DATA PROTECTION

PRIVACY POLICY

This is the privacy policy for this website, which is operated and provided by MediaTech Hub Potsdam Management GmbH i.G., contact@mediatechhub-potsdam.de (hereinafter referred to as ‘MTHP’, ‘we’, ‘us’ and ‘our’) at www.mediatechhub-potsdam.de. MTHP is the controller as defined in Article 4(7) of the EU General Data Protection Regulation (‘GDPR’).

We only process the personal data collected via this website as set out in this privacy policy. Below you will find information on how we process your personal data, the purposes of this processing, who the data will be shared with, and the monitoring and information rights available to you.

I. Definitions

  • Personal data means any information relating to a living person who can be directly or indirectly identified, in particular by assignment to an identifier, such as a name, an identification number, location data or an online identifier.
  • Processing means any operation performed on personal data such as collection, recording, organisation, structuring, storage, adaptation or alteration, disclosure or any other type of use.

II. Use of the website for informational purposes

If you use our website for informational purposes without logging in to the website or providing us with personal data in any other way, we may automatically collect supplementary information about you that will only contain personal data in limited cases and which is automatically collected by our server, such as:

  • The user’s IP address (anonymised, only the first 3 bytes)
  • The name of the website and/or file accessed
  • Date and time of access
  • The volume of data transmitted
  • A notification of successful access
  • Browser type and version
  • The user’s operating system
  • The user’s end device, including the MAC address
  • The referrer URL (previously visited site)

We only use this information to provide our services to you more effectively (e.g. by adjusting our website based on the requirements of your end device or allowing you to log in to our website), and we use comprehensive demographic data to create anonymised statistics regarding the usage of our website.

The data is not combined with other personal data that was actively entered into our website. The server log files with the above-mentioned data are automatically deleted after seven days. We reserve the right to store the server log files for longer if there is evidence to suggest unauthorised access (such as a hacking attempt or so-called DoS attack).

We require the automatically collected personal data for the provision of our website, Article 6(1)(1)(b) of the GDPR, as well as for our legitimate interest in ensuring that the website is stable and secure, Section 6(1)(1)(f) of the GDPR.

V. Newsletter

You can enter your e-mail address to subscribe to our newsletter. Should you agree to receive our newsletter, you will be sent the latest news from the network and information about our events. The legal basis for this processing is Article 6(1)(1)(a) of the GDPR. We will save your e-mail address for as long as you are subscribed to our newsletter.

To subscribe to the newsletter, you must go through a double opt-in process. As part of this process, you will receive an e-mail with a link to confirm that you are the owner of the e-mail

address and would like to receive our e-mail newsletter service. If you do not confirm your subscription within 96 hours of requesting the confirmation e-mail, your personal data will not be processed and will instead be automatically deleted.

VII. Analytics

1. Google Analytics

We use Google Analytics, a web analytics service from Google Inc. (‘Google’), for our statistical analyses. Google Analytics collects data on the usage of our website.

The tool collects information such as the IP address used to visit the website, the content accessed, etc. We only use the information provided to us by Google to determine which information is the most useful for you and to improve and optimise this website. The information collected with the help of Google Analytics is not linked to personal data.

The data generated regarding your use of this website is transmitted to Google and stored there on servers in the US. Google Analytics only collects the IP address that is assigned to you when you visit this website, but does not collect your name or any other identifiers. The provider uses this information to evaluate your use of the website, create reports about the

use of the website, and offer us other services pertaining to the use of the website and the Internet.

We have activated IP anonymisation for Google Analytics. Your IP address is thus first truncated in a member state of the European Union or other contracting states of the Agreement on the European Economic Area. The full IP address will only be transmitted to a Google server in the US and truncated there in exceptional cases. The IP address transmitted from your browser as part of Google Analytics is not combined with any other data in Google’s possession.

This processing is based on our legitimate interest in evaluating the data traffic on our website to improve your user experience and to generally optimise the website. The legal basis for this processing is Article 6(1)(1)(f) of the GDPR.

You can find more information on the terms of service and privacy policy of third-party provider Google Dublin, Google Ireland Ltd.; Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001, by clicking the following links: Terms of Service: https://www.google.com/analytics/terms/, Privacy Overview: https://support.google.com/analytics/answer/6004245, and the Privacy Policy: https://policies.google.com/privacy.

2. DoubleClick

Furthermore, we also use the online marketing tool DoubleClick by Google. DoubleClick uses cookies in order to display ads that are relevant for the user, to improve reports on campaign reach, or to ensure that users do not see the same ads multiple times. Google uses a cookie ID to record which ads are displayed in which browser, which allows it to prevent ads from being shown more than once. Furthermore, DoubleClick can use cookie IDs to record conversions related to ad requests, for example, when a user sees a DoubleClick ad and then uses the same browser later to visit the advertiser’s website and purchase something. According to Google, DoubleClick cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data that Google collects through the use of this tool, and we therefore inform you according to our level of knowledge: Through the integration of DoubleClick, Google is informed that you accessed the corresponding part of our website or clicked on one of our ads. If you are

registered with a Google service, Google can link your visit to your account. Even if you are not registered with Google or are not logged in, there is a possibility that the provider will detect and store your IP address.

You can prevent participation in this tracking process in a number of ways: a) by changing the appropriate settings in your browser software; in particular, suppressing third-party cookies will ensure that you do not receive any ads from third-party providers; b) by deactivating cookies for conversion tracking – this is done by configuring your browser to block cookies from the domain ‘www.googleadservices.com’, https://www.google.de/settings/ads, whereby these settings will be deleted when you delete your cookies; c) by deactivating the interest-based ads from providers that take part in the ‘About Ads’ self-regulation campaign using the link http://www.aboutads.info/choices, whereby these settings will be deleted when you delete your cookies; d) through permanent deactivation in your Firefox, Internet Explorer or Google Chrome browser using the link http://www.google.com/settings/ads/plugin. However, you are made aware that you might not be able to use all the functions of the website to their full extent if you do so.

The legal basis for the processing of your personal data is Article 6(1)(f) of the GDPR. You can find more information on DoubleClick by Google at https://www.doubleclickbygoogle.com and http://support.google.com/adsense/answer/2839090, and on the Google privacy policy in general at https://policies.google.com/privacy.

Alternatively, you can visit the Network Advertising Initiative website (NAI) at http://www.networkadvertising.org. Google is compliant with the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

VIII. Third-party content

1. Google Maps

We use services from Google Maps to show you, for example, where our events are taking place. When this service is used, your browser communicates directly with Google. We have no influence on the data processing carried out by Google. You can find more information on Google’s privacy policy at https://policies.google.com/privacy.

When you visit the website, Google is notified that you have accessed the relevant sub-site on our website. In addition, the data listed under item II. of this privacy policy is transmitted. This takes place regardless of whether Google provides a user account via which you are logged in or whether no such user account exists. If you are logged into a Google account, your data will be linked directly to your account. If you do not wish for it to be directly linked to your Google profile, you must log out before activating the button. Google saves your data as a user profile and uses it for the purpose of advertising, market research and/or tailoring its website to requirements. This analysis takes place in particular (even for users who are not logged in) for the purpose of providing interest-based advertising and informing other users of social networks about your activities on our website. You have the right to object to the creation of such user profiles by contacting Google directly.

The legal basis for this processing is Article 6(1)(1)(f) of the GDPR. Our use of Google Maps is based on our legitimate interest to improve your user experience on our website and optimise our services.

Further information about the purpose and scope of data collection and processing by the plugin provider can be found in the provider’s privacy policy. There, you will also find further information about your rights in this regard as well as configuration options for protecting your privacy: https://policies.google.com/privacy?hl=en&gl=en. Google also processes your personal data in the US and is compliant with the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

2. YouTube

We have embedded YouTube videos on our website that are saved at http://www.youtube.com and can be played directly on our website. These videos are all embedded in ‘enhanced data protection mode’, which means that no data about you as the user is transferred to YouTube if you do not play the video. The data specified below is only transferred when you play the videos. We have no control over this data transfer.

When you visit the website, YouTube (YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA) receives the information that you have accessed the corresponding sub-site on our website. In addition, the data listed under item II. of this privacy policy is transmitted. This takes place regardless of whether YouTube provides a user account via which you are logged in or whether no such user account exists. If you are logged into a Google account, your data will be linked directly to your account. If you do not wish for it to be directly linked

to your YouTube profile, you must log out before activating the button. YouTube saves your data as a user profile and uses it for the purpose of advertising, market research and/or tailoring its website to requirements. This analysis takes place in particular (even for users who are not logged in) for the purpose of providing interest-based advertising and informing other users of social networks about your activities on our website. You have the right to object to the creation of such user profiles by contacting YouTube directly.

The legal basis for this processing is Article 6(1)(1)(f) of the GDPR. Our embedding of YouTube videos is based on our legitimate interest to improve the user experience on our website and optimise our services.

Further information about the purpose and scope of data collection and processing by YouTube can be found in YouTube’s privacy policy. There, you will also find further information about your rights as well as configuration options for protecting your privacy: https://www.google.de/intl/en/policies/privacy. YouTube is a service of Google Inc. and thus is also compliant with the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

3. Links to third-party websites

The website may contain links to third-party websites. We are not responsible for the content and data processing on these respective third-party website. You can find information on data processing on the corresponding websites in the privacy policies of the websites in question.

IX. Transfer of personal data to third parties

Your personal data may be disclosed to the following contractors that assist us in the provision of our services [HQ Labs, headquartered in Hamburg, Germany; Mailjet, headquartered in (to be added); Potsdamer Letterschop, headquartered in Potsdam, Germany].

If we are legally authorised or obliged to do so (on the basis of applicable laws or a court order), we may disclose your personal data.

X. Transfer of personal data to third countries

Within the scope specified above, we may transmit your personal data to other countries (including countries outside of the EU) that may have data protection standards that differ from those of your place of residence. Please note that data processed in other countries may be subject to foreign laws and be accessible to the governments, courts, law enforcement agencies and supervisory authorities of said countries. If we transmit your personal data to such countries, however, we will implement suitable measures to protect your data appropriately.

XI. Security

We implement suitable, state-of-the-art security measures to protect your data against loss, misuse and alteration. Accordingly, our security guidelines and privacy policies are reviewed regularly and improved where necessary. Furthermore, only authorised employees have access to personal data. Even though we cannot ensure or guarantee that data will never be lost, misused or altered, we do everything in our power to prevent this from happening.

Please be aware that data transfer via the Internet is never completely secure. We cannot guarantee the security of the data entered on our website during transfer via the Internet. This is done at your own risk.

XII. Storage periods

Our goal is to process your personal data to the smallest extent possible. If no specific storage periods are specified in this privacy policy, we will only store your personal data for as long as is necessary to fulfil the purpose for which it was originally collected and – if applicable – as long as is legally stipulated.

XIII. Your rights

Depending on the circumstances of the specific case in question, you have the following data protection rights:

  • The right to request access to your personal data and or copies of this data. This includes information on the purpose of use, the category of the data used, the recipient and the persons authorised to access the data, as well as, if possible, the planned duration of data storage or, if this is not possible, the criteria for determining the duration thereof.
  • The right to request the rectification, erasure or restriction of the processing of your personal data insofar as the use of this data is inadmissible under data protection law, in particular because (i) the data is incomplete or incorrect, (ii) the data is no longer required for the purposes for which it was collected, (iii) the consent on which the processing was based has been withdrawn, or (iv) you have successfully exercised your right to object to data processing; in cases in which the data is processed by third parties, we will pass on your requests for rectification, erasure or restriction of processing to these third parties, unless this proves to be impossible or involves disproportionate effort.
  • The right to deny or withdraw your consent – without altering the legality of the processing carried out on the basis of the consent before revocation – to the processing of your personal data at any time.
  • The right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you.
  • The right to receive the personal data that you have provided us with in a structured, commonly used and machine-readable format and to transmit that data to another controller without hindrance by us; you also have the right to request that we transmit your personal data directly to another controller should this be technically possible.
  • The right to take legal action or call the responsible supervisory authorities if you are of the opinion that your rights have been violated as the result of processing of your personal data that does not comply with the legal data protection requirements.

You may

(i) exercise the rights specified above or

(ii) ask questions or

(iii) lodge a complaint against the processing of your personal data carried out by us by contacting us as specified below.

In addition, you also have the right to object to the processing of your personal data at any time:

  • if we process your personal data for the purpose of direct marketing; or
  • if we process your personal data in order to pursue our legitimate interests and there are reasons for you to object arising

XIV. Contact

Should you have any queries, concerns or comments regarding this privacy policy and/or queries regarding your personal data, please do not hesitate to send us an e-mail. You can contact us at datenschutz@medianet-bb.de.

The information that you provide us with when you contact us (e.g., your name or e-mail address) is only processed for the purpose of dealing with your request. This information will then be deleted immediately. Alternatively, we may limit the processing of your personal data on the basis of the legal provisions regarding retention obligations.

XV. Amendments to this privacy policy

We reserve the right to change this privacy policy as we update our website. We ask that you visit this page regularly and review the latest version of the privacy policy. This privacy policy was last updated on 25 May 2018.