Data protection information for the operation of our website

1. Name and contact details of the controller and contact details of the data protection officer

The controller within the meaning of the GDPR (General Data Protection Regulation) and national data protection laws is
European Science Communication Institute (ESCI) gGmbH, Lindenstr. 87, 26123 Oldenburg (Germany)
Data Protection Officer: Maike Bartlmae, mb@esci.eu
If you have any questions about this privacy policy or require further information, please contact us at the above e-mail address.

2. Provision of the website and creation of log files

To ensure that we can provide our website securely and effectively, we use hosting services from OVH GmbH in Roubaix (https://www.ovhcloud.com). Our website is hosted on servers in Europe. An order processing contract has been concluded.
For the downloadable content on this website, we use the services of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany: https://www.hetzner.com/ An order processing contract has been concluded.
Each time our website is accessed, the system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

IP address
Your operating system
Referrer URL (previously visited page)
Name of the file or page accessed
Date and time of the retrieval/access
Amount of data transferred
Message as to whether the retrieval/access was successful

The data is stored in so-called log files of our system on the web servers. This data is not stored together with other personal data of the user.
The legal basis for the temporary storage of the data and the log files is Section 25 (2) No. 2 TTDSG, Art. 6 (1) (f) GDPR. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to your computer. For this purpose, your IP address must remain stored for the duration of the session. The data is stored in log files to ensure the functionality of the website, for technical optimisation of the website and to secure the systems.
The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website.

3. Use of cookies

Our website uses session cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the computer system. When you access a website, a cookie may be stored on your operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
We use cookies to make our website functional and user-friendly. These cookies help to make a website usable by enabling basic functions such as page navigation and access to secure areas of the website.
The legal basis for the use of technically necessary cookies is § 25 para. 2 no. 2 TTDSG. The purpose of the use in these cases is to enable and simplify the use of websites for you. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised even after a page change.
Cookies are stored on the user’s computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
Session cookies are stored for 2 days. The server log files (server log data) are stored for one month.

4. Data collection and legal basis when contacting us via the contact form or by e-mail

If you contact us via the contact form on our website or by email, we will process your details in order to deal with your enquiry.
The data entered in the input mask will be transmitted to us and stored: Name, e-mail address, telephone number and your message to us.
We also record your IP address and the time of sending.

Purpose of processing: Processing and responding to the contact.

If you contact us by e-mail, we process the data that you have communicated to us.

The legal basis for processing the data required to respond is Art. 6 para. 1 lit. f GDPR. Our legitimate interests arise from the fact that we can respond to your contact enquiry or your email.
If you have given your consent to the collection of additional data, the legal basis for the processing of this data is Art. 6 para. 1 lit. a GDPR.

Subject to statutory retention periods, the data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when we have finally processed your respective enquiry.

Data collection when registering for the newsletter

You can subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input screen is transmitted to us. The following data is transmitted to us in this way

e-mail address of the user
name of the user
company, organisation

The following additional data is also collected during registration

IP address of the accessing computer
date and time of registration

Your consent is obtained for the processing of the data as part of the registration process and reference is made to this privacy policy.

No data will be passed on to third parties in connection with the data processing for sending newsletters. The data is used exclusively for sending the newsletter.

Legal basis for the processing

The legal basis for the processing of data after registration for the newsletter and granting your consent during the registration process is Art. 6 para. 1 lit. a GDPR.

Purpose of the processing

The purpose of collecting the user’s email address is to deliver the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address used. Dauer der Speicherung der personenbezogenen Daten
Your e-mail address will be stored for as long as the subscription to the newsletter is active. The other personal data collected during the registration process will generally be deleted after a period of seven days.

The subscription to the newsletter can be cancelled by the respective user at any time. There is a corresponding link in every newsletter for this purpose. Cancelling the newsletter subscription also enables the user to withdraw their consent to the storage of the personal data collected during the registration process.

5. Secure data transmission through HTTPS

We take technical and organisational measures to protect your data from unauthorised access as comprehensively as possible. Our website uses HTTPS encryption for security reasons and to protect the transmission of confidential content. This ensures that all data transmitted between your browser and our server is protected against unauthorised access. The use of HTTPS, recognisable by the lock symbol in your browser line, ensures that your personal data is transmitted securely.

6. Integration of You Tube videos

YouTube videos are integrated on our website, which are stored on ‘www.youtube.com’ and can be clicked and played directly from our website. Here we use the ‘extended data protection mode’ option provided by YouTube, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will YouTube cookies be stored on your computer and data transmitted to the YouTube operator Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’). If you play videos stored on YouTube, at least the following data will be transmitted to Google: IP address and cookie ID, the specific address of the page you have accessed on our website, browser language setting, system date and time of access and your browser ID. The data transfer takes place regardless of whether you are logged in to YouTube via a user account or whether you do not have a user account. If you are logged in, this data is assigned directly to your account. You can prevent this assignment by logging out before activating the start button. Google stores this data as user profiles and uses it for the purposes of advertising, market research and/or customising its website. You have the right to object to the creation of these user profiles, which you must address directly to Google as the operator of YouTube. Google provides further information on YouTube’s data protection policy at www.google.at/intl/de/policies/privacy/.

By playing the YouTube videos, you consent to data processing by Google. We do not process the data concerned.

7. WordPress

WordPress cookies:

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

WordPress registration:

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

8. Additional security informations

A cookie named “itsec_interstitial_browser” is created to track a user’s login process to implement enhanced security features.

Security Logs

The IP address of visitors, user ID of logged in users, and username of login attempts are conditionally logged to check for malicious activity and to protect the site from specific kinds of attacks. Examples of conditions when logging occurs include login attempts, log out requests, requests for suspicious URLs, changes to site content, and password updates. This information is retained for 60 days.

9. Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

Right of access, Art. 15 GDPR
Right to rectification, Art. 16 GDPR
Right to erasure, Art. 17 GDPR
Right to restriction of processing, Art. 18 GDPR
Right to data portability, Art. 20 GDPR

If you have given us your consent in accordance with § 25 para. 1 sentence 1 TTDSG, Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, you have the right to revoke this consent at any time. The revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Objection: You have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation within the framework of the requirements of Art. 21 GDPR.

You also have the right to lodge a complaint with the supervisory authority responsible for us, which in our case is

The State Commissioner for Data Protection of Lower Saxony
Prinzenstr. 5
30159 Hanover

8. Changes to and accessibility of the privacy policy

Due to changes and adjustments to the offer, legal innovations and any subsequently recognised regulatory gaps, changes to this privacy policy may become necessary. You can access the current privacy policy from any page of this website under the privacy policy.