Person responsible

The person responsible for the collection and processing of personal data within the meaning of the General Data Protection Regulation and national data protection laws, as well as other data protection regulations, is:

Prof. Dr. Reinhold Förster
Hannover Medical School
Carl-Neuberg-Straße 1
30625 Hannover

Telefon: +49 511 532-4107
E-Mail: RESIST@mh-hannover.de
Internet: https://www.resist-cluster.de

Data protection officer of the Hannover Medical School

Data protection officer – OE 0007
Hannover Medical School
Carl-Neuberg-Straße 1
30625 Hannover

E-Mail: datenschutz@mh-hannover.de
Internet: https://www.resist-cluster.de

General information on data processing

We only collect and use our users‘ personal data to the extent necessary to provide a functional website and our content and services. The collection and use of our users’ personal data takes place regularly only with the user’s consent. Exceptionally, this is not the case if prior consent cannot be obtained for practical reasons and the processing is authorised by law. If consent is to be obtained, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) is the relevant legal basis. If the processing of personal data is necessary for the performance of a contract, the legal basis is Art. 6 (1) (b) GDPR. Art. 6 para. 1 lit. d DSGVO is to be used as the legal basis should this be necessary for the vital interests of the data subject or another natural person. On the other hand, Art. 6 para. 1 lit. f DSGVO is applicable if the processing of personal data is necessary to safeguard the legitimate interests of the practice or third parties and this outweighs the interests, fundamental rights and freedoms of the data subject.

Personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Further storage may take place if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. In this case, too, the data will be deleted or blocked when a storage period provided for this purpose expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

Logfiles

When you visit our website, our system automatically collects information and data that your browser automatically transmits to us. This is the following data:

  • IP address
  • Information about browser type and browser version
  • The user’s operating system
  • The user’s internet service provider
  • The date and time of the server request
  • Websites from which the user’s system accesses our website
  • Websites that are accessed by the user’s system via our website
  • This data is not stored together with other personal data of the user.

The legal basis for the temporary storage of data (and log files) is Art. 6 para. 1 lit. f GDPR. The data is deleted as soon as it is no longer required to achieve the purpose of its collection, which is to enable the website to be delivered to the user’s computer.
The collection of data for the provision of the website and the storage of data in log files is essential for the operation and use of the website. Therefore, there is no right of objection on the part of the user.

Cookies

Our website partly uses so-called cookies. Cookies do not harm the user’s computer and do not contain viruses. They serve to make our offer more user-friendly and secure. Cookies are text files that are stored on the user’s computer and saved by the browser. These cookies enable us to recognise the browser the next time you visit. Each user can set their browser so that they are informed when cookies are set and only allow cookies in individual cases, accept cookies for certain cases or generally exclude them and activate the automatic deletion of cookies when closing the browser. If you disable cookies, the functionality of this website may be limited. The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR.

Contact form and e-mail contact

If you send us enquiries using the contact form, your details from the enquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. By using the contact form, you expressly consent to this processing. We will not pass on the collected data without your consent. The data will be deleted as soon as it is no longer required for the purpose for which it was collected. This is the case when it is clear from all the circumstances that the matter in question has been conclusively clarified. The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR, as you have consented to the data processing.

If you contact us by email, the user’s personal data transmitted with the email will be stored. In this context, too, there is no disclosure to third parties. The data is used exclusively for the purposes of the conversation.

You have the right to withdraw your consent to the processing of the personal data collected at any time. To do so, please contact us at the address given in the imprint. In such a case, the conversation cannot be continued.

SSL encryption

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as site operators via the contact form. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and by the lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

Social media websites

This privacy policy applies to the Bluesky account of the RESIST Cluster of Excellence and thus to the following Bluesky presence: https://bsky.app/profile/resist-cluster.bsky.social

Responsible party: If you visit our social media presence at Bluesky, we are jointly responsible with the operator of this social media platform for the data processing operations triggered during this visit.

Joint controllers for data processing directly related to the social media account of Schule & Beruf Berlin e.V. on Bluesky are

and

Please note that, despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective providers.

Purpose of processing: The operation of our publicly accessible Bluesky page serves to provide sustainable and transparent information and communication with participants, network partners, former participants and employees as well as our public relations work.

Processing of personal data by Bluesky: RESIST uses the technical platform and services of Bluesky PBLLC, Seattle, WA, USA, for the short message service. Bluesky is a decentralised service consisting of a large number of servers (“bluesky instances”) operated by private individuals or organisations. Our account is located on the bluesky instance “bluesky.social”, which is operated by the Bluesky PBLCC.

We would like to point out that you use the Bluesky short message service offered here at your own risk. This applies in particular to the use of the interactive functions (e.g. sharing, rating). Alternatively, you can also access the information offered on this page via our homepage at https://www.resist-cluster.de/news-events/nachrichten-uebersicht

The data collected about you when you use the service is processed by Bluesky PCLLC and your personal data is forwarded to the USA. This is based on a certification of Bluesky, PBLLC under the EU-US Data Privacy Framework (DPF) adequacy decision pursuant to Art. 45 GDPR. We have no influence on the type and scope of the data processed by Bluesky, the type of processing and use or the transfer of this data to third parties. Information on what data is processed by Bluesky and for what purposes can be found in Bluesky’s privacy policy: https://blueskyweb.xyz/support/privacy-policy. As the provider of the information service, we do not collect or process any other data from your use of our short message service.

Further information on social networks and how you can protect your data can also be found at: https://www.youngdata.de

Legal basis for data processing: The processing of your data when contacting or interacting with our Bluesky page or its content is carried out by us on the basis of Art. 6 para. 1 lit. f) GDPR.

Rights of data subjects

1. Right of access

You have the right at any time to request information about whether we are processing personal data and for what purpose.

2. Right to rectification

You have the right to request that the data be rectified and/or completed if the personal data processed is inaccurate or incomplete.

3. Right to erasure

You have the right to request the immediate deletion of personal data concerning you.

4. Notification obligation

You will be notified of any rectification, erasure or restriction of the processing of personal data, unless this is impossible or involves a disproportionate effort.

5. Data portability

You have the right to receive the personal data concerning you, which you have provided, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from us.

6. Right to restriction of processing

Any person affected by the processing of personal data has the right to demand that the controller restrict the processing if one of the following conditions is met:

  • the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data,
  • the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
  • the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims, or
  • the data subject has objected to processing pursuant to Article 21(1) of the GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.

7. Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions. The controller will no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

8. Right to withdraw consent

You have the right to revoke your consent to the collection and processing of personal data at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

9. Right to complain to a supervisory authority

You have the right to complain to a supervisory authority if you believe that the processing of personal data concerning you is in breach of the GDPR.

10. Exercising your rights

If you wish to exercise any of the above rights, please contact the controller named in this privacy policy at the address provided.