Contact details of the responsible body

Responsible within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the EU member states as well as other data protection regulations for the online offer „Blog“ is:

University of Hamburg
Mittelweg 177
20148 Hamburg
Germany
Tel.: +49 40 42838-0
Fax: +49 40 42838-9586

Contact details of the data protection officer of the University of Hamburg

Mittelweg 177
20148 Hamburg
E-mail: datenschutz(at)uni-hamburg.de

Objective and basic information on data processing

This privacy policy explains the nature, scope and purpose of the processing of personal data within our online offering and the websites, functions and content associated with it. The privacy policy applies regardless of the domains, systems, platforms and devices (e.g. desktop or mobile) on which the online offer is executed.

We process personal data of our users only in compliance with the relevant data protection provisions in accordance with the principles of data economy and data avoidance. It follows that the processing of personal data of our users regularly takes place only after the consent of the user. An exception applies in those cases in which the processing of the data is permitted by legal regulations.

We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of data protection laws are complied with and thus to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.

If content, tools or other means of third-party providers (e.g. YouTube videos) are used within the scope of our online offer and their named registered office is abroad, it is to be assumed that a data transfer to the registered office states of the third-party providers takes place.

Definitions

For the purposes of this Privacy Policy, the term:

„User“ means all customers and visitors to our Website, which term shall be understood to be gender-neutral;

  • „Website or Online Offer“ means, on an overarching basis, the content and functions contained on our Website and connected to the Website;
  • „Third-party providers“ other providers that are different from us, whose content, tools or other means we use as part of our online offering and whose named registered office may be abroad. For example, video platforms such as YouTube are to be mentioned here.

Data processing

1. Provision of the blog and creation of logfiles

With every call and every use of this blog, data and information are collected. This data and information is stored in log files of the server.

Captured:

  • IP address
  • Information about the browser type and version used
  • Date and time of access
  • Internet service provider of the user
  • Operating system of the user
  • Websites from which the user’s system accesses our website
  • Web pages that are called up by the user’s system via our website

The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f DSGVO.

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

Log files are stored to ensure the functionality of the website, to optimize the content of the website and to ensure the security of our information technology systems.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

In the case of storage of data in log files, this is the case after 28 days at the latest. If the data is stored beyond this period, the IP addresses of the users are deleted or alienated so that it is no longer possible to assign the calling client.

The personal data will also be processed for the following purposes if there is a legal basis for doing so:

  • the provision, execution, maintenance, optimization and safeguarding of our services, services and user services;
  • ensuring effective customer service and technical support.

Disclosure of data to third parties

1. Social media

YouTube with enhanced privacy

Our website uses plugins of the website YouTube. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

We use YouTube in extended privacy mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the disclosure of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube – regardless of whether you watch a video – establishes a connection to the Google DoubleClick network.

As soon as you start a YouTube video on our website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, YouTube may store various cookies on your end device after starting a video. With the help of these cookies, YouTube can obtain information about visitors to our website.

This information is used, among other things, to collect video statistics, improve the user experience, and prevent fraud attempts. The cookies remain on your terminal device until you delete them.

If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no control.

YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

For more information about privacy at YouTube, please see their privacy policy at: https://policies.google.com/privacy?hl=de .

User rights

Users have the following rights:

  • Right to information about the data stored by us about the person (Art. 15 DSGVO);
  • Right to rectify inaccurate or incomplete personal data (Art. 16 DSGVO);
  • Right to erasure of stored personal data, unless processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims (Art. 17 DSGVO);
  • Right to restrict the processing of personal data (Art. 18 GDPR);
  • Right to object to processing which serves our legitimate interest, a public interest or profiling, unless we can demonstrate compelling legitimate grounds for the processing which override the user’s interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims (Art. 21 DSGVO); Consents given for the collection, processing and use of personal data may be revoked at any time with effect for the future (Art. 7 (3) DSGVO). This has the consequence that we may no longer continue the data processing based on this consent for the future.

To exercise these rights or in case of queries regarding the privacy policy, users may contact the following office:

[trr181.cen@uni-hamburg.de]

In addition, the user has the right to lodge a complaint with a supervisory authority if he or she believes that the processing of personal data concerning him or her violates the GDPR (Art. 77 GDPR). In Hamburg, this is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Str 22, 7th floor, 20459 Hamburg; e-mail: mailbox@datenschutz.hamburg.de

Changes to the privacy policy

We reserve the right to change this privacy policy as well as the underlying processing in order to adapt it to changed legal situations or in the event of changes in use, e.g. through expansion by means of plugins/tools in the blog. Insofar as user consent is required or components of the privacy policy contain provisions of the contractual relationship with the users, the changes will only be made with the consent of the users. Users are asked to inform themselves regularly about the content of the privacy policy.

(Status: 10.05.2021)