DATA PROTECTION INFORMATION FOR THE GOCHAINS SCIENCE ROOM WEBSITES
Data protection is very important to us. We process your personal data (hereinafter referred to as “data”) in accordance with legal requirements and aim to do so in a transparent manner. Therefore, we would like to briefly explain to you in the following data protection information which data we process, for what purposes, and on what legal basis. You will also receive information about contact persons and your rights in connection with data processing.
Name and contact details of the controller:
Leuphana University Lüneburg
represented by the President
Universitätsallee 1
21335 Lüneburg
Contact details of the data protection officer:
Leuphana University Lüneburg
- Data Protection Officer -
Universitätsallee 1
21335 Lüneburg, Germany
Email: dsb@leuphana.de
PURPOSES AND LEGAL BASIS OF DATA PROCESSING:
-
Provision of a website, log files
As soon as you visit our website, we store so-called log files about you. These log files contain your IP address, the date and time of your visit, the URL you accessed, the URL you last visited (referrer URL), the browser you are using and its version, and the version of the operating system you are using. The log files are generally stored for a maximum of 90 days.
We use this data to prevent misuse of our website and to enable you to visit our website without disruption and in the best possible way. The legal basis for this processing is Section 3 (1) No. 1 of the Lower Saxony Data Protection Act (NDSG) in conjunction with Article 6 (1) (1) (e) of the General Data Protection Regulation (GDPR) in conjunction with Section 3 (1) (1) No. 10 of the Lower Saxony Higher Education Act (NHG).
The legal basis for data protection is Section 3 (1) No. 1 of the Lower Saxony Data Protection Act (NDSG), Article 6 (1) (1) (e), (2) and (3) of the General Data Protection Regulation (GDPR) in conjunction with Section 3 (1) (1) No. 10 of the Lower Saxony Higher Education Act (NHG). -
Social media presence LinkedIn
We maintain profiles on social networks that serve the communication and external presentation of Leuphana University Lüneburg. Social networks such as Facebook, Instagram, YouTube, and Twitter can generally analyze the user behavior of visitors comprehensively when they visit their websites or a website with integrated social media content (e.g., like buttons or advertising banners). When you visit our social media presence or interact with it, data processing relevant to data protection is usually carried out.
If you are logged into your social media account with the respective provider and visit our social media presence, the operator of the social media platform can assign this visit to your user account. Your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection is carried out, for example, via cookies that are stored on your device or by recording your IP address.
The operators of social media portals can use the data collected in this way to create user profiles. This enables the operator to display interest-based advertising to you both within and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are or were logged in.
We have no influence on the data collected by the operator and data processing operations, nor are we aware of the full extent of data collection or the purposes of processing. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and privacy policies of the respective social media portals. We would like to point out that your data collected on social media may be processed outside the European Union. For more information, please refer to the section “Transfers to third countries.”
Our social media presence is intended to ensure as comprehensive and up-to-date a presence as possible with appropriate interaction options on the internet in order to inform the public about the fulfillment of our tasks. The legal basis for our processing with the help of presences on social media platforms is therefore Art. 6 (1) sentence 1 letter e) GDPR in conjunction with § 3 (1) no. 10 NHG. The analysis processes initiated by social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g., consent within the meaning of Art. 6 (1) (a) GDPR or § 25 (1) TTDSG).
LinkedIn
We have a profile on the LinkedIn social network, which can be accessed at https://de.linkedin.com/in/research-cluster-gochains-16220036b/de. LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. We have an agreement with LinkedIn regarding joint responsibility for data processing (Page Insights Joint Controller Addendum). This agreement specifies which data processing operations we and LinkedIn are responsible for when you visit our LinkedIn page. The agreement can be viewed at the following link:
https://legal.linkedin.com/pages-joint-controller-addendum
For details, please refer to LinkedIn's privacy policy:
https://de.linkedin.com/legal/privacy/eu
GENERAL INFORMATION:
Even if you do not exercise your rights listed below, your data will be stored by us for 90 days in relation to the log files and otherwise only for as long as is necessary for the above-mentioned purposes. This does not apply if a longer storage or retention period is required by law or necessary for law enforcement within the statutory limitation periods. If data is only retained for the aforementioned purposes, access to the data is limited to the extent necessary for this purpose.
We generally keep your data to ourselves and only make it available to those employees who need it for their work in the context of performing their tasks. This does not apply if we are legally obliged to disclose it.
We would like to inform you that the provision of your data is neither required by law nor contractually stipulated. If you do not provide your data, this will not have any negative consequences for you.
Automated decision-making, including profiling within the meaning of Art. 22 (1) and (4) GDPR, does not take place.
TRANSFER TO THIRD COUNTRIES
We would like to point out that when using our social media sites, user data may be processed outside the European Union. In particular, there is a possibility that data may be stored on servers in the US, or that security authorities may access the data at subsidiaries of US parent companies. In exceptional cases, there is a possibility that your data may be processed by US authorities. All of the aforementioned providers claim to maintain an adequate level of data protection, and we have concluded standard data protection clauses with the companies. Transfer by LinkedIn to these countries takes place after assurance by LinkedIn on the basis of standard contractual clauses pursuant to Art. 46 (2) (c) GDPR or on the basis of an adequacy decision pursuant to Art. 45 GDPR.
YOUR RIGHT TO OBJECT PURSUANT TO ART. 21 GDPR:
You have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation.
In this case, we will no longer process this data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
YOUR OTHER RIGHTS:
You have the right to request information from us about the processing of data concerning you. In addition to a copy of the data, this right to information also includes the purposes of data processing, the recipients of the data, and the storage period.
If incorrect data is processed, you can request that we correct this data immediately. If the legal requirements under Articles 17 and 18 of the GDPR are met, you also have the right to have the data deleted immediately or to restrict its processing. Please note that restricted processing of the data may not be possible under certain circumstances.
To exercise your rights as outlined above, please contact:
Leuphana University Lüneburg
Franca A. Bülow
Universitätsallee 1
Building 11
21335 Lüneburg, Germany
Email: franca.buelow@leuphana.de
If you have any further questions, our data protection officer will be happy to assist you.
If you have any complaints regarding data protection, please contact a data protection authority of your choice.
The authority directly responsible for Leuphana University Lüneburg is:
The State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hannover.
Email: poststelle@lfd.niedersachsen.de