Privacy Statement - PhD-Portal
Name and address of the controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other provisions of data protection law is
Max Delbrück Center for Molecular Medicine
Robert-Rössle-Str. 10
13125 Berlin (main address)
13092 Berlin (postal address)
Website: www.mdc-berlin.de
Technical responsible person
Dr. Michaela Herzig
Name and address of data protection officer
Ulrike Ohnesorge
E-mail: Datenschutz@mdc-berlin.de
In addition to the general privacy policy of the MDC the following applies:
1. Application portal
General
This privacy statement is intended to inform the users of this website about the nature, extent and purpose of the collection and use of personal data by the International PhD Program of the MDC.
The website operator takes your privacy very seriously and treats your personal data confidentially and in accordance with the statutory provisions. As new technologies and the constant development of this website may result in changes to this data protection declaration, we recommend that you read the data protection declaration again at regular intervals.
Definitions of the terms used (e.g. "personal data" or "processing") can be found in Art. 4 GDPR.
Scope of data processing
On the following pages we collect the information required for an application process.
If you apply for a position as a PhD candidate, you will be asked for certain personal data (name, address, e-mail, telephone number, photo) required for the application process. In addition, position-related questions can also be asked. For an application in our institution, it is also necessary to include your professional career (information on education, certificates, awards). You can provide further information, but you do not have to. This includes alternative contact details and an application video.
Purpose of processing
Processing of the personal data provided by you with your application is necessary for the purpose of carrying out the application procedure in the course of the International PhD -program.
Legal basis of the processing
The processing of your application data is based on Section 26 para. 1 sentence 1 FDPA (Federal Data Protection Act).
Duration of processing
We store your data as long as it is necessary for the application process. Your application data will be deleted at the latest 6 months after the application cycle, unless storage is required for legal reasons. The names of participants in the central recruitment assessment (panel interviews) will be stored for max. of 4 years, as applicants who have once participated in the interview assessment but were not accepted to the program are not allowed to participate in the central assessment again.
If you accept our offer of employment as an employee or guest with us, we will store your data for the duration of the employment relationship with you. In this case you will receive further information about the processing of your data in the employment relationship with the Max Delbrück Center for Molecular Medicine as soon as you start your employment with us.
Categories of recipients of your personal data
If you apply to us, we will not pass on your data to third parties. Only those employees of our institution have access to your personal data, who have to have insight to the application process, in particular the PhD office and the decision-makers in the scientific working groups. In some cases, the application documents may be forwarded to partners of the graduate school or external reviewers.
If necessary, we use service providers who are strictly bound by instructions (data processing in accordance with Art. 28 GDPR), who support us e.g. in the areas of EDP or the archiving and destruction of documents and with whom separate data processing agreements have been concluded.
2. Provision of the website and creation of logfiles
Description and scope of data processing
Each time you call up our application portal, our system automatically collects data and information from the computer system of the calling computer.
The following data is collected:
- Information about the browser type and the version used
- The user's operating system
- The Internet service provider of the user
- The IP address of the user
- Date and time of access
- Websites from which the user's system accesses our website
- Websites accessed by the user's system through our website
- Amount of data sent in bytes
The data is also stored in the log files of our system. These data are not stored together with other personal data of the user.
The collected data is used exclusively for statistical evaluation and improvement of the website.
Should there be concrete indications of illegal use, the website operator reserves the right to subsequently check the server log files.
Legal basis for data processing
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.
Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the portal to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session.
The data is stored in log files in order to ensure the functionality of the portal. The data is also used to optimise the portal and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes also include our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f GDPR.
Duration of storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the portal, this is the case when the respective session has ended.
The data controller processes and stores personal data of the data subject only for the period of time necessary to achieve the storage purpose or purpose stated by the European Directive and Regulation Body or another legislator in laws or regulations to which the data controller is subject.
If the storage purpose no longer applies or if a storage period prescribed by the European directive and regulation giver or another competent legislator expires, the personal data shall be blocked or deleted routinely and in accordance with the statutory provisions.
Possibility of objection and removal
The collection of data for the provision of the portal and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
3. Use of cookies
Description and scope of data processing
Our portal uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
We use cookies to make our website more user-friendly and secure. Some elements of our portal require that the calling browser can be identified even after a page change.
Legal basis for data processing
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR.
Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our portal cannot be offered without the use of cookies. For these it is necessary that the browser is recognized also after a page change.
The user data collected by technically necessary cookies are not used to create user profiles.
Our legitimate interest in the processing of personal data in accordance with Art. 6 Para. 1 lit. f GDPR also lies in these purposes.
Duration of storage, objection and removal options
Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, you as a user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our portal, it is possible that all functions of the portal can no longer be used to their full extent.
4. Your rights
You have the following rights with regard to data processing at the Max Delbrück Center for Molecular Medicine:
Right of access (Art. 15 GDPR)
Right to disclosure as to which data we process about you (Art. 15 GDPR). You are entitled to the Right to disclosure which data we process about you and other information pursuant to Art. 15 GDPR in connection with data processing. On request, we will be happy to share relevant data and information and provide you with a copy of these data.
Right to rectify your data (Art. 16 GDPR)
You have the right to rectify your data if it is inaccurate or incomplete, taking into account the purposes of the processing.
Right to deletion (Art. 17 GDPR)
You have a right to deletion if data is no longer needed, the processing is not lawful or other cases of Art. 17 GDPR exist. In these cases we will delete your data immediately.
Right to limit the processing of your data (Art. 18 GDPR)
You have the right to restrict your data in the cases specified in Art. 18 GDPR. This includes, among other things, the case where we process data in places or to an extent that no longer justifies data processing by law. In addition, the case may be relevant that data is subject to a retention obligation and we are therefore not allowed to delete it without further ado.
In this case, we limit the processing as much as possible. As a rule, restriction means that the data is stored, but access by employees is no longer possible.
Right to data transfer (Art. 20 GDPR)
The right to so-called data portability allows you to receive and have transmitted by us data about you that you yourself have provided to us in the format stated in Art. 20 GDPR. Excluded from the publication, however, are such data which we obtain ourselves through processing (so-called processing results).
Right to object to processing based on Art. 6 Para. 1 S. 1 lit. e, f GDPR (Art. 21 GDPR)
We will cease processing your data on the basis of Art. 6 para. 1 sentence 1 lit. e, f GDPR (performance of a task within the framework of public violence/interest or processing to safeguard legitimate interests) if you object to this and the objection is justified.
In addition, as a data subject you have the right to complain to a supervisory authority if you are of the opinion that the processing of your data violates data protection regulations. In particular, the right of appeal may be exercised before a supervisory authority in the Member State in which the data subject is staying or working or in which the alleged infringement occurred. Our competent supervisory authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstraße 219, 10696 Berlin.