Controller
Responsible for the processing of personal data is the German Federal Employment Agency (BA), represented by the Executive Board, Regensburger Str. 104, 90478 Nürnberg, Germany.
Data protection officer
The BA’s data protection officer, Mr Marc Rompf, can be contacted via his postal address: Bundesagentur für Arbeit, Stabsstelle Datenschutz, Regensburger Str. 104, 90478 Nürnberg, Germany, or via the contact form.
Access data / log files
When our website is visited or a file is retrieved, information on this activity is automatically logged in text files, also called log files: The following information is stored:
- The first two bytes of the user’s IP address
- The user’s Internet service provider
- Date and time of access
- Accessed page of our online presence / name of the retrieved fil
- Websites from which the user’s system accesses our Internet page
- Websites called by the user’s system from our website
- Transmitted amount of data
- Notification whether the access / retrieval was successful
- Used browser and operating system
- Used session ID
These data are not stored together with other personal data of the user. This information serves the anonymised statistical evaluation of the accesses to the online presence. If there are concrete indications of illegal use, we reserve the right to subsequently examine the log files.
By logging the accesses, we pursue legitimate interests within the meaning of Art. 6 lit. f of the EU General Data Protection Regulation (GDPR), since this is the only way to ensure availability and integrity of the online presence.
Cookies
So-called session cookies are used on our online presence. That are small text files stored in the local cache of the browser. These cookies are deleted again when the browser has been closed.
In most browsers, you can deactivate the use of cookies. To do this, make the corresponding entries in the data protection options of your browser settings.
It is usually possible to use our entire online presence with blocked cookies. However, this might lead to malfunctions in single functions and forms for technical reasons.
SSL encryption
To secure the data transmitted by you, for example, in inquiry forms, we encrypt the data traffic between you and our online presence with an SSL connection.
A secure connection is usually recognizable by a lock on the left or right in the address line of the browser.
Handling of your data
Data from the contract management for data access
The FDZ stores and processes the information from data use applications and data use agreements in a central database (user database). The project title, duration, name of the research data product provided and the names, (business) addresses, email addresses and telephone numbers of the data users and contractual partners (institutions and their representatives) are stored.
The centralised collection of this data serves the following purposes:
- Contract management, in particular enabling data access and planning (Section 6 (1) lit b and lit f GDPR).
- To invite data users to surveys to improve the service quality of the FDZ (Section 6 (1) lit f GDPR).
- The publication of a project list with the aim of promoting transparency in science. The list contains project titles, data products used, and (with the consent of the data users) surnames and first names (Section 6 (1) lit a GDPR).
Data for the realisation of research projects
The FDZ stores and processes technical evaluation requests from data users as part of remote execution. This is done either in the remote execution software JoSuA or in the user database. Specifically, the date of receipt of the request, the start and end of the programme run, the duration of the data protection checks carried out by the FDZ employees and the date of release of the results by the FDZ are documented for each request. In addition, the individual guest visits of data users are also recorded in the user database with their surname, first name, address, date and location visited.
The centralised collection of this data serves the following purposes:
- Enabling access to data (Section 6 (1) lit b GDPR).
- Ensuring an adequate level of protection of the research data provided (Section 6 (1) lit c GDPR).
Data from Campus Files orders
After successful registration, the FDZ receives an automatic e-mail with the registration information. This information is collected in a central file which can only be accessed by the FDZ employees. Erasure of the personal data is scheduled after two years at the latest.
Online calendar for on-site visit bookings
The IDs required for login to the online calendar are transmitted by the FDZ to the service provider Locaboo. Further information on Locaboo is available at the following link: https://www.locaboo.com/datenschutz.
Newsletter
When you subscribe to our newsletter, the e-mail address you state will be transmitted to an application at our service provider Online-Service-Nürnberg (OSN) and managed there in a subscribers list. Your e-mail address will only be used and stored for the purpose of sending the FDZ newsletter. These data will not be used in any other way.
We use a “double opt-in” procedure for subscription, in which you will receive an e-mail to the stated e-mail address after you have sent the form for newsletter subscription. In this e-mail you will find a link via which you have to confirm the subscription. Only from then on will your subscription be regarded as completed and you will regularly receive our newsletter.
You may unsubscribe from the FDZ newsletter again at any time. Your e-mail address will then be erased automatically.
Your rights to access, rectification, and erasure
You have the right to obtain access to your personal data stored and their usage free of charge.
You also have the right to have your personal data stored by us rectified.
If the data are not required for a prescribed data storage for business purposes, you may request erasure of your personal data stored by us.
If you wish to effect access, rectification, or erasure, you may request this by contacting us.
Revocation of consent
If data are processed on the basis of the data subject’s consent, the consent may be revoked at any time with effect for the future without giving any reason. The processing performed until revocation remains unaffected.
Right to lodge a claim
Data subjects may contact the Federal Commissioner for Data Protection and Freedom of Information (Bundesbeauftragte für den Datenschutz und die Informationsfreiheit, Husarenstr. 30 in 53117 Bonn) if they believe that the processing of the respective data infringes the General Data Protection Regulation.