Data Protection

Privacy Notice

As you use this website, personal data about you will be processed by us as the data controller and stored for as long as necessary to fulfill the specified purposes and legal obligations. Below, we inform you about the types of data involved, how they are processed, and what rights you have in this regard.

Personal data, as defined in Art. 4 No. 1 of the General Data Protection Regulation (GDPR), refers to any information relating to an identified or identifiable natural person.

Giggenhauser Str. 35

85354 Freising

When you access our website and retrieve its content, temporary data is stored that may allow identification. The browser used on your device automatically sends the information to the server of our website. The following data is collected:

• Date and time of access
• IP address
• Hostname of the accessing server
• Website from which our website was accessed
• Visited page on our website
• Notification of whether the access was successful
• Volume of data transferred
• Information about the browser type and version used
• Operating system

The temporary storage of data is necessary for establishing the connection and the course of a website visit so that we can provide you with the content on our website.

Further storage in log files occurs to ensure the functionality of the website, the security of the information technology systems, and to enable the uninterrupted provision of our website as well as to track any unlawful attacks if necessary.

If technical data from your device is processed to enable access to our website, this is done because such data is required in accordance with § 25 para. 1 no. 2 TDDDG.

The processing of the IP address is for technical and administrative purposes, for connection establishment and stability, to ensure the security and functionality of our website, and to track any unlawful attacks if necessary. The legal basis is our legitimate interest according to Art. 6 para. 1 lit. f GDPR.

From the processing of the mentioned data in the log file, we cannot draw any direct conclusions about your identity. This is temporarily stored in a so-called log file and deleted after 30 Tage days .

Furthermore, when visiting our website, we may use cookies and analytics services. If this is the case, you will receive further explanations about this in the privacy notice below.

We regularly offer events of various kinds on our website for which you can register online.

As part of the registration for an event, certain mandatory information must be provided. These typically include:

• First and last name
• Address
• E-mail address
• Payment information (only for paid events and depending on the payment method you have selected)

Any additional mandatory information is marked as such (e.g., with *). Furthermore, additional information can often be provided voluntarily.

The processing of mandatory information is carried out in order to identify you as a participant in the event, to reserve your participation spot, and to establish or execute the contract for participation with you, as well as to provide you with information about the event before, during, and after the event to enable optimal participation and to allow us to plan and ensure a smooth process. If we collect your payment information for paid events, we need this for billing the participation fee. Providing voluntary data allows us to plan and conduct the event in line with interests.

Data processing occurs at your request and is necessary for fulfilling the participant contract and for pre-contractual measures in accordance with Art. 6 Abs. 1 S. 1 lit. b DSGVO for the stated purposes.

The personal data we collect for the event will be stored by us for a period of 6 months, unless you have consented to a longer storage period in accordance with Art. 6 Abs. 1 S. 1 lit. a DSGVO.

In the context of event registration through our web forms, we work with the service provider Schönherrstraße 8/Gebäude 10d, 09113 Chemnitz ("Mailingwork"). The purpose of the collaboration is the professional management of online registrations. The entered data is stored on the servers of Mailingwork in Germany.

We have concluded a data processing agreement with Mailingwork. Through this agreement, Mailingwork assures that they process the data on our behalf in accordance with the General Data Protection Regulation and ensure the protection of the rights of the affected individuals.

To document the event visually, photos and videos will be taken. It cannot be ruled out that you may be identified directly or indirectly in the recordings, making it personal data.

The recordings are created for Fraunhofer and used for news directly related to the event and for internal and external reporting by and through Fraunhofer.

Furthermore, the recordings will be published for follow-up reporting on our media platforms such as LinkedIn, Youtube, Webseite www.ivv.fraunhofer.de, Intranet des Fraunhofer IVV or our website. This processing is particularly necessary to document our event and promote future events.

The data processing is based on Art. 6 Abs. 1 S. 1 lit. f DSGVO. The stated purposes are legitimate interests within the meaning of the mentioned regulation.

The recordings will be stored for .

If you have explicitly consented in accordance with Art. 6 Abs. 1 S. 1 lit. a DSGVO, we will use your e-mail address to regularly send you selected information that informs you about the work at our institute and/or other institutions and/or events of the Fraunhofer Society. The topics and contents of the selected information are determined by the distribution list you have signed up for.

For receiving the newsletter, we collect the following mandatory information:

• E-mail address.
• Title
• First name,
• Last name,

We need your name and title to personally address you in our newsletter.

You can voluntarily provide additional information about yourself (e.g., address and phone number). We use this data to contact you by phone or post (e.g., for press invitations).

After your registration, you will receive a registration notification by e-mail, which you must confirm to receive the newsletter (so-called Double Opt-In). This serves as proof that the registration was indeed initiated by you.

Unsubscribing is possible at any time, e.g., via a link at the end of each newsletter. Alternatively, you can also send your unsubscribe request at any time to dsgvo@ivv.fraunhofer.de via e-mail or unsubscribe via the following link: https://www.fraunhofer.de/de/fraunhofer-newsletter-abmeldung.html.

Your e-mail address will be deleted immediately after you withdraw your consent to receive the newsletter.

We send our newsletter using the provider Schönherrstraße 8/Gebäude 10d, 09113 Chemnitz ("Mailingwork"). The e-mail addresses of our newsletter recipients are stored on the servers of Mailingwork in Germany on our behalf.

Mailingwork uses this information to send and evaluate the newsletters on our behalf. We have signed a data processing agreement with Mailingwork for this purpose. Through this agreement, Mailingwork assures that they process the data in accordance with the General Data Protection Regulation and ensure the protection of the rights of the affected individuals.

Mailingwork assures that personal data is comprehensively protected against unauthorized access. Mailingwork does not use the data of our newsletter recipients to contact them directly or pass the data on to third parties. As a reputable e-mail sender, Mailingwork is also certified by the Certified Senders Alliance.

We offer you the opportunity to contact us via a form provided on the website. The following information is required:

• Title,
• First and last name, and
• Email address.

We need your data to determine who the inquiry is from and to respond to and process it.

The data processing is carried out at your request and is based on our legitimate interests in answering a contact inquiry according to Art. 6 Abs. 1 S. 1 lit. f GDPR.

The personal data we collect for using the contact form will be deleted after we have completed your inquiry.

If we pass on personal data collected through the website to processors, we will inform you about this in this privacy notice for each data processing procedure, naming the specific recipient.

Otherwise, we will only share your personal data if

• you have given your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR;
• this is necessary for the fulfillment of a contract with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR (for example, when passing on data to shipping companies for the purpose of delivering the goods you have ordered or when passing on payment data to payment service providers or credit institutions to carry out a payment transaction);
• there is a legal obligation for the transfer in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR.

The data passed on may only be used by the recipients for the stated purposes.

5 Web Analysis/Tracking

LeadLab (Wiredminds GmbH)

We integrate components (videos) from the video portal YouTube of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google") on our websites. The implementation is based on Art. 6 Abs. 1 S. 1 lit. f GDPR, with our interest being the smooth integration of the videos and the appealing design of our website.

The integration is done using a solution that prevents a connection to Google from being established just because you visit a page with an embedded video without activating the video. This means that information is only transmitted to Google when you click on the video to watch it.

Information is sometimes transmitted to the parent company Google Inc., based in the USA, to other Google companies, and to external partners of Google, which may be located outside the European Union. Google uses standard contractual clauses approved by the European Commission and relies on adequacy decisions issued by the European Commission regarding certain countries.

For more information on data protection in connection with YouTube, please refer to Google's privacy policy at https://policies.google.com/privacy/.

You have the right to:

• According to Article 7(3) of the GDPR, withdraw your consent at any time. This means that we may no longer continue processing the data based on that consent in the future;
• According to Article 15 of the GDPR, request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been disclosed or will be disclosed, the planned storage duration, the existence of the right to rectification, erasure, restriction of processing, or objection, the existence of a right to lodge a complaint, the origin of your data, if not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
• According to Article 16 of the GDPR, request the immediate rectification of inaccurate or completion of your personal data stored with us;
• According to Article 17 of the GDPR, request the erasure of your personal data stored with us, unless processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
• According to Article 18 of the GDPR, request the restriction of processing of your personal data, as long as you contest the accuracy of the data, processing is unlawful, but you oppose erasure, and we no longer need the data, but you need it for the establishment, exercise, or defense of legal claims or you have objected to processing according to Article 21 of the GDPR;
• According to Article 20 of the GDPR, receive your personal data provided to us in a structured, commonly used, and machine-readable format or request the transfer to another controller;
• According to Article 77 of the GDPR, lodge a complaint with a supervisory authority. In general, you can contact the supervisory authority of your usual residence or workplace or our association's registered office for this purpose.

All your personal data are transmitted in encrypted format, using the widely used and secure TLS (Transport Layer Security) standard. TLS is a secure and proven standard that is also used, for instance, in online banking. You will recognize a secure TLS connection by the additional s after http (i.e., https://...) in the address bar of your browser or by the lock icon in the bottom part of your browser window.

In all other regards, we use suitable technical and organizational security measures to protect your data against accidental or intentional manipulations, partial or complete loss, destruction, or the unauthorized access of third parties. We continuously improve our security measures in accordance with the state of the art.

The further development of our website and the products and services offered or changed due to statutory or regulatory requirements, respectively, may make it necessary to amend this data protection information. You may access and print out the latest data protection information at any time from our website.