Privacy notice
We collect, process and use your personal information only to the extent permitted by the relevant data protection law. Personal information is any information that can be used to identify you personally.
In the following, we inform you about the type, scope, and purpose of data collection, processing, and use on our website at www.w-s-w.org .
Name and contact details of the responsible entity
The entity responsible for the website located at www.w-s-w.org is:
Wübben Wissenschaftsstiftung gGmbH
Hausvogteiplatz 3-4
10117 Berlin
T +49 30 26103130
info@w-s-w.org
What type of data do we collect and why?
Some of the data we collect is provided by you. This could be, for instance, information that you enter on a contact form. Other information is collected by our IT systems when you visit our website, either automatically or when you give your consent. This information is primarily technical (e.g. internet browser, operating system, or the time you accessed the page). This information is collected automatically as soon as you visit the website.
What do we use your information for?
Some of the information we collect ensures that the website functions correctly. Other information may be used to analyze your use of the website.
What are your data protection rights?
You have the right to ask us for information about the origin, recipients, and purpose of the personal data we hold about you, free of charge and at any time. You also have the right to ask us to rectify or erase this information. If you have consented to data processing, you can withdraw this consent at any time with future effect. In addition, you have the right in certain circumstances to ask us to restrict the processing of your personal information. Furthermore, you have the right to make a complaint to the relevant regulatory authority. You can contact us at any time for information about this and with any other questions about data protection.
Analytics and third-party tools
When you visit our website, your browsing behavior can be statistically analyzed. This is done primarily by analytics programs. You can find detailed information about these analytics programs in the following privacy notice.
General and mandatory information
Retention period
Unless a specific storage period is stated within this privacy notice, we will store your personal data until the purpose for processing the data ceases to apply. If you submit a legitimate request to erase your data or withdraw your consent to data processing, your data will be deleted, unless we have other legally permissible grounds for storing your personal information (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted when these grounds cease to apply.
General information on the legal basis for data processing on this website
If you have given your consent to data processing, we will process your personal information on the basis of Article 6(1)(a) or Article 9(2)(a) GDPR or, where special data categories are processed, in accordance with Article 9(1) GDPR. If you have opted in to the transfer of personal data to third countries, data processing will also take place on the basis of Article 49(1)(a) GDPR. If you have opted in to the storage of cookies or access to information on your end device (e.g. via device fingerprinting), data processing will also be carried out on the basis of Section 25(1) TTDSG. You can withdraw your consent at any time. If your information is required to perform the contract or to take steps prior to entering into a contract, we will process your information on the basis of Article 6(1)(b) GDPR. Furthermore, if your information is required to fulfill a legal obligation, we will process it on the basis of Article 6(1)(c) GDPR. Data processing may also take place on the basis of our legitimate interest in accordance with Article 6(1)(f) GDPR. Information about the relevant legal basis in each case is provided below.
Withdrawing your consent to data processing
Many types of data processing are only possible with your express consent. You can withdraw your consent at any time. The lawfulness of the data processing carried out prior to you withdrawing your consent is not affected.
Your right to object to data collection in special cases and to direct marketing (Article 21 GDPR)
If data processing is carried out on the basis of article 6(1)(e) or (f) gdpr, you have the right to object to the processing of your personal information at any time for reasons arising from your personal situation; this also applies to profiling based on these provisions. The legal basis for processing can be found in this privacy notice. If you object, we will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing is for the purpose of asserting, exercising, or defending legal claims (objection pursuant to article 21(1) gdpr).
If your personal information is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of this kind of marketing; this also applies to profiling, insofar as it is related to direct marketing. If you object, your personal information will no longer be used for the purpose of direct marketing (objection pursuant to article 21(2) gdpr).
Your right to complain to the relevant regulatory authority
In the event of a breach of the GDPR, those affected have the right to complain to a regulatory authority, particularly in the Member State in which they usually live or work, or where the alleged breach occurred. This right to complain exists without prejudice to legal remedies provided elsewhere under administrative law or through the courts.
Your right to data portability
You have the right to receive, or have transmitted to a third party, in a commonly used, machine-readable format, data that we process on the basis of your consent, or in an automated manner when performing a contract. If you request that the data be transmitted directly to another data controller, this will happen only where technically possible.
Access, rectification, and erasure
You have the right, under the legislation in force, to request access to your stored personal information at any time, and to receive information about its origin and recipients, and the purpose of the data processing, and, where relevant, a right to have this information rectified or erased. You can contact us at any time about this or with any other questions concerning your personal data.
Your right to restrict processing
You have the right to request the restriction of processing of your personal information. You can contact us at any time about this. The right to restrict processing exists in the following cases:
If you challenge the accuracy of the data we hold concerning you, we will generally require some time to check this. Pending verification, you have the right to request that we restrict processing of your personal data.
If your personal data has been/is being processed unlawfully, you can request restriction of processing instead of erasure.
If we no longer need your personal data but you need it in order to exercise, defend, or establish a legal claim, you have the right to request restriction of processing instead of erasure.
If you have lodged an objection under Article 21(1) GDPR, we have to weigh up your interests and our own. Pending verification, you have the right to request restriction of processing of your personal data.
If you have restricted the processing of your personal data, this data shall, with the exception of storage, be processed only with your consent or for the establishment, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
SSL/TLS encryption
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content such as orders or inquiries that you send to us as the website operator. You can recognize an encrypted connection by the fact that the address bar in your browser window changes from “http://” to “https://” and by the padlock symbol. When SSL/TLS encryption is active, the data you transmit to us cannot be read by third parties.
Hosting
This website is hosted externally. Personal data collected on this website is stored on the servers of the host(s). This information may include, in particular, IP addresses, contact requests, metadata and communications data, contract data, contact information, names, website traffic, and other data generated through a website.
The external host is used for the purpose of fulfilling the contract with our potential and existing customers (Article 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online services by a professional provider (Article 6(1)(f) GDPR). If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications and Telemedia Data Protection Act (TTDSG), insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g. device fingerprinting) within the meaning of the TTDSG. Such consent can be withdrawn at any time.
Our host(s) will only process your data to the extent necessary to fulfill their performance obligations and will follow our instructions in relation to this information.
We use the following host:
E-Fork GmbH & Co.KG
Seifhennersdorfer Str. 4-8 | 01099 Dresden
hallo@e-fork.de | +49(0)351-899 609 30
https://www.e-fork.de/de
Data processing agreement
We have entered into a data processing agreement (DPA) for the use of the service mentioned above. This is a contract required by data protection law to ensure that the service provider processes the personal information of our website visitors only in accordance with our instructions and in compliance with the GDPR.
Data collection
No cookies
We consciously avoid using tracking, marketing, and other commercial cookies.
Server log files
The website provider automatically collects and stores information in server log files that your browser automatically transmits to us.
This information comprises:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the device accessing the website
- Time of the server request
- IP address
This information is not linked to other data sources.
This data is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the error-free technical presentation and optimization of its website, and the server log files must be collected for this purpose.
Inquiries by email, telephone, or fax
If you contact us by email, telephone, or fax, we will store and process your inquiry, including all personal information contained in it (name, inquiry) for the purpose of dealing with your request. We will not share this data without your consent.
This data is processed on the basis of Article 6(1)(b) GDPR, provided your inquiry is in connection with the performance of a contract or is necessary for taking steps prior to entering into a contract. In all other cases, the legal basis for processing your data is our legitimate interest in dealing effectively with the inquiries addressed to us (Article 6(1)(f) GDPR) or your consent (Article 6(1)(a) GDPR), provided this was obtained; you can withdraw your consent at any time.
The data you send to us via contact requests remains with us unless you ask us to erase it, withdraw your consent to storage, or if the purpose of the data storage ceases to apply (e.g. once your request has been dealt with). Mandatory legal provisions – in particular legal periods of retention – remain unaffected.
Newsletter
Newsletter data
If you would like to subscribe to the newsletter offered through the website, we will need your email address and information that enables us to check that you are the owner of the email address provided, and that you agree to receive the newsletter. Other data is not collected, or only on a voluntary basis. In order to provide the newsletter, we use newsletter service providers, who are described below.
Brevo
This website uses Brevo to send out newsletters. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.
Brevo is a service that can be used, among other things, to organize and analyze the sending of newsletters. The information you enter to subscribe to the newsletter is stored on Sendinblue’s servers in Germany.
Data analysis by Brevo
With the help of Brevo we are able to analyze our newsletter campaigns. For example, we can see whether a newsletter has been opened and which links were clicked on, if any. Among other things, this enables us to find out which links were clicked on particularly often. Furthermore, we can tell whether certain predefined actions took place after the newsletter was opened/link was clicked (conversion rate). Brevo also enables us to subdivide (“cluster”) newsletter recipients according to various categories. For instance, newsletter recipients can be subdivided according to age, gender, or place of residence. This allows us to improve the way we tailor the newsletters to the different target groups.
If you do not want Brevo to carry out this analysis, you will have to unsubscribe from the newsletter. We provide a link for this purpose in every newsletter email.
For detailed information about the Brevo functions, please see www.brevo.com.
Legal basis
Data processing takes place on the basis of your consent (Article 6(1)(a) GDPR). You can withdraw this consent at any time. This does not affect the lawfulness of the data processing carried out prior to you withdrawing your consent.
Retention period
The data you send us for the purpose of subscribing to the newsletter will be stored by us or by the newsletter service provider until you unsubscribe from the newsletter, and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored for other purposes is not affected by this.
After you have been removed from the newsletter distribution list, we or the newsletter service provider may store your email address in a blacklist if this is necessary to prevent future mailings. The data from the blacklist is used exclusively for this purpose and is not linked to other data. This serves your interest as well as our own interest in complying with the legal requirements when sending newsletters (legitimate interest pursuant to Article 6(1)(f) GDPR). Data retention in the blacklist is indefinite. You can object to storage if your interests outweigh our legitimate interest.
For further details, please see Brevo's data protection provisions (in German): https://www.brevo.com/de/datenschutz-uebersicht.
Data processing agreement
We have entered into a data processing agreement (DPA) for the use of the service mentioned above. This is a contract required by data protection law to ensure that the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
Application portal
Wübben Stiftung Wissenschaft appreciates your interest in its program portfolio. In order to process your application, we need to collect and store your personal and research-related information. The collection of this data is based on the following data protection regulations:
The entity responsible for the following provisions is
Wübben Wissenschaftsstiftung gGmbH (hereinafter referred to as “the WSW”)
Hausvogteiplatz 3-4
10117 Berlin
T +49 30 26103130
info@w-s-w.org
Content/intention/objective/purpose of and legal basis for data processing
In the course of your application to the WSW, personal and research-related data will be collected which, depending on the program you are applying for, is
- necessary for the records of the WSW's internal database software, for processing applications, for accompanying research purposes, for forwarding to external persons involved in the decision-making process, e.g. external review procedures and committee members, for any kind of communication between the WSW and the applicants, the WSW and other stakeholders, and for communication between applicants;
- used to process payment transactions, to check reports on expenditure of funds, and to carry out evaluations;
- potentially part of public relations work/publications (e.g. annual report, WSW website, press articles, newsletters, events);
- required for the processing of statistical analyses as well as archival and historiographic purposes/documentation.
The storage and processing of data extends to all project participants whose information is provided in the application. The applicant is responsible for obtaining the relevant consents and assures Wübben Wissenschaftsstiftung gGmbH that these have been obtained. The data is collected on the legal basis of Article 6 (1)( b), (c), and (f) GDPR.
Deletion of the data/retention period
If the above-mentioned (including historiographical) purposes (for storage) are no longer relevant/valid/given, the stored data will be professionally disposed of or destroyed. You can request the correction, deletion, or transfer of your data stored by the WSW by contacting us at the above address.
Ensuring confidentiality and disclosure of data to third parties
The storage, processing, deletion, and transfer of your data to third parties is carried out with the greatest possible care, and data is only disclosed to third parties where absolutely necessary. This includes, for example, the transmission of data to external reviewers, members of decision-making bodies, and persons/employees involved in accompanying research projects. When transferring data to IT contact persons and disposal companies, for example, we ensure that we have contractual safeguards in place.
Data protection rights
In accordance with Article 15 GDPR, you as the data subject have the right to request information from the entity named above about the personal information we hold about you, process and, where relevant, process further. Furthermore, in accordance with Articles 16 and 17 GDPR, you have the right to have incorrect data amended and deleted without giving reasons. The lawfulness of the processing carried out up to that point remains unaffected. Based on Articles 18 and 21 GDPR, the applicant may exercise the right to restrict processing and the right to data portability. You have the right to object to the processing of your data in line with the points mentioned in Article 21 GDPR, but this objection must be made in writing.