Within the framework of the EUSTORY History Campus online platform (historycampus.org) and in connection with events such as, for example, EUSTORY History Camps or the EUSTORY Next Generation Summit, the Körber-Stiftung collects, processes and uses personal data of participants and former participants.
In the following, you will find information on what personal data we collect when you access our Internet site at www.historycampus.org(»website«) and use the services and functions contained therein, and how we use this data and for which purposes. In addition, we inform you about the legal bases for the processing of your data and, insofar as the data are processed to pursue our legitimate interests, about these legitimate interests.
The Körber-Stiftung takes the greatest possible care when handling this data. In order to obtain the best possible knowledge about the handling of your data by the Körber-Stiftung, please take the time to read our general information about handling data and the data protection law consent of participants and former participants.
2. Data controller
The data controller responsible for the processing of your data through the website is the Körber-Stiftung, Kehrwieder 12, 20457 Hamburg, tel. +49 40 / 80 81 92 0, firstname.lastname@example.org (»Körber-Stiftung«, »we« or »us«).
You can reach our competent data protection officer at email@example.com.
3. General Information on the Handling of Data
Collection, processing and use of all personal data takes place in accordance with the principles of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), and on the basis of the express consent of the participants.
In accordance with Art. 13 (1) lit. c) GDPR, we must also inform you about the purposes of the processing for which the personal data are intended as well as the legal basis for the processing. In addition to consent to be given, two different legal bases allow the processing of data through our website:
In accordance with Art. 6 (1) sentence 1 lit. b GDPR (and currently in accordance with sec. 28 para. 1 sentence 1 no. 1 BDSG), data processing is lawful if it is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
In accordance with Art. 6 (1) sentence 1 lit. f GDPR (and currently in accordance with sec. 28 para. 1 sentence 1 no. 2 BDSG), data processing is also lawful if it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overriden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
We refer in the following to these two legal bases in connection with the data processing concerned in each case.
The following information is considered to be personal data:
- Name, first name
- Academic title
- Address (street, house number, postcode, place, country – work/home)
- Telephone (work/home)
- Fax (work/home)
- E-Mail address (work/home)
- Account and bank details (exclusively for reimbursements)
- Date of birth
- Earlier participation in a national history competition (incl. country, title of the submission, year of participation)
4. General information about the use of personal data
Personal data of participants (registered users on the EUSTORY History Campus and participants in events organised by the Körber-Stiftung) and other persons who are not participants are only processed and used for the Körber-Stiftung’s own purposes to the extent to which this is necessary for the establishment, implementation or termination of a legal obligation or relationships similar to a legal obligation with the person affected. Personal data will only be processed and used in addition to this if this is necessary to safeguard the legitimate interests of the Körber-Stiftung and there is no reason to assume that the person affected has an overriding interest in excluding the processing or use.
- Promotion of gifted young academics through publicity in media
It is a central aim of the Körber-Stiftung to promote gifted young academics through publicity in the media. For this reason, personal data (including contact details) of participants of the current competition round on the EUSTORY History Campus platform and of the events specified above can be forwarded to the media. In this context, only the personal data which is necessary and helpful for reporting will be forwarded. In addition, data is forwarded with the information that such data exclusively serves to provide information to the media and/or to facilitate contact with participants for the purpose or reporting, and is neither suitable nor intended for publication in the transmitted form.
- Cooperating with partners on the EUSTORY History Campus or in the course of events
The personal data of the participants is transmitted to the participating cooperation partners in connection with the implementation of events (amongst other things EUSTORY History Campus, EUSTORY Summits, Alumni activities, award ceremonies).
- Customer Management System of the Körber-Stiftung
Additionally we collect the data of participant in events in a customer management system. These data are stored in order to facilitate the management of our relations with our visitors, the participants in contests, and other interested parties. The legal basis for this data processing is Art. 6 (1) lit. f GDPR (or, as the case may be, sec. 28 para. 1 sentence 1 no. 2 BDSG).
- Contact forms and inclusion in data processing programmes
We provide an email address on our website (firstname.lastname@example.org) which you can use to contact us. The data provided by you for this (e.g. name, address, telephone number, email address, etc.) are used by us for the purposes of the contact on the basis of Art. 6 (1) lit. a GDPR (secs. 4a BDSG, 13 para. 2 TMG).
- Transmission of data
To perform our services, including the despatch of books, flyers and brochures, we use contractually bound sister companies as well as outside undertakings and external service providers such as shipping providers. For these purposes we pass on data that we collect and use in connection with your use of this website, e.g. address data, for example in order to allow the shipment of books.
Information collected and used by us in connection with your use of this website may therefore also be processed by third parties under certain conditions, but only insofar as that is necessary for the purposes set out in this Privacy Statement or insofar as the third party acts as a service provider bound by instructions or as a contract data processor.
The parties mentioned in this clause, for example the shipping providers, are carefully selected and regularly checked by us in order to make sure that your privacy will be protected. They may use the data exclusively for the purposes specified by us. They are bound contractually to use your data exclusively in accordance with our instructions and in compliance with the applicable data protection laws.
Your personal data are disclosed to others only for the purpose of making available to you the website and the services offered through it. The legal basis is Art. 6 (1) sentence 1 lit. b GDPR (sec. 28 para. 1 sentence 1 no. 1, 2 BDSG). Our legitimate interest in passing on the data is to make available to you the services offered on our website.
- Other usage of data
Your personal data will generally be processed or used in any further manner only insofar as that is allowed by a legal provision or you have consented to such data processing or use.
In case of further processing for purposes other than those which the data were originally collected for, we will inform you prior to further processing about these other purposes and will give you the further relevant information.
Generally, we delete or anonymise your personal data as soon as they are no longer needed for the purposes for which we collected or used them on the basis of the statements above. Specific statements above regarding the retention or deletion of personal data remain unaffected.
Except where this Privacy Statement contains any other deviating provisions regarding the storage of data, the data collected by us will be stored as long as necessary for the purposes stated above which they were collected for.
In spite of technical precautions (firewall; SSL web server certificate), it cannot be excluded that transmitted data may be seen by unauthorised parties and possibly even forged. Data is temporarily stored on our server in connection with your access for the purpose of data security which possibly permits identification (IP address, date, time and page visited). Data is not analysed for statistical purposes other than in anonymous form.
5. Consent to Data Protection law on the EUSTORY History Campus and Participation in Events
- Consent to the use of personal data
I agree that the information provided here (name, date of birth, postal address, E-Mail address, telephone number, school and/or educational establishment, including address, class and submission data of my history competition entry) can be collected, processed, used and stored for the purposes of implementing offers on the EUSTORY History Campus and for conducting events such as, for example, EUSTORY History Camps or EUSTORY Summits by the Körber-Stiftung and its official partners.
I likewise consent to information concerning name, age, place of residence, school or educational establishment, class, federal state, submission and participation success being collected, processed and used by the Körber-Stiftung for the purposes of press and public relations work for the EUSTORY network and the EUSTORY History Campus. This includes the onward transmission of this data to media (e.g. print media, TV, radio, online media) and publication there. Such publication can also lead to the transmission of data to countries in which there is no suitable appropriate level of data protection.
During the entire duration of the respective event round (application, preparation, conduct and follow-up) and my activity on the EUSTORY History Campus, my name, telephone number, E-Mail address, age and place of residence may be transmitted to the media by the Körber-Stiftung for the purpose of direct contact with me.
- Consent to the use of photos and film recordings
I also give my consent to photos and film recordings of me being made within the framework of the EUSTORY History Campus, events such as History Camps, EUSTORY Summits and award ceremonies for national history competitions, and to the processing and use of such material by the Körber-Stiftung for the purposes of conducting the competition and for press and public relations work (including publications on the Internet and in social media). Such publication can also lead to the transmission of data to countries in which there is no suitable appropriate level of data protection.
- Data protection law consent for Alumni work
I agree that my data (name, date of birth, postal address, E-Mail address, telephone, information about my submission to the history competition and participation success as well as activity like this) can be stored, processed and used for the purpose of Alumni work by the Körber-Stiftung. Alumni work in particular includes invitations and opportunities to apply for workshops and seminars (e.g. History Camps, EUSTORY Next Generation Summit, other Alumni projects and activities).
I likewise agree that I can be contacted by post and by E-Mail with information about EUSTORY even after the conclusion of the event.
- Using the Internal Groups on the EUSTORY History Campus
I agree that my data (username, name, content I share in the groups and forums, documents I upload to the groups) can be stored, processed and used in the internal groups on the EUSTORY History Campus for the purpose of interacting with the other members of the group.
6. Information about data protection law consent/revocation
I can revoke these consents at any time with effect for the future by E-Mail to email@example.com. However, revocation of the data protection law consent to participation in a competition which also relates to statements about name, age, address, E-Mail address leads to exclusion from events and the EUSTORY History Campus. Likewise, a revocation of the consent to the use of photos and film recordings leads to exclusion from the competition, because it is not possible to conduct EUSTORY events and participate on the EUSTORY History Campus without sufficient press and public relations work. Any revocation of consent only applies for the future. With regard to the consent to use of photos and film recordings, this means that photos and film recordings which have already been made, and in particular already published, can continue to be published. Taking into consideration the interests of the objecting participant, the Körber-Stiftung will decide whether current publications can be stopped or whether the publication of recordings already made can be waived. Revocation therefore will not, for example, lead to the prevention of use of photos and film recordings which have already been made if this would involve disproportionately high amounts of time, effort and expenditure (e.g. after publication in print media which has already taken place) or would adversely affect the press and public relations work to a disproportionate extent, also in the interests of the other participants who may have been recorded at the same time. Revocation must be declared to the Körber-Stiftung.
In handling personal data, we take the greatest possible care and give the assurance that all data will be handled in accordance with the statutory provisions of the General Data Protection Regulation, and the Federal Data Protection Act, the Telemedia Act and other data protection law provisions. Our websites are protected by technical measures against damage, destruction or unauthorised access. We guarantee that we will handle the data in confidentiality and that all technical and organisational measures made necessary by statute for compliance with data protection are ensured.
7. Accessing our website
We collect and store the IP address assigned to your computer in order to transmit to your computer the contents of our website retrieved by you (e.g. texts, pictures, articles as well as files made available for downloading, etc.). The legal basis for this is Art. 6 (1) lit. b GDPR (or, as the case may be, sec. 28 para. 1 sentence 1 no. 1 BDSG).
In addition, we collect and process information regarding the use of the website, for example the browser type being used as well as the date and time of access to the website. We process these data to optimise our website and offers and for market analysis purposes. For this, we use the technologies of etracker GmbH (www.etracker.com). etracker GmbH first processes your IP address and then stores it in a shortened form so that it is not possible to identify individual users. etracker GmbH has undertaken to never merge any IP addresses with other datasets, e.g. to link a person to the data. The legal basis is Art. 6 (1) lit. f GDPR (or, as the case may be, sec. 28 para. 1 sentence 1 no. 2 BDSG). Our legitimate interest in this data processing exists in that we have a need to make available a website with a needs-based design, optimised to suit the terminal devices being used.
To ensure the fault-free operation of our web server and to guarantee server security, your complete IP address will additionally be stored by our server provider, beta – Die Beteiligungsagentur GbR, Schlegelstr. 8, 04275 Leipzig, for the duration of 14 days. After the expiry of the 14-day period, the full IP address is deleted automatically. The legal basis for this is Art. 6 (1) lit. f GDPR (or, as the case may be, sec. 28 para. 1 sentence 1 no. 2 BDSG).
8. Leaving a Comment on this website
If you use the comment function on this site, the time at which you created the comment and your email address will be stored along with your comment, as well as your username, unless you are posting anonymously.
- Storage of the IP address
Our comment function stores the IP addresses of those users who post comments. Since we do not check comments on our site before they go live, we need this information to be able to pursue action for illegal or slanderous content.
- Subscribing to the comment feed
As a user of this site, you can sign up to receive the comment feed after registering. Your email address will be checked with a confirmation email. You can unsubscribe from this function at any time by clicking the link in the emails. The data provided when you subscribed to the comments feed will then be deleted, but if you have submitted this data to us for other purposes or elsewhere (such as subscribing to a newsletter), it will be retained.
- How long comments are stored
The comments and the associated data (e.g. IP address) are stored and remain on our website until the content commented upon has been completely deleted or the comments are required to be removed for legal reasons (slander, etc.).
- Legal basis
The comments are stored based on your consent per Art. 6 (1) (a) DSGVO. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
9. Interaction with social networks and services
On our website you can interact as described below with the following social networks and services operated by third parties: Facebook, Google+, Google Fonts, Google Maps, Twitter, YouTube, Flickr, Instagram, Tumblr and Pinterest, Photobucket. In the case of the networks Facebook, Google+ und Twitter, the connection to the network is made only once you click on the proper link.
From that moment, data can be transmitted to the network concerned. The further services named above are used by us to incorporate content (such as videos and photos) into our website. As the contents are stored on the server of the provider concerned in each case, data can be transmitted to the provider concerned already from the moment in which you retrieve the contents from our website.
We have no influence on the data being collected or on the data processing operations, and we are neither responsible for this data processing nor the data controller within the meaning of the GDPR and of the BDSG. The full extent of the data collection, its legal basis, the purposes as well as the retention periods are also not known to us. Therefore the information provided here is not necessarily complete.
To our knowledge, the provider receives the information that you have accessed the subpage concerned on our website. In view of your visit to the website, your IP address, the date and time of the enquiry, the URL of the website from which the enquiry came, the language and version of your browser, your operating system and its interface, the cookie ID and your user name for the social network, if any, are transmitted. According to Facebook, that provider collects only an anonymised IP address in Germany.
To our knowledge, the provider stores these data in user profiles used by the provider for the purposes of advertising, market research and/or the needs-based design of its website. Such an analysis is made (also for users who are not logged in) in particular to display needs-based advertising and to inform other users of the social network about your activities on our website. You have a right to object against the creation of such user profiles. If you wish to exercise this right to object, please contact the provider concerned.
Further information about the purpose and scope of data usage can be found in the various providers’ privacy statements. You will also find further information there regarding your rights in this respect and the proper settings to protect your privacy.
Addresses of the various providers and URL with their privacy statements:
- Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; facebook.com/policy.php.
- Google Inc. (for Google+ and Google Fonts), 1600 Amphitheater Parkway, Mountain View, California 94043, USA;google.com/intl/de/policies/privacy/.
- Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; twitter.com/privacy.
- YouTube LLC with its principal place of business at 901 Cherry Avenue, San Bruno, CA 94066, USA, google.com/intl/de/policies/privacy/.
- Flickr: Yahoo! EMEA Limited, 5-7 Point Village, North Wall Quay, Dublin 1, Ireland, yahoo.com/ie/de/yahoo/privacy/index.htm.
- Instagram LLC, 1601 Willow Rd. Menlo Park, California 94025, USA, instagram.com/155833707900388.
- Tumblr, Inc., 35 East 21st St, Ground Floor, New York, NY 10010, USA, tumblr.com/policy/en/privacy.
- Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland, pinterest.com/de/privacy-policy.
- Photobucket Corp., 2399 Blake St, Ste 160, Denver 80205, USA, http://photobucket.com/privacy.
- LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, https://www.linkedin.com/legal/privacy-policy
When you visit our website, we place so-called »cookies«. A cookie is a file containing certain user information that we read when you return to our website. Our cookies contain series of numbers and letters as a means of identifying (ID) the accessing computer.
Most of the cookies we use are so-called “session cookies“ or “transient cookies“. They are automatically deleted after your visit. Other cookies remain in your device’s memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site.
In addition, we also use persistent or permanent cookies by means of our service provider etracker GmbH. These cookies are stored in your browser and remain there even after you end the browsing session. The cookies connect to the website as soon as it is opened the next time, and they serve the purpose of improving our website offer for you. In particular, they enable us to recognise whether our offer appeals to users enough for them to return regularly. This makes it possible for us to tailor our offer even more precisely to suit our users’ needs. But you do have the possibility when you visit our website to be entirely excluded from any data storage by etracker GmbH. For this, please follow this link.
These transient and persistent cookies are used by us only to assure the performance / availability of the service desired by the user in accordance with Art. 6 (1) lit. f GDPR (or, as the case may be, sec. 28 para. 1 sentence 1 no. 2 BDSG). Our legitimate interest in the data processing is to optimise the website settings for the terminal device used by you and to customise the user interfaces and, in view of the persistent cookies, to improve our offer for you.
You can configure the browser settings as you wish and, for example, refuse to accept certain cookies, e.g. third-party cookies (see there), or refuse all cookies. You can at any time delete cookies yourself in the security settings of your browser or deactivate the cookie function in your Internet browser. It is not absolutely necessary for the navigation and functioning of the website to accept cookies. But we would like to advise you that you may then not be able to fully use all functions of this website. This especially concerns event announcements and book orders. To be able to use this function, you must accept cookies. Instructions regarding the admission, rejection, inspection and deletion of cookies can be found through the help function of your Internet browser.
The information is stored separately from any further data that you may provide to us. In particular, the data on the cookies are not merged with any other personal data such as, for example, the registration data for a particular event.
11. Third-party cookies
Some services used by us on our website use so-called third-party cookies for certain graphs.
Third-party cookies are cookies of third-party providers placed by other websites than the one you are currently visiting. These cookies are placed on our website, for example through the inclusion of services or display of pictures or other elements from third-party providers on our website.
As described above, you can change your browser settings so that the acceptance of third-party cookies will be refused.
12. External Links
The EUSTORY History Campus website contains links to other websites which do not belong to the Körber-Stiftung. We have no influence on compliance by the providers of such third party websites with data protection provisions.
13. Analysis of use
On our website, we analyse the use of our website in accordance with the following sections, for the purposes of optimising our website and of market research. The legal basis for this data processing is sec. 15 para. 3 TMG.
To this end, data for market research and optimisation purposes are collected and stored on this website by means of the technologies of etracker GmbH (http://www.etracker.com) (for this see also Section 6 above). These data can be used to create pseudonymous user profiles. Cookies can be used to do this. The data collected with the etracker technologies are not used without the consent, to be separately given by the data subject, to personally identify the visitor of this website, and are not merged with the personal data of the person designated by the pseudonym. You can object at any time with effect for the future against the collection and storage of data. The privacy statement of etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, is available at: www.etracker.com/datenschutz/.
If you wish to be entirely excluded from any data storage by etracker GmbH when you visit our websites, please follow this link.
14. Amendments of this Privacy Statement
The further development of the Internet and of our online offers can have an effect also on the handling of personal data. We therefore reserve the right to change this Privacy Statement in the future within the framework of applicable data protection laws and to adjust it to any changing data processing realities. For this reason we advise you to visit our website from time to time in order to take note of any updates of our Privacy Statement.
15. Right to information
You have the right at any time to obtain information about your personal data stored by us. If you wish to be informed about the personal data concerning you stored by us, or have any other questions regarding data protection, please write to us (Körber-Stiftung, Kehrwieder 12, 20457 Hamburg) or send us an email (firstname.lastname@example.org).
16. Further rights of the data subjects
In your capacity as data subject, you have the following further rights against us:
Right to rectification of inaccurate personal data concerning you in accordance with Art. 16 GDPR;
Right to the erasure (“right to be forgotten”) of the personal data concerning you without undue delay where one of the grounds set out in Art. 17 GDPR applies. These legal grounds apply, for example, if the personal data are no longer necessary in relation to the purposes for which they were collected / processed, if you withdraw your consent and there is no other legal ground for the processing, or if you object to the processing and there are no overriding grounds for the processing;
Right to restriction of processing in accordance with Art. 18 GDPR where one of the grounds set out in that provision applies. According to this provision, processing can be restricted if, for example, the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of their use, or if you object to processing pursuant to Art. 21 (1) GDPR pending the verification whether our legitimate grounds override yours;
Right in accordance with Art. 21 GDPR to object to the processing of personal data concerning you which is based on Art. 6 (1) lit. e or f GDPR; this applies also to profiling based on those provisions. We then no longer process these personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims;
Right to data portability in accordance with Art. 20 GDPR. This means that you have the right to receive the data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller, e.g. a service provider, provided the processing is based on consent or on a contract and is carried out by automated means.
Right to complain to the competent supervisory authority
You have the right at any time to complain to a supervisory authority, in particular a supervisory authority in the member state in which your place of residence or your place of work is located or the breach presumably occurred, if you believe that the processing of the personal data concerning you violates any provisions of the GDPR or the BDSG.
The following data protection authority is responsible for the Körber-Stiftung:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Klosterwall 6 (Block C), 20095 Hamburg
Tel.: 040 / 428 54 – 4040, email: email@example.com
Date of this Privacy Statement: 25 May 2018