Data Protection Information
The Max Planck Institute of Experimental Medicine takes the protection of your personal data very seriously. We process personal data collected during visits of this website. In the following, we will explain which data we record during your visit to this website and exactly how we use it.
A. General details
1. Scope of data processing
We only ever collect and use personal data to the extent required in order to provide a functional website which presents our content and services. The collection and utilization of our users’ personal data is carried out regularly based on the users’ consent. An exception applies in instances where processing of the data is permitted by statutory provisions.
2. Legal basis for data processing
If we obtain the consent of the data subject to carry out personal data processing operations, the legal basis is Article 6, para. 1, lit. a EU General Data Protection Regulation (GDPR).
When it is necessary to process personal data in order to fulfil a contract whose contractual party is the data subject, the legal basis is Article 6, para. 1, lit. b GDPR. This also applies to processing operations required in order to implement pre-contractual measures.
If processing is required in order to safeguard a legitimate interest of the MPG or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject override the first-mentioned interest, the legal basis for processing is Article 6, para. 1, lit. f GDPR.
3. Data erasure and duration of storage
The personal data of the data subject is erased or blocked as soon as the purpose of storage no longer applies. Data can also be stored if this is required under European or national legislation in EU directives, laws or other provisions to which the MPG is subject. Data is also blocked or erased if the retention period prescribed by the above-mentioned legislation expires, unless the data is required to be stored for longer for the purpose of concluding or performing a contract.
4. Contact details of the controller
The controller as defined by the EU General Data Protection Regulation (GDPR) as well as other data protection laws and provisions under data protection legislation is:
Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V. (MPG)
Phone: +49 (89) 2108-0
Contact form: https://www.mpg.de/kontakt/anfragen
5. Contact details of the Data Protection Officer
The controller’s Data Protection Officer is
Phone: +49 (89) 2108-1554
B. Provision of the website and creation of logfiles
Every time our website is accessed, our servers and applications automatically log data and information from the accessing computer system.
The following data is collected:
- Your IP address
- Date and time the page is accessed
- Address of the page accessed
- Address of the website visited previously (referrer)
- Name and version of your browser/operating system (if transmitted)
The data is saved in our systems’ logfiles. This data is not saved together with other personal data relating to the user.
The legal basis for the saving of data and logfiles is Article 6, para. 1, lit. f GDPR. Data is saved in logfiles in order to ensure the functional capability of the website. In addition, the data serves to optimize the web pages, eliminate faults and ensure the security of our IT systems. These purposes also constitute our legitimate interest in data processing according to Article 6, para. 1, lit. f GDPR.
This data is deleted as soon as it is no longer required in order to fulfil the purpose of its collection. In the case of the collection of the data for the purpose of providing the website, this applies when the session in question is finished. In the case of saving data in logfiles, this applies after a maximum of seven days.
In addition, we collect user’s log files in the web calculator in order to be able to follow the input into the web calculator in case a family member of a patient contacts us in a presumed liability case, and for reasons of good scientific practice, since the web calculator itself is scientific work. The legal basis for the saving of the data and logfiles is our legitimate interest in data processing according to Article 6, para. 1, lit. f GDPR.
The data is deleted as soon as it is no longer required in order to fulfill the purpose of its collection. In the case of the collection of the data for the purpose of following the input and for reasons of good scientific practice we will delete the data after 10 years.
C. Web analysis
- Title of the page being viewed (Page Title)
- Time in local user’s time zone
- Files that were clicked and downloaded
- Links to an outside domain that were clicked
- Pages generation time
- Location of the user: country, region, city, approximate latitude and longitude
- URLs visited on this website
- Times of page visits
- Type of HTML requests
- Screen resolution and colour depth
- Technologies and formats supported by the browser (e.g. cookies, Java, Flash, PDF, WindowsMedia, QuickTime, Realplayer, Director, SilverLight, Google Gears)
The saving and analysis of data is carried out solely on a central server operated by the MPG. In addition to the central website www.mpg.de, it is also used by most Max Planck Institutes and many MPG project websites.
The legal basis for the processing of personal user data is Article 6, para. 1, lit. f GDPR. By processing personal user data we are able to analyze our users’ utilization behaviour. Analysis of the data collected enables us to compile information on the use of the individual components of our web pages. This helps us improve our websites and their user-friendliness on an ongoing basis. These purposes also constitute our legitimate interest in data processing according to Article 6, para. 1, lit. f GDPR. Anonymization of the IP address sufficiently meets the users’ interest in the protection of their personal data.
The data is deleted after the final annual totals have been arrived at for access statistics.
Of course, you have the opportunity to object to your data being collected. The following independent methods are available to you if you wish to object to data collection by the central server:
- In your browser, activate the Do-Not-Track setting. If this setting is active, our central server does not save any of your data. Important: Do-Not-Track generally only applies to the one device and browser on which the setting is activated. If you use several devices/browsers, you must activate Do-Not-Track separately on each one.
- Use our opt-out function. Click on the check mark in the following selection box under https://www.mpg.de/datenschutzhinweis/datenerhebung-deaktivieren, in order to stop or re-activate data collection. If the selection box is deactivated, our central server does not save any of your data. Important: We have to save a special recognition cookie in your browser for the opt-out function. If you delete this or use a different PC/browser, you have to object to data collection once again on this page.
This data is not saved together with other personal data relating to the user.
- ID from Matomo analytics (time saved: 1 year)
- Language (localization) of the browser
- Session from Matomo (time saved: 30 minutes)
- Adoption of the browser language setting: automatic selection of the start page and spell check
The user data collected by technically required cookies is not used to create user profiles. These purposes also constitute our legitimate interest in the process of personal data according to Article 6, para. 1, lit. f GDPR.
E. Web Calculator
We process the data that you provide us using the Web Calculator. These are:
C REACTIVE PROTEIN
RDW – Anisocytosis
The legal basis for the processing of personal user data is Article 6, para. 1, lit. b GDPR.
F. Data transmission
The management and storage of your personal details is carried out by selected services
- Contact form (Section F)
- Registration for subscriber management “abo.mpg.de” (Section G)
Your personal data is only transmitted to public institutions and authorities if legally required or for the purpose of criminal prosecution due to attacks on our network infrastructure. The data is not shared with third parties for any other purposes.
G. Rights of data subjects
As a data subject whose personal data is collected in connection with the above-mentioned services, you have the following fundamental rights unless legal exceptions apply in individual cases:
- Access (Article 15 GDPR)
- Rectification (Article 16 GDPR)
- Erasure (Article 17, para. 1 GDPR)
- Restriction of processing (Article 18 GDPR)
- Data portability (Article 20 GDPR)
- Objection to processing (Article 21 GDPR)
- Withdrawal of consent (Article 7, para. 3 GDPR)
- Right to lodge a complaint with a supervisory authority (Article 77 GDPR). For the MPG, this is BayLDA (Bavarian Data Protection Authority), Postfach 606, 91511 Ansbach.