Privacy Policy

Privacy policy

The protection of your personal data is of particular concern to the Federal Ministry of Education and Research (BMBF). For this reason, we only process personal data to the extent necessary. Which data is required and processed for which purpose and on which basis depends largely on the type of service you are using or on the task for which we need it.

Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier.

For more information on what data is collected, for what purpose and on what basis, how to contact the controller and the data protection officer(s) and what rights you have in relation to the processing of personal data, please refer to this privacy statement.

1. responsible person and data protection officer

Responsible for the processing of personal data is the

Federal Ministry of Education and Research

D-53170 Bonn

Phone: +49 (0)228 9957-0

Fax: +49 (0)228 99578-3601

electronic mail: bmbf[at]bmbf.bund.de

DE-Mail: post office[at]bmbf-bund.de-mail.de

If you have specific questions about the protection of your data, please contact the BMBF's data protection officer:

Federal Ministry of Education and Research

"Data Protection Officer"

D-53170 Bonn

Phone: +49 (0)228/9957-3369

Fax: +49 (0)228/9957-8-3369

electronic mail: datenschutz[at]bmbf.bund.de

The following statement provides an overview of how the BMBF ensures the protection of your data and what kind of data is collected on what basis and for what purpose.

2. data processing by visiting this website

Calling our website

Every time you visit a website, data is collected and exchanged that is required to provide the service. These are:

• IP address
• Type and version of your Internet browser     
• operating system used
• the page accessed
• the previously visited page (referrer URL)
• Time of the server request.

This data is stored in log files on an external server at our service provider VDI Technologiezentrum GmbH beyond the time of the visit.

On the basis of Article 6 (1) (c) and (e) of the EU General Data Protection Regulation (DSGVO) in conjunction with Section 5 of the BSI Act, we are obliged to store data - for the purpose of protecting against attacks on the Internet infrastructure and for the purpose of detecting, limiting or eliminating faults or errors in the communication technology of the Federal Government/BMBF - beyond the time of your visit. This data is analysed and, in the event of attacks on the communications technology, is required for the initiation of legal and criminal prosecution.

Data logged when accessing the BMBF's website are only transmitted to third parties if we are legally obliged to do so or if the transmission is necessary for legal or criminal prosecution in the event of attacks on the Federal Government's communication technology. Data will not be passed on in other cases. The BMBF does not combine this data with other data sources.

External hosting

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.

The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f DSGVO). Our hoster will only process your data insofar as this is necessary for the fulfilment of its service obligations and follow our instructions with regard to this data.

In order to ensure data protection-compliant processing, we have concluded an order processing contract with our hoster.

Contact form

If you have a more detailed question for us, you can submit an inquiry using the contact form on our website. The required data are marked as mandatory fields.
When you contact us, the data you provide (in particular your first name and surname, your e-mail address and the text of your inquiry, as well as any other voluntary information) will be stored by us. In the case of further information, this is voluntary information. The processing is carried out for the purpose of processing the enquiries on the basis of Art. 6 Para. 1 lit. b, f DSGVO.
The data collected in the course of contacting you will be deleted as soon as they are no longer required for processing your request.

Disclosure to third parties

As a rule, your personal data will not be transmitted to third parties.

We sometimes use service providers (located in Germany) who process data on our behalf (e.g. hosting of the website). In the cases described here, the information is passed on to these third parties to enable further processing. The external service providers are carefully selected and regularly reviewed by us to ensure that your privacy is protected.

The service providers are service providers / order processors bound by instructions and are accordingly obligated by us, among other things, to treat your data exclusively in accordance with our instructions and the applicable data protection laws. In particular, they are obliged to treat your data as strictly confidential. They are also prohibited from processing the data for purposes other than those agreed.

The transfer of data to processors is based on Art. 28 (1) DSGVO.

We also do not sell your data to third parties, nor do we market it in any other way.

Website tracking with MATOMO (formerly PIWIK)

Our website uses the web analysis service MATOMO (www.matomo.org), a service of the provider InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. Hereby, after giving your voluntary consent, for statistical analysis of user behavior for optimization and marketing purposes in accordance with Art. 6 para. 1 lit. a DSGVO. Data collected and stored. The software uses a permanent cookie to recognize visitors even after a long time. This information is stored as a text file on the hard drive of the visitor's computer. The cookie has a validity of 13 months and then deletes itself.

The software also sets a so-called session cookie. Session cookies are small pieces of information that a provider stores in the RAM of the visitor's computer. A randomly generated, unique identification number is stored in a session cookie, a so-called session ID. In addition, a cookie contains information about its origin and the storage period. These cookies cannot store any other data. They are used to view the number of clicks on our site and unique visitors separately. This means that regardless of the number of clicks, the session cookie identifies you as an individual user of our site. If session cookies are deactivated, you will be listed as a new user for each action. The session cookies used by the BMBF are deleted as soon as you end your session.

If individual pages of our website are called up, the following data is stored:

• Two bytes of the IP address of the calling system of the user (anonymous)
• The accessed web page
• The website from which the user has reached the accessed website (referrer)
• The subpages that are called from the called web page
• The time spent on the website
• The frequency of the call of the web page

The software is set in such a way that the IP addresses are not stored completely, but 2 bytes of the IP address are masked (e.g.: 192.168.xxx.xxx). In this way, an assignment of the shortened IP address to the calling computer is no longer possible, so that you remain anonymous as a user.

The software runs exclusively on the web servers of the service provider VDI Technologiezentrum GmbH on behalf of the BMBF. The usage information is only stored there. The data is not passed on to third parties.

You have the possibility to revoke your consent at any time within the cookie banner.

 

Integration of plug-ins of social networks

Our website uses buttons for each of the social networks

• Twitter, Twitter Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA

The buttons are marked with the logo of the respective social network. However, these are not the usual social plugins, but buttons with deposited links. The buttons must be activated (clicked) separately by you. As long as these buttons are not clicked, no data is transmitted to the social networks. Only when you click on the buttons and thereby declare your consent to communication with the servers of the social network, the buttons become active and the connection is established.

After clicking, the button corresponds to a so-called share plugin. The social network is provided with information about the visited page, which you can share with your contacts in your social network. If you want to "share" the information, you must be logged in. If you are not logged in, you will land on the login page of the social network you clicked on and you will no longer be on the Bioeconomy Council page. If you are logged in, the information is transmitted that you would like to recommend the respective article.

By activating the button, the social networks then also receive, among other things, the information that and when you have accessed the corresponding page of our website, as well as, for example, your IP address, details of the browser used and the language settings. When you click on the button, your click is transmitted to the social network and used according to its data usage guidelines.

When activating the button, we have no influence on the collected data and data processing operations and are not responsible for this data processing and in this respect also not responsible in the sense of the GDPR. We are also not aware of the full extent of the data collection, its legal basis, the purposes as well as the storage periods. Therefore, the information provided here is not necessarily complete.

The transmission of data takes place regardless of whether you actually have an account with the provider or are logged in there. If you are logged in to the provider, your data will be directly assigned to your account. If necessary, the providers also use cookies on your computer to track you.

To our knowledge, the provider stores this data in usage profiles, which it uses for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for non-logged-in users) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. To exercise this right of objection, please contact the respective provider.

For the purpose and scope of the data collection and the further processing and use of the data by the respective social network, as well as your rights in this regard and setting options for protecting your privacy, please refer to the information.

• On Twitter: http://twitter.com/privacy

If you do not want the social network to receive data about you, do not click the button.

Specific information on our online presence in social media

The Bioeconomy Council maintains an online presence within a social network, Twitter, in order to have the possibility to communicate with active users there and to inform them about our service portfolio. For this purpose, the Bioeconomy Council makes use of the technical platforms and services offered by the operators. In social networks and on other external platforms, the respective operators' own data protection provisions apply, even if we disseminate information and maintain presences there.

We would like to point out that you use the services of the social networks and platforms offered here as well as their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating, etc.). The data collected about you in this context will be processed by the operators of the platforms and, if necessary, transferred to countries outside the European Union. What information the operators receive and how it is used is described in general terms in the respective data protection policies. On the individual platforms, you will also find information on how to contact the operators as well as on the setting options for advertisements.

• on Twitter: com/privacy

In which way the operators of the social networks use the data from the visit of the respective pages for their own purposes, to which extent activities on the pages are assigned to individual users, how long these data are stored and whether data from a visit of the respective page are passed on to third parties, is not conclusively and clearly stated by the operators and is not known to us.

I Twitter

• Twitter Analytics & Twitter AdsThe
  service is operated by Twitter Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA. Twitter Analytics stores and processes information about your user behaviour on our online presences in social media. For this purpose, Twitter Analytics uses, among other things, cookies that are stored locally in the cache of your web browser on your end device and that enable an analysis of your use of the social media platforms. Twitter Ads can be
   used to create targeted marketing campaigns. https://twitter.com/personalization
• Facebook Insights
  Via Facebook Insights, a service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA , Facebook collects, among other things, your IP address and other information that is available in the form of cookies on your PC. This information is used to provide statistical information about the use of the respective page. Facebook provides more detailed information on this at the following link:
  http://de-de.facebook.com/help/pages/insights.
• Google Analytics
  Google Analytics, a service of Google Inc., Moutain View, California, USA, uses cookies that are stored on your terminal device and that enable an analysis of your use of our online presences in social media. The information generated by the cookie about your visit to Twitter is usually transmitted to a Google server in the USA and stored there. If anonymisation of the IP address to be transmitted by the cookie is activated on the website ("IP anonymisation"), your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information for the purpose of evaluating your use of Twitter and compiling reports on website activity. In doing so, pseudonymous usage profiles can be created from the processed data. The IP address transmitted when using Google Analytics will not be merged with other Google data.
  
  
• Dynatrace Dynatrace, a service of Dynatrace LLC, headquartered in Waltham, Massachusetts, USA, provides insights into the performance of the respective web application and the navigation of users on the website
  . Dynatrace collects data such as W3C timings, button clicks, link clicks, JavaScript errors, browser types, and geographic regions. This helps to improve the performance of the respective offer and to fix functional problems. This data helps to continuously improve the offering and to identify functional problems. Dynatrace uses different cookies for this purpose.
  https://www.dynatrace.com/company/trust-center/

Infusionsoft
Infusionsoft is a program for preparing, creating and executing targeted marketing campaigns. Infusionsoft is operated by: Infusionsoft Inc, 1260 S. Spetrum Blvd, Chandler, AZ 85286. The software makes it possible to link statistical data and network behavior of individual users with the contact data of specific individuals for marketing purposes. If you install a deactivation add-on for your web browser, you can object to the collection of your data.
https://www.infusionsoft.com/legal/privacy-policy

Planned data transfer to third countries

A transfer to third countries is currently not planned, otherwise the appropriate legal requirements will be created. In particular, you will be informed about the respective recipients or categories of recipients in accordance with the legal requirements.

Time limits for the deletion of data

The legislator has enacted various retention periods and obligations. After expiry of these periods, the corresponding data is routinely deleted. If data is not affected by this, it will be deleted or made anonymous if the purposes stated within the scope of this data protection declaration cease to apply. Unless this privacy policy contains other, deviating provisions regarding the storage of data, the data collected by us will be stored by us for as long as it is required for the aforementioned purposes for which it was collected.

Other data use and data deletion

Further processing or use of your personal data will generally only take place if permitted by law or if you have consented to the data processing or use. In the event of further processing for purposes other than those for which the data was originally collected, we will inform you of these other purposes prior to further processing and provide you with the other relevant information. 3. your rights

You have the following rights vis-à-vis the controller with regard to the personal data concerning you:

• Right to informationYou
  have the right to receive
  information from us at any time upon request about the personal data processed by us that concerns you within the scope of Art. 15 DSGVO. To do this, you can make a request by post or e-mail to the addresses given above.
• Right to rectify inaccurate dataYou
  have the right to demand that we rectify the personal data relating to you without delay if it should be inaccurate (Art. 16 DSGVO). To do so, please contact us at the contact addresses given above.
• Right to erasureYou
  have a right to the immediate erasure ("right to be forgotten") of the personal data relating to you if the legal grounds pursuant to Article 17 of the GDPR exist. These are, for example, if the personal data are no longer necessary for the purposes for which they were originally processed or you have withdrawn your consent and if there is no other legal basis for the processing; the data subject objects to the processing (and there are no overriding reasons for processing - this does not apply to objections to direct marketing). To exercise your above right, please contact us at the contact addresses above.
• Right to restriction of processingYou
  have a right to restriction of processing if the conditions are met and in accordance with Article 18 of the GDPR. According to this, the restriction of processing may be required in particular if the processing is unlawful and the data subject refuses the erasure of the personal data and instead requests the restriction of the use of the personal data or the data subject has objected to the processing pursuant to Art. 21 (1) DSGVO, as long as it has not yet been determined whether our legitimate grounds override theirs. To exercise your aforementioned right, please contact us at the above contact addresses.
• Right to data portabilityYou
  have a right to data portability according to Art. 20 DSGVO. Here, you have the right to receive the data relating to you that you have provided to us in a common, structured and machine-readable format and to transfer this data to another controller, such as another service provider. The prerequisite for this is that the processing is based on consent or on a contract and is carried out with the help of automated processes. To exercise your aforementioned right, please contact us at the above contact addresses.
• Right of objection
  You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out, inter alia, on the
  basis of Article 6(1)(e) or (f) DSGVO, in accordance with Article 21 DSGVO. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims. To exercise your above right, please contact us at the above contact addresses.
• Right to complain to a supervisory authority
  If you believe that the processing of personal data concerning you by us is unlawful, you have the right to complain to the supervisory authority for data protection (Federal Commissioner for Data Protection and Freedom of Information).

You can contact the BMBF data protection officer datenschutz[at]bmbf.bund.de with questions and complaints at any time.