I. Who we are and how you can contact us if you have any questions:
concentris research management gmbH created and maintains this website as a member of the FeatureCloud consortium and is with regard to this website the controller according to the General Data Protection Regulation (GDPR).
concentris research management gmbh
II. Our data processing – for what purpose and on what legal basis we process personal data
We process personal data in compliance with the relevant data protection law, in particular the General Data Protection Regulation (GDPR, Regulation [EU] 2016/679) and the German Federal Data Protection Act (BDSG). Any processing by us will therefore only take place based on a legal basis (in particular in accordance with Article 6 paragraph 1 lit a to f GDPR), which will be stated below for the individual data processing operations. We do not carry out any automated decision making.
II.2 Operation of our website:
Every time you access our website (https://featurecloud.eu), your computer (terminal device) / web browser automatically transmits certain information to enable you to visit the website:
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (page/content to be retrieved)
- Access Status/HTTP(S) Status Code and request method (GET/POST)
- Browser and browser version
- Operating system and its user interface
This data is temporarily stored in the log files of our system. This data is not stored together with other personal data of the user.
Legal basis and purpose of data processing
The legal basis for the processing of data and their temporary storage in log files is Article 6 paragraph 1 lit f GDPR. Temporary storage of the listed data by the system is necessary to enable delivery of the website to the user’s computer. The storage in log files is done to ensure the functionality of the website. In addition, the data serves us to optimise the website and to ensure the security of our information technology systems, in particular to guarantee the integrity, confidentiality and availability of the data processed via our website. From these purposes follows our legitimate interest in data processing in accordance with Article 6 paragraph 1 lit f GDPR.
Duration of storage
The data will be deleted as soon as they are no longer necessary for the purpose of their collection. This is the case when collecting data for the purpose of providing the website when the respective session is ended. For the data stored in log files, this is the case after 30 days at the latest, unless further processing is necessary to clarify a (suspected) attack.
Personal data, which is collected during the operation of the website, will only be transmitted by us to third parties (in particular to expert persons and security authorities) in the event of a (suspected) data security incident or a criminal act (e.g. an attack) for the purposes of clarification, prosecution or the exercise of legal claims.
Our website contains in part hyperlinks to and elements from third-party websites. If you follow a hyperlink to one of these websites or activate elements from third-party websites (e.g. Twitter), please note that we cannot assume any responsibility or guarantee for third-party content or data protection conditions.
This cookie is automatically created once someone opens the website and cleared once they close the browser. PHPSESSID is an auto generated session cookie by the server which contains a random long number which is given out by the server itself. In the session cookie, only the above-mentioned data about your use of the website is temporarily stored. These store a so-called “session ID”, which can be used to assign various requests from your browser to a common session. The session cookies used are technically necessary and are deleted when you close your browser. These cookies are not used for “tracking” or to establish a personal reference.
Cookie “complianz_config” (Administrator cookie, will be ignored)
Retention: 12 hours
Determins if the user is logged in.
Retention: 30 minutes
The purpose of the WordFence plugin and of this cookie is the protection of our website from attacks.
Retention: 1 day
WordPress specific cookie, stored only for logged in users (i.e. only users from the FeatureCloud consortium) to remember when someone is logged in.
Captcha Them All
Retention: 15 minutes
These are stored for the contact form to reduce spam emails.
In addition to the cookies absolutely necessary of the functioning of the website, with your consent we set the following cookies:
Retention: 6 months
These are statistical cookies used for anonymous visitor tracking. We may collect non-person-identifying, anonymous information relating to your use of our sites via Matomo technology. This may include: which pages are visited how often; how long visitors stay; the number of returning page visitors; and which country visitors are browsing from, but no personal information at all. This data is collected for the purpose of monitoring and understanding the effectiveness of our websites, and is in fact required by the European Commission during the impact-reportings (about dissemination activities of EU-funded research projects).
Cookie “display twitter feed”
All twitter cookes are only stored once people agree with displaying the twitter feed.
You can choose not to accept cookies by changing your browser settings or deleting existing cookies installed on your computer. Visit the “About Cookies website” for information on how to do this.
Legal basis and purpose for data processing
For this purpose, we have a legitimate interest in processing personal data in accordance with Article 6 paragraph 1 lit f GDPR.
The legal basis for the processing of personal data with regard to all other cookies is your consent in accordance with Article 6 paragraph 1 lit f GDPR.
Duration of storage, objection and removal possibility
The data you publish on Twitter, in particular your handle (user name) and the content accessible under your account, are processed by us to the extent that we retweet or reply to these (“tweets”) or write tweets from us referring to your account.
II.5 Establishing contact:
When contacting us (e.g. via contact form or e-mail), the information provided by the inquirer (name, contact data, other details) will be processed for documentation, processing and answering the enquiry. We offer a contact form on our website. We have marked the mandatory data required to answer an inquiry as mandatory fields. The provision of further data is voluntary.
The basis for this is our legitimate interest in the proper documentation, processing and answering of the enquiry (Article 6 paragraph 1 lit f GDPR).
The personal data provided is stored by us as long as it is necessary for the purpose of proper documentation, processing and answering the enquiry(up to 3 years), except for a longer storage period is required for the purpose of fulfilling a legal obligation or for the exercise or defence of legal claims.
II.6 To whom do we transmit personal data?
We will only transfer your personal data to the extent necessary and only in the following cases:
- with your consent;
- insofar as we are legally obliged to do so;
- to companies that support us in providing our website; these service providers act as processors, who may only process the data in accordance with our instructions (within the framework of an agreement according to Article 28 paragraph 3 GDPR);
- insofar as this is necessary to protect our legitimate interests (e.g. to assert, exercise or defend legal claims) or those of a third party and there is no reason to assume that you have an overriding interest which requires protection of personal data.
III. Rights of the data subject
Provided that the respective legal requirements are met, you can assert the following rights of data subjects:
- Right to information: You can request confirmation as to whether personal data concerning you is being processed and request information about this data and the information in accordance with Article 15 GDPR.
- Right of rectification if we process incorrect or incomplete data about you (Article 16 GDPR).
- Right to have personal data concerning you deleted if the conditions of Article 17 GDPR are met.
- Right to limit the processing of your data (Article 18 GDPR).
- The right to transfer the data you have provided to us, provided that the processing is based on consent (Article 6 paragraph 1 letter a) or on a contract (Article 6 paragraph 1 letter b) to which you are party and that the processing is carried out using automated procedures (Article 20 GDPR).
- In the case of processing operations carried out on the basis of legitimate interests (pursuant to Article 6 paragraph 1 lit f GDPR), you have the right to object to the processing of your personal data pursuant to Article 21 GDPR, provided that there are reasons for doing so arising from your particular situation. In the case of processing for the purpose of direct marketing, this right is unrestricted.
- You can revoke your consent to the processing of personal data at any time, please contact us (see our contact details). Revocation of the consent does not affect the lawfulness of the processing carried out based on the consent until revocation.
- Right of complaint: You have the right to complain to a supervisory authority responsible for you (in Bavaria (Germany): Bavarian State Office for Data Protection Supervision, https://www.lda.bayern.de/) if you believe that the processing of personal data relating to you has violated the GDPR or your rights as a data subject have been infringed. In cases in which you were not completely satisfied with our work, we request that you first contact us so that we can be given an opportunity to rectify any errors.
Status as of 30.09.2020