Privacy policy

1. data protection - simple and compact:

1.1 Who is responsible for data processing?
1.2 Is there a data protection officer I can contact?
1.3 Who is the responsible supervisory authority?
1.4 What rights do I have with regard to the processing of my data?
1.5 What data is actually involved?

2. data protection - not quite as simple and longer, but quite precise

2.1 Information about the collection of personal data
2.1.1. contacting us
2.2 Collection of personal data by and for us when visiting our website
2.2.1 Basically processed data
2.2.1.1. cookies
2.2.1.2. use of cookies
2.3. matomo
2.4. Google Web Fonts
2.5. social media content
2.6. youtube

3. Privacy policy for social media profiles

3.1 Operator of the social media profiles (responsible processor)
3.2 Legal basis for data processing
3.3 Purposes of the data processing
3.4 Facebook
3.5 Instagram
3.6 Twitter
3.7 YouTube

Data protection is about protecting you from the misuse of your data.

When you visit a website, data flows that the owner of the website knows exactly belongs to you. This data is called personal data. This is always the case, so it is also the case with us. What exactly happens, we want to (and have to) explain to you. Since this can be quite a long text, even with only a few data, here are the most important points in brief:

1.1 Who is responsible for data processing?

We are:

Herder Institute for Historical Research on East Central Europe - Institute of the Leibniz Association, Gisonenweg 5-7, 35037 Marburg. You can find the complete data in the imprint.

1.2 Is there a data protection officer I can contact?

Yes, there is. His name is Henning Welz and you can reach him at welz@gdsm.de or at our postal address with the addition "the data protection officer".

1.3 Who is the responsible supervisory authority?

This is the "Hessian Commissioner for Data Protection and Freedom of Information", Gustav-Stresemann-Ring 1, 65389 Wiesbaden.

1.4 What rights do I have with regard to the processing of my data?

You have the following rights:

Right to information.
Right to rectification.
Right to deletion.
Right to restriction of processing.
Right to object.
Right to data portability.
Right to lodge a complaint with a supervisory authority.

If you have any questions about exercising these rights, please feel free to contact our data protection officer.

1.5 What data are we actually talking about?

First of all, there is the technical data that is always collected when you visit a website: IP address, date and time, type of request, amount of data transferred, browser type, operating system, language, requesting website. As I said, this is always the case.

In addition, we also use small pieces of information that we store on your computer to make it easier for you to use the site. They are called cookies. This is not usually so and it has to be so that you can use our website comfortably. However, you can also disable it (by setting it in your browser). But then the site will not work as well.

If you enter data on our website, for example to create an account, subscribe to a newsletter or contact us, we use the data exclusively for the respective purpose.

For all these operations (we call it "processing"), we do not need consent. If we intend to do something else with the data, then we will ask you for consent.

We then ask for such consent at the very beginning, right after you call up the page in a so-called consent tool. In this tool, you can also find out exactly which data we need for which purpose, by which technology they are collected and how long we store them. By changing the settings in this consent tool, you can revoke consent once given at any time.

In general, we store all data for as long as we need it for the respective purpose and only longer if we are legally required to do so. If an exact time period can be specified, you will find it in the following text.

Basically, you now understand what this is all about. For more detailed and comprehensive information, please read on:

2. data protection - not quite as simple and longer, but quite precise

2.1 Information about the collection of personal data

2.1.1 Contacting us

When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations.

2.2 Collection of personal data by and for us when visiting our website

2.2.1 Data processed in principle

In the case of purely informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security on the basis of 6 para. 1 p. 1 lit. f DSGVO):

IP address
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Amount of data transferred in each case
Website from which the request comes
Browser
Operating system and its interface
language and version of the browser software.

2.2.1.1 Cookies

In addition to the previously mentioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which the body that sets the cookie (in this case by us) receives certain information. Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet offer as a whole more user-friendly and effective. The use of these cookies is also based on Art. 6 para. 1 p. 1 lit. f DSGVO.

2.2.1.2 Use of cookies

This website uses the following types of cookies, the scope and functionality of which are explained below:

Transient cookies
Persistent cookies

Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser.

Persistent cookies are deleted automatically after a specified duration, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that in this case you may not be able to use all functions of this website.

We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit.

2.3 Matomo

We use the web analysis service Matomo to analyze and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. The legal basis for the use is Art. 6 para. 1S. 1 lit. f DS-GVO.

Cookies are stored on your computer for this evaluation. We store the information collected in this way exclusively on our own servers in Germany. You can influence the evaluation by deleting existing cookies and preventing the storage of cookies. If you prevent the storage of cookies, we point out that you may not be able to use this website in full. Preventing the storage of cookies is possible through the setting in your browser.

This website uses Matomo with the extension "AnonymizeIP". This means that IP addresses are processed in abbreviated form, which means that they cannot be directly linked to a specific person. The IP address transmitted by your browser via Matomo will not be merged with other data collected by us.

2.4 Google Web Fonts

On this website we use the offer of Google Web Fonts. This ensures that the page is displayed correctly even if you do not have the fonts used installed on your computer. This represents a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO.

By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. In addition, the data mentioned under point 2.2.1. of this declaration are transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider's privacy policy.

2.5 Social media content

If you have given us your consent in the Consent Tool displayed when you start the website, we will use the social media services you have enabled to display content from the corresponding social media on our website. In this course, personal data will then also be passed on to these social media providers.

Yes after your consent in the Consent Tool, we also use plug-ins from social media providers that allow you to quickly switch to them. In doing so, we use the so-called two-click solution. This means that just because you have visited our site, no personal data is passed on to the providers of the plug-ins. This only happens after you have activated the plug-in by clicking on it. In this case, the data mentioned under point 2.2.1. of this declaration will be transmitted.

Please inform yourself about the exact circumstances of the processing of your personal data in the data protection statements of the providers. The legal basis for the integration of social media and the associated data processing is your consent (Art. 6 para. 1 lit. a DSGVO).

2.6 YouTube

We have integrated YouTube videos into our online offer, which are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in "extended data protection mode". This means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned in point 2.2.1. will be transmitted. We have no influence on this data transmission.

By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

For more information on the purpose and scope of data collection and its processing by YouTube, please refer to YouTube's privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy.

3. Privacy policy for social media profiles

3.1 Operator of the social media profiles (responsible processor)

Herder Institute for Historical Research on East Central Europe – Institute of the Leibniz Association
Gisonenweg 5-7
35037 Marburg
Tel. +49 6421 184-0
E-mail: mail@herder-institut.de

3.2 Legal basis for data processing

The legal basis for the processing of data after interaction with the content of the social media profiles of the responsible processor by the users* is Art. 6 (1) lit. F DSGVO, as well as Art. 6 (1) lit. A DSGVO if the users* have given their consent.

3.3 Purposes of data processing

The operation of the social media profiles of the responsible processor is necessary for targeted and balanced public relations work and personnel recruitment. The associated processing of your data when visiting the site is done for this purpose.
This is data processing in the public interest within the meaning of Article 6 (1) f DSGVO.
Statistical studies show that the use of media and the information behavior of users is changing. More and more population groups are informing themselves less and less on "classic" information channels. Rather, media that operate exclusively or at least partially on the Internet, above all social media platforms, are used for information. One of the goals of the responsible processor's public relations work is to reach and inform as many population groups as possible.
The responsible processor uses social media platforms in addition to other essential media channels. In this way, users have the opportunity to inform themselves about the work of the responsible processor and to make contact via different channels, but always in the same quality.

3.4 Facebook

3.4.1 Information about the fan page

For the information service offered here, the Responsible Processor uses the technical platform and services of FacebookIreland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland.
The responsible processor points out that you use this Facebook page and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating).

3.4.2 Processing of personal data by Facebook

When you visit this Facebook page, Facebook collects, among other things, your IP address and other information that is present on your PC in the form of cookies. This information is used to provide the responsible processor, as the operator of the Facebook pages, with anonymized statistical information about the use of the Facebook page. Facebook provides more detailed information on this at the following link: https://de-de.facebook.com/help/pages/insights.
The data collected about you in this context is processed by Facebook Ltd. and may be transferred to countries outside the European Union in the process. Facebook describes what information it receives and how it is used in its data usage guidelines. There you will also find information on how to contact Facebook and on the settings options for advertisements. The data usage guidelines are available at the following link: https://de-de.facebook.com/about/privacy. Facebook's full data policies can be found here: https://de-de.facebook.com/full_data_use_policy.
When you access a Facebook page, the IP address assigned to your terminal device is transmitted to Facebook. According to Facebook, this IP address is anonymized. Facebook also stores information about the end devices of its users (e.g. as part of the "login notification" function); this may enable Facebook to assign IP addresses to individual users.
If you are currently logged in to Facebook as a user, a cookie with your Facebook ID is stored on your end device. This enables Facebook to track that you have visited this page and how you have used it. This also applies to all other Facebook pages. Via Facebook buttons embedded in websites, it is possible for Facebook to record your visits to these websites and assign them to your Facebook profile. Based on this data, content or advertising can be offered tailored to you.
If you want to avoid this, you should log out of Facebook or deactivate the "stay logged in" function, delete the cookies present on your device and close and restart your browser. In this way, Facebook information through which you can be directly identified will be deleted. This will allow you to use the Facebook fan page without revealing your Facebook identifier. When you access interactive features of the page (Like, Comment, Share, Message, etc.), a Facebook login screen will appear. After any login, you will again be recognizable to Facebook as a user*. Information on how to manage or delete information about you can be found on the following Facebook support pages: https://de-de.facebook.com/about/privacy.
According to its own information, Facebook stores data until it is no longer needed to provide the services and Facebook products or until the respective user*s account is deleted, whichever comes first. This depends on the circumstances of the individual case, in particular the type of data, why it is collected and processed, and relevant legal or operational storage needs. For more information on data storage, please visit: https://de-de.facebook.com/about/privacy

3.4.3 Facebook Page Insights

Facebook processes a number of personal data of page visitors* in its so-called "Page Insights" for its own purposes. This processing takes place regardless of whether page visitors are logged into Facebook or not and whether page visitors are members of the Facebook network. Users who access the Facebook pages without being registered or logged in to Facebook also have the option of influencing the scope of data processing by means of a cookie banner set by Facebook. You can find more information about Facebook's cookies at: https://www.facebook.com/policies/cookies/.
Page insights are aggregate statistics created based on certain "events" logged by Facebook servers when people interact with pages and the content associated with them. Page operators themselves do not have access to the personal data processed as part of "events," only the aggregated, anonymized page insights. More detailed information can be found at: https://www.facebook.com/legal/terms/page_controller_addendum

3.4.4 Rights of the data subject

The Facebook fan page offers you the opportunity to respond to our posts, comment on them and send us private messages. Please carefully consider what personal data you share with us via our Facebook fan page. If you would like to avoid Facebook processing personal data you have transmitted to us, please contact us by other means. You can find options for this in the privacy policy or the imprint.
If personal data of users* are processed, they have the right to information, correction, objection, transferability and deletion of the data in accordance with the EU General Data Protection Regulation. Facebook Ireland has committed under the Page Insights Supplement to respond to requests from data subjects in accordance with Facebook's obligations under the Page Insights Supplement (available at https://www.facebook.com/legal/terms/page_controller_addendum). Facebook provides further information on data subject rights here: https://www.facebook.com/help/2069235856423257.
Inquiries from users regarding data processing when visiting a Facebook fan page are forwarded by us to Facebook in accordance with the Insights Page Supplement. Users can find out more about their data protection rights at the following link: https://de-de.facebook.com/about/privacy

3.5 Instagram

3.5.1 Instagram page details

Instagram is an online photo and video sharing service belonging to the Meta group, formerly Facebook. The responsible processor uses the technical platform and services of Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland for the information service offered here.
The responsible processor points out that you use the Instagram page and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, rating).

3.5.2 Processing of personal data by Instagram

When you visit this Instagram page, Instagram collects, among other things, your IP address and other information that is present on your PC in the form of cookies. This information is used to provide the responsible processor, as the operator of the Instagram pages, with anonymized statistical information about the use of the Instagram page.
The data collected about you in this context is processed by Facebook Ltd. and may be transferred to countries outside the European Union in the process. Facebook describes which information it receives and how it is used in its data usage guidelines. There you will also find information on how to contact Facebook and on the settings options for advertisements. The data usage guidelines are available at the following link: https://help.instagram.com/519522125107875. The complete data guidelines of the Instagram service can be found here: https://help.instagram.com/581066165581870/?helpref=hc_fnav.
Facebook provides information on the use of cookies as part of the cookie policy for the Instagram service: https://help.instagram.com/1896641480634370/?helpref=hc_fnav. We would like to point out that Facebook Ireland is able, by means of the cookies used, to track your user behavior (across devices for logged-in users) on other websites beyond the Instagram service. This applies both to those registered with the Instagram service and to those not registered there.
According to its own information, Facebook stores data until it is no longer needed to provide the services and Facebook products or until the user's account is deleted, whichever comes first. This depends on the circumstances of the individual case, in particular the type of data, why it is collected and processed, and relevant legal or operational storage needs. For more information on data storage, please visit: https://de-de.facebook.com/about/privacy

3.5.3 Instagram Page Insights

Instagram processes a number of personal data of page visitors* in its so-called page insights for its own purposes. The processing takes place regardless of whether page visitors are logged into Facebook or Instagram or not and whether page visitors are members of the Facebook or Instagram network. Users who access the Instagram pages without being registered or logged in to Instagram also have the option of influencing the scope of data processing by means of a cookie banner set by Facebook. You can find more information about Facebook's cookies at: https://www.facebook.com/policies/cookies/.
Page Insights are aggregated, anonymized statistics. Page operators themselves do not have access to the personal data processed in this context, but only to the summarized, anonymized page insights. More detailed information can be found at: https://www.facebook.com/help/instagram/788388387972460

3.5.4 Rights of the data subject

The Instagram page offers you the opportunity to respond to our posts, comment on them and send us private messages. Please carefully consider what personal data you share with us through our Instagram page. If you would like to avoid Facebook processing personal data you have submitted to us, please contact us by other means. You can find options for this in the privacy policy or the imprint.
If personal data of users* are processed, they have the right to information, correction, objection, transferability and deletion of the data in accordance with the EU General Data Protection Regulation. Facebook Ireland is obliged to respond to requests from data subjects. Facebook provides further information on data subject rights here: https://www.facebook.com/help/2069235856423257.
Inquiries from users* regarding data processing when visiting an Instagram page, which is the sole responsibility of Facebook Ireland, will be forwarded by us to Facebook Ireland. Users can contact Facebook's data protection officer themselves at the following link: https://www.facebook.com/help/contact/540977946302970.
Furthermore, Facebook provides information on privacy-friendly profile settings for Instagram profiles: https://help.instagram.com/811572406418223/?helpref=hc_fnav

3.6 Twitter

3.6.1 Information on the Twitter profile of the responsible processor

The responsible processor uses the technical platform and services of TwitterInc.,1355 Market Street, Suite 900, San Francisco, CA 94103, USA for the short message service offered here.
The responsible processor points out that you use the Twitter short message service offered here and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. retweeting, liking).

3.6.2 Processing of personal data by Twitter

The data collected about you when using the service is processed by Twitter Inc. and may be transferred to countries outside the European Union. This includes, among other things, your IP address, the application you use, information about the terminal device you use (including device ID and application ID), information of accessed websites, your location and your mobile phone provider. This data is assigned to the data of your Twitter account or your Twitter profile.
We have no influence on the type and scope of the data processed by Twitter, the way it is processed and used, or the transfer of this data to third parties. Information on what data is processed by Twitter and for what purposes can be found in Twitter's privacy policy: https://twitter.com/privacy; and on the possibility of viewing your own data on Twitter: https://help.twitter.com/de/managing-your-account/accessing-your-twitte….
Furthermore, you have the option of requesting information via the Twitter data protection form or the archive requirements:
https://support.twitter.com/forms/privacy;
https://help.twitter.com/de/managing-your-account/how-to-download-your-…

3.6.3 Privacy Settings on Twitter

The Twitter profiles of the responsible processor offer you the possibility to react to our posts, comment on them, etc. Please carefully check which personal data you share with us via our Twitter profiles. If you would like to avoid Twitter processing personal data you have provided to us, please contact us by other means. You can find options for this in the privacy policy or the imprint.
You have options to restrict the processing of your data in the general settings of your Twitter account and under the item "Privacy and security". In addition, you can restrict Twitter's access to contact and calendar data, photos, location data, etc. on mobile devices (smartphones, tablet computers) in the settings options there. However, this depends on the operating system used. Further information on these points is available on the following Twitter support pages: https://support.twitter.com/articles/105576#.
Via Twitter buttons or widgets embedded in websites and the use of cookies, it is possible for Twitter to record your visits to these websites and assign them to your Twitter profile. Based on this data, content or advertising can be tailored to you and offered. Information on this and on the available setting options can be found on the following Twitter support pages:
https://help.twitter.com/de/using-twitter/tailored-suggestions;
https://help.twitter.com/de/rules-and-policies/twitter-cookies

3.7 YouTube

3.7.1 Information on the YouTube profile of the responsible processor

The responsible processor uses the video portal "YouTube" of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: "Google") for its video content.

3.7.2 Processing of personal data by Google

Google processes your personal data. You can find more information about this here: https://policies.google.com/privacy?hl=de#infocollect.
In some cases, information is transmitted to the parent company Google Inc. based in the USA, to other Google companies and to external partners of Google, each of which may be located outside the European Union. Google uses standard contractual clauses approved by the European Commission for this purpose and the adequacy decisions issued by the European Commission regarding certain countries. More information on data transfer can be found here: https://policies.google.com/privacy?hl=de#infosharing.

3.7.3 Privacy Settings

The Controller uses the "enhanced privacy mode " option provided by Google. When you call up a page that has an embedded video, a connection is established to Google servers and, in the process, the content is displayed on the website by notifying your browser.
According to Google's information, in "extended data protection mode" your data - in particular which of our Internet pages you have visited as well as device-specific information including the IP address - is only transmitted to the YouTube server in the USA when you watch the video.
If you are logged in to Google or YouTube at the same time, this information will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website. You can find more information about the data protection settings on YouTube here: https://policies.google.com/privacy?hl=de#infochoices

3.8 Further processing of personal data

The responsible processor as provider of the information service does not collect and process any further data from your use of our social media offers.

3.9 Further data protection information and contact

If you have any questions about our information service, you can contact the responsible processor using the contact details provided above. The contact details of the data protection officer can be found at the top of this page.

News from the Copernico portal

Table of contents

2. data protection - not quite as simple and longer, but quite precise

3. Privacy policy for social media profiles