Privacy policy

Privacy policy for www.cais-research.de

§1 General Information

Data protection is an important issue. In the following, we provide information about the collection and processing of personal data. Personal data is all data that can be related to you personally.

 

Person responsible according to Art. 4 para. 7 DSGVO

Center for Advanced Internet Studies (CAIS) GmbH (hereinafter: CAIS).

Konrad-Zuse-Straße 2a,

44801 Bochum (Germany)

Germany.

E-mail: info@cais-research.de

Phone: +49 234 544 96 285

Represented by Prof. Dr. Christiane Eilders and Tim Pfenner (Managing Director).

 

Data protection officer

You can reach the personally appointed data protection officer of our company at the following address:

Mr. Patrick Grihn
grihn@dsb.ruhr
DPO Ruhr
℅ nextindex GmbH & Co. KG
Grabenstr. 12
44787 Bochum

 

If you have any questions about processing, security or a request for information, you can contact them directly in confidence.

 

§2 General overview of data and processing operations

We want to offer you the required clarity according to Art. 12 DSGVO. Therefore, the following overview of the processing operations:

 

Types of data processed:

• Usage data Communication data (When accessing a website, IP address, device information, access time and access time, etc.).
• Contact data when registering or entering data
• Inventory data (name, company, address)
• Communication data (if applicable, meta data on calls, e-mails)
• Content data (especially when sending e-mails)

Furthermore (internally) the following additional data for our customers, interested parties, suppliers and business partners for the provision of services in the area of offers and contracts, service and marketing, direct advertising and customer care:

• Contract data
• Customer inventory data (CRM)
• Supplier data
• Payment data
• Order data and invoice data

Data subjects (categories)

• Users of this website (also called visitors)
• Customers
• Suppliers
• Interested parties
• Journalists
• Research partners

Purposes

• Operating the website and providing the information
• Ensuring the operation of the website and our systems (e.g. firewall)
• Communicating with our customers
• Answering inquiries
• Optimization and analysis of the website
• Providing information
• Publishing our funding and research activities

 

§3 Your rights

You have the following rights with respect to us regarding personal data concerning you:

Briefly:

• Right of access,
• Right to rectification or deletion,
• Right to restriction of processing,
• Right to object to processing,
• Right to data portability,
• Right to complain to the data protection supervisory authority about our processing of your personal data.

 

Detailed rights:

In accordance with Art. 15 of the GDPR, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;
pursuant to Art. 16 DSGVO, to request the correction of incorrect or incomplete personal data stored by us without undue delay;
pursuant to Art. 17 DSGVO, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
pursuant to Art. 18 DSGVO, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO;
pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;
in accordance with Art. 7 (3) DSGVO, to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing, which was based on this consent, for the future; and
complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose.

Exceptions:

The right to erasure does not exist insofar as the processing is necessary

for the exercise of the right to freedom of expression and information;
for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) DSGVO;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) DSGVO, insofar as the right referred to in section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or
for the assertion, exercise or defense of legal claims.

 

§4 Legal bases in general

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.

If processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) lit. c DSGVO serves as the legal basis.

In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) lit. d DSGVO serves as the legal basis.

Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 para. 1 lit. a DSGVO serves as the legal basis.

 

§5 Website

General data when calling up the site

In the case of merely informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server in order to display our website to you and to ensure stability and security. The processing is based on Art. 6 para. 1 lit. f DSGVO (legitimate interest).

Log files

The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. The processing is based on Art. 6 para. 1 lit. f DSGVO (Legitimate Interest).

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

In addition to the previously mentioned data, cookies may be stored on your computer when you use our website.

We use technically necessary cookies for the purpose of security and technical implementation of the website. The processing is based on Art. 6 para. 1 lit. f DSGVO (legitimate interest).

These cookies are usually deleted after logging out or when closing the browser.

We also use cookies for the purpose of analyzing user behavior or for marketing purposes.

These cookies are deleted after a specified duration.

Unless otherwise stated in this privacy policy, the processing is based on Art. 6 para. 1 lit. f DSGVO (Legitimate Interest). Otherwise on the basis of consent pursuant to Art. 6 para. 1 lit. a DSGVO.

You can delete the cookies stored on your computer at any time in the browser settings.

Furthermore, you can configure browsers so that they either delete cookies when you close the browser, or generally reject cookies.

We would like to point out that you may not be able to use some functions of our website properly without cookies.

§6 Third-party services

We use third-party services to make the website as a whole more user-friendly, effective and secure.
This also includes the use of analysis tools. We use analysis tools for the purpose of analyzing user behavior in order to optimize our website.
Unless otherwise stated in this privacy policy, the use of analysis tools is based on the legal basis of legitimate interest pursuant to Art. 6 (1) lit. f DSGVO. This is particularly the case if the service data is only collected pseudonymously and the respective service does not use the data for its own purposes.

Matomo

We use the open source software Matomo by InnoCraft Ltd from New Zealand on our website to analyze user behavior when visiting our site and to optimize our site and its content accordingly based on this. In doing so, we do not receive any information that directly identifies you. In the Matomo variant we use, precautions are taken using DoNotTrack technology (see www.donottrack.us), with the result that your website visit is not recorded if you have indicated in your Internet browser settings that you do not wish to be tracked.

In connection with the use of Matomo, cookies are used to enable a statistical analysis of the use of this website by your visits. Information – including personal information – about your visitor behavior is stored in the cookie and processed using a pseudonym in a usage profile for the purpose of analysis. Since Matomo is hosted on our own server, processing by third parties is not required for the analysis.

The data obtained in the process will not be used to identify you personally without your separately granted consent and the data will not be merged with personal data about you as the bearer of the pseudonym.

Insofar as IP addresses are collected, they are anonymized immediately after collection by deleting the last number block.

The data processing is carried out on the basis of our legitimate interest pursuant to Art. 6 para.1 p. 1 lit. f DSGVO for the purpose of optimizing our online offer and our website or on the basis of your consent pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO, provided that you have given us your consent. You can revoke your consent at any time by deleting the cookies in your browser.

You have the option to prevent actions you take here from being analyzed and linked. This will protect your privacy, but will also prevent the owner from learning from your actions and improving the usability for you and other users.

Tracking is not currently active on your end because your browser has told us that you do not want tracking. This is a browser setting. To re-enable tracking, you must disable the so-called “Do Not Track” setting in your browser preferences.

YouTube

We have integrated YouTube videos into our online offer, which are stored on https://www.YouTube.com and can be played directly from our website. These are all integrated in “extended data protection mode”, which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, data is transmitted. We have no influence on this data transmission.

The provider of the service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. A company registered and operated under the laws of Ireland (registration number: 368047). The service is used only after your informed consent on the basis of Art. 6. para. 1 lit. a DSGVO.

Google uses cookies in connection with the services and functions, which can be stored on your terminal device. The information generated by the cookies (e.g. about your use of the website) may be transmitted to a server in the USA and stored there. This may also include your IP address. As a rule, your IP address is stored anonymously. Google has subjected itself to the “Data Privacy Framework”. The transfer takes place under certification of the Data Privacy Framework on the basis of Art. 45 DSGVO (adequacy decision). For more information on the Data Privacy Framework, please visit https://www.dataprivacyframework.gov/s/ .

OpenStreetMap

We use the map service “OpenStreetMap” of the OpenstreetMap Foundation. The use of OpenStreetMap is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website on the basis of Art. 6 para. 1 lit. a DSGVO (consent).

When using the map, your IP address is transmitted to a server of OpenStreetMap and stored there. We have no influence on this data transmission.
For more information, please visit the privacy page of OpenStreetMap (https://wiki.osmfoundation.org/wiki/Privacy_Policy).

Twitter

We have integrated content from the Twitter platform into our online offering.

The integration is based on Art. 6 para. 1 lit. a DSGVO (consent). In the process, data may also be transferred to the USA. In the case of a transfer to the USA, no sufficient level of data protection can be guaranteed. In particular, access by authorities in the USA cannot be ruled out. The transfer takes place on the basis of Art. 49 para. 1 lit. a DSGVO (consent).

Social media

We are also represented on other social media. If you click on the icons of the corresponding portals, the usage and data protection provisions of the respective portals apply.

At no time is there an obligation to register with one of these portals for information purposes or to contact us (the provider). Much more, they have various options for contacting us (telephone, mail, contact form).

 

§7 Contact form and e-mail contact

A contact form is available on our website, which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored.

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail will be stored.

We process the respective personal data for the purpose of processing the conversation (contact, response) on the basis of Art. 6. para. 1 lit. f DSGVO (Legitimate Interest) or on the basis of Art. 6 para. 1 lit. b DSGVO (performance of a contract or pre-contractual measures).

The data will be deleted if they are no longer needed to fulfill the purpose of processing.

 

§8 Newsletter and press distribution list

If you would like to receive the newsletter or press distribution list offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter or press distribution list.

To ensure that the newsletter or press distribution list is sent without your consent, we use the so-called double opt-in procedure. In the course of this, the potential recipient allows himself to be included in a distribution list. Subsequently, the user is given the opportunity to confirm the registration in a legally secure manner by means of a confirmation e-mail. Only if the confirmation takes place, the address is actively included in the distribution list.

The processing is based on your consent according to Art. 6 para. 1 lit. a DSGVO.

You can revoke your consent to the sending of the newsletter at any time. The revocation can be done by clicking on the link provided in each newsletter email by email to dsb@cais-research.de.

We would like to point out that we can evaluate the opening and click rates when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. The processing is carried out on the legal basis of legitimate interest pursuant to Art. 6 (1) lit. f DSGVO for the optimal and customer-oriented design of the newsletter.

Newsletter2Go is used as the newsletter software. Your data will be transmitted to Newsletter2Go GmbH. Newsletter2Go is prohibited from selling your data and using it for purposes other than sending newsletters. Newsletter2Go is a German, certified provider, which was selected in accordance with the requirements of the General Data Protection Regulation and the Federal Data Protection Act.

You can find more information here: https://www.newsletter2go.de/informationen-newsletter-empfaenger/

 

§9 Opinion Monitor Artificial Intelligence

Purposes of processing and legal basis

We process your personal data to fulfill our research project “Opinion Monitor Artificial Intelligence” on the basis of Art. 6 (1) lit. f DSGVO (Legitimate Interest).

In doing so, we process your data that can be publicly accessed on the “Twitter” platform, including in particular your account name, name and behavior on the platform.

Account names and names of private accounts are only stored, evaluated and published anonymously.

Sharing of data (including recipients)

The research project is conducted together with the Heinrich Heine University Düsseldorf. The research results are published on our project page, available at https://www.cais-research.de/forschung/memoki/.

Storage period

The research results will be stored and made available to the public for an unlimited period of time. The underlying data for the evaluation will be deleted if further storage is no longer necessary to fulfill the research project.

 

§10 Science communication and press relations

Purposes of processing and legal basis

We process personal data of journalists for journalistic purposes, for the purpose of science communication and press work on the basis of Art. 6 para. 1 lit. f DSGVO (Legitimate Interest).

The processed data may thereby originate from publicly accessible sources, such as public press distribution lists or publicly retrievable data from social media platforms.

Disclosure of data (also recipients)

Your data will be processed and made available at the necessary points within the responsible body.

Storage period

Your data will be continuously corrected or deleted if necessary. Furthermore, your data will be deleted if storage is no longer necessary to fulfill the processing purposes.

 

§11 Applications

Purpose and legal basis of processing

We process your applicant data for the purpose of and as part of the application process and to find a suitable position within the company in accordance with legal requirements. The processing of your data is carried out to fulfill our (pre)contractual obligations within the scope of the application procedure in accordance with Art. 6 para. 1 lit. b. DSGVO Art. 6 para. 1 lit. f. DSGVO insofar as the data processing becomes necessary for us, e.g. within the scope of legal procedures.

In this context, we only process the data provided by you. The necessary applicant data can be found in the respective job advertisements. This includes, for example, information on personal master data, contact data, background, qualifications and the documents belonging to the application, such as cover letter, resume and the certificates. In addition, you can sometimes and voluntarily provide us with additional information. By submitting the application to us, applicants consent to the processing of their data for the purposes of the application process in accordance with the nature and scope set out in this privacy policy. Insofar as special categories of personal data within the meaning of Art. 9 (1) DSGVO are voluntarily communicated within the scope of the application procedure, their processing is additionally carried out in accordance with Art. 9 (2) lit. b DSGVO (e.g. health data, such as severely disabled status or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 (1) DSGVO are requested from applicants as part of the application process, their processing is additionally carried out in accordance with Art. 9 (2) a DSGVO (e.g. health data, if this is necessary for the exercise of the profession).

Disclosure of data (recipients)

Your data will not be passed on to third parties. Furthermore, your data will only be processed and made available to the necessary bodies within the Responsible Body.

Storage period

The data provided by applicants may be further processed by us for the purposes of the employment relationship in the event of a successful application. Otherwise, if the application for a job offer is not successful, the applicants’ data will be deleted.

Applicants’ data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time. Subject to a justified withdrawal by the applicants, the deletion will take place after the expiry of a period of six months so that we can answer any follow-up questions about the application and satisfy our obligations to provide evidence under the Equal Treatment Act (AGG). Invoices for any reimbursement of travel expenses will be archived in accordance with tax law requirements.

 

§12 Registrations for events

Purposes of processing and legal basis

On our website, you have the option of registering for various events. In doing so, we process the data requested in the form for the purpose of planning, organizing and implementing the event on the basis of Art. 6 (1) lit. b DSGVO (fulfillment of a contract or pre-contractual measures) or on the basis of Art. 6 (1) lit. f DSGVO (legitimate interest).

Passing on of data (also recipients)

Your data will be processed and made available at the necessary points within the controller.

Your data may be passed on to partner companies, for example, in the case of events held jointly with them. In this case, however, you will be informed of this prior to registration.

Storage period

Your data will be deleted unless further storage is necessary to fulfill the processing purposes or legal retention periods.

Photo or video recordings during the event

If photographs or video recordings are made during the event, you will be informed of this by appropriate signs before entering the event rooms.

Status of the data protection declaration

The data protection declaration is adapted from time to time in order to be able to correspond to changes in the business process and the legal side. You will always find the latest status on the website.

 

§ 13 Whistleblower platform

Purposes of processing and legal basis

You have the option of reporting violations via our whistleblower platform. The processing is carried out for the purpose of processing your report and fulfilling our legal obligations on the basis of Art. 6 para. 1 lit. c GDPR in conjunction with the HinSchG.
We process the personal data provided by you.

Storage period

As a rule, the data will be deleted 3 years after the end of the procedure. In individual cases, a longer storage period may be necessary due to legal regulations.

Forwarding of data (including recipients)

Your data will be made available to the necessary departments within the responsible body.
It is possible that your data may be passed on for the purpose of measures resulting from the report (e.g. to law enforcement authorities, lawyers).

 

Status: January 2024