Skip to main content

Privacy policy

A. Basic information pursuant to Art. 13/14 DS-GVO

1. Responsibility for data processing

RWI - Leibniz Institute for Economic Research e. V.
Hohenzollernstraße 1-3
45128 Essen

Postal adress:
P.O Box 10 30 54
45030 Essen

Phone: +49 (201) 8149-0
Fax: +49 (201) 8149-200
E-mail: rwi@rwi-essen.de

2. Data protection officer of RWI

RWI – Leibniz Institute for Economic Research e. V.
Katharina Nowak-Mohr
Hohenzollernstrasse 1-3
45128 Essen
Phone: +49 (0) 201 8149-0
Fax: +49 (0) 201 8149-200
E-mail: Datenschutz@rwi-essen.de

3. Supervisory authority

If you believe the processing of your personal data by RWI is not lawful, you may lodge a complaint with any data protection supervisory authority.

The competent supervisory authority pursuant to Art. 55 DS-GVO is the

Office of the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf
Phone: +49 211/38424-0
Fax: +49 211/38424-10
E-mail: poststelle@ldi.nrw.de

 

4. Your right

In accordance with the statutory provisions, you as the person concerned have the right to obtain information about your data stored by RWI free of charge at any time.

In addition, you can assert your rights to correction, deletion or restriction of processing or the right to object to RWI at any time. This also applies to a right to data portability.

If you have provided us with your personal data based on consent, you could revoke the consent at any time for the future.

If you have any questions or comments about data protection, please contact us.


B. Purposes and scope of data processing
The security of personal data such as name, address, telephone number or e-mail is important to us. Your data is conscientiously protected against loss, destruction, falsification, manipulation and unauthorised access or disclosure. We therefore conduct our web activities in compliance with data protection and data security laws. In the following, you will learn what information we may collect and how we handle it.

5. General information on data processing

 

a) Scope of the processing of personal data

We do not collect any personal data via our websites unless you voluntarily provide us with such data. If you do provide us with personal data, we generally use it to respond to your enquiry. Data that is not required will be deleted immediately. Furthermore, we will neither sell your personal data to third parties nor market it in any other way; accordingly, no data will be sent to non-European countries.

b) Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 (1) lit. a EU General Data Protection Regulation (DSGVO) serves as the legal basis.

If processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) c DSGVO serves as the legal basis.

If processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.

c) Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the named standards expires, unless there is a need to continue storing the data for the conclusion or fulfilment of a contract.

6. Data processed for the provision of the website and the creation of log files

Every time the contents of the website are accessed, data is temporarily stored which may allow identification. The following data is collected:

  • Date and time of access
  • IP address
  • Host name of the accessing computer
  • Website from which the website was accessed
  • Websites accessed via the website
  • Page visited on our website
  • Message as to whether the call was successful
  • Amount of data transferred
  • Information on browser type and version used
  • Operating system 

The temporary storage of data is necessary for the course of a website visit in order to enable the delivery of the website. Further storage in log files takes place to ensure the functionality of the website and the security of the information technology systems. Our legitimate interest in data processing also lies in these purposes.

The data is processed based on Art. 6 para. 1 letter f DS-GVO.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of website provision, this is the case when the respective session has ended. The log files are kept directly and exclusively accessible to administrators after a maximum of 72 hours. After that, they are only indirectly available via the reconstruction of backup tapes.

7. Use of cookies

Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

 

7 a) Matomo

We use the open source software tool Matomo (formerly PIWIK) on our website to analyse the surfing behaviour of our users. The software sets a cookie on the user's computer (for cookies, see above).

The software runs exclusively on the servers of our website. Personal user data is only stored there. The data is not passed on to third parties.

The software is set in such a way that the IP addresses are not stored completely, but 2 bytes of the IP address are masked (e.g.: 192.168.xxx.xxx). In this way, it is no longer possible to assign the shortened IP address to the calling computer.

In addition, since version 3.13.6 Matomo implements the so-called "fingerprinting" procedure, which is used for tracking without cookies, anonymously. Every 24 hours, a random value is generated for this fingerprint, thus preventing recurring visitors to the website from being recognised and a personal user profile from being created.

The legal basis on which we process personal data using Matomo is Art. 6 para. 1 p. 1 lit. a. DSGVO (consent) and Art. 6 para. 1 p. 1 lit. f. DSGVO (legitimate interests).

 

Purpose of data processing and duration of storage

We need the data to analyse the surfing behaviour of users and to obtain information on the use of the individual components of the website. This enables us to continuously optimise the website and its user-friendliness. These purposes constitute our legitimate interest according to Art. 6 para. 1 lit. f DSGVO. By anonymising the IP address, we consider the interest of users in the protection of personal data. The data is never used to personally identify the user of the website and is not merged with other data.

The data is deleted when it is no longer needed for our purposes.
 

Deactivating data collection by Matomo

By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. (E.g. if you activate the "Do-not-Track" setting in your browser).

You can also prevent this website from collecting and analysing the actions you take. This protects your privacy, but also prevents us from learning from your actions and creating a better experience for you and other users. Uncheck or check the box below to opt out or opt in.

8. email communication

When contacting RWI by email, the user's details are processed for handling the contact request and its processing. The legal basis for processing the data is Art. 6 Para. 1 lit. f DSGVO. If the email contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) lit. b DSGVO.

9. Processing of content data

If personal or business data (e-mail addresses, names, addresses) is transmitted because of communication, this data is disclosed by the user on an expressly voluntary basis pursuant to Art. 6 para. 1 lit. a DS-GVO or based on the contractual membership relationship pursuant to Art. 6 para. 1 lit. b DS-GVO.

10. Social Media

RWI maintains an online presence within the following social network:

(Linkedln Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)

 (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland)

(Flickr Inc., Balliindamm 39, 20095 Hamburg, Germany)

(Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Irland)

You use these platforms and their functions on your own responsibility. When calling up the respective network, the terms and conditions and data processing guidelines of the operator apply. Insofar as we have control over the processing of your data, we ensure that the applicable data protection regulations are complied with.

In addition, individual functions of the Facebook, Twitter and Google+ networks are also integrated into our online services (so-called share buttons). You can only use both if you are registered and logged in to the respective social network. Therefore, please note that the terms and conditions of use and data protection of the respective social network apply to the use of the social network.

11. Information for applicants

RWI processes personal data of applicants in the context of application and selection procedures. The legal basis for the processing of your data is the initiation of a contract at the request of the data subject, Art. 6 para. 1 p.1 lit. b Alt. 1 DSGVO and § 26 para. 1 p. 1 BDSG. The application documents submitted are exclusively received by the employees involved in the respective procedure at RWI in order to carry it out.

If no employment contract is concluded, the application documents are deleted six months after rejection. We do not delete the documents immediately upon notification of the decision because we have a legitimate interest in continuing to store the documents due to the running of legal deadlines. The legal basis for this is Article 6 Paragraph 1 f DS-GVO.

We will only store the documents beyond the six months mentioned above if we expressly agree this with the applicant.

B. Data subject rights

a.Right to information: You can request information in accordance with Article 15 DS-GVO about your personal data that we process.

b. Right to object: you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of Article 6(1)(f) DS-GVO. The controller shall then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject.

c. Right to rectification: If the information concerning you is not (or is no longer) accurate, you can request a rectification in accordance with Art. 16 DS-GVO. If your data is incomplete, you can request that it be completed.

d. Right to erasure: You can demand the erasure of your personal data in accordance with Art. 17 DS-GVO.

e. Right to restriction of processing: You have the right to request restriction of the processing of your personal data in accordance with Art. 18 DS-GVO.

f.  Right to complain: If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice in accordance with Ar. 77(1) DS-GVO. See A. 3. of this privacy policy.

g. Right to data portability: If the requirements of Art. 20 (1) DS-GVO are met, you have the right to have data that we process automatically based on your consent or in fulfilment of a contract handed over to you or to third parties.

The collection of data for the provision of the website and the storage of log files are necessary for the operation of the website. They are therefore not based on consent according to Art. 6 (1) (a) DS-GVO or on a contract according to Art. 6 (1) (b) DS-GVO, but are justified according to Art. 6 (1) (f) DS-GVO.

12. Applicable law

All information or data, their use and the registration to RWI websites as well as all actions, toleration or omissions in connection with RWI websites shall be subject exclusively to German law. The place of jurisdiction shall be Essen.

 

RWI - Leibniz-Institut für Wirtschaftsforschung e.V.