The Совместная комиссия по изучению новейшей истории российско-германских отношений attaches great importance to the secure and confidential processing of your data, in compliance with the provisions of law. In order to fulfil these requirements, we have taken technical and organisational measures to ensure that those legal regulations are met.

As a rule, you can visit this website without leaving any personal data. To do so, you may have to set the browser you use accordingly. The collected data will be processed exclusively for the purpose of providing this website and for the further specified purposes. Your data will not be disclosed to third parties unless this is necessary for the relevant purpose or you have agreed to it.

Personal data

Personal data is individual information on personal or factual circumstances of an identified or identifiable natural person including, for example, names, addresses, telephone numbers or e-mail or IP addresses.

Collection and processing of data when you visit our website

When you visit this website, in connection with the provision of a service the following data among others will be automatically recorded and processed:

• IP address / domain of the accessing computer
• the date and time when the website is accessed
• the quantity of data transferred
• the success or failure of the attempt to access the site

That data will be processed for technical reasons, for the purpose of providing the website, and may also be used for the purposes of internal system statistics, system stability or security. The data will be stored for a maximum of seven days. As a rule, this is data which cannot be directly related to specific persons.

The legal basis for the temporary storage of data and log files is article 6(1) point (f) GDPR. The recording of the data for the purpose of providing the website and the storage of the data in log files is absolutely necessary for the operation of the website. The user therefore does not have any possibility of objecting.

Cookies and Similar Features

To optimize our web presence, we use cookies. These are small text files stored in your computer's main memory. A cookie (or similar data medium) is a small piece of data stored in a user's device while the user is using a website. Cookies can be send back to a server any time a user loads the website or accesses certain functions. This allows us to improve your access to our site.

We will ask for your consent or point out to the fact that we store and read cookies on your device.

You can prevent storage of cookies by choosing a "disable cookies" option in your browser settings. But this can limit the functionality of our Internet offers as a result.

You may opt-out from many ad-serving cookies by using the services provided by optout.networkadvertising.org and in addtition to that by www.aboutads.info/choices/ for users from the United States or www.youronlinechoices.com/uk/your-ad-choices/ for users form the European Union.

Contact forms, e-mails

A contact form is available on our website, which you can use to contact us electronically. If a user takes advantage of this option, the data entered in the input mask will be transmitted to and stored by us. That data consists of:

• name
• e-mail address
• notification

No further data will be stored in this context.

In the moment the form is sent we additionally store the following data:

• the user’s IP address
• date and time

In the course of the dispatch process your consent will be obtained for the processing of the data and you will be referred to this privacy policy.

Alternatively, you can contact us via the e-mail address provided, in which case the personal data of the user transmitted with the e-mail will be stored.

The data will not be passed on to any third parties in this context. The data will be used exclusively for processing the communication.

Legal basis for the data processing

The legal basis for the processing of the data is, where the user’s consent has been obtained, article 6(1) point (a) GDPR.

The legal basis for the processing of data which is transmitted in the course of sending an e-mail is article 6(1) point (f) GDPR. If the e-mail contact is aimed at the conclusion of a contract, article 6(1) point (b) GDPR is an additional legal basis for the processing.

The purpose of the data processing

Our sole purpose in processing the personal data from the input mask is to process your communication with us. If you contact us by e-mail, the required legitimate interest in the processing of the data also pertains. The other personal data processed during the dispatch process serves the purpose of preventing misuse of the contact form and ensuring the security of our information technology systems.

Storage period

The data will be deleted as soon as it is no longer needed to achieve the purpose for which it was collected. This applies to personal data from the input mask of the contact form and personal data sent by e-mail x when the respective communication with the user has ended. The communication ends when the circumstances indicate that the issue in question has been conclusively clarified.
The personal data additionally collected during the dispatch process will be deleted no later than after a period of seven days.

Rights to information, rectification and erasure

If your personal data is processed you are a data subject according to the GDPR and are entitled to the following rights with respect to the controller.

Right to information

You may request confirmation from the controller as to whether personal data concerning you is processed by us.

If such processing occurs, you may request the following information from the controller:

1. the purposes for which the personal data is processed;
2. the categories of personal data which are processed;
3. the recipients / the categories of recipients to which the personal data relating to you has been disclosed or will yet be disclosed;
4. the period for which the personal data relating to you will be stored or, if specific information in this respect cannot be provided, criteria used to determine the storage period;
5. the existence of a right to the rectification or erasure of the personal data relating to you, a right to the restriction of the processing by the controller or a right to object to that processing;
6. the existence of a right to lodge a complaint with a supervisory authority;
7. all the available information on the origin of the data if the personal data is not collected from the data subject;
8. the existence of an automated decision-making process including profiling as referred to in article 22(1) and (4) GDPR and, at least in those cases, meaningful information on the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You are entitled to a right to request information as to whether the personal data relating to you is transmitted into a third country or to an international organisation. In this context you may request to be notified of the appropriate safeguards pursuant to article 46 GDPR in connection with the transmission.

Right to rectification

You have the right to rectification and/or completion with respect to the controller, if the processed personal data relating to you is incorrect or incomplete. The controller must carry out the correction without delay.

Right to restriction of the processing

Subject to the following conditions, you can demand the restriction of the processing of the personal data relating to you:

1. if you contest the accuracy of the personal data relating to you, for a period enabling the controller to verify the accuracy of the personal data;
2. the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of its use;
3. the controller no longer needs the personal data for the purposes of processing, but you require it for the purpose of establishing, exercising or defending legal claims; or
4. if you have objected to the processing pursuant to article 21(1) GDPR pending verification of whether the legitimate grounds of the controller override your grounds.

If the processing of the personal data relating to you has been restricted, that data may only be processed with your consent or for the purpose of establishing, exercising or defending legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the EU or a Member State - with the exception of storage.

If processing has been restricted in accordance with the above-mentioned provisions, you will be notified by the controller before the restriction of processing is lifted.

Right to erasure

Erasure obligation

You may demand that the controller erase without delay the personal data relating to you, and the controller will be obliged to erase that data without delay provided that one of the following grounds applies:

1. the personal data relating to you is no longer necessary for the purposes for which it was collected or otherwise processed;
2. you revoke your consent on which the processing is based in accordance with article 6(1) point (a) or article 9(2) point (a) GDPR, and there are no other legal grounds for processing;
3. you object to the processing pursuant to article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to article 21(2) GDPR;
4. the personal data relating to you has been unlawfully processed;
5. the personal data must be erased for compliance with a legal obligation under EU or Member State law to which the controller is subject;
6. the personal data relating to you was collected in relation to the offer of information society services referred to in article 8(1) GDPR.

Notification of third parties

If the controller has made the personal data relating to you public and it is obliged to erase it pursuant to article 17(1) GDPR, taking account of available technology and the cost of implementation it shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as a data subject have requested that they erase any links to, or copy or replication of, that personal data.

Exceptions

The right to erasure does not exist insofar as the processing is necessary:

1. for the exercise of the right to freedom of expression and information;
2. for the fulfilment of a legal obligation which requires the processing under EU or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
3. for reasons related to the public interest or in the area of public health in accordance with Article 9(2) point (h) and (i) and article 9(3) GDPR;
4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with article 89(1) GDPR, insofar as the right referred to in section a) is expected to prevent or seriously hamper the fulfillment of the objectives of that processing; or
5. for the purpose of establishing, exercising or defending legal claims.

Right to notification

If you have asserted the right to rectification, erasure or restriction of the processing with respect to the controller, it has an obligation to notify all the recipients to which the personal data relating to you has been disclosed of that rectification or erasure of the data or the restriction of the processing, unless this proves to be impossible or involves disproportionate expenses.

You have a right with respect to the controller to be notified of those recipients.

Right to data portability

You have the right to be provided with the personal data relating to you that you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit that data to another controller without obstruction by the controller that was provided with the personal data, if:

1. the processing is based on a consent pursuant to article 6(1) point (a) GDPR or Article 9(2) point (a) GDPR or on a contract pursuant to article 6(1) point (b) GDPR, and
2. the processing is carried out by automated means.

In the exercise of that right you also have the right to have the personal data relating to you transmitted directly from one controller to another, where technically feasible. Freedom and rights of other persons must not be adversely affected as a result.

The right to data portability does not apply to processing of personal data which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right of objection

You have the right to object to the processing of personal data relating to you that occurs on the basis of article 6(1) point (e) or (f) GDPR on grounds relating to your particular situation. This also applies to profiling based on those provisions. The controller will no longer process the personal data relating to you unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedom or the processing serves the purpose of the establishment, exercise or defence of legal claims.

If the personal data relating to you is processed in order to conduct direct marketing, you have the right to object at any time to the processing of the personal data relating to you for the purposes of such marketing. This also applies to profiling to the extent it is related to such direct marketing. If you object to the processing for the purposes of direct marketing, the personal data relating to you will no longer be processed for those purposes.

You have the option, in the context of the use of information society services and notwithstanding Directive 2002/58/EC, of exercising your right to object by automated means using technical specifications.

If the user contacts us by e-mail, he/she can object to the storage of his/her personal data at any time. In such a situation, the communication may not be continued.

Right to revoke the declaration of consent under data protection laws

You have the right to revoke your declaration of consent under data protection laws at any time. The revocation of the consent shall not affect the legality of the processing that occurred on the basis of the consent up until the revocation.

Automated individual decision-making including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision:

1. is necessary for entering into, or performance of, a contract between you and the controller,
2. is authorised by EU or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedom and legitimate interests, or
3. is based on your explicit consent.

However, those decisions must not be based on special categories of personal data referred to in article 9(1) GDPR, unless article 9(2) point (a) or (g) apply and suitable measures have been taken to safeguard your rights and freedom and legitimate interests.

With regard to cases referred to in (1) and (3), the controller implements suitable measures to safeguard your rights and freedom and legitimate interests, which include at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of the personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint was lodged will notify the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR.

Controller, DPO

Name and address of the controller

The controller according to the General Data Protection Regulation and other national data protection laws of the Member States and other data protection regulations is:
 

Совместная комиссия по изучению новейшей истории российско-германских отношений
Nordost-Institut (IKGN e. V.) an der Universität Hamburg
Lindenstraße 31
21335 Lüneburg
Deutschland
E-Mail: V.Brunel@ikgn.de