Privacy Statement
1 General
Your personal data are processed by us only in accordance with the General data Protection Regulation (GDPR) and German data privacy laws. The following provisions describe the type, scope, and purpose of collecting, processing and utilizing your personal data related to the access to our web pages. If you click on any links which direct you to other websites, please inquire how your data are handled by them.
1.1 The data controller
The data controller in the sense of GDPR is:
Hamburg University of Applied Sciences (HAW Hamburg)
Berliner Tor 5
20099, Hamburg
Tel.: +49.40.42875-0
Fax: + 49.40.42875-9149
HAW Hamburg is a public corporation. It is legally represented by
Prof. Dr. Micha Teuscher
President of HAW Hamburg
Berliner Tor 5
20099 Hamburg
1.2 Contact details of the data protection officer at HAW Hamburg:
datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
http://www.datenschutz-nord-gruppe.de/
office(@)datenschutz-nord.de
2 Personal data, scope of processing, cookies
To optimize our web presence, to improve your access to our website and to make sure our servers are secure, we use cookies. These are small text files stored in your computer's main memory. Some cookies are deleted after you close the browser. Others remain on your computer (long-term cookies) and permit its recognition on your next visit.
You can prevent storage of cookies by choosing a 'disable cookies' option in your browser settings, but this can limit the functionality of our Internet offers as a result.
2.1 Log files
When you visit our website, you transmit data to our web server via your Internet browser. The following data are temporarily recorded in a log file via an active connection that is established for communication purposes between your Internet browser and our web server:
· The IP address of the requesting computer
· The date and time of access
· The name, URL, and the size of the retrieved file that has been transferred
· Access status (the requested file was transferred, not found, etc.)
· Identification data about the used browser and operating system (if transmitted by the requesting web browser)
· Referring website (if transmitted by the requesting web browser)
In individual cases, i.e., in response to reported faults, errors, and security incidents, a manual analysis is performed. The log entries are continuously and automatically evaluated in order to detect attacks on the web server and to be able to determine an appropriate response.
2.2 Data storage in forms
We use forms on our websites to allow users to register for events or courses or to sign up for our newsletter. Such personal data is understood to have been provided to us with your consent and are used exclusively for the purposes stated in the forms. Our forms only collect personal information that is strictly necessary. Your data will not be disclosed to third parties unless this is explicitly stated in the subscription form.
2.2.1 CleverReach
We use the CleverReach program for managing and sending our newsletter, to which you may subscribe if you wish.
Our free newsletter informs you regularly by e-mail about our project, related news and events. By subscribing to your newsletter, you give consent to these terms.
You may subscribe to our newsletter by inputting your e-mail address on https://www.bsr-electric.eu/news . We will then send you a confirmation e-mail, and you become a subscriber only after clicking on the button where you confirm your consent to receive the newsletter. This is called “double opt-in”. If you do not confirm you consent within 24 hours, your personal information will be automatically erased after one month. We record your IP-address when you subscribe to the newsletter and confirm your subscription. The purpose for it is to keep a record of your subscription and to be able to detect a possible misuse of your personal data.
The following data is transmitted to CleverReach:
- Your e-mail address
- Your IP-address
Your personal data (e-mail address) will be stored after your confirmation and only be used to send you the newsletter (article 6, 1, “a” of the GDPR).
You can unsubscribe from the newsletter at any time or revoke your consent by sending an e-mail to bsr-e@ls.haw-hamburg.de or by following the instructions given in the newsletter e-mail. Your data will be deleted after the end of the newsletter reception within 1 week, provided that the deletion does not conflict with any statutory storage requirements.
We inform you that we evaluate your user behaviour when sending the newsletter. For this purpose, the newsletter e-mails contain “web beacons” or “tracking pixels”, which are one-pixel image files stored on our website. For our analysis we link the tracking pixels and web beacons with your e-mail address and an individual ID. The data pseudonymized, therefore there is no link to your other personal data, and a direct personal reference is excluded. You can object to this tracking at any time by clicking on the separate link provided in each e-mail or by informing us via bsr-e@ls.haw-hamburg.de. This information is stored as long as you have subscribed to the newsletter. After you unsubscribe, the data is stored purely statistically and anonymously.
Further information on the purpose and scope of data collection and its processing by the CleverReach can be found in the respective data protection declaration available at: (https://www.cleverreach.com/en/privacy-policy/.
CleverReach GmbH & Co. KG
Mühlenstr. 43
26180 Rastede
Tel.: +49 (0) 4402 97390-00
E-Mail: info@cleverreach.com
2.3 Web analysis with Matomo
This website uses the open source analysis tool MATOMO (formerly Piwik) (www.matomo.org) to generate statistical reports on the use of the website. MATOMO stores the collected data (including time, page retrieved, browser used, operating system) in a database. The evaluations generated by PIWIK are completely anonymous and cannot be used to identify individuals. IP addresses are anonymized before they enter the database to comply with legal requirements. A linking of the stored data with other data sources or a transfer to third parties does not take place.
2.4 Incorporation of third-party services and content
We use content from third parties on our website, such as videos from YouTube. In addition, we have integrated the Google search engine. As a result, those third party providers can see the IP addresses of users so that the requested content can be sent to their browsers. We seek to use such content only if the provider agrees to use the IP address only for purposes of delivering such content. Nevertheless, we cannot control how such third-party providers store the IP address or use it to other purposes. We will inform the users about any details we have in this respect.
2.4.1 YouTube plug-ins
Our website incorporates a plug-in from www.youtube.com, which is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”).
If you access pages on our website that contain such a plug-in, you will be connected to the YouTube servers. The plug-in will send data back to the YouTube server about which IP address you used to access our Internet sites. If you are logged in as a member of YouTube/Google, YouTube will associate this information with your respective personal user accounts on these platforms. When you use these plug-ins, such as, for example, by clicking on the video or its play button or by submitting a comment, this information will be associated with your YouTube user account, for example.
You can prevent this information from being transmitted by logging out of your personal Google account before using our websites.
Additional information about how data are collected and used by the platform or plug-ins can be found in the YouTube Data Privacy Policy at the following link: https://policies.google.com/privacy?hl=en-GB
Google also processes your personal information in the US, and it is subject to the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
2.4.2 Soundcloud
Our podcast “The Next Stop” is available free of charge on audio platform Soundcloud https://soundcloud.com/ ). You may listen to it on our website, in which case you may receive cookies and other tracking technologies used by SoundCloud, for which we undertake no liability. According to Soundcloud, their tracking technologies have the purposes of helping provide, protect and improve the platform. Those technologies store your preferences, personalize content, display ads based on your interests, combat fraud and abuse, and rationalize the operation as well as access to the platform. SoundCloud may allow certain service providers to place cookies and similar technologies for those purposes. A complete overview of those, as well as explanations regarding your choices and controls, can be found at https://soundcloud.com/pages/cookies
3. Legal Basis of Data Processing
The legal basis for the processing of personal data on this website in general is article 6, 1, f of the GDPR (legitimate interest pursued by the controller, namely the interest in optimizing our web presence, improving your access and identifying possible security threats) as well as § 11, 1, 1 of the Hamburg Data Protection Act (HmbDSG).
The legal basis for the processing of personal data with respect to registering for events, the newsletter or establishing contact via e-mail is article 6, 1, a of the GDPR (consent of the data subject).
4. Deletion of the Personal Data
Your personal data will be deleted after the purpose for which they were collected has been fulfilled, unless you have given your consent again. Log entries that are older than 4 weeks are deleted.
5. Rights of the Data Subject
Users of our website have the following rights:
· to access your personal data that is stored by us (article 15 GDPR).
· to request rectification of incorrect or incomplete personal data (article 16 GDPR).
· to the erasure of personal data concerning you, unless the processing of such data is required for purposes of exercising the right of freedom of expression and information or of complying with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims (article 17 GDPR);
· to the restriction of the processing of personal data (article 18 GDPR);
· to object to any processing that is in the public interest or is used for purposes of profiling, unless we are able to demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims (article 21 GDPR);
· to revoke your previously given consent to the collection, processing and use of your personal data at any time for future collection, processing and use (article 7 (3) GDPR). If you exercise this right, we may no longer perform the data processing that we had been performing on the basis of such consent;
· to file a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the terms of the GDPR (article 77 GDPR);
Inquiries can be directed to the following e-mail address: info@bsr-electric.eu
6. E-mail contacts
It is also possible to establish contact via the e-mail addresses provided on the BSR ELECTRIC website. In this case, your personal data that are transmitted by e-mail will be processed solely for the purpose of corresponding with you and any purposes stated in the correspondence. Such data will not be forwarded to third parties.