Source: https://www.science-on-stage.eu/index.php/page/display/7/98/0/privacy-policy
Timestamp: 2019-04-24 23:49:46+00:00

Document:
As operator of the “www.science-on-stage.eu” website, we attach great importance to the protection of your privacy and personal life.
We collect and use the personal data of visitors to our website only to the extent necessary to make the website and our content and services available in a functional manner which is convenient for visitors to use.
Processing of personal data is generally only carried out with the consent of the visitor. In addition, processing may take place where there are real reasons why prior consent cannot be obtained and where processing the data is permitted by law - in particular by the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG 2018).
“Personal Data“ pursuant to Art. 4 No. 1 of the GDPR, means all information relating to an identified or identifiable natural person ("Data Subject"). This includes e.g. the name, address, date of birth, e-mail address and telephone number.
"Processing" pursuant to Art. 4 No. 2 of the GDPR, means any operation or series of operations performed with or without the aid of automated procedures, such as collection, storage, use or disclosure.
“Data Controller” pursuant to Art. 4 No. 7 of the GDPR, means the natural person or legal entity, public authority, institution or other body which, alone or together with others, decides on the purposes and means of processing personal data.
Furthermore, it describes what data is processed when visiting or using our website, for what purposes it is processed, on which legal basis, whether there is a duty to provide it, and how long the data is stored (paragraphs 2 and 3).
It also explains the extent to which data transfers are made, what security measures are maintained, and whether automated decision-making takes place (paragraphs 4 to 6).
Finally, it informs you of your rights in relation to the processing of your personal data (Section 7).
This data is temporarily stored in a separate log file. The primary purpose of this is to ensure system security and stability on a permanent basis and enable technical administration in order to ensure trouble-free connection set-up and operation of our website as well as being able to use it conveniently. In addition, this data will be evaluated for internal administrative and statistical purposes in order to improve our online services. This data is not combined with other data or data sources to allow it to be linked to you.
The legal basis for this processing is Art. 6, Para 1, Clause 1, Letter f) of the GDPR. We use this data processing to pursue the legitimate interest of maintaining the operational security of our Internet pages in order to be able to smoothly and conveniently provide such Internet pages and the information contained therein.
The data will be deleted as soon as it is no longer required to achieve the above purposes for which it was collected. In the case of data collected in relation to the provision of our website, such data will be deleted when the respective session is over. Other data is deleted after a maximum of 6 months.
When visiting our website, cookies are also stored on your device or data carrier. Cookies are text or information files that your Internet browser automatically saves when you visit our website on your device. They contain particular data or settings that are exchanged between your Internet browser and our system. This mainly refers to information on which sub pages of our website have been fetched, and how frequently.
The information generated or transmitted by means of cookies is not personal information. This means that you cannot be personally identified based on this information. Cookies cannot run programmes or damage your device. Instead, cookies are used to compile statistics on the use of our website, which enables its optimisation.
The data will not be stored together with the visitor’s other personal data. This means that it is no longer possible to assign the data to the visitor.
The legal basis for this processing is Art. 6, Para 1, Clause 1, Letter f) of the GDPR. This data processing is carried out in the legitimate interest of optimising the user-friendliness of our internet pages.
Most internet browsers accept cookies automatically. You can also use our website without cookies; however, we stress that you may then no longer be able to fully use all our internet services and functionality.
If you wish to prevent the use of flash cookies, you can install the add-on, which corresponds to the Internet browser you are using, e.g. "Better Privacy" for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy).
Section 2.3 below contains information on your options regarding objection to the storage of cookies by open-source Matomo software.
We use Matomo open-source software for the analysis and statistical evaluation of website usage. Cookies are used for this purpose (see paragraph 2.2). The information on website usage generated by the cookie is transmitted to our servers and summarised in pseudonymous user profiles. The information is used to evaluate the use of our website and to enable its ongoing needs-based design. Disclosure of the information to third parties will not take place.
The IP address will in no event be associated with any other data concerning the user. The IP addresses are anonymised, meaning that assignment of the information is not possible (IP masking).
The legal basis for the above mentioned data processing is Art. 6, Para 1, Clause 1, Letter f) of the GDPR. In implementing these measures, we have a legitimate interest in designing and continuously optimising our services based on the usage analysis carried out. This data is only in anonymised form.
We provide an e-mail newsletter in order to inform you of the association’s news and activities. The newsletter will only be sent if you register via our website, or via a link in an e-mail message. To register for our newsletter, we use the double opt-in procedure. This means that after submitting your e-mail address, we will send you a confirmation e-mail containing a link. By clicking on this link, you confirm that you wish to receive the newsletter and give your consent to the receipt of our newsletter to the e-mail address you provided. The newsletter will only be sent to your e-mail address if you provide this confirmation. The sole purpose of storing the data is to send you the newsletter.
The only obligatory information for the transmission of the newsletter is the e-mail address.
You can withdraw your consent to the newsletter at any time and unsubscribe from the newsletter. Each newsletter e-mail contains a link allowing you to unsubscribe. You can give notice of cancellation by clicking on this link or by sending us a message to the contact details in section 1 of this data privacy statement.
When registering for the newsletter, we will save the IP address of the user as well as the date and time of the registration. This is to prevent misuse either of our newsletter circulation or of the specified e-mail address; it also enables the registration to be logged for verification purposes.
We use the CleverReach newsletter service in sending out our newsletter. For more information on this data transmission process, please see section 4 of this data privacy statement.
The legal basis for the storage of the e-mail address by us as well as for the transmission to the provider of the newsletter service used is Art. 6, Para 1, Clause 1, Letter a) of the GDPR. Processing will only take place if you have given your consent for the above purposes.
You can revoke your consent at any time (even if you have given your consent before the effective date of the GDPR). The revocation of consent is forward-looking, meaning that it does not affect the legality of any data processing, which was based on your consent prior to revocation.
The legal basis for the storage of the IP address as well as the date and time of the application is Art. 6, Para 1, Clause 1, Letter f) of the GDPR.
Data processing is necessary to safeguard our legitimate interests in running the newsletter smoothly and in asserting, exercising and defending legal claims in the event of fraud. If a third party e-mail address is fraudulently input into the system, this data processing may also be required to safeguard the legitimate interests of a third party, namely the owner of the e-mail address entered.
The data will be deleted as soon as it is no longer required to achieve its respective purpose. It is therefore stored as long as the subscription to the newsletter is active.
On our website we use the Google Maps service, which is provided by Google LLC ("Google"). This allows us to show you interactive maps which are embedded in the website, and it provides convenient usage of the map feature.
By visiting our website, Google receives the information that you have accessed the corresponding sub page of our website. The data specified in section 2.1 of this data privacy statement is also transmitted. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish the data to be associated with your profile on Google, you must log out before activating the button. Google stores your data as user profiles and uses it for the purposes of advertising, market research and / or tailor-made website design. In particular, this type of evaluation will be carried out (even for non-logged-in users) to provide appropriate advertising and to inform other users about your activities on our website. You have a right to object to the creation of these user profiles; to exercise this right, you would have to contact Google directly.
The legal basis for the above mentioned data processing is Art. 6, Para 1, Clause 1, Letter f) of the GDPR. In implementing these measures, we are acting in our legitimate interests in rendering our services user-driven and convenient.
We have integrated YouTube videos into our online services; these videos are stored on http://www.youtube.com and they can be played directly on our website. This video platform is managed by YouTube LLC, which is a Google LLC company (see section 2.5).
The integration of these videos is subject to extended privacy mode, i.e. no user data on you is transferred to YouTube if you do not play the videos. The data set out below will only be transmitted if you play the videos. We have no influence on this data transfer.
If you play the videos, the third-party provider will receive the information that you have accessed the corresponding sub-page of our website. The data specified in section 2.1 of this statement is also transmitted. This is done regardless of whether you are logged in to a YouTube user account, or if there is no user account. If you are logged in to YouTube, your data will be assigned directly to your user account. If you do not wish the data to be associated with your YouTube user account, you must log out before playing the video.
The third party stores your data as a user profile and uses it for the purposes of advertising, market research and / or tailor-made website design. This type of evaluation may also be carried out (also for non-logged-in users) to provide appropriate advertising and to inform other users of the platform about your activities on our website. You have a right to object to the creation of this sort of user profile; to exercise this right, you would have to contact the third party provider directly.
The legal basis for the above mentioned data processing is Art. 6, Para 1, Clause 1, Letter f) of the GDPR. Our legitimate interest relates to the fulfilment of promotional purposes and an increase in the range and functionality of our services. Moreover, the options available to us are used, based on the measures and settings explained above, to ensure that data processing only takes place if the person concerned instigates it, or if such person is able to prevent it.
If you wish to subscribe to our newsletter (see section 2.4), you must provide us with your e-mail address, which is required to send the newsletter itself. Without your e-mail address, we cannot send you the newsletter.
The transmission of your personal data to third parties takes place exclusively for the purposes listed below.
if it is legally permissible and the disclosure pursuant to Art. 6, Para 1, Clause 1, Letter b) of the GDPR is necessary for the performance of a contract with you.
We use the CleverReach newsletter service In sending our newsletter (see section 2.4) (Cleverreach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany). Cleverreach is a member of the Certified Senders Alliance. Your e-mail address is transmitted to CleverReach solely for the purpose of sending the newsletter. Your data will be stored by CleverReach in such a way that other CleverReach customers or third parties will not have access to this data. In relation to the dispatch of the newsletter, and in accordance with Art. 28 of the GDPR, we have concluded a separate agreement for order processing with CleverReach GmbH & Co. KG.
If you visit our website, data on this visit may be transmitted to companies based in the United States. This is done for the purpose of integrating interactive maps; for more information on this, please see section 2.5 regarding the integration of Google Maps.
The European Commission has taken a decision on adequacy in consultation with the US (the “EU-US Privacy Shield”, https://www.privacyshield.gov/EU-US-Framework) according to which guarantees on the transmission of data comply with EU data protection standards. The American companies that receive data on visits to our websites have entered their names in a corresponding list and committed themselves to comply with the obligations set out in the Privacy Shield.
We make every effort to ensure the security of your information. In order to prevent the loss, misuse and alteration of personal data, we have set up appropriate physical, electronic and administrative procedures and adapt them to the current state of the art. This includes training for the personnel who have access to the personal data.
We ensure particularly high levels of security by using SSL encryption. In addition, our servers are protected with a firewall and anti-virus programmes. The server room is lockable, which prevents unauthorised access. Secure passwords are chosen for our own online activities.
We do not use any profiling or any other decision-making that is based solely on automated data processing and has legal effects on you or similarly affects you materially.
You have the right to request information about your personal data processed by us. In particular, you have the right to demand information about the processing purposes, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the right of rectification, deletion, limitation of processing or opposition, the existence of a right to complain, the source of your data, to the extent that it has not been collected from us, and the existence of automated decision-making, including profiling and, where appropriate, meaningful information about the details thereof.
You have the right to request without delay the correction of personal data that is incorrectly stored by us, or to request its completion, if we have stored it incompletely.
You have the right to request the deletion of your personal data stored by us, except insofar as the processing is required for the exercise of the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims.
You have the right to demand the restriction of the processing of your personal data, if the accuracy of the data is disputed by you, if the processing is unlawful, but you reject the deletion of the data, if we no longer need the data, but you do for asserting, exercising or defending legal claims, or if you have objected to the processing in accordance with Art. 21 of the GDPR.
You have the right to receive your personal information provided to us in a structured, common and machine-readable format, or to request that we send it to another Data Controller.
You have the right to revoke your consent to us at any time. As a result, we would not be allowed to continue future data processing based on this consent, unless the processing had another legal basis.
You have the right to complain to a regulator if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work, or our head office.
If we process personal information about you in our legitimate interests, you may object to this for reasons that arise from your particular situation.
In addition, you may object to data processing if we do so for direct marketing purposes.
In order to exercise your rights, please contact us via the contact details in accordance with section 1.

References: Art. 4
 Art. 4
 Art. 4
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 21