Data protection information
The Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V. (MPG) takes the protection of your personal data very seriously. We process personal data collected during visits to our website, observing the currently valid provisions under data protection law as amended. Your data is neither published by us, nor disclosed to third parties unauthorised. In the following, we will explain which data we record during your visit to our webpages and exactly how we use it.
A. General information
1. Scope of data processing
We only ever collect and use personal data to the extent required to provide a functional website as well as our content and services. The collection and utilization of our users' personal data is carried out regularly with the users' consent. An exception applies in instances where processing of the data is permitted by statutory provisions.
2. Legal basis of data processing
If we obtain the consent of the data subject to carry out personal data processing, the legal basis is Article 6, para. 1, lit. a EU General Data Protection Regulation (GDPR).
When it is necessary to process personal data in order to fulfil a contract whose contractual party the data subject is, the legal basis is Article 6, para. 1, lit. b GDPR. This also applies to processing operations required in order to implement pre-contractual measures.
If processing is required in order to safeguard a legitimate interest of the MPG or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject override the first-mentioned interest, the legal basis for processing is Article 6, para. 1, lit. f GDPR.
3. Data erasure and storage duration
The personal data of the data subject is erased or blocked as soon as the purpose of storage no longer applies. Data can also be stored if this is required under European or national legislation in EU directives, laws or other provisions to which the MPG is subject. Data is also blocked or erased if the retention period prescribed by the above-mentioned legislation expires, unless the data is required to be stored for longer for the purpose of concluding or performing a contract.
4. Contact details of the controller
The controller as defined by the EU General Data Protection Regulation (GDPR) as well as other data protection laws and provisions under data protection legislation is:
Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V. (MPG)
Telephone: +49 (89) 2108-0
Contact form: https://www.mpg.de/kontakt/anfragen
5. Contact Details of the Data Protection Officer
The controller's Data Protection Officer is
Telephone: +49 (89) 2108-1554
B. Provision of the website and creation of log files
Every time our website is accessed, our servers and applications automatically log data and information from the accessing computer system.
The following data is collected:
- Your IP address
- Date and time the page is accessed
- Address of the page accessed
- Address of the website visited previously (referrer)
- Name and version of your browser/operating system (if transmitted)
The data is saved in our systems' logfiles. This data is not stored together with other personal data relating to the user.
The legal basis for the temporary saving of data and logfiles is Article 6, para. 1, lit. f GDPR. Data is saved in logfiles in order to ensure the functional capability of the website. In addition, the data serves to optimize the websites, eliminate faults and ensure the security of our IT systems. These purposes also constitute our legitimate interest in data processing according to Article 6, para. 1, lit. f GDPR.
The data is deleted as soon as it is no longer required in order to fulfil the purpose of its collection. In the case of the collection of the data for the purpose of providing the website, this applies when the session in question is finished. In the case of saving data in logfiles, this applies after a maximum of seven days. Saving of data beyond this period is possible. In this case, users' IP addresses are deleted or altered so that they can no longer be attributed to the accessing client.
Data collection for the purpose of providing the website and the saving of data in logfiles are absolutely necessary in order to operate the website. It is therefore not possible for the user to object.
 The latter sentence is to be deleted if this no longer applies. In any case, data can only be saved for longer than the 7-day period if the IP address is anonymized.
C. Web analysis 
- IP address, anonymized by means of abbreviation
- Two cookies to distinguish between different visitors (pk_id and pk_sess)
- Previously visited URLs (referrers) if transmitted by the browser
- Name and version of the operating system
- Name, version and language setting of the browser
- URLs visited on this website
- Times of page visits
- Type of HTML requests
- Screen resolution and colour depth
- Technologies and formats supported by the browser (e.g. cookies, Java, Flash, PDF, WindowsMedia, QuickTime, Realplayer, Director, SilverLight, Google Gears)
The saving and analysis of data is carried out on a central server operated by the MPG. In addition to the central website www.mpg.de, it is also used by most Max Planck Institutes and many MPG project websites.
The legal basis for the processing of personal user data is Article 6, para. 1, lit. f GDPR. By processing personal user data we are able to analyse our users' utilization behaviour. Analysis of the data collected enables us to compile information on the use of the individual components of our web pages. This helps us improve our websites and their user-friendliness on an ongoing basis. These purposes also constitute our legitimate interest in data processing according to Article 6, para. 1, lit. f GDPR. Anonymization of the IP address sufficiently meets the users' interest in the protection of their personal data.
The data is deleted after the final annual totals have been arrived at for access statistics.
Of course, you have the opportunity to object to your data being collected. The following independent methods are available to you if you wish to object to data collection by the central server:
1. In your browser, activate the Do-Not-Track setting. If this setting is active, our central server does not save any of your data. Important: Do-Not-Track generally only applies to the one device and browser on which the setting is activated. If you use several devices/browsers, you must activate Do-Not-Track separately on each one.
2. Use our opt-out function. Click on the check mark in the following selection box under https://www.mpg.de/datenschutzhinweis/datenerhebung-deaktivieren, in order to stop or re-activate data collection. If the selection box is deactivated, our central server does not save any of your data. Important: We have to save a special recognition cookie in your browser for the opt-out function. If you delete this or use a different PC/browser, you have to object to data collection once again on this page.
This data is not saved together with other personal data relating to the user.
 If you do not use the MPG's central Matomo service but a different (internal) analysis software, please adapt the section marked in yellow accordingly. If you do not carry out statistical analysis you can delete the section.
D. Integration of external services
The integration of external services, such as OpenStreetMap for location descriptions, is always carefully considered with the aim of making your visit to our website as pleasant as possible.
However, we must point out that in this way your IP address and possibly other personal data are transmitted to the respective service provider and may be stored and evaluated.
We use the Google Maps map service. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The integration takes place exclusively via a link to Google. Via this programming interface, data is only transferred to Google when you click on the button "Switch to Google Maps". When using the functions of Google, Google processes your IP address and possibly other personal data (e.g. information on the use of this website or sub-pages or the data specified in Google Maps). Google thereby receives, among other things, information about the fact that you have called up our website or the corresponding subpage. This information is usually transferred to a Google server in the USA and stored there. Your personal data will only be collected and transmitted by Google via our website when you click on the "Continue to Google Maps" button yourself. We ourselves do not transmit any of your data to Google, this only happens when you click on the link. The use of Google Maps is not mandatory for the receipt of information via our website and is therefore voluntary for you. However, the integration of Google Maps into our Internet pages is performed in the interest of an appealing presentation of our Internet offer and in order to ensure that the locations we indicate on our Internet pages can be found quickly and easily. This represents a legitimate interest in the sense of Art. 6 (1) lit. f GDPR.
or from Google Maps at https://www.google.com/intl/de_US/help/terms_maps.html
and from Google Maps at https://www.google.com/intl/de_de/help/terms_maps.html
2. Open StreeMap
OpenStreetMap is provided by the Openstreetmap Foundation:
St John's Innovation Centre
We base the use of the aforementioned tools on Art. 6 (1) lit. f) GDPR: data processing is carried out to improve the user-friendliness of our website and is therefore in our legitimate interest.
- Language settings (localization) of the browser: session cookie i18next
- Session data (click series, pages accessed, current language and any error messages on forms: Sessioncookie mpg_session_r
Both cookies are deleted when the session is closed.
- Adoption of the browser language setting: automatic selection of the start page and spell check
- Remembering of form details entered: words used in searches within the website, details entered in the contact form (Section F)
The user data collected by technically required cookies is not used to create user profiles.
 If you do not run statistical analysis operations, this sentence can be deleted.
F. Personalized Services / Newsletter
In case you have decided to make use of a personalized service, such as registration for newsletter services, the use of contact forms or the placement of content in guest books, we will store the data required for this. Usually these data include your e-mail address, surname and first name and other data depending on the type of service. Your details will only be used to provide the service you requested to your satisfaction and to be able to clarify any additional queries. Should you no longer wish to use a personalized service, your personal data will be deleted after you have logged out, provided that registration is required to use the service. If you wish to cancel a subscribed newsletter/ a personalized service, you can send us an e-mail to email@example.com or call +49 (0) 89-30622-263 to cancel.
For selected services, the administration and storage of your personal data is carried out on systems of Infopark AG, Berlin, within the scope of order data processing.
Legal basis for the processing of data after registration for the newsletter by the user is the user's consent Art. 6 para. 1 lit. a DSGVO. The purpose of the data collection is to provide the newsletter. The data will be deleted as soon as they are no longer required for the purpose of their collection. The user's e-mail address is therefore stored for as long as the subscription to the newsletter is active. The subscription to the newsletter can be cancelled by the user concerned at any time.
Praise and complaint management
When calling up the links Klinikbewertungen.de or on Weisse-Liste.de, no data is transmitted or data is only transmitted (e.g. IP address) when you click on the links and as soon as you arrive at the external page of the provider. The provider is liable for his own web content.
You can send us your praise or constructive criticism by e-mail to firstname.lastname@example.org. Please note that when you send us your e-mail, your personal data, such as e-mail address and any other information that you may include in your e-mail, will be transmitted to us and processed.
We conduct proband searches and recruitment through our website. If you would like to receive information about the studies, you can access an e-mail address on the page of the corresponding studies and submit an information request. With the e-mail request, your e-mail address (and, if applicable, other information you provide in your e-mail) will be transmitted to us and processed.
It is possible that an anonymous and SSL-encrypted survey or test is required beforehand for subject recruitment (e.g. Survalyzer). No identifiable data will be processed or transmitted to third parties during the survey or test. You will voluntarily have the option, based on consent, to submit your email address to us at the end of the test if you wish to receive further information or be contacted by us.
For other study content on the website, you can register directly for a study by providing your email address in the SSL-encrypted web form. Third parties will not receive your data. We obtain your consent for the registration (Art. 6 para. 1 lit. a DSGVO). The consent can be revoked at any time with effect for the future.
G. Data transmission
The management and storage of your personal details is carried out by selected services
- Newsletter (section F)
- Contact form (section F)
As part of contract data processing on the systems of JustRelate Group GmbH, Berlin.
- Integration of external services (Section D)
Your personal data is only transmitted to public institutions and authorities if legally required or for the purpose of criminal prosecution due to attacks on our network infrastructure. The data is not shared with third parties for any other purposes.
I. Rights of data subjects
As a data subject whose personal data is collected in connection with the above-mentioned services, you have the following fundamental rights unless legal exceptions apply in individual cases:
- Access (Article 15 GDPR)
- Rectification (Article 16 GDPR)
- Erasure (Article 17, para. 1 GDPR)
- Restriction of processing (Article 18 GDPR)
- Data portability (Article 20 GDPR)
- Objection to processing (Article 21 GDPR)
- Withdrawal of consent (Article 7, para. 3 GDPR)
- Right to lodge a complaint with a supervisory authority (Article 77 GDPR). For the MPG, this is BayLDA (Bavarian Data Protection Authority), Postfach 1349, 91504 Ansbach.