1. General information about the collection of personal data

The protection of your privacy when using our website www.fellows-ghst.de is very important to us; therefore, we use your personal data in accordance with the legal regulations on data protection. Personal data is all data that refers to you as a person, e.g. name, address, e-mail address, user behaviour. Below we will inform you about how we handle your personal data.

The responsible data controller (hereinafter: “controller”) pursuant to Art. 4 (7) EU General Data Protection Regulation (GDPR) is the non-profit Hertie Foundation, Grüneburgweg 105, 60323 Frankfurt am Main.

If you are under the age of 16, please obtain the permission of a parent/legal guardian before providing us with any personal data. The permission must be submitted to us in writing when registering for the online forum and will be requested during the registration process.

2. Collection of personal data when visiting our website

Area without login:

In principle, you can visit the publicly accessible part of our website www.fellows-ghst.de (without login) without informing us who you are. As is common with almost all websites, the server hosting our website (hereinafter: “web server”) automatically collects information from you when you visit us on the internet. This data is technically necessary for us and ensures the stability and security of the website.

The web server automatically recognises certain personal data such as your IP address, the date and time you are on our site, the pages you visited on our website, the website you were on before, the browser you used (e.g. Internet Explorer, Firefox, Safari), the operating system you are using (e.g. Windows, Linux, MAC OS) as well as the domain name and the address of your internet provider (e.g. 1 & 1, Telekom, Unity Media). If our website uses cookies (as explained below), the web server also stores this information (legal basis is Art. 6 (1) (f) GDPR).

Area with password-protected login:

This privacy policy is intended to inform you of the purposes for which the Hertie Foundation (hereinafter: “we” or “us”) processes your personal data. Personal data is all information that relates to your person. The following information should help you to understand the processing of your personal data and thus to ensure transparency.
In the online forum, we process the following personal data for the purpose of establishing the network and the alumni work:
2.1. Master data, name, gender, title, contact details (electronic, postal), birthday, nationality, affiliation to the Hertie Foundation, 2.2. Information on occupation, qualifications, training and curriculum vitae, areas of interest, self-description,
2.3. Password, login, group memberships in the forum, pictures, transaction data, bank details (e.g. for donations),
2.4. Applications, registration data in the context of events (e.g. meal requests), self-generated content (pictures, comments, contributions, mailings list).

Cookies

In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and by which the body that sets the cookie (here: us) receives certain information. Cookies cannot run programs or transmit viruses to your computer. They serve to make the website more user-friendly and effective overall.

aa) This website uses the following types of cookies, the scope and operation of which are explained below:
- Transient cookies (see bb)
- Persistent cookies (see cc).
bb) Transient cookies are automatically deleted when you close the browser. These include in particular session cookies. Session cookies store a so-called session ID, with which various requests from your browser can be assigned to the common session. This will allow your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.
cc) Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
dd) You can configure your browser setting according to your wishes. For example you may decline the acceptance of third-party cookies or all cookies. Please be aware that you may not be able to use all features of this site in this event.
ee) We use cookies to identify you for follow-up visits if you have an account with us. Otherwise, you would have to log in again for each visit.

Third party cookies on our websites
We allow third parties to place cookies on your computer through this website.

Web analytics services

This website uses the web analytics service Piwik to analyse and regularly improve the use of our website. With the statistics, we can improve our website and make it more interesting for you as a user. The legal basis for the use of Piwik is Art. 6 (1) (f) GDPR.

(2) Cookies are stored on your computer for this evaluation (see the section entitled “Cookies” below). The controller stores the information collected exclusively on its server in the EU. You can adjust the evaluation by deleting existing cookies and preventing the storage of cookies. If you prevent the storage of cookies, we point out that you may not be able to use this website to the full extent. The prevention of the storage of cookies is possible through the setting in your browser. Preventing the use of Piwik is possible by removing the following checkmark to enable the opt-out plug-in: [Piwik iFrame].
(3) This website uses Piwik with the extension “AnonymizeIP”. As a result, IP addresses are processed in shortened form, which means that direct personal reference can be excluded. The IP address transmitted by Piwik from your browser will not be merged with other data collected by us.
(4) The Piwik program is an open source project. Information from this third-party provider regarding privacy is available at http://piwik.org/privacy/policy.

Use of social media plug-ins

You can sync your personal data from the following sources: LinkedIn and hertie-connect.org. LinkedIn profile is partially publicly available, depending on personal settings. Data in Hertie Connect (Hertie School of Governance alumni only) is not publicly available.

No automatic decision-making based solely on automated processing, including profiling, and having a legal effect or affecting you in a similar manner will be performed.
We use LinkedIn components on our site to enable single sign-on with LinkedIn login to those of you who wish to use the data synchronisation features of LinkedIn. Data synchronisation is initiated by you and is not automated. For details about LinkedIn’s data collection, rights, and settings options, please refer to the LinkedIn privacy policy. The privacy policy can be found at http://www.linkedin.com/legal/privacy-policy

We have no influence on the collected data and data processing operations, nor are we aware of the full extent of data collection, the purpose of the processing or the retention periods. We also have no information on the deletion of the data collected by the plug-in provider.

The plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and/or tailor-made website design. Such an evaluation is carried out in particular (also for non-logged-in users) for the presentation of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the formation of these usage profiles; you must contact the respective plug-in provider to exercise it. Through the plug-ins, we offer you the opportunity to interact with the social networks and other users, so that we can improve our website and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 (1) (f) GDPR.

The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged into the plug-in provider, your data collected from us will be assigned directly to your existing account with the plug-in provider. If you press the activated button and, for example, if you link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend logging out regularly after using a social network, but especially before activating the button, as this will prevent assignment to your profile with the plug-in provider.

For more information on the purpose and scope of the data collection and its processing by the plug-in provider, please refer to the privacy policies of these providers. There you will also find further information about your rights and settings options for the protection of your privacy.

Integration of YouTube videos

We have included YouTube videos in our website, which are stored on http://www.YouTube.com and are directly playable from our website. These are all embedded in the “enhanced privacy mode”, which means that if you do not play the video, no data about you as a user will be transferred to YouTube. Only when you play the videos will data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer.

By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. If you do not wish this information to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for purposes of advertising, market research and/or custom design of its website. Such an evaluation is carried out in particular (also for non-logged-in users) for the presentation of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the formation of these usage profiles; you must contact YouTube to exercise it.

For more information on the purpose and scope of your data collection and processing through YouTube, please read the YouTube privacy policy. There you will also find further information about your rights and settings options for the protection of your privacy.

Integration of Google Maps

On this website we use the Google Maps product. This allows us to show you interactive maps directly in the website and allows you to conveniently use the map feature.

By visiting the website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned under 2 of this declaration will be transmitted. This is done regardless of whether Google provides a user account that you are logged in to, or if you have no user account. When you are logged in to Google, your data will be assigned directly to your account. If you do not wish this information to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or custom design of its website. Such an evaluation is carried out in particular (also for non-logged-in users) for the presentation of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the formation of these usage profiles; you must contact Google to exercise it.

For more information on the purpose and scope of the data collection and its processing by the plug-in provider, please refer to the privacy policy of the provider. You can also find more information about your rights and privacy settings here: http://www.google.com/intl/en/policies/privacy. Google also processes your personal data in the United States and has submitted to the EU-US Privacy Shield Framework: https://www.privacyshield.gov/EU-US.

Weekly newsletter

In the regular weekly newsletter, we inform members of our forum about our activities and provide up-to-date information about the Hertie Foundation, its projects and alumni work. The weekly newsletter (ff list) will only be sent to you if you actively register in our online forum www.fellows-ghst.de. If you register in our online forum, the personal data given there will be collected, stored and processed for the purpose of sending the newsletter.

In the password-protected online forum, you can set your notification preferences for newsletters and mailing lists such as the weekly newsletter in the “My Profile / Settings” area in your personal menu and unsubscribe there directly.

Contact

When you contact us by e-mail or through a contact form, the information you provide (your e-mail address, your name and telephone number if applicable) will be stored by us to answer your questions. We delete the data that arises in this context after the storage is no longer required, or restrict the processing if legal retention periods exist.

Other features of the online forum

As part of your password-protected profile in the online forum, with the exception of general information (such as name, e-mail, program/affiliation and year), you can determine which data is accessible to other users of the online forum. Without registration and for non-members, data from your profile in the online forum is generally not visible. An exception is the public member lists within some working groups (see Programs & Networks section) where your name and photo (if set by the member) can be viewed without registration. Joining a public group is confirmed by a separate consent.
In order for the online forum of the Hertie Foundation to fulfil its functions and to verify your membership in the program/affiliation of the Hertie Foundation as part of the registration, certain personal data will be collected and processed during registration including: password, first name, last name, e-mail address, program/affiliation to the Hertie Foundation and start date. Your password cannot be viewed by other members of the online forum at any time. From the information provided in your profile, the following information is always and completely accessible to other members of the forum: first name, last name, gender, program/affiliation, affiliation year. All other information in your profile (including uploading a professional photo) is optional. With these optional details, you can decide if they are displayed to all members of the forum or only to your groups. You e-mail address is however defined as a mandatory field. Regarding your e-mail address, you can decide if it will be displayed to all forum members or just to your groups.
Additional voluntary information about your background and contact details allow other members of the forum to get to know you better and contact you specifically. The voluntary data currently includes: photo, academic title, maiden name, date of birth, telephone, country of birth, gender, nationality, correspondence language, home and work address, telephone and e-mail, social networks such as Facebook, LinkedIn, XING, study data, publications, employment data, career, education and interests.
In the password-protected section of the online forum, you can find information about other members of the online forum in the Members/Directory area. This makes it possible to specifically search the data of the members, taking into account their release settings, in order to establish contact with other members.
The password-protected section of the online forum contains the event and application management functions, which are used for the activities of the fellows and the projects of the non-profit Hertie Foundation. Each registration/registration form has its own coordinators who can view the data requested in the form. For cooperation partners who are involved in the event, you will be informed about the extent to which your data in the registration form will be forwarded to the event partner. In such cases, a separate consent is necessary.
The online forum offers its members the opportunity to work together in groups. The groups may set up their own thematic blogs through the online forum, each consisting of a password-protected area accessible only to members of the group and a public area that is open to the public without a password login. Each group has one or more coordinators who can manage the members of the group (e.g. in online blogs), give read/write permissions and edit the content of the blog posts. The groups can create their own mailing lists and member directories (public and password protected). Group-specific privacy settings are possible within the groups.

3. Legal basis of processing

The legal basis for the processing of your personal data for the above purpose is the mutual agreement on the use of the online forum, portals for alumni students, fellows, funders of the Foundation and staff of the Foundation (Art. 6. (1) (b) GDPR).
You are not contractually obliged to provide us with your personal data. To be able to use the portal, however, you must at least fill in the following mandatory fields: salutation, first name, last name, e-mail address, password, program/affiliation to the Hertie Foundation and start date. Should you decide not to provide us with your personal data, it will have the following consequences: You cannot use the portal (online forum).

4. Your rights

According to the regulations of the GDPR, you can assert the following rights against us:

• Right to information
• Right to correction
• Right to restriction of processing
• Right to be deletion / Right to be forgotten
• Right to data portability
• Right to objection

If the processing of your personal data is based on your consent, you have the right at any time to revoke your consent, with effect for the future. The legality of the processing carried out on the basis of the consent until the revocation remains unaffected.

To exercise any of your rights listed above, you can contact us at any time: NockoG@ghst.de.
You have the right at any time to delete the account created in the online forum of the non-profit Hertie Foundation. To do this, send an e-mail with your name and the note “Delete account” to the administrator (NockoG@ghst.de) or log in and delete the profile in your profile settings.
Our data protection officer can be reached under the following contact data: datenschutz@ghst.de. Hertie Foundation, Data Protection, Grüneburgweg 105, 60323 Frankfurt am Main.
In addition, you have the right to lodge a complaint about the processing of your personal data by us to the data protection supervisory authority. The responsible supervisory authority is: The Hessian Data Protection Officer (Gustav-Stresemann-Ring 1, 65189 Wiesbaden).

5. Storage duration

We adhere to the principles of data avoidance and data economy. We store your personal data therefore only as long as this is necessary for achievement of the purposes mentioned here or as required by the lawmakers in their multiple storage periods. After discontinuation of the respective purpose or expiration of these deadlines, the corresponding data is deleted routinely and in accordance with the law.

Based on web server protocols – max. 90 days/3 months

Based on no. 2.1 -2.3: Deletion period: the user can delete their account in the online forum and their personal data at any time.

Based on no. 2.4: Deletion period: 3 months/years unless separate consent has been obtained or the data must be kept for invoice management, or archival purposes (e.g. mailing lists).

6. Place of data processing

www.fellows-ghst.de processes your data exclusively within Germany and the EU.

7. Transfer of your personal data

We transfer your personal data to the following categories of recipients: IT service provider
The service provider works exclusively in accordance with our instructions, which we ensure through strict contractual arrangements as well as through technical and organisational measures. In addition, we do not transfer any information to third parties unless you have expressly consented or is required by law. Each member of the online forum is obliged not to disclose the data available to third parties or to use it for other purposes.

8. Security measures

Insofar as we transfer data to our service providers within the framework of the services described here, the service providers are bound to contractual requirements with us in addition to the mandatory statutory provisions with regard to data protection.

We implement security measures that we continuously optimise in accordance with technical and legal developments in order to best protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorised third parties.

9. Links to other websites

Our online offer contains links to other websites. This privacy policy does not extend to other providers. We have no influence on whether their operators comply with the data protection regulations and therefore assume no responsibility for the accuracy, timeliness or completeness of the information provided there.

The www.fellows-ghst.de website may contain hyperlinks to websites owned by third parties and operated by third parties. These third-party websites have their own privacy policies, and they may also use cookies; we recommend that you review their policies. The policies of these websites regulate the use of personal data that you transmit during your visits to the relevant website and regulate the data collected through cookies. We assume no liability for such third-party websites, and your use of such websites is at your own risk.

Contact

If you have any questions or comments about this privacy and cookie policy, please contact us using the contact details provided here (see section 1).

The rapid development of the internet requires changes from time to time to our privacy policy. You will be informed about such changes.