Privacy Policy

Privacy Policy of the Institute for Law and Finance (ILF)

 

1)    Information about the collection of personal data and contact information of the person responsible

1.1 We are pleased that you’ve visited our website and thank you for your interest. Below, you will find information regarding the handling of your personal data when you use our website. Personal data is all the data that can be used to identify you.

1.2 Responsible for data processing on this website under the terms of the Data Protection Regulation (GDPR) is the
Stiftung Institute for Law and Finance
Theodor W. Adorno-Platz 3
60323 Frankfurt am Main

The responsible party for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 The responsible party has appointed a data protection officer, who can be contacted as follows:

Institute for Law and Finance
Dr. Rolf Friedewald
Theodor W. Adorno-Platz 3
60323 Frankfurt am Main
friedewald@ilf.uni-frankfurt.de

1.4 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses SSL or. TLS encryption. You can recognise an encrypted connection by the extension "https: //" and the lock symbol in your browser bar.

2)   Data collection when visiting our website

If our website is used merely for information, i.e. if you are not registering or otherwise submitting data to us, we only collect the data that is transmitted to our server by your browser, (so-called “server logs”). If you visit our website, we collect the following data, which is technically necessary to display the website:

  • our visited website
  • the date and time at the moment of access
  • the amount of data transmitted in bytes
  • the source/reference from which you were directed to the page
  • the browser in use
  • operating system in use
  • the IP address in use (if applicable: anonymously)

Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and functionality of our website. No further transfer or other use of the data will take place. We reserve the right, however, to review the server logs subsequently, should we be alerted to concrete evidence of illegal use.

3)   Cookies

In order to design our website attractively and to allow the use of certain functions, we use so-called cookies on various pages. This deals with small text files which are stored on your end device. Some of the cookies we use are deleted at the end of your browser session, i.e. after you close your browser (so-called session cookies). Other cookies will remain on your end device and allow us or our partner companies to recognise your browser when you next visit (persistent cookies). If cookies are set, they collect and process individual user information such as browser and location data as well as IP address values on an individual basis. Persistent cookies are automatically deleted after a specified time which can differ depending on the cookie.

If personal data is processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 (1) (f) GDPR for safeguarding our legitimate interests in the best possible functionality of the website, as well as ensuring a customer-friendly and effective design of the visit to the page.

We may work together with advertisers to help us to make our online content more interesting for you. For this purpose, in this case, when you visit our website, cookies from partner companies are stored on your hard disk (third-party cookies). If we cooperate with aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in the following paragraphs.

 Please note that you may set up your browser so that you are informed about the placing of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. Each browser differs in the way it manages cookie settings. This is described in the Help menu of each browser, which explains how to change your cookie settings. These can be found for each browser at the following links:

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: http://help.opera.com/Windows/10.20/de/cookies.html

Please note that if cookies are not accepted, the functionality of this website may be limited.

4)   Contact

When contacting us (for example via contact form or e-mail), personal data is collected. In the case of a contact form, the data that is being collected can be seen in the relevant contact form. This data is stored and used solely for the purpose of answering your request or for establishing contact and for the associated technical administration. The legal basis for the processing of the data is our legitimate interest in answering your request in accordance with Art. 6 (1) (f) GDPR. If the purpose of the contact concerns forming a contract, an additional legal basis for the processing is Article 6 (1) (b) GDPR. Your data will be deleted after the final processing of your request, if it can be inferred from the circumstances that the matter in question is finally clarified and provided that no statutory storage requirements are in conflict.

5)   Use of your data for direct marketing

Subscribing to our email newsletter
If you register for our email newsletter, we will send you regular information about our services. The only mandatory information for sending the newsletter is your email address. The collection of further possible data is voluntary and will be used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an email newsletter if you have explicitly confirmed to us that you agree to the sending of newsletters. We will then send you a confirmation email where you are asked to confirm, by clicking on a corresponding link, that you want to receive our newsletter in the future.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 (1) (a) GDPR. When registering for our newsletter, we save your registered IP address and the date and time of the registration from the Internet service provider (ISP), in order to identify the possible misuse of your email address at a subsequent time. The information we collect during registration for the newsletter will only be used for purposes of promotional communication through the newsletter. You can cancel the newsletter at any time via the provided link in the newsletter or by sending a message to the controller above. After cancellation, your email address will be deleted immediately from our mailing list, as long as you have not expressly consented to a further use of your data, or if we reserve the right to further data usage, which is permitted by law and concerning which we inform you in this statement.

6)   Using social media: Videos

Using YouTube videos
This site uses YouTube Embedding feature to display and play videos from "YouTube", which is owned by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google").

Here, the advanced data protection mode is used, which stores user information only when playing the videos. If embedded YouTube videos are played, the provider uses

"YouTube" cookies to gather information on user behaviour. According to "YouTube" guidelines, these are used, among other things, to capture video statistics, improve user-friendliness and prevent abusive practices. If you are logged into Google, your data will be associated directly with your account when you click on a video. If you prefer that your activity is not associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for non-logged in users) as user profiles and evaluates them. According to Art.  6 (1) (f) GDPR on the basis of the legitimate interests of Google, such an evaluation results in the display of personalized advertising, market research and/or customized design of its website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube if you wish to exercise this right.

Regardless of any playback of the embedded video, every time you visit this website, it will connect to the Google Network "DoubleClick", which may trigger further data processing without us having any influence.

Google LLC, based in the US, is certified for the US-European Data Protection Convention
"Privacy Shield", which ensures compliance with existing EU data protection.
Further information on privacy at “YouTube” can be found in the privacy statement of the provider at: www.google.de/intl/de/policies/privacy

7)   Web analysis services

Matomo (formerly Piwik)
On this website, using the web analysis service software Matomo (www.matomo.org), a service of the provider InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, ("Matomo") GDPR data collected and stored in accordance with Art. 6 (1) (f), based on our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes. From this data, pseudonymised usage profiles can be created and evaluated for the same purpose. For this purpose, cookies are used. Cookies are small text files stored locally in the cache of the site visitor's Internet browser. Cookies allow, among other things, the recognition of an Internet browser. The data collected via the Matomo technology (including your pseudonymous IP address) is processed on our servers.

The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym.

8)   Online form providers

Jotform
Our website uses plugins operated by JotForm Inc. Page jotform.com. Operator of the site is the JotForm Inc., 111 Pine St. Suite 1815, San Francisco, CA 94111, USA.

The plugin provides you with the means to contact/register events/send us documents via the form. By entering text and pressing the SEND button in the appropriate box, this text will be transmitted to us and stored on the German servers of JotForm Inc. The same goes for your uploaded files. If you visit one of our JotForm plug-in pages, you will be connected to JotForm Inc's servers. It tells the JotForm server which of our pages you have visited.

The use of JotForm takes place in the case of interest in an attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6, para. (1) (f) GDPR.

For more information about how user information is handled, see the JotForm Inc Privacy Policy at: www.jotform.com/privacy/

9)   Rights of the party concerned

9.1  The data protection guaranteed by existing legislation to you the controller with regard to the processing of personal data comprehensive data subjects' rights (information and intervention rights), which we inform below:

  • Requests for information according to Art. 15 GDPR: In particular, you have the right to obtain information about the personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data was or is being disclosed, the planned retention period or the criteria for the personal data processing, determination of the retention period, the existence of a right of rectification, deletion, limitation of processing, objection to processing, complaint to a supervisory authority, the origin of your data, if it was not collected by us, the existence of automated decision-making including profiling, and if applicable, meaningful information on the logic involved and the scope and effect of such processing, as well as your right to be informed of the guarantees under Art. 46 GDPR in the case of forwarding your data to third countries;
  • Right to rectification according to Article 16 GDPR: You have a right to immediate correction of incorrect data concerning you and/or completion of your incomplete data stored by us;
  • Right to deletion according to Article 17 GDPR: You have the right to demand the deletion of your personal data if the requirements of Art. 17 (1) GDPR are met. However, that right does not apply, in particular, where the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the pursuit, exercise or defence of legal claims;

    The right to restriction of processing according to Article 18 GDPR. You have the right to request that your personal data be restricted as long as the accuracy of your information is disputed, if you decline to delete your data for improper data processing and instead request that your data be restricted, if you need your data for the assertion, exercise or defence of legal claims, after we no longer need this data for purpose or if you have objected to your particular situation, as long as it is not certain that our legitimate reasons prevail;
  • Right to notification according to Article 19 GDPR: If you have made use of your right to rectify, erase, or restrict the processing of your personal data, the controller is obliged to inform all recipients to whom the personal data has been disclosed of this rectification or erasure of the data or restriction of the processing, unless this proves to be impossible or involves a disproportionate effort. You have a right to request that we inform you about these recipients.
  • Right of data portability according to Article 20 GDPR: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to request the transmission to another controller, as far as technically feasible;
  • Right to revoke granted consent according to Art. 7 (3) GDPR: You have the right to withdraw your consent to the processing of data at any time with future effect. In the case of withdrawal, we will delete the data concerned immediately, as long as there is no legal justification for further non-consensual processing. The withdrawal of the consent does not affect the lawfulness of the processing carried out up to the withdrawal of the consent;
  • Right to appeal according to Article 77 GDPR: If you believe that the processing of personal data concerning you is contrary to the GDPR, you have the right to report the alleged infringement to a supervisory authority, in particular in the Member State of your place of residence, employment or place, notwithstanding any other administrative or judicial procedure.

9.2   RIGHT TO OBJECT

IF, IN THE CONTEXT OF INTEREST ACCOUNTABILITY, WE PROCESS OUR PERSONAL DATA BASED ON OUR MAJOR LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS OBTAINED FROM YOUR SPECIFIC SITUATION, TO APPEAL AGAINST THIS PROCESSING WITH FUTURE EFFECT.

IF YOU EXERCISE YOUR RIGHT TO OPPOSITION, WE STOP THE PROCESSING OF THE AFFECTED DATA. A FURTHER PROCESSING REMAINS, BUT IS RESERVED FOR WHEN WE CAN PROVIDE IMPERATIVE REASONABLE REASONS FOR PROCESSING, WHICH EXCEED YOUR INTERESTS, FUNDAMENTAL RIGHTS AND
BASIC FREEDOMS, OR IF THE PROCESSING SERVES THE PRESENTATION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US IN ORDER TO OPERATE DIRECT ADVERTISING, YOU HAVE THE RIGHT TO CONTEST THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN OPPOSE IT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OPPOSITION, WE STOP THE PROCESSING OF THE AFFECTED DATA FOR DIRECT ADVERTISING PURPOSES.

10)      Duration of retention of data

The duration of the storage of personal data is based on the respective legal retention period (e.g. commercial and tax retention periods). After the deadline, the corresponding data is routinely deleted, if it is no longer required to fulfil a contract or to initiate a contract and/or on our part no legitimate interest in the re-storage persists.

 

Frankfurt am Main, May 2018

Institute for Law and Finance