Source: https://www.bigs-potsdam.org/en/privacy-policy/
Timestamp: 2020-07-10 05:19:45
Document Index: 187315139

Matched Legal Cases: ['Art. 17', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

Privacy Policy - BIGS Potsdam
We are very pleased about your interest in our institute. Data protection is a particularly high priority for the management of the Brandenburg Institute for Society and Security (BIGS). The BIGS website can be used without providing any personal data. However, if a person concerned wishes to make use of special services offered by our Institute via our website, it may be necessary to process personal data. If it is necessary to process personal data and there is no legal basis for such processing, we generally obtain the consent of the person concerned.
The processing of personal data, such as the name, address, e-mail address or telephone number of a data subject, is always carried out in accordance with the Basic Data Protection Regulation and in compliance with the country-specific data protection provisions applicable to BIGS. By means of this data protection declaration, our Institute wishes to inform the public about the nature, scope and purpose of the personal data we collect, use and process. In addition, this data protection declaration is intended to inform affected persons of the rights to which they are entitled.
The Brandenburg Institute for Society and Security (BIGS), as the person responsible for processing, has implemented numerous technical and organisational measures to ensure that the personal data processed via this website is protected as completely as possible. Nevertheless, Internet-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, every person concerned is free to transmit personal data to us by alternative means, such as by telephone.
The BIGS data protection declaration is based on the terms used by the European legislator for directives and regulations when the basic data protection regulation (DS-GVO) was adopted. Our data protection declaration should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance.
Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data cannot be attributed to an identified or identical data subject.
Brandenburg Institute for Society and Security gGmbH (BIGS)
Phone: 03317044060
The BIGS website uses cookies. Cookies are text files which are stored on a computer system via an Internet browser.
By using cookies, BIGS can provide users of this website with more user-friendly services that would not be possible without the setting of cookies.
The BIGS website collects a number of general data and information each time a data subject or automated system accesses the website. This general data and information is stored in the server log files. The following can be recorded: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrer), (4) the sub-websites that are accessed via an accessing system on our website, (5) the date and time of an access to the Internet site, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information which serve to prevent danger in the event of attacks on our information technology systems.
When using this general data and information, BIGS does not draw any conclusions about the person concerned. Rather, this information is required in order to (1) deliver the contents of our website correctly, (2) optimize the contents of our website and the advertising for it, (3) ensure the permanent operability of our information technology systems and the technology of our website, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack. This anonymously collected data and information is therefore evaluated by BIGS both statistically and with the aim of increasing data protection and data security in our institute, in order to ultimately ensure an optimum level of protection for the personal data processed by us. The anonymous data in the server log files are stored separately from all personal data provided by a person concerned.
The data subject shall have the possibility to register on the Internet site of the controller by providing personal data. The personal data transmitted to the controller is specified in the registration form. The personal data entered by the data subject are collected and stored solely for internal use by the data controller and for his own purposes. The data controller may arrange for the transfer to one or more processors, such as a parcel service provider, who shall also use the personal data exclusively for internal use attributable to the controller.
On the BIGS website, users are given the opportunity to subscribe to the newsletter of our institute. The input mask used for this purpose indicates which personal data is transferred to the data controller when ordering the newsletter.
BIGS informs its interested parties and partners about the activities of the Institute at regular intervals by means of a newsletter. In principle, the newsletter of our Institute can only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers to receive the newsletter. For legal reasons, a confirmation e-mail will be sent to the e-mail address registered for the first time by a person concerned. This confirmation mail is used to check whether the owner of the e-mail address has authorized the receipt of the newsletter as a data subject.
The BIGS newsletters contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such e-mails sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. Based on the embedded pixel-code, BIGS can identify whether and when an e-mail was opened by an affected person and which links in the e-mail were called up by the affected person.
Such personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by the data controller in order to optimise the newsletter dispatch and to adapt the content of future newsletters even better to the interests of the data subject. This personal data is not passed on to third parties. Affected persons are entitled to revoke the separate declaration of consent submitted in this regard via the double opt-in procedure at any time. After revocation, these personal data will be deleted by the data controller. BIGS automatically interprets a cancellation of receipt of the newsletter as a revocation.
Due to legal requirements, the BIGS website contains information that enables rapid electronic contact with our institute and direct communication with us, which also includes a general address for so-called electronic mail (e-mail address). If a data subject contacts the data controller by e-mail or via a contact form, the personal data transmitted by the data subject is automatically stored. Such personal data transmitted voluntarily by a data subject to the controller are stored for the purposes of processing or contacting the data subject. Such personal data shall not be disclosed to third parties.
If one of the above reasons applies and a data subject wishes to have personal data stored at BIGS deleted, he/she may at any time contact an employee of the data controller. The BIGS employee will ensure that the request for deletion is complied with immediately.
If the personal data have been made public by BIGS and our institute, as the data controller, is obliged to delete the personal data pursuant to Art. 17 para. 1 of the DS-GVO, BIGS shall take reasonable measures, including technical measures, taking into account the available technology and the implementation costs, to inform other data controllers who process the published personal data that the data subject has requested these other data controllers to delete all links to these personal data or copies or replications of these personal data, unless the processing is necessary. The employee of BIGS will take the necessary steps in individual cases.
If one of the above-mentioned conditions is met and a data subject wishes to request the restriction of personal data stored at BIGS, he or she may contact an employee of the data controller at any time. The BIGS employee will arrange for the restriction of the processing.
In order to assert the right to data transferability, the person concerned may contact a BIGS employee at any time.
In the event of an objection, BIGS shall no longer process the personal data unless we can demonstrate compelling reasons for processing which are worthy of protection and which outweigh the interests, rights and freedoms of the data subject, or unless the processing serves to assert, exercise or defend legal claims.
If BIGS processes personal data for the purpose of direct marketing, the data subject shall have the right to object at any time to the processing of personal data for the purpose of such marketing. This also applies to profiling, insofar as it is connected with such direct marketing. If the data subject objects to BIGS processing for direct marketing purposes, BIGS will no longer process the personal data for these purposes.
In addition, the data subject shall have the right to object, for reasons arising from his or her particular situation, to the processing of personal data relating to him or her which is carried out by the BIGS for the purposes of scientific or historical research or for statistical purposes in accordance with Article 89 (1) of the DPA, unless such processing is necessary for the performance of a task carried out in the public interest.
In order to exercise the right of objection, the data subject may directly contact any BIGS employee or any other employee. The data subject is also free to exercise his right of objection in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures involving technical specifications.
Where the decision is (1) necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) with the express consent of the data subject, BIGS shall take appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject, including at least the right to obtain the intervention of a person from the controller, to express its views and to challenge the decision.
The data controller has integrated components of the Institute Facebook on this website. Facebook is a social network.
A social network is a social meeting place operated on the Internet, an online community that generally enables users to communicate with each other and interact in virtual space. A social network can serve as a platform for the exchange of opinions and experiences or enables the Internet community to provide personal or institute-related information. Facebook enables users of the social network to create private profiles, upload photos and network via friend requests, among other things.
If the person concerned is logged in to Facebook at the same time, Facebook recognizes which specific subpage of our website the person concerned is visiting each time the person concerned calls up our website and for the entire duration of their stay on our website. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account of the person concerned. If the person concerned clicks one of the Facebook buttons integrated on our website, for example the “Like" button, or if the person concerned makes a comment, Facebook assigns this information to the person’s personal Facebook user account and stores this personal data.
The data controller uses the addition “_gat" for web analysis via Google Analytics.
The data controller uses the addition “_gat._anonymizeIp" for web analysis via Google Analytics. By means of this addition, the IP address of the Internet connection of the person concerned is shortened and anonymised by Google if the access to our Internet pages is from a member state of the European Union or from another state that is a party to the Agreement on the European Economic Area.
Google Analytics places a cookie on the information technology system of the person concerned. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyse the use of our website. Each time one of the individual pages of this website, which is operated by the person responsible for processing and on which a Google Analytics component has been integrated, is called up, the Internet browser on the information technology system of the person concerned is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. In the course of this technical process, Google receives knowledge of personal data, such as the IP address of the person concerned, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently to enable commission settlements.
Furthermore, the data subject has the opportunity to object to and prevent the collection of data generated by Google Analytics and relating to the use of this website and the processing of such data by Google. To do this, the person concerned must download and install a browser add-on under the link https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information about visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google to be an objection. If the data subject’s information technology system is deleted, formatted or reinstalled at a later date, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the person concerned or another person within his or her sphere of control, the browser add-on may be reinstalled or reactivated.
The data controller has integrated components of Twitter on this website. Twitter is a multilingual publicly accessible microblogging service where users can post and disseminate so-called tweets, i.e. short messages limited to 140 characters. These short messages can be accessed by anyone, including those who are not registered with Twitter. The tweets are also displayed to the so-called followers of the respective user. Followers are other Twitter users who follow the tweets of a user. Furthermore, Twitter enables the addressing of a broad audience via hashtags, links or retweets.
Art. 6 I lit. a DS-GVO serves as a legal basis for our institution for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, with processing operations necessary for the supply of goods or the provision of another service or consideration, the processing is based on Art. 6 I lit. b DS-GVO. The same applies to such processing operations which are necessary for the implementation of pre-contractual measures, for example in cases of enquiries about our products or services. If our institute is subject to a legal obligation which makes it necessary to process personal data, for example to fulfil tax obligations, processing is based on Art. 6 I lit. c DS-GVO. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our company was injured and his or her name, age, health insurance details or other vital information had to be disclosed to a doctor, hospital or other third party. The processing would then be based on Art. 6 I lit. d DS-GVO. Finally, processing operations could be based on Art. 6 I lit. f DS-GVO. Processing operations which are not covered by any of the above legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our Institute or of a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (Recital 47 sentence 2 DS-GVO).
16. The duration for which the personal data are stored
We would like to inform you that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual regulations (e.g. information on the contractual partner). Sometimes it may be necessary for a contract to be concluded that a data subject provides us with personal data, which must subsequently be processed by us. For example, the person concerned is obliged to provide us with personal data if our institute concludes a contract with him/her. Failure to provide the personal data would mean that the contract with the person concerned could not be concluded. Before the person concerned makes personal data available, he or she must contact one of our employees. Our employee will inform the data subject on a case-by-case basis whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what the consequences would be if the personal data were not provided.
As a responsible institution, we do not use automatic decision making or profiling.
This privacy statement was created by the Data Protection Officer Bonn in cooperation with RC GmbH, which recycles used notebooks and provides the filesharing lawyers of WBS-LAW.