Source: https://www.gerda-henkel-stiftung.de/privacypolicy
Timestamp: 2018-07-19 09:54:07
Document Index: 405175460

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'art. 6', 'art. 6', 'art. 6', 'art. 6', 'art. 6', 'art. 6', 'art. 6', 'art. 7', 'art. 15', 'art. 16', 'art. 17', 'art. 18', 'art. 19', 'art. 20', 'art. 21']

Data Protection | Gerda Henkel Stiftung
On the basis of valid legislation, the Gerda Henkel Foundation has developed a new data privacy concept. We would like to take this opportunity to inform you about whether and, if so, which of your personal data we collect and process, and for what purposes, as well as the legal basis on which we use them on our website www.gerda-henkel-stiftung.de (“website”). Furthermore, we would like to inform you about how we handle your personal data in the event of your contacting us in writing, submitting applications for project funding, or receiving funding from us.
Personal data are all data that can be related to you personally, e.g., your name, your postal address or your e-mail address, as well as the IP address allocated to you, the technical data of your mobile terminal devices such as the type of device and the operating system, your location data, and data transmitted to us on the basis of granted access authorisation on your mobile terminal devices.
The Gerda Henkel Foundation, Malkastenstrasse 15, 40211 Düsseldorf, Germany is responsible for processing your personal data in the context of your use of the website. Please find further details about the Gerda Henkel Foundation and ways of contacting us here.
In line with current legislation the Gerda Henkel Foundation has a data protection officer. The Gerda Henkel Foundation data protection officer can be reached by e-mail at: datenschutz@gerda-henkel-stiftung.de
3. Legal bases for the data processing
In line with the General Data Protection Regulation (GDPR) we are obliged to inform you about the legal basis for, and purposes of the data processing we perform. We refer in principle to four different legal bases, which allow us to process the data on this website, and to communicate with you:
1.) Art. 6, para. 1 lit. a) GDPR permits data processing if the “data subject has given consent to the processing of his or her personal data for one or more specific purposes”.
2.) Art. 6, para. 1 lit. b) GDPR permits data processing if “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”.
3.) Art. 6, para. 1, lit. c) GDPR permits data processing if the “processing is necessary for compliance with a legal obligation to which the controller is subject”. .
4.) Art. 6, para. 1 lit. f) GDPR permits data processing if “processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, […]”.
In the following list of the various purposes for which we process data we draw your attention in each case to the relevant legal basis for the purpose.
4. Data collection, data processing, and data use
The type of data processing depends on the way our services are used. The following is a list of which data we collect when.
a) Provision of the website and compilation of log files
When you visit our website, data are automatically collected and temporarily stored. These data serve communication between your computer and our server (retrieval of texts, images, download of files etc.). They are automatically transmitted by your browser. The data relates to the following information:
The Internet address (URL) of the requested page
The legal basis for the collection of the data is art. 6 para. 1 lit. f) GDPR. The collected data cannot be assigned to you personally. We do not assign data by combining them with other data sources. For technical reasons the data are stored for a period of seven days and then deleted unless, that is, we are legally obliged to store them for a longer period of time.
Temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this, the user’s IP address must be stored for the duration of the session. Storage in log files occurs in order to ensure the functionality of the website. The data serve to help us optimise the website and ensure the security of our IT systems. The data collected by the Gerda Henkel Foundation are used for administrative purpose, web logs, research, and collective statistics. The Gerda Henkel Foundation can use the data for statistical purposes (e.g., pages visited, time spent on the website, number of visits, date and time of a visit), as well as for adapting the web pages, content, layout, and services.
The stored data are evaluated only to the extent that
we are obliged to by law or a court ruling or
we need the logged data in order to be able to prosecute attacks on our infrastructure under criminal and/or civil law.
The data are not evaluated for marketing purposes.
b) Cookies and data traffic analysis
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. If a user visits a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic character string that enables a unique identification of the browser when the website is called up again. We only use cookies that are technically necessary. Some elements of our website require the calling browser to be identified even after a page change. The legal basis for the processing of personal data using technically necessary cookies is art. 6 para. 1 lit. f) GDPR.
The purpose of using technically necessary cookies is to simplify use of the website for users. Some functions of our website cannot be offered without the use of cookies. For these the browser needs to be recognised even after a page change. We need cookies for the following applications:
Data collection via application and contact forms
The user data collected by technically necessary cookies are not used to compile user profiles. Cookies are stored on the user’s computer, which transmits them to our site. For this reason, as a user you have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.
c) Making contact by e-mail or filling out the contact form
On our website you will find a contact form, which can be used for making contact electronically. Alternatively, you can contact us via the e-mails provided. If you contact us using one of these channels, the personal data that are entered and transmitted are automatically stored. We process your personal data inasmuch as and for as long as we need them in order to deliver our information services for you. We delete your personal data once we have performed our service for you unless, that is, we are obliged by law to store them longer. The legal basis for the collection of the data is art. 6 para. 1 lit. f) GDPR. The purpose of the data processing and our legitimate interest lie in our being able to answer the messages sent to us.
d) Data collection in the case of an application
The foundations’ decisions about grants necessarily require the applications that are submitted to be appraised by experts in line with normal academic standards. For this reason, it is necessary for us to forward the applications submitted, including the personal data they contain, to members of the foundations’ committees and/or external experts, who can be resident in Germany, the EU, and countries outside the EU (third countries). In order to guarantee a uniform level of protection we have concluded agreements with external for the processing of applications.
e) The treatment of data in the event of funding being granted
In the event of funding being granted, the data you make available when submitting the application, and in communication relating to the funding, are stored on the basis of art. 6 para. 1 lit. b) GDPR. These are personal master data (e.g., given name, name, date of birth, …), communication data (e.g., address, e-mail address, telephone number, …), application data (e.g., information about your academic career, to employment relationships, …), project data, and accounting data. The data are not passed on to third parties.
The foundation also uses the data collected in the application submission process to inform funding partners about its activities, extend in invitations to foundation events, initiate public relations work about the research projects, and coordinate activities indirectly linked to the funding. Agreement to be included in the information mailing list is voluntary and can be revoked at any time. The legal basis for the information mailing list is art. 6, para. 1, lit. a) GDPR.
The Gerda Henkel Foundation is committed to not-for-profit, transparent work, and for this reason provides information about its funding activities in various ways. This occurs regularly, for example by maintaining a register of funded projects on the foundation’s website, by publishing an annual report in both a print and digital version, and by irregular PR activities. In the context of these activities the foundation publishes the names of the funding recipients and their institutions collected in connection with the application, and reports on the projects funded. The legal bases for these activities are art. 6, para. 1, lit c) and art. 6, para. 1, lit. f) GDPR.
We process data only for as long as this is necessary for the respective purpose. Moreover, we are subject to various storage and documentation obligations pursuant to, among other things, the German Commercial Code (HGB) and the Tax Code (AO). These can be for a period of up to 10 years. The storage period is ultimately also determined by statutory limitation periods, which for example in accordance with sections 195 ff. of the German Civil Code (BGB) can be up to 30 years, although the standard limitation period is three years.
Revocation of your consent pursuant to art. 7 para. 3 GDPR
Information pursuant to art. 15 GDPR
Correction pursuant to art. 16 GDPR
Deletion (“Right to be forgotten”) pursuant to art. 17 GDPR
Restriction of the processing pursuant to art. 18 GDPR
Notification pursuant to art. 19 GDPR
Data portability pursuant to art. 20 GDPR
Right to object pursuant to art. 21 GDP
You can reach the supervisory authority responsible for the Gerda Henkel Foundation at:
Tel.: + 49 (0)211/38424-0
Fax:+ 49 (0)211/38424-10
We have taken technical and organisational precautions to protect the data we collect. These are geared in particular against the danger of loss of, manipulation of, and unauthorised access to your data. The security concept is regularly inspected with regard to functionality and appropriateness and brought up to date.
9. Regular updating of his Privacy Policy
This Privacy Policy is constantly updated in line with new legislation. On this page we let you know about any new developments.
Date of this Privacy Policy: 20 May 2018