The ‘verantwortliche Stelle’ (responsible entity) as defined in German data protection legislation, specifically the ‘controller’ per the EU’s General Data Protection Regulation (GDPR), is:

University President Prof. Georg Krausch.


Your rights as a data subject

You can exercise the following rights at any time by contacting our data protection officer using the contact information provided below:

  • Right of access to your personal data that we have stored and right to information on how it is being processed (Art. 15 GDPR)
  • Right to rectification of inaccurate personal data (Art. 16 GDPR)
  • Right to erasure of your personal data that we have stored (Art. 17 GDPR)
  • Right to restriction of data processing, insofar as we cannot yet erase your data due to legal obligations (Art. 18 GDPR)
  • Right to object to the processing of your personal data by us (Art. 21 GDPR)
  • Right to data portability, insofar as you have provided your consent to data processing or have entered into a contractual agreement with us (Art. 20 GDPR).
    Where consent has been provided, you can withdraw that consent at any time with future effect.

You can file a complaint at any time with a supervisory authority, such as the competent supervisory authority for the Federal State in which you live or the supervisory agency that is responsible for us.

A list of supervisory authorities (for the private sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Collection of general information when you visit our website

Type and purpose of processing:
When you access our website, meaning when you do not log in or otherwise provide information, certain data of a general nature is automatically collected. This information (server log files) takes the form of the type of web browser, the operating system you are using, the domain name of your internet service provider, your IP address, and similar.

This information is used in particular for the following purposes:

  • To maintain the connectivity of our website
  • To ensure the flawless functioning of our website
  • For the analysis of system security and stability
  • For other administrative purposes.

We do not use your data to draw conclusions concerning your personal identity. Data of this type may potentially be subjected to statistical analysis to help us improve our internet site and the technology that underpins it.

Legal basis:
Processing is performed in accordance with Art. 6(1.f) GDPR on the basis of our justified interest in improving the stability and functionality of our website.

Recipient(s):
The recipients of the data may include technical service providers - so-called ‘processors’ - who are responsible for the operation and maintenance of our website.

Duration of storage:
Your data will be deleted as soon as it is no longer required for the purposes for which it was collected. For data required for the provision of the website, this is always the case when the respective session ends.

Provision of data legally mandated or required:
The provision of the aforementioned personal data is neither legally nor contractually required. Without your IP address, however, the provision of our services and in particular the functionality of our website cannot be guaranteed. In addition, individual services and features may not be available or may be otherwise restricted.


Cookies

Type and purpose of processing:

In common with many other websites, we use so-called ‘cookies’. Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc) when you visit our website.

These provide certain information to us, such as your IP address and which browser and operating system you are using.

Cookies cannot be used to launch programs or transmit a virus to a computer. We can use the information provided by cookies to help make it easier for you to navigate and enjoy the proper display of our web pages.

Under no circumstances will we share the data collected in this way with third parties or use it to establish a link to your personal data without your explicit consent.

It is fundamentally possible to use our website without cookies. Internet browsers are configured by default to accept cookies. In general, however, you can change your browser’s settings at any time to disable the use of cookies. Please consult the Help function on your internet browser to find how to make those changes. Please note that individual features of our website may not function properly if you have disabled the use of cookies.

Storage duration and cookies employed:

Insofar as you and your browser settings or your consent allow us to use cookies, the following cookies may be employed on our web pages:

‘angemeldet bleiben’ (remain logged in) to allow for extended login

Insofar as these cookies (also) involve use of personal data, we will inform you of such in the later sections of this document.

You can use your browser’s settings to delete some or all cookies in its cache. You can also find information and instructions on how to delete cookies or disable them in advance. Depending on which browser you are using, use the following links to find the necessary information:


Website registration

Type and purpose of processing:

A certain amount of personal data is collected when you register to use our personalized services. This includes your name, address, contact and communications data (such as phone number and email address). If you are registered with us, you can access content and services that we provide exclusively to registered users. Registered users also have the opportunity to change or modify the data they provided during registration at any time. Naturally we will also provide information to you at any time about any of your personal data that we have stored.

Legal basis:
The processing of data provided during registration is undertaken on the basis of the data subject’s consent (Art. 6(1.a) GDPR).

If the registration is required for the purposes of the performance of a contractual agreement to which the data subject is a party or for the preparation of a corresponding contractual agreement, the following legal basis for the processing of data also applies: Art. 6 (1.b) GDPR.

Recipient(s):

The recipients of the data may include technical service providers - so-called ‘processors’ - who are responsible for the operation and maintenance of our website.

Duration of storage::

In this context, data is only processed for as long as the corresponding consent is valid. Thereafter it is deleted, except where a legal retention obligation applies. To contact us with requests related to this, please use the contact data provided at the end of this data protection declaration.

Provision of data legally mandated or required:

Personal data is provided on a purely voluntary basis and on the basis of your consent. Unless you consent to provide your personal data, we will be unable to provide you with access to our program of content and services.


Comment feature

Type and purpose of processing:

When users post comments on our website, appended to comments are the date/time of posting and the user name previously selected by the website visitor. This serves to protect us, as we could be held responsible for any illegal content uploaded to our web pages even if such content is generated by users.

Legal basis:

The processing of content entered as comments is based on our justifiable interest (Art. 6 (1.f) GDPR).

We provide the comment feature to enhance interaction through our website. Any information you provide will be used for the purposes of processing your request and stored for the purpose of dealing with potential follow-on questions.

Recipient(s):

Recipients of the data may include so-called ‘processors’.

Duration of storage:

Your data will be deleted as soon as it is no longer required for the purposes for which it was collected. This is fundamentally the case once communication with the user has been completed and the circumstances suggest to us that the issue has been satisfactorily addressed.

Provision of data legally mandated or required:

Personal data is provided on a purely voluntary basis. Unless you consent to provide your personal data, we will be unable to provide you with access to our comment feature.


Newsletter

Type and purpose of processing:

Your data is used exclusively to deliver by email the newsletter to which you have subscribed. Your name is required to enable us to address you personally in the newsletter and potentially to identify you if you wish to exert any of your rights as a data subject.

The provision of an email address is sufficient to receive the newsletter. Any data you provide in the context of subscribing to our newsletter is used exclusively for this purpose. Subscribers can also under certain circumstances be informed by email of matters relevant to the service or their registration (such as changes to the newspaper service or its technical framework).

For registration to work effectively, we require a valid email address. To check whether registration has actually been undertaken by the owner of a given email address, we use the ‘double-opt-in’ procedure. We log the initial subscription to the newsletter, the dispatch of a confirmation email and the receipt of said confirmation. No other data is collected. The data is used exclusively for the dispatch of the newsletter and is not shared with any third parties.

Legal basis:

On the basis of your explicitly provided consent (Art. 6 (1.a) GDPR), we will send you our newspaper or comparable information on a regular basis by email to the email address you have provided.

You can withdraw your consent to allow us to store your personal data and to use such data for the dispatch of the newsletter at any time, to apply immediately and with future effect. Each newsletter also contains a corresponding link. You can also unsubscribe directly using the option on this website or submit your withdrawal of consent using the contact information provided at the end of this data protection declaration.

Recipient(s):

Recipients of the data may include so-called ‘processors’.

Duration of storage:

In this context, data is only processed for as long as the corresponding consent is valid. Thereafter it is deleted.

Provision of data legally mandated or required:

Provision of data legally mandated or required:
Personal data is provided on a purely voluntary basis and on the basis of your consent. We cannot send our newsletter without first receiving your consent.


Contact form

Type and purpose of processing:

The data you have provided is stored solely for the purpose of personalized communication. This necessitates the provision of a valid email address and your name. These in turn help us process your query/request and provide a suitable response. Any provision of additional data is voluntary.

Legal basis:
The processing of data provided in the contact form is undertaken on the basis of our justifiable interest (Art. 6 (1.f) GDPR).

We provide the contact form as a convenient and uncomplicated means of contacting us. Any information you provide will be used for the purposes of processing your request and stored for the purpose of dealing with potential follow-on questions.
If you contact us with an enquiry about a service, then processing of the data provided in the contact form is undertaken for the preparation of the corresponding contractual agreement (Art. 6 (1.b) GDPR).

Recipient(s):

Recipients of the data may include so-called ‘processors’.

Duration of storage:

Data is deleted no later than 6 months after processing of the query.

Insofar as a contractual agreement comes into being, we are then subject to the legal retention periods specified in the German commercial code (HGB) and we will delete your data after the expiry of the corresponding deadlines.

Provision of data legally mandated or required:

Personal data is provided on a purely voluntary basis. However, we can only process your query insofar as you provide us with your name, email address and the reason for your query.


Use of Matomo

Type and purpose of processing:

This website uses Matomo (formerly called Piwik), an open source software that provides statistical analysis of visits to our website. The software is provided by Matomo, InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand.

Matomo uses so-called cookies; these are text files that are stored on your computer to allow for the analysis of website usage.

The information recorded by the cookies about your use of the website is stored on a server in Germany.

Your IP address is anonymized immediately after processing and prior to storage. You may disable the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this you may not be able to use all features normally available on this website.
You can decide whether a unique web analytics cookie can be stored in your browser to allow the operator of the website to collect and analyze various statistical data.

For more information on the privacy settings of Matomo Software, please visit: https://matomo.org/docs/privacy/.

Legal basis:

The processing of data is undertaken on the basis of the user’s consent (Art. 6 (1.a) GDPR).

Recipient(s):

Recipients of the data may include so-called ‘processors’.

Duration of storage:

The data is deleted as soon as it is no longer needed for purposes of recording of information.
In our case, data is deleted on expiry of the following period: 90 days.

Provision of data legally mandated or required:

Personal data is provided on a purely voluntary basis and on the basis of your consent. If you do not consent to this, you may not be able to use all the features of our website.

Withdrawal of consent

You may disable cookies by selecting the appropriate settings on your browser. However, please note that if you do this you may not be able to use all features normally available on this website.

Profiling:

The Matomo tracking tool is used to analyze the behavior and interests of website visitors. For this purpose, it is necessary for us to create a pseudonymous user profile.


Use of Google Maps

Type and purpose of processing:

Our website uses services provided by Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter ‘Google’). These services allow us to provide interactive maps directly on our website and provide for ready use of the map functions.

For more information on how Google processes data, please see the Google data protection declaration. Through Google’s data protection center, you can also modify your personal data protection settings.

Detailed instructions on managing your personal data in connection with Google products can be found here. https://support.google.com/accounts/answer/162744?hl=en.

Legal basis:

The basis for the integration of Google Maps and the associated transfer of data to Google is your consent (Art. 6 (1.a) GDPR).

Recipient(s):

When you visit our website, Google is notified that you have accessed the corresponding sub-page on our website. This occurs irrespective of whether you are currently logged into a Google account and even if you do not have a Google user account. If you are logged into Google, your data will be directly linked with your account.

If you do not wish this data to be linked with your Google profile, you must log out of Goggle before clicking on the button. Google stores your data in a user profile and uses that data for advertising, market research and/or user-appropriate presentation of its website. This type of analysis is undertaken specifically (even for users who are not logged in) to provide targeted advertising and to inform other users of the social network about your activities on our website. You have a right to object to the setting up of a user profile, although you must exercise this right by contacting Google directly.

Duration of storage:

We collect no personal data through the integration of Google Maps.

Transfer to third countries:

Google processes data in the USA and subscribes to the EU/US Privacy Shield Framework https://www.privacyshield.gov/EU-US-Framework.

Withdrawal of consent:

If you do not wish Google to collect, process or use your data from our website, you can disable JavaScript in your browser settings. However, please note that as a consequence you may find that you are unable to use our website or that your use of our website is restricted.

Provision of data legally mandated or required:

Personal data is provided on a purely voluntary basis and on the basis of your consent. If you do not consent to this, you may not be able to use all the features of our website.


Embedded YouTube videos

Type and purpose of processing:

On some of our web pages are embedded YouTube videos. The corresponding plugin is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter ‘YouTube’). When you visit a page with the YouTube plugin, a connection is established to the YouTube servers. In this way YouTube is informed about the pages you are visiting. If you are logged into your YouTube account, then YouTube will be able to link your surfing behavior with you personally. You can prevent this by logging out of your YouTube account in advance.

When a YouTube video is started, the provider employs cookies that collect information about the user’s behavior.
More information about the purpose and scope of data collection and the processing of data by YouTube can be found in the YouTube data protection declaration. There you will also find information about your rights in this regard and settings that you can use to protect your privacy (https://policies.google.com/privacy). YouTube is a subsidiary of Google. Google processes data in the USA and subscribes to the EU/US Privacy Shield Framework https://www.privacyshield.gov/EU-US-Framework

Legal basis:

Rechtsgrundlage für die Einbindung von YouTube und dem damit verbundenen Datentransfer zu Google ist Ihre Einwilligung (Art. 6 Abs. 1 lit. a DSGVO).

Empfänger:

Calling up YouTube automatically establishes a connection to Google.

Duration of storage and withdrawal of consent:

Any user who has disabled cookies for the Google Ad program will not receive cookies while watching YouTube videos. However, YouTube does use other cookies to collect non-person-related usage information. If you wish to prevent this, you must disable cookies using your browser settings.
For more information on privacy protection by YouTube, please see the provider’s data protection declaration at https://www.google.de/intl/de/policies/privacy/

Transfer to third countries:

Google processes data in the USA and subscribes to the EU/US Privacy Shield Framework https://www.privacyshield.gov/EU-US-Framework.

Provision of data legally mandated or required:

Personal data is provided on a purely voluntary basis and on the basis of your consent. If you do not consent to this, you may not be able to use all the features of our website.


SSL encryption

To protect the security of your data during transfer, we use a form of HTTPS encryption that corresponds to the current state of technology, such as SSL.

Use of ‘processors’

The following organizations, companies and/or persons have been commissioned by the operator of this website to process data:

NewDefinition GmbH
Datenschutzerklärung (Data Protection Declaration - German)


Changes to this data protection declaration

We reserve the right to modify this data protection declaration to reflect current legal requirements or changes to our services, for example, should we introduce new services. The provisions of the revised data protection declaration will then apply on your next visit to our website.

If you have questions regarding the protection of your privacy, please contact us via email or contact the data protection officer of Johannes Gutenberg University Mainz:

Claus-Toni Bertram
Johannes Gutenberg University Mainz
Central Services Department
Forum 3, ground floor, room: 00-346 

Tel: +49 6131-39-25382 
Fax: 06131-39-20709
claus-toni.bertram@uni-mainz.de