1. Name and contact details of the controller and the company data protection officer
Controller (hereinafter Minor): Minor – Projektkontor für Bildung und Forschung gemeinnützige GmbH (hereinafter Minor), Alt-Reinickendorf 25, 13407 Berlin, telephone: +49 30 – 45 79 89 500, fax: +49 30 – 45 79 89 555, email: minor@minor-labora.de
Minor's company data protection officer is at the above address, or at minor@minor-labora.de reachable.
2. Collection and storage of personal data and the nature and purpose of their use
a) When visiting the website
When you visit our website www.minor-labora.de, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:
- IP address of the requesting computer,
- date and time of access,
- name and URL of the retrieved file,
- website from which access is made (referrer URL),
- the browser used and, if applicable, the operating system of your computer and the name of your access provider.
The aforementioned data will be processed by us for the following purposes:
- ensuring a smooth connection of the website,
- Ensuring comfortable use of our website,
- evaluation of system security and stability, and
- for other administrative purposes.
The legal basis for data processing is Art. 6 (1) sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. In no case will we use the data collected for the purpose of drawing conclusions about your person.
In addition, we use cookies and analysis services when visiting our website. Further explanations can be found under sections 4 and 5 of this data protection declaration.
b) When using our contact form
If you have any questions, we offer you the opportunity to contact us via the form provided on the website. It is necessary to provide a valid e-mail address so that we know from whom the request originates and in order to be able to answer it. Additional information may be provided voluntarily.
The data processing for the purpose of contacting us takes place in accordance with Art. 6 (1) sentence 1 lit. a GDPR on the basis of your voluntarily granted consent.
The personal data collected by us for the use of the contact form will be deleted after completion of the request made by you.
3. Disclosure of data
Your personal data will not be transferred to third parties for purposes other than those listed below.
We will only share your personal information with third parties if:
- you have given your express consent pursuant to Article 6(1), first sentence, point (a), of the GDPR,
- the disclosure pursuant to Art. 6 (1) sentence 1 lit. f GDPR is necessary for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
- in the event that there is a legal obligation for disclosure pursuant to Article 6(1), first sentence, point (c), GDPR,
- this is legally permissible and is necessary for the processing of contractual relationships with you in accordance with Art. 6 (1) Sentence 1 (b) GDPR, and
- it is necessary to carry out scientific research in accordance with Article 6(1)(f) GDPR and there is no reason to assume that your legitimate interest in the exclusion of processing or use predominates.
4. Cookies
We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device, do not contain viruses, trojans or other malicious software.
The cookie stores information that arises in connection with the specific device used. However, this does not mean that we are immediately aware of your identity.
The use of cookies serves on the one hand to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after leaving our site.
In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your device for a specified period of time. If you visit our site again to use our services, it will automatically recognize that you have already been with us and what inputs and settings you have made so that you do not have to enter them again.
On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you (see section 5). These cookies allow us to automatically recognize that you have already been with us when you visit our site again. These cookies are automatically deleted after a defined period of time.
The data processed by cookies are necessary for the aforementioned purposes in order to safeguard our legitimate interests and those of third parties pursuant to Art. 6 (1) sentence 1 lit. f GDPR.
Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. However, the complete disabling of cookies may prevent you from using all the features of our website.
5. Analysis tools
The tracking measures listed below and used by us are carried out on the basis of Art. 6 (1) sentence 1 lit. f GDPR. With the tracking measures used, we want to ensure a needs-based design and the continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.
The respective data processing purposes and data categories can be found in the corresponding tracking tools.
a) Google Analytics
We use Google Analytics, a web analysis service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as ‘Google’). In this context, pseudonymised user profiles are created and cookies (see section 4) are used. The information generated by the cookie about your use of this website, such as
- browser type/version,
- operating system used,
- Referrer URL (the previously visited page),
- hostname of the accessing computer (IP address),
- time of the server request,
are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on the website activities and to provide other services related to the use of the website and the Internet for the purposes of market research and the needs-based design of these websites. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of them. Under no circumstances will your IP address be merged with other data from Google. The IP addresses are anonymized so that an assignment is not possible (IP masking).
You can prevent the installation of cookies by setting the browser software accordingly; However, we would like to point out that in this case, not all functions of this website can be used in full.
You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).
As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie is set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
For more information about data protection in connection with Google Analytics, see the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).
b) Google Adwords Conversion Tracking
In order to statistically record the use of our website and to evaluate it for the purpose of optimizing our website for you, we also use Google Conversion Tracking. A cookie (see section 4) is set by Google Adwords on your computer if you have reached our website via a Google ad.
These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the Adwords customer's website and the cookie has not yet expired, Google and the customer can recognize that the user has clicked on the ad and has been redirected to this page.
Each Adwords customer receives a different cookie. Cookies can therefore not be tracked via the websites of Adwords customers. The information collected using the conversion cookie is used to create conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information with which users can be personally identified.
If you do not wish to participate in the tracking procedure, you can also refuse the setting of a cookie required for this purpose – for example by using a browser setting that generally deactivates the automatic setting of cookies. You can also disable cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com. Google's privacy policy on conversion tracking can be found here (https://services.google.com/sitestats/de.html).
6. Microsoft cloud services
We use the cloud offered by Microsoft and the cloud software services (so-called software as a service, e.g. Microsoft Office) for the following purposes: Document storage and management, calendar management, email delivery, spreadsheets and presentations, exchange of documents, content and information with specific recipients or publication of web pages, forms or other content and information, as well as chats and participation in audio and video conferences.
Here, the personal data of the users are processed, insofar as they become part of the documents and content processed within the described services or are part of communication processes. This may include, for example, master data and contact data of the users, data on processes, contracts, other processes and their contents. Microsoft also processes usage data and metadata used by Microsoft for security purposes and service optimization.
As part of the use of publicly accessible documents, websites or other content, Microsoft may store cookies on the user's computer for purposes of web analysis or to remember user settings.
Also in the case of requests for information and the assertion of user rights, we point out that these can be asserted most effectively with the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information. If you still need help, then you can contact us.
We use the Microsoft Cloud Services on the basis of our legitimate interests pursuant to Art. 6 (1) (f) GDPR in efficient and secure administrative and cooperation processes. Furthermore, the processing is carried out on the basis of an order processing contract with Microsoft.
For more information, see Microsoft's Privacy Policy (https://privacy.microsoft.com/de-de/privacystatement) and Microsoft Cloud Services Security Notices (https://www.microsoft.com/de-de/trustcenter). You can object to the processing of your data in the Microsoft Cloud in accordance with the legal requirements. In addition, the deletion of the data within Microsoft's cloud services is determined by the other processing processes in the context of which the data is processed (e.g., deletion for contractual purposes no longer required or storage for purposes of taxation required data).
The Microsoft cloud services are offered by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA. Insofar as data is processed in the USA, we refer to Microsoft's certification under the Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK&status=Active).
7. Online presence on social media
We maintain online presences within social networks and platforms in order to communicate with the users active there and to inform them about our services there.
We would like to point out that users' data can be processed outside the area of the European Union. This can result in risks for users, because, for example, the enforcement of users' rights could be made more difficult.
Furthermore, the data of the users are usually processed for market research and advertising purposes. For example, user profiles can be created from the user behaviour and the resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements inside and outside the platforms, which presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the computers of the users, in which the user behavior and the interests of the users are stored. Furthermore, data can also be stored in the user profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).
The processing of the personal data of the users takes place on the basis of our legitimate interests in effective information of the users and communication with the users in accordance with Art. 6 (1) (f) GDPR. If the users are asked by the respective providers of the platforms for their consent to the aforementioned data processing, the legal basis for the processing is Art. 6 (1) lit. a., Art. 7 GDPR.
In the case of requests for information and the assertion of data subject rights, we point out that these can be asserted most effectively with the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information. If you still need help, then you can contact us.
For a detailed presentation of the respective processing and the possibilities of objection (opt-out), we refer to the following linked information of the providers.
- Facebook: social network; Service provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA;
- Website: https://www.facebook.com;
- Privacy policy: https://www.facebook.com/about/privacy;
- Opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com;
- Advertisement settings: https://www.facebook.com/settings?tab=ads;
- Additional information on data protection: Agreement on joint processing of personal data on Facebook pages: https://www.facebook.com/legal/terms/page_controller_addendum,
- Data protection information for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data.
- YouTube: video portal; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland;
- Website: https://www.youtube.com/?gl=DE;
- Privacy policy: https://policies.google.com/privacy;
- Opt-out: https://adssettings.google.com/authenticated.
- Instagram: social network; Service provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA;
- Website: https://www.instagram.com;
- Privacy policy: https://instagram.com/about/legal/privacy;
- Opt-out: https://help.instagram.com/196883487377501/?hel-.
- Twitter: social network; Service provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA;
- Website: https://twitter.com/?lang=de;
- Privacy policy: https://twitter.com/de/privacy;
- Opt-out: https://twitter.com/personalization.
- LinkedIn: social network; Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland;
- Website: https://www.linkedin.com;
- Privacy policy: https://www.linkedin.com/legal/privacy-policy;
- Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
- Xing: social network; Service provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany;
- Website: https://www.xing.de;
- Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung;
- Opt-out: https://nats.xing.com/optout.html?locale=de_DE.
- Zoom: online communication tool; Service provider: 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113;
- Website: https://zoom.us/en-en/meetings.html;
- Privacy policy: https://zoom.us/docs/en-en/privacy-and-legal.html;
- Opt-out: https://zoom.us/en-en/gdpr.html.
- WhatsApp: instant messaging service; Service provider: WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland;
- Website: https://www.whatsapp.com/?lang=en;
- Privacy policy: https://www.whatsapp.com/privacy;
- Opt-out: https://www.whatsapp.com/legal/#Key updates.
- Telegram: instant messaging service; Service provider: Telegram Messenger LLP, 71-75 Shelton Street Covent Garden London United Kingdom;
- Website: https://telegram.org/;
- Privacy policy/opt-out: https://telegram.org/privacy.
- TikTok: video portal; Service provider: TikTok Technology Limited,10 Earlsfort Terrace, Dublin, D02 T380, Ireland;
- Website: https://www.tiktok.com/en/;
- Privacy policy/opt-out: https://www.tiktok.com/legal/privacy-policy?lang=de.
- Vkontakte: social network; Service provider: VKontakte Ltd., Tverskaya str., 8-B, 191015 Saint-Petersburg, Russia;
- Website: https://vk.com/;
- Privacy policy/opt-out: https://m.vk.com/data_protection?lang=en§ion=rules.
- Viber: instant messaging service; Service provider: Viber Media S.à r.l., Viber Media, Rue du Fossé 2, 1536, Luxembourg;
- Website: https://www.viber.com/en/;
- Privacy policy/opt-out: https://www.viber.com/en/terms/viber-privacy-policy/.
- Reddit: social network; Service provider: Reddit, Inc. Contacts, 420 Tyalor Street San Francisco, CA 94102 USA;
- Website: https://www.reddit.com/;
- Privacy policy/opt-out: https://www.redditinc.com/policies/privacy-policy.
- signal: instant messaging service; Service provider: Privacy Signal Messenger, LLC 650 Castro Street, Suite 120-223 Mountain View, CA 94041;
- Website: https://signal.org/en/;
- Privacy policy/opt-out: https://signal.org/legal/#privacy-policy.
- Dikalo: instant messaging service; Service provider: Calwer Str. 8/1, 75395 Ostelsheim;
- Website: https://about.dklo.co/;
- Privacy policy/opt-out: https://welcome.dklo.co/privacy/.
- Rocket.Chat Technologies Corp.: 251 Little Falls Rd Wilmington, DE, 19808 USA
- Website: https://de.rocket.chat/
- Privacy policy: https://docs.rocket.chat/legal/privacy
8. Rights of data subjects
You have the right to:
- to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if not collected from us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about their details;
- to request the rectification of inaccurate or complete personal data stored by us without undue delay in accordance with Art. 16 GDPR;
- to request the deletion of your personal data stored by us in accordance with Article 17 GDPR, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
- to request the restriction of the processing of your personal data in accordance with Article 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it for the establishment, exercise or defence of legal claims or you have objected to the processing in accordance with Article 21 GDPR;
- in accordance with Article 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transfer to another controller;
- in accordance with Article 7(3) GDPR, to revoke your consent once given to us at any time. As a result, we are no longer allowed to continue the data processing based on this consent for the future and
- to complain to a supervisory authority in accordance with Article 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our office.
9. Right to object
If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 (1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, insofar as there are reasons for this arising from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right of objection, which is implemented by us without specifying a special situation.
If you would like to exercise your right of revocation or objection, an e-mail to minor@minor-labora.de
10. Data security
We use the widely used SSL (Secure Socket Layer) method within the website visit in conjunction with the highest level of encryption supported by your browser. This is usually 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether a single page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
11. Up-to-dateness and modification of this privacy policy
This data protection declaration is currently valid and has the status of September 2020.
Due to the further development of our website and offers above or due to changed legal or official requirements, it may become necessary to change this data protection declaration. The current data protection declaration can be found at any time on the website at https://www.minor-labora.de/datenschutz They will be retrieved and printed.