Personal data are processed by us only within the scope of necessity and for the purpose of providing a functional and user-friendly Internet presence, including its contents and the services offered there.
According to Art. 4 Item 1. The term “processing” of Regulation (EU) 2016/679, i.e. the Basic Data Protection Regulation (hereinafter referred to as “DSGVO”), shall mean any operation carried out with or without the aid of automated procedures or any such series of operations in connection with personal data, such as collection, recording, organisation, arrangement, storage, adaptation or modification, reading, retrieval, use, disclosure by transmission, dissemination or any other form of provision, comparison or linkage, restriction, deletion or destruction.
With the following data protection declaration, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide on the purposes and means of processing either alone or together with others. In addition, we will inform you below about the third-party components used by us for optimisation purposes and to increase the quality of use, insofar as third parties process data on their own responsibility.
Our privacy policy is structured as follows:
1. person in charge
2. data protection officer
3. General information on data processing
4. Data collection when visiting our website
5. Rights of data subjects
1. person responsible
The person responsible pursuant to Art. 4 para. 7 DSGVO and other national data protection laws of the member states of the European Union as well as other data protection regulations is the
German Rheumatism Research Center
Charitè Square 1
10117 Berlin
Phone +49 [0]30 Fax +49 [0]30 E-Mail info@drfz.de
2. data protection officer
For questions, suggestions or comments regarding data protection and the enforcement of your rights, please contact our data protection officer:
You can reach our data protection officer by post at
the above-mentioned address with the addition “Data Protection Officer” or via the
E-mail address: datenschutz@drfz.de
3. GeneralData Processing Information
The German Rheumatism Research Center takes the protection of personal data very seriously. We have taken technical and organisational measures to ensure that the data protection regulations are always adhered to by us and by the external service provider.
4. Data collection when visiting our website
If you use our websites for information purposes only, i.e. if you do not register, enter into a contract with us or otherwise disclose information to us, we only collect the personal data that your browser sends to our servers. When you access our websites, we collect the following data, which is technically necessary for us to display our websites to you and to ensure stability and security.
- IP address of the user
- Date and time of the request
- Contents of the request (concrete page)
- Access Status/HTTP Status Code
- volume of data transferred each time
- Website from which the request comes
- Operating system of the user
- language and version of the browser software.
This data is temporarily stored in the log files of our system for the duration of maximum seven days. An additional storage is possible, but in this case the IP addresses are partially deleted or alienated, so that an assignment of the calling client is no longer possible. The log files are not stored together with other personal data relating to you in this context. The legal basis for these processing operations is Art. 6 para. 1 lit. f DSGVO.
Since the collection of data for the display of the websites and the storage of data in log files is absolutely necessary for the operation of our websites and the maintenance of IT security, you have no right of objection to this.
4.1 Use of Cookies
In addition to the aforementioned data, cookies are stored on your terminal device when you use our websites during or after your visit to our online services. These are small text packages that can be sent from a website to the browser and stored and returned by the browser. Various data can be stored in cookies, which are read out by the location that sets the cookie. As a rule, they contain a characteristic string of characters (ID) that enables the browser to be uniquely identified when the website is called up again or a page is changed. Their primary purpose is to make our online offerings more user-friendly and effective overall. The user data collected in cookies are pseudonymised by technical precautions, which means that it is generally no longer possible to assign the data to the calling user. As far as an identifiability is given, as for example with a login cookie, whose session ID is necessarily linked with the account of the user, we point this out to you at the appropriate place.
We use different types of cookies:
- Transient cookies, which are also referred to as temporary or “session cookies”, are cookies that are deleted after you leave our online service and close your browser. Such cookies are used, for example, to store language settings or the contents of a shopping basket.
- Persistent or permanent cookies remain stored even after closing the browser. For example, the login status or entered search terms can be saved. We use such cookies among other things for range measurement or marketing purposes. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. However, you can delete these cookies at any time in the security settings of your browser.
4.2 Matomo (Piwik)
This website uses Matomo for web analysis. For this purpose, “cookies”, text files, generated usage information (including your shortened IP address) are transmitted to the server and stored for usage analysis purposes after they have been made anonymous. The information generated by the cookie about your use of the site will not be shared with third parties. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
Contradiction
If you do not agree with the storage and evaluation of the generated usage information, you can object to this below. In this case, a so-called deactivation cookie is stored in your browser, which means that Matomo does not collect any session data.
Caution: If you delete your cookies, the deactivation cookie will also be deleted and you will have to file it again.
opposition against the web analysis by Matomo
You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.
4.4 Contact forms and e-mail contact
On our website you will find a contact form which can be used for electronic contact. In doing so, we fulfil, among other things, the legal requirement to enable rapid electronic contact with us. If you use this option, your details will be processed and automatically stored for the purpose of answering your enquiry in accordance with Art. 6 para. 1 lit. c DSGVO. We delete the enquiries if they are no longer necessary and no legal archiving obligations apply.
5. rights of affected persons
If personal data is processed by you, you are affected in the sense of the DSGVO. You have the following rights vis-à-vis us as the person responsible:
5.1 Right to revoke a data protection declaration of consent
If the processing of personal data is based on a given consent, you have the right to revoke this consent at any time. The revocation does not affect the lawfulness of the processing which took place on the basis of the consent up to the revocation.
5.2 Right to information
You have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, you may request information about the following information:
- the processing purposes;
- the categories of personal data that will be processed;
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, with the additional right to be informed of the appropriate safeguards in accordance with Art. 46 DSGVO in connection with the transfer to a third country or to an international organisation;
the recipients or categories of recipients to whom the personal data have been or will be disclosed
- if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
if applicable, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
- the existence of a right to correction or deletion of the personal data concerning you or to limitation of the processing by us or a right to object to such processing;
the existence of a right to correction or deletion of the personal data concerning you or to limitation of the processing by us or a right to object to such processing;
the existence of a right to object to the processing by us or to the processing by us;
the existence of a right to object to such processing;
the existence of a right to correction or deletion of the personal data concerning you or to limitation of the processing by us or to object to such processing;
the existence of a right to object to the processing by us or to the processing by us or to the limitation of the right to object to such processing;<////// the existence of a right to object.
- the existence of a right of appeal to a supervisory authority;
the existence of a right of appeal to a supervisory authority;
the existence of a right of appeal to a supervisory authority
- if the personal data is not collected from you, any available information about the origin of the data;
- the existence of automated decision making including profiling in accordance with Article 22(1) and (4) DSGVO and, at least in these cases, meaningful information on the logic involved, the scope and the intended impact of such processing on the data subject.
the existence of automated decision making, including profiling in accordance with Article 22(1) and (4) DSGVO and, at least in these cases, meaningful information on the logic involved, the scope and the intended effects of such processing on the data subject.
the existence of an automated decision making system including profiling in accordance with Article 22(1) and (4) DSGVO and, at least in these cases, meaningful information on the logic involved, the scope and the intended effects of such processing on the data subject.
the existence of an automated decision making including profiling in accordance with Article 22(1) and (4) DSGVO and, at least in these cases, meaningful information on the logic involved and the scope and intended effects of such processing for the data subject
Within one month of receiving your request for information, we will provide you with a copy of the personal data that is being processed. For all further copies that you request, we may charge a reasonable fee based on the administrative costs. If you submit the request electronically, we will provide you with the information in a common electronic format unless you indicate otherwise.
5.3 Right to rectification
You have the right to demand that we correct your personal data immediately if it is incorrect. Taking into account the purposes of the processing, you have the right to demand the completion of incomplete personal data – also by means of a supplementary declaration.
5.4 Right to deletion (“Right to be forgotten”)
You have the right to request that we delete any personal data about you immediately and we are obligated to delete any personal data immediately if any of the following applies:
- The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
- You revoke the consent on which the processing was based and there is no other legal basis for the processing.
- You object to the processing and there are no overriding legitimate reasons for the processing, or you object to the processing.
- The personal data have been processed unlawfully.
- The deletion of personal data is necessary to comply with a legal obligation under Union law or the law of the Member States.
- The personal data were collected in relation to information society services offered pursuant to Art. 8 para. 1 DSGVO.
Information to -Third parties
If we have made the personal data concerning you public and we are obliged to delete it, we will take appropriate measures, including technical measures, to inform the data controllers processing the personal data that you have requested them to delete all links to this personal data or copies or replications of this personal data, taking into account the available technology and implementation costs.
Exceptions
The right to cancellation (“Right to cancellation
5. rights of affected persons
If personal data is processed by you, you are affected in the sense of the DSGVO. You have the following rights vis-à-vis us as the person responsible:
5.1 Right to revoke a data protection declaration of consent
If the processing of personal data is based on a given consent, you have the right to revoke this consent at any time. The revocation does not affect the lawfulness of the processing which took place on the basis of the consent up to the revocation.
5.2 Right to information
You have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, you may request information about the following information:
- the processing purposes;
- the categories of personal data that will be processed;
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, with the additional right to be informed of the appropriate safeguards in accordance with Art. 46 DSGVO in connection with the transfer to a third country or to an international organisation;
the recipients or categories of recipients to whom the personal data have been or will be disclosed
- if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
if applicable, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
- the existence of a right to correction or deletion of the personal data concerning you or to limitation of the processing by us or a right to object to such processing;
the existence of a right to correction or deletion of the personal data concerning you or to limitation of the processing by us or a right to object to such processing;
the existence of a right to object to the processing by us or to the processing by us;
the existence of a right to object to such processing;
the existence of a right to correction or deletion of the personal data concerning you or to limitation of the processing by us or to object to such processing;
the existence of a right to object to the processing by us or to the processing by us or to the limitation of the right to object to such processing;<////// the existence of a right to object.
- the existence of a right of appeal to a supervisory authority;
the existence of a right of appeal to a supervisory authority;
the existence of a right of appeal to a supervisory authority
- if the personal data is not collected from you, any available information about the origin of the data;
- the existence of automated decision making including profiling in accordance with Article 22(1) and (4) DSGVO and, at least in these cases, meaningful information on the logic involved, the scope and the intended impact of such processing on the data subject.
the existence of automated decision making, including profiling in accordance with Article 22(1) and (4) DSGVO and, at least in these cases, meaningful information on the logic involved, the scope and the intended effects of such processing on the data subject.
the existence of an automated decision making system including profiling in accordance with Article 22(1) and (4) DSGVO and, at least in these cases, meaningful information on the logic involved, the scope and the intended effects of such processing on the data subject.
the existence of an automated decision making including profiling in accordance with Article 22(1) and (4) DSGVO and, at least in these cases, meaningful information on the logic involved and the scope and intended effects of such processing for the data subject
Within one month of receiving your request for information, we will provide you with a copy of the personal data that is being processed. For all further copies that you request, we may charge a reasonable fee based on the administrative costs. If you submit the request electronically, we will provide you with the information in a common electronic format unless you indicate otherwise.
5.3 Right to rectification
You have the right to demand that we correct your personal data immediately if it is incorrect. Taking into account the purposes of the processing, you have the right to demand the completion of incomplete personal data – also by means of a supplementary declaration.
5.4 Right to deletion (“Right to be forgotten”)
You have the right to request that we delete any personal data about you immediately and we are obligated to delete any personal data immediately if any of the following applies:
- The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
- You revoke the consent on which the processing was based and there is no other legal basis for the processing.
- You object to the processing and there are no overriding legitimate reasons for the processing, or you object to the processing.
- The personal data have been processed unlawfully.
- The deletion of personal data is necessary to comply with a legal obligation under Union law or the law of the Member States.
- The personal data were collected in relation to information society services offered pursuant to Art. 8 para. 1 DSGVO.
