Data Privacy

Data Privacy

Responsibility

THE NEW INSTITUTE Foundation gGmbH
represented by the Executive Board: Dr. Wilhelm Krull, Christoph Gottschalk, Anke Hennings
Große Theaterstrasse 1
20354 Hamburg
Tel: 040 3008 2711
Fax: 040 3008 2701
E-Mail: info@thenew.institute

Contact details of our Data Protection Officer

We are assisted in fulfilling our obligations under data protection law by our Data Protection Officer, whose contact details are as follows:
datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
www.datenschutz-nord-gruppe.de
office@datenschutz-nord.de

We are pleased about your visit to our website.

In the following, we would like to inform you about the handling of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR).

Usage Data

When you visit our website, our web server temporarily evaluates so-called usage data for statistical purposes as a protocol used to improve the quality of our website. This data record consists of

  • name and address of the requested content,
  • date and time of the query,
  • of the transferred data volume,
  • the access status (content transferred, content not found),
  • the description of the web browser and operating system used,
  • the referral link, which indicates from which page you reached ours,
  • the IP address of the requesting computer, which is shortened in such a way that a personal reference can no longer be established. This data will only be evaluated anonymously.

Storage of the IP address for security purposes

In addition, we store the complete IP address transmitted by your web browser for a period of seven days in the interest of detecting, limiting and eliminating attacks on our web pages. After this, we delete or anonymize the IP address. The legal basis is Art. 6 para. 1 let. f) GDPR.

Data Security

We take technical and organizational measures to protect your data as comprehensively as possible from unwanted access. We use an encryption procedure on our web pages. Your data is transferred from your computer to our server and vice versa via the Internet using TLS encryption. You can usually recognize this by the fact that the lock symbol in the status bar of your browser is closed and the address line begins with https://.

Matomo

We use the web analysis tool “Matomo” to design our websites according to your needs. Matomo creates user profiles based on pseudonyms. For this purpose, permanent cookies are stored on your end device and read out by us. Through this, we are able to recognize returning visitors and count them as such.

The data processing is based on your consent in accordance with Art. 6 Para. 1 let. a) GDPR or § 15 Para. 3 TMG, if you have given your consent via our banner.

You can revoke your consent at any time. Please follow this link and make the appropriate settings via our banner.

  • Maximum Storage Duration
  • Adequate Level of Data Protection: Processing within EU/EEA
  • Revocation of Consent: If you want to revoke your consent, please click here and make the appropriate setting via our banner.

Embedded Videos

On our websites, we embed videos that are not stored on our servers. To ensure that visiting our websites with embedded videos does not automatically lead to reloading of third-party content, we merely show locally stored preview images of the videos in a first step. This does not provide the third party provider with any information.

Only after a clicking the preview image, contents of the third party provider are reloaded. The third party provider is then informed that you visited our site and receives the usage data technically required in this context. Furthermore, the third party provider is then able to implement tracking technologies. We have no influence on the further data processing by the third party provider. By clicking on the preview image, you give us your consent to reload content from the third-party provider.

The embedding takes place on the basis of your consent in accordance with Art. 6 para. 1 let. a) GDPR, provided that you have given your consent by clicking on the preview image. Please note that the embedding of many videos leads to your data being processed outside the EU or EEA. In some countries, there is a risk that authorities may access the data for security and surveillance purposes without you being informed or having the right to appeal. If we use providers in insecure third countries and you give your consent, the transfer to an insecure third country is based on Art. 49 para. 1 let. a) GDPR.

  • Provider: Vimeo (USA)
  • Adequate Level of Data Protection: No adequate level of data protection. The data is transmitted on the basis of Art. 49 para. 1 let. a) GDPR.
  • Revocation of Consent: If you clicked on a preview image, the contents of the third party provider will be reloaded immediately. If you do not wish such reloading on other sites, please do not click on the thumbnails anymore.

Newsletter Registration and Dispatch

On our website, you can order a newsletter. Please note that we need certain data (at least your e-mail address) to register for the newsletter. The newsletter will only be sent if you have given us your explicit consent in accordance with Art. 6 Para. 1 let. a) GDPR. After signing up for the newsletter on our website, you will receive a confirmation e-mail to the e-mail address you provided (so-called double opt-in). You can revoke your consent at any time. An uncomplicated way to revoke your consent is, for example, to use the unsubscribe link provided in every newsletter.

As part of the newsletter registration process, we store further data in addition to the data already mentioned, if this is necessary to prove that you have ordered our newsletter. This may include the storage of the complete IP address at the time of the order or confirmation of the newsletter, as well as a copy of the confirmation mail sent by us. The corresponding data processing is carried out on the basis of Art. 6 para. 1 let. f) GDPR and is carried out in the interest of being able to account for the legality of the newsletter dispatch.

When sending out newsletters, we are supported by our service provider, CleverReach GmbH & Co. KG. We transmit your e-mail address to CleverReach GmbH & Co. KG, which acts for us as a strictly instruction-bound order processor. We have concluded a corresponding order processing contract with the service provider in accordance with Art. 28 para. 3 GDPR. No data will be transferred to countries outside the EU or EEA.

Storage Duration

Unless we have already informed you in detail about the storage period, we will delete personal data if it is no longer required for the aforementioned processing purposes and no legal storage obligations prevent deletion.

Other Contract Processors

In accordance with Art. 28 GDPR, we pass on your data to service providers who support us in the operation of our websites and related processes. These are e.g. hosting service providers. Our service providers are strictly instruction-bound via respective contacts.

In what follows, we list the contract processors with whom we collaborate, if we have not already done so in the above text of the data protection declaration. Should data be transferred outside the EU or EEA in this context, we will provide information on the appropriate level of data protection. 

Order Processor: CDLX GmbH
Purpose: Support
Adequate Level of Data Protection: Processing only within EU/EEA

Order Processor: Hetzner Online GmbH
Purpose: Hosting
Adequate Level of Data Protection: Processing only within EU/EEA

Your Privacy Rights

When your personal data is being processed, the GDPR grants you certain rights:

Right of Access (Art. 15 GDPR)
You have the right to obtain confirmation as to whether your personal data is being processed; if this is the case, you have the right to being informed about this data and to receive the information specified in Art. 15 GDPR.

Right to Rectification (Art. 16 GDPR)
You have the right to request the correction of incorrect personal data concerning you and, if necessary, the completion of incomplete data without delay.

Right to Erasure (Art. 17 GDPR)
You have the right to request that personal data concerning you be deleted immediately if one of the reasons listed in Art. 17 GDPR applies.

Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, for example if you have lodged an objection to processing, for the duration of any examination.

Right to Data Portability (Art. 20 GDPR)
In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive your personal data in a structured, common and machine-readable format or to request the transfer of such data to a third party.

Conditions for Consent (Art. 7 GDPR)
If the processing of data is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Art. 7 para. 3 GDPR. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.

Right to Object (Art. 21 GDPR)
If your data are processed on the basis of Art. 6 para. 1 let f) GDPR to preserve legitimate interests, you have the right to object to the processing. We will then no longer process your personal data unless there are compelling reasons for processing which outweigh your interests, rights and freedoms or unless the processing serves to assert, exercise or defend legal claims.

Right of appeal to a regulatory authority (Art. 77 GDPR)
According to Art. 77 GDPR, you have the right to complain to an authority if you believe that the processing of your personal data is not in accordance with current data protection legislation. The right to appeal may be claimed towards any authority in the Member State of your residence or in which the suspected breach has occurred.

Assertion of your rights
Unless otherwise described, please get in touch with the contact indicated in the imprint to assert your rights.

Information in accordance with Art. 13 of the EU General Data Protection Regulation on data processing in the context of applying for a fellowship

If you apply for one of our fellowships, it is necessary for us to process personal data. According to Art. 13 of the EU General Data Protection Regulation (GDPR), we are obliged to inform you of the following:

Responsibility

THE NEW INSTITUTE Foundation gGmbH
represented by the Executive Board: Dr. Wilhelm Krull, Christoph Gottschalk, Anke Hennings
Große Theaterstrasse 1
20354 Hamburg
Tel: 040 3008 2711
Fax: 040 3008 2701
E-Mail: info@thenew.institute

Processing purposes and legal basis:

We process your data exclusively for the purpose of selecting suitable recipients for fellowships. To be able to consider your application, the following information is inevitably required (mandatory information):

  • Name and address
  • E-mail address
  • Letter of Motivation
  • Project description
  • Curriculum vitae (CV)
  • Publication list

The legal basis of the processing is Art. 6 para. 1 lit. b) GDPR.

You can provide us with additional information (such as your telephone number for easier communication). This information is provided voluntarily and not mandatory for an application. If you include such voluntary details in your application or enter them on the online application mask, you agree that we process these data exclusively for the purpose of selecting applicants. You can withdraw your consent at any time. To do so, please send an e-mail to the address mentioned above. Part of your application will be archived. Further processing is necessary to protect our legitimate interests listed below:

  • Documentation of the institute’s history: As a new and permanently established institute, we would like to archive applications (and the personal data of the applicants) from the beginning on.
  • Any stored data/information is to be used to monitor and evaluate our programmes (e.g. with regards to participation, fit of submitted applications, reaching of target groups) and improve them.
  • As it is not possible to re-apply in regularly recurring thematic calls, archiving is also necessary for tracking the applications.

The legal basis for this processing is Art. 6 para. 1 lit. f) GDPR. You can object to this at any time. To do so, please send an e-mail to the address mentioned above.

Transfer of data

We will only pass on your data externally if this is permitted under data protection law. Your data may be passed on to external service providers (e.g. IT service providers) who support us in data processing strictly in accordance with instructions. This collaboration is based on data processing agreements in accordance with Art. 28 para. 3 GDPR. As part of the selection process, it is sometimes necessary for your data to be passed on to evaluators located in countries outside the EU/EEA. These countries may not provide the same level of data protection as the EU.

If data is transferred to countries without a level of data protection comparable to the EU (such as the USA), the following risks may arise:

  • access to your personal data by authorities and secret services;
  • affected party’s rights are not enforceable;
  • no effective legal remedies are available to you;
  • control over your data is withdrawn.

We will only pass on your personal data if you consent by ticking the corresponding checkbox below the input mask on the application system. You then consent to transmitting your personal data to experts in countries outside the EU/EEA in accordance with Art. 49 para. 1 lit. a) GDPR. You can withdraw your consent at any time. To do so, please send an e-mail to the address mentioned above.

Storage duration

Your application and personal data will generally be deleted as soon as they are no longer required for the purposes described above or as soon as no legal storage obligations or other legitimate interests contradict their deletion.

If parts of your application are archived, the data will be deleted as soon as they no longer have any archival value.

Your data protection rights

You have the right to be informed about your personal data (Art. 15 GDPR) and to have incorrect data corrected (Art. 16 GDPR) or deleted if one of the reasons stated in Art. 17 GDPR applies, e.g. if the data is no longer required for the intended purposes. You also have the right to restrict processing if one of the reasons stated in Art. 18 GDPR applies and to data transferability according to Art. 20 GDPR.

If your data are processed on the basis of Art. 6 para. 1 lit f) GDPR to preserve legitimate interests, you have the right to object to the processing. We will then no longer process your personal data unless there are compelling reasons for processing which outweigh your interests, rights and freedoms or unless the processing serves to assert, exercise or defend legal claims.

Right of appeal to a regulatory authority

You also have the right to complain to an authority if you believe that the processing of your personal data is not in accordance with current data protection legislation. The right to appeal may be claimed towards any authority in the Member State of your residence or in which the suspected breach has occurred.

Information in accordance with Art. 13 of the EU General Data Protection Regulation on data processing in the context of contacts

If you provided us with personal data when contacting us or if we process your data in order to contact you, we are obliged to inform you of the following pursuant to Art. 13 and Art. 14 of the EU General Data Protection Regulation (GDPR):

Responsibility

THE NEW INSTITUTE Foundation gGmbH
represented by the Executive Board: Dr. Wilhelm Krull, Christoph Gottschalk, Anke Hennings
Große Theaterstrasse 1
20354 Hamburg
Tel: 040 3008 2711
Fax: 040 3008 2701
E-Mail: info@thenew.institute

Processing purpose and legal basis

Contact initiated by you:
We process the data you provide exclusively for the purpose of processing your request. Depending on the content of your enquiry, the legal basis for this includes Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest is based on the aforementioned purpose of processing your enquiry. You can object to this processing at any time. To do so, please send an e-mail to the address mentioned above.

If your request is aimed at concluding a contract or is in connection with the implementation of the contract concluded with you, the legal basis for processing may also be Art. 6 para. 1 lit. b) GDPR.
Contact initiated by us:
To design our programmes and find the most suitable candidates, we depend on the support of experts. Accordingly, we contact people to act as advisors or reviewers due to their expertise. We also aim to find suitable participants for thematic workshops and contact them. In addition, we contact, for instance, agencies, media representatives, authorities, and suppliers as part of our general business operations. Any contact detail is taken from publicly accessible sources (e.g. institutional or organisations websites). The processing of data required for establishing contact is based on Art. 6 para. 1 let. f) GDPR in the legitimate interest of involving experts in our programme work and selection processes, attracting workshop particpants, and handling our business operations. You can object to this processing at any time with effect for the future. To do so, please send an e-mail to the address mentioned above. If you have objected to being contacted, we will not contact you again. In order to be able to do this, we keep an access-restricted list of those people who no longer wish to be contacted.

Storage duration

The data collected will be deleted after completion of processing, unless legal storage obligations or legitimate interests contradict.

Transfer of data

We only pass on your data to externals if this is permitted by data protection law. Your data may be passed on to external service providers (e.g. IT service providers, cloud-based virus and spam filters) who support us in data processing strictly in accordance with instructions. Data is also transferred to countries outside the EU/EEA; corresponding standard contractual clauses have been concluded.

Your privacy rights

You have the right to be informed about your personal data (Art. 15 GDPR) and to have incorrect data corrected (Art. 16 GDPR) or deleted if one of the reasons stated in Art. 17 GDPR applies, e.g. if the data is no longer required for the intended purposes. You also have the right to restrict processing if one of the reasons stated in Art. 18 GDPR applies and to data transferability according to Art. 20 GDPR. If your data are processed on the basis of Art. 6 para. 1 lit f) GDPR to preserve legitimate interests, you have the right to object to the processing. We will then no longer process your personal data unless there are compelling reasons for processing which outweigh your interests, rights and freedoms or unless the processing serves to assert, exercise or defend legal claims.

Right of appeal to a regulatory authorit

You also have the right to complain to an authority if you believe that the processing of your personal data is not in accordance with current data protection legislation. The right to appeal may be claimed towards any authority in the Member State of your residence or in which the suspected breach has occurred.

Contact details of our Data Protection Officer

We are assisted in fulfilling our obligations under data protection law by our Data Protection Officer, whose contact details are as follows:

datenschutz nord GmbH Konsul-Smidt-Straße 88 28217 Bremen

www.datenschutz-nord-gruppe.de office@datenschutz-nord.de

Privacy Policy for our Social Media Sites

When you visit our social media sites, it may be necessary to process personal data. Here, we would like to inform you about the handling of your data and your rights in accordance with Art. 13 of the General Data Protection Regulation (GDPR).

Responsibility

The New Institute gGmbH(as indicated in the imprint)
represented by the Executive Board: Dr. Wilhelm Krull, Christoph Gottschalk, Anke Hennings
Große Theaterstrasse 1
20354 Hamburg
Tel: 040 3008 2711
Fax: 040 3008 2701
E-Mail: info@thenew.institute

THE NEW INSTITUTE Foundation gGmbH operates the following social media sites:
Twitter: Twitter.com/TheNewInstitute
Vimeo:
Instagram: Instagram.com/the new.institute
LinkedIn: LinkedIn.com/TheNewInstitute
  Besides us, the respective operator of the social media platform is also responsible for processing your personal data. Insofar as we can influence this and parameterize the data processing, we try to ensure that the operator of the social media platform handles your data in ways compatible with data protection regulations. In this context, please also note the privacy policies of the respective platforms.

Data processing by us

The data provided by you on our social media sites, such as user names, comments, videos, pictures, likes, public messages, etc., are published by the social media platform and are not used by us for any other purposes. We merely reserve the right to delete content if necessary. We may share your content on our site if this is a function of the social media platform and communicate with you via the social media platform.

If you send us an inquiry through the social media platform, we may refer to other, secure communication channels that guarantee confidentiality, depending on the content. For example, you can send us your inquiries to the address or e-mail address provided in our imprint at any time. Choosing an appropriate communication channel is your own responsibility.

The legal basis for processing your data is Art. 6 para. 1 let. f) GDPR. Data processing is based on the legitimate interest of carrying out public relations work for our company and being able to communicate with you.

Some of the social media platforms generate statistics based on usage data, which contain information about your interaction with our social media site. We can neither influence nor prevent these statistics. We do not use any optional statistics offered by the social media platforms. We process this information in accordance with Art. 6 Para. 1 s. 1 let. F) GDPR in the legitimate interest of validating the use of our social media pages and improving our content oriented towards our target group.

If you wish to object to a certain way of processing your data which we can influence, please contact us using the contact details given above or in the imprint.

Storage Duration

The data collected will be deleted after completion of processing, unless legal storage obligations or legitimate interests contradict.

Data processing by the operator of the social media platform

The operator of the social media platform uses web tracking methods. Web tracking can also be performed regardless of whether you are logged in or registered with the social media platform. We would like to point out that it cannot be ruled out that the provider of the social media platform will use your profile and behavioral data to evaluate your habits, personal relationships, preferences, etc.. We do not have any influence on the processing of your data by the provider of the social media platform; the use of the social media platform is at your own responsibility.

More detailed information on data processing by the provider of the social media platform, configuration options for the protection of your privacy as well as further objection options and, if available and concluded, the agreement according to Art. 26 GDPR can be found in the provider's privacy policy:

Your privacy rights

Sie haben als Webseitennutzer sowohl uns gegenüber als auch gegenüber dem Anbieter der Social-Media-Plattform, die Möglichkeit bei Vorliegen der Voraussetzungen folgende Rechte geltend zu machen:

Right of Access (Art. 15 GDPR):
You have the right to obtain confirmation as to whether your personal data is being processed; if this is the case, you have the right to being informed about this data and to receive the information specified in Art. 15 GDPR.

Right to Rectification and Erasure (Art. 16 and 17 GDPR):
You have the right to request incorrect personal data to be corrected without any delay and, if necessary, incomplete personal data to be completed. You also have the right to demand that your personal is deleted immediately if one of the reasons listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the intended purposes.

Right to Restriction of Processing (Art. 18 GDPR):
You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, for example if you have lodged an objection to processing, for the duration of any examination.

Right to Data Portability (Art. 20 GDPR):
IIn certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive your personal data in a structured, common and machine-readable format or to request the transfer of such data to a third party.

Right to Object (Art. 21 GDPR):
If your data are processed on the basis of Art. 6 para. 1 let f) GDPR to preserve legitimate interests, you have the right to object to the processing. We will then no longer process your personal data unless there are compelling reasons for processing which outweigh your interests, rights and freedoms or unless the processing serves to assert, exercise or defend legal claims.

If the data are processed on the basis of the legitimate interest for the purpose of direct marketing, you have your own right to object, which you may exercise at any time without giving any reasons; this will stop the processing of data for direct marketing purposes.

Right of appeal to a regulatory authority
According to Art. 77 GDPR, you have the right to complain to an authority if you believe that the processing of your personal data is not in accordance with current data protection legislation. The right to appeal may be claimed towards any authority in the Member State of your residence or in which the suspected breach has occurred.

Contact details of our Data Protection Officer
If you have any question regarding data protection/privacy rights, you can contact our external data protection officer:

datenschutz nord GmbH Konsul-Smidt-Straße 88 28217 Bremen

www.datenschutz-nord-gruppe.de office@datenschutz-nord.de

If you get in touch with our data protection officer, please indicate the responsible contact as listed in the imprint.

Newsletter

We use cookies to measure how often our site is visited and how it is used. You can withdraw your consent at any time with effect for the future. For further information, please refer to our privacy policy.