Data Policy

Data Privacy

Information in accordance with Section 5 of the Telemedia Act:

The Fraunhofer Information Center for Space and Construction IRB 
Nobelstrasse 12 
70569 Stuttgart 
Telephone: +49 711 970-2500 
Fax: +49 711 970-2508 
Email: irb(at)irb.fraunhofer.de

is a legally independent institution of the

Fraunhofer Society 
for the Promotion of Applied Research eV 
Hansastrasse 27 c 
80686 Munich 
Email: info(at)zv.fraunhofer.de 
Internet: www.fraunhofer.de

Sales tax identification number in accordance with Section 27a of 
the Sales Tax Law: DE 129515865

Registration 
court: Munich District Court 
Registered association 
Registration number VR 4461

Board of directors 
Prof. Dr.-Ing. Holger Hanselka | President 
Prof. Dr. Axel Müller-Groeling | Member of the Board of Directors 
Ass. jur. Elisabeth Ewen | Member of the Board of Directors 
Dr. Sandra Krey | Member of the Board of Directors

Note on EU dispute resolution

The European Commission provides a platform for online dispute resolution (OS): [Insert link to the EU online dispute resolution platform]. You can find our email address above in the imprint.

Please note that the above email address was entered in a way that is unreadable for spam bots (at) and must be replaced by the correct @ sign when used.

Disclaimer

Privacy Policy

Toolbox

When you use this website, we, as the data controller, process your personal data and store it for as long as necessary to fulfill the specified purposes and legal obligations. Below, we inform you about what data is involved, how it is processed, and what rights you have in this regard.

Personal data is defined in Art. 4 No. 1 of the General Data Protection Regulation (GDPR) as any information relating to an identified or identifiable natural person.

  1. Scope
  2. Name and contact details of the controller and the data protection officer
  3. Processing of personal data and purposes of processing
  4. Disclosure of data
  5. Cookies
  6. Rights of data subjects
  7. Data security
  8. Updating and changing this privacy policy

1. Scope

This privacy policy applies to data processing on the website https://www.toolbox-lernformate.de of the Fraunhofer Information Center for Building and Urban Technology, which refers to this privacy policy.

2. Name and contact details of the controller and the company data protection officer

The controller is:

Fraunhofer-Gesellschaft
for the Promotion of Applied Research e.V.

Hansastraße 27 c
80686 Munich

for its Fraunhofer Information Center for Building and Spatial Planning

Nobelstraße 12
70569 Stuttgart

(hereinafter referred to as Fraunhofer IRB)

Email
irb@irb.fraunhofer.de

Phone:
+49 711 970250

Fax
071197025

The Fraunhofer data protection officer can be contacted at the above address, for the attention of the data protection officer, or atdatenschutz@zv.fraunhofer.de. If you have any questions about data protection law or your rights as a data subject, you can contact our data protection officer directly at any time.

Alternatively, you can contact Dr. Anh Mattick atanh.mattick@irb.fraunhofer.de.

3. Processing of personal data and purposes of processing

When you visit the website

When you visit our website and access its content, data that may allow identification is temporarily stored. The browser used on your device automatically sends this information to our website's server. The following data is collected:

  • Date and time of access
  • IP
  • Host name of the accessing server
  • Website from which our website was accessed
  • Page visited on our website
  • Message indicating whether the call was successful
  • Amount of data transferred
  • Information about the browser type and version used
  • Operating

The temporary storage of data is necessary for establishing a connection and for the visit to our website to proceed so that we can provide you with the content on our website.

Further storage in log files takes place to ensure the functionality of the website, the security of the information technology systems, and the smooth provision of our website, as well as to be able to track any illegal attacks on it if necessary.

If technical data from your device is processed to enable access to our website, this is done because this data is required in accordance with Section 25 (1) No. 2 TDDDG.

The IP address is processed for technical and administrative purposes, to establish and maintain the connection, to ensure the security and functionality of our website, and to be able to prosecute any illegal attacks on it if necessary. The legal basis is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

We cannot draw any direct conclusions about your identity from the processing of the aforementioned data in the log file. This is temporarily stored in a so-called log file and deleted after 30 days.

In addition, we may use cookies and analysis services when you visit our website. If this is the case, you will find more detailed information below in this privacy policy.

 

When creating a user account

On our website, you have the option of creating a password-protected user account.

To set up a user account, we require the following information from you:

As a user:

  • First name (required)
  • Last name (required)
  • Company name (required)
  • Position (optional)
  • Email address (required)
  • Password (required)
  • Confirm password (required)
  • IP (required)

As a provider:

  • First name (required)
  • Last name (required)
  • Company name (required)
  • Position (optional)
  • Company location(s) (optional)
  • Email
  • Password (required)
  • Confirm password
  • Company location (optional)
  • IP (required)

This data is processed in order to identify you as a user and create your user account. You must create a user account on our platform in order to provide information about yourself and your company as a provider.

In addition, you must provide a password of your choice to set up your user account. Together with your email address, this will allow you to access your user account. You can view and change the data stored about you in your user account at any time.

You can also voluntarily provide the following information:

User/Provider when logging in: Position.

This information is voluntary and not required to create a user account. We use this information to expand our offering in line with the needs of the target group.

Information when logging in: This information helps us to determine which target group is using the Toolbox. This enables us to offer customized products and optimize the Toolbox.

Information when registering for a learning format: This information is used to enable users to contact the respective provider company.

Data processing is carried out at your request and is necessary for the purposes specified in Art. 6 (1) (b) GDPR for the creation of your user account and its use, as well as for the pre-contractual measures required for this. We also use your email address for notification functions.

After deletion of your user account, your data will be deleted for further use, unless we are obliged to store it for longer periods in accordance with Article 6 (1) (c) GDPR due to tax and commercial law storage and documentation obligations (in particular § 147 AO, if relevant for tax purposes) or you have consented to further storage in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. It is possible to register as a provider for certain learning formats and to store information about your own company there so that potential customers become aware of the company. For this purpose, input fields with the relevant information can be filled in after creating an account. The following input fields are available:

Company name

  • Company address
  • Name of contact person
  • Email address of the contact person
  • Upload practical examples
  • Upload templates

Registration is always done per learning format. Each provider can register for 10 different learning formats. The information provided (see above) is visible on the Internet when the page is accessed. We use your email address to inform you about important changes, including changes to the privacy policy. The legal basis for this is the legitimate interest pursuant to Art. 6 (1) lit. f GDPR. It is our legitimate interest to inform you about necessary adjustments to the Toolbox.

We evaluate user behavior anonymously using Matomo.

The following data is collected in accordance with your cookie settings:

  • IP address (anonymized to two digits)
  • Length of stay
  • User actions
  • Date and time of visit
  • Location (imprecise, as IP is anonymized)
  • Browser and browser language
  • Data on the device used, screen resolution
  • Data about the software used: operating system, browser

Your IP address is recorded for security reasons so that any attacks can be traced back.

Your personal data will also be processed on the basis of legitimate interest pursuant to Art. 6 (1) lit. f GDPR. Our legitimate interest is to further optimize the Toolbox offering. This processing enables us to provide you with an improved user experience and offer you customized features and services.

4. Sharing of data

If we pass on personal data that we collect via the website to processors, we will inform you of this in this privacy policy for the respective data processing operation, specifying the specific recipient.

Otherwise, we will only pass on your personal data if

  • You have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR;
  • this is necessary for the performance of a contract with you (for example, when passing on data to shipping companies for the purpose of delivering the goods you have ordered or when passing on payment data to payment service providers or credit institutions in order to carry out a payment transaction);
  • there is a legal obligation to transfer the data in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR.

The data transferred may only be used by the recipients for the purposes stated.

5. Cookies

General

We use cookies on our website. Cookies are small files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, Trojan horses, or other malware.

Information is stored in the cookie that is related to the specific device used. However, this does not mean that we are immediately aware of your identity.

Overview of the cookies we set:

Cookie name: Purpose

cookie_consent: Selection of cookie settings
SESS… / SSESS: Session ID
_pk_id.*: Matomo unique visitor ID
pk_ses.*: Matomo session data
mtm_consent_rem oved: Matomo consent withdrawn flag

Cookies that are not strictly necessary for the provision of a web service you have expressly requested will only be set with your consent. You can give this consent via the cookie banner displayed when you visit the website. The legal basis for the processing of your data is your consent in accordance with Section 25 TDDDG and Art. 6 (1) (a) GDPR, i.e. these cookies are only used with your consent.

Necessary cookies

The processing of personal data within the scope of technically necessary cookies is necessary so that we can provide the web services you have requested. The legal basis for this use of necessary cookies is § 25 para. 2 no. 2 TDDDG and Art. 6 para. 1 sentence 1 lit. f GDPR.

Right of withdrawal

You have the right to withdraw your consent to the storage and access of cookie content at any time with future effect in accordance with Art. 7 para. 3 GDPR or to object to the use of non-technically necessary cookies in whole or in part.

If you withdraw your consent or object to the use of cookies, we will set a cookie (opt-out cookie) that documents your decision and enables us to implement it. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website. Your revocation does not affect the lawfulness of the processing activities we have carried out that are necessary to provide you with the website in accordance with Section 25 (2) TDDDG and Art. 6 (1) (1) (f) GDPR.

Web tracking with Matomo

We use the open source software Matomo from InnoCraft Ltd in New Zealand on our website to analyze user behavior when visiting our site and to optimize our site and its content accordingly. We do not receive any information that directly identifies you.

The version of Matomo we use complies with DoNotTrack technology (see www.donottrack.us), which means that your visit to our website will not be recorded if you have indicated in your internet browser settings that you do not wish to be tracked.

In connection with the use of Matomo, cookies are used to enable statistical analysis of your use of this website. The cookie stores information—including personal information—about your visitor behavior and processes it in a usage profile for analysis purposes using a pseudonym. Since Matomo is hosted on our own server, processing by third parties is not necessary for the analysis.

The data obtained in this way will not be used to identify you personally without your express consent, and the data will not be merged with personal data about you as the bearer of the pseudonym.

If IP addresses are collected, they are anonymized immediately after collection by deleting the last number block.

The data obtained through cookies and other web analysis/tracking methods is processed on the basis of your consent to the optimization of our online offering and our website, e.g. in the form of adaptation to frequently used end devices and browser , more publications on particularly popular topics (§ 25 para. 1 TDDDG and Art. 6 para. 1 sentence 1 lit. a GDPR). You can revoke your consent at any time with future effect. You can find more information on this in the section on revoking cookies.

The type and scope of the data processed and the duration of storage can be found in the list of cookies we set.

6. Rights of data subjects

You have the right:

  • to withdraw your consent at any time in accordance with Art. 7 para. 3 GDPR. As a result, we will no longer be allowed to continue processing the data based on this consent in the future;
  • pursuant to Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, and the existence of automated decision-making, including profiling and, if applicable, meaningful information about its details;
  • pursuant to Art. 16 GDPR, to request the immediate rectification of inaccurate personal data stored by us or to request that your personal data be completed;
  • pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest or for asserting, exercising or defending legal claims;
  • pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to have it deleted and we no longer need the data, but you require it for the assertion, exercise or defend legal claims or you have objected to the processing pursuant to Art. 21 GDPR;
  • pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller; and
  • in accordance with Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our association's registered office for this purpose.

Information about your right to object pursuant to Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data processing based on a balancing of interests); This also applies to profiling based on this provision in Article 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

If your objection is directed against the processing of data for direct marketing purposes, we will cease processing immediately. In this case, it is not necessary to specify a particular situation. This also applies to profiling insofar as it is related to such direct marketing.

If you wish to exercise your right to object, simply send an email to datenschutzkoordination@zv.fraunhofer.de.

7. Data security

All data you submit personally is encrypted using the standard TLS (Transport Layer Security) protocol. TLS is a secure and proven standard that is also used in online banking, for example. You can recognize a secure TLS connection by the "s" appended to "http" (i.e., "https://..") in the address bar of your browser or by the lock symbol in the lower area of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

8. Up-to-date status and changes to this privacy policy

Due to the further development of our website and offers or due to changes in legal or official requirements, it may be necessary to change this privacy policy. The current privacy policy can be accessed and printed out at any time on our website.