Responsibility
- Representation by the Executive Board Dr. Britta Padberg, Dr. Anna Katsman
- Address THE NEW INSTITUTE Foundation gGmbH, Warburgstraße 8, 20354 Hamburg
- Phone 040 3008 2711
- Fax 040 3008 2701
- E-Mail info@thenew.institute
Your Privacy Rights
-
Right of Access (Art. 15 GDPR)
You have the right to obtain confirmation as to whether your personal data is being processed; if this is the case, you have the right to being informed about this data and to receive the information specified in Art. 15 GDPR.
-
Right to Rectification (Art. 16 GDPR)
You have the right to request the correction of incorrect personal data concerning you and, if necessary, the completion of incomplete data without delay.
-
Right to Erasure (Art. 17 GDPR)
You have the right to request that personal data concerning you be deleted immediately if one of the reasons listed in Art. 17 GDPR applies.
-
Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, for example if you have lodged an objection to processing, for the duration of any examination.
-
Right to Data Portability (Art. 20 GDPR)
In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive your personal data in a structured, common and machine-readable format or to request the transfer of such data to a third party.
-
Conditions for Consent (Art. 7 GDPR)
If the processing of data is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Art. 7 para. 3 GDPR. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.
-
Right to Object (Art. 21 GDPR)
If your data are processed on the basis of Art. 6 para. 1 let f) GDPR to preserve legitimate interests, you have the right to object to the processing. We will then no longer process your personal data unless there are compelling reasons for processing which outweigh your interests, rights and freedoms or unless the processing serves to assert, exercise or defend legal claims.
-
Right of appeal to a regulatory authority (Art. 77 GDPR)
According to Art. 77 GDPR, you have the right to complain to an authority if you believe that the processing of your personal data is not in accordance with current data protection legislation. The right to appeal may be claimed towards any authority in the Member State of your residence or in which the suspected breach has occurred.
-
Assertion of your rights
Unless otherwise described, please get in touch with the contact indicated in the imprint to assert your rights.
Usage Data
When you visit our website, our web server temporarily evaluates so-called usage data for statistical purposes as a protocol used to improve the quality of our website. This data record consists of
- name and address of the requested content,
- date and time of the query,
- of the transferred data volume,
- the access status (content transferred, content not found),
- the description of the web browser and operating system used,
- the referral link, which indicates from which page you reached ours,
- the IP address of the requesting computer, which is shortened in such a way that a personal reference can no longer be established.
- This data will only be evaluated anonymously.
Storage of the IP address for security purposes
In addition, we store the complete IP address transmitted by your web browser for a period of seven days in the interest of detecting, limiting and eliminating attacks on our web pages. After this, we delete or anonymize the IP address. The legal basis is Art. 6 para. 1 let. f) GDPR.
Data Security
We take technical and organizational measures to protect your data as comprehensively as possible from unwanted access. We use an encryption procedure on our web pages. Your data is transferred from your computer to our server and vice versa via the Internet using TLS encryption. You can usually recognize this by the fact that the lock symbol in the status bar of your browser is closed and the address line begins with https://.
Matomo
We use the web analysis tool “Matomo” to design our websites according to your needs. Matomo creates user profiles based on pseudonyms. For this purpose, permanent cookies are stored on your end device and read out by us. Through this, we are able to recognize returning visitors and count them as such.
The data processing is based on your consent in accordance with Art. 6 Para. 1 let. a) GDPR, if you have given your consent via our banner.
You can revoke your consent at any time. Please follow this link and make the appropriate settings via our banner.
- Maximum Storage Duration
- Adequate Level of Data Protection: Processing within EU/EEA
- Revocation of Consent: If you want to revoke your consent, please click here and make the appropriate setting via our banner.
Embedded Videos
On our websites, we embed videos that are not stored on our servers. To ensure that visiting our websites with embedded videos does not automatically lead to reloading of third-party content, we merely show locally stored preview images of the videos in a first step. This does not provide the third party provider with any information.
Only after a clicking the preview image, contents of the third party provider are reloaded. The third party provider is then informed that you visited our site and receives the usage data technically required in this context. Furthermore, the third party provider is then able to implement tracking technologies. We have no influence on the further data processing by the third party provider. By clicking on the preview image, you give us your consent to reload content from the third-party provider.
The embedding takes place on the basis of your consent in accordance with Art. 6 para. 1 let. a) GDPR, provided that you have given your consent by clicking on the preview image. Please note that the embedding of many videos leads to your data being processed outside the EU or EEA. In some countries, there is a risk that authorities may access the data for security and surveillance purposes without you being informed or having the right to appeal. If we use providers in insecure third countries and you give your consent, the transfer to an insecure third country is based on Art. 49 para. 1 let. a) GDPR.
- Provider: Vimeo (USA)
- Adequate Level of Data Protection: No adequate level of data protection. The data is transmitted on the basis of Art. 49 para. 1 let. a) GDPR.
- Revocation of Consent: If you clicked on a preview image, the contents of the third party provider will be reloaded immediately. If you do not wish such reloading on other sites, please do not click on the thumbnails anymore.
Newsletter Registration and Dispatch
On our website, you can order a newsletter. Please note that we need certain data (at least your e-mail address) to register for the newsletter.
The newsletter will only be sent if you have given us your explicit consent in accordance with Art. 6 Para. 1 let. a) GDPR. After signing up for the newsletter on our website, you will receive a confirmation e-mail to the e-mail address you provided (so-called double opt-in). You can revoke your consent at any time. An uncomplicated way to revoke your consent is, for example, to use the unsubscribe link provided in every newsletter.
As part of the newsletter registration process, we store further data in addition to the data already mentioned, if this is necessary to prove that you have ordered our newsletter. This may include the storage of the complete IP address at the time of the order or confirmation of the newsletter, as well as a copy of the confirmation mail sent by us. The corresponding data processing is carried out on the basis of Art. 6 para. 1 let. f) GDPR and is carried out in the interest of being able to account for the legality of the newsletter dispatch.
When sending out newsletters, we are supported by our service provider, CleverReach GmbH & Co. KG. We transmit your e-mail address to CleverReach GmbH & Co. KG, which acts for us as a strictly instruction-bound order processor. We have concluded a corresponding order processing contract with the service provider in accordance with Art. 28 para. 3 GDPR. No data will be transferred to countries outside the EU or EEA.
Other Contract Processors
In accordance with Art. 28 GDPR, we pass on your data to service providers who support us in the operation of our websites and related processes. These are e.g. hosting service providers. Our service providers are strictly instruction-bound via respective contacts.
In what follows, we list the contract processors with whom we collaborate, if we have not already done so in the above text of the data protection declaration. Should data be transferred outside the EU or EEA in this context, we will provide information on the appropriate level of data protection.
Order Processor: CDLX GmbH
Purpose: Support
Adequate Level of Data Protection: Processing only within EU/EEA
Order Processor: Hetzner Online GmbH
Purpose: Hosting
Adequate Level of Data Protection: Processing only within EU/EEA
Processing purposes and legal basis
We process your data exclusively for the purpose of selecting suitable recipients for fellowships. To be able to consider your application, the following information is inevitably required (mandatory information):
- Name and address
- E-mail address
- Letter of Motivation
- Project description
- Curriculum vitae (CV)
- Publication list
The legal basis of the processing is Art. 6 para. 1 lit. b) GDPR.
You can provide us with additional information (such as your telephone number for easier communication). This information is provided voluntarily and not mandatory for an application. If you include such voluntary details in your application or enter them on the online application mask, you agree that we process these data exclusively for the purpose of selecting applicants. You can withdraw your consent at any time. To do so, please send an e-mail to the address mentioned above.
Part of your application will be archived. Further processing is necessary to protect our legitimate interests listed below:
- Documentation of the institute’s history: As a new and permanently established institute, we would like to archive applications (and the personal data of the applicants) from the beginning on.
- Any stored data/information is to be used to monitor and evaluate our programs (e.g. with regards to participation, fit of submitted applications, reaching of target groups) and improve them.
- As it is not possible to re-apply in regularly recurring thematic calls, archiving is also necessary for tracking the applications.
The legal basis for this processing is Art. 6 para. 1 lit. f) GDPR.
Transfer of data
We will only pass on your data externally if this is permitted under data protection law. Your data may be passed on to external service providers (e.g. IT service providers) who support us in data processing strictly in accordance with instructions. This collaboration is based on data processing agreements in accordance with Art. 28 para. 3 GDPR.
As part of the selection process, it is sometimes necessary for your data to be passed on to evaluators located in countries outside the EU/EEA. These countries may not provide the same level of data protection as the EU.
If data is transferred to countries without a level of data protection comparable to the EU (such as the USA), the following risks may arise:
- access to your personal data by authorities and secret services;
- affected party’s rights are not enforceable;
- no effective legal remedies are available to you;
- control over your data is withdrawn.
We will only pass on your personal data if you consent by ticking the corresponding checkbox below the input mask on the application system. You then consent to transmitting your personal data to experts in countries outside the EU/EEA in accordance with Art. 49 para. 1 lit. a) GDPR. You can withdraw your consent at any time. To do so, please send an e-mail to the address mentioned above.
Processing purpose and legal basis
Contact initiated by you:
We process the data you provide exclusively for the purpose of processing your request. Depending on the content of your enquiry, the legal basis for this includes Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest is based on the aforementioned purpose of processing your enquiry. You can object to this processing at any time. To do so, please send an e-mail to the address mentioned above.
If your request is aimed at concluding a contract or is in connection with the implementation of the contract concluded with you, the legal basis for processing may also be Art. 6 para. 1 lit. b) GDPR.
Contact initiated by us:
To design our programs and find the most suitable candidates, we depend on the support of experts.
- Accordingly, we contact people to act as advisors or reviewers due to their expertise. We also aim to find suitable participants for thematic workshops and contact them.
- In addition, we contact, for instance, agencies, media representatives, authorities, and suppliers as part of our general business operations. Any contact detail is taken from publicly accessible sources (e.g. institutional or organisations websites).
- To encourage and to expand the discourse of our topics and results we share our discussion papers; for this purpose we compile mailing lists including institutions and individuals.
The processing of data required for establishing contact is based on Art. 6 para. 1 let. f) GDPR in the legitimate interest of involving experts in our program work and selection processes, attracting workshop particpants, and handling our business operations. The distribution of our discussion papers is based on the legitimate interest of spreading the scientific results among relevant expert groups.
If you have objected to being contacted, we will not contact you again. In order to be able to do this, we keep an access-restricted list of those people who no longer wish to be contacted.
Transfer of data
We only pass on your data to externals if this is permitted by data protection law. Your data may be passed on to external service providers (e.g. IT service providers, cloud-based virus and spam filters) who support us in data processing strictly in accordance with instructions. Data is also transferred to countries outside the EU/EEA; corresponding standard contractual clauses have been concluded.
Besides us, the respective operator of the social media platform is also responsible for processing your personal data. Insofar as we can influence this and parameterize the data processing, we try to ensure that the operator of the social media platform handles your data in ways compatible with data protection regulations. In this context, please also note the privacy policies of the respective platforms.
Data processing by us
The data provided by you on our social media sites, such as user names, comments, videos, pictures, likes, public messages, etc., are published by the social media platform and are not used by us for any other purposes. We merely reserve the right to delete content if necessary. We may share your content on our site if this is a function of the social media platform and communicate with you via the social media platform.
If you send us an inquiry through the social media platform, we may refer to other, secure communication channels that guarantee confidentiality, depending on the content. For example, you can send us your inquiries to the address or e-mail address provided in our imprint at any time. Choosing an appropriate communication channel is your own responsibility.
The legal basis for processing your data is Art. 6 para. 1 let. f) GDPR. Data processing is based on the legitimate interest of carrying out public relations work for our company and being able to communicate with you.
Some of the social media platforms generate statistics based on usage data, which contain information about your interaction with our social media site. We can neither influence nor prevent these statistics. We do not use any optional statistics offered by the social media platforms. We process this information in accordance with Art. 6 Para. 1 s. 1 let. F) GDPR in the legitimate interest of validating the use of our social media pages and improving our content oriented towards our target group.
Data processing by the operator of the social media platform
The operator of the social media platform uses web tracking methods. Web tracking can also be performed regardless of whether you are logged in or registered with the social media platform. We would like to point out that it cannot be ruled out that the provider of the social media platform will use your profile and behavioral data to evaluate your habits, personal relationships, preferences, etc.. We do not have any influence on the processing of your data by the provider of the social media platform; the use of the social media platform is at your own responsibility.
More detailed information on data processing by the provider of the social media platform, configuration options for the protection of your privacy as well as further objection options and, if available and concluded, the agreement according to Art. 26 GDPR can be found in the provider's privacy policy:
- Twitter: twitter.com/privacy
- Vimeo: vimeo.com/privacy
- Instagram: instagram.com/legal/privacy
- LinkedIn: linkedin.com/legal/privacy-policy
- YouTube: policies.google.com/privacy