CORA e-Learning platform

Version: August 2018

Thank you for your interest in our website. In the following we will inform you about what data we collect for what purposes when you use our website.

The contact person and controller within the meaning of the EU General Data Protection Regulation (GDPR), for the collection, processing and usage of personal data of the website visitors (hereinafter: “You”) is

aconium GmbH
Invalidenstraße 91
10115 Berlin, Germany

Telephone: +49 (0)30 22183-0

We will gladly assist you in case of any questions or suggestions on the topic of data protection. You can also send your data protection issue by email to our Data Protection Officer at datenschutz@aconium.eu. You can also find our complete contact details here .

2.1 Visiting the Site

It is generally also possible to visit our site without disclosing any personal data. Personal data are only collected if this is necessary for technical reasons for the usage of our site or if you make use of certain functions of services offered on our site, such as contacting us via the provided contact information.

The following access data are collected automatically every time you use our website:

• date and time of access
• name of the requested file
• website from which the file was requested
• access status (e.g. file transferred, file not found)
• the web browser used by you and the operating system of your device
• the IP address of the retrieval device

It is necessary to process these data to enable the visit to the website and to ensure the long-term functionality, availability and security of our systems. The legal basis for this data processing is Art 6 para. 1 p, 1 lit. b GDPR.

In addition, for the purposes described above, the access data are temporarily stored in internal log files in order to provide statistical information on the use of our site in order to further develop the site with regard to the usage habits of our visitors (e.g. if the proportion of mobile devices increases, with which our pages are retrieved) and to generally maintain and manage our site. The legal basis for this data processing is Art 6 para. 1 p, 1 lit. f GDPR, based on our legitimate interest in the proper optimization of our website.

The information stored in the log files does not allow for any immediate conclusions on your person – in particular, we only store the IP addresses in shortened, anonymized form. The log files are stored for 6 months and then  .

2.2 Contact form

We offer you the option of sending us messages directly via a contact form. Here, it is necessary to provide an email address under which we can contact you. We also ask for your name, to be able to address you. We process the data you provide to answer your request. In order to be able to handle your request properly, we may pass on the details provided to one of our partners listed on our website. This is done so that the team responsible for your region can answer your request properly.The legal basis for the described data processing is Art 6 para. 1 p, 1 lit. b GDPR. The data collected when you contact us will be deleted after processing your request.

2.3 Registration CORA newsletter

You have the opportunity to subscribe to our newsletter mailing list for up-to-date information on the CORA project. If you consent to this using our online registration form, we use your name in the newsletter to be able to address you and your e-mail address in order to send you information about the course of the project, project results and events.

We use the so-called double opt-in method, i. e. we will not send you any information by e-mail until you confirm in our notification e-mail that you are the owner of the given e-mail address by clicking on a link. If you confirm your e-mail address, we will store your e-mail address, the time of registration and the IP address assigned at the time of registration until you unsubscribe from the CORA newsletter. The sole purpose of storing this information is to send you the newsletter and to prove your registration. You can unsubscribe from the newsletter at any time. It is, of course, sufficient to send us a message to the contact details stated above or in the individual e-mails (e.g. by e-mail or letter). Legal basis of processing is your consent in accordance with. Art. 6 para. 1 sentence 1 lit. a GDPR.

We use your voluntary application details anonymously, ie without reference to your person, in order to be able to statistically evaluate the sectors in which the readers of our newsletter come from. This helps us to plan future CORA newsletters. The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f GDPR, based on our legitimate interest in the proper further development of our CORA newsletter.

2.4 Google Maps

We use Google Maps on our website, for example when providing information about events to visually display the address of the respective event venue. Google Maps is a map service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”). So that the Google map data we use can be integrated and displayed in your browser, your browser must establish a connection to a Google server, which may also be located in the USA, when accessing the contact page. In the event that personal data is transferred to the USA, Google has subjected itself to the EU/US Privacy Shield Agreement.  When the server is accessed, Google receives the information that our website was accessed from your terminal device’s IP address. The legal basis for data processing is Art. 6, Para. 1, Clause 1, lit. f of the GDPR, based on our legitimate interest in integrating a map service as part of our website’s design.

If you access Google’s map service on our website while logged into your Google profile, Google can link this event to your Google profile. If you would not like this information to be assigned to your Google profile, you must log out of the Google service before accessing our website. Google saves your data and uses it for the purposes of advertising, market research and personalised presentation of Google Maps. You can object to Google’s collection of this data. You will find further information in Google’s privacy policy and the Additional Terms of Use for Google Maps / Google Earth.

3.1 General use of cookies

When you visit and use our website, different cookies are set. Cookies are small text files, which are stored in your web browser and contain information that can be used to recognise you when you visit web servers at a later point in time. Cookies can not run programs or transfer viruses to your computer.

The main purpose of our own cookies is to make the use of our services as time-saving and user-friendly as possible.

We use own cookies, in particular

• for load distribution;
• to save language settings;
• to save contents of form fields;
• to make a note that information placed on our website was displayed to you, so that it is not displayed to you again when you revisit.

We want to provide you with a more comfortable and individual usage of our site. The legal basis for the processing of the relevant cookies is our aforementioned legitimate interest, Art 6 para. 1 p. 1 lit. f GDPR.

You can prevent the saving of cookies by preventing acceptance of cookies from this website in your browser settings. However, if you do not accept cookies, this may result in significant restriction on our website, in individual cases.

3.2 Google Analytics

Our website also uses the web analyses service Google Analytics, offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies with a validity of 14 months to collect your access data when visiting our site. The access data are aggregated on our behalf by Google to pseudonymous usage profiles and transmitted to a Google server in the USA. First, your IP address is anonymised. Therefore, we cannot determine which usage profiles belong to a particular user. This means we cannot identify you, nor determine how you use our website by means of the data collected by Google. In the event that exceptionally, personal information is transferred to the USA, Google has also submitted to the EU US Privacy Shield. This means Google has committed to the European data protection standards and the local data protection levels, including in the context of data processing in the USA.

Google will use this information gained cookies on our behalf to evaluate the usage of our website, compile reports about website activities, and provide other services in connection with the use of the website and the internet to us. For more information, please see the Privacy Policy of Google Analytics.

The legal basis for the processing of the usage data within the framework of Google Analytics is our legitimate interest in the needs-based design and optimization of our website is: Art 6 para. 1 p. 1 lit. f GDPR. You can object to the web analysis by Google at any time. You have several options to do this:

• You can set your browser to block Google Analytics.
• You can change your settings with regard to advertising from Google.
• You can set a deactivation cookie, by clicking: Disable Google Analytics
• You can install the deactivation plug-in provided by Google in the following link, in your browsers Firefox, Internet Explorer or Chrome (this variant does not work on mobile devices): Link browser plug-in

For more information about Google Analytics, please see the Privacy Policy information of Google.

If applicable, this website may link websites and online offers of other parties, which are not affiliated with us. When you follow these links, we naturally have no influence on what data are collected by the respective provider and what data they collect. For detailed information about data collection and usage, please see the Privacy Policy of the respective provider. As we have no control on the data collection and processing by third parties, we cannot accept any responsibility for this.

Social plug-ins of social network are integrated in our site:

• LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland), Data Protection Directive
• Flickr (Smug Mug Inc., Suite 200, 67 E Evelyn Avenue, Mountain View, CA, 94041, USA), Data Protection Directive
• Twitter (Twitter Headquarters 1355 Market St. Ste. 900 San Francisco, CA 94103, USA), Data Protection Directive

You can recognise social plug-ins by the logos of the respective providers.

When you retrieve an article or subpage on our website which contains social plug-ins, a direct connection with the servers of the respective social networks is established and the image of the plug-in that you see and the underlying functions are transmitted directly to your browser that connects you to the display of our site. If you are logged in to the respective social networks with your user name and password at this point in time, the information that you are visiting our site is transferred to the social network and the relevant provider can allocate this information to your user account. If you interact with the social plug-ins, i.e. for example retweet a Twitter post, the contents of our site are linked to your Twitter profile.

If you are not a member of the respective social networks, or have logged out from the providers before visiting our site, it is still possible that at least your IP address is transferred and stored there.

Please note that the content and scope of the data which is collected by the social plug-ins is directly collected by the social networks and transferred to them, and the storage duration of up to 250 days and the intended purpose is exclusively determined by the respective providers. We have no influence on the content of the plug-ins, nor on the transfer of information. For more information, please see the above-linked Privacy Policy information of the providers.

The legal basis for the integration is Art 6 para. 1 p, 1 lit. f GDPR, based on our legitimate interest in the provision of the aforementioned social network features.

We only disclose the data collected by us if:

• You have expressly given your content according to Art. 6 para. 1 p. 1 lit. a GDPR,
• the disclosure according to Art. 6 para. 1 p. 1 lit. f GDPR is required to assert, exercise or defend legal claims and there is no reason to assume that there is an overriding legitimate interest in the failure to disclose the data,
• we are legally obliged to disclose the information according to Art. 6 para. 1 p. 1 lit. c. GDPR, or
• this is legally permissible and, according to Art. 6 para. 1 p.1 lit. b. GDPR, this is required for the fulfilment of contractual relationships with you or for the execution of pre-contractual measures, which are carried out at your request.

Part of the data processing described in this Privacy Policy can be performed by our service providers. In addition to the service providers mentioned in this Privacy Policy, this may also include data centres which store our website and databases, IT service providers who maintain our systems as well as consultancy companies. If we pass on data to our service providers, they may only use the data to fulfil their tasks. All service providers are carefully selected by us and commissioned. They are contractually bound to our instructions, are in possession of appropriate technical and organisational measures for the protection of the rights of the data subjects, they guarantee an appropriate level of data protection and are carefully monitored by us.

In addition, data may be disclosed in connection with official inquiries, court orders and legal proceedings if this is required for prosecution or enforcement.

You have the right to request information about the processing of your personal data by us at any time. Within the framework of provision of information, we will explain the data processing and make available an overview of the data stored about your person.

If the data stored by us is incorrect or out of date, you have the right to have this information corrected.

You can also request the deletion of your data. If in exceptional cases, due to other legal provisions, deletion is not possible, the data are blocked, so that they are only available for this legal purpose.

You can also restrict the processing of your data, e.g. if you believe that the data stored by us are incorrect. You also have the right to data portability, i.e. on request we will forward you a digital copy of the personal data provided by you.

To exercise your rights described here, you can contact us at the contact details provided in point 1 above, at any time. This also applies if you wish to receive copies of guarantees to demonstrate the adequate protection level of your data.

You also have the right to object to the data processing, which is based on Art. 6 1 p. 1 lit. E or F GDPR, or serves direct advertising. Finally, you have the right to complain to the Data Protection Authority we comply with. You can assert this right with a supervisory authority in the member state you reside in, your workplace or the place of the alleged violation. In Berlin, the responsible supervisory authority is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstr. 219, 10969 Berlin.