Privacy Policy

Version of: 05/11/2021

Table of Contents

  1. Preamble
  2. Controller
  3. Contact partner for data protection
  4. Log-Files
  5. Cookies
  6. Information on Google services
  7. Use of YouTube
  8. Newsletter
  9. Blog with comment function
  10. Social Networks & External Links
  11. Data security
  12. Amendment of the privacy policy
  13. Withdrawal
  14. Rights of data subjects

Preamble

Welcome to our website! We take the protection of your data and your privacy very seriously. Below we would like to explain which data we process, when and for what purpose and on what legal basis. This is to explain to you how our offered services work and how the protection of your personal data is guaranteed.

In accordance with Article 4 (1) of the GDPR, personal data means all information relating to an identified or identifiable natural person. An identifiable natural person is someone who can be identified, either directly or indirectly. For further information, please refer to Article 4 (1) of the GDPR.

This privacy policy can be accessed, saved and printed out at any time at https://dstatg.de/privacy.

Insofar as we cite our legitimate interest or a legitimate interest of a third party (Article 6 (1) point f) GDPR) as the lawful basis for the processing of personal data, you have a right of objection pursuant to Article 21 GDPR:

Under Article 21 of the GDPR, you have the right to object to the processing of your personal data at any time. We shall then no longer process your personal data for purposes of direct marketing or related profiling. Likewise, we shall then no longer process your personal data for any other purpose, unless we can demonstrate compelling legitimate reasons for the processing which override your interests, rights and freedoms, or unless the processing serves to enforce, exercise or defend legal claims (cf. Article 21 (1) of the GDPR, so-called “Limited right to object”). In this case, you must explain the reasons for the objection that relate to your particular situation. You may also object to the processing of your personal data on grounds relating to your particular situation for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out in the public interest (cf. Article 21(6) of the GDPR).

We will also refer you to the right of objection again separately in the individual sections (e.g. by the note: “You have the right to object“), if this right exists. There you will also find additional information on how to exercise your right to object.

In order to keep the following privacy policy clear, we refer at various points by means of links to information and data protection notices which can be found on external websites (cf. also section “Social networks & external links” in this data protection declaration). We make every effort to keep the links that we list in this privacy policy up-to-date. Nevertheless, it is possible that, due toconstant updating of websites, the links may not function correctly. If you come across a broken link, we would appreciate if you notified us so that we can update it.

 

Controller

The controller for the processing of personal data within the meaning of Article 4 (7) of the GDPR is:

German Statistical Society
Prof. Dr. Ralf Münnich
PO Box 15 05
54205 Trier, Germany

Contact partner for data protection

If you have any questions regarding the processing of your personal data or your rights with respect to data protection, please contact:

Prof. Dr. Andreas Kladroba
ihredaten[at]dstatg.de

Log-Files

When you call up our website, we automatically collect data and information from the system of your device and store some of this in so-called server log files. The data is automatically transmitted by your browser when you visit our website. This following data is collected:

  • the time our website is accessed (request to host provider server);
  • your operating system;
  • your browser type and version; and
  • your IP address.

We process this data to ensure that our website is accessible from your device, and that it displays correctly on your device or in your browser. In addition, the data is used to optimise the website and to ensure the security of our systems. Processing of your IP address by our system is also necessary to enable delivery of our website to your device. We do not analyse this data for marketing purposes.

The legal basis for processing is Article 6 (1) point f) of the GDPR. We have a legitimate interest in presenting you with a website that is optimised for your browser, and to facilitate communication between our server and your device. The latter, in particular, requires your IP address to be processed.

“We store processed data only for as long as necessary for the intended purpose or as required by law.”

The recipient of the data is our server host, 1&1 IONOS, hosting platform for e-commerce / websites; service provider: 1&1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, which acts on our behalf under a contract for order processing.

Right to object

You have the right to object. You can send or inform us of your objection at any time (e.g. by e- mail to ihredaten@dstatg.de).

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. You are not under any obligation to provide us with your personal data. if you do not do so, you may not be able to use our website or to use all the features of the website fully.

Cookies

Our website only uses functional cookies. Cookies are text files that are saved on your device to make the use of this website more convenient, for example, or to recognise a user’s device and save settings, etc. Input into and settings for a website can be saved in cookies so that you do not have to re-enter anything or change the settings every time your revisit a website. Cookies contain a so-called cookie ID, which is used to assign a device on which the cookie is saved.

Cookies help us to design our online offer in a user-friendly and customised way. We only use our own cookies for this purpose. You have the option to configure the placement of cookies at any time.

You can restrict or completely prevent the placement of cookies in your browser settings. You can also enable the automatic deletion of cookies when you close your browser window.

You can learn more about how to delete cookies in the most common browsers, and about how to change cookie settings etc. here:

Technically necessary cookies are those that are required for the smooth functioning of our website. Our functional “session cookie” is used when logging into the member area. This technically necessary cookie is stored on the basis of Article 6 (1) point f) GDPR. We have a legitimate interest in storing cookies for the technically error-free and optimised provision of our services. Automatic deletion takes place after 7 days and can be manually deleted at any time by logging out.

Right to object

You have the right to object insofar as data processing is based on Article 6 (1) f GDPR.

You can restrict the use of cookies or completely disable them in your browser settings. You can also enable the automatic deletion of cookies when you close your browser window.

You can learn more about how to delete cookies in the most common browsers, and about how to change cookie settings etc. here:

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. You are not under any obligation to provide us with your personal data. if you do not do so, you may not be able to use our website or to use all the features of the website fully.

Information on Google services

We use services of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland on our website.

You can find more information about each of the specific Google services that we use on this website in the additional privacy policy.

In some circumstances, embedding Google services means that Google collects and processes information (including personal data). In this regard, we cannot rule out the fact that Google may also transmit the information to a server in a third country.

The transfer to the USA depends on the function in which personal data is transferred. In doing so, we as the responsible party may ourselves transfer data to Google in the USA for further use; the transfer may be based on the following so-called standard contractual clauses:

  • Commission Decision of 15/06/2001 on standard contractual clauses for the transfer of personal data to third countries under Directive 95/46/EC (2001/497/EC)
  • Commission Decision of 27 December 2004 amending Decision 2001/497/EC as regards the introduction of alternative standard contractual clauses for the transfer of personal data to third countries (2004/915/EC).

Should Google be active in the USA as our processor, the transmission to the USA is based on

  • Commission Decision of 5 February 2010 on standard contractual clauses for the transfer of personal data to processors established in third countries under Directive 95/46/EC of the European Parliament and of the Council (2010/87/EU).

We have no influence over the information that Google actually collects and processes. However, Google states that it can generally only process the following information (including personal data):

  • protocol data (particularly the IP address);
  • location-related information;
  • unique application numbers; and
  • cookies and similar technologies.

Information on the types of cookies used by Google can be found at https://policies.google.com/technologies/types.

If you are logged into your Google Account, Google may add the processed information to your account and treat it as personal data, depending on your account settings. Among others, Google would like to state the following:

“If you are not signed into a Google Account, we store the data we collect with unique identifiers associated with the browser, app or device you are using . This allows us to ensure, for example, that your language settings are retained across all browsing sessions. If you are logged into a Google account, we also collect data that we store in your Google account and consider to be personal data. “ (https://policies.google.com/privacy?hl=en).

You can prevent this data from being directly added to your account by signing out of your Google account or changing your account settings accordingly. Furthermore, you can change your cookie settings (e.g. delete cookies, block cookies, etc.). You can find further information on this under “5) Cookies “.

You can find more information in Google’s privacy policy, which you can access via the link above.You can find information about Google’s privacy settings at https://privacy.google.com/take- control.html.

 

Use of YouTube

We use videos from YouTube on our website. YouTube is a service of YouTube LLC (‘YouTube’), 901 Cherry Ave., San Bruno, CA 94066, USA and is provided by this company. YouTube LLC is a subsidiary of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The integration of YouTube is done by embedding the service into our website using ‘iFrames’. When loading this iFrame, YouTube or Google may collect information (including personal data) and process it. In this process, we cannot rule out that YouTube/Google may also transmit this information to a server in a third country.

Information on the standard contractual clauses and the transmission to the USA by us to Google and other relevant data on data processing by Google in the context of the use of Google services can be found in this privacy policy under the section “6) Information on Google services”.

We use YouTube in the so-called “Enhanced Privacy Mode”. According to the information provided by Google, this allows a video to be played without cookies recording user behaviour. We do not collect any data when you watch a YouTube video on our website.

By integrating YouTube, we are pursuing the purpose of being able to show you various videos on our website so that you can view these directly on the website.

The legal basis for the processing of personal data described here is your express consent pursuant to Article 6 (1) a) GDPR.

The legal basis for the processing of those data that are processed in the context of obtaining consent is our legitimate interest pursuant to Article 6 (1) point f) GDPR. We have a legitimate interest in being able to prove that you have given your consent to the measurement procedure (Article 7 (1) GDPR).

The data is only stored as long as this is necessary for the provision of the function, i.e. as long as the respective content is loaded or played.

Your rights:

Right to object

Insofar as the processing of your data is not covered by consent (proof of consent), you have the right to object.

You can send or inform us of your objection at any time (e.g. by e-mail to ihredaten@dstatg.de).

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. You are not under any obligation to provide us with your personal data. if you do not do so, you may not be able to use our website or to use all the features of the website fully.

Newsletter

You have the possibility to register for our newsletter on our website.

For sending the newsletter we use the newsletter service of Automattic Inc. (Mail Poet) based in France. In the context of a commissioned processing agreement, Automattic Inc. processes the following data Your personal data on our behalf and according to our instructions. Automattic is a service that can be used to organise the sending of newsletters, among other things.

Furthermore, we have a partnership with Automattic Inc. concluded a “Data Processing Agreement”. This is a contract in which Automattic Inc. is obliged to protect the data of our users, to process the data exclusively in accordance with the data protection regulations on our behalf and in accordance with instructions. For more information, see: https://www.automattic.com/privacy/.

When you subscribe to our newsletter, we process the following information (including personal data) from you:

  • E-mail address
  • Date and time
  • IP address
  • Voluntary information, e.g. first and last name

To be able to provide evidence that you have given consent or that you have unsubscribed, we retain the following data concerning registration, changes, confirmation and cancellation of the newsletter for each user profile created using the e-mail address confirmed via the double opt-in process:

  • Date and time
  • IP address

Furthermore, in the context of your use of our newsletter, we process the following information (also personal data) from you:

  • E-mail address
  • IP address
  • Action type (registration, update)
  • Permission change
  • Action metadata

The processing of the data is carried out by us, Automattic Inc. and – if available – subcontractors of Automattic Inc. within the scope of data processing. Subcontractors process the data as Automattic Inc. does in accordance with instructions and on our behalf.

In doing so, we evaluate, for example, in particular whether you open a newsletter or what you otherwise do with the newsletter and its content.

Furthermore, web beacons can be sent as part of the newsletter. These are small graphics that are not visible. If such a graphic is loaded , it is possible for the DStatG to assign the opening status of a mail to a specific e-mail address. Furthermore, the opening of links stored in the newsletter is tracked by means of personalised URL parameters.

When you register for the newsletter, you are explicitly providing consent to the processing of your personal data (Article 6 (1) point a) of the GDPR).

In the first step, you provide mandatory information (e.g. e-mail address), and consent to processing of your personal data by clicking on the checkbox designated for this. In the second step, you receive an automated e-mail containing a confirmation/activation link that you are asked to confirm or activate. We use this process to ensure that the e-mail address you provided on our website belongs to you. If the confirmation/activation link isn’t used, we do not send any further e-mails to that e-mail address.

User e-mail addresses are collected and processed for the purpose of sending newsletters. Other personal data is collected and processed as part of the subscription process to prevent the misuse of our newsletter or the e-mail address used. The processing described above also allows us to provide evidence of the consent you have given.

The measurement data is processed to track the success and reach of our newsletters.

The legal basis for processing personal data required for technical purposes to send the newsletter and for processing measurement data is your consent, pursuant to Article 6 (1) point a) of the GDPR.

The legal basis for processing other personal data is our legitimate interest pursuant to Article 6 (1) point f) of the GDPR. We have a legitimate interest in providing evidence of the consent you have given. We also have a legitimate interest in preventing the misuse of our newsletter, and/or being able to demonstrate such misuse.

Your rights:

Right of withdrawal

You have the right to withdraw your consent with future effect at any time, without affecting the legality of processing completed before withdrawal and based on your consent. You can send or communicate your withdrawal of consent to us any time (e.g. by e-mail to ihredaten[at]dstatg.de).

You can also exercise your consent simply by clicking on the “Unsubscribe from newsletter” link provided for this purpose in our newsletter.

Right of objection

If the processing of your data is not covered by your consent (with particular reference to log files), you have a right to object.

You can send us or communicate to us your objection at any time (e.g. by email to ihredaten[at]dstatg.de).

Data is erased as soon as it is no longer required for the purpose for which it was originally collected. Your registration data is then stored only for as long as the newsletter subscription is active. The tracking data is erased after 90 days. If you do not confirm the email as part of the double opt-in process, your registration will be automatically erased after 7 days.

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. You are not under any obligation to provide us with your personal data. if you do not do so, we shall not be able to send you any newsletters.

Blog with comment function

On our website there is a blog with comment function. This offers you the possibility to leave comments.

The blog, including the comment function, is run exclusively on our servers, so that the data is not passed on to third parties and the processing of the data takes place exclusively on our servers.

This includes the following mandatory information:

  • Name
  • E-mail address
  • Your comment

You can also add more data on a voluntary basis. This may simplify and speed up the processing of your request. The data involved may include the following data:

  • Webseite
  • information taken from the body of the message We treat mandatory and voluntary information equally.
  • When you send a message, we also store the following data:
    • your IP address, and
    • the date and time of submission

Data is erased as soon as it is no longer required for the purpose for which it was originally collected. The deletion of the data takes place at the latest with the deletion of the associated blog post.

The other data processed when you send your comment will be deleted immediately.

The purpose of processing the (personal) data is to enable commenting on our contributions. In addition, the mandatory information serves to prevent misuse of our comment function.

The legal basis for the processing of personal data described here is Article 6 (1) point f.) GDPR. Our necessary legitimate interest for this is to enable an exchange of opinions between users on our website and also to find out how users react to our posts. We also have a legitimate interest in being able to recognise and prevent attempts to misuse our comment function.

Right to object

You have the right to object. You can send us or communicate to us your objection at any time (e.g. by email to ihredaten[at]dstatg.de). Self-written comments can be deleted at any time by using the “Delete comment” function in the upper right-hand corner of the respective entry.

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. You are not under any obligation to provide us with your personal data. However, if you do not do so you may not be able to use our comment function.

Social Networks & External Links

Apart from this website, we also maintain a presence in various social media, which you can access by clicking on the corresponding command buttons on our website. If you visit such a site, it may be possible that personal data is transferred to the provider of the social network.

Please note that user data may also be transmitted to a server in a third country and thus processed outside the European Union.

It is possible that, apart from storage of the data you specifically enter in this social medium, other information may be processed by the provider of the social network.

Moreover, the provider of the social network may process the most important data regarding the computer system from which you are accessing the social network – e.g. your IP address, the type of processor you use and your browser version including plugins.

If you are logged in to your personal user account in the respective network while visiting such a website, this network can associate your visit with your account.

To see the purpose and extent of data collection by the respective medium, further processing of your data carried out there and your rights in this connection, please refer to the terms of the responsible party:

We would also like to point out that our website contains links to external websites, but we have no influence over processing of data on these external websites.

Data security

We use technical and organisational measures to protect our website and other systems against loss, destruction, access, modification, or dissemination of your data by unauthorised persons. Notwithstanding our best efforts, data security and protection against all risks cannot be fully guaranteed.

Amendment of the privacy policy

We may have to amend our privacy policy to reflect changes in the law or changes in our internal processes. If we have to amend our privacy policy in this way, we shall communicate this to you 4 weeks before the planned change above the heading: “Privacy policy”.

Withdrawal

You have the right to withdraw your consent with future effect at any time, without affecting the legality of processing based on consent before its withdrawal.

Rights of data subjects

As a data subject, you have the following rights:

  • Right of access to information (Article 15 of the GDPR)
  • Right to rectification of data (Article 16 of the GDPR)
  • Right to object (Article 21 of the GDPR)
  • Right to erasure of data (Article 17 of the GDPR)
  • Right to restriction of processing (Article 18 f. of the GDPR), and
  • Right to data portability (Article 20 of the GDPR)

If you have any questions relating to your rights, please contact ihredaten[at]dstatg.de. Please note that in this case, we have to ensure that we are dealing with the actual data subject.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority.

We do not use automated decision-making on our website.