Data Protection Policy

The following information describes how Die Junge Akademie at the Berlin-Brandenburg Academy of Sciences and Humanities and the German National Academy of Sciences Leopoldina process your personal data.

Name and address of the controller

The controller responsible for processing your personal data in accordance with the provisions of data protection law is:

Die Junge Akademie at the Berlin-Brandenburg Academy of Sciences and Humanities and the German National Academy of Sciences Leopoldina represented by the Managing Director of the office Dr. Alexandra Heidle-Chhatwani Jägerstraße 22/23 10117 Berlin Telephone: +49 (0)30 203 70-650 Telefax: +49 (0)30 203 70-680 Email: office@diejungeakademie.de

Data protection officer

Klaus Hoogestraat Email: datenschutz@leopoldina.org www.leopoldina.org

General provisions about data processing

Die Junge Akademie at the Berlin-Brandenburg Academy of Sciences and Humanities and the German National Academy of Sciences Leopoldina knows how to protect the information and data entrusted to it. Data protection principles such as data economy, transparency and security therefore have the highest priority for us.

We run various automation-supported systems to manage, store and process our members' data and pursue different purposes with these (e.g. sending out a newsletter).

Your personal data will be erased or blocked by us as soon as the purpose of storage and processing no longer applies, provided that a legal obligation cannot be cited for longer storage, or legal claims still exist that can be asserted against us and require storage.

How and what data do we collect?

One way in which we obtain your data is if you give them to us, for instance by using a contact form. Additionally, data are automatically collected when you visit our website. This particularly includes technical data (e.g. internet browser, operating system or time of visiting the page, IP address). The legal basis for processing your IP address and for purposes based on your consent is Art. 6 (1) lit. f) GDPR, and for transmitting an application for membership via our application platform Art. 6 (1) lit. b) GDPR. These data are collected automatically once you enter our website. We generally store your IP address in an anonymised form. Our legitimate interest lies in the improvement, stability, functionality and security of our website. The IP address is only stored completely in order to be able to trace technical errors and hacker attacks as well as for logging consent, e.g. in the newsletter subscription or when registering for events.

What do we use your data for?

Some data are collected to ensure that we provide our website free of errors. Other data may be used to analyse your usage behaviour in an exclusively anonymised form. The legal basis is the existence of legitimate interest pursuant to Art. 6 (1) lit. f ) GDPR.

No disclosure of your personal data

We do not disclose your personal data to third parties unless you have consented to the disclosure of data or we are entitled or obliged to disclose data due to statutory provisions and/or official or court orders. In particular, this may involve disclosure for the purposes of criminal prosecution, the prevention of danger or the enforcement of intellectual property rights.

Cookies

Die Junge Akademie website uses cookies. Cookies are small text files that are stored on your end device (e.g. PC, smartphone or tablet) when you visit our website. This allows the website to remember certain entries and settings (e.g. language, font size) over a certain period of time and you do not need to make them again each time you visit the website. The use of cookies allows us to count visits to our website and see which pages have been viewed. On our website, you have the option of accepting the use of cookies in principle and thus being able to use all functions of the website without restriction. For this purpose, a notice appears the first time the website is accessed. You can prevent your usage behaviour being recorded through cookies. Most browsers accept cookies automatically, but offer the option of rejecting cookies or displaying a warning before storing them. The help function in the menu bar of most web browsers explains how to stop your browser from accepting new cookies, how to set your browser to inform you that you are receiving a new cookie, or even how to disable all received cookies. However, we recommend that you leave the cookie functions fully enabled in order to be able to use all the functions of our online offer. Our cookies do not store sensitive data such as passwords, credit card details or similar. They do not cause any damage to your computer and do not contain viruses.

Which cookies are used?

Die Junge Akademie uses first-party cookies (especially all cookies that are absolutely necessary) and third-party cookies (especially marketing cookies). The cookies used do not contain any personal data and information such as location data and IP address are anonymised immediately after processing and before storage. The following describes the categories of cookies in connection with the website www.diejungeakademie.de that are so-called first-party cookies and are therefore sent and read exclusively by the Die Junge Akademie domain.

Operationally necessary cookies: Die Junge Akademie uses cookies that are operationally necessary for the operation of the www.diejungeakademie.de website. This includes technologies that allow you to access the site, services, applications and features necessary to verify site functionality, prevent fraud and improve security. These cookies are essential in order for you to be to use the services of the website. Without these cookies, the services would not function correctly. The cookies do not contain any personal data or any personal information about you, so that it is not possible for us to identify the person based on the information obtained from the cookies. These cookies are also only stored for as long as is absolutely necessary for this service, i.e. generally until the end of the internet session and until you close your browser completely (session cookies). The following is a list of the operationally necessary cookies:

Session cookies: These save the colour and whether the animation was stopped. This is deleted again when the browser is closed.

Performance cookies: Die Junge Akademie uses analytical cookies to analyse how the website is used and to monitor the website's performance. We use these measurement methods to determine, for instance, which parts of our website are used most frequently or which content was accessed how often on a particular day. This enables us to provide a first-class experience by customising the website and to quickly identify and resolve any issues that arise. When you visit our website, your usage data are included in the statistical surveys without it being possible to draw any conclusions about your identity and you as a person. These cookies therefore do not identify you. In the following, we describe the cookies that are referred to as third-party cookies and are therefore sent and read by domains of other service providers.

Web analytics cookies: Matomo / Piwik This website uses Matomo (formerly: Piwik), an open-source software for the statistical analysis of visitor traffic. Through the anonymisation function "Automatically Anonymize Visitor IPs" offered by Matomo, the IP address is anonymised immediately after processing and before it is stored. This is done by masking the last bytes of the IP address so that no assignment to you or to the internet connection you are using is possible. No cookies are set. The legal basis is Art. 6 (1) lit. f) GDPR. Our legitimate interest lies in the analysis and optimisation of our website.

Newsletter

Our website provides the option of subscribing to free newsletters with which we inform you about the work of Die Junge Akademie, dates and publications. We ask for your email address when you register. The purpose of collecting the user's email address is to deliver the newsletter. No data are transferred to third parties in connection with data processing for sending newsletters. The data are used exclusively for sending the newsletter.

We use the services of Sendinblue (formerly Newsletter2Go) of Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, for sending newsletters. In order to be able to ensure that no mistakes were made when entering the email address, we use the so-called double opt-in procedure: After you have entered your email address in the registration field, we will send you a confirmation link. Your email address will only be added to our distribution list once you click on this confirmation link. You can revoke your consent in accordance with Art. 6 (1) lit. a) GDPR at any time with effect for the future.

To unsubscribe from the newsletter, there is also a corresponding link at the end of the newsletter.

Your email address will be processed until you withdraw your consent.

Contact by email

Description and scope of data processing
Our website contains a form that can be used to order publications, e.g. Die Junge Akademie magazine. If a user chooses this option, the data entered in the input form will be transmitted to us and stored. These data are:

1. Email address
2. Individual message
3. Name, street, postcode and town details
4. Query: "Yes, I would like to subscribe to the German edition of the Junge Akademie magazine free of charge." (Opt-in)

In order to process data in the context of the sending procedure, your consent is obtained and reference is made to this Data Protection Policy. Alternatively, you can contact us using the email address provided. In this case, the user's personal data transmitted with the email will be stored. There is no transfer of data to third parties in this context. The data are used exclusively for the purposes of the conversation.

Legal basis for data processing The legal basis for the processing of the data is Art. 6 (1) lit. a) GDPR if the user has given their consent. The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 (1) lit. f ) GDPR. If the aim of the email contact is the conclusion of a contract, an additional legal basis for the processing is Art. 6 (1) lit. b) GDPR.

Purpose of data processing We process the personal data from the input form solely so we can contact you. In the case of contact by email, this also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process are used to prevent misuse of the contact form and to ensure the security of our information technology systems.

Duration of storage The data are erased as soon as they are no longer required to achieve the purpose for which they were collected. In the case of personal data entered in the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation ends when it is clear from the circumstances that the matter in question has been conclusively resolved.

Any additional personal data collected during the sending process will be erased after a period of seven days at the latest.

Possibility of objection and removal The user is able to revoke their consent to the processing of personal data at any time. In such a case, the conversation cannot be continued.

Registration

Description and scope of data processing On our website, users can, for example, register for events by providing personal data. The data are entered in an input mask and transmitted to us and stored. There is no transfer to third parties. In the case of events that we organise together with or on behalf of a cooperation partner, we will transfer your data to this cooperation partner if this is necessary for planning and implementing the event. The following data are collected as part of the registration process:

1. Name and first name
2. Title
3. Institution
4. Addresse (street, house number, postcode, city, country)
5. Telephone number
6. Email address
7. If applicable, further information necessary for the respective purpose

The user's consent to the processing of this data is obtained as part of the registration process.

Legal basis for data processing
The legal basis for the processing of the data is Art. 6 (1) lit. a) GDPR if the user has given their consent. If the registration serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 (1) lit. b) GDPR.

Purpose of data processing User registration is required to provide certain content and services on our website. Data collected in the course of registration for an event serve the organisational processing of the event in question.

Duration of storage The data are erased as soon as they are no longer required to achieve the purpose for which they were collected. This is the case for the data collected during the registration process when the registration on our website is cancelled or modified. For data collected during the registration process to fulfil a contract or to carry out pre-contractual measures, this is the case when the data are no longer required for the performance of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contractual partner in order to comply with contractual or legal obligations.

Possibility of objection and removal As a user, you have the option of cancelling your registration at any time. You can have the data stored about you changed at any time. If the data are required to fulfil a contract or to carry out pre-contractual measures, early erasure of the data is only possible if no contractual or legal obligations prevent erasure.

Data security

All information that you transmit to us is stored on servers within Germany. Unfortunately, the transfer of information over the internet is not completely secure, which is why we are unable to guarantee the security of the data transferred via the internet to our website. However, we secure our website and other systems by technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons. In particular, your personal data are transmitted encrypted with us. We use the SSL (Secure Socket Layer) coding system for this.

Data protection and third-party websites

The website may contain hyperlinks to and from third-party websites. If you follow a hyperlink to one of these websites, please note that we cannot accept any responsibility or guarantee for third-party content or data protection conditions. Please check the applicable privacy policy before submitting personal data to these websites.

What rights do you have regarding your data?

You are entitled to exercise your rights as a data subject against us at any time. If the respective legal requirements are met, this includes the following rights:

• Right to information pursuant to Art. 15 EU GDPR
• Right to rectification of inaccurate data or to completion pursuant to Art. 16 EU GDPR
• Right to erasure pursuant to Art. 17 EU GDPR
• Right to restriction pursuant to Art. 18 EU GDPR
• Right to data portability pursuant to Art. 20 EU GDPR
• Right to revocation of consent pursuant to Art. 21 EU GDPR
• Right to complain to the supervisory authority (see below for address) pursuant to Art. 13 (2) lit. d) EU GDPR

Information, transferability

You have the right to request information about your personal data processed by us at any time. In particular, you may request information as to the purposes of the processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned duration of storage, the existence of a right of rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if they were not collected by us, and the existence of automated decision making including profiling and, where applicable, meaningful information on the details thereof. If you would like to receive information about the data we have stored about you, or if you would like us to transfer your data, please contact us in writing at office@diejungeakademie.de. Please note that we can only transfer data that is based on consent or a contract.

Correction, erasure, restriction

At your request, we will correct, block or erase the data stored about you, provided that other statutory regulations (e.g. obligations to retain data under the German Commercial Code) do not prevent this or the processing is necessary to exercise the right to freedom of expression and information, for reasons of public interest or to assert, exercise or defend legal claims. Further, you are able to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, if the processing is unlawful but you refuse the erasure of your data and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims, or if you have lodged an objection to the processing pursuant to Art. 21 GDPR. For this purpose, please contact us in writing at office@diejungeakademie.de.

Revocation of consent/objection

If you have given us your consent to process your personal data, you can withdraw this consent at any time by sending us a short, written message. This has the effect that we may no longer continue the data processing that was based on this consent for the future. For this purpose, please contact us in writing at office@diejungeakademie.de.

If your personal data are processed on the basis of a legitimate interest pursuant to Art. 6 (1) lit. f) GDPR, you have the right pursuant to Art. 21 GDPR to object to the processing of your personal data, if there are reasons for this that arise from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection.

You can object to the use of your data for advertising purposes at any time by sending a short, written message to office@diejungeakademie.de or revoke your consent without incurring any costs other than the transmission costs according to the basic rates.

To unsubscribe from the newsletter, there is a corresponding link at the end of the newsletter.

Right to lodge a complaint with the supervisory authority If you wish to contact the competent supervisory authority directly, you can find the contact details here:

State Commissioner for Data Protection Saxony-Anhalt Dr Harald von Bose Office and visitor address: Leiterstraße 9, 39104 Magdeburg
Postal address: P.O. Box 1947, 39009 Magdeburg
Email address: poststelle@lfd.sachsen-anhalt.de Telephone: +49 (0)391 81803-0 freecal: 0800 9153190 (DTAG landline) Fax: +49 (0)391 81803-33

Right to data portability

Art. 20 GDPR establishes a new right to data portability, which is closely related to the right of access, but nevertheless differs from it in many respects. Accordingly, data subjects are entitled to receive the personal data concerning them which they have provided to a controller in a structured, commonly used and machine-readable format and to transmit this data to another controller. The aim of this new right is to empower the data subject and give them more control over the personal data concerning them.

Amendments to this data protection policy

We reserve the right to change this data protection policy at any time with effect for the future in accordance with the GDPR. An up-to-date version is available on the website. Please visit the website regularly and inform yourself about the applicable data protection regulations.