Data protection declaration / information according to Art. 13 GDPR

The following declaration is aimed at all users of this website.

I. Responsible body

The body responsible for the operation of this website within the meaning of Art. 4 No. 7 GDPR is:

Human Study e.V.

Registered in the register of associations in Nuremberg VR 2314

Managing Director:  Christian Schlierf

Burgschmietstrasse 41

90419 Nuremberg

Phone: 0911 384 684 74

Mail: info@en1.human-study.org

II. Use of the website

1. General use

This website can largely be used without providing personal data. As with the use of most Internet pages, however, some of your data is processed automatically. These data are used to ensure the smooth construction and use of this website. When you open this website, the browser used on your device automatically sends various information to the server on which this website is hosted. This is the time of the page view, the browser used, the IP address of the requesting computer and the website from which the access is made. In addition, information about your operating system.

The legal basis for this data processing is Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR. The legitimate interest arises from the need for processing for smooth use. No conclusions can be drawn about the person using the data collected in this way.

2. Cookies

This site uses cookies. A cookie is a small text file. The cookie text file is generated automatically by this website. This text file is saved by your computer in a storage space allocated to your Internet browser on the hard drive of your computer. Information on the use of this website is stored in the cookie text file. This enables the requesting browser to be identified. However, this does not mean that conclusions about your identity could or would be drawn on the basis of this cookie text file.

Due to their default settings, most browsers accept the storage of cookies. However, browsers allow the possibility of no longer allowing these cookie text files to be stored. This can be done in general or to a limited extent. It is also possible to set a previous notification or a previous query. If the use of cookie text files is generally no longer permitted, there is a risk of not being able to use all the functions provided on this website in the intended manner.

The legal basis for this data processing is Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR. The legitimate interest arises from the need to collect data for smooth use. No conclusions can be drawn about the person using the data collected in this way.

III. Data collection by third parties

1. Analyze Tools (google Analytics)

This website uses Google Analytics. This service is used to analyze page usage. This service is an offer from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA. The data controller for use in the European Union is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The analysis is carried out using cookies. A cookie is a small text file. The cookie text file is generated automatically by this website. This text file is saved by your computer in a storage space allocated to your Internet browser on the hard drive of your computer. Due to their default settings, most browsers accept the storage of cookies. However, browsers allow the option to no longer allow these cookie text files to be stored. This can be done in general or to a limited extent. In this way, prior notification or a prior inquiry is also possible. The information obtained from these text files is transferred to the service provider Google on their server in the USA and stored there. Google guarantees compliance with European data protection regulations. This is done in accordance with the standard contractual clauses.

The analysis carried out by means of this service relates to the use of this website and basically also includes your IP address. The entity responsible for the operation of this website has preset the anonymization of the recorded IP address. Your IP address is not completely recorded by the system. The last digits are deleted before the transfer. Google also guarantees that this IP address will not be associated with other Google data.

Google will use the data collected to evaluate the use of this website and create and transmit a report on the use of this website for the operator. Furthermore, Google will offer the operator other services related to the use of this website and the internet. In addition, Google reserves the right to transfer the data collected to third parties. Google guarantees that it will only do this if required by law or if third parties process the data on behalf of Google.

You can further restrict the collection of data by Google. There are add-ons for many browsers, for example. This should make it possible to further restrict the collection of data by Google Analytics or to prevent it entirely. Tools that can help you can be found on this page: https://tools.google.com/dlpage/gaoptout

You can find the data protection provisions of Google at https://policies.google.com/privacy

Instructions for managing your data on Google can be found at http://www.dataliberation.org/

Should you require further information on Google Analytics: Terms of use for Google Analytics http://www.google.com/analytics/terms/de.html

Information on data protection from Google Analytics https://support.google.com/analytics/answer/6004245

The legal basis for this data processing is your consent, Art. 6 Para. 1 S. 1 lit. a GDPR. You can revoke your consent at any time. The processing carried out up to the point of revocation remains lawful even after revocation.

2. Hosting

This website is hosted on a server from Host Europe GmbH. You can find their data protection regulations at

https://www.hosteurope.de/AGB/Datenschutzerklaerung/

3. Google Maps

This website uses the Google Maps map service offered by Google. This service is an offer from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA. The data controller for use in the European Union is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

This service cannot function without the processing of personal data. Your IP address and data will be transmitted to the server of the service provider Google in the USA via the system you are using and processed there. Google guarantees compliance with European data protection regulations. This is done in accordance with the standard contractual clauses.

You can find the terms of use of Google Maps at

https://www.google.com/intl/de_de/help/terms_maps.html

You can find the data protection provisions of Google at

https://policies.google.com/privacy

Instructions for managing your data on Google can be found at

http://www.dataliberation.org/

The legal basis for this data processing is Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR. The legitimate interest arises from the possibility created by this to enable the person concerned to use the map function.

4. Google Webfonts

This website uses Google web fonts. Google Web Fonts is an offer from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA. The data controller for use in the European Union is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The font used is loaded from a Google server when this website is accessed. Your IP address and data will be transmitted to the server of the service provider Google in the USA via the system you are using and processed there. Google guarantees compliance with European data protection regulations. This is done in accordance with the standard contractual clauses.

The data protection provisions for the use of Google Web Fonts can be found at

https://developers.google.com/fonts/faq

You can find the data protection provisions of Google at

https://policies.google.com/privacy

You can set your browser so that it does not load any fonts from Google servers. If Google web fonts cannot be used, this has no effect on the general functionality of this website.

The legal basis for this data processing is Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR. The legitimate interest arises from the creative possibilities that result from the use of unusual fonts.

5. Facebook

This website uses components from Facebook. Facebook is a social network. This service is an offer from Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025. The data controller for use in the European Union is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2 Ireland.

When this website is accessed, the components of the Facebook company integrated on this website establish contact with the service provider’s servers. Your data will be passed on to Facebook. It can be assumed that data will be transmitted to servers in the USA. Facebook ensures compliance with the European data protection rules in accordance with the requirements of the Privacy Shield and is listed as active there:

https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

If you have a Facebook user account, Facebook will link the processed data to this account and add it to the profile that has been created for you there. This is especially the case if you share a post on this website or click the “Like” button.

Further information on how Facebook handles personal data can be found in their data policy at https://de-de.facebook.com/about/privacy . There you will also find options for deleting the data you have processed.

Most browser providers also offer add-ons that are intended to prevent data processing by Facebook (Facebook blocker).

The legal basis for this data processing is Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR. The legitimate interest arises from the simplified communication and distribution options for content and the widespread use of social media offers. Today, many users also expect Internet offers to be linked to social media platforms.

6. reCAPTCHA

This website uses the reCAPTCHA service to distinguish whether the website is being accessed by a person or by a bot. This is to prevent misuse of the site and spam. This service is an offer from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA. The data controller for use in the European Union is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When this website is accessed, the service collects various user data. This is the IP address of the requesting computer, information about the operating system, the browser used and the website from which access is made. In addition, mouse movements and keystrokes. This data is transmitted to Google. It can be assumed that this data will be transmitted to servers in the USA. Google guarantees compliance with European data protection regulations. This is done in accordance with the standard contractual clauses.

You can find more information on how Google handles personal data in their privacy policy https://policies.google.com/privacy

The legal basis for this data processing is Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR. The legitimate interest arises from the protection of the improper use of the website.

7. YouTube

This website uses YouTube to make its own videos publicly available. YouTube is a social network. This service is an offer from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA. The data controller for use in the European Union is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit our website, contact is made with the service provider’s servers to retrieve the video included on this website. Your data will be passed on to Google. It can be assumed that data will be transmitted to servers in the USA. Google guarantees compliance with European data protection regulations. This is done in accordance with the standard contractual clauses.

If you have a user account with Google / YouTube, Google will link the processed data to this account and add it to the profile that has been created for you there.

Google offers you the option of opting out at https://adssettings.google.com/authenticated.

You can find more information on how Google handles personal data in their privacy policy https://policies.google.com/privacy

Instructions for managing your data on Google can be found at http://www.dataliberation.org/

The legal basis for this data processing is Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR. The legitimate interest arises from the simplified communication and distribution options for content and the widespread use of social media offers. Many users nowadays also expect internet offers to be linked to social media platforms and videos to be integrated into internet sites.

8. LinkedIn

This website uses components from LinkedIn. LinkedIn is a social network. This service is an offer from LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

When you visit this website, the LinkedIn components integrated on this website establish contact with the service provider’s servers. Your data will be passed on to LinkedIn. It cannot be ruled out that data will be transmitted to servers in the USA. If you have a user account with LinkedIn, then LinkedIn will link the processed data to this account and add it to the profile that has been created for you there. This is especially the case if you share a post on this website. LinkedIn ensures compliance with the European data protection rules in accordance with the requirements of the Privacy Shield and is listed as active there: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

You can find more information about the handling of personal data by LinkedIn in their privacy policy https://www.linkedin.com/legal/privacy-policy

The legal basis for this data processing is Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR. The legitimate interest arises from the simplified communication and distribution options for content and the widespread use of social media offers. Today, many users also expect Internet offers to be linked to social media platforms.

9. Stripe

This website works together with Stripe to process payments. Stripe is a payment service provider. This service is an offer from Stripe Inc., 510 Townsend Street, San Francisco, CA 94103 USA.

When the contract is concluded, it is possible to process the payment via Stripe. The processing of such a payment requires the transmission of personal data. In addition to the surname, first name and address, this data usually also includes the e-mail address, the IP address and the telephone number. In addition, there are other data that are necessary for processing an order. Stripe also uses cookies. A cookie is a small text file. The cookie text file is generated automatically by this website. This text file is saved by your computer in a storage space allocated to your Internet browser on the hard drive of your computer. Information on the use of this website is stored in the cookie text file. This enables the requesting browser to be identified. However, this does not mean that conclusions about your identity could or would be drawn on the basis of this cookie text file.

Due to their default settings, most browsers accept the storage of cookies. However, browsers allow the option to no longer allow these cookie text files to be stored. This can be done in general or to a limited extent. It is also possible to set a previous notification or a previous query. If the use of cookie text files is generally no longer permitted, there is a risk of not being able to use all the functions provided on this website in the intended manner.

It can be assumed that this data will be transmitted to the USA. Stripe ensures compliance with the European data protection rules in accordance with the requirements of the Privacy Shield and is listed as active there: https://www.privacyshield.gov/participant?id=a2zt0000000TQOUAA4&status=Active

Further information on how Stripe handles personal data can be found in their privacy policy https://stripe.com/de/privacy

The legal basis for this data processing is Art. 6 Para. 1 S. 1 lit. b GDPR.

If necessary, Stripe will carry out a credit check. To carry out such a credit check, data is passed on to credit agencies. The legal basis for this data processing is Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR. The legitimate interest is to minimize the risk of default.

IV. Contact form

You have the option of contacting us using the contact form provided on this website or by email. The data transmitted in this way will be stored for the duration of the communication or until the request has been processed.

There will be no transfer of personal data that has arisen as a result of such contact to third parties without your express consent.

The legal basis for this data processing can be Article 6 Paragraph 1 Sentence 1 Letter a GDPR. This requires prior consent. In principle, it is also possible to give this consent implicitly, for example by deliberately transmitting data. In the case of data processing, in accordance with Art. 6 Paragraph 1 Clause 1 lit. The data processing carried out up to then remains lawful despite the revocation.

The legal basis for this data processing can also be Article 6, Paragraph 1, Sentence 1, Letter b of the GDPR. This is the legal basis for data processing in the context of a contractual relationship.

V. Confidentiality of Communication

Communication with this website is encrypted. This site uses an SSL certificate for encryption. This is currently the most common encryption method. This encryption protects against transmissions or communication between your computer and this website from being read by third parties. You can ensure the confidentiality of communication by e-mail yourself by setting up encryption.

VI. Data storage

Unless other periods regarding the storage period have been expressly stated in this declaration, the storage period of the processed data is based on the relevant legal regulations.

VII. Rights of data subjects

As already stated in the points above, you could be affected by the processing of personal data due to the use of this website or due to the voluntary transmission. As a data subject, you can request information from the responsible body (see point I. above) about the data processed by this body free of charge (Art. 15 GDPR).

In addition, a data subject can request the correction of the processed data (Art. 16 GDPR) or deletion (Art. 17 GDPR). In addition, in accordance with the statutory provisions, the restriction of the processing of personal data (Art. 18 GDPR) can be requested. Affected persons have a right to object to processing that has taken place on the basis of a survey based on Art. 6 Para. 1 S. 1 lit. e or f GDPR (Art. 21 GDPR). It is also guaranteed that the right to data portability (Art. 20 GDPR) will be guaranteed. To exercise these rights, please contact the person responsible for this website (see point I. above).

VIII. Right of appeal

If you notice one or more data protection violations on this website, you have the right, in addition to other out-of-court and judicial remedies, to complain about these violations to a data protection authority. A list of data protection authorities based in Germany, among others, can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

The supervisory authority responsible for this website is the Bavarian State Office for Data Protection Supervision, Promenade 27, 91522 Ansbach. You can find an online complaint form there at: https://www.lda.bayern.de/de/beschwerde.html

IX. Subject to change

We expressly reserve the right to change or adapt this data protection declaration at any time. This applies in particular if there has been a change in legal requirements or case law.

Status: September 2021