Privacy Policy

Data collection and data processing

Data protection information

The Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V. (MPG) takes the protection of your personal data very seriously. We process personal data gathered when visiting our websites in compliance with applicable data protection legislation. We neither publish your data nor transmit them to third parties on an unauthorized basis. In the following section, we explain which data we record when you visit one of our websites, and exactly how they are utilized:

A.   General information

Introduction

The website is operated by 1&1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. The operation of the website is governed by a so-called contract for commissioned data processing in accordance with the GDPR.

The technologies used are determined by 1&1 IONOS SE. We list the technologies known to us in our own privacy policy so that users of our websites have a better overview of the technologies and the way in which data is used/stored.

Information on data protection and the legal framework of 1&1 IONOS SE can be found under the following links:

https://www.ionos.de/terms-gtc/terms-privacy/

1.   Scope of data processing

As a matter of principle, we gather and utilize users' personal data only to the extent required to ensure the functioning of our website and of our contents and services. The gathering and utilization of our users' personal data normally occurs after users have granted their consent. An exception occurs where data processing is legally permitted.

2.   Legal basis of data processing

To the extent that permission of the affected individual is obtained for the processing of personal data, Article 6 (1) lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

In the processing of personal data to fulfil a contract whose contractual party is the individual affected, Article 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing required to implement pre-contractual measures.

If processing is required to safeguard the justified interest of the MPG or a third party and the interests, basic rights and basic freedoms of the affected individual do not outweigh the first-mentioned interest, Article 6 (1) lit. f GDPR serves as the basis for such processing.

3.   Data deletion and storage duration

The affected individual's personal data are deleted or blocked as soon as the purpose of the storage ceases to apply. Storage can also occur if provided for by European or national legislators in EU regulations, acts or other legislation to which the MPG is subject. A blocking or deletion of data then occurs only if a storage period prescribed by one of the aforementioned norms expires, unless a necessity exists in relation to the further storage of the data for the arrangement of a contract or the fulfilment of a contract.

4.   Contact details of the individuals responsible

The entity responsible in the meaning of the General Data Protection Regulation and other national data protection acts as well as other data protection legislation is the

Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V. (MPG)
Hofgartenstrasse 8
D-80539 Munich
Telephone: +49 (89) 2108-0 
Contact form: https://www.mpg.de/kontakt/anfragen
Internet: https://www.mpg.de

5.   Data Protection Manager's contact details

The Data Protection Manager at the entity responsible is 

Heidi Schuster 
Hofgartenstrasse 8 
D-80539 Munich 
Telephone: +49 (89) 2108-1554
datenschutz@mpg.de

B. Provision of the website and web hosting

We process users' data in order to provide them with our online services. For this purpose, we process the user's IP address, which is necessary to transmit the content and functions of our online services to the user's browser or end device.

• Processed data types: Usage data (e.g. websites visited, interest in content, access times); meta, communication and procedural data (e.g. IP addresses, time data, identification numbers, consent status).
• Data subjects: Users (e.g. website visitors, users of online services).
• Purposes of processing: Provision of our online offer and user-friendliness; information technology infrastructure (operation and provision of information systems and technical devices (computers, servers, etc.)); security measures; provision of contractual services and fulfilment of contractual obligations.
• Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

Further information on processing operations, procedures and services:

• Provision of online offer on rented storage space:  For the provision of our online offer, we use storage space, computing capacity and software that we rent or otherwise obtain from a corresponding server provider (also called "web host"); Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR);
• Collection of access data and log files: Access to our online offering is logged in the form of so-called "server log files". The server log files may include the address and name of the web pages and files accessed, date and time of access, data volumes transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider. The server log files may be used for security purposes, e.g. to prevent server overload (especially in the event of abusive attacks, so-called DDoS attacks) and to ensure server utilisation and stability; legal basis: legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); deletion of data: Log file information is stored for a maximum of 30 days and then deleted or anonymised. Data whose further storage is required for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified.
• 1&1 IONOS: Services in the field of the provision of information technology infrastructure and related services (e.g. storage space and/or computing capacities); Service provider: 1&1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany; Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Website: https://www.ionos.de; Privacy Policy: https://www.ionos.de/terms-gtc/terms-privacy; Data processing agreement: https://www.ionos.de/hilfe/datenschutz/allgemeine-informationen-zur-datenschutz-grundverordnung-dsgvo/auftragsverarbeitung/.

C.   Web analysis

IONOS stores data from website visitors.

Processing by WebAnalytics takes place.

What technologies does IONOS use to collect the data?

The data is determined either by a pixel or by a log file. To protect personal data, WebAnalytics does not use cookies.

The visitor's IP is transmitted when a page request is sent, anonymised directly after transmission and processed without personal reference.

What data does IONOS store about website visitors?

IONOS does not store any personal data of website visitors so that no conclusions can be drawn about individual visitors. The following data is collected:

• Referrer (previously visited website)
• Requested web page or file
• Browser type and browser version
• Operating system used
• Device type used
• Time of access
• IP address in anonymised form (only used to determine the location of access)

For what purpose is the data collected?

In WebAnalytics, data is collected exclusively for statistical evaluation and technical optimisation of the website.

Is data passed on to third parties?

No data is passed on to third parties.

D.   Use of cookies 

1&1 IONOS MyWebsite (details on using the 1&1 IONOS Homepage Builder)

Technically necessary cookies are used as standard. In addition, MyWebsite uses tracking cookies based on Snowplow Analytics technology. This tool does not collect any personal data and is used by 1&1 IONOS exclusively to improve the product offering.

Website visitor data is processed by WebAnalytics.

J. YouTube Terms of Use 

We embed YouTube videos on our pages. YouTube's terms of use can be accessed via the following link: https://www.youtube.com/static?template=terms

K.   Rights of individuals affected

As a data subject whose personal data is collected in the context of the above-mentioned services, you generally have the following rights, unless statutory exceptions apply in individual cases:

• Information (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 (1) GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to the processing (Art. 21 GDPR)
• Withdrawal of consent (Art. 7 (3) GDPR)
• Right to lodge a complaint with the supervisory authority (Art. 77 GDPR). For MPG, this is the Bavarian State Office for Data Protection Supervision, P.O. Box 1349, 91504 Ansbach.