Personal information is information that can be used to identify you. This includes information such as your name, postal or IP address (if not anonymized), telephone number, and email address, but not information that is not associated with your identity (such as anonymous log files in which the used browser types are logged).

Data provided by you (e.g., data input via a web form) can be or contain personal data. We store your data only at your request and to the extent needed (for example, for registration for an event) or for data backup. The specific use of such data is indicated in the respective context.

When you view the web pages of the above-named website, a log file is automatically created and stored on the server. Such files contain the web page you visited, the previous website you visited just before ours (in case it was a search engine, also the terms entered), date, time, the operating system you are using, features of the display (resolution in pixels and the so-called pixel-ratio for the detection of high-resolution displays), and the browser you are using (Internet Explorer, Firefox, Opera, etc.). Additionally, the size of the transferred data amount, a so-called HTTP status code (for example to identify a successfully transmitted web page), and the IP address of your computer (e.g., PC or smartphone) – whereby the IP address is immediately anonymized through deletion of the last octet of the address – are also stored.

The collection and use of information stored in the log file is only for anonymous evaluation for statistical purposes (for example, an analysis of user behavior, which pages of the website are accessed, which browsers are used, etc.) and thereby to improve our services. A mapping of IP address to the user ID does not occur. It is not possible to trace the analysis results to a specific IP address.

The information processed as explained above (see points 1 and 2) is electronically collected and used by Freie Universität Berlin, the Center for Digital Systems (CeDiS) and stored centrally by Freie Universität Berlin's Hochschul-Rechenzentrum (ZEDAT).

The information is not disclosed to third parties or used outside of Freie Universität Berlin, unless you have given us your consent to do so or we are required or authorized by law to do so (for example, in relation to law enforcement, presumed plagiarism, or other copyright infringements).

Like other organizations, we use so-called cookies. Cookies are small files that are stored in special file directories on your computer (unless you block them). Information about your visit to our website can be stored in cookies.

Our cookies do not contain personal data (such as IP addresses or login data), but rather only anonymous session IDs. Some of the cookies we use will remain on your computer so that our web server can recognize your computer the next time you visit our website. Most browsers (Internet Explorer, Firefox, Opera, etc.) are set by default to accept cookies. You can set your browser to reject cookies or request a confirmation from you.  However, if you disable or reject cookies, it is possible that you will not be able to use certain features of the website.

The legal basis for the processing of personal data using cookies is Article 6 (1) of the General Data Protection Regulation (GDPR).

Java and Javascript applications are used on the web pages of the above-named domain. You can set your browser – if necessary, by using free add-ons – to reject the execution of such applications or to request confirmation from you. If you reject these applications, it may be possible that you cannot use certain features of the website.

The Google Custom Search Engine (Google CSE) is integrated in the website of [XXX]. In the header of each web page, there is a search box labeled “Search with Google™”. The integrated search service provides a full-text search for content of [XXX].

Users will readily notice the search box at the top of the website of [XXX] that is labeled “Search with Google™.”

Activating the Search

Users can activate the search function by entering a search term in the search box and pressing "Enter" or the search icon (magnifying glass icon). Due to the plugin provided by Google, the search results page automatically reloads with the appropriate search results. During this process data are transferred to the search engine.

Viewing the Results Page

The plugin that is developed and made available by Google (Google Custom Search Engine Google CSE) is integrated as-is by the operator of the website of [XXX] as a software module in the search results page. The plugin allows for automated communication (data exchange) between the retrieved search results page and the Google service, if the search results page is called up. The use of the Google-powered search function comprises a dynamic transfer of data by the service provider to the Google search results page.

Data Protection

Data are only transferred to the provider of the search engine (Google) after a user has accessed the search results page, after having activated the search box and thereby starting a full-text search. When using the search function within the search page results, data are simultaneously transmitted to Google.

No data are transmitted to the search engine (Google), when the web pages that incorporate the Google Search Engine are visited. An exception occurs when users directly reference a search results page.

Agree to Data Transfer by Using Google Custom Search Engine

By using the full-text search and the resulting request to view the search results page, you are agreeing to the transmission of data to Google. This includes, for example, the search terms you enter and the IP address of the computer you are using.

Please note that Google has different data protection standards than those applying to the website of [XXX]. We explicitly point out that the operator of the website of [XXX] has no influence over the processing of data, in particular, the storage, deletion, and exploitation of personal data that may be transmitted to the provider of the search engine. Both the nature and scope of data that may be transmitted are entirely up to the provider of the external service, in this case Google.

In case you are logged in to Google at the same time you are using the Google Search Engine on the website of [XXX], the Google service is able to directly associate the information it collected in connection with your search with your user profile on Google. To avoid further collection of profile information about you, we recommend that you log out of Google before using the Google Search Engine on our website.

For more information about Google’s privacy policy and how Google deals with user data, please visit: http://www.google.com/intl/policies/privacy.

The web pages of the above-named domain sometimes use external content from third-party providers. Integrating external content such as videos, presentations, news feeds, e.g., from social media services can enhance the content of a website. Data protection aspects need to be taken into consideration. For that reason, a “two-step solution” is implemented for integrating content from third-party providers. You can recognize this type of content when you see the following box, for example, where Google Maps are integrated into the website.

By clicking the link you agree to a one-time data exchange between the respective websites of the above-named domain and the relevant third party. Under the default setting, data are not transmitted to the provider of the external content. You can permanently activate data exchange between the pages of the above-named domain and the provider of the external content (example here: maps.google.de), and you can revise this decision again at any time.

If you sign up for free newsletters or other free information available via email, data from the registration form will be forwarded to the person responsible for the content. When you sign up, you will be requested to give your consent for forwarding the information.

The legal basis for processing the data after registering for a newsletter is, in the case of consent, Article 6 (1) of the General Data Protection Regulation (GDPR).

Your email address is required to deliver a newsletter. The email address of the user is stored as long as the subscription to the newsletter is active.

Subscriptions to newsletters or other information can be terminated at any time by the recipient. As a rule, you will usually find a link for this purpose in each newsletter.

If you provide us with personal information (e.g., via web forms), you will as a rule find contact details on the same page where you can at no charge request information regarding which of your personal data are stored on our system. At your request, the information can also be provided electronically.

You have the right to ask the person responsible for confirmation of whether your personal data have been processed. If this is the case, you have a right of access to such personal data and to the information specified in Article 15 of the General Data Protection Regulation (GDPR).

You have the right to demand from the person responsible the immediate correction of incorrect and personal data concerning you and, if necessary, the completion of incomplete personal data (Article 16 of the General Data Protection Regulation).

You have the right to request the person responsible to delete your personal data without delay, provided one of the reasons detailed in Article 17 of the General Data Protection Regulation applies (right to erasure). The person responsible will then no longer process the personal data unless he/she can prove compelling legitimate grounds for processing that outweigh the interests, rights, and freedoms of the individual concerned.

You have the right, at any time, to object to the processing of your personal data for reasons arising from your particular situation. In such cases, personal data may only be processed if there are compelling legitimate reasons for the processing that outweigh your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims (Article 21 of the General Data Protection Regulation, GDPR).

You have the right to revoke your data protection consent at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Given the constantly occurring changes on the Internet, especially with regard to technology and also the relevant legislation, we reserve the right to amend our privacy policy from time to time, if needed. Such adjustments to our privacy policy will be posted on this page with an advance notice of two weeks, provided that the circumstances requiring the change permit this timeframe.

The external Data Protection Officer of the Controller is:

• Dr. Karsten Kinast, LL.M., Attorney at Law
  KINAST Rechtsanwaltsgesellschaft mbH
  Hohenzollernring 54
  50672 Cologne
  Tel.: +49 (0)221 - 222 183 - 0
  Email: DSB-FUBerlin@kinast.eu

The Deputy Data Protection Officer of Freie Universität is:

• Andreas Hübinger
  Email: datenschutz@fu-berlin.de