We appreciate your interest in our website. We take the protection of your personal data very seriously. In general, you can use our website without providing any personal data. However, if you use specific services offered on our website, it may be necessary to process your personal data. If this is necessary and there is no legal basis for such processing, we will generally seek your consent.
The processing of personal data—such as a data subject’s name, address, email address, or phone number—is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the Berlin Data Protection Act (BlnDSG), which applies to Humboldt University. Through the following privacy policy, we would like to inform you about the nature, scope, and purpose of the personal data we collect. Furthermore, we will use this privacy policy to inform you of your rights.
This privacy policy is based on the terminology used by the European legislators and regulators when enacting the General Data Protection Regulation. The terms used are explained in a glossary at the end of this document.
1. Name and address of the data controller
The data controller within the meaning of the General Data Protection Regulation is:
Dr. Markus Hanisch
Berlin Institute for Co-operative Studies (BICS)
Luisenstr. 53
10117 Berlin
Humboldt University of Berlin
Phone: +49 (0)30 2093 6500/ -6505
Fax: +49 (0)30 2093 6501
hanischm@hu-berlin.de
2. Name and address of the data protection contact person
Dr. Markus Hanisch
Berlin Institute for Co-operative Studies (BICS)
Humboldt University of Berlin
Luisenstr. 53
10117 Berlin
Phone: +49 (0)30 2093 6500/ -6505
Fax: +49 (0)30 2093 6501
3. Data Processing and Purposes of Processing
The BICS website collects a range of general data and information each time a data subject or an automated system accesses the website. This general data and information is stored in the server log files. The following are recorded: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrer), (4) the subpages of our website accessed via an accessing system, (5) the date and time of access to the website, (6) the Internet Protocol (IP) address, truncated to the last digit for anonymization purposes, and (7) other similar data and information used to prevent threats in the event of attacks on our information technology systems.
When using this general data and information, BICS does not draw any conclusions about the data subject. Rather, this information is required to (1) deliver the content of our website correctly, (2) optimize the content of our website, (3) ensure the ongoing functionality of our IT systems and the technology of our website, and (4) provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack. This anonymously collected data and information is therefore evaluated by BICS both statistically and with the aim of enhancing data protection and data security within our organization, ultimately to ensure an optimal level of protection for the personal data we process. The anonymous data from the server log files is stored separately from any personal data provided by a data subject.
If a data subject contacts the data controller via email or a contact form, the personal data provided by the data subject is automatically stored. Such personal data, provided voluntarily by a data subject, is stored for the purpose of processing the request or contacting the data subject. This personal data is not disclosed to third parties.
4. Deletion and Blocking of Personal Data
Personal data collected by us is generally processed and stored only for as long as is necessary to achieve the purpose of storage or as required by law or regulations.
5. Rights of the Data Subject (Withdrawal, Access, Rectification, Deletion)
Any data subject affected by the processing of personal data has the right, in accordance with legal provisions, to request from the controller, free of charge, information or confirmation regarding the personal data stored about them. Furthermore, there is a right to the immediate rectification of inaccurate personal data concerning them, or to erasure, or to restriction of processing, or a right to object to the processing.
Consent to the processing of personal data under data protection law may be withdrawn at any time without affecting the lawfulness of the processing carried out on the basis of that consent prior to its withdrawal.
You have the right to receive the personal data you have provided in a structured, commonly used, and machine-readable format and to transmit it to another controller.
In addition, without prejudice to any other administrative or judicial remedy, a complaint may be lodged with a supervisory authority in a Member State if there are doubts regarding the lawfulness of the processing of the personal data concerning the data subject.
6. Cookies
The BICS website uses cookies. Cookies are text files that are placed and stored on a computer system via a web browser.
Many websites and servers use cookies. Many cookies contain what is known as a cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters that allows websites and servers to associate the specific web browser in which the cookie was stored. This enables the visited websites and servers to distinguish the individual browser of the data subject from other web browsers that contain different cookies. A specific web browser can be recognized and identified via the unique cookie ID.
By using cookies, BICS can provide you with more user-friendly services that would not be possible without them. For example, you do not have to select your preferred language setting every time you visit our site. The lifespan of our cookies is limited to the current session; that is, when you close your browser completely, these cookies are deleted.
You can prevent our website from setting cookies at any time by adjusting the settings in your web browser, thereby permanently objecting to the use of cookies. Furthermore, cookies that have already been set can be deleted at any time via a web browser or other software programs. This is possible in all common web browsers.
7. Privacy Policy Regarding the Use of Social Media
Links to various social media platforms, such as Facebook, Twitter, Instagram, and others, have been integrated into the BICS website. However, this does not involve the integration of data-collection features such as the “Like” button; rather, these are solely links to our organization’s public profiles on the respective platforms. No data subject to privacy regulations is stored.
8. Use of Google Maps
This website uses the Google Maps API to visually display geographic information. When using Google Maps, Google also collects, processes, and uses data regarding visitors’ use of the map features. For more information about Google’s data processing, please refer to Google’s Privacy Policy. There, you can also change your personal privacy settings in the Privacy Center.
Detailed instructions on managing your own data in connection with Google products can be found here.
9. Embedded YouTube Videos
We embed YouTube videos on the BICS website. The operator of the relevant plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection is established to YouTube’s servers. In doing so, YouTube is informed of which pages you visit. If you are logged into your YouTube account, YouTube can associate your browsing behavior with you personally. You can prevent this by logging out of your YouTube account beforehand.
When a YouTube video is played, the provider uses cookies to collect information about user behavior.
If you have disabled the storage of cookies for the Google Ads program, you will not have to expect such cookies even when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in your browser.
For more information on data protection at “YouTube,” please refer to the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy/
10. Legal Basis for Processing
Article 6(1)(a) of the GDPR serves as the legal basis for processing operations in which we obtain consent for a specific purpose of processing. If the processing of personal data is necessary, as is the case, for example, with processing operations required for sending university publications, the processing is based on Article 6(1)(b) of the GDPR. If our institution is subject to a legal obligation that requires the processing of personal data, the processing is based on Article 6(1)(c) of the GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person.
11. Glossary
This Privacy Policy is based on the terminology used by the European legislators and regulators when enacting the General Data Protection Regulation. Our Privacy Policy is intended to be easy to read and understand. To ensure this, we would like to explain the terms used here.
In this Privacy Policy, we have used the following terms, among others:
a) Personal data
Personal data means any information relating to an identified or identifiable natural person (“data subject”). A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
b) Data Subject
A data subject is any identified or identifiable natural person whose personal data is processed by the controller.
c) Processing
Processing means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or any other form of making available, alignment or combination, restriction, erasure, or destruction.
d) Restriction of processing
Restriction of processing means the marking of stored personal data with the aim of limiting their future processing.
e) Profiling
Profiling is any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
f) Pseudonymization
Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures that ensure the personal data is not attributed to an identified or identifiable natural person.
g) Controller
A controller is the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
h) Processor
A processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.
i) Recipient
A recipient is a natural or legal person, public authority, agency, or other body to whom personal data is disclosed, regardless of whether or not that entity is a third party. However, public authorities that may receive personal data in the course of a specific investigative mandate under Union law or the law of the Member States are not considered recipients.
j) Third party
A third party is a natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor, and the persons authorized to process the personal data.
k) Consent
Consent is any freely given, specific, informed, and unambiguous indication of the data subject’s wishes, expressed in the form of a statement or by a clear affirmative action, by which the data subject signifies agreement to the processing of personal data relating to him or her.