We attribute considerable importance to data protection. The collection and processing of your personal data is carried out in observance of the valid data protection provisions, in particular the EU General Data Protection Regulation (GDPR) and the law to amend data protection law to the Regulation (EU) 2016/679 (DSAnpUG-EU). We process your personal data so that we are able to offer you the aforementioned portal.
Pursuant to Art. 4(2) GDPR, the legislator understands, in connection with personal data, the term ‘processing’ to mean collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, erasure or destruction.
1. Name and Contact Details of the Controller Responsible Under Data Protection Law
Franckeplatz 1, Haus 37
Director Prof. Dr. Thomas Müller-Bahlke
Telefon: 0345 2127-400
Telefax: 0345 2127-433
The Francke Foundations are a foundation under public law, registered in the foundation register of the federal state of Saxony-Anhalt.
Name and Contact Details of the Data Protection Officer
Franckeplatz 1, Haus 37
Dr. Jürgen Gröschl
E-Mail: datenschutz (at) francke-halle.de
If you have any questions on the protection of data at the Francke Foundations or on your rights, please contact our data protection officer.
2. General Use of this Website
2.1 Personal Data Processed by Us
You can visit our website without disclosing personal data. Where personal data is collected on our website (such as name, address or email address), this is always done on a voluntary basis, where possible. This data will not be disseminated to third parties without your explicit consent. Insofar as a contractual relationship is to be established between you and us, or provisions of such an agreement are to be specified or amended, or you make an enquiry, we will collect and use your personal data as far as this is necessary for these purposes (inventory data). We collect, process and use personal data if this is necessary for you to be able to use our website (usage data). All personal data is only stored for as long as required for the purposes given (processing of your enquiry or performance of a contract). In doing so, tax and commercial law retention periods are taken into account. By order of the competent authority, we may on a case-by-case basis disclose information about this data (inventory data), insofar as is necessary for criminal prosecution purposes, to protect against threats to public safety, to fulfil the legal duties of the German intelligence agencies or the German military counter-intelligence agency or to enforce intellectual property rights.
Our website sometimes uses so-called cookies. Cookies do not harm your computer and do not contain any viruses. Cookies serve to make our website more user-friendly, effective and secure. Cookies are small text files that are placed on your computer and stored by your browser.
Most of the cookies used by us are so-called “session cookies”. These are erased automatically at the end of your visit. Other cookies are stored on your terminal until you delete them. These cookies allow us to recognise your browser when you next visit our site. This also constitutes our legitimate interest in data processing pursuant to point (f) of Art. 6(1) GDPR.
You can adjust your browser settings so that you are informed when cookies are being placed, or so that you can decide on a case-by-case basis whether to accept cookies or to generally exclude them in certain cases. Deactivating cookies may limit the functionality of this website.
2.2 Analysis Cookies
– Website access
– Time of access
– Browser used
– Operating system used
– Possible reference to the website you accessed our website from
– IP address used (in anonymised form)
The IP address is stored in an anonymised form on our server so that it is impossible to draw conclusions on the individual website visitor. The collected data is never merged with other databases, for example to establish a link to specific person.
You can object to processing using analysis cookies at any time and with future effect.
This website uses the Matomo (www.matomo.org) analysis software, a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand. Our legitimate interest is in collecting and storing the statistical analyses of your user behaviour for optimisation and marketing purposes pursuant to point (f) of Art. 6(1) GDPR. For the same purpose, this data can be used to create and evaluate pseudonymised user profiles. Cookies can be used for this purpose. Cookies are small text files which are stored locally in the buffer of the web browser of the visitor to the website. Among other things, cookies enable the recognition of the web browser. Data collected using Matomo technology (including your pseudonymised IP address) is processed on our servers.
The information generated by the cookie in the pseudonymised user profile is not used for the personal identification of visitors to this website and is not merged with personal data from the holder of the pseudonym.
If you do not agree to the storage and evaluation of this data from your visit, you can object to its storage and use at any time by clicking below. In this case, an opt-out cookie will be placed in your web browser, which means Matomo will not collect any session data. Please note that the complete erasure of your cookies will mean that the opt-out cookie is also deleted and may have to be reactivated by you.
You may decide whether an unambiguous web analysis cookie may be placed in your browser to allow the website operator to collect and analyse various statistical data.
If you decide not to allow this, click on the following link to place the Matomo deactivation cookie in your browser.
Your visit to this website is currently being tracked by the Matomo web analysis services. Please click here to ensure that your visit is no longer tracked.
Please note: If you delete your cookies, the opt-out cookie will be deleted as well, and you may have to reactivate it.
2.4 Email Contact/Contact Form
When you contact us (e.g. by using the contact form or by email), we save the information you enter in order to process the enquiry and in case of further questions. We only process other personal data if you consent for us to do so or if it is legally permissible without special consent. The provider expressly points out that a transfer of data on the internet (e.g. when communicating by email) may have security gaps and cannot be completely protected from access by third parties.
Please note that your message may be forwarded and read by someone other than the recipient if they are absent. Therefore, please do not send confidential data and information by email or using the contact form.
You can subscribe to the newsletter via a link on our contact form. Insofar as you have given your express consent pursuant to point (a) of Art. 6(1) GDPR, we use the email address provided by you to inform you of upcoming events with our monthly electronic newsletter. After subscribing you will receive a registration link by email. Confirming the link proves that registration was actually carried out by you (so-called double opt-in).
You can unsubscribe from the newsletter at any time and your email address will be immediately deleted from our newsletter mailing list.
We are happy to answer any questions you may have regarding the newsletter: nachrichten (at) francke-halle.de
3. Purposes and Legal Basis of Processing
Point (a) of Art. 6(1) GDPR serves as the legal basis for the processing of data, for which we have obtained your consent for a specific processing purpose. Where processing of personal data is necessary to perform a contract, processing is based on point (b) of Art. 6(1) GDPR. The same applies to the processing operations which are required for the implementation of pre-contractual measures, for example in cases of requests regarding services. This processing takes place on the basis of point (f) of Art. 6(1) GDPR. This legal basis applies to processing operations not covered by any of the aforementioned legal bases, where processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests, fundamental rights and freedoms of the data subject. Our interests in data processing include but are not limited to ensuring the operation and safety of the website, evaluating how the website is used by visitors, and simplifying the use of the website.
Unless expressly stated otherwise, we store personal data only as long as is necessary to achieve the pursued purposes.
4. Categories of Recipients
Depending on the enquiry, the relevant data provided to us is only processed within the Francke Foundations.
Different service providers process personal data on our behalf. Corresponding contracts are used pursuant to Art. 28 GDPR to safeguard the security of your data. Such processors include:
– IT service provider: mps public solutions GmbH, Koblenz
– Commission partner: Harrassowitz Verlag, Wiesbaden
If you wish to use the contact form for your enquiry, we will process the personal data you provide in the form; name, email address and possibly telephone number. We additionally store the date and time of the enquiry. We only process the data disclosed by the contact form for the purpose of responding to your enquiry and/or issue.
You can decide yourself, which information you disclose on the contact form. The legal basis for processing your data is your consent pursuant to point (a) of Art. 6(1) GDPR. The Francke Foundations do not disclose your personal data to third parties, unless it is, for example, necessary to complete business transactions. Data transfer is limited to the required minimum.
After dealing with the matter, the data is initially stored for any eventual queries. You can request erasure of the data at any time, otherwise it is erased after the matter has been fully concluded.
5. Data Transfer to Third Countries
No transfer of personal data takes place.
6. Your Rights
In accordance with applicable law, you have various rights concerning your personal data. If you would like to assert your rights, please direct your enquiry by email or by post to the data protection officer named above and clearly identify yourself. Please find an overview of your rights below.
6.1 Right of Access of the Data Subject Pursuant to Art. 15 GDPR and Section 34 DSAnpUG-EU
You have the right to obtain from us at any time confirmation as to whether or not personal data relating to you is being processed. If this is the case, you have the right to obtain from us, free of charge, access to the personal data relating to you that we have stored as well as a copy of this data. Furthermore, you have a right to the following information:
1. the purposes of the processing;
2. the categories of personal data concerned;
3. the recipients or categories of recipient to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organisations;
4. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
5. the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of your personal data or to object to such processing;
6. the right to lodge a complaint with a supervisory authority;
7. where the personal data is not collected from you, any available information as to its source;
8. the existence of automated decision-making, including profiling, referred to in Art. 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
Where we have made the personal data public and are obliged to erase it, we, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by them of any links to, or copy or replication of, this personal data.
6.2 Right to Rectification acc. to Art. 16 of the GDPR
You have the right to request us to immediately rectify inaccurate personal data concerning you. Taking the purposes of processing under consideration in this context, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
6.3 Right to Erasure acc. to Art. 17 of the GDPR
You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the following grounds applies and processing is not necessary:
1. The purpose for which personal data was processed has ceased to apply.
2. You withdraw your consent on which the processing is based and there is no other legal ground for the processing.
3. You object to the processing pursuant to Art. 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing according to Art. 21(2) of the GDPR.
4. The personal data has been unlawfully processed.
5. The erasure of personal data is required in order to fulfil a legal obligation under EU law or the law of the EU member states to which we are subject.
6. The personal data has been collected in relation to the offer of information society services referred to in Article 8 (1) of the GDPR.
6.4 Right to Restriction of Processing acc. to Art. 18 of the GDPR
You have the right to obtain from us restriction of processing where one of the following applies:
1. The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
2. The processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead.
3. We no longer need the personal data for the purposes of the processing, but it is required by you for the establishment, exercise or defence of legal claims.
4. You have objected to processing pursuant to Art. 21(1) of the GDPR pending the verification whether our legitimate grounds override yours.
6.5 Right to Data Portability acc. to Art. 20 of the GDPR
Acc. to Art. 20 of the GDPR, you have the right to receive the personal data concerning you, which you have s provided to us, in a structured, commonly used and machine-readable format. Moreover, you have the right to transmit such data to another controller without hindrance from us where the processing is based on consent pursuant to point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR or on a contract pursuant to point (b) of Art. 6(1) of the GDPR and the processing is carried out by automated means, unless processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Furthermore, when exercising your right to data portability according to Art. 20(1) of the GDPR, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible and where this does not adversely affect the rights and freedoms of others.
6.6 Right to Object acc. to Art. 21 of the GDPR and art. 36 DSAnpUG-EU
You have the right to object, on grounds relating to a particular situation, at any time to processing of personal data concerning you which is necessary due to a legitimate interest on our part or to perform a task carried out for reasons of public interest or for the exercise of official authority.
If you make use of your right, we will no longer process your personal data, unless we are able to demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
6.7 Right to Withdraw Consent Given Under Data Protection Law
If you have given us consent, you have the right to withdraw your consent at any time. In this case, any data processing performed by us until such withdrawal will remain lawful. You can send us a message to datenschutz (at) francke-halle.de in that regard.
6.8 Right to Lodge a Complaint with a Supervisory Authority acc. to Art. 77 of the GDPR
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you believe that the processing of personal data relating to you infringes applicable law.
Nevertheless, we would appreciate it if you could contact us before doing so.
The supervisory authority in charge for us is:
Landesbeauftragter für den Datenschutz Sachsen-Anhalt
Telephone: +49 (0)391 81803-0
Fax: +49 (0)391 81803-33
7. Use of Social Media: Facebook Plug-In “Like”
The protection and careful handling of your data are important to us.
If you actively click on the Facebook button, direct contact will be established between you and Facebook. Thus, you have full control over your data.
Our website contains social network buttons (Facebook and Twitter) with which you can recommend the Francke Foundations to your friends and acquaintances.
This website uses Facebook plug-ins, provided by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. We point out to users of our website that this plug-in establishes a connection to Facebook. The ensuing transfer to your browser enables the plug-in to appear on the website.
By clicking the Facebook plug-in, the following data can be transferred to the provider, in accordance with point (a) of Art. 6(1) GDPR:
– IP address
– Browser information
– Operating system
– Screen resolution
– Installed browser plug-ins, for example Adobe Flash Player
– Previous website, if you have followed a link (referrer)
– The URL of the current website, etc.
Facebook users who are logged in are assigned to their personal Facebook account and can use the “like” button to publicly link and comment on the respective content.
The processing operations are carried out pursuant to point (f) of Art. 6(1) GDPR on the basis of the legitimate interests of Facebook. If you do not wish Facebook to directly assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website.
Facebook Inc., registered in the USA, is certified for the EU-U.S. Privacy Shield. This data protection agreement guarantees compliance with data protection standards which are applicable in the EU.
When using the Facebook plug-in on our website, our data protection rights are no longer applicable. For more information on the use of data by Facebook, please see the Facebook data protection provisions at https://www.facebook.com/policy.php.
8. Use of Social Media: Twitter Plug-In
The protection and careful handling of your data are important to us.
If you actively click on the Twitter button, direct contact will be established between you and Twitter. Thus, you have full control over your data.
The social media service Twitter is integrated on our website. Twitter is operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Twitter provides the so-called “tweet” function. With it you can publish messages of 140 characters, including links to websites on your own Twitter account. If you use Twitter’s “tweet” function on our website, the respective webpage will be linked to your Twitter account and publicised there.
By activating the Twitter plug-in, the following data can be transferred to the provider, in accordance with point (a) of Art. 6(1) GDPR:
– IP address
– Browser type
– Operating system
– Information on the previously accessed website
– Mobile service provider
– Information about the device (including device ID and application ID)
– Search items
– Cookie information
We do not obtain any knowledge about the content of the transferred data and its use by Twitter. Processing operations are carried out pursuant to point (f) of Art. 6(1) GDPR on the basis of the legitimate interests of Twitter.
When using the Twitter plug-in on our website, our data protection rights are no longer applicable.
Twitter Inc., registered in the USA, is certified for the EU-U.S. Privacy Shield data protection agreement. This data protection agreement guarantees compliance with data protection standards which are applicable in the EU.
Twitter provides the option of changing your data protection settings at the following link: http://twitter.com/account/settings.
For further information on data protection, please contact Twitter: http://twitter.com/privacy
At no time are you obliged to communicate data to us.
We protect your personal data by taking all technical and organisational measures possible to meet the protection goals.
We are unable to guarantee data security when communicating by email, we therefore recommend communicating confidential information by post.
Halle (Saale), 22 August 2018
Further Francke Foundations Privacy Policies