Short Version
In general, our website can be used anonymously. The provision of personal data is purely voluntary and you will always be informed if and for what purpose we want to save your data. Personal data is the data that allows us to identify you and/or to contact you. This includes your name, your postal address or email address.
In Detail
Who we are and how you can reach us
The responsible party for the processing of personal data on this website is:
Hasso Plattner Institute for Digital Engineering gGmbH
Campus Griebnitzsee
Prof.-Dr.-Helmert-Str. 2-3
Phone: +49 (0)331 5509-0
Telefax: +49 (0)331 5509-129
Email: hpi-info(at)hpi.de
You may contact our data protection officer at:
Data Protection Officer, Hasso Plattner Institute for Digital Engineering gGmbH
Prof.-Dr.-Helmert-Str. 2-3
14482 Potsdam
Germany
Email: datenschutz(at)hpi.de
Which data we do (not) process, for what purpose, how long, and on what legal basis
Anonymous use of our website
You can use our website anonymously. When you visit our website, your web browser will tell our web server your IP address to make communication possible. It may be possible to identify you via your IP address.
Each time you access the Internet offer of the Hasso Plattner Institute for Digital Engineering gGmbH, the following data is stored in the server log files:
- Name of the retrieved file
- Date and time of retrieval
- Volume of data transferred
- Notification of whether the retrieval was successful
- IP address (in abbreviated form so that you are not identifiable)
- The web address from which the file was accessed (referrer URL)
- Information about the operating system and browser (user agent string)
You remain completely anonymous to us when you visit our website. This anonymous data is evaluated for statistical purposes only.
Logging and evaluation in case of attacks
Error messages—which as a rule are the result of attempted attacks—are recorded and evaluated with a complete IP address for security reasons. If no longer needed (for example, as evidence), this data will be deleted after seven days.
The legal basis for data processing is Art. 6 para. 1 subpara. 1 letter f GDPR. Legitimate interests in processing on the basis of Art. 6 para. 1 subpara. 1 letter f GDPR are to ensure the functionality and security of our website and to ward off attacks and other abuses.
Usage statistics with Google Analytics
This website uses the web analytics service Google Analytics. Google Analytics uses so-called “cookies”. Cookies are text files that are stored on your computer and allow an analysis of how you use our website. The information generated by the cookie about your use of this website is stored on our server. The IP address is anonymized before storage. The aim of processing is to improve our website and our offer, so we can better satisfy users’ needs.
The information generated by the cookie about the use of our website will not be disclosed to third parties. You can prevent the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
If you wish to prevent the collection and storage of your data, you can disable the use of such data. In this case, an opt-out cookie is deposited in your browser that prevents Google Analytics from storing usage data. By deleting your cookies, the Google Analytics opt-out cookie will be deleted as well. The opt-out must be reactivated when visiting our site again.
The legal basis for data processing is Art. 6 para. 1
https://marketingplatform.google.com/about/analytics/terms/us/
Google Fonts
Our website uses Google Fonts to display external fonts. This is a service provided by Google Inc., Gordon House, Barrow Street, Dublin 4, Irland (hereinafter: Google).
Through certification according to the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google guarantees that it will follow the EU’s data protection regulations when processing data in the United States.
To enable the display of certain fonts on our website, a connection to the Google server in the USA is established whenever our website is accessed.
The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the optimization and economic operation of our site.
When you access our site, a connection to Google is established from which Google can identify the site from which your request has been sent and to which IP address the fonts are being transmitted for display.
Google offers detailed information at https://adssettings.google.com/authenticated & https://policies.google.com/privacy in particular on options for preventing the use of data.
Data processing in connection with general contact
If you call us or send us a message, for example via the contact form or by email, we need your email address, your postal address or your telephone number to provide you an answer. Instead of your name, you may use a pseudonym. We will only use this information, as well as date and time of your contact, to process your request. Your data will not be passed on to third parties by us, but only used internally by the department that is responsible for your concern. We will delete your data as soon as it is no longer needed for this purpose. As a rule, this is three months after your last contact with us. If you should have any questions, please notify us again within this three month period. The legal basis for the processing of data are Art. 6 para. 1 subpara. 1 letters b and f GDPR. The legitimate interests in processing on the basis of Art. 6 para. 1 subpara. 1 letter f GDPR is to fulfill your request.
Exceptions: We are required to store business and commercial letters and other tax-relevant documents in order to fulfill the commercial and tax law archiving obligations. We will delete these documents by the 31st of March of the seventh calender year following their creation and, in the case of accounting receipts, the eleventh calender year following their creation. Our accounting department has access to these data. The legal basis for the tax law retention is Art. 6 para. 1 subpara. 1 letter c GDPR in connection with §§ 147 AO, 257 HGB.
If your request is for a specific purpose (e.g., registration, request for a quotation, subscribing to the newsletter), only the explanations in the relevant section for that particular purpose apply to the processing of data.
Voluntary provision of your data
You are not required to provide personal information to us. However, by not providing us with certain information (for example, how to contact you if you would like an answer from us), it is possible that we will be unable to complete your request. In the context of special procedures (for example, when you register for an event or our newsletter), you may again be required to provide us with certain information. Without this data we may not, for example, be able to process your registration or send you our newsletter. You will be expressly informed if this should be the case.
Recipients of your data
Generally, your personal data remains within our area of responsibility, except in special cases (e.g., co-operative events), in which we will then explicitly inform you to whom your data will be sent. If compelling circumstances arise, it may be necessary to pass on your data to external consultants, for example to lawyers in the case of legal disputes (legal basis Art. 6 para. 1 subpara. 1 letter f GDPR; purpose and legitimate interest: the exercising, defending or asserting of legal rights). Our administrators have the possibility to access data processed by our IT department, if this should be necessary. Our data protection officer has extensive rights of control, accorded by Art. 37, 38 GDPR, and therefore access to personal data (legal basis Art. 6 para. 1 subpara. 1 letter c in conjunction with Art. 37, 38 GDPR). Further recipients of your data are listed in the notes on the respective data processing. In certain cases, we may need to disclose your personal information to third parties so that you can receive the service you want; this means to vicarious agents, for example banks and other payment service providers or to postal service providers. In certain areas, such as web hosting and email hosting, we use specialized service providers. These providers are strictly bound by our instructions through an agreement on commissioned data processing and may not process the data for their own purposes. If in special cases (e.g., co-operative events with partners outside of the EU), your data will be transferred to third countries, we will inform you of this and, if required, also separately about the legal basis and level of data protection.
Automated decision-making, profiling
Your data will not be used for automated decision-making or profiling.
Your rights
Under the relevant legal requirements, you have the right to receive information about your data, the right to have such data corrected or deleted, the right to the restriction of processing, the right to object to processing, and the right to data transferability. In particular, you have the right to object to the processing of your data for advertising purposes at any time without incurring costs other than the transmission costs, according to the rates of your provider (e.g., the costs of an email=usually none). This applies, for example, if you have registered for an event and do not wish to be informed about similar events. If the data processing is based on consent, you have the right to revoke your consent at any time without this affecting the legality of the processing being carried out on the basis of consent to revocation or processing on any other legal basis. If you want to exercise these rights, you can simply write to datenschutz(at)hpi.de or click on the unsubscribe link in any email newsletter to unsubscribe. If we call you, you can also communicate this to us directly.
You also have the right to complain to a data protection supervisory authority about our processing of your personal data, for example to the supervisory authority whom we answer to: Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Tel: +49 (0)33203 356-0, Fax: +49 (0)33203 356-49, Email: poststelle(at)lda.brandenburg.de.
If you have questions or requests regarding data protection, you can contact us at any time. Your contact is: datenschutz(at)hpi.de.
Your right to object to data processing
Insofar as the processing of your personal data is based on Art. 6 para. 1 subpara. 1 letter e or f GDPR, you have the right to object to processing in accordance with Art. 21 GDPR. If your objection is made for reasons arising from your particular situation, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or for the establishment, exercise of defense against legal claims. If your opposition is directed against direct marketing, including profiling, insofar as it is connected with such direct mail, we will no longer process your personal data for these purposes.
Version: 2019-10-02