Data protection notice for the Electronic Visitors' Book of Fraunhofer IFAM

As data controllers, we will process personal data belonging to you as part of the registration of our visitors in our Electronic Visitors' Book. This document provides information about the nature of the data involved, the manner in which they are processed and your rights in this regard.

Personal data, as defined by article 4 (1) General Data Protection Regulation (GDPR), includes all information relating to an identified or identifiable natural person.

 

1. Controller and data protection officer

 

For processing within the meaning of data protection law, the following acts the controller:

Fraunhofer-Gesellschaft zur Förderung der angewandten Forschung e. V.
Hansastrasse 27c
80686 München, Germany

on behalf of

Fraunhofer Institute for Manufacturing Technology and Advanced Materials IFAM
(hereinafter Fraunhofer IFAM)
Wiener Strasse 12
28359 Bremen, Germany
as well as its other locations

Email: data-protection@ifam.fraunhofer.de
Phone: +49 421 2246-0

You can contact the Fraunhofer-Gesellschaft data protection officer at the above address,
(attn: data protection officer), or alternatively at datenschutz@zv.fraunhofer.de.

Please feel free to contact our data protection officer directly at any time if you have any questions concerning data protection legislation or your rights as the data subject.

 

2. Personal data processing and purposes of data processing

 

Categories of personal data

The following data categories will be processed as part of the registration of our visitors in our Electronic Visitors' Book.

-       Identification data and master data

-       Data regarding the visit (day, time, place)

-       Contact data

 

Legal basis and purposes of processing

Your personal data is being processed for the enforcement of our house rules as well as to facilitate the identification and evacuation of visitors in emergency situations.

The processing of your data is based on a legitimate interest regarding the in the enforcement of our house rules as well as the implementation of our safety requirements at our site (article 6 (1) point (f) GDPR).

 

Period for which personal data is stored

Your personal data will be deleted 1 year after your data is entered in our Electronic Visitors' Book or, if you have visited us again in the meantime, 1 year after our last entering.

Processing by data processors

As part of the processing of the Electronic Visitors' Book, we are working with service provider Quentic GmbH, Gürtelstrasse 30, 10247 Berlin, Germany („Quentic“). We are working together for the purpose of providing the software solution for the Electronic Visitors' Book. This service requires storing the collected data on the servers of Quentic in Germany.

We have entered into a data processing contract with Quentic. By signing this contract with us, Quentic agrees to process the data on our behalf pursuant to the General Data Protection Regulation (GDPR) and to ensure that the rights of the data subjects are protected.

 

3.    Transfer of personal data

 

The Fraunhofer-Gesellschaft also discloses your personal data to the following recipients to the extent necessary for the particular case:

-       IT providers

If contract processors are used, you will be informed of this under section 2.

 

Recipients in third countries

Your personal data will not be transferred to any third countries.

 

4. Rights of data subjects

 

As a data subject within the meaning of data protection law, you are entitled to the following rights:

  • Pursuant to article 7 (3) GDPR, you have the right to withdraw the consent that you have granted us at any time. This means that we will not be permitted to continue data processing based on this consent in the future.
  • Pursuant to article 15 GDPR, you have the right to access the personal data concerning you that we process. In particular, you may request information about the following: the purposes of the processing, the categories of personal data concerned, the categories of recipients to whom your personal data have been or will be disclosed, the envisaged period for which the data will be stored, the existence of a right to rectification or erasure of data, the existence of a right to restriction of or objection to processing, the existence of a right to lodge a complaint; the source of your data if they were not collected by us, and the existence of automated decision-making systems, including profiling, and, if applicable, meaningful information about the specific details involved.
  • Pursuant to article 16 GDPR, you have the right to request the prompt rectification of inaccurate personal data concerning you or the prompt completion of incomplete personal data concerning you that are being stored by us.
  • Pursuant to article 17 GDPR, you have the right to have personal data concerning you that are being stored by us erased, unless processing is necessary to exercise the right of freedom of expression and information, to comply with a legal obligation, or for reasons of public interest, or to establish, exercise or defend legal claims.
  • Pursuant to article 18 GDPR, you have the right to request the restriction of processing of your personal data if you contest the accuracy of the data, if the processing is unlawful but you oppose the erasure of the personal data, or if we no longer need the personal data but you still require it for establishing, exercising or defending legal claims, or if you have filed an objection to the processing pursuant to article 21 GDPR.
  • Pursuant to article 20 GDPR, you have the right to receive the personal data you provided to us in a structured, commonly used and machine-readable format or to request the transmission of these data to another controller.
  • Pursuant to article 77 GDPR, you have the right to lodge a complaint with supervisory authority. As a rule, you can contact the supervisory authority of your habitual residence, place of work or the registered offices of our organization for this purpose.

Information on your right to object pursuant to article 21 GDPR

At any time, you have the right to object to the processing of your personal data pursuant to article 6 (1) point (e) GDPR (data processing conducted in the public interest) and article 6 (1) point (f) GDPR (data processing for the purposes of legitimate interests) on grounds relating to your particular situation. This also applies to profiling as described in the provisions of article 4 (4) GDPR.

If you file an objection, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defense of legal claims.

If your objection relates to the processing of data for direct marketing purposes, we will immediately discontinue the processing. In this case, it is not necessary to mention a particular situation. This also applies to profiling, to the extent that it is related to such direct marketing.

If you would like to assert your right to object, an email to data-protection@ifam.fraunhofer.de  will suffice.

 

5. More information

 

Systems for automated decision-making are not used.

The provision of personal data is not required. Therefore, you are not obliged to provide your personal data. If you do not provide your personal data, this could result in the prohibition of visiting our premises based on our house rules.