Logo Universitätsmedizin Göttingen
HBCG > Data privacy

Data Protection

Data protection statement

1. Area of validity

This data protection statement provides an explanation of the nature, scope and purpose of the processing of personal data by the controller, as defined in Art. 4 no. 7 GDPR, namely the

Georg-August-Universität Göttingen
Public Law Foundation
Medical Center Göttingen
Robert-Koch-Str. 42
37075 Göttingen

represented by the Executive Board

Telephone: +49 (0)551 390
E-mail: poststelle@med.uni-goettingen.de

(below: “UMG”)

within the framework of the online presence provided under https://www.umg.eu (below: “website”).

The legal bases for the data protection are the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), the Lower Saxony Data Protection Act (NdsDSG) and the Telemedia Act (TMG). The UMG declares that it complies with the applicable laws, in particular when processing personal data.

The UMG Data Protection Officer can be contacted at: 

Universitätsmedizin Göttingen
-Datenschutzbeauftragter-
37099 Göttingen
Telephone: +49 (0)551 3922762
E-mail: datenschutz@med.uni-goettingen.de

The data protection supervisory authority responsible for data protection at the UMG is the Federal State Data Protection Officer for Lower Saxony:

Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover
Telephone: +49 (0)511 120 45 00
Fax: +49 (0)511 120 45 99
E-mail: poststelle@lfd.niedersachsen.de

2. Handling of personal data

Personal data is all information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (Art. 4, no. 1 GDPR)

The law relates to the processing of personal data:

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (Art. 4, no. 2 GDPR)

Personal data is only processed by the UMG when this is permitted by law, or when the user has given their consent to the processing (see Art. 6 GDPR).

2.1 Processing when visiting the website

When visiting this website, information may be stored by Matomo, the web analysis tool, about the website access (date, time, page read).

The Matomo web analysis tool uses cookies in order to enable the operator of the website to record and analyse different statistical data, for example in order to improve the quality of the structure and content of the online presence, or to enable user-oriented navigation that is as frictionless as possible. Cookies are small text files that are stored on your hard drive assigned by your browser, and via which certain information is sent to the entity set by the cookie (in this case, by us). On the one hand, they are used to ensure the user friendliness of websites, and thus benefit users (for example when login data is stored). On the other, they help us record the statistic data relating to website use and enable use analyse this data in order to improve our online presence.

We set “session” cookies, which are limited to the length of time of your visit, and which allow us, for example, to store specific information related to the device on the access device of the user (PC, smartphone, etc.). This makes it possible to recognise you when you return to our website. As “transient” cookies, session cookies are automatically deleted when you close your browser or log off.

Cookies cannot cause damage to your computer. They are not a potential source of security problems for your computer in the form of viruses or spyware.

Users can influence the way that cookies are used. Most current browsers offer the option of limiting the storage of cookies, or preventing storage entirely.

Many corporate online advertising cookies can be blocked via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/uk/your-ad-choices/.

PLEASE NOTE: if you permit the use of the web analysis cookie by the Matomo web analysis tool, the following usage data is recorded and stored in a database when the website is retrieved:

  • Your IP address (in abbreviated form, 2 bytes, e.g.: 192.168.xxx.xxx)
  • The date and time of retrieval
  • The title of the page retrieved
  • The URL (address) of the page retrieved
  • The previous URL (address) of the page retrieved
  • The display resolution used
  • The time zone
  • The file that has been clicked or downloaded
  • The external link clicked
  • The location of the user (country, region, town)
  • The browser language
  • The browser

The log file processing and use of the web analysis cookie are conducted solely for statistical purposes.

2.2 Processing when contact is made via e-mail or using the contact form

Should personal data be collected via the contact form or via an e-mail enquiry (e.g. the user’s name, address and e-mail addresses), such information is collected solely on a voluntary basis. Please note that personal data that is sent to us via e-mail when initial enquiries are made is stored for processing. However, this is done solely for the purpose of processing the enquiries.

In this context, communication via e-mail may be vulnerable to security breaches. In particular, the possibility of manipulation of electronic documents by third parties cannot be entirely excluded. Furthermore, persons with experience in this area may find ways of reading or altering e-mails en route to us. If you wish to avoid the potential risks arising from the use of e-mail, you should select another form of communication.

Additional personal data is only processed when you provide such data yourself in the e-mail, e.g. when this is required for the conclusion of confidentiality agreements or other contracts.

Your data will only be forwarded to third parties when necessary in order to achieve the purpose of your enquiry (e.g. in order to process personal data to complete a contract [see Art. 6, para. 1b GDPR] or for the fulfilment of legal obligations [see Art. 6, para. 1c GDPR] or when processing is necessary in order to protect the vital interests of the data subject [see Art. 6, para. 1d GDPR]).

2.3 Integration of Usercentrics

This website uses the consent management technology of Usercentrics to obtain your consent to the storage of certain cookies on your end device or to the use of certain technologies and to document this in compliance with data protection regulations. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, website: https://usercentrics.com/de (hereinafter "Usercentrics").

When you visit our website, technical and personal data is transmitted to Usercentrics:

  • Your consent(s) or the withdrawal of your consent(s)
  • your IP address
  • Information about your browser
  • Information about your end device
  • Time of your visit to the website

Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign the consents given or their revocation to you. The data collected in this way is stored until you ask us to delete it, delete the Usercentrics cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected.

Usercentrics is used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

2.4 Integration of YouTube videos

YouTube videos are integrated on this website, which are stored on http://www.YouTube.com and can be played directly from our website.

When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. The following data is also transmitted to YouTube

  • Your IP address
  • Date and time of the request
  • Information about your browser
  • Information about your end device
  • Referrer URL (the previously visited website)
  • Viewed videos

Data is transmitted regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information about your rights and settings options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

3. The right to information; erasure and blockage

Following submission of an application to the person responsible for the content named in the legal notice, you have the legal right to obtain information in accordance with the GDPR and BDSG.

Specifically, you have the following rights with regard to the personal data relating to you:

  • The right to information (Art. 15 GDPR)
  • The right to rectification (Art. 16 GDPR)
  • The right to erasure (Art. 17 GDPR)
  • The right to restriction of processing (Art. 18 GDPR)
  • The right to data portability (Art. 20 GDPR)
  • The right to object to the processing (Art. 21 GDPR)

The stored personal data relating to you is erased and blocked in accordance with the statutory regulations.

In accordance with Art. 77 GDPR, you also have the right to lodge a complaint with a data protection supervisory authority (e.g. the data protection supervisory authority responsible for the UMG, as named above under Section 1).

Version: April 2024
 

Follow us