Privacy Statement
This is the privacy statement (“Statement”) for this website operated and provided by MediaTech Hub Potsdam Management GmbH, contact@mth-potsdam.de (“MTHP”, “we”, “us” and “our”) at www.mth-potsdam.de. MTH Potsdam is the controller within the meaning of Article 4 No. 7 of the EU General Data Protection Regulation (“GDPR”). We process the personal data collected via this website exclusively as set out in this declaration. Below you will find information on how we process your personal data, for what purposes it is processed, with whom it is shared and what control and information rights you may have.
1. definitions
Personal data means any information relating to a living individual who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier. Processing means any operation related to personal data, such as collection, recording, organisation, filing, storage, adaptation or alteration, disclosure or any other use.
2. use of the website for informational purposes
If you visit our website for informational purposes, i.e. without logging in to the site and without providing us with personal data in any other way, we may automatically collect supplementary information about you that only in limited cases contains personal data and is automatically collected by our server, such as:
- The user’s IP address (anonymised, only the first 3 bytes).
- Name of the website or file accessed
- Date and time of access
- Amount of data transferred
- Message about successful retrieval
- Browser type and version
- Operating system of the user
- User’s device used, including MAC address
- Referrer URL (the previously visited page)
We only use this information to provide you with our services effectively (e.g. by adapting our website to the needs of your device) and to compile data to create anonymised statistics on the use of our website.
This data is not merged with other personal data that is actively provided within the framework of the website.
We need the automatically collected personal data for the provision of our website, Art. 6(1) sentence 1 lit. b DSGVO, as well as for our legitimate interest in ensuring the stability and security of the website, Art. 6(1) sentence 1 lit. f DSGVO.
3. newsletter
With your email address, you can subscribe to our newsletter, which will inform you about news from the MTH Potsdam, if you agree to receive the newsletter. The legal basis for this processing is Art. 6(1) sentence 1 lit. a DSGVO. We store your email address for as long as you subscribe to our newsletter. The service is carried out with the help of the so-called “double opt-in” procedure. In this process, you will receive an email with a link that you can use to confirm that you are the owner of the email address and would like to be notified via our email service. If your subscription is not confirmed within 96 hours of requesting the confirmation email, your personal data provided will not be processed but automatically deleted. You can unsubscribe from the newsletter by clicking on the link contained in each newsletter. We use the software of Mailjet GmbH (Global Headquarters: 13-13 bis, rue de l’Aubrac, 75012 Paris), with whom we have concluded an order processing agreement, to carry out the newsletter mailing. You can find out more about data protection at Mailjet at: https://www.mailjet.de/sicherheit-datenschutz/.
4. third party content
YouTube
We have integrated YouTube videos into our online offer, which are stored on http://www.YouTube.com and can be played directly from our website. The videos are all integrated in “extended data protection mode”, i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in the next paragraph be transferred. We have no influence on this data transmission. By visiting the website, YouTube (YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA) receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned under II. of this declaration is transmitted. This occurs regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right. This processing is based on Art. 6 (1) sentence 1 lit. f DSGVO. By embedding such videos, we pursue our legitimate interest in enhancing your user experience and optimising our services. For more information on the purpose and scope of data collection and processing by YouTube, please refer to YouTube’s privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Youtube is a service of Google Inc. and thus also subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. Links to third party websites This website may contain links to third party websites. We are not responsible for the content and data processing on the corresponding third-party websites. For information on data processing on the relevant websites, please refer to the privacy policy of the relevant websites. Disclosure of personal data to third parties Your personal data is disclosed to contractors who support us in the provision of our services (IT service, hosting of the website, range measurement, optimisation of the offer). We contractually oblige these contractors in accordance with Art. 28 DS-GVO. If we are legally entitled or obliged to do so (for example, due to applicable law or a court order), we may disclose your personal data. When you register for events organised by us, we share your personal data, such as name, with third party service providers at Eventbrite Inc (155 5th Street, Floor 7, San Francisco, CA 94103, USA). The purpose of this transfer is to organise the event. The legal basis for the transfer is Art. 6 para. 1 p. 1 lit. b DSGVO. Further information on cross-border transfers in general and transfers to the USA can be found below.
5. transfer of personal data to third countries
Within the scope set out above, we may transfer your personal data to other countries (including countries outside the EU) where data protection standards may differ from those in your country of residence. Please note that data processed in other countries may be subject to foreign laws and may be accessible to local governments, courts, law enforcement and regulatory authorities. However, when transferring your personal data to such countries, we will take appropriate measures to adequately secure your data. When transferring personal data to Eventbrite in the US, the transfer is protected by an adequacy decision of the European Commission in connection with the EU-US Privacy Shield. Eventbrite has certified itself under the EU-US Privacy Shield. For more information, please visit https://www.privacyshield.gov/EU-US-Framework.
6 Security
We have appropriate, state-of-the-art security measures in place to protect your information from loss, misuse and alteration. For example, our security policies and privacy statements are regularly reviewed and improved as necessary. In addition, only authorised employees have access to personal data. Although we cannot guarantee or warrant that loss, misuse or alteration of data will never occur, we do everything in our power to prevent it. Please remember that data transmission over the Internet is never completely secure. We cannot guarantee the security of data entered on our website during transmission over the Internet. This is at your own risk.
7. storage periods
Our aim is to process your personal data only to the minimum extent possible. If no exact storage periods are specified in this statement, we will only store your personal data for as long as it is necessary to fulfil the purpose for which it was originally collected and - if applicable - for as long as required by law.
8. your rights
You have the following data protection rights, depending on the circumstances of the specific case:
- Access: to request access to and/or copies of your personal data. This includes information about the purpose of the use, the category of data used, its recipients and persons authorised to access it and, if possible, the planned duration of data storage or, if this is not possible, the criteria for determining this duration;
- demand the correction, deletion or restriction of the processing of your personal data, insofar as their use is inadmissible under data protection law, in particular because
the data is incomplete or inaccurate,
they are no longer necessary for the purposes for which they were collected,
the consent on which the processing was based has been revoked, or
you have successfully exercised a right to object to data processing; in cases where the data are processed by third parties, we will forward your requests for rectification, erasure or restriction of processing to those third parties, unless this proves impossible or involves a disproportionate effort; - Objection, revocation: to refuse consent or - without affecting the lawfulness of the data processing carried out prior to revocation - to revoke your consent to the processing of your personal data at any time;
- not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you;
- Data portability: to request the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format and to transfer this data to another controller without hindrance from us; you may also have the right to request that we transfer the personal data directly to another controller where this is technically feasible;
- Complain: to take legal action or refer the matter to the relevant supervisory authorities if you believe that your rights have been infringed as a result of processing of your personal data that does not comply with data protection law.You can exercise the above rights; or ask questions orlodge a complaint about our processing of your personal data by contacting us as set out below. In addition, you have the right to object to the processing of your personal data at any time.
- where we process your personal data for direct marketing purposes; or:
where we are processing your personal data in pursuit of our legitimate interest and there are grounds arising from your particular situation.
9. contact
If you have any questions, concerns or comments about this Privacy Policy or any requests for your personal information, please feel free to email us. You can reach us at contact(at)mth-potsdam.de. The information you provide when contacting us (e.g. your name or email address) will only be processed in order to deal with your request. It will be deleted immediately thereafter. Alternatively, we restrict the processing of your personal data in accordance with the statutory provisions on retention obligations.
10. Changes
to this data protection declaration We reserve the right to amend this data protection declaration as and when our website is updated. Please visit this website regularly and check the current data protection declaration. This privacy policy was last updated on 04.04.2019.