1. An overview of data protection
Data protection information according to Art. 13 and 14 GDPR
Below you will find our data protection information:
- Data Privacy Notice for Applicants
- Data Protection Information for online meetings via "GoToMeeting“ and “GoToWebinar”
- Data Protection Information for online meetings via “Cisco Webex”
- Data Protection Information for online meetings via “b2match”
- Data Protection Information for online meetings via "Brella"
Data collection on our website
Who is responsible for the data collection on this website?
The data collected on this website are processed by the website operator. The operator's contact details can be found in the website's required legal notice.
How do we collect your data?
Some data are collected when you provide it to us. This could, for example, be data you enter on a contact form. Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data such as the browser and operating system you are using or when you accessed the page. These data are collected automatically as soon as you enter our website.
What do we use your data for?
Part of the data is collected to ensure the proper functioning of the website. Other data can be used to analyze how visitors use the site.
What rights do you have regarding your data?
You always have the right to request information about your stored data, its origin, its recipients, and the purpose of its collection at no charge. You also have the right to request that it be corrected, blocked, or deleted. You can contact us at any time using the address given in the legal notice if you have further questions about the issue of privacy and data protection. You may also, of course, file a complaint with the competent regulatory authorities.
Analytics and third-party tools
2. External hosting
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the host’s servers. These may include, but are not limited to, IP addresses, contact requests, metadata and communication data, contract data, contact details, names, website traffic and other data generated via a website.
The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 (1) (b) GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6 (1) (f) GDPR). Our host will only process your data to the extent that this is necessary to fulfil their performance obligations and follow our instructions with regard to this data. We use the following hosts: Host Europe GmbH, Hansestraße 111, 51149 Köln, Germany.
Conclusion of a contract for order processing
In order to ensure data protection-compliant processing, we have concluded a contract for order processing with our host.
3. General information and mandatory information
In order to ensure data protection during data transmission, we use state-of-the-art encryption technology.
Please note, however, that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.
Notice concerning the party responsible for this website
The party responsible for processing data on this website is:
Bayerische Forschungsallianz (Bavarian Research Alliance) GmbH
Telephone: +49 (0) 89 9901-888-0
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).
Revocation of your consent to the processing of your data
Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
Right to file complaints with regulatory authorities
If there has been a breach of data protection legislation, the person affected may file a complaint with the competent regulatory authorities. The competent regulatory authority for matters related to data protection legislation is the data protection officer of the German state in which our website operator is headquartered. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
This site uses TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries, sent by you to us, the website operator. An encrypted connection is indicated by the address bar of your browser changing from "http://" to "https://" and a padlock icon appearing there. When TLS encryption is enabled, the data that you send to us cannot be read by third parties.
Right to data portability
You have the right to have data which we process based on your consent or in fulfillment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.
Information, blocking, deletion
As permitted by law, you have the right to be provided at any time with information free of charge about any of your personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data corrected, blocked or deleted. You can contact us at any time using the address given in our legal notice if you have further questions on the topic of personal data.
Opposition to promotional emails
We hereby expressly prohibit the use of contact data published in the context of website legal notice requirements with regard to sending promotional and informational materials not expressly requested. The website operator reserves the right to take specific legal action if unsolicited advertising material, such as email spam, is received.
4. Data protection officer
Statutory data protection officer
We have appointed a data protection officer for our company. Please don’t hesitate to contact him if you have any questions regarding data protection.
Dipl.-Wirtschaftsingenieur/ Business Coach (IHK)/ Master of Mediation (University) Thomas Eigner
Telephone: +49 89 9901888-103
5. Data collection on our website
Most of the cookies we use are so-called "session cookies". They are automatically deleted after your visit. Other cookies remain in your device's memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site.
The provider uses "CCM19“ as a "cookie banner"; " CCM19“ is a product of Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, hereinafter referred to as "Papoo Software & Media GmbH“.
- The anonymised IP number of the user;
- Date and time of consent;
- User agent for the browser of the end user;
- The URL of the provider;
- An anonymous, random and encrypted key.
- The approved cookies of the user (cookie status), which serves as verification for the consent.
The encrypted key and cookie status are stored on the end device of the user by means of a cookie in order to establish the corresponding cookie status for future page visits. This cookie is automatically deleted after 12 months.
The legal basis for this is hereby Article 6 (1f) GDPR. The legitimate interest of the provider comprises the user-friendliness of the website as well as fulfilling the statutory provisions of the GDPR.
The installation of the cookie as well as its storage, and thus cookie consent, can be prevented or terminated at any time via the user's browser settings. For more information, refer to the "Cookies“ section above.
Papoo Software & Media GmbH provides additional information via the following links: https://www.ccm19.de/en/privacyclarification.html.
Content of the cookie consent
Server log files
The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files". These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
These data will not be combined with data from other sources.
This data is collected on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of their website – for this purpose, the server log files must be recorded.
Should you send us questions via the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share this information without your permission.
We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1)(a) GDPR. You may revoke your consent at any time. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains. Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.
Registration on our website
During the registration process for the use of our personalized services (e.g. registration to an event), we collect personal data like name, address as well as contact details like telephone number and email address.
You always have the right to request information about your stored personal data, you also have the right to request that it be corrected or deleted, as long as it does not oppose to legal obligations to retain data. If you have any further questions about the issue of privacy and data protection, please contact our data protection officer.
This website uses Google Analytics, a web analytics service. It is operated by Google Inc., Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.
Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
Google Analytics cookies are stored on the basis of consent in accordance with Art. 6 (1) (a) GDPR.
We also use the Google Analytics reports on demographic characteristics, in which data from interest-based advertising from Google and visitor data from third-party providers (e.g. age, gender and interests) are used. These data cannot be traced back to a specific person and can be deactivated at any time via the ad settings.
Google Tag Manager
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager is a tool that enables us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not perform any independent analyses. It only serves to manage and play out the tools integrated via it. However, the Google Tag Manager records your IP address, which may also be transmitted to Google's parent company in the United States.
The Google Tag Manager is used on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in a quick and uncomplicated integration and administration of various tools on its website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.
We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
You can prevent these cookies being stored by selecting the appropriate settings in your browser.
However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
As an alternative to the browser plug-in or as a complementary measure, you can prevent the collection of your data by Google Analytics by clicking on the following link: disable Google Analytics. An optout cookie will be set to prevent your data from being collected on future visits to this site.
Outsourced data processing
We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
7. Social media
The use of the Twitter plug-in is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in being as visible as possible on social media. The data is processed solely on the basis of Art. 6 (1) (a) GDPR insofar as a corresponding consent has been requested; consent may be withdrawn at any time.
You can change your data privacy settings for Twitter in your account settings at https://twitter.com/account/settings.
This website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
Each time you open a page of this website which contains LinkedIn functions, a connection is made to LinkedIn's servers. LinkedIn is informed of your visit to this website, together with your IP address. If you click the LinkedIn "Recommend" button while you are logged into your LinkedIn account, LinkedIn can link your visit to this website with you and your user account. As the provider of these web pages, please note that we have no knowledge about the content of the transmitted data nor about LinkedIn's use of this data.
The use of the LinkedIn plug-in is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in being as visible as possible on social media. The data is processed solely on the basis of Art. 6 (1) (a) GDPR insofar as a corresponding consent has been requested; consent may be withdrawn at any time.
YouTube with enhanced data protection
This website embeds videos from YouTube. The website is operated by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, regardless of whether you watch a video, YouTube establishes a connection to the Google DoubleClick network.
As soon as you start a YouTube video on this website, a connection to YouTube's servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
Furthermore, after starting a video, YouTube can save various cookies on your end device or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve the user experience and prevent fraud attempts.
If necessary, further data processing processes may be triggered after the start of a YouTube video, over which we have no influence.
YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
8. Newsletter data
If you would like to receive our print newsletter, we need you to send us an email confirming that you would like to receive our print newsletter and at which postal or email address it should be sent. With your registration to our newsletter, we will save your email address, the company name, the recipient and the date and time of your registration, as well the sending of a confirmation email and your answer to this email. We only use this data to send the requested information/newsletter. Where applicable, we may also pass on your data to a service provider appointed by us (e.g. envelope inserting service for the postal dispatch of the BayFOR magazine and CleverReach for the electronic dispatch of the newsletter), with whom we have concluded a contract for commissioned data processing, and who processes the data on our behalf. When ordering the electronic newsletter, you agree to its analysis through individual measurement, storage and evaluation of the opening rates and click rates in recipient profiles for the purpose of designing future newsletters according to the interests of our readers.
We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1) (a) GDPR. You can revoke consent to the storage of your data as well as their use for sending the newsletter at any time, e.g. through the "unsubscribe" link in the newsletter or by sending an email to firstname.lastname@example.org. The data processed before we receive your request may still be legally processed.
The data provided when registering for the newsletter will be used to distribute the newsletter until you cancel your subscription when said data will be deleted. Data we have stored for other purposes remain unaffected.
9. Further contracts for commissioned data processing
In the context of collecting contact data on our website based on the user's consent, saving this data in our customer relationship management system, saving personal data within the framework of our online meeting softwares and sending out information and event notifications, contracts for processing personal data are in place with various envelope inserting services (postal dispatch) and the companies Host Europe (Hoster), PS Brands (website), Clippernet (customer relationship management system), LogMeIn (online meeting software), Cisco Systems GmbH (online meeting software), B2Match GmbH (online meeting software) and CleverReach (email marketing software).
As of: August 2023