Data Protection pursuant to General Data Protection Regulation (GDPR) and § 13 Telemediengesetz (TMG)

1. Scope

This data protection regulation is applicable to the internet service offered by the Research Data Centre for Education (FDZ Bildung), accessible via https://www.fdz-bildung.de and for the personal data assessed via this site. For internet services that are accessible via a link from the above cited website, please refer to the data protection regulations and details specified on the pertinent sites.

2. Operator/Provider of the internet service

This service is operated by DIPF | Leibniz Institute for Research and Information in Education.  DIPF holds responsible for processing the personal data that are assessed via this website. For the address and contact details, please visit the imprint (https://www.fdz-bildung.de/impressum).

3. Responsible data protection officers

Please address your questions concerning data protection at the Research Data Centre for Education to our data protection officers. You can ask which data we save. Moreover, you can post requests, applications for Alteration and deletion and any suggestions to the following address:

gds Gesellschaft für Datenschutz Mittelhessen mbH
Frau Viktorija Meinel (Ass. jur.)
Auf der Appeling 8
35043 Marburg a.d. Lahn

E-Mail: meinel@gdsm.de or to datenschutz@dipf.de

4. Legal basis for data processing/ Handling off your data

DIPF assesses personal data via this website in order to deliver offered services and enable users to avail themselves of these services.

Legally, the occasionally temporary storage of data and logfiles is based on points a and f, article 6 (1), GDPR (EU General Data Protection Regulation). Personal data which we assess in order to fulfil certain services are obtained with your consent to assessment, storage and processing of these data pursuant to our terms of use and to point a, article 6 (1), GDPR.

Personal data that are assessed via this website are not transmitted to external parties without your express consent.

5. Type of assessed data

a) Data of usage

Each time an internet file is requested, the following non-personal access data are stored at DIPF:

• the site from which the file was requested,
• the name of the access file,
• data and time of request,
• transmitted data volume,
• access status (file transmitted, file not found etc.),
• type of access (GET, POST),
• used browser, respectively operating system,
• Session ID

b) Personal Data

Personal data assessed via this site include:

• IP adress
• cookies
  
  • PIWIK/Matomo Web Analytics (more informationen and deactivation)
• in relation to a user account: name, address, e-mail address, phone number, place of work/institution, occupational status, academic supervisor if applicable

6. Duration of storage

Some of your data assessed via this web service are only stored temporarily, or for delivery of a specific service (IP address). For reasons of security, that is to investigate forbidden access or avoid abuse of the website, a complete IP address of a requesting computer will be assessed, stored and anonymized seven days after a request. Personal data in relation to a user account at the Research Data Centre for Education are stored for the duration of the account’s existence. Following the deletion of an account, data that are relevant for statistical purposes are saved in anonymized form. Please also note our terms of use, which you have accepted prior to creating a user account.

7. Your right

As a user of this internet service, you have the following rights pursuant to GDPR articles 15-18 and articles 20-21 to:

7.1 Right to information

You can claim information pursuant to article 15 GDPR or § 52 HDSIG regarding the personal data we store. You should provide details of your request in your claim, to facilitate compilation of the necessary data. Please note that your right to information is limited by 24 (2), 25 (2), 26 (2) and 33 HDSIG § 52 (2) to (5) HDSIG.

7.2 Right to recification

If the details concerning yourself are (no longer) accurate, you can request their rectification pursuant to 16 GDPR or § 53 HDSIG. You can claim completion if your data are incomplete.

7.3 Right to erasure

Pursuant to article 17 GDPR and §§ 34 and 53 HDSIG, you are entitled to claim erasure of your personal data.

7.4 Right to restriction of processing

Pursuant to article 18 GDPR respectively § 53 HDSIG you can claim restricted processing of your personal data.

7.5 Right to data portability

Pursuant to article 20 GDPR  you are entitled to receiving data you have sent us  in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

1. (a)  the processing is based on consent pursuant to point (a)
2. (a)  the processing is based on consent pursuant to point (a) of Article 6 (1) or point (a) of Article 9 (2) or on a contract pursuant to point (b) of Article 6 (1); and the processing is carried out by automated means.

In exercising your right to data portability you shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

7.6 Right to object

Pursuant to article  21 GDPR, on grounds of your personal situation, you have a right to object any time to processing of your personal data which is based on point (e) or (f) of Article 6 (1).

7.7 Right to complain

If you think that we have not observed data protection regulations in processing your personal data, you can send a complaint to the official data protection officer of the data and information protection officer for the state of Hesse, who will check your complaint.

8. Note

Please note that internet-based data transfer, for instance via e-mail, may be subject to gaps in security. It is impossible to guarantee safe protection from access by external parties. Usage of contact data that are published in the legally required imprint by external parties for advertising purposes is expressly denied. We refuse to accept advertising or information material we have not requested. Operators of this site   reserve their right to take legal measures in the case of being sent unrequested advertisement, e.g. spam e-mails.

9. Information concerning web analyses

Information to Piwik/Matomo Web Analytics

Our website uses Matomo (Piwik), a web analysis service. Piwik uses so-called cookies, text files that are saved on your computer to enable analysis of usage of a website. User information that is generated by a cookie (including your abbreviated IP address) is sent to our server and saved for purposes of user analysis. We use this information to optimise our site. Your IP address is immediately anonymized and you as a user remain anonymous in this context. Information gained by the cookie is not transferred to any third party. You can prevent cookie usage by a particular browser setting, but in such a case you might not be able to use the full scope of the website services offered on our site.

If you do not agree to saving and analysis of data from your visit to our site, you can object to storage and usage any time, by mouse click. An opt-out- cookie will be placed in your browser and  Piwik will not assess any session data. Please note that deletion of your cookies will lead to deletion of the opt-out-cookie, too, and a respective setting will probably have to be repeated.

Contradiction to capture with Matomo (Opt-out)