1 lit. c GDPR due to tax- and commercial-law retention and documentation duties, to comply with obligations following the Horizon 2020 agreement (e.g. a documentation obligation for 5 years following Art. 18 Grant Agreement Number 696140) or you have consented to a prolonged period under Art. 6 Subs. 1 Sentence 1 lit. a GDPR.
Your personal Data will not be transferred to third parties (i.e. to natural and legal persons other than you, the data subject, the controller or the service provider or its vicarious agents) for purposes other than those specified below.
(in the following: single "consortium member" and together "consortium"). The consortium members are joint controller according to Art. 26 Subs. 1 Sentence 1 GDPR.
The legal foundation for the data transfer is Art. 6 Subs. 1 Sentence 1 lit. f GDPR. Our legitimate interest follows from the expertise of the consortium and their help with the evaluation of the proposal. One of the consortium members will use the data to personally assess the proposal in the third stage and get in contact with you to validate your proposal, which happens in our legitimate interest. The consortium member may use the submitted data for own research purposes or research purposes of the consortium.
Following Art. 26 Subs 3 GDPR you may exercise your rights (see Section 6 and 7) under the GDPR in respect of and against each of the controllers. You may request to receive information about the essence of the joint controller arrangement to the controller (see Section 1).
After the assessment of the proposal and the conclusion of the final report your data will be transferred to potential financial partners in order to enable a potential investments in the submitted and evaluated proposal.
The legal foundation for the data transfer is Art. 6 Subs. 1 Sentence 1 lit. f GDPR. Our legitimate interest follows from our long term goal to support projects in the area of energy efficiency and renewable energy with their implementation and execution by finding financial partners for them.
The transferred data may be used by third parties only for the stated purposes. Personal data will not be transferred to government bodies or public authorities except in order to comply with mandatory national legislation or if the transfer of such data should be necessary in order to take legal action in cases of fraudulent access to our network infrastructure or to comply with our obligations following the Horizon 2020 agreement. Personal data will not be transferred for any other purpose.
The data obtained with the help of cookies help us pursue our legitimate interests as website owners and serve the legitimate interests of third parties pursuant to the first sentence of Art. 6Subs. 1 Sentence 1 lit. f GDPR.
The following tracking measures which we use are carried out on the basis of Art. 6 Subs. 1 Sentence 1 lit. f GDPR.
On our website, we use the Matomo open source service by InnoCraft Ltd in 150 Willis St., 6011 Wellington, New Zealand to analyse the activities of our website users and to optimise our website and its content based on this analysis. During this process, we do not receive any information that identifies our users.
To the extent that we collect IP addresses, these addresses are stripped of their last control number block upon collection to anonymise the IP addresses instantly. We delete further personal data stored in the cookie at the end of each session.
We process statistical data based on our legitimate interest pursuant to of Art. 6 Subs. 1 Sentence 1 lit. f GDPR in the optimisation of our online offering and our web presence.
In so far as your personal data are processed on the basis of legitimate interests pursuant to Art. 6 Subs. 1 Sentence 1 lit. e and Art. 6 Subs. 1 Sentence 1 lit. f GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data, in so far as there are grounds arising from your particular situation or it relates to objection to direct marketing. In the latter case, you have a general right to object which we shall heed without the stating of a particular situation; This also applies to profiling based on those provisions as defines in Art. 4 no 4 GDPR.
If you want to exercise your right to object, simply send an email to datenschutz(at)zv.fraunhofer.de.
We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, de-struction or against unauthorised access by third parties. Our security measures are continually monitored and improved to reflect technological developments.
This Data Protection Policy is the latest version and was last amended as of November 2018.

References: Art. 6
 Art. 6
 Art. 18
 Art. 6
 Art. 6
 Art. 18
 Art. 6
 Art. 26
 Art. 6
 Art. 26
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 4