Information on data protection
The use of this website may involve the processing of personal data. In order to help you understand why we process these data, we should like to give you an overview of this processing in the following information. In order to guarantee fairness in the processing we should also like to inform you about your rights in accordance with the General Data Protection Regulation (GDPR) and the Federal German Data Protection Act (FGPA).
The controller of the data processing is the Saxon State and University Library Dresden (SLUB), Zellescher Weg 18, 01069 Dresden (hereinafter: we or us).
1. General information
If you have questions or suggestions on this information or wish to assert your rights with us, please address the request to:
Saxon State and -
University Library Dresden (SLUB)
Zellescher Weg 18
Phone: +49 351 4677-123
General information on data processing
When you use this website your personal data may be processed. Under data protection law the term, "personal data" designates all the information, which refers to an identified or identifiable person. The IP address may also be an item of personal data. An IP address allocates the individual with the device connected to the Internet by the Internet provider, so that it is able to send and receive data. When you use the website we collect data, which you yourself provide. During your visit to the website we also automatically collect information about your use of the website. .
We process personal data in accordance with the relevant data protection provisions, in particular the GDPR and the FGPA. We process data only on the basis of legal admissibility. When you use this website we process personal data only to fulfil a contract, to which you are a party, or at your request to perform pre-contractual measures (Article 6 (1) 1st sentence point (b) GDPR), to fulfil a legal obligation (Article 6 (1) 1st sentence point (c) GDPR) or if the processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party, provided that your interests or fundamental rights and freedoms, which require that your personal data be protected, are not overridden (Article 6 (1) 1st sentence point (f) GDPR).
Duration of storage
Unless otherwise stated in the following notes, we store the data only as long as necessary to achieve the purpose of the processing or to satisfy our contractual or legal duties. Such a legal duty to preserve the records may arise in particular from the provisions of commercial or tax law.
Technical Service Providers
Unless otherwise stated in the following notes, the data are processed on the servers of the technical service providers, who have been commissioned by us to undertake this task. These service providers process the data only on our express instructions and are bound by contract to guarantee adequate technical and organisational data protection measures.
2. Processing of server log files
When you use our website for purely informational purposes in the first instance general information is automatically stored (in other words, if you have not registered) and this information is transferred to our server. As a standard feature this information includes: browser type and version, operating system used, site accessed, the site previously accessed (referrer URL), IP address, date and time of the server request and HTTP status code.
The data are processed to safeguard our legitimate interest and relies on the legal base in Article 6 (1) 1st sentence point (f) GDPR. This processing serves the technical management and security of the website. The data stored are erased at the end of 90 days, unless specific evidence gives rise to legitimate suspicion of an unlawful use and further investigation and processing of the information is necessary on this ground.
3. Shop/Shopping Cart
If you order a product through our website, we process personal data solely to process the contract and to be able to provide you with the product ordered. During the booking and ordering process we process only those data, which you yourself have entered onto the input screen.
In order to be able to supply the products ordered, we transfer your data required for delivery to one of our shipping service providers, as stated in the order.
In every case the legal base for the processing is Article 6 (1) 1st sentence point (b) GDPR. All the data fields marked as mandatory are necessary for the processing of your booking. If you do not provide these data, we shall not be able to process your order. Any further provision of data is voluntary.
You can use a form to register on the website. For this purpose your e-mail address is required. The data provided are processed for the purpose of providing the service.
The processing relies on the legal base in Article 6 (1) 1st sentence point (b) GDPR.
To do this, we use in particular permanent cookies. Permanent cookies are automatically erased after a specified time, which may vary from cookie to cookie.
Insofar as these cookies are used to process personal data, this relies on the legal basis in Article 6 (1) 1st sentence point (f) GDPR. This processing serves our legitimate interests in making our website more user-friendly, more effective and more secure.
The German Federal Office for Information Security offers you further information on this on:
6. Analyses of our website
The data are processed in order to safeguard our legitimate interests and relies on the legal basis in Article 6 (1) 1st sentence point (f) GDPR. The processing is performed in the interest of optimising our site and in so doing to waive as far as possible the processing of personal data.
Through Matomo we have commissioned external service providers, by whom the data is received. These service providers process the data only on our express instructions and are bound by contract to guarantee adequate technical and organisational measures.
You may object to the processing of your data in its entirety at any time. Moreover, you may subsequently object to the processing of your data by Matomo by clicking the mouse. In this case an opt-out cookie will be installed on your browser. As a consequence of this Matomo will not collect data of any kind. It you erase your cookies from your Internet browser, the opt-out cookie will also be erased. If you visit our website again, you will therefore need to activate it again.
7 Twitter Social Plug In
On our website we use the plug-in from the twitter.com social network from International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland (Twitter). This plug-in allows you to disseminate the contents of our website within the social network. To integrate the plug-in into our website when our website is accessed, its program code is transferred directly from the servers of the respective service provider. For this purpose it is necessary for technical reasons to transfer the IP address used. This transfer takes place irrespective of whether or not you click on the plug-in. If, when you visit our website, you are logged into your user account on the social network or if you interact with the plug-in, further data may be transferred. You can find out more about this through the respective plug-in access provider.
In every case the data are processed to safeguard our legitimate interest in increasing the recognition and range of our website and this processing relies on the legal base of Article 6 (1) 1st sentence point (f) GDPR.
Twitter is certified under the Privacy Shield Convention and therefore offers a guarantee that it will comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active).
8. Linked services and third party contents
On our website we use services and contents provided by third-party suppliers (hereinafter: contents). For such links it is necessary for technical reasons to process your IP address, so that the contents can be sent to your browser. Your IP address is therefore transferred to the respective third-party supplier.
These data are processed in every case to safeguard our legitimate interests in the optimisation and the economic operation of our website and this processing relies on the legal base in Article 6 (1) 1st sentence point (f) GDPR.
We have linked the contents from the following services provided by third-party suppliers: various services from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, Google), inter alia:
- Google-Maps for the display of maps;
- Google Web Fonts to display fonts;
- Google Visualization API
Google is certified under the Privacy Shield Convention and thereby offers a guarantee that it will comply with European data protection law
Jquery CDN, provided by StackPath LLC (2012 Mc Kinney Ave., Suite 1100, Dallas, TX 75201, USA, StackPath) for the display of contents.
StackPath is certified under the Privacy Shield Convention and thereby offers a guarantee that it will comply with European data protection law
9. Withdrawal of consent
If you have granted your separate consent to the data processing, you may withdraw this consent at any time in accordance with Article 7 (3) GDPR. Such a withdrawal of consent shall not affect the legality of the processing, which was carried out by virtue of the consent up until the withdrawal of consent.
10. Your rights
As a data subject you have the right to assert your rights as a data subject against us. For this purpose you have the following rights in particular:
- In accordance with Article 15 GDPR and § 34 FGPA you have the right to request information as to whether and where applicable, to what extent we do or do not process personal data concerning your identity.
- You have the right in accordance with Article 16 GDPR to request us to rectify your data.
- You have the right in accordance with Article 17 GDPR and § 35 FGPS to request us to erase your personal data.
- You have the right in accordance with Article 18 GDPR to have the processing of your personal data restricted.
- You have the right in accordance with Article 20 GDPR to receive the personal data concerning you, which you have provided to us, in a structured, current and machine-readable format and to transfer these data to another controller.
11. Right to object
In accordance with Article 21 GDPR you have the right to object to any processing, which relies on the legal base in Article 6 (1) 1st sentence points (e) or (f). If any personal data concerning you is processed by us for the purpose of direct advertising, you may object to this processing pursuant to Article 21 (2) and (3) GDPR.
12. Data Protection Officer
Our Data Protection Officer can be contacted at the following contact details:
13. Lodging a complaint with a supervisory authority
If you believe that processing of personal data concerning you breaches the provisions of the GDPR, you have the right in accordance with Article 77 GDPR to lodge a complaint with a supervisory authority.
Status: May 2018