Privacy Policy

introduction

In this privacy policy, the DGAF outlines its procedures regarding data collected from members and users who access our websites or otherwise provide us with personal data.

Competent authority within the meaning of the General Data Protection Regulation (GDPR):
State Commissioner for Data Protection and Freedom of Information, Königsstraße 10a, 70173 Stuttgart.

User rights

According to the GDPR, you have the following rights with regard to your personal data:
1. Right of access, Art. 15 GDPR
2. Right to rectification, Art. 16 GDPR
3. Right to erasure (“right to be forgotten”), Art. 17 GDPR
4. Right to restriction of processing, Art. 18 GDPR
5. Right to data portability, Art. 20 GDPR
6. Right to object to processing, Art. 21 GDPR (see also point 5 below).
Furthermore, according to Article 22 GDPR, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, provided that the decision
• is not necessary for the conclusion or performance of a contract between you as the data subject and us as the controller,
• is permitted under Union or Member State law to which we, as the controller, are subject, and that law contains appropriate safeguards to protect your rights and freedoms and legitimate interests as a data subject or
• with your explicit consent.

Please note, however, that these rights are not absolute, but are subject to our own legitimate interests and regulatory requirements.

Your rights of withdrawal and objection

Your right to withdraw consent
You have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out before the withdrawal. If consent is withdrawn, we will cease the corresponding data processing.

Your right to object based on legitimate interests

Pursuant to Article 21 of the GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (f) of Article 6(1) of the GDPR. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.

Your right to object to direct marketing
According to Article 21 of the GDPR, you have the right to object to the processing of your personal data for direct marketing purposes, the exercise of which will lead to the termination of processing for direct marketing purposes or the safeguarding of legitimate interests.

If you believe that the processing of your personal data violates data protection regulations, you have the right to lodge a complaint with a supervisory authority pursuant to Article 77 of the GDPR. This right to lodge a complaint can be exercised, in particular, with a supervisory authority in the Member State where you reside or where the alleged infringement occurred. In Baden-Württemberg, the competent supervisory authority is the State Commissioner for Data Protection and Freedom of Information, Königsstraße 10a, 70173 Stuttgart, Germany.

If you wish to exercise any of the rights listed here or require further information, please contact our data protection officer at:
49 7774 9390102

storage

We retain your personal data for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our policies. Retention periods depend on the type of data collected and the purpose for which it was collected, taking into account both case-specific circumstances and the need to delete outdated, unused information as soon as possible. We store customer records containing personal data, account setup documents, communications, and other data in accordance with applicable laws and regulations.

We may, at any time and at our sole discretion, correct, complete, or remove incomplete or inaccurate data.

Basis for data collection

The legal basis for data processing arises from the provision of Article 6 GDPR, whereby our data processing is primarily
• based on consent, Art. 6 para. 1 sentence 1 lit. a GDPR
• for the performance of a contract, Art. 6 para. 1 sentence 1 lit. b GDPR
• to fulfill legal obligations, Art. 6 para. 1 lit. c. GDPR
• for the purposes of legitimate interests, Art. 6 para. 1 lit. f GDPR

take place.

The respective legal basis is specified below in this privacy policy in accordance with Art. 13 GDPR for the respective processing operations.

If we use contracted service providers for individual functions of our services or wish to use your data for advertising purposes, we will inform you in more detail about the respective processes below in this privacy policy. We will also specify the defined criteria for the storage period.

The processing of your personal data (i.e., any data which, with reasonable means, allows for your identification; “personal data”) is necessary in order to fulfill our contractual obligations to you, to provide you with our services, to protect our legitimate interests, and to comply with legal and financial regulatory obligations to which we are subject.

By using this website, you consent to the collection, storage, use, disclosure and other processing of your personal data as described in this privacy policy.

Please read the privacy policy carefully before making any decisions.

What data is collected?

We collect two types of data and information from users.
The first category includes non-identifying and non-identifiable user data that is provided or collected through the use of the website (“non-personal data”). You can visit our website without providing any personal information. When you use our website for purely informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server and that is stored in log files (server log files). When you view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security. The legal basis for this is Article 6(1)(f) GDPR:
– IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access status/HTTP status code
– amount of data transferred in each case
– Website from which the request originates
– Browser
– Operating system and its interface
– Language and version of the browser software.

We do not know the identity of the user from whom non-personal data was collected. Non-personal data that may be collected includes aggregated usage data and technical data transmitted by your device, including certain information regarding software and hardware (e.g., browser and operating system used, language settings, access time, etc.). We use this data to improve the functionality of our website. We may also collect data about your activity on the website (e.g., pages visited, browsing behavior, clicks, actions, etc.).

The second category includes personal data, i.e., data that identifies or can identify an individual through reasonable means. Such data includes:
• Device data: We collect personal data from your device. This data includes geolocation data, IP address, unique identifiers (e.g., MAC address and UUID), and other data resulting from your activity on the website.
• Registration data: When you register on our website, you will be asked to provide certain information, e.g.: first and last name, email address or postal address or other information.

How do we obtain data about you?

We obtain your personal data from various sources:
• You provide us with such data voluntarily, for example when registering on our website. Registration is your personal, central access point to the functions and our offers.
• We receive such data when you use our website or access it in connection with one of our services.

• We obtain such data from other providers, services and public registers (for example, from data traffic analysis providers).

How is the data used? To whom is the data passed on?

We do not share user data with third parties except as described in this privacy policy. When you use the extended features/services of our services, we store your data necessary for the purpose of contract processing (Art. 6 para. 1 sentence 1 lit. b GDPR), including payment information. Furthermore, we store the voluntary data you provide for the duration of your use of our services, unless you delete it beforehand.

We use data for the following purposes:
• For the contractual processing of membership fees
• Your participation in our events
• To communicate with you (sending newsletters, providing technical information and, if necessary, processing inquiries)
• To receive information about new updates and services
• For advertising purposes when you use our website (more information under “Advertising”)
• For marketing our websites and products (more information under “Marketing”)
• For statistical and analytical purposes to improve the website
In addition to the various uses listed above, we may also share personal data with our subsidiaries, affiliates and subcontractors.

In addition to the purposes listed in this privacy policy, we may transfer personal data to our trusted third-party providers, located in different jurisdictions around the world, for the following reasons:
• Hosting and operating our website
• Providing our services, including the personalized display of our website
• Storing and processing such data on our behalf
• Placing ads and the ability to assess the success of our advertising campaigns, retargeting users
• Providing marketing offers and promotional materials in connection with our website and our services

Your participation in our events
• To communicate with you (sending notifications regarding our services, providing technical information and, if necessary, processing customer service requests)
• To receive information about new updates and services
• For advertising purposes when you use our website (more information under “Advertising”)
• For marketing our websites and products (more information under “Marketing”)
• For statistical and analytical purposes to improve the website
In addition to the various uses listed above, we may also share personal data with our subsidiaries, affiliates and subcontractors.

In addition to the purposes listed in this privacy policy, we may transfer personal data to our trusted third-party providers, located in different jurisdictions around the world, for the following reasons:
• Hosting and operating our website
• Providing our services, including the personalized display of our website
• Storing and processing such data on our behalf
• Placing ads and the ability to assess the success of our advertising campaigns, retargeting users
• Providing marketing offers and promotional materials in connection with our website and our services

• Conducting studies, technical diagnoses or analyses

We may also disclose data if we believe in good faith that doing so is helpful or appropriate to: (i) comply with applicable laws, regulations, legal processes, or governmental requests; (ii) enforce our policies (including our agreement) and investigate potential violations thereof; (iii) investigate, detect, prevent, or take action regarding illegal activities or other misconduct, suspected fraud, or security issues; (iv) establish or enforce our legal rights or defend ourselves against legal claims; (v) protect our rights, property, or safety, the safety of our users, your safety, or the safety of others; or (vi) cooperate with law enforcement and/or protect intellectual property or other legal rights.

Cookies

We and our partners use cookies to provide the relevant services. This also applies when you visit our website or access our services.

A "cookie" is a small data packet that is assigned to your device by a website when you visit it. Cookies are useful and can be used for various purposes. These include, for example, easier navigation between different pages, the automatic activation of certain functions, saving your settings, and optimized access to our services. The use of cookies also allows us to show you relevant advertising tailored to your interests and to collect statistical information about your use of our services.

The processing (the use of cookies) is based on the legal basis of Art. 6 para. 1 sentence 1 lit. f GDPR due to the legitimate interest in achieving the aforementioned described purposes.

This website uses the following types of cookies:

a. “Session cookies”, which ensure normal system operation. Session cookies are only stored for a limited time during a session and are deleted from your device as soon as you close your browser.


b. “Persistent cookies”, which are only read by the website and are not deleted when the browser window is closed, but are stored on your computer for a specific period of time. This type of cookie allows us to identify you on your next visit and, for example, to save your settings.


c. “Third-party cookies”, which are set by other online services that are represented with their own content on the page you are visiting. These can be, for example, external web analytics companies that record and analyze access to our website.

Cookies do not contain any personally identifiable information, but the personal data we store may be linked to the data contained in the cookies. You can delete cookies via your device settings. Follow the relevant instructions. Please note that disabling cookies may restrict certain functions when using our website.

The tool we use is based on Snowplow Analytics technology. The data we collect about website usage includes, for example, how often users visit the website and which areas are accessed. The tool we use does not collect any personal data and is used by our web hosting provider and service provider solely to improve their own services.

Use of social media plug-ins

We currently use the following social media plugins: Facebook. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially transmitted to the plugin providers. You can recognize the plugin provider by its logo. We offer you the option of communicating directly with the plugin provider via the button. Only when you click on the marked field and thereby activate it will the plugin provider receive the information that you have accessed the corresponding page of our website. In addition, the data specified in Section II, Number 1 of this privacy policy will be transmitted. According to Facebook, in Germany, the IP address is anonymized immediately after collection. By activating the plugin, your personal data is transmitted to the respective plugin provider and stored there (in the USA for US-based providers). Since the plugin provider collects data primarily via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the logo.

We have no influence over the data collected or the data processing operations, nor are we aware of the full extent of the data collection, the purposes of the processing, or the storage periods. We also have no information regarding the deletion of the collected data by the plug-in provider.

The plug-in provider stores the data collected about you as user profiles and uses them for advertising, market research, and/or to tailor its website to user needs. This analysis is carried out in particular (even for users who are not logged in) to display targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact the respective plug-in provider. The plug-ins allow you to interact with social networks and other users, enabling us to improve our services and make them more interesting for you. The legal basis for the use of the plug-ins is Article 6(1)(f) GDPR.

Data is transferred regardless of whether you have an account with the plug-in provider and are logged in. If you are logged in to the plug-in provider, the data we collect is directly associated with your existing account with that provider. If you click the activated button and, for example, share the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you regularly log out of social networks after use, and especially before activating the button, as this will prevent the data from being associated with your profile on the plug-in provider's platform.

Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the privacy policies of these providers, which are linked below. There you will also find further information on your rights and settings options to protect your privacy.

Addresses of the respective plug-in providers and URLs with their privacy policies:

Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection and Facebook plugins: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo and https://developers.facebook.com/docs/plugins/.. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Use of script libraries (Google Web Fonts)

To ensure our content is displayed correctly and attractively in every browser, we use script and font libraries such as Google Web Fonts (https://www.google.com/webfonts) for this website. Google Web Fonts are transferred to your browser's cache, so they only need to be loaded once. If your browser does not support Google Web Fonts or blocks access to them, the content will be displayed in a standard font.
• When script or font libraries are accessed, a connection to the library operator is automatically established. Theoretically, this operator could collect data. Currently, it is unknown whether and for what purpose the operators of the respective libraries actually collect data.

• Here you can find the privacy policy of the operator of the Google library: https://www.google.com/policies/privacy.

Data collection by third parties

This policy only covers the use and disclosure of data we collect from you. If you post data on other websites or disclose it to third parties online, other terms and conditions may apply. Therefore, always read the terms and conditions and privacy policies carefully before disclosing any data.

Basic principles

This privacy policy does not apply to the business practices of companies that we do not own or control, or to individuals other than our employees and staff, including third parties to whom we disclose this data as described in this privacy policy.

How do we protect your data?

We implement security measures on our website with great care and protect your data. We use industry-standard procedures and guidelines to ensure the protection of the data we collect and store, and to prevent the unauthorized use of such data. We also require third parties to adhere to similar security requirements in accordance with this privacy policy. Although we take reasonable steps to protect data, we cannot be held responsible for the actions of those who gain unauthorized access to or misuse our website, and we make no express or implied warranty that we can prevent such access.
Transfer of data outside the European Economic Area
Your personal data will not be transferred to third countries outside the EU.
Please note that some recipients may not be located within the European Economic Area. If this is the case, we will only transfer your data to countries approved by the European Commission as having an adequate level of data protection, or we will ensure an adequate level of data protection through a legal agreement.

Advertising

When you access our website, we may display advertisements using third-party ad technology. This technology uses your service usage data for ad targeting (e.g., by placing third-party cookies in your web browser).
You can opt out of numerous third-party ad networks, including those operated by members of the Network Advertising Initiative (“NAI”) and the Digital Advertising Alliance (“DAA”). Information about the practices of NAI and DAA members, your options regarding their use of your data, and how to opt out of third-party ad networks operated by NAI and DAA members can be found on their respective websites: http://optout.networkadvertising.org/#!/ and http://optout.aboutads.info/#!/.

marketing

We may use your personal data, such as your name, email address, phone number, etc., ourselves or pass it on to an external subcontractor to provide you with promotional materials regarding our services that may be of interest to you.

We respect your right to privacy. Therefore, these marketing materials always include the option to unsubscribe from further communications. If you unsubscribe, your email address or phone number will be removed from our marketing distribution lists.

Please note that even after unsubscribing from our marketing emails, we will continue to send you emails containing important information that do not include an unsubscribe option. These include maintenance notifications and administrative messages.

Minors

Protecting children's data is especially important online. This website is not designed for or directed at children. Minors may only use our services with the prior consent or authorization of a parent or guardian. We do not knowingly collect personal data from minors. If a parent or guardian becomes aware that their child has provided us with personal data without their consent, they can contact us at moc.tnemeganamsgnugat-was@ofni.

Updates or changes to this privacy policy

Protecting children's data is especially important online. This website is not designed for or directed at children. Minors may only use our services with the prior consent or authorization of a parent or guardian. We do not knowingly collect personal data from minors. If a parent or guardian becomes aware that their child has provided us with personal data without their consent, they can contact us at ed.fagd@ofni.

For general questions about the website, the data we collect about you, or how we use this data, please contact us at ed.fagd@ofni

German Society for Arteriosclerosis Research (DGAF)


Last modified on April 22, 2020