Responsible

Responsible for the collection and processing of personal data within the meaning of the General Data Protection Regulation and national data protection laws as well as other data protection regulations is:

Medizinische Hochschule Hannover
Carl-Neuberg-Straße 1
30625 Hannover
Germany

Tel.:	+49 511 532-0000
Fax:	+49 511 532-0000
E-Mail:	DiversityInTransplantation@mh-hannover.de
Internet:	https://www.DiversityInTransplantation.org

Data Protection Officer of the Hannover Medical School

Medizinische Hochschule Hannover
Der Datenschutzbeauftragte – OE 8420
Carl-Neuberg-Straße 1
30625 Hannover

Tel.:	+49 511 532-6000
Fax:	+49 511 532-4621
E-Mail:	datenschutz@mh-hannover.de
Internet:	https://www.mh-hannover.de

General information on data processing

We only collect and use personal data from our users to the extent that this is necessary to provide a functioning website and our content and services. The collection and use of personal data of our users takes place regularly only with the consent of the user. This is exceptionally not the case if prior consent cannot be obtained for actual reasons and the processing is authorized by law. If consent is obtained, Article 6 Paragraph 1 Letter a of the EU General Data Protection Regulation (GDPR) is the relevant legal basis. If the processing of personal data is necessary to fulfill a contract, the legal basis is Art. 6 (1) (b) GDPR. Art. 6 (1) (d) GDPR is to be used as the legal basis if this is necessary for the vital interests of the data subject or another natural person. On the other hand, Art. 6 Paragraph 1 lit. f GDPR is applicable if the processing of personal data is necessary to protect the legitimate interests of the practice or third parties and this outweighs the interests, fundamental rights and fundamental freedoms of the person concerned.
The personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Storage beyond this can take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible is subject. In this case, too, the data will be deleted or blocked if a storage period provided for this purpose expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

Log Files

When you visit our website, our system automatically collects information and data that your browser automatically transmits to us. This concerns the following data:

• Information about browser type and browser version
• User’s operating system
• User’s Internet Service Provider
• Date and time of server request
• Websites from which the user’s system accesses our website
• Websites accessed by the user’s system through our website
• The data is also stored in the log files of our system.
• A storage of this data together with other personal data of the user does not take place.

The legal basis for the temporary storage of the data (and the log files) is Article 6 (1) (f) GDPR. The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected, which is to enable delivery of the website to the user’s computer.
The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation and use of the website. There is therefore no possibility of objection on the part of the user.

Cookies

Our website partially uses so-called cookies. Cookies do not damage the user’s computer and do not contain viruses. They serve to make our offer more user-friendly and secure. Cookies are text files that are stored on the user’s computer and saved by the browser. These cookies enable us to recognize the browser on the next visit. Every user can set his browser so that he is informed about the setting of cookies and only allow cookies in individual cases, accept cookies for certain cases or generally exclude them and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted. The legal basis for the processing of personal data using technically necessary cookies is Article 6 (1) (f) GDPR.

Contact form and email contact

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. You expressly agree to this processing by using the contact form. We will not pass on the collected data without your consent. The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case if all the circumstances show that the facts in question have been finally clarified. The legal basis for processing the data is Art. 6 (1) (a) GDPR, since you have consented to the data processing.
If you contact us by e-mail, the user’s personal data transmitted with the e-mail will be stored. In this context, too, there is no disclosure to third parties. The data will only be used as part of the conversation.
You have the option at any time to revoke your consent to the processing of the personal data collected. To do this, please contact the address given in the imprint. In such a case, the conversation cannot be continued.

SSL encryption

For security reasons and to protect the transmission of confidential content, such as inquiries that you send to us as the site operator via the contact form, this site uses SSL encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from „http://“ to „https://“ and by the lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

Data subject rights

1. Right to information

You have the right to request information at any time as to whether personal data is being processed by us and for what purpose.

2. Right to Rectification

You have the right to have the data corrected and/or completed if the processed personal data is incorrect or incomplete.

3. Right to Erasure

You have the right to demand the immediate deletion of personal data concerning you.

4. Duty of Notification

You will be informed of any correction, deletion or restriction of the processing of personal data, unless this is impossible or involves a disproportionate effort.

5. Data portability

You have the right to receive the personal data that you have provided in a structured, common and machine-readable format and to transmit this data to another person responsible without hindrance.

6. Right to restriction of processing

Every person affected by the processing of personal data has the right to demand that the person responsible restrict the processing if one of the following conditions is met:

• the accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data,
• the processing is unlawful and the data subject refuses to have the personal data deleted and instead requests that the use of the personal data be restricted;
• the person responsible no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims, or
• the data subject has lodged an objection to the processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.

7. Right to Object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data relating to you, which is based on Article 6 paragraph 1 letters e or f; this also applies to profiling based on these provisions. The person responsible no longer processes the personal data unless he can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

8. Right to revoke the declaration of consent

You have the right to withdraw your consent to the collection and processing of personal data at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation.

9. Right to lodge a complaint with a supervisory authority

You have the right to complain to a supervisory authority if you believe that the processing of your personal data violates the GDPR.

10. Exercising Your Rights

If you wish to make use of one of the rights mentioned, please contact the person responsible named in this data protection declaration at the address given.