Privacy Notice

1. General information

The operator of this website takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. When you visit this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done. We would like to point out that data transmission over the Internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

1.1 Responsible bodies

Georg-August-Universität Göttingen
Public Law Foundation
Universitätsmedizin Göttingen (hereinafter also referred to as 'we' or 'us' or 'controller')
Implementation and control of data protection regulations by Prof. Dr. rer. nat. Dagmar Krefting
Department of Medical Informatics
Robert-Koch-Straße 40
37075 Göttingen
E-mail: mi.kontakt@med.uni-goettingen.de

1.2 Data protection officer

If you have any questions regarding the processing of your personal data or your rights in relation to data protection, please contact

University Medical Center Göttingen
- Data Protection Officer -
37099 Göttingen
Telephone: 0551 3962762
E-mail: datenschutz@med.uni-goettingen.de

If you have any questions regarding the processing of your personal data or the assertion of your rights, please contact dzhk.support@med.uni-goettingen.de.

2. User rights

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the right to exercise your rights as a data subject. You have the following rights with regard to the processing of your personal data by us:

  • Right to revoke consent (Art. 7 para. 3 GDPR)
  • Right to information (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to lodge a complaint (Art. 13 para. 2 lit. d GDPR)

2.1 Right to revoke the declaration of consent under data protection law

If the processing of your personal data is based on your consent, you have the right to withdraw your declaration of consent under data protection law at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of consent-based processing done previous to the withdrawal. You can withdraw your consent by sending us an email to: dzhk.support@med.uni-goettingen.de.

2.2 Right to revoke the declaration of consent under data protection law

You can request information from us at any time within the framework of the statutory provisions as to whether personal data is being processed by us. If this is the case, you have the right to request information about the scope of the data processing.

2.3 Right to rectification

You have a right to rectification and/or completion of your data held by us, if the personal data processed concerning you is incorrect or incomplete.

2.4 Right to erasure

You have the right to request the erasure of personal data concerning you without undue delay, provided that the requirements for this are met.

2.5 Right to restriction of processing

If the requirements for this are met, you can request that the processing of your personal data be restricted. The right to restriction of processing does not apply if the processing is necessary for technical provision and use or due to legal requirements.

2.6 Right to data portability

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where the conditions for this are met.

2.7 Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. The consequence of the objection is that the controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims. Your right to object may be restricted to the extent that it is likely to render impossible or seriously impair the realization of research or statistical purposes and the restriction is necessary for the fulfillment of the research or statistical purposes.

2.8 Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which this website is operated.

The State Commissioner for Data Protection of Lower Saxony Prinzenstrasse 5
30159 Hanover
Telephone: 0511-120 4500
Fax: 0511-120 4599
E-mail: poststelle@lfd.niedersachsen.de

3. Data collection in the context of visiting our website

3.1 Technically required data

When you use the website to search for information, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. When you visit our website, we collect the following data, which is technically necessary for us to ensure the functionality of the website as well as the stability and security of our systems and to enable optimization of the website:

  • IP address;
  • Date and time of access to this website;
  • Time zone difference to Greenwich Mean Time (GMT);
  • Content of the request (specific page);
  • Access status/HTTP status code;
  • Amount of data transferred in each case;
  • Website from which the request originates;
  • Browser type;
  • Operating system and its interface;
  • Language and version of the browser software;
  • The internet service provider of the accessing system and
  • Other similar data and information used for security purposes in the event of attacks on our systems.

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. The data is not analyzed for marketing purposes in this context.

The basis for processing this data is Art. 6 para. 1 lit. b GDPR. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. A statistical analysis of the IP address may be necessary in order to detect and prevent attacks on the availability of the website or the confidentiality of the content and data of the website and, in the event of a criminal offense, to report it to the police.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after seven days at the latest.

3.2 Contact

If you send us inquiries, the contact details you provide will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. It is up to you which contact data you enter; it is not mandatory, but you must provide at least one contact option (address, telephone or e-mail) so that we can process your request. We will not pass on the data you enter without your consent. If this is planned, we will ask for your consent beforehand. The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to answer your inquiry. If the contact request relates to an existing contract, the legal basis for the processing is Art. 6 para. 1 lit. b GDPR. As a rule, we delete your personal data at the end of the DZHK infrastructure project, unless we are obliged to keep it for longer to comply with our legal obligations. The provision of personal data is neither legally nor contractually required. If you do not provide your data, we will not be able to (continue to) communicate with you.

3.3 Cookies

This website does not use cookies.

3.4 Recipients of personal data

The processing of personal data in the context of this site is carried out by the UMG. Beyond this, your personal data will only be passed on within the framework of the applicable data protection laws,

  • - if we are legally or judicially obliged to do so,
  • - to law enforcement authorities or other government agencies, or
  • - if we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity.

3.5 No data transfer to third countries

No personal data is transferred to countries outside the EU.

3.6 SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from 'http://' to 'https://' and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.>