Our website and your data
When we communicate with you electronically or when you visit these web pages, we process your personal data. This privacy policy is intended to inform and explain to you the nature, scope and purpose of the processing of personal data within this online service and the associated web pages, as well as in our project-related electronic communications.
Data controller
The SOURCE collaborative project is run by the partners XXXXXXX. They are jointly responsible for the data and processing purposes mentioned here.
XXXXX is responsible for the content of the website (as coordinator of the collaborative project).
If you have any questions about this statement or our data processing, please feel free to send us a message at: info@source-projekt.de
Contact data
XXXX
XXXXXXX is a body governed by public law. It is legally represented by XXXXX.
Open Search Foundation e.V.
Schorn 6
82319 Starnberg
The Open Search Foundation e. V. is a registered association based in Starnberg, entered in the register of associations at Munich Local Court under number VR 208036. The OSF is represented by: Dr Stefan Voigt, Chair
Contact details of the data protection officers
XXXXXXXXX
When we collect and process personal data
From the moment you interact with us electronically, we collect and process your personal data. Sometimes this is deliberate, and sometimes it happens incidentally because it is not technically feasible to do otherwise.
What data is processed via the website and in electronic communications
Your contact details (e.g. Name, E-Mail, Phone Numbers),
Meta-/Communication data (e.g. Device-Informationen, IP-Adresses).
For what purpose and on what legal basis do we process this data?
The purpose of our web host processing device information and IP addresses is to provide the website and ensure its security. This is carried out on the basis of a legitimate interest, Article 6(1)(f) of the GDPR. See the section on web hosts below for further details.
The purpose of processing your contact details is to respond to enquiries and to communicate with you. The purpose of opening all communication channels is to enable you to send us enquiries regarding orders, to facilitate communication with us, to submit job applications, to make announcements, to send out invitations to events, or to facilitate press enquiries. In doing so, the surname, first name and address of the data subject are regularly processed. Depending on the content of the communication, this is carried out either on the basis of consent (Art. 6(1)(a) GDPR), for the performance or initiation of a contract (Art. 6(1)(b) GDPR) or on the basis of a legitimate interest (Art. 6(1)(f) BDSG).
Future use of social media
The collaborative project also plans to keep the public informed about the project and its research findings via various social media channels. We will provide information here as soon as possible regarding the data processing involved.
Newsletter
If you wish to subscribe to the newsletter offered on the website, we require your email address and information that enables us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter. No further data is collected, or is collected only on a voluntary basis. We use this data exclusively for the purpose of sending the requested information and do not pass it on to third parties. The processing of data entered into the newsletter subscription form is carried out solely on the basis of your consent (Article 6(1)(a) of the GDPR). You may withdraw your consent to the storage of your data and email address, and to their use for sending the newsletter, at any time, for example via the ‘Unsubscribe’ link in the newsletter. The lawfulness of any data processing operations that have already taken place remains unaffected by this withdrawal. The data you have provided to us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted once you have unsubscribed. Data stored by us for other purposes remains unaffected by this.
What data is received and processed by our web host
On the basis of our legitimate interest (see Article 6(1)(f) of the GDPR), we collect data on visits to the website and store this as ‘server log files’ on the website’s server. The following data is logged:
Website visited
Time of access
Amount of data sent in bytes
Source/link from which you accessed the page
Browser used
Operating system used
IP address used
Server log files are stored for a maximum of seven days and then deleted. The data is stored for security reasons, for example to investigate cases of misuse. If data needs to be retained for evidential purposes, it is exempt from deletion until the incident has been fully resolved.
Your rights
You may exercise the following rights at any time using the contact details provided:
You have the right to request that data relating to you be completed or that any inaccurate data relating to you be rectified.
You have the right to request that data relating to you be erased without delay, or, alternatively, the right to request a restriction on the processing of such data.
You have the right to request a copy of the data relating to you and to request that it be transferred to other data controllers.
You have the right to withdraw any consent you have given with effect for the future.
You may object to the future processing of your personal data at any time. In particular, you may object to processing for the purposes of direct marketing.
You have the right to lodge a complaint with a competent supervisory authority.
Retention period
The personal data we collect is deleted as soon as it is no longer required for its intended purpose and there are no statutory retention obligations preventing its deletion. Data required for contract processing and the fulfilment of orders is retained for a period of 10 years following the end of the calendar year in which the order was completed. This also applies to the content and metadata of electronic communications. Other communication content and metadata are generally deleted three years after the end of the communication. In individual cases, a longer retention period may be necessary. Research data is generally retained for at least 10 years in accordance with good scientific practice. In individual cases, this may also apply to personal data, such as contact details.
