Dear visitors to the Internet portal of Helmholtz-Institut for Functional Marine Biodiversity,
to ensure that you feel secure when visiting our website, we would like to inform you below about how we handle your data. We neither publish your data nor pass it on to third parties without your consent. Below we explain what types of data we collect when you visit our web pages and precisely how it is used:
A. General information
Extent of data processing
We only process personal data collected from our users insofar as this is necessary for the provision of a functional web presence and our content and services. As a rule, personal data provided by our users is only processed with their consent. One exception is where statutory regulations permit the processing of data.
Legal basis for data processing
Art. 6 (1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis whenever we obtain the consent of the person concerned (“data subject”) for the processing of their personal data.
Art. 6 (1)(b) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data which is necessary for performing a contract to which the data subject is a party. The same applies to processing that is required for carrying out pre-contractual measures.
Art. 6 (1)(f) of the EU General Data Protection Regulation (GDPR) serves as the legal basis when processing is necessary to safeguard a legitimate interest of AWI or a third party, and provided this legitimate interest is not outweighed by the data subject’s interests and fundamental rights and freedoms.
Data erasure and storage duration
The personal data of the data subject is erased, anonymised or blocked as soon as the purpose of the storage ceases to apply. In addition, storage may take place if required by European or national law in EU regulations, laws or other regulations to which AWI is subject. Blocking, anonymisation or deletion of the data also takes place if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data in order to conclude or fulfil the contract.
Controller’s contact details
Data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection legislation as well as any other data protection regulations:
Alfred-Wegener-Institut
Helmholtz-Zentrum für Polar-und Meeresforschung
Am Handelshafen 12
27570 Bremerhaven
Contact:
www.hifmb.de/contact
Internet: https://www.awi.de
Contact details of the data protection officer:
The controller’s data protection officer is:
Christoph Wagner
Tel.: +49 (471) 4831-1637
E-mail: datenschutz(at)awi.de
B. Provision of the website and creation of log files
We store data relating to individual visits to our website for statistical purposes to improve the quality of our web pages. This data record consists of:
- the page from which the data file was requested,
- the name of the data file,
- the date and time of the query,
- the quantity of data transmitted,
- the status of access (the file was transmitted or the file was not found),
- a description of the type of web browser used,
- the IP address of the inquiring computer, whereby the last two digits of the IP address are shortened for anonymization.
The data is stored in the log files of our systems. Storage of this data together with other personal data of the user does not take place.
The legal basis for the temporary storage of data and the log files is Art. 6 (1)(f) of the EU General Data Protection Regulation (GDPR). Storage in log files is carried out to ensure the functionality of the website. In addition, the data is used to optimise the web pages, to carry out troubleshooting and to ensure the security of our IT systems. These purposes also constitute our legitimate interest in the data processing pursuant to Art. 6 (1)(f) of the EU General Data Protection Regulation (GDPR).
The data is deleted as soon as it is no longer needed to achieve the purpose for which it was collected. In the case of data collection for the provision of the website, the data is deleted when the respective session has ended. If the data is stored in log files, it will be deleted after seven days at the latest. Further storage is possible, in which case the IP addresses are deleted or altered so that identification of the calling client is no longer possible.
The collection of data for the purpose of providing the website and storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no right to objection on the part of the user.
C. Web analysis
This website uses the web analytics service Statify to analyze and regularly improve the use of our website. The statistics obtained allow us to improve our offer and make it more interesting for you as a user.
Statify only counts page views and not visitors. The plugin does not process or store any personal data such as IP addresses. The plugin is an open source project. For more information from the third-party provider on data protection, please visit https://de.wordpress.org/plugins/statify/.
D. Registration forms
We use the Gravity Forms plugin on our website to create and send forms. Gravity Forms is a WordPress plug-in that provides additional functionality to the operator of a website built on WordPress. By means of Gravity Forms, your entered form data may possibly be saved on the WordPress database server.
These forms send an email to our internal responsibilities with the data you provide when you confirm the Submit button. The sending of these emails takes place through our own mail server.
In addition, all form transmissions are temporarily saved when they are submitted. After 7 days these are deleted without residue. The storage of your IP address during form submission is prevented from the outset.
The operating company of the Gravity Forms plug-in for WordPress is Rocket Genius, Inc. (1620 Centerville Turnpike, Suite 102, Virginia Beach VA 23464-6500, United States), reachable via https://www.rocketgenius.com.
For more information about the purpose, scope and functionality of the data collection and its processing by the plug-in, please visit the following pages of the manufacturer: https://docs.gravityforms.com/wordpress-gravity-forms-and-gdpr-compliance/.
The legal basis for processing the data when using the registration forms, if the user’s consent has been given, is Art. 6 (1)(a) of the EU General Data Protection Regulation (GDPR). Personal data from the input screen is processed solely for the purpose of registration or implementation of the respective event. The data is deleted as soon as it is no longer needed to achieve the purpose for which it was collected. This is the case when the respective event has been conclusively processed. The user may at any time withdraw their consent to the processing of personal data vis-à-vis the contact persons listed.
Your personal data will only be transmitted to government organisations and authorities if required by law and/or for the purpose of prosecution in the event of attacks on our network infrastructure. Forwarding to third parties for other purposes does not take place.
E. Rights of the data subject
As the data subject whose personal data is collected within the scope of the above-mentioned services, you have the following rights, unless any legal exceptions apply in individual cases:
- Information (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 (1) GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Withdrawal of consent (Art. 7 (3) GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR). For AWI, this is the Landesbeauftragte für den Datenschutz und Informationssicherheit (State Data Protection and Freedom of Information Officer), Arndtstrasse 1, 27570 Bremerhaven.
F. Newsletter
We send out a newsletter that informs interested parties regularly (max. 4 times per calendar year) by email about our activities and news from the HIFMB. If you would like to receive the newsletter, we need a valid email address from you. We collect further data for the newsletter dispatch on a voluntary basis. The data you enter will be used for sending the newsletter or for personalizing the newsletter. The distribution of our newsletter is carried out by the dispatch service provider CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany, whose privacy policy you can view here: https://www.cleverreach.com/de/datenschutz/.
The registration for our newsletter takes place in a so-called double opt-in process. This means that after registration you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no one can register with e-mail addresses of others. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes both the storage of the registration and confirmation time, as well as the IP address.
CleverReach measures the click and opening behavior for the newsletters sent. The ttUnited receives access to these evaluations.
You can unsubscribe from the newsletter at any time or revoke your consent at any time by sending an email to moc.detinutt@rettelswen. Your data will be deleted within one month after termination of the newsletter receipt, provided that the deletion does not conflict with any legal retention obligations.