Privacy Policy

1. name and contact details of the controller and the company data protection officer

This data protection information applies to data processing on the website www.smartfactory-owl.de by the controller:

Fraunhofer-Gesellschaft zur Förderung der angewandten Forschung e.V.
Hansastraße 27c, 80686 Munich
Phone +49 89 1205-0
Fax +49 89 1205-7531
info@zv.fraunhofer.de
www.fraunhofer.de

(hereinafter referred to as “Fraunhofer”)

Fraunhofer’s data protection officer can be contacted at the above address, for the attention of the data protection officer or at datenschutz@zv.fraunhofer.de.

You can contact our data protection officer directly at any time if you have any questions about data protection law or your rights as a data subject.

2. processing of personal data and purposes of processing

a) When visiting the website

You can access the website www.smartfactory-owl.de without having to disclose your identity. The browser used on your device only automatically sends information to the server of our website (e.g. browser type and version, date and time of access) to enable the website to establish a connection. This also includes the IP address of your requesting device. This is temporarily stored in a log file and automatically deleted after 4 days:

The IP address is processed for technical and administrative purposes of connection establishment and stability in order to ensure the security and functionality of our website and to be able to prosecute any illegal attacks on it if necessary.

The legal basis for the processing of the IP address is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the aforementioned security interest and the need to provide our website without disruption.

We cannot draw any direct conclusions about your identity from the processing of the IP address and other information in the log file.

In addition, we use tracking pixels and analysis services when you visit our website. You can find more detailed explanations on this in section 4 of this privacy policy.

b) When registering for events

We regularly offer a wide range of events via our website, for which you can register online. When registering for an event, some mandatory information must be provided. This includes

• First and last name
• Address
• Email address

Any additional mandatory information is marked as such (e.g. using *). In addition, further information can often be provided voluntarily.

The mandatory data is processed in order to identify the interested parties as participants in the event, to process the contract for participation and to provide the participants with information about the event before, during and after the event. The provision of voluntary data enables us to plan and carry out the event in line with the interests and age of the participants.

Data processing is carried out at the request of interested participants and is required in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for the purposes mentioned for the fulfillment of the participant contract and the pre-contractual measures.

The personal data collected by us for the event will be stored by us for a period of 2 years, unless you have consented to further storage in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

We work together with the service provider Mailingwork GmbH, Birkenweg 7, 09569 Oederan (“Mailingwork”) in the context of event registration via our web forms. The purpose of this cooperation is the professional administration of online registrations. For this purpose, the data entered is stored on Mailingwork’s servers in Germany.

We have concluded an order processing contract with Mailingwork. Through this contract, Mailingwork ensures that they process the data on our behalf in accordance with the General Data Protection Regulation and guarantee the protection of the rights of the data subjects.

In addition, it may be necessary to transfer your personal data to an external event organizer in order to fulfill the contract. In connection with an event registration, you will be informed in such a case who the organizer is and whether it is an external organizer. This organizer will process personal data as part of the event and in particular for participant management.

c) When registering for a newsletter

On our website, we offer various options for subscribing to a newsletter or press mailing list. If you have expressly consented in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we will use your e-mail address to regularly send you information according to your selection. To receive the information, it is sufficient to provide an e-mail address and the desired language version.

You may be able to voluntarily provide further information about yourself (e.g. name, address and telephone number). We use this data to contact you by telephone or post (e.g. for press invitations).

You will then receive a registration notification by e-mail, which you must confirm in order to receive the newsletter (so-called double opt-in). This serves as proof for us that the registration was actually initiated by you.

You can unsubscribe at any time, e.g. via a link at the end of each press newsletter. Alternatively, you can also send your unsubscribe request at any time to datenschutz@zv.fraunhofer.de by e-mail.

Your e-mail address will be deleted immediately after you withdraw your consent to receive the newsletter.

We send our newsletter via the provider Mailingwork GmbH, Birkenweg 7, 09569 Oederan (“Mailingwork”). The email addresses and data of our newsletter recipients are stored on our behalf on Mailingwork’s servers in Germany.

Mailingwork uses this information to send and evaluate the newsletter on our behalf. We have concluded an order processing contract with Mailingwork for this purpose. Through this contract, Mailingwork ensures that it processes the data in accordance with the General Data Protection Regulation and guarantees the protection of the rights of the data subject.

Mailingwork ensures that personal data is comprehensively protected against unauthorized access. Mailingwork itself does not use the data of our newsletter recipients to write to them itself or pass the data on to third parties. Mailingwork is also certified by the Certified Senders Alliance as a reputable email sender.

d) When using the contact form for tenders

For inquiries about our tenders, we offer you the opportunity to contact us using a form provided on the website. The following information is mandatory:

• First and last name
• E-mail address

We need your data to determine that the request comes from a company and to be able to answer and process it. In addition, you can voluntarily provide your title, company, department, address, telephone, fax number and homepage. The data will be processed exclusively for the purpose of processing your inquiry and will not be taken into account in any subsequent award procedure.

The data processing is carried out in response to your request and is based on our legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR in the context of responding to a contact request.

The personal data collected by us for the use of the contact form will be deleted after your request has been dealt with.

 

3. disclosure of personal data to third parties

Except in the cases mentioned above (registration for events, use of the ordering service, registration for a newsletter), we only pass on your personal data to third parties if:

• you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
• this is necessary for the performance of a contract with you pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR,
• in the event that there is a legal obligation for disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR.

If personal data is transferred to a third country (outside the EU) or an international organization, this is excluded separately.

4. social plugins

We use social media buttons (also known as social media plugins) on our website. These are small buttons that you can use to publish content from our website on social networks under your profile.

If you activate such a button, a connection is established between our website and the social network. In addition to the relevant content, the operator of the social network receives further information, some of which is personal. This includes, for example, the fact that you are currently visiting our site.

The social media buttons are integrated using the so-called Shariff solution. This solution, developed by Heise and c’t, prevents a connection to a social network from being established simply because you access a page with a social media button without activating it. This means that information is only transmitted to the social network when you use the button.

We use the following social media plugins:

 

5th YouTube

We use the video portal “YouTube” of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”) on our website (videos). The implementation is based on Art. 6 para. 1 sentence 1 lit. f GDPR, whereby our interest lies in the smooth integration of the videos and the appealing design of our website.

Here we use the “extended data protection mode” option provided by Google.

When you access a page that has an embedded video, a connection to the Google servers is established and the content is displayed on the website by notifying your browser.

According to Google, in “extended data protection mode”, your data – in particular which of our websites you have visited and device-specific information including your IP address – is only transmitted to the YouTube server in the USA when you watch the video. By clicking on the video, you consent to this transmission.

If you are logged in to Google at the same time, this information will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website.

In some cases, information is transmitted to the parent company Google Inc. based in the USA, to other Google companies and to external partners of Google, each of which may be located outside the European Union. Google uses standard contractual clauses approved by the European Commission and relies on the adequacy decisions issued by the European Commission regarding certain countries.

Further information on data protection in connection with YouTube can be found in Google’s privacy policy.

6. Rights of data subjects

You have the right:

• in accordance with Art. 7 para. 3 GDPR, to withdraw your consent once given to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future;
  
• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
  
• in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
• in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
  
• in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
  
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller, and
  
• to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
  

7. information about your right to object according to Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision of Article 4(4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

If you object to the processing of data for the purpose of direct marketing, we will cease processing immediately. In this case, it is not necessary to specify a particular situation. This also applies to profiling insofar as it is associated with such direct advertising.

If you wish to exercise your right to object, simply send an e-mail to datenschutz@zv.fraunhofer.de.

 

8. Data security

All data transmitted by you personally is encrypted using the common and secure TLS (Transport Layer Security) standard. TLS is a secure and proven standard that is also used for online banking, for example. You can recognize a secure TLS connection by the s appended to http (i.e. https://..) in the address bar of your browser or by the lock symbol at the bottom of your browser.

We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

9. topicality and amendment of this data protection information

This data protection information is currently valid and was last updated in January 2020.

It may become necessary to amend this data protection information as a result of the further development of our website and offers on it or due to changes in legal or official requirements. You can access and print out the current data protection information at any time on the website at https://www.fraunhofer.de/datenschutz.