Data protection information

We take the protection of your personal data very seriously and would therefore like to inform you below about your rights and the type and scope of the respective data collection.

1. Responsible person and data protection officer

Contact details of the person responsible Person responsible for the processing within the meaning of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG):

Research Institute for Post-Mining Landscapes e.V.
Brauhausweg 2
03238 Finsterwalde
Telephone: +49 (0) 3531 – 7907 18
E-mail: fib@fib-ev.de
Contact details of the data protection officer. We have appointed a data protection officer in the company. You can achieve this in all matters relating to your personal data as follows:

Sandra Leist
Werk3 for Data Protection
Letteallee 3
13409 Berlin
E-mail: dsb@datenschutz-werk.de

2. Information on the processing of personal data

We process your personal data through various technical possibilities and, if necessary, also with the increase of other service providers. We would like to inform you about the specific details of the processing in the following points.

Visit our website

• When you visit our website, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

–          IP address and service provider
–          Date and time of the request
–          Content of the request (specific page)
–          Access status/HTTP status code
–          amount of data transferred in each case
–          Website from which the request comes
–          Browser incl. language and software version
–          Operating system and its interface

• The data listed in paragraph 1 is also automatically stored in the log files (log file) of our server. The log data is stored separately from other data and can only be viewed by the hoster. The storage period of the log data is seven days. The legal basis for the processing of your data when visiting our website is Art. 6 para. 1 sentence 1 lit. f GDPR, § 25 para. 2 No. 2 TTDSG.

Use of cookies

• In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive associated with the browser you are using and through which certain information flows to the body that sets the cookie. Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective.
• This website uses the following types of cookies, the scope and functionality of which are explained below:
• Transient cookies
• Persistent cookies
• Transient cookies are automatically deleted when you close your browser. This includes, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.
• Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
• You can configure your browser settings according to your wishes and also refuse the acceptance of third-party cookies or all cookies. We would like to point out that you may then not be able to use all the functions of this website.
• The legal basis for the use of cookies is point (f) of the first sentence of Article 6(1) of the GDPR. If you have given us your consent to the setting of cookies, Art. 6 (1) sentence 1 lit. a GDPR is an additional legal basis for the use of cookies.

Use of the contact form

(1)        When you contact us via the contact form on our website, the data you enter (your e-mail address and optionally your name and the other data you provide) will be stored by us at the time of sending to process your request.
(2)        As an alternative to the contact form, you can also contact us via the e-mail address provided on our website, which can be found in the imprint.
(3)        You can declare the processing of your personal data at any time by sending an e-mail to the person(s) listed in section 1 above. If you contact us directly by e-mail, you can object to the processing of your personal data at any time by the same means.
(4)        We delete the data arising in this context after storage is no longer required, or restrict processing if statutory storage obligations exist. The legal basis is point (f) of the first sentence of Article 6(1) of the GDPR.
(5)        If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing of your personal data is Art. 6 para. 1 sentence 1 lit. b GDPR.

Registration for events
We regularly organize various events for the purpose of making our daily work and ongoing projects known. When you register for an event, we collect your family and first name and your job and enter them in the list of participants. The list of participants is only known to the registered participants and the respective employees of the Research Institute for Post-Mining Landscapes e.V. In addition, photos will be taken at our events. These are produced and published for documentation purposes and for publication on our website, our social media channels and, if applicable, local print media. If you do not want any photos, contact the photographer on site or write us an e-mail. You have a right of withdrawal at any time. Then we will remove your images from the digital media from the revocation and will not use them for any further print editions. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is to capture the mood of the event.

Audio and video conferencing

(1) We also use video conferencing systems for communication with our business partners. This allows us to communicate effectively and share content despite spatial separation in meetings. The legal basis for the use of videoconferencing systems is Article 6(1)(b) GDPR, insofar as it concerns contract-relevant communication. Otherwise, we base the processing of personal data on our legitimate interest in the effective conduct of online meetings, Art. 6 (1) (f) GDPR. If you are explicitly asked for your consent, e.g. to record certain content, Art. 6 (1) (a) GDPR constitutes the legal basis

(2) When using videoconferencing systems, various data are processed. At the beginning of the meeting, you may be asked for your name, e-mail address and password. However, this data and any content of our meeting will only be processed for the duration of the respective meeting. Furthermore, technical data necessary for the implementation and processing of online communication are processed. This includes meeting metadata and connection data, in particular the IP address and client information. This data will be deleted immediately after the end of the meeting.

(3) Your personal data will not be passed on to third parties unless they are intended for this purpose. That’s why we also operate the video conferencing systems on our own servers.

(4) Further information from the providers: Jitsi Meet (open source software), https://jitsi.org/jitsi-meet/; BigBlueButton (open source software), https://docs.bigbluebutton.org/admin/privacy.html.
Integration of OpenStreetMap

•    On this website we use the offer of OpenStreetMap. OpenStreetMap is a free project with the aim of creating a free world map, which is offered on the basis of the Open Data Commons Open Database License (ODbL) by the OpenStreetMap Foundation (OSMF). This allows us to display interactive maps directly on our website and enables you to conveniently use the map function. The legal basis for the use of OpenStreetMap is point (f) of the first sentence of Article 6(1) of the GDPR.
• By visiting the website, OpenStreetMap receives the information that you have accessed the corresponding subpage of our website. In addition, the data referred to in Section 3, ‘Use of cookies’ and ‘Visit to our website’, of this declaration are transmitted. To our knowledge, data when visiting our website is processed by OpenStreetMap exclusively for the purpose of displaying the map functions and caching the selected settings.
• Information from the provider: OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom (https://wiki.osmfoundation.org/wiki/Main_Page. Further information on the purpose and scope of the data collection and its processing as well as further information on your rights in this regard and settings options for the protection of your privacy can be found at: https://wiki.openstreetmap.org/wiki/Privacy_Policy and https://wiki.openstreetmap.org/wiki/EN:Legal_FAQ.

Our projects in social networks Meta-platforms : Facebook and Instagram Jointly responsible for the operation of this social media site are within the meaning of the EU General Data Protection Regulation and other data protection regulations which:

Meta Platforms Ireland Ltd.,4 Grand Canal Square, Grand Canal Harbour in Dublin 2 Ireland and Research Institute for Post-Mining Landscapes, Brauhausweg 2 in 03238 Finsterwalde.

We operate this site in order to draw attention to our services and products and to contact you as a visitor and user as well as our website. Further information about us and our activities in the company can be found on our website. As the operator of the social media site, we have no interest in the collection and further processing of your individual personal data for analysis or marketing purposes. The operation of this social media site, including the processing of users’ personal data, is based on our legitimate interests in providing up-to-date and supportive information and interaction for and with our users and visitors in accordance with Article 6(1)(f) GDPR. We are aware that Meta uses the data of the users for advertising (analysis, creation of personalized advertising), for the creation of user profiles and for market research. Meta uses cookies to store and further process this information, i.e. small text files that are stored on the various end devices of the users. If the user has his own profile and is logged in to it, the storage and analysis also takes place across devices. Meta’s privacy policy contains further information on data processing: https://www.Meta.com/about/privacy/

Objection options (so-called opt-out) can be found here:

https://www.Meta.com/settings?tab=ads and set here http://www.youronlinechoices.com. The transfer of data to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://en-en.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php. The legal basis is supplemented by Article 45(1) GDPR, the adequacy decision between the USA and Europe. Read at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000GnywAAC&status=Active

Statistical data

The so-called “insights” of the social media page provide statistical data. Different categories are available to me/us. These statistics are generated and provided by Meta. As the operator of the site, we have no influence on the generation and presentation. We cannot turn off this function or prevent the generation and processing of the data. For a selectable period of time and in each case for the categories fans, subscribers, reached persons and interacting persons, the following data is provided to us by Meta in relation to our social media page: Total number of page views, Likes, Page activity, Post interactions, Reach, Video views, Post reach, Comments, Shared content, Replies, Proportion of men and women, Country and city origin, Language, Shop views and clicks, Route planner clicks, Phone number clicks. We use this data to make our posts and activities more attractive to users. For example, we use the distributions by age and gender for an adapted approach and the preferred visiting times of the users for a time-optimized planning of our contributions. Information about the type of end devices used by visitors helps us to adapt the contributions visually and creatively to them. According to the terms of use that each user has agreed to in the context of creating a profile, we can identify the subscribers and fans of the site and view their profiles and other shared information from them.

Rights of users

Since only Meta has full access to the user data, we recommend that you contact Meta directly if you want to ask information requests or other questions about your rights as a user (e.g. right to deletion). You can contact Meta’s Data Protection Officer via the online contact form provided at https://www.Meta.com/help/contact/540977946302970. If you need support or have any other questions, please do not hesitate to contact us.

Right to object

If you no longer wish the data processing described here to take place in the future, please remove the connection of your user profile to our site by using the functions ‘I no longer like this page’ and/or ‘No longer subscribe to this page’.

Further information on data processing and your rights can be found in the privacy policy of the providers:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Data protection information: https://policies.google.com/privacy; Opt-out: https://adssettings.google.com/authenticated.

• Spreaker, Voxnest, Inc., 20880 Stone Oak Parkway, San Antonio, TX 78258; Data protection information: https://www.spreaker.com/privacy, Opt-Out: http://www.youronlinechoices.com/.

• Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden; Data protection information: https://www.spotify.com/en/legal/privacy-policy/.

Transfer to third countries

In some cases, your data is transmitted by external service providers to servers outside the EU (so-called third countries). The data transfer to third countries does not take place via our website, but can be in connection with our online presence in social networks and platforms. We carefully select these service providers and assess the respective level of data protection.

The following companies receive data in third countries outside the European Union as part of our social media activities.

• Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; https://www.facebook.com/policy.php

• Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=en

• Spreaker, Voxnest, Inc., 20880 Stone Oak Parkway, San Antonio, TX 78258; https://www.spreaker.com/privacy

• Your rights

You have the following rights vis-à-vis us with regard to the processing of your personal data, which you can assert informally at any time vis-à-vis the contact person listed above in 2.

Right to information Upon request, we will provide you with information about which personal data we have stored about you for what purpose, for what duration, from what source and on what legal basis and whether we have disclosed these to third parties.

Right to rectification

If it turns out that the personal data you have in our possession is incorrect or incomplete, we will correct or supplement it immediately upon request.

Right to erasure (right to be forgotten)

You have the right to have your personal data deleted immediately, unless there is a statutory retention obligation for this.

Right to restriction of processing

You can ask us to restrict the processing of your personal data.

Right to object to processing

You can object to the processing of your personal data at any time. This applies in particular if the legal basis for the processing is point (f) of the first sentence of Article 6(1) of the GDPR.

Right to data portability

You have the right to receive the personal data we hold about you in a universally readable format.

Right to lodge a complaint with a supervisory authority

You also have the right to complain to the competent data protection supervisory authority about the processing of your personal data by us. https://www.lda.brandenburg.de/lda/en/ We kindly allow you to point out that the exercise of your rights in individual cases may be subject to the existence of certain conditions. No Obligation to Deploy & Consequences of Non-Deployment The provision of personal data is not required by law or contract and you are not obliged to provide data. As part of the input process, we will inform you if the provision of personal data is necessary for the respective service (e.g. by means of the designation as a ‘mandatory field’). If data is required, non-provision means that the service in question cannot be provided.

Storage period of your data

We process your personal data, as far as necessary, for the duration of the business relationship, as long as it is necessary for the aforementioned purposes and in addition in accordance with the legal storage and documentation obligations, which arise in particular from the Tax Code and the German Commercial Code and usually amount to 10 years. In addition, personal data may be stored and retained for as long as the data is relevant to pending judicial or administrative proceedings in which the controller has a party status.

Ensuring data security and data protection

In order to ensure the protection and security of your personal data, we implement a variety of technical and organizational security measures, the effectiveness of which we regularly review.

Situation as of January 2024

Glossar

Personal data

Personal data means any information relating to an identified or identifiable natural person (‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more specific characteristics that are an expression of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Affected person

A data subject is the data subject whose personal data are processed by the controller.

workmanship

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Pseudonymisation

Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

responsible

The controller is the person who decides on the purposes and means of the processing of personal data and also carries them out accordingly.

Processor

The processor is another natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.

recipients

The recipient is a natural or legal person, public authority, agency or other body to which personal data are disclosed.

consent

A data subject’s consent is any freely given, specific, informed and unambiguous indication of his or her wishes in the form of a statement or other clear affirmative action by which the data subject indicates his or her agreement to the processing of personal data concerning him or her.

Violation of the protection of personal data

A personal data breach is a breach of security that leads to the destruction, loss or alteration, whether accidental or unlawful, or to the unauthorised disclosure of or access to personal data transmitted, stored or otherwise processed.

Health data

Health data are personal data relating to the physical or mental health of a natural person, including the provision of health services, which reveal information about their state of health.

regulator

The supervisory authority is an independent state body set up by a Member State in accordance with Article 51 of the GDPR, which is responsible for monitoring compliance with data protection laws and regulations.