Data Protection pursuant to General Data Protection Regulation (GDPR) and § 13 Telemediengesetz (TMG)
This data protection regulation is applicable to the internet service offered by the Research Data Centre for Education (FDZ Bildung), accessible via https://www.fdz-bildung.de and for the personal data assessed via this site. For internet services that are accessible via a link from the above cited website, please refer to the data protection regulations and details specified on the pertinent sites.
2. Operator/Provider of the internet service
This service is operated by DIPF | Leibniz Institute for Research and Information in Education. DIPF holds responsible for processing the personal data that are assessed via this website. For the address and contact details, please visit the imprint (https://www.fdz-bildung.de/impressum).
3. Responsible data protection officers
Please address your questions concerning data protection at the Research Data Centre for Education to our data protection officers. You can ask which data we save. Moreover, you can post requests, applications for Alteration and deletion and any suggestions to the following address:
DIPF | Leibniz-Institut für Bildungsforschung und Bildungsinformation
Rostocker Straße 6
4. Legal basis for data processing/ Handling off your data
DIPF assesses personal data via this website in order to deliver offered services and enable users to avail themselves of these services.
Personal data that are assessed via this website are not transmitted to external parties without your express consent.
5. Type of assessed data
a) Data of usage
Each time an internet file is requested, the following non-personal access data are stored at DIPF:
- the site from which the file was requested,
- the name of the access file,
- data and time of request,
- transmitted data volume,
- access status (file transmitted, file not found etc.),
- type of access (GET, POST),
- used browser, respectively operating system,
- Session ID
b) Personal Data
Personal data assessed via this site include:
- IP adress
- PIWIK/Matomo Web Analytics (more informationen and deactivation)
- in relation to a user account: name, address, e-mail address, phone number, place of work/institution, occupational status, academic supervisor if applicable
6. Duration of storage
7. Your right
As a user of this internet service, you have the following rights pursuant to GDPR articles 15-18 and articles 20-21 to:
7.1 Right to information
You can claim information pursuant to article 15 GDPR or § 52 HDSIG regarding the personal data we store. You should provide details of your request in your claim, to facilitate compilation of the necessary data. Please note that your right to information is limited by 24 (2), 25 (2), 26 (2) and 33 HDSIG § 52 (2) to (5) HDSIG.
7.2 Right to recification
If the details concerning yourself are (no longer) accurate, you can request their rectification pursuant to 16 GDPR or § 53 HDSIG. You can claim completion if your data are incomplete.
7.3 Right to erasure
Pursuant to article 17 GDPR and §§ 34 and 53 HDSIG, you are entitled to claim erasure of your personal data.
7.4 Right to restriction of processing
Pursuant to article 18 GDPR respectively § 53 HDSIG you can claim restricted processing of your personal data.
7.5 Right to data portability
Pursuant to article 20 GDPR you are entitled to receiving data you have sent us in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:
- (a) the processing is based on consent pursuant to point (a)
- (a) the processing is based on consent pursuant to point (a) of Article 6 (1) or point (a) of Article 9 (2) or on a contract pursuant to point (b) of Article 6 (1); and the processing is carried out by automated means.
In exercising your right to data portability you shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
7.6 Right to object
Pursuant to article 21 GDPR, on grounds of your personal situation, you have a right to object any time to processing of your personal data which is based on point (e) or (f) of Article 6 (1).
7.7 Right to complain
If you think that we have not observed data protection regulations in processing your personal data, you can send a complaint to the official data protection officer of the data and information protection officer for the state of Hesse, who will check your complaint.
Please note that internet-based data transfer, for instance via e-mail, may be subject to gaps in security. It is impossible to guarantee safe protection from access by external parties. Usage of contact data that are published in the legally required imprint by external parties for advertising purposes is expressly denied. We refuse to accept advertising or information material we have not requested. Operators of this site reserve their right to take legal measures in the case of being sent unrequested advertisement, e.g. spam e-mails.
9. Information concerning web analyses
Our website uses Matomo (Piwik), a web analysis service. Piwik uses so-called cookies, text files that are saved on your computer to enable analysis of usage of a website. User information that is generated by a cookie (including your abbreviated IP address) is sent to our server and saved for purposes of user analysis. We use this information to optimise our site. Your IP address is immediately anonymized and you as a user remain anonymous in this context. Information gained by the cookie is not transferred to any third party. You can prevent cookie usage by a particular browser setting, but in such a case you might not be able to use the full scope of the website services offered on our site.
If you do not agree to saving and analysis of data from your visit to our site, you can object to storage and usage any time, by mouse click. An opt-out- cookie will be placed in your browser and Piwik will not assess any session data. Please note that deletion of your cookies will lead to deletion of the opt-out-cookie, too, and a respective setting will probably have to be repeated.