Privacy policy for the website of the Freiburg Institute for Basic Income Studies (FRIBIS)
1. Subject of this privacy policy
Thank you for your interest in our website and the services we offer.
The protection of your personal data (hereinafter referred to as “data”) is important to us. In the following, we will inform you about which data is collected when you visit our website and use our services and how we process it.
In addition, we would like to inform you about the cookies we use, the rights to which you are entitled as a data subject and the technical and organizational protective measures we have taken with regard to the processing of your data. Definitions of the terms used (e.g. “personal data” or “processing”) can also be found in Art. 4 GDPR.
2. Name and address of the controller responsible for data processing
The controller within the meaning of the General Data Protection Regulation (GDPR) is the University of Freiburg. Furthermore, the website is managed by internal FRIBIS employees (hereinafter also referred to as “we”), see also the contact addresses and our imprint below.
If you have any questions or comments about this privacy policy or about data protection in general, please send them to the following e-mail address: datenschutzbeauftragter@uni-freiburg.de or to the internal administrators of the website, who can be contacted at contact@fribis.uni-freiburg.de.
2.1 Responsible in terms of data protection law
University of Freiburg
Friedrichstraße 39
79098 Freiburg
++49 (0)761/203-0
info@uni-freiburg.de
2.2 Data Protection Officer
University of Freiburg
The Data Protection Officer
Fahnenbergplatz
79085 Freiburg
datenschutzbeauftragter@uni-freiburg.de
2.3 Internal administration of the FRIBIS website
Freiburg Institute for Basic Income Studies
Albert-Ludwigs-University of Freiburg
Rempartstr. 10
79098 Freiburg
contact@fribis.uni-freiburg.de
3. Collection and processing of your data
The scope and type of collection and processing of your data differ depending on whether you visit our website only to retrieve information (“informational use”) or whether you use offers or services on our website that require you to provide further data about yourself, for example when registering for one of our events or ordering a newsletter.
In the case of the processing of personal data, we as the website operator only collect, use and pass on your personal data if this is permitted by law or if you consent to this. Personal data is all information that can be used to identify you personally and that can be traced back to you – for example, your name, e-mail address and telephone number.
3.1 Informational use
3.1.1 Description and categories of data and purpose of data collection and processing
It is generally not necessary for you to provide personal data in order to use our website for information purposes only.
Rather, in this case we only collect and process the data that your internet browser automatically transmits to us, namely
– Time at the time of access and the time zone difference to Greenwich Mean Time (GMT)
– Amount of data sent in bytes
– Operating system used
– IP address used
– the last page you visited from which our website was accessed
– Your browser type, its version and the language of the browser software as well as the browser settings
We process this data during an informational visit exclusively in non-personalized form. This is done in order to enable you to use the web pages you have accessed and to check whether our website is displayed optimally for you.
3.1.2 Legal basis
The processing is carried out on the legal basis of Art. 6 para. 1 sentence 1 lit. f) GDPR (balancing of interests, our interest is to be able to display our website to you reliably and with as little disruption as possible).
3.1.3 Recipients and duration of storage
We store the data for logging purposes exclusively in anonymized form by shortening the IP address so that it can no longer be assigned. The server log files are stored for a maximum of 30 days and then deleted. The data is stored for security reasons in order to
z. be able to clarify cases of abuse. If data must be retained for reasons of proof, it is exempt from deletion until the incident has been finally clarified.
3.1.4 Consequences of non-disclosure, possibility of objection or removal
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Users who do not wish their data to be processed as described can contact the university by alternative means (by telephone, in writing, in person) to obtain the relevant information or to carry out procedures. For further information, please see point 9 of this privacy policy.
3.2 Use of the contact form/registration for an event
3.2.1 Description and categories of data and purpose of data collection and processing
FRIBIS is dedicated to research into the unconditional basic income. Through close cooperation between international researchers and civil society actors, our aim is to contribute to scientifically substantiating the basic income discourse in the public and political spheres, to inform about new findings in this regard and to invite discussion. To this end, FRIBIS organizes and hosts events (including lectures, annual conferences, etc.) on various topics related to the basic income. Prior registration is required for some events.
If you would like to register for one of these events using the contact form provided on our website, we will collect the following data from you (data marked with * are optional data. If you do not answer these questions, you will not suffer any disadvantages):
– First name
– Surname
– e-mail address
– Indication whether you are a scientist or an activist
– For hybrid events: Type of participation i.e. online or in presence
– For events lasting several days: Specify the days on which you will participate in presence or online
– *Name of the current institution you are affiliated with
– *Your current country of residence
– *Information on how you became aware of the event
– *Information as to whether we may send you the feedback form
In order to be able to accept your registration and to inform you about any information on the respective event, we must collect the mandatory data for processing. In addition to the data visibly collected for you during the registration process, photographs may also be taken at the event. Please inform yourself separately under Processing of photographs.
3.2.2 Recipients and duration of storage
Your data will be deleted no later than two months after the feedback form has been sent or after the event (if no feedback form was sent). Deletion can also take place at any time before this, in the event that you withdraw your consent or if an e-mail is permanently undeliverable. Please note, however, that the recordings may be taken over by the responsible university archive and are generally stored there indefinitely. If data has to be kept for reasons of proof, it is exempt from deletion until the incident has been finally clarified. No further disclosure to third parties is planned, except in the cases described.
3.2.3 Legal basis
The execution and confirmation of the registration, processing of the event, this also includes the internal documentation, the further sending of detailed information on the selected event fall under Art. 6 para. 1 lit. e in conjunction with Art. 6 para. 3 of the General Data Protection Regulation (GDPR) in conjunction with § 12 of the Baden-Württemberg State Higher Education Act (LHG BW). In the case of voluntary information, the legal basis is Art. 6 para. 1 lit. a GDPR.
3.2.4 Consequences of non-disclosure, possibility of objection or removal
If you withdraw your consent to the processing of your data, it will not be processed any further. However, the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Please note that if you withdraw your consent or do not provide your data, your registration for the event may not be accepted. For more detailed information on how to object or exercise your rights, please see point 9 of this privacy policy
3.3 Consent to receive our newsletter
We offer you a newsletter in which we inform you about current events and offers. The newsletter is sent by the mailing service provider SendInBlue. You can find information about the data protection provisions of the mailing service provider at: https://de.sendinblue.com/datenschutz-uebersicht/.
3.3.1 Subscribing to the newsletter
If you subscribe to our newsletter, we will regularly send you current information and offers on our products or services by e-mail.
To subscribe to our e-mail newsletter, we only need your consent and a valid e-mail address to which the newsletter is to be sent.
In order to use your data for sending the newsletter, we require your consent, which we ask for separately when you register for our newsletter.
If you would like to read the content again, it reads as follows:
“Yes, I would like to receive regular information by e-mail from FRIBIS on the subject of basic income as well as information and reports on past or current FRIBIS events. I agree that my e-mail address may be processed for this purpose.
This consent can be revoked at any time for the future by unsubscribing from the newsletter by clicking on the link at the end of the newsletter or by revoking your consent to us in another way, for example by e-mail to the contact details given in the data protection declaration.
The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.”
The aforementioned data processing is carried out on the legal basis of Art. 6 para. 1 sentence 1 lit. a), Art. 7 GDPR, i.e. your consent to receive the newsletter. The permission to contact you by e-mail is also your consent, see § 7 para. 2 no. 2 UWG.
We store your consent for up to three years for verification, documentation and legal defense purposes, starting from the end of the calendar year in which you received the last newsletter or revoked your consent. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f) GDPR (balancing of interests, our interest is the proper documentation as well as the defense against or assertion of legal claims). The individual newsletter e-mails are only temporarily stored for the purpose of sending them; they are not stored beyond this.
3.3.1 Confirmation of registration and verification of your e-mail address
For security reasons, we use the so-called double opt-in procedure to register for our e-mail newsletter: After registering for our newsletter, you will receive an activation e-mail to the e-mail address you have provided. Only when you have confirmed your registration by clicking on a link contained in the e-mail will you subsequently receive the desired e-mail newsletter. This serves to ensure that only you, as the owner of the e-mail address provided, can subscribe to the newsletter.
The legal basis for the processing is – if you have given your consent – this (Art. 6 para. 1 sentence 1 lit. a), Art. 7 GDPR), otherwise Art. 6 para. 1 sentence 1 lit. f) GDPR (balancing of interests, our interest is to ensure by sending the first e-mail for verification that it is a correct newsletter registration).
3.3.3 Newsletter unsubscription/withdrawal of consent
If you no longer wish to receive e-mail newsletters from us, you can unsubscribe from our newsletter at any time by either clicking on the unsubscribe link at the end of each newsletter e-mail or by sending us an informal e-mail to contact@fribis.uni-freiburg.de.
The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
4. Use of cookies
For more information on the description and categories of data, the purpose, the recipients, the duration of storage and the consequences of non-disclosure, objection or removal options regarding the cookies used at FRIBIS, please visit our Cookie Policy. You can also see the legal basis for this below.
Legal basis and supplement to consequences of non-disclosure, objection or removal option
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR.
The legal basis for the processing of personal data using cookies for other purposes is Art. 6 para. 1 lit. a GDPR if the user has consented to this.
You can also revoke any cookie consent you have given at any time in the following point 7.1. We will then no longer use the cookies based on the consent.
The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
5. Use of tracking technologies: WP Statistics
5.1 Purpose of data collection and processing
It is important to us to design our website as optimally as possible and thus make it attractive for our visitors. To do this, it is necessary for us to know which parts of it are received by our visitors and how.
5.2 Description and categories of data
We therefore use WP Statistics on our website to analyze the usage behavior of our visitors. The plugin is developed by the American software company Veronalabs (5460 W Main St, Verona, NY 13478, United States). WP Statistics collects visitor data (so-called Visitos’Data) when your web browser connects to our web server.
The corresponding data collected in our case can be found in section 3.1. The data collected is used to compile anonymized statistics on the use of our website. WP Statistics also anonymizes your IP address. You as a person cannot be identified retrospectively. WP Statistics is set so that 2 bytes of the IP address are masked (e.g.: 192.168.###.###). In this way, it is no longer possible to assign the shortened IP address to the calling computer.
5.3 Duration of storage and recipients
This data is stored in our database locally on our server. The individual data are stored on our web server for a maximum of 30 days, until they are no longer required for the above-mentioned purposes.
If required by law, the data or log files mentioned above under 3.1. may be passed on to state investigative bodies (e.g. police, public prosecutor’s office).
The same applies if the relevant authorities or courts make inquiries to the University and the University is obliged to comply with them.
5.4 Legal basis
Nevertheless, we only use WP Statistics if you have given your consent as part of an initial cookie pop-up. According to Art. 6 para. 1 lit. a GDPR (consent), consent is the legal basis for the processing of personal data, as may occur when it is collected by analytics tools.
5.5 Consequences of non-disclosure, possibility of objection or removal
You have the right to information, correction or deletion and restriction of the processing of your personal data at any time. You can also withdraw your consent to the processing of data at any time. You can find out more about this in section 9 of our privacy policy.
If you withdraw your consent to the processing of your tracking data, it will no longer be processed. However, the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
5.6 Link to the privacy policy of WP-Statistics
You can find further specific information on data protection at WP-Statistics at: https://wp-statistics.com/privacy-and-policy/
6 Google Maps
6.1 Description and categories of data, recipients and duration of storage
On our contact page, we offer you the option of retrieving content from Google Maps to display street maps and to use Google Maps services.
We use a so-called 2-click solution for this purpose: Initially, you will only see a placeholder for the Google Maps plugin and the option to declare your consent and use it to activate the plugin and thus the Google Maps services. You can consent to the use of Google Maps by clicking on the button to activate Google Maps.
Only if you give this consent will the Google Maps plugin be loaded and the data for displaying the Google Maps content will be retrieved from Google and you can use the Google Maps services, in particular display the map material.
By using Google Maps, information about your use of this website (including your IP address) may be transmitted to a Google server in the USA and stored there. The respective Google company acts as its own data controller and collects and processes your data independently.
Please note Google’s terms of use and Google’s privacy policy.
Google may transfer the collected data to third parties if this is required by law or if third parties process this data on behalf of Google.
It would be technically possible for Google to identify at least individual users on the basis of the data received. It is possible that personal data and personality profiles of users of the website could be processed by Google for other purposes over which we have no control.
6.2 Legal basis for data processing
The legal basis for the processing of data is Art. 6 para. 1 lit. a GDPR.
6.3 Purpose of the processing
Google Maps is used for the purpose of making it easier to find the locations specified on our website.
6.4 Deactivation of the Google Maps plugin/revocation
You can prevent further data transmission to Google at any time simply by leaving our contact page.
You can also revoke your consent to the use of Google Maps at any time. This means that this service will no longer be available to you on our website. For the declaration of revocation, the corresponding function can be revoked in our cookie guidelines under point 7.1.
You can also deactivate the special cookies from Google Maps via your browser settings.
The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
6.5 Link to Google’s privacy policy
Further specific information regarding Google’s data protection can be found at: https://policies.google.com/privacy
7 YouTube
7.1 Description and categories of data as well as recipients and duration of storage
On our website, we also show you content from the video platform YouTube. The operator of YouTube is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of our pages designed with a YouTube video, a plug-in prevents an immediate connection to the YouTube servers from being established. We use a so-called 2-click solution for this purpose: Initially, you will only see a placeholder for YouTube and the option to declare your consent and activate the plug-in and thus the YouTube services. You can consent to the use of YouTube by clicking on the button to activate YouTube.
Only if you give your consent will the YouTube plugin be loaded and the data for displaying the YouTube content will be retrieved and you can use the YouTube services, in particular view the videos.
By using YouTube, information about your use of this website (including your IP address) may be transmitted to a YouTube server in the USA and stored there. YouTube acts as its own data controller under data protection law and collects and processes your data independently.
We would also like to point out that if you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
7.2 Legal basis for data processing
The legal basis for the processing of data is Art. 6 para. 1 lit. a GDPR.
7.3 Purpose of the processing
YouTube is used for the purpose of distributing and publishing recordings made as part of FRIBIS events or other events associated with FRIBIS.
7.4 Deactivation of YouTube plugins/revocation
You can prevent further data transmission to YouTube at any time simply by leaving our contact page.
You can also withdraw your consent to the use of YouTube at any time. This means that this service will no longer be available to you on our website. For the declaration of revocation, the corresponding function can be revoked in our cookie guidelines under point 7.1.
You can also deactivate the special cookies from YouTube via your browser settings.
The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
7.5 Link to YouTube’s privacy policy
Further information on the handling of user data can be found in YouTube’s privacy policy at: https://policies.google.com/privacy.
8. Involvement of other service providers, transfer to third parties and recipients
With the exception of the points mentioned under points 5 – 7 of this privacy policy and in the cookie guidelines, no other service providers are involved or no further disclosure to third parties and recipients takes place.
9. Your rights
Insofar as the legal requirements are met, you have the right to
to request confirmation from us as to whether personal data concerning you is being processed; if this is the case, you have the right to information about this personal data and the information listed in detail in Art. 15 GDPR and to be provided with a copy of the data
to obtain from us without undue delay the rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data (Art. 16 GDPR)
to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds listed in Art. 17 GDPR applies, for example if the data is no longer necessary in relation to the purposes for which it was collected (right to erasure)
to obtain from us restriction of processing where one of the conditions listed in Art. 18 GDPR applies, for example if you have objected to processing, for the duration of our review
object to certain processing of personal data concerning you. You will find detailed information on this separately at the end of this privacy policy.
to withdraw any consent you have given us at any time with effect for the future (right of withdrawal); however, the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
to receive the data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You can also transmit this data to other bodies or have it transmitted by us (right to data portability).
To exercise your rights, please contact datenschutzbeauftragter@uni-freiburg.de or contact@fribis.uni-freiburg.de.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR (Art. 77 GDPR). A list of the German data protection supervisory authorities and their contact addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
10. Data security
We also use technical and organizational security measures to protect personal data that is generated or collected, in particular against accidental or intentional manipulation, loss, destruction or attack by unauthorized persons. Our security measures are continuously improved in line with technological developments.
Your personal data is also encrypted using SSL/TLS technology to prevent access by unauthorized third parties. You can recognize this in your browser by the lock symbol and the additional “s” at http, i.e. at the beginning of the Internet address with “https”.
Note on the right to object:
Insofar as we process your personal data on the legal basis of the balancing of interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR (see the detailed description above) and this is done for the purposes of direct advertising, you have the right to object to this at any time. We will then no longer process your data for these purposes.
If we process your data for other purposes on the basis of a balancing of interests, Art. 6 para. 1 sentence 1 lit. f) GDPR, you have the right to object on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process the personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims.