font-awesome-load
material-design-icons-load
  • Material/technique:
123

Information on data protection

The use of this website may involve the processing of personal data. In order to help you understand why we process these data, we should like to give you an overview of this processing in the following information. In order to guarantee fairness in the processing we should also like to inform you about your rights in accordance with the General Data Protection Regulation (GDPR) and the Federal German Data Protection Act (FGPA).

The controller of the data processing is the Saxon State and University Library Dresden (SLUB), Zellescher Weg 18, 01069 Dresden (hereinafter: we or us).

1. General information

Contact

If you have questions or suggestions on this information or wish to assert your rights with us, please address the request to:

Saxon State and -
University Library Dresden (SLUB)
Zellescher Weg 18
01069 Dresden
Phone: +49 351 4677-123
E-Mail: Generaldirektion@slub-dresden.de

General information on data processing

When you use this website your personal data may be processed. Under data protection law the term, "personal data" designates all the information, which refers to an identified or identifiable person. The IP address may also be an item of personal data. An IP address allocates the individual with the device connected to the Internet by the Internet provider, so that it is able to send and receive data. When you use the website we collect data, which you yourself provide. During your visit to the website we also automatically collect information about your use of the website. .

We process personal data in accordance with the relevant data protection provisions, in particular the GDPR and the FGPA. We process data only on the basis of legal admissibility. When you use this website we process personal data only to fulfil a contract, to which you are a party, or at your request to perform pre-contractual measures (Article 6 (1) 1st sentence point (b) GDPR), to fulfil a legal obligation (Article 6 (1) 1st sentence point (c) GDPR) or if the processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party, provided that your interests or fundamental rights and freedoms, which require that your personal data be protected, are not overridden (Article 6 (1) 1st sentence point (f) GDPR).

Duration of storage

Unless otherwise stated in the following notes, we store the data only as long as necessary to achieve the purpose of the processing or to satisfy our contractual or legal duties. Such a legal duty to preserve the records may arise in particular from the provisions of commercial or tax law.

Technical Service Providers

Unless otherwise stated in the following notes, the data are processed on the servers of the technical service providers, who have been commissioned by us to undertake this task. These service providers process the data only on our express instructions and are bound by contract to guarantee adequate technical and organisational data protection measures.

2. Processing of server log files

When you use our website for purely informational purposes in the first instance general information is automatically stored (in other words, if you have not registered) and this information is transferred to our server. As a standard feature this information includes: browser type and version, operating system used, site accessed, the site previously accessed (referrer URL), IP address, date and time of the server request and HTTP status code.

The data are processed to safeguard our legitimate interest and relies on the legal base in Article 6 (1) 1st sentence point (f) GDPR. This processing serves the technical management and security of the website. The data stored are erased at the end of 90 days, unless specific evidence gives rise to legitimate suspicion of an unlawful use and further investigation and processing of the information is necessary on this ground.

3. Shop/Shopping Cart

If you order a product through our website, we process personal data solely to process the contract and to be able to provide you with the product ordered. During the booking and ordering process we process only those data, which you yourself have entered onto the input screen.

In order to be able to supply the products ordered, we transfer your data required for delivery to one of our shipping service providers, as stated in the order.

In every case the legal base for the processing is Article 6 (1) 1st sentence point (b) GDPR. All the data fields marked as mandatory are necessary for the processing of your booking. If you do not provide these data, we shall not be able to process your order. Any further provision of data is voluntary.

4. Registration

You can use a form to register on the website. For this purpose your e-mail address is required. The data provided are processed for the purpose of providing the service.
The processing relies on the legal base in Article 6 (1) 1st sentence point (b) GDPR.

5. Cookies

Our website uses cookies. Cookies are small text files, which are stored by your browser, whenever you visit a website. This allows us to recognise your browser when you visit our website on subsequent occasions.

To do this, we use in particular permanent cookies. Permanent cookies are automatically erased after a specified time, which may vary from cookie to cookie.

Insofar as these cookies are used to process personal data, this relies on the legal basis in Article 6 (1) 1st sentence point (f) GDPR. This processing serves our legitimate interests in making our website more user-friendly, more effective and more secure.

You can erase cookies at any time by adjusting the security settings of your browser. As a matter of principle you may refuse to accept the use of cookies by adjusting your browser settings. Please note that if you do so, this may result in functions of our website being restricted.

The German Federal Office for Information Security offers you further information on this on: https://www.bsi-fuer-buerger.de/BSIFB/DE/Empfehlungen/EinrichtungSoftware/EinrichtungBrowser/Sicherheitsmassnahmen/Cookies/cookies_node.html.

6. Analyses of our website

On our website we use the services of the Matomo web analysis service (formerly Piwik). Matomo is a type of open source software for website optimisation, which uses an anonymous method to analyse access by visitors to our website. In this process immediately on being processed and prior to being stored your IP address is anonymised. Matomo undertakes no further processing of personal data. The information generated by the use of cookies on your use of our site is not used for analysis based on personal identity or the creation of profiles and is also not transferred to third parties.

The data are processed in order to safeguard our legitimate interests and relies on the legal basis in Article 6 (1) 1st sentence point (f) GDPR. The processing is performed in the interest of optimising our site and in so doing to waive as far as possible the processing of personal data.

Through Matomo we have commissioned external service providers, by whom the data is received. These service providers process the data only on our express instructions and are bound by contract to guarantee adequate technical and organisational measures.

You may object to the processing of your data in its entirety at any time. Moreover, you may subsequently object to the processing of your data by Matomo by clicking the mouse. In this case an opt-out cookie will be installed on your browser. As a consequence of this Matomo will not collect data of any kind. It you erase your cookies from your Internet browser, the opt-out cookie will also be erased. If you visit our website again, you will therefore need to activate it again.

7 Twitter Social Plug In

On our website we use the plug-in from the twitter.com social network from International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland (Twitter). This plug-in allows you to disseminate the contents of our website within the social network. To integrate the plug-in into our website when our website is accessed, its program code is transferred directly from the servers of the respective service provider. For this purpose it is necessary for technical reasons to transfer the IP address used. This transfer takes place irrespective of whether or not you click on the plug-in. If, when you visit our website, you are logged into your user account on the social network or if you interact with the plug-in, further data may be transferred. You can find out more about this through the respective plug-in access provider.

In every case the data are processed to safeguard our legitimate interest in increasing the recognition and range of our website and this processing relies on the legal base of Article 6 (1) 1st sentence point (f) GDPR.

Twitter is certified under the Privacy Shield Convention and therefore offers a guarantee that it will comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active).

8. Linked services and third party contents

On our website we use services and contents provided by third-party suppliers (hereinafter: contents). For such links it is necessary for technical reasons to process your IP address, so that the contents can be sent to your browser. Your IP address is therefore transferred to the respective third-party supplier.

These data are processed in every case to safeguard our legitimate interests in the optimisation and the economic operation of our website and this processing relies on the legal base in Article 6 (1) 1st sentence point (f) GDPR.

The programming language, JavaScript is routinely used to link the contents. You can therefore object to the processing of the data by deactivating the execution of JavaScript in your browser or by installing a JavaScript blocker. Please note that this may result in restrictions to certain functions on our website.

We have linked the contents from the following services provided by third-party suppliers: various services from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, Google), inter alia:

  • Google-Maps for the display of maps;
  • Google Web Fonts to display fonts;
  • Google Visualization API

Google is certified under the Privacy Shield Convention and thereby offers a guarantee that it will comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active)

Jquery CDN, provided by StackPath LLC (2012 Mc Kinney Ave., Suite 1100, Dallas, TX 75201, USA, StackPath) for the display of contents.

StackPath is certified under the Privacy Shield Convention and thereby offers a guarantee that it will comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000CbahAAC&status=Active).

9. Withdrawal of consent

If you have granted your separate consent to the data processing, you may withdraw this consent at any time in accordance with Article 7 (3) GDPR. Such a withdrawal of consent shall not affect the legality of the processing, which was carried out by virtue of the consent up until the withdrawal of consent.

10. Your rights

As a data subject you have the right to assert your rights as a data subject against us. For this purpose you have the following rights in particular:

  • In accordance with Article 15 GDPR and § 34 FGPA you have the right to request information as to whether and where applicable, to what extent we do or do not process personal data concerning your identity.
  • You have the right in accordance with Article 16 GDPR to request us to rectify your data.
  • You have the right in accordance with Article 17 GDPR and § 35 FGPS to request us to erase your personal data.
  • You have the right in accordance with Article 18 GDPR to have the processing of your personal data restricted.
  • You have the right in accordance with Article 20 GDPR to receive the personal data concerning you, which you have provided to us, in a structured, current and machine-readable format and to transfer these data to another controller.

11. Right to object

In accordance with Article 21 GDPR you have the right to object to any processing, which relies on the legal base in Article 6 (1) 1st sentence points (e) or (f). If any personal data concerning you is processed by us for the purpose of direct advertising, you may object to this processing pursuant to Article 21 (2) and (3) GDPR.

12. Data Protection Officer

Our Data Protection Officer can be contacted at the following contact details: dsb@slub-dresden.de.

13. Lodging a complaint with a supervisory authority

If you believe that processing of personal data concerning you breaches the provisions of the GDPR, you have the right in accordance with Article 77 GDPR to lodge a complaint with a supervisory authority.

Status: May 2018