DSSC logo 4c PNG

Privacy Policy

Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection provisions is:

Fraunhofer-Gesellschaft zur Förderung der angewandten Forschung e.V., Hansastraße 27c, 80686 Munich, Germany

for services provided by their

Fraunhofer Institute for Software and Systems Engineering ISST

Speicherstraße 6, 44147 Dortmund, Germany

a legally non-independent institution

Website: www.fraunhofer.de E-mail: info(at)zv.fraunhofer.de

2. General Information on Data Processing

This website is currently operated as an interim site with limited functionality. No cookies are set. This privacy policy will be updated as the website is further developed, in particular once additional features are introduced. Only the following types of personal data processing take place:

  • automatic collection of technical access data (server log files, see 3.) when the site is accessed,

  • processing of contact details and information you supply to us, provided you actively contact us by e-mail.

3. Server Log Files

When you access this website, our hosting provider automatically collects information that your browser transmits. This includes, among other comparable technical information, especially the following:

  • IP address

  • date and time of the request

  • page accessed/referrer URL

  • browser type and version, operating system used

This data is processed exclusively to ensure the secure and stable operation of the website and is not combined with other data sources. The Data we receive will, in general, be stored for up to 3 years, due to common statute of limitation, §§ 195, 199 BGB, but might be stored longer in case you requested certain aspects that lead to a legal basis for a longer processing. Legal basis for the processing is Art. 6(1)(1)(f) GDPR (legitimate interest to supply the website to you and ensure technical security and stability of our online services).

Our hosting provider is dogado GmbH, Antwerpener Str. 6, 50672 Cologne, Germany. We have concluded a data processing agreement with dogado GmbH pursuant to Art. 28 GDPR to ensure data protection obligations according to our standards.

4. Contact and Support Requests

This website provides a contact and support function via an integrated ticketing system (Jira Service Management, provided by Atlassian, Inc., 350 Bush Street, Floor 13, San Francisco, CA 94104, USA, and/or Atlassian Network Services, Inc.). When you submit a support request, the following personal data are processed: your name, e-mail address, the content of your message, and technical metadata automatically generated by the system (e.g. timestamp, browser type, IP address at time of submission).

Your data are processed solely for the purpose of handling your enquiry depending on your requests, and, where necessary, are shared with consortium partners of the DSSC project involved in processing your request.

Atlassian participates in the EU-US Data Privacy Framework; processing may, however, involve servers located outside the European Economic Area. Appropriate safeguards are in place in accordance with Art. 46 GDPR.

The Data we receive from your will, in general, be stored for up to 3 years, due to common statute of limitation, §§ 195, 199 BGB. Depending on your request, the Data might be stored longer for the duration of the project and deleted after the end of the project period in April 2029, unless a longer retention period is required by applicable law or by obligations arising from the project's grant agreement (e.g. for audit purposes under the Digital Europe Programme).

Legal basis: Art. 6(1)(1)(f) GDPR (legitimate interest in responding to enquiries and maintaining a structured support process) or Art. 6(1)(1)(b) GDPR where your enquiry concerns pre-contractual measures.

5. Newsletter

We offer a newsletter with which we inform you about the DSSC project, its activities, events and results. Subscription is voluntary and takes place via the registration form on our website.

To send you the newsletter, we process your e-mail address and, if you supply them to us, your name, as well as possible information resulting from the email address. We use your name to address you personally in the newsletter (e.g. in the salutation). Any further details are provided on a voluntary basis and are used only to personalise the newsletter further.

We use the double opt-in procedure. After you enter your e-mail address, we send you a confirmation e-mail asking you to confirm your subscription by clicking the link it contains. This ensures that no one can subscribe using another person’s e-mail address. To be able to demonstrate that consent was validly given, we log the date, time and IP address of both your registration and your confirmation. Subsequent changes to the data stored with our newsletter service provider are also logged.

The processing is based on your consent pursuant to Art. 6(1)(1)(a) GDPR. We store your data for the purpose of sending the newsletter for as long as you remain subscribed, i.e. until you withdraw your consent. You may withdraw your consent at any time with effect for the future, without affecting the lawfulness of processing carried out before the withdrawal. To unsubscribe, the easiest way is to use the unsubscribe link included in every newsletter or contact us using the details in Section 1. After withdrawal, your e-mail address is removed from the distribution list. We may retain the consent logs (registration and confirmation records) for as long as necessary to demonstrate previously given consent and to defend against legal claims, on the basis of Art. 6(1)(1)(f) GDPR.

Our newsletter is sent using Zoho Campaigns, a service of Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, the Netherlands (“Zoho”). Zoho processes the above data exclusively on our behalf as a processor within the meaning of Art. 28 GDPR, on the basis of a data processing agreement concluded with Zoho. Our account is hosted in Zoho’s European data centres (Amsterdam/Dublin). Zoho’s privacy policy is available at www.zoho.com/privacy.html.

Our newsletters contain a tracking pixel (web beacon) and links with tracking parameters. This enables us to determine whether and when a newsletter was opened and which links were clicked, so that we can measure the reach and effectiveness of our newsletters and tailor future content to the interests of our subscribers. This analysis is covered by the consent you give when subscribing; you can object to it at any time by unsubscribing from the newsletter.

6. Links to Social Media Platforms

This website contains links to our LinkedIn and YouTube profiles (so-called social media platforms).

These are plain hyperlinks (text links/icons); no social plug-ins, like buttons, embedded content or comparable components of these providers are integrated. Simply visiting our website therefore does not trigger any automatic transfer of data to LinkedIn or YouTube/Google. Only if you actively click a link will you leave our website, at which point the respective provider's data protection terms apply, as well as the description of our processing.

Which information the social media platform receives and how it is used is described by the providers in their data protection declarations. There you will also find information on contact options as well as on the settings options for advertisements. Name and contact details of the social media providers:

LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland — privacy notice: linkedin.com/legal/privacy-policy

Google Ireland Limited (YouTube), c/o Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland — privacy notice: policies.google.com/privacy

We use the technical platform and services of the providers for these information services. We would like to point out that you use our appearances on social media platforms and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. Comment, Share, Rate).

When you visit our social media presences, the providers of the social media platforms collect, among other things, your IP address and other information that is available in form of cookies on your terminal device. This information is used to provide us as the operator of the accounts with statistical information about the interaction with us.

The data collected about you in this context will be processed by the social media platforms and may be transferred to countries outside the European Union, in particular the USA. Your data may be transferred to the USA, where the social media platforms have stated that it complies with the EU-US Data Privacy Framework.

We do not know how the social media platforms use the data from your visit to our account and interaction with our posts for their own purposes, how long this data will be stored and whether data is passed on to third parties. The data processing by the social network may differ depending on whether you are registered and logged in to the social network or are visiting the site as a non-registered and/or non-logged-in user. When accessing a post or the account, the IP address assigned to your terminal device and other information are processed by the provider of the social media platform. If you are currently logged in as a user, a cookie on your end device can be used to track your activity on the network. If you wish to avoid this, you should log out, delete the cookies present on your device and restart your browser. You can find more information in the privacy statements of the providers, which are linked above.

We, as the provider of the information service, furthermore only process the data from your use of our service that you provide to us and that requires interaction. For example, if you ask a question that we can only answer by email, we will store your information in accordance with the general principles of our data processing, which we describe in this privacy policy. The legal basis for the processing of your data on the social media platform is Article6 (1)(1)(f)GDPR.

To exercise your data subject rights, you can contact either us or the provider of the social media platform. To the extent that one party is not responsible for responding or needs to obtain the information from the other party, we or the provider will then forward your request to the respective partner. Please contact the operator of the social media platform directly for questions about profiling or processing of your data when using the website. For questions about the processing of your interaction with us on our site, you can reach us at the contact details above.

7. Your Rights as a Data Subject

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection (Art. 21 GDPR) regarding the processing of your personal data. Please contact us using the address given above.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.