Privacy Policy

Privacy Policy

1. Our privacy policy at a glance

General information

The following information provides a brief overview of what happens to your personal data when you visit our website. Personal data includes any data by which you could be personally identified. For detailed information on data protection, please review the following Privacy Policy.

Data collection on our website

Who is responsible for collecting data on this website?

Data collected on this website is processed by the website operator. The operator's contact details can be found in the website's Impressum (Legal Notice).

How do we collect your data?

First, your data is collected when you communicate it to us. This may, for example, include data that you send to us by e-mail.

Other data is automatically collected by our IT systems when you visit our website. This data is primarily technical data (e.g.,  browserinformation, operating system or time of when you accessed the page). This data is collected automatically as soon as you access our website.

What do we use your data for?

Some data is collected to ensure the proper functioning of the website. Other data can be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right to request information about your stored data, where it came from, who received it, and the purpose for which it was collected, at any time and at no expense. You also have the right to request the rectification, blocking or erasure of this data. You can contact us at any time at the address given in the Impressum if you have any further questions on the subject of data protection. You also have the right to lodge a complaint with the competent supervisory authority.

Furthermore, you have the right to request that the processing of your personal data be restricted. For further information, see our Privacy Policy under “Right to restriction of processing”.

Analytics and third-party tools

Your surfing behaviour can be statistically analyzed when you visit our website. This is done primarily using cookies and so-called analytics programs. The analysis of your surfing behaviour is anonymous, i.e. we will not be able to identify you from this data.

You may object to this analysis or prevent it by not using certain tools. For detailed information about these tools and your opt-out choices, please see the information provided below in this Privacy Policy.

2. General information and mandatory notifications

Data protection

The operators of this website take the protection of your personal data very seriously. We handle your personal data in a confidential manner and in accordance with applicable data protection laws and regulations as well as this Privacy Policy.

A variety of personal data is collected when you use this website. Personal information is any data by which you could be personally identified. This Privacy Policy explains what information we collect and what we use it for. It also explains how and for what purpose this is done.

We hereby draw your attention to the fact that data transmission over the Internet (e.g. when communicating by e-mail) may have security gaps. Completely protecting data against third-party access is impossible.

Notice concerning the party responsible for this website

The controller responsible for data processing on this website is:

DZIF - German Center for Infection Research
Inhoffenstraße 7
38124 Braunschweig

Phone:  +49 531 6181-1159
E-mail: info@dzif.de

The controller is a physical or legal person who decides on the goals and methods of processing personal data, alone or together with others (e.g. names, e-mail addresses, etc.).

Statutory data protection officer

We have appointed a data protection officer for our company.

E-mail: externer.datenschutzbeauftragter@bredex.de

Withdrawing your consent to data processing

Many data processing operations are only possible with your express consent. You may withdraw your consent at any time. An informal e-mail making this request is sufficient. This does not affect the lawfulness of any data processing done before we receive the withdrawal of your consent.

Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)

If data processing is carried out on the basis of Art. 6 (1) (e) or (f) GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this Privacy Policy. If you submit an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims (Objection pursuant to Art. 21 (1) GDPR).

Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purposes of such advertising; this includes profiling in so far as it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (Objection pursuant to Art. 21 (2) GDPR).

Your right to lodge a complaint with a supervisory authority

In the event of an infringement of the GDPR, a data subject has the right to lodge complaint with a supervisory authority, in particular in the Member State where they reside, work or where the infringement is suspected. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

Right to data portability

Your have the right to receive the personal data concerning you provided to you or a third party in a structured, commonly used and machine-readable format in cases where such processing is based on consent or processed by automated means in performance of a contract. If you request the direct transfer of data to another controller, we will only comply the extent this is technically feasible.

SSL / TLS encryption

This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential information, such as the enquiries you send to us as site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the padlock symbol in the address bar on your browser.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Access, Blocking, Erasure and Rectification of Data

As permitted by law, you have the right to be provided with information free of charge at any time about any of your personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data rectified, blocked or erased. You can contact us at any time using the address given in our legal notice if you have further questions on the topic of personal data or to exercise your rights as described above.

Right to restriction of processing

You have the right to restrict the processing of your personal data. To make such a request, you can contact us at any time at the address given in the Impressum. The right to restrict processing applies in the following cases:

  • If you dispute the accuracy of your personal data stored with us, for a period enabling us to verify the accuracy of your personal data. You have the right to demand the restriction of processing for your personal data whilst we verify its accuracy.
  • If the processing of your personal data has taken / is taking place unlawfully, you can demand the restriction of data processing instead of erasure.
  • If we no longer need your personal data, but you need it for the establishment, exercise or defence of legal claims, you have the right to demand the restriction of the processing of your personal data instead of erasure.
  • If you have asserted an objection in accordance with Art. 21 (1) GDPR, your interests must be weighed against ours. As long as it is not yet clear whose interests predominate, you have the right to demand that the processing of your personal data be restricted.

Where processing has been restricted, such personal data may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

Objection to Promotional E-Mails

Third-party use of contact data published within the scope of legal notice regulations for sending unsolicited advertising and informational materials is hereby expressly forbidden. The operators of this website expressly reserve the right to take legal action in the event of unsolicited advertising information, such as spam e-mails.

3. Data collection on our website

Cookies

In some cases, our webpages use so-called cookies. Cookies do not cause any damage to your computer and do not contain any viruses. The purpose of cookies is to make our website more user-friendly, functional and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies make it possible to recognize your browser the next time you visit our website.

You can configure your browser to inform you about the use of cookies so that you can decide to accept or reject each cookie. Alternatively, your browser can automatically accept cookies under certain conditions or always reject them, and you can also set it to automatically delete cookies when closing your browser. Disabling cookies may limit your ability to use some of the functions of this website.

Cookies which are necessary to carry out the electronic communication process, or to provide certain functions desired by you are stored on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in saving cookies for purposes of providing their services free of technical errors and in order to optimise their services. If other cookies (such as those used to analyse your surfing behaviour) are also stored, they will be treated separately in this Privacy Policy.

Server log files

The website provider automatically collects and stores information in "server log files", which your browser automatically transmits to us. This includes:

  • Browser type and browser version
  • Operating system in use
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data will not be combined with data from other sources.

This data is collected on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in providing their services free of technical errors and in optimising their services - server log-files are stored for this purpose.

Enquiries by E-Mail, Telephone or Fax

If you contact us by e-mail, telephone or fax, your request, including all associated personal data (name, nature of enquiry), is stored and processed by us for the purpose processing your request. We will not share this data without your consent.

This data is processed on the basis of Art. 6 (1) (b) GDPR, provided your request is related to the performance of a contract or processing is necessary in order to take steps your request prior to entering into a contract. In all other cases, processing is based on your consent (Art. 6 (1) (a) GDPR) and / or on our legitimate interests (Art. 6 (1) (f) GDPR), as we have a legitimate interest in effectively processing enquiries addressed to us.

We will retain the data you provide on the contact form until its deletion is requested, your consent to retention is withdrawn, or the purpose for its storage is no longer applicable (e.g. after handling of your enquiry has been completed). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected.

Processing data (contract data)

We collect, process and use your personal data only to the extent required to establish, structure or change your legal relationship with us (master data). This is done on the basis of Art. 6 (1) (b) GDPR, which permits the processing of data for the performance of a contract or in order to take steps you have requested prior to entering into a contract. We collect, process and use your personal data about the use of our website (usage data) only to the extent required to enable you to access our services.

Data collected in this context will be erased after we have processed your enquiry or our collaboration has ended. Statutory retention periods remain unaffected.

4. Social Media

Twitter plugin

Twitter-related functions have been integrated into our website. These functions are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Through the use of Twitter and the “re-tweet” function, the web pages that you visit will be linked to your Twitter account and made known to other users. In the process, data is also transferred to Twitter. Please note that, as the provider of this website, we have no knowledge of the content of the data that is transmitted or how it will be used by Twitter. For more information, please see Twitter's privacy policy: https://twitter.com/de/privacy.

The use of the Twitter plugin is based on Art. 6 (1) (f) GDPR. The website owner has a legitimate interest in the widest possible visibility on social media.

Your Twitter privacy preferences can be changed in your account settings at https://twitter.com/account/settings.

LinkedIn plugin

Our website uses functions from the LinkedIn network. The operator is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

A connection to LinkedIn's servers is established every time you access one of our web pages that contains LinkedIn functions. LinkedIn is informed that you have visited our website from your IP address. If you use the LinkedIn “Recommend” button and are logged into your LinkedIn account, it is possible for LinkedIn to associate your visit to our website to your user account. Please note that, as the provider of this site, we have no knowledge of the content of the data transmitted to LinkedIn or of how LinkedIn uses such data.

The use of the LinkedIn plugin is based on Art. 6 (1) (f) GDPR. The website owner has a legitimate interest in the widest possible visibility on social media.

For more information, please see LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy.

YouTube with Extended Data Protection

Our website uses YouTube plug-ins. YouTube is operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in the extended data protection mode. According to YouTube, this mode causes YouTube not to store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. For example, YouTube connects to the Google DoubleClick network whether or not you’re watching a video.

You will be linked to the YouTube servers as soon as you start a YouTube video on our website. The YouTube server is then informed about which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to associate your surfing habits directly with your personal profile. You can prevent this by logging out of your YouTube account.

In addition, YouTube can store different cookies on your device once you have started a video. YouTube can use these cookies to gather information on visitors to our website. Such information is used to capture video statistics, to improve user-friendliness, and to prevent attempted fraud amongst other things. The cookies will remain on your device until you delete them.

If applicable, starting a YouTube video may trigger further data processing operations. We have no control over this.

YouTube is used in the interests of making our website more attractive. This represents a legitimate interest within the meaning of Art. 6 (1) (f) GDPR.

For more information about privacy at YouTube, please see their privacy policy at: https://policies.google.com/privacy?hl=de.

5. Newsletter

Newsletter data

If you would like to receive our newsletter, we require a valid e-mail address as well as information which allows us to verify that you are the owner of the e-mail address provided and that you agree to receive this newsletter. No additional data is collected or will only be collected on a voluntary basis. We only use this data to send the requested information and do not pass it on to third parties.

Data entered in the newsletter registration form will be processed exclusively on the basis of your consent (Art. 6 (1) (a) GDPR). You can withdraw consent to the storage of your data and e-mail address as well as their use for sending the newsletter at any time via the “unsubscribe” link in the newsletter. This does not affect the lawfulness of any data processing done prior to your withdrawal.

The data provided when registering for the newsletter will be used to distribute the newsletter until such time as you cancel your subscription, when said data will be deleted. Data stored by us for other purposes will remain unaffected by this.

Newsletter2Go

This website uses Newsletter2Go to send newsletters. The provider of this service is Newsletter2Go GmbH, Nürnberger Straße 8, 10787 Berlin, Germany.

Newsletter2Go is a service with which the dispatch of newsletters can be organised and analysed. The data you provide in order to subscribe to our newsletter will be stored on Newsletter2Go servers in Germany.

If you do not wish your use of the newsletter to be analysed by Newsletter2Go, you will have to unsubscribe from the newsletter. For this purpose, we provide an appropriate link in every newsletter we send.

Data analysis by Newsletter2Go

Newsletter2Go enables us to analyse our newsletter campaigns. For example, we determine if a newsletter message has been opened and which links  have been clickedon. This enables us to ascertain how often various links are clicked amongst other things.

We can also see whether certain previously-defined actions were performed after opening/clicking (conversion rate). For example, we can determine whether you have performed any other actions on our website after clicking the newsletter.

For detailed information on the functions of Newsletter2Go, see the following link: https://www.newsletter2go.de/features/newsletter-software/.

Legal basis

Data is processed on the basis of your consent (Art. 6 (1) (a) GDPR). You can withdraw your consent at any time. This does not affect the lawfulness of any data processing done prior to your withdrawal.

Retention period

Data provided when registering for the newsletter will be used to distribute the newsletter until such time as you cancel your subscription, when said data will be deleted from our servers and those of Newsletter2Go. Data stored by us for other purposes will remain unaffected by this.

For more information, see the privacy policy of Newsletter2Go at: https://www.newsletter2go.de/features/datenschutz-2/.

Conclusion of a contract for contract data processing

We have entered into a data processing agreement with Newsletter2Go, in which we require Newsletter2Go to protect the data of our customers and not to disclose said data to third parties. This contract can be viewed at the following link https://www.newsletter2go.de/docs/datenschutz/ADV_Sample_Newsletter2Go_GmbH_latest_Form.pdf.

6. Press mailing list

You can register for press mailing list inclusion on our website. For this purpose, enter your e-mail address and your name in the provided fields. You will subsequently receive a confirmation e-mail from us (double opt-in). You will only be included in our press mailing list after receipt of confirmation. Data is processed on the basis of your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time. This does not affect the lawfulness of any data processing done prior to withdrawing your consent. We delete your data when you withdraw your consent. Data stored by us for other purposes will remain unaffected by this.