We, the Research Unit (FOR) 5659, take the protection of your personal data and the legal obligations that serve to ensure this protection very seriously. The legal provisions require comprehensive transparency in all issues regarding the processing of personal data. Only when the processing is traceable for you as the person concerned (data subject), you can be deemed to be sufficiently informed about the intention, purpose and scope of the processing. That is why our Privacy Policy explains to you in detail which so-called personal data we process when you use our website.

“Controller” in terms of the General Data Protection Regulation (GDPR), the Bundesdatenschutzgesetz – German Federal Data Protection Act (BDSG) and other data protection regulations is:

Forschungsgruppe 5659

Klinik für Hämatologie, Hämostaseologie, Onkologie und Stammzelltherapie

Medizinische Hochschule Hannover

Carl-Neuberg-Straße 1, 30625 Hannover

Tel.: +49 (0) 511 5323021
E-Mail: Heidel.Florian@mh-hannover.de

referred to hereinafter as ‚controller‘ or ‚we‘.

Please be aware that you may be redirected to other Internet pages via links on our website. However, other pages are not operated by us but by third parties. You can recognize them by the change of the address line of your browser. We are not responsible for compliance with the applicable data protection regulations and secure handling of your personal data by third parties operating such other Internet pages.

According to the GDPR

This Privacy Policy uses the terms used in the wording of the GDPR. The definitions (Art.4 GDPR) are available for instance at

Cookies

Cookies are small blocks of data created by a web server while a user is browsing a website and placed on the user’s computer or other device by the user’s web browser. Cookies are placed on the device used to acccess a website, and more than one cookie may be placed on a user’s device during a session.

Cookies serve useful and sometimes essential functions on the web. They enable web servers to store stateful information (such as items added in the shopping cart in an online store) on the user’s device or to track the user’s browsing activity (including clicking particular buttons, logging in, or recording which pages were visited in the past). They can also be used to save information that the user previously entered into form fields, such as names, addresses, passwords, and payment card numbers for subsequent use.

We only process personal data to the extent this is permitted by law. Disclosure or transfer to third parties takes place only in the cases described below.

The personal data is deleted or protected by technical and organizational measures (e.g., pseudonymization, encryption) as soon as the data processing purpose ceases to exist. This is also the case as soon as a prescribed storage period expires.

Unless we are obliged by law to ensure extended storage or disclose or transfer personal data to third parties (including but not limited to criminal prosecution authorities), the decision which personal data is collected by us, how long it is stored and to which extent you may be required to disclose your data depends on which functions and features of the website you use from time to time.

Using the website and its functions and features, as a rule, requires the processing of certain personal data.

Use of the website

Our website is hosted by an external service provider (Hoster). Hoster is the Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Deutschland.

When you access our website, we automatically collect personal data in form of the ‚Apache Combined Log Format‘ which is saved on the servers of the Strato AG. These information are transferred by your browser unless you have configured it such that the information transfer is prevented. The personal data is processed for purposes of functionality and optimization of the website and to ensure the security of our information technology systems only. This is at the same time our legitimate interest which renders the processing permissible according to Art. 6 subs. 1 f) GDPR.

We thereby collect the following information:

IP address (anonymized after 7 days),

the HTTP referrer URL, which represents the address from which the request for the resource originated,

Name and URL of the retrieved file,

date and time of the retrieval,

transferred data volume,

HTTP response status code,

browser type and browser version,

operating system.

The data in form of Logfiles is stored for a maximum of 6 months, however, IP addresses are anonymized after 7 days. We do not combine the personal data with other data sources. It is not intended to transfer personal data to a third country or an international organization.

Google Web Fonts

When you access our website, so called Web Fonts are downloaded to ensure uniform display of various fonts. These contents are made available by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‚Google‘). When you access our website, your browser loads the required web fonts to your browser cache to correctly display texts and fonts. We saved all fonts used on our website locally on servers of our external Hoster (Strato AG), so that all fonts are loaded locally and your personal data (e.g. IP address) is not transferred to third country Google servers.

Features: Interactive Map

The interactive card is hosted locally in a data protection friendly manner and your personal data (e.g. IP address) is not transferred to third country servers of the map provider OpenStreetMap. When using and interacting with the card, no data apart from the technically needed is saved. This card does not utilize cookies.

Features: File Up- and Download

Certain features of this website allow for file up- and download. Be informed that every file you upload will be saved on servers of our external service provider (hoster) of the website which is the Strato AG. In addition, while using the up- and download service, this website will collect personal data in form of Logfiles as already explained in detail above. In addition, all the information you enter into the web surface (as title and description of the upload file), as well as the uploaded file itself, will be saved and displayed on the website.

You as the person concerned (“data subject”) are entitled to a right to information according to Art. 15 GDPR, a right to rectification according to Art. 16 GDPR, a right to erasure according to Art. 17 GDPR, a right to restriction of processing according to Art. 18 GDPR as well as a right to data portability according to Art. 20 GDPR. The right to information as well as the right to erasure are subject to the restrictions under §§ 34, 35 BDGS (German Federal Data Protection Act). In addition, you are entitled to lodge a complaint with a supervisory authority (Art. 77 GDPR in combination with § 19 BDSG).

Right to oppose

You are entitled for reasons arising from your specific situation to oppose at any time the processing of your personal data which is carried our according to Art. 6 subs. 1 e) or f) GDPR.

Right to withdraw your consent to personal data processing

You are entitled under Art. 7 subs. 3 sentence 4 GDPR to withdraw your consent at any time. However, the withdrawal will leave the lawfulness of the processing that has taken place with your consent before the withdrawal unimpaired. Thus, the withdrawal only takes effect for the processing intended for the time after the withdrawal. The withdrawal can be made informally, by posted letter or email. If you oppose the processing, we will no longer process your personal data unless this is permitted by another (legal) basis. If you oppose the processing and there is no other legal basis which permits continued processing, we are obliged under Art. 17 subs. 2 b) GDPR to erase your personal data without undue delay (“unverzüglich”) upon your request.

The withdrawal can be made informally and is to be addressed to:

Forschungsgruppe 5659

Klinik für Hämatologie, Hämostaseologie, Onkologie und Stammzelltherapie

Medizinische Hochschule Hannover

Carl-Neuberg-Straße 1, 30625 Hannover

or the administrator:

Cornelius.Jonas@mh-hannover.de