DATA PROTECTION STATEMENT

PRIVACY NOTICE

The follow­ing infor­ma­tion relates to data protec­tion in the context of the DZHW website. You can find state­ments on data protec­tion in the context of the DZHW’s gener­al activ­i­ty here. State­ments on data protec­tion in the context of DZHW’s online surveys are made avail­able direct­ly to invit­ed persons.

Contact data of the respon­si­ble organisation

German Centre for Higher Educa­tion Research and Science Studies DZHW GmbH
Lange Laube 12
30159 Hannover
Germany
Tel.: +49 511 450670–0
Fax: +49 511 450670–960
Email:

Contact data of the data protec­tion officer

Martin Fuchs
Lange Laube 12
30159 Hannover
Germany
Tel.: +49 511 450670–491
Fax: +49 511 450670–960
Email:

Purpose and legal basis for process­ing data

The DZHW website provides infor­ma­tion for the public about the DZHW’s activ­i­ties. Person­al data (IP address) are processed for the purpose of operat­ing the website. Logging users’ access to the website is in our legit­i­mate inter­ests within the meaning of Article 6 Section 1(f) of the Gener­al Data Protec­tion Regula­tion (GDPR), because it is essen­tial in order to ensure the avail­abil­i­ty and integri­ty of our website.

For order­ing publi­ca­tions and regis­ter­ing for events and newslet­ters, the process­ing of addition­al person­al data is based on Article 6 Section 1(b) of GDPR for the purpose of perform­ing contracts entered into.

Logging

When you visit webpages of a DZHW website your inter­net brows­er trans­fers data to the web server. The follow­ing data are record­ed during an active connec­tion for the purpose of commu­ni­ca­tion between your inter­net brows­er and the DZHW web server:

  • IP address
  • Date and time of the inquiry
  • Time zone differ­ence to Green­wich Mean Time (GMT)
  • Content of the inquiry (actual page)
  • Amount of data trans­ferred and access status (file trans­ferred, file not found etc.)
  • Website where the inquiry originates
  • Brows­er type/version/language
  • System software and its user interface
  • Language and version of brows­er software

We process these data to fulfil the techno­log­i­cal require­ments for display­ing the DZHW’s websites and to guaran­tee their stabil­i­ty and securi­ty. These data (logs) are stored for 3 days. These data, includ­ing excerpts, are not compared with other data sets or passed on to third parties.

Recip­i­ents of person­al data

DZHW web servers are operat­ed by HIS Hochschul-Infor­ma­tions-System eG and Vario­me­dia AG under a data process­ing agree­ment. Person­al data collect­ed while using the DZHW website are there­fore processed by HIS eG or Vario­me­dia AG:

HIS Hochschul-Infor­ma­tions-System eG
Goseriede 9
30159 Hannover
Tel.: 0511–1220‑0
Fax: 0511–1220-250
Email:

Vario­me­dia AG
August-Bebel-Strasse 68
14482 Potsdam
Tel.: 0331–23789‑0
Fax.: 0331–23789-59
Email:

Web analy­sis by Matomo (former­ly PIWIK)

On some DZHW websites, the open source software tool Matomo (former­ly PIWIK) is used to analyse the surfing behav­iour of visitors to the website. If individ­ual pages of the DZHW website are visit­ed, the follow­ing data are stored:

  • 2 bytes of the IP address­es of the user’s system
  • The website visited
  • The website from which users access the DZHW website (refer­rer)
  • The subpages called up from the web page visited
  • Length of visit
  • Frequen­cy of visits to the website

The software for the above runs only on DZHW servers. Users’ person­al data are stored there only. The data are not passed on to third parties. The software setting ensures that IP address­es are not stored in complete form; 2 bytes of the IP address are masked (example: 192.168.xxx.xxx). This makes it impos­si­ble to assign the abbre­vi­at­ed IP address to the server that called up the website.

Process­ing users’ person­al data enables the DZHW to statis­ti­cal­ly record the use of individ­ual website compo­nents and to contin­u­ous­ly improve the user-friend­li­ness of the DZHW’s website. Anonymis­ing users’ IP address­es ensures that the users‘ inter­est in the protec­tion of their person­al data is suffi­cient­ly provid­ed for. The legal basis for process­ing users‘ person­al data is Article 6 Section 1(f) of GDPR.

These data are delet­ed when they are no longer needed for the purpos­es listed above. In the present case this happens after 90 days. Click on the follow­ing link to find more infor­ma­tion on the priva­cy settings of Matomo software: https://matomo.org/docs/privacy/.

Newslet­ter

To regis­ter to receive the newslet­ter, you need an active email address. By passing on your email address to us you consent to receive the relevant newslet­ter. You can withdraw your consent at any time (Article 6 Section 1(a) of GDPR). Your data are used for no other purpose apart from sending the newslet­ter and are not passed on to third parties. The data will be delet­ed as soon as they are no longer required for this purpose. Your consent and withdraw­al of consent are stored for the purpose of proof until your data are delet­ed or anonymised.

Data storage

In cases where archiv­ing is not compul­so­ry, person­al data are only stored for the length of time required to comply with statu­to­ry regula­tions. Once their purpose has been fulfilled, data collect­ed for purpos­es of scien­tif­ic research are anonymised so that they can be made avail­able to the scien­tif­ic community.

Rights of users of the DZHW website

In accor­dance with the Gener­al Data Protec­tion Regula­tions (DGPR) you have the follow­ing rights in relation to process­ing of your person­al data by the DZHW:

  • If your person­al data are processed, you have the right to be informed of which of your person­al data are stored (Article 15 of GDPR).
  • If incor­rect person­al data are processed, you have the right to recti­fi­ca­tion (Article 16 GDPR).
  • If statu­to­ry provi­sions permit, you have the right to demand the erasure or restric­tion of process­ing or to object to process­ing (Articles 17, 18 and 21 of GDPR).
  • If you have consent­ed to data process­ing or if a data process­ing contract exists and the data process­ing takes place using automat­ed proce­dures, you have the right to data porta­bil­i­ty under certain circum­stances (Article 20 of GDPR).
  • If you agree to the process­ing of your person­al data by the DZHW through a decla­ra­tion of consent, you can withdraw your consent for the future at any time. The legal­i­ty of the data process­ing that takes place based on your consent before you withdraw it is not impaired by your withdraw­al of consent.

If you make use of the rights listed above, the DZHW reserves the right to check whether the required statu­to­ry condi­tions exist.

Further­more you have the right to appeal to the Feder­al Commis­sion­er for Data Protec­tion and Freedom of Infor­ma­tion using the follow­ing contact data:

Address: Graurhein­dor­fer Str. 153 — 53117 Bonn
Telephone: +49 228–997799‑0
Telefax: +49 228–997799-5550
Email:
Inter­net: https://www.bfdi.bund.de

Electron­ic mail (email)

It is possi­ble that infor­ma­tion that you send unencrypt­ed to the DZHW by electron­ic mail (email) may be read by third parties during trans­mis­sion. Gener­al­ly, your identi­ty cannot be checked, and it is impos­si­ble to deter­mine who is behind an email address. Legal­ly secure commu­ni­ca­tion via normal email is there­fore not guaran­teed. The DZHW sets filters to prevent unwant­ed adver­tis­ing (SPAM filter) that may occasion­al­ly wrong­ly identi­fy normal emails as unwant­ed adver­tis­ing and delete them. Emails that contain harmful programmes (virus­es) are always delet­ed automatically

If you contact us via email, your data are stored so that they can be used to process and answer your inquiry. These data are not passed on to third parties without your consent.

If you want to send us a message worthy of protec­tion, we recom­mend sending the message via the conven­tion­al postal service to the DZHW. Current­ly we cannot receive encrypt­ed messages.

Alter­na­tions to our priva­cy notice

The DZHW reserves the right to alter this priva­cy notice from time to time to ensure that it always complies with current statu­to­ry require­ments, or to imple­ment alter­ations to the services offered in the priva­cy notice, e.g. when intro­duc­ing new services. The new priva­cy notice is then applic­a­ble on your next visit to the website.