The Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V. (MPG) takes the protection of your personal data very seriously. We process personal data gathered when visiting our websites in compliance with applicable data protection legislation. We neither publish your data nor transmit them to third parties on an unauthorized basis.
In the following sections, we explain which data we record when you visit one of our websites, and exactly how they are utilized:
A. General information
1. Scope of data processing
As a matter of principle, we gather and utilize users’ personal data only to the extent required to ensure the functioning of our website and of our contents and services. The gathering and utilization of our users’ personal data normally occurs after users have granted their consent. An exception occurs where data processing is legally permitted.
2. Legal basis of data processing
To the extent that permission of the affected individual is obtained for the processing of personal data, Article 6 (1) lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
In the processing of personal data to fulfil a contract whose contractual party is the individual affected, Article 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing required to implement pre-contractual measures.
If processing is required to safeguard the justified interest of the MPG or a third party and the interests, basic rights and basic freedoms of the affected individual do not outweigh the first-mentioned interest, Article 6 (1) lit. f GDPR serves as the basis for such processing.
3. Data deletion and storage duration
The affected individual’s personal data are deleted or blocked as soon as the purpose of the storage ceases to apply. Storage can also occur if provided for by European or national legislators in EU regulations, acts or other legislation to which the MPG is subject. A blocking or deletion of data then occurs only if a storage period prescribed by one of the aforementioned norms expires, unless a necessity exists in relation to the further storage of the data for the arrangement of a contract or the fulfilment of a contract.
4. Contact details of the individuals responsible
The entity responsible in the meaning of the General Data Protection Regulation and other national data protection acts as well as other data protection legislation is the
Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V. (MPG)
Hofgartenstrasse 8
D-80539 Munich
Telephone: +49 (89) 2108-0
Contact form: https://www.mpg.de/contact/requests
Internet:
5. Data Protection Officer’s contact details
The Data Protection Officer at the entity responsible is
Heidi Schuster
Hofgartenstrasse 8
D-80539 Munich
Telephone: +49 (89) 2108-1554
E-mail: datenschutz@mpg.de
B. Provision of the Website and Creation of Log Files
Each time you visit our website, our service and applications automatically record data and information from the computer system of the visiting computer.
The following data are gathered temporarily:
- Your IP address
- Date and time of your access to the website
- Address of the page visited
- Address of the previously visited website (referrer)
- Name and version of your browser/operating system (if transmitted)
These data are stored in our systems’ log files. These data are not stored together with the user’s other personal data.
The legal basis for the temporary saving of data and log files is Article 6 (1) lit. f GDPR. Storage occurs in log files in order to ensure the website’s functionality. The data also help us optimize the websites, eliminate malfunctions and ensure our IT system security. Our justified interest in data processing pursuant to Article 6 (1) lit. f GDPR also lies in such purposes.
The data are deleted as soon as they are no longer required to achieve the purpose for which they were gathered. If data are gathered for the provision of the website, this is the case if the respective visit is ended. In the instance that data are stored in log files, this is the case after seven days at the latest. Storage above and beyond this period is possible. In this case, the users’ IP addresses are deleted or removed so they can no longer be allocated to the visiting client.
The recording of data for the provision of the website and the storage of data in log files is essential to operate the website. As a consequence, users do not have an option to revoke such data recording.
C. Web Analysis
Type of Data
We use the WordPress plugin WP Statistics (provider: VeronaLabs) to analyse the use of our website. WP Statistics runs locally on our web-server operated by Raidboxes in Germany; no data are transmitted to VeronaLabs or other third parties. The plugin does not place cookies and does not create persistent identifiers. It records only aggregated usage data that cannot be traced back to individual visitors.
The following information is processed:
- Page URL & referring page
- Browser & OS (from User-Agent)
- Device type (desktop/tablet/mobile)
- Anonymized IP
- Approx. location (country/region/city)
Legal basis
We operate WP Statistics on the basis of Art. 6 (1) lit. f GDPR (legitimate interest) to obtain anonymized usage statistics that help us optimize our website.
Data Deletion
The anonymized data are deleted as and when required.
D. Data Transfer
1. Newsletter
Type of data
Our website offers you the opportunity to sign up for a free newsletter. When you register, the information entered in the sign-up form is transmitted to us. This typically includes:
- e-mail address
- first name and surname
The subscription is completed through a double-opt-in procedure: after registering you receive an e-mail asking you to confirm your subscription, ensuring no one can register with someone else’s address. During registration we also store the IP address, date and time of the sign-up to prevent misuse. The data is used solely to send the newsletter and is not passed on to third parties, except where a legal obligation exists. We inform you about the concrete processing of your data in the course of the sign-up process and obtain your consent accordingly.
We send the newsletter with the service provider Rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg, Germany. There is a reference to the Rapidmail’s own General Terms and Concitions (GTC), their data privacy statement, as well as this Data Privacy Statement. Rapidmail stores your data on servers in Germany and supports analytics functions (see ‘Tracking’ below).
Tracking
We use tracking to tailor content to readers’ interests and measure the reach of our mailings. If you do not wish to be tracked, you may unsubscribe from the newsletter via the link provided in every newsletter. Collected tracking data may include:
- successful delivery of the newsletter
- whether the e-mail was opened (via a 1-pixel graphic) together with
- browser type, operating-system type
- desktop or mobile device
- user agent (e-mail client)
- IP address
- date and time of opening
- which links in the newsletter were clicked
Legal basis
- Newsletter dispatch: Your consent, Art. 6 (1) lit. a GDPR.
- Voluntary tracking: Your consent, Art. 6 (1) lit. a GDPR and § 25 para. 1 TDDDG.
The purpose of processing is the delivery and optimisation of the newsletter.
Data deletion
Your e-mail address and any tracking data is stored only as long as your subscription is active. You can cancel the subscription at any time via the link provided in every newsletter; your data will then be deleted from our systems and from Rapidmail’s servers.
2. Contact form
Type of data
On our website, there is a contact form which can be used to make contact electronically. If you make use of this option, the details entered in the input screen are transmitted to us and saved. This generally consists of your email address, last name and first name. We inform you about the concrete processing of your data in the course of the operation and obtain your consent accordingly. There is also a reference to this Data Privacy Statement. The data are used solely for processing the dialogue.
Legal basis
The legal basis for processing data in connection with use of the contact form is your consent according to Art. 6 (1) lit. a GDPR. Processing of personal data from the input screen serves the sole purpose of processing the contact request. You have the option to withdraw your consent to the processing of personal data at any time vis-à-vis the listed contact persons.
Data deletion
The data are deleted as soon as they are no longer required in order to fulfil the purpose of their collection. This is the case when the relevant dialogue with the user is finished or the processing of the user’s request has been finalized. The dialogue is finished when circumstances indicate that the matter in question has been conclusively clarified.
3. Events Registration
Type of data
On our website, we offer you the opportunity to register for events organized by a) Max Planck Law, b) the Max Planck Institutes that are part of the Max Planck Law network, and c) individual researchers who are part of the Max Planck Law network, by entering personal data via an input screen. As a rule, we ask for your email address, last name and first name. We inform you about the concrete processing of your data in the course of the registration operation and obtain your consent accordingly. There is also a reference to this Data Privacy Statement.
Legal basis
The legal basis for processing data is the existence of the user’s consent according to Art. 6 (1) lit. a GDPR. If registration serves to fulfil a contract of which you are a contractual party or to implement pre-contractual measures, the additional legal basis for data processing is Art. 6 (1) lit. b GDPR.
Data deletion
The data are deleted as soon as they are no longer required in order to fulfil the purpose of their collection. This applies to the data collected during the registration operation if registration on our websites is withdrawn or altered. It applies to the registration operation to fulfil a contract or to implement pre-contractual measures if the data are no longer required in order to implement the contract. It may also be necessary to save the contractual partner’s personal data after conclusion of the contract in order to meet contractual or statutory requirements.
You can withdraw registration at any time. You can have the data relating to you altered at any time by writing to the following email: info@law.mpg.de. If the data are required to fulfil a contract or implement pre-contractual measures, premature deletion of the data is only possible if this is not prevented by contractual or statutory obligations.
4. Alumni Registration
Purpose of data processing
The purpose of the data processing is for the establishment of an alumni network within the Max Planck Law network.
Legal basis for data processing
The legal basis for the data processing may be supplemented by the DPO.
The processing of personal data is based on Art. 6 (1) lit. a of the EU General Data Protection Regulation (GDPR/DSGVO).
Recipients or categories of recipients
The processing of your personal data takes place within the scope of order processing on systems of the MPG. The MPG will pass on its data to external recipients as described in the declaration of consent. In addition, we use service providers to manage the platform.
Storage duration
The data is stored for the duration of the Max Planck Law Alumni network unless consent is withdrawn.
Rights of data subjects
You have the right to obtain information on the data stored about you by MPG, the right to demand correction in the event of incorrect data or deletion in the event of unauthorised data storage, and the right to data transfer. You also have the right to appeal to the supervisory authority. For the MPG, this is the Bavarian State Office for Data Protection Supervision, Postfach 1349, 91504 Ansbach.
Source of data
The data is collected either by Max Planck Law directly or by individual Institutes within the Max Planck Law network.
E. Utilization of Cookies
Our website utilizes cookies. Cookies are text files stored in the Internet browser or by the Internet browser on the user’s computer system. If a user visits a website, a cookie can be stored on the user’s operating system. This cookie contains a sequence of characters enabling the browser to be clearly identified when visiting the website again.
The following is a list of cookies that our website uses:
F. YouTube
On some pages, our website uses external links to videos on the YouTube platform that are not directly embedded in the pages. The external links are provided with a preview image generated via an API service provided by YouTube.
All YouTube content displayed on https://law.mpg.de/ is subject to YouTube’s terms of use. By accessing this content, users of https://law.mpg.de/ accept these terms of use.
YouTube’s terms of use can be viewed at the following link:
https://www.youtube.com/t/terms
The data protection declaration (Google PrivacyPolicy) can be accessed at the following link:
https://policies.google.com/privacy?hl=en
G. Rights of Individuals Affected
As an individual whose personal data are gathered as part of the aforementioned services, you have, in principle, the following rights, to the extent that no legal exceptions are applicable in individual cases:
- Information (Article 15 GDPR)
- Correction (Article 16 GDPR)
- Deletion (Article 17 (1) GDPR)
- Restriction of processing (Article 18 GDPR)
- Data transmission (Article 20 GDPR)
- Revocation of processing (Article 21 GDPR)
- Revocation of consent (Article 7 (3) GDPR)
- Right to complain to the regulator (Article 77 GDPR). For the MPG, this is the Bavarian Data Protection Authority (BayLDA), Postbox 606, 91511 Ansbach.