Data privacy

We take compliance with data protection laws for the protection of your personal data very seriously. Therefore we would like to inform you transparently about all data processing on our website.

 

1. Data controller in the sense of Art. 4 (7) GDPR

The data controller in the sense of Article 4 (7) General Data Protection Regulation (GDPR) is:
Contact:
Phospholipid Research Center
Im Neuenheimer Feld 515
69120 Heidelberg, Germany
E-Mail: info@phospholipid-institute.com
Phone: +49 (0)6221 588 83 60

 

2. Website and server log files

The provider of these websites collects and automatically stores information in so-called server log files that your browser automatically transmits to us. This includes:

  • browser type / browser version
  • operating system used
  • referrer URL
  • host name of the accessing computer
  • time of the server query

This data cannot be assigned to specific persons. A combination of this data with other data sources does not take place. We reserve the right to review this data at a later time if we become aware of specific grounds for suspicion of illegal use.

 

3. Contact / Interested parties / Events / Funding

3.1. Communication

Purpose of data processing / legal basis:
Personal data that you provide to us by email, telephone, mail or contact form will be treated confidentially. We will use your data exclusively for the purpose of dealing with the enquiry. The legal basis for the data processing is Article 6 (1f) GDPR. Our legitimate interest arises from the interest to respond to the enquiries of our researchers, business partners and stakeholders with the aim of maintaining and promoting their satisfaction.

Recipient / categories of recipients:
As a basic principle, we do not disclose data to any third parties. Data may be processed on our behalf by data processors or service providers in exceptional cases in order to fulfil legal obligations and to fulfil legitimate interests. Compliance with data protection regulations is ensured here.

Storage period / criteria for specifying the storage period:
All personal data provided by you in the context of enquiries will be deleted after we finally processed your enquiries.

 

3.2. Services for our members

Purpose of data processing / legal basis:
You have the possibility to become a member of Phospholipid Researchers Center’s global network, participate in the meetings of the association to actively participate in shaping and extending our mission and thereby receive our newsletter, to stay up to date on posts, upcoming events and publications.
Provided that you register as a member of the Phospholipid Research Center, we use your data to send you our newsletter, to inform you about us and our events and to send you the invoices for the membership. The legal basis for this data processing is Article 6 (1b) GDPR with regard to compulsory information, Art. 6 (1a) GDPR with regard to optional information and Article 6 (1f) GDPR if you are not the contracting party, but the contact person who contacts us for a member or prospective member.
In case of consent you can revoke your consent at any time with effect for the future without affecting the legality of the previous processing. If you wish to revoke your consent, please contact us using the contact details listed under section 1.

Recipient / categories of recipients:
As a basic principle, we don‘t disclose data to any third parties. Data may be processed on our behalf by data processors or service providers in exceptional cases in order to fulfil legal obligations and to fulfil legitimate interests. Compliance with data protection regulations is ensured here.

Storage period / criteria for specifying the storage period:
In case of a successful application as a member of Phospholipid Research Center, your personal data will be stored for the duration of your membership. After termination of the membership, your tax-relevant data will be archived for a period of up to 10 years in line with the legal retention periods under § 257 (1) point 1 and § 257 (4) German Commercial Code (HGB), § 147 German Fiscal Code (AO).
In case of an unsuccessful application as a member of Phospholipid Research Center, your personal data will be blocked immediately and then deleted unless it has to be stored for other purposes.
Provided you revoke your consent, the data collected as optional information for this purpose will be deleted immediately unless they are also needed for another purpose.

 

3.3. Seminar registration and registration for events

Purpose of data processing / legal basis:
If you wish to book a seminar on our website or registrate for an event, we would need the information marked as required fields in the booking screen. The input fields that are not specifically marked are optional for you to fill in. As part of the booking you will receive an e-mail from us to confirm your registration. The booking process will not be completed before you activate the link in this email. Your data submitted in the context of the booking will be processed by us for the purpose of carrying out the booking and the seminar or for the registration for an event. The legal basis for this data processing is Article 6 (1b) GDPR with regard to compulsory information, Art. 6 (1a) GDPR with regard to optional information and Article 6 (1f) GDPR for the contact persons who don’t become contractual partners themselves.
With regard to optional information you can revoke your consent at any time with effect for the future without affecting the legality of the previous processing. If you wish to revoke your consent, please contact us using the contact details listed under section 1.

Recipient / categories of recipients:
As a basic principle, we do not disclose data to any third parties. Data may be processed on our behalf by data processors or service providers in exceptional cases in order to fulfil legal obligations and to fulfil legitimate interests. Compliance with data protection regulations is ensured here.

Storage period / criteria for specifying the storage period:
We store your personal data for the duration of the preparation, implementation and follow-up of the seminar or event. Afterwards, your tax-relevant data will be archived for a period of up to 10 years in line with the legal retention periods under § 257 (1) point 1 and § 257 (4) German Commercial Code (HGB), § 147 German Fiscal Code (AO).
Provided you revoke your consent, the data collected as optional information for this purpose will be deleted immediately unless they are also needed for another purpose.

 

3.4. Speaker at events

Purpose of data processing / legal basis:
If you appear as a speaker at one of our events, we will announce your name and the title of the presentation on our homepage, in electronic newsletters, print media and other printed products (brochures, flyers and advertisements) to promote the event. We will also use your personal data for booking the hotel. Data processing is carried out in accordance with Article 6 (1a) GDPR and Article 6 (1f) GDPR if the contact person is not the speaker himself.
In case of consent you can revoke your consent at any time with effect for the future without affecting the legality of the previous processing. If you wish to revoke your consent, please contact us using the contact details listed under section 1.
In the case of revocation, the printed products containing your personal data will continue to be used until the printed edition has been used up. Your personal data will then no longer be used for the new edition. The same applies to the publication of your personal data in electronic newsletters if the consent given is revoked after the start of the production or planning process.

Recipient / categories of recipients:
As a basic principle, we do not disclose data to any third parties. Data may be processed on our behalf by data processors or service providers in exceptional cases in order to fulfil legal obligations and to fulfil legitimate interests. In connection with the hotel booking we pass on your personal data to the hotel. Compliance with data protection regulations is ensured here.

Storage period / criteria for specifying the storage period:
We store your personal data for the duration of the preparation, implementation and follow-up of the seminar or event.
Afterwards, your tax-relevant data will be archived for a period of up to 10 years in line with the legal retention periods under § 257 (1) point 1 and § 257 (4) German Commercial Code (HGB), § 147 German Fiscal Code (AO).
Provided you revoke your consent, the data collected as optional information for this purpose will be deleted immediately unless they are also needed for another purpose.

 

3.5. Data processing in connection with the funding of projects

Purpose of data processing / legal basis:
You have the possibility to submit an application for a funding project to Phospholipid Research Center.
The application for a funding project sent to us will only be used to decide on the proposal. It will be forwarded to the Scientific Advisory Council for a decision.
The purpose of processing your personal data is to handle the decision-making process and thus possibly the approval of project funds. Legal basis for the processing of the business partner personal data is Article 6 (1b) GDPR and Article 6 (1f) GDPR for the contact persons who don’t become contractual partners themselves.

Recipient / categories of recipients:
As a basic principle, we do not disclose data to any third parties. Data may be processed on our behalf by data processors or service providers in exceptional cases in order to fulfil legal obligations and to fulfil legitimate interests.

Storage period / criteria for specifying the storage period:
The personal data collected for the aforementioned purposes will be deleted if further storage is no longer necessary for the aforementioned purpose.
Afterwards, your tax-relevant data will be archived for a period of up to 10 years in line with the legal retention periods under § 257 (1) point 1 and § 257 (4) German Commercial Code (HGB), § 147 German Fiscal Code (AO).
In case of an unsuccessful application for a funding project, your personal data will be blocked immediately and then deleted unless it has to be stored for other purposes.

 

3.6. Data processing in connection with the submission of a research and / or event proposal

Purpose of data processing / legal basis:
You have the possibility to submit a research and / or event proposal to Phospholipid Research Center.
The research and / or event proposals sent to us will only be used to decide on the proposal. It will be forwarded to the Scientific Advisory for a decision. Funded projects, a name and a link to the contact details could be published on our website.
The purpose of processing your personal data is to handle the decision-making process and thus possibly the approval of research funds. Legal basis for the processing is Article 6 (1b) GDPR and Article 6 (1f) GDPR for the contact persons who don’t become contractual partners themselves.

Recipient / categories of recipients:
As a basic principle, we do not disclose data to any third parties. Data may be processed on our behalf by data processors or service providers in exceptional cases in order to fulfil legal obligations and to fulfil legitimate interests.

Storage period / criteria for specifying the storage period:
The personal data collected for the aforementioned purposes will be deleted if further storage is no longer necessary for the aforementioned purpose.
At the end of the funding period, your tax-relevant data will be archived for a period of up to 10 years in line with the legal retention periods under § 257 (1) point 1 and § 257 (4) German Commercial Code (HGB), § 147 German Fiscal Code (AO).
In case of an unsuccessful research proposal, your personal data will be blocked immediately and then deleted unless it has to be stored for other purposes.

 

3.7. Data processing in connection with the publication of articles or contribute our newsletter

Purpose of data processing / legal basis:
You have the possibility to publish your publications and contributions in our newsletter. Please feel free to contact us via e-mail. If we publish your article, we will also publish your name and contact details.
Legal basis for the processing of the personal data of the authors is Article 6 (1a) GDPR and Article 6 (1f) GDPR if the contact person is not the author himself.
In case of consent you can revoke your consent at any time with effect for the future without affecting the legality of the previous processing. If you wish to revoke your consent, please contact us using the contact details listed under section 1. In the case of revocation, the printed products containing your personal data will continue to be used until the printed edition has been used up. Your personal data will then no longer be used for the new edition. The same applies to the publication of your personal data in electronic newsletters if the consent given is revoked after the start of the production or planning process.

Recipient / categories of recipients:
As a basic principle, we do not disclose data to any third parties. Data may be processed on our behalf by data processors or service providers in exceptional cases in order to fulfil legal obligations and to fulfil legitimate interests. Compliance with data protection regulations is ensured here.

Storage period / criteria for specifying the storage period:
The personal data collected for the aforementioned purposes will be deleted if further storage is no longer necessary for the aforementioned purpose.
In case of an unsuccessful request, your personal data will be blocked immediately and then deleted unless it has to be stored for other purposes.
Provided you revoke your consent, the data collected as optional information for this purpose will be deleted immediately unless they are also needed for another purpose.

 

4. Employee / Applications

Purpose of data processing / legal basis:
In addition to sending us your application by mail, you can also forward your application documents by e-mail. The application documents sent to us will only be used for the application process. Please note that applications sent to us by email will be transferred unencrypted and the data may possibly be noticed by unauthorised persons or may also be modified. You are welcome to also send us your documents by mail. The purpose of processing your personal data is to deal with the application process in our company and therefore the possible establishment of a new employment relationship.
The purpose of processing your personal data is to deal with the application process in our company and therefore the possible establishment of a new employment relationship.
The lawful basis for the processing is Article 88 (1) GDPR, in connection with § 26 (1) Federal Data Protection Act (BDSG).

Recipient / categories of recipients:
As a basic principle, we do not disclose your data to any third parties. Within the company where you are applying for the job, your personal data is only made available to those persons, who are involved in the decision-making process.

Storage period / criteria for specifying the storage period:
In case of a successful application, your personal data will be stored for the duration of your employment. After termination of the employment relationship, your tax-relevant data will be archived for a period of up to 10 years in line with the legal retention periods under § 257 (1) point 1 and § 257 (4) German Commercial Code (HGB), § 147 German Fiscal Code (AO). In case of an unsuccessful application, your personal data will be deleted three months after the negative message. A longer storage period despite the negative message is only possible with your consent.

 

5. Rights of the data subjects

According to Article 15 (1) GDPR you have the right to have access to your personal data that has been collected and stored by Phospholipid Research Center free of charge upon request.
If the statutory requirements are given, you also have the right to be informed (Article 16 GDPR) about your personal data, to have your personal data erased (Article 17 GDPR) or to restrict the processing of your personal data (Article 18 GDPR).

Provided that the data processing is based on Article 6 (1 f) GDPR you have the right to object under Article 21 GDPR. Provided that you object to the data processing, it will be stopped in the future unless the responsible person can provide compelling legitimate grounds for a further processing that override the data subject’s interest in the conflict.

Provided that you have given us the processed data yourself, you have the right to data portability under Article 20 GDPR.

Provided that the data processing is based on a consent in accordance with Article 6 (1a) or Article 9 (2a) GDPR you can revoke the consent at any time with effect for the future without affecting the lawfulness of the previous processing.
In any of the cases above, for further questions or in the event of a complaint, please contact us in writing or by email at the contact information listed under section 1.
Additionally, according to Art. 77 GDPR, you have the right to complain to the data protection supervisory authority. The competent data protection supervisory authority is determined by the federal state in which you reside or in which the data controller has its head office.

 

6. No obligation to make personal data available

Unless otherwise specified in the previous chapters, the provision of personal data is not required by law or by contract or necessary for signing a contract. You are not obligated to provide any personal data, if no contrary information has been given before. If you do not provide your personal data, this may possibly mean that we cannot answer your contact request or that a participation in the application procedure or a participation in an event is not possible.