Privacy Policy

Helmholtz-Zentrum Dresden-Rossendorf e. V. (HZDR) takes the protection of personal data seriously.

The following privacy policy provides you with information on what personal data we (the controller as defined in the General Data Protection Regulation) collect when you visit our website www.hzdr.de and/or use our online services as well as how we utilize your data. Personal data includes all data with which you can be personally identified. The website is hosted on an internal HZDR server.

Protocols, Log Files

When users access our website, data such as the computer’s IP address, internet browser used, date, and time are automatically logged for technical reasons and saved for a period of seven days in our system log files. Saving in log files occurs to ensure the functionality of the website and the security of our information technology systems. This data is therefore only evaluated when technical problems or attacks on our webserver arise. The legal basis for data storage is Article 6, Paragraph 1 f GDPR (legitimate interest). Combining this information with other user data does not occur.

We do not use analysis tools.

Contact Forms, Registration Forms and Online Applications

Furthermore, we in no way save or gather personal data through this website (such as names, addresses, telephone numbers or email addresses) unless you provide us with such information (e.g., if you get in contact with us, utilize registration forms for events and workshops or fill in online applications) and in the context outlined as follows. Personal data you willingly provide (also in regard to required fields as part of your request) is treated confidentially, serving only to process your request, and will not be passed on to third parties without your consent and/or your being informed in regard to that particular form. The data is processed and stored on the basis of a legitimate interest (Art. 6, Par. 1 f GDPR, or in the case of requests for offers pursuant to Art. 6 Par. 1 b GDPR) in processing your respective request.   

Please also be aware of our specific privacy policy information on the respective forms.

All personal data is deleted or blocked as soon as the purpose of the storage no longer applies. Furthermore, storage may also take place to the extent it is permitted by European or national legislation.

We use SSL encryption so that the data you enter on our homepage is transferred to us in encrypted form. Users should, however, be aware that Internet data transfer (e.g., through email communication) can encounter security issues. Complete protection from access by third parties is impossible.

Log-in Area

The log-in area is in principle available only to our staff. Staff will be informed separately insofar as data processing beyond the scope of this privacy policy takes place within the log-in area.

Information Service for the DeltaX School Laboratory (Newsletter)

You can use this service free of charge to receive information about offers from the DeltaX school laboratory at the HZDR. Registration is on a voluntary basis only — that is, with your consent within the context of Art. 6, Par. 1 a GDPR. For registration, we require your email address and you must specify how often you would like to be informed via email.   

Based on prior case law, however, the following data will also be logged as verification of your registration:

  • At time of registration: date and time, the data you entered, particularly the email address, IP address.
  • At time of verification: text of the confirmation email, including time and recipient address, date and time of verification via link, email address used for confirmation.

Following registration, you will receive a confirmation email from us. This ensures that the entered email address is correct and belongs to you. By providing your email address and by verification via the link in the confirmation email (known as double opt-in), you consent according to Art. 6, Par 1 a GDPR that we may use this information to send you our newsletter in order to inform you of the contents of the respective newsletter group you selected. Newsletters on other topics will not be sent to you through this option. The data is not utilized for other purposes or linked to other data.

We will not pass on your data to third parties. An external service provider is not used to send the emails. Management and sending of newsletter data is carried out through our internal mail server.

You can revoke consent in the future at any time by unregistering from our information service via email at deltax@hzdr.de. Your saved personal data will then immediately be deleted and you will no longer receive any further information from us.

Alumni-Registration

Should you decide to register for the alumni network using our online form (https://www.hzdr.de/alumni-reg), we will gather the information provided by you in accordance with Article 6, Paragraph 1a GDPR (consent). This information will then be stored in an HZDR-internal database and used in accordance with your consent solely for the purpose of contacting you. The information will not be shared with third parties at any time. However, for sending the newsletter, an external provider (currently: Newsletter2go) is used, which processes your names and email addresses under an agreement. Based on previous case law, the following data is stored in addition to the information you actively provide:

  • At the time of the registration: date and time of the information provided by you, especially your email address, IP address
  • At the time of the confirmation: the text of the confirmation mail, including date, time and the email address of the recipient (via a link), the email address to be confirmed

If you no longer wish to receive information from the HZDR, you can withdraw your consent at any time with effect for the future by sending an email to alumni@hzdr.de. Your data will then be deleted with no further delay.  Should you have any questions, please do not hesitate to contact our Alumni Management (0351/260 2062, alumni@hzdr.de ) or our data protection representative (contact details below).

Google Maps

This website uses Google Maps to display interactive maps and for generating routes/directions. Google Maps is a mapping service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). By using Google Maps, information on the use of this website, including your IP address and the entered starting point (address) may be transferred to Google in the Unites States as part of the route planning function. When you access one of our Internet websites, which includes Google Maps, your browser generates a direct link to the Google servers. The map content is directly transmitted from Google to your browser and is integrated by your browser into the website. We therefore have no influence on the extent of data that Google collects in this manner. To our knowledge, this data at least includes:

  • Date and time of visit to the relevant website
  • Internet address or URL of the website accessed
  • IP address, (starting) address entered in the context of route planning

We have no influence on further processing and use of the data by Google and can therefore assume no responsibility in this regard.
If you would not like Google to collect, process or use data regarding your visit to our website, you can deactivate JavaScript in your browser settings. If you choose to deactivate JavaScript, you can, however, no longer use the map view.

The purpose and scope of the data collection and the further processing and use of the data by Google, as well as your rights in this regard and setting options for protecting your privacy can be found in Google’s privacy policy (https://policies.google.com/privacy?hl=de). Under “Transparency and Choices”, you can change your settings and thereby influence how Google processes the data.

Cookies

Our Internet site uses cookies for switching languages (language cookies). These are small text files that are stored on your computer. The next time you visit the homepage, your language can immediately be displayed, which will remain in effect for about five years. Depending on your browser settings, the cookie can be deleted when you close your browser. User profiles are not generated. The processing is carried out on the basis of Art. 6, Par 1 f GDPR (legitimate interest).

These cookies do not retrieve data stored on your hard drive and do not affect your PC or your data. Cookies do not contain viruses, Trojans or other malicious applications.

You maintain full control at all times over the use of cookies. Most browsers are set to automatically accept cookies. You can, however, deactivate the saving of cookies or set your browser so that you are informed when cookies are transmitted. Cookies that have already been saved can be deleted at any time — also automated. As a result — due to technical reasons — it may, however, no longer be possible to utilize all functions on our website to their fullest extent.

Links to External Offers

We link to external websites as well as to social media providers (Facebook, Twitter, YouTube, Instagram). The connection is set up in such a way that no data is transmitted to the provider of external offers when visiting our internet pages.

When clicking on a link or button, you will, however, be sent directly to that external offer. These sites collect and process your data — particularly log data (including IP address, browser type, operating system, previously accessed website, accessed pages, cookie information — according to their own user guidelines and/or privacy polices, which you can view on the respective sites:

We recommend that you read these statements before using the sites. Please be aware that data protection regulations in regard to those services may be updated or changed regularly due to extended functionalities or similar reasons. We have no influence on the type and scope of data processing by the provider based on your click. Information regarding your respective rights and settings for protecting your privacy can be found in the respective privacy policies.

Your Rights / Contact Information for Our Data Protection Representative

For all data protection matters and, in particular, to exercise your rights pursuant to Art. 15 and subsequent articles of the GDPR (information on data processed about you, its origin, recipient and the purpose of processing and, where applicable, a right to correction, restriction of processing or deletion and revocation or objection), you can contact our data protection representative.

Kristin Beyer (LL.M.)
Dresdner Institut für Datenschutz
Email: dsb[at]hzdr.de

Additional contact data can be found at: www.dids.de

Your concerns will be treated with confidentiality.

Furthermore, if you do not consent to our data processing, you can contact the supervisory authority (Saxon data protection representative, www.saechsdsb.de) at any time.

In case of legal disputes, only the German version of this text is legally binding.