Data Protection Policy
Copyright © by Fraunhofer-Gesellschaft. All rights reserved.
All copyright for this website is owned in full by the Fraunhofer-Gesellschaft.
Permission is granted to download or print material published on this site for personal use only. Any other use beyond this, particularly its commercial use or distribution, is generally not permitted and requires written approval.
Please send your enquiries to the following address:
Institutsteil Angewandte Systemtechnik des Fraunhofer IOSB
Am Vogelherd 50
The use is free of charge.
We do not assume any liability for the content of external links. The operators of the linked pages are solely responsible for their content. We make every reasonable effort to ensure the content of this web site is always up to date, accurate, and complete.
Nevertheless, the possibility of errors cannot be entirely ruled out. The Fraunhofer Institute and accordingly the Fraunhofer-Gesellschaft do not assume liability for topicality, accuracy, or completeness of the information provided on their website.
This refers to any material or non-material damage suffered by third parties as a result of using this website. Protected trademarks and names, as well as images and texts are generally not identified on our website as such. However, the absence of such identification by no means implies that it is a free name, image or text in the sense of trademark law.
WEB TRACKING / WEB ANALYSIS
1. Description and scope of data processing
The Fraunhofer-Gesellschaft uses the web analysis tool “Matomo“ (formerly Piwik) to optimise their website. We use Matomo without deploying its tracking cookies. In order to ensure a particularly data protection-friendly procedure, we have deactivated the use of tracking cookies provided for in the basic configuration of Matomo.
The following data is stored by using Matomo:
• 1 byte of the IP address of the users' calling system
• Time and duration of the visit
• Pages and files accessed during the visit
• The website from which users accessed the website in question (referrer)
• Search terms used by users to access the website and search terms used in internal searches
• Calling of external websites, which are called up via links on our website
• Users’ system information (operating system, browser, browser language, device type, screen resolution)
Matomo runs solely on our servers. The data collected during a website visit is stored only there. IP addresses are immediately anonymised, making the identification of visitors impossible. The anonymous statistical data is stored separately from any personal data you may have provided on the website and does not allow any conclusions to be drawn about a specific person.
2. Legal basis for data processing
The legal basis for the processing of the aforementioned data is Art. 6 para. 1 lit. e GDPR in conjunction with § 3 BDSG.
3. Purpose of data processing
The processing of the abovementioned data enables us to analyse the surfing behaviour of users on our website. By evaluating the data obtained, we can compile information about the use of the individual components of our website. This enables us to continuously improve the content and user-friendliness of our website so that users can access the information they need quickly and efficiently. Furthermore, the necessity of designing the website according to needs also follows from the obligation to use budget funds economically for public bodies within the framework of their statutory tasks.
By anonymising the IP address, the users' interest in the protection of their personal data is adequately taken into account. The Fraunhofer-Gesellschaft uses the web tracking tool "Piwik" to optimise their website. Piwik is used in compliance with data protection regulations following the recommendations of the Independent Centre for Data Protection in Schleswig-Holstein (ULD). The IP addresses are immediately anonymised by Piwik, making it impossible to identify visitors. The anonymous statistical data is stored separately from any personal data you may have provided and does not allow any conclusions to be drawn about a specific person.
4. Duration of storage
The anonymous log data is deleted as soon as it is no longer required for our recording purposes. This is the case after 90 days. Subsequently, just the reports generated from it are processed.
5. Possibility of objection and removal
Here you are given the option to object to the recording of your visit for analysis purposes (opt-out). This sets a cookie in your browser, which signals to our systems not to save the data of your visit to our site (see list under point VI 1.):
In addition, the Frauenhofer-Gesellschaft has activated the "Do not track" function in their Matomo installation. If your browser supports this function and you have activated the function in the browser settings, no data is collected by Matomo.
6. USE OF YOUTUBE VIDEOS
We embed YouTube videos on our website using YouTube's embedding function. YouTube is a service offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google LLC, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.
Every time this website is accessed, a connection to the Google network "DoubleClick" is established. This happens independently of a playback of the embedded videos. This may trigger further data processing operations over which we have no control.
You can find more information on data protection at "YouTube" in the provider's data protection statement at: www.google.de/intl/de/policies/privacy
7. RIGHTS OF THE DATA SUBJECT
We will gladly inform you about your rights under the GDPR as a "data subject". In accordance to the personal data concerning you, you are entitled to the following rights:
- Right to information (Art. 15 (1), (2) GDPR).
- Right to rectification (Art. 16 GDPR) or deletion (Art. 17 GDPR)
- Right to restriction of processing ("blocking", Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right of withdrawal (Art. 7(3) GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
In addition to this, a summary of the key points of the data subject rights under the GDPR is provided below, however, without any claim to completeness, but merely addressing the main features of the data subject rights under the GDPR:
1. Right of Access
You may request confirmation from the controller as to whether personal data relating to you is being processed by us. If such processing is taking place, you may request information from the controller about the following:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data which are processed;
(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
(4) the envisaged storage duration of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
(5) the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller, or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) any available information on the origin of the data if the personal data are not collected from the data subject;
2. Right to Rectification
According to Art. 16 GDPR, you have the right to rectification and/or completion vis-à-vis the controller if the personal data processed concerning you is inaccurate or incomplete.
3. Right to Erasure
Under the conditions of Article 17 of the GDPR, you may request the controller to erase the personal data concerning you without undue delay, and the controller is obliged to erase such data without undue delay, provided that one of the following reasons applies:
(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You withdraw your consent on which the processing was based pursuant to Art. 6 (1) a or Art. 9 (2) a GDPR and there is no other legal basis for the processing.
(3) You object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.
(4) The personal data concerning you have been processed unlawfully.
(5) The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
(6) The personal data concerning you have been collected in relation to information society services offered in accordance with Article 8(1) of the GDPR.
4. Restriction of Processing ("blocking")
Under the conditions of Art. 18 GDPR, you may request the restriction of the processing of personal data concerning you:
Where the processing of personal data concerning you has been restricted, such data may - apart from being stored - only be processed with your consent or to assert, exercise, or defend legal claims, or protect the rights of another natural or legal person, or for reasons of substantial public interest of the Union or a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.
5. Right to Data Portability
According to Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to the controller in a structured, common and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, on condition that
(1) the processing is based on consent under Art. 6 paragraph 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 paragraph 1 lit. b GDPR and
(2) the processing is carried out with the aid of automated procedures.
In exercising this right, you also have the right to have the personal data concerning you transferred directly from one controller to another controller, insofar as this is technically feasible. This must not affect the freedoms and rights of other persons.
The right to data portability does not apply to the processing of personal data necessary to perform a task carried out in the public interest or in the exercise of official authority vested in the controller.
6. Right to Object
Under the conditions of Art. 21 GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, which is carried out on the basis of Art. 6(1)(e) GDPR; this also applies to profiling based on these provisions.
The controller shall no longer process the personal data concerning you unless they can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the purpose of asserting, exercising, or defending legal claims.
In connection with the use of information society services – irrespective of Directive 2002/58/EC – you are provided with the possibility to exercise your right to object by means of automated procedures involving technical specifications regarding the right to withdraw the declaration of consent under data protection law.
7. Right of Withdrawal
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
8. Right to Complain to a Supervisory Authority
Notwithstanding any other administrative or judicial remedy, you have the right under Article 77 GDPR to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.