Personal data (usually referred to in the following simply as “data”) is only processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

In accordance with Article 4 (1) of Regulation (EU) 2016/679, i.e., the General Data Protection Regulation (referred to in the following simply as the “GDPR”), “processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

The following Privacy Notice is intended to inform you in particular about the type, scope, purpose, duration and lawful basis of the processing of personal data, insofar as we decide, either alone or in conjunction with others, on the purposes and means of processing. In the following, we also inform you about the third-party components we use to optimise our website and improve the user experience, insofar as this results in third parties being responsible for processing data.

Our Privacy Notice is structured as follows:

I. Information about us as controllers of your data
II. Rights of users and data subjects
III. Information about the data processing

I. Information about us as controllers of your data

The provider responsible for this website for purposes of data protection law is:

Weizenbaum-Institut e.V.
Hardenbergstraße 32
10623 Berlin
Germany
Tel.: +49 30 700141-001
Email: info[at]weizenbaum-institut.de
Website: https://www.weizenbaum-institut.de

Data Protection Officer:

Weizenbaum-Institut e.V.
Hardenbergstraße 32
10623 Berlin
Germany
Tel.: +49 30 700141-018
E-Mail: datenschutz[at]weizenbaum-institut.de

II. Rights of users and data subjects

With regard to the data processing described in more detail below, users and data subjects have the right

to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing and copies of the data (see also Article 15 GDPR);
to correct or complete incorrect or incomplete data (see also Article 16 GDPR);
to the immediate deletion of data concerning them (see also Article 17 GDPR), or, alternatively, if further processing is necessary as stipulated in Article 17 (3) GDPR, to restrict said processing in accordance with Article 18 GDPR;
to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (see also Article 20 GDPR);
to file complaints with the supervisory authority if they believe that data concerning them is being processed by the provider in breach of data protection provisions (see also Article 77 GDPR).

In addition, the provider is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same, in accordance with Articles 16, 17 (1), 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.

Likewise, under Article 21 GDPR, users and data subjects have the right to object to future processing of their data, insofar as the data is processed by the provider in accordance with Article 6 (1) (f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.

III. Information about the data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the data is not in breach of any statutory data retention obligations or unless otherwise stipulated below.

Server data

For technical reasons, in particular to ensure a secure and stable website, your internet browser transmits data to us or to our web space provider. These “server log files” collect data including the type and version of your internet browser, the operating system, the website you were on before you landed on our website (referrer URL), the page(s) of our website that you visit, the date and time of access and the IP address from which you access our website.

The data collected in this way is stored temporarily, but not together with other data of yours.

The lawful basis for this storage is Article 6 (1) (f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.

The data will be deleted again after seven days at the latest, unless it needs to be stored for longer for evidence purposes. Otherwise, the data will be wholly or partially excluded from deletion until an incident has been fully resolved.

Contact requests / contact option

If you contact us using the feedback form or by email, the data you provide will be used to process your request. You need to provide this data in order for us to process and respond to your request – without it, we will not be able to respond in full, if at all.

The lawful basis for this processing is Article 6 (1) (b) GDPR.

We will delete your data once we have finished responding to your request, unless there are legal obligations to retain the data, such as for a subsequent performance of a contract.

Use of service providers

We use service providers to provide services and process your data (known as commissioned data processing). The service providers process the data exclusively on the instruction of the Weizenbaum Institute and have a duty to comply with the applicable data privacy legislation. All processors have been carefully selected and receive access to your data only to the extent and for the period of time necessary to provide the services.

Glossary