Privacy

Data privacy notice

We are delighted that you are visiting our website and thank you for your interest in the Society of Friends of the Department of Otolaryngology at Hannover Medical School. Below you will find information about the collection of personal data in connection with the use of our web pages.

Personal data are all those data which can be related to you personally, such as your name, address, email address, telephone number, account information and value added tax-related details.

Personal data include information about your use of our website. We will collect personal data when you visit our website. This usually involves the use of log files and cookies. More detailed information on the data collected, as well as on log files and cookies, is available further below.

Generally, your personal data are stored subject to this being required for the formation, execution or termination of a contract entered into with us. Any further storage, processing and use will take place only if this is required or permitted by statutory retention requirements or legal provisions. In such cases, these data will be stored for the duration of statutory retention periods. If we collect your IP address, this will be stored only for the period of your visit to our website and then immediately removed or anonymized by being shortened.

Data controller

The data controller pursuant to Art. 26 of the General Data Protection Regulation (GDPR), responsible for processing of data on the web page https://icbt-hannover.com and on the Society’s presence on social-media channels such as Facebook and Youtube, is

Förderverein der Hals-Nasen-Ohrenklinik an der Medizinischen Hochschule Hannover e.V

(Society of Friends of the Department of Otolaryngology at Hannover Medical School)

Executive Committee:

Chair: Prof. Dr. Lenarz, Thomas, Hannover
Secretary: Dr. Weber, Benno, otolaryngologist, Hannover
Deputy Chair: Dr. Kempf, Hans-Georg, otolaryngologist, Hannover

Förderverein der HNO-Klinik an der Medizinischen Hochschule Hannover e.V.
Aussiger Wende 7b
30559 Hannover
Germany

Service providers contracted

Our web pages and email systems are provided and maintained with the assistance of processors and IT service providers who work for us and who therefore, in so far as is necessary, may be able to view (receive) your data. We enter into data-processing agreements for this purpose.

Questions regarding data privacy

We safeguard your privacy and your private data. We will collect, process and use your personal data in accordance with the content of these data privacy provisions and the applicable data privacy rules, especially those of the GDPR.

If you have any questions about data privacy and the exercising of your rights as a data subject, do not hesitate to contact us. It is best to use the following email address:

datenschutz@foerderverein.mhh-hno.de

Informational use

When you visit our website, the browser used on your device will automatically transmit information to our website’s server. This information is temporarily stored in a log file. The following data are recorded without the need for any action on your part, and stored until they are automatically removed:

• IP address of the computer sending the enquiry;
• Date and time of the request;
• By how much the time zone differs from Greenwich Mean Time (GMT);
• Content of the request (specific page);
• Volume of data transmitted and access status (‘file transmitted’, ‘file not found’, etc.);
• Web page from which the request originates;
• Operating system and its interface;
• Language and version of your browser.

The aforementioned data will be processed by us for the following purposes:

• To ensure a reliable connection is established to the website;
• To ensure your visit to our website is a pleasant experience;
• To evaluate system security and system stability; and
• For other administrative purposes.

The maximum storage period for log files is 30 days where data stored are anonymized, and more than 30 days where data stored are not anonymized.

The legal basis for data processing is Art. 6 (1) sentence 1 f) GDPR.

Cookies

We use cookies for our web pages. Cookies are small text files that are, during your visit to our web pages, transmitted to your browser and stored on your computer by your browser for subsequent retrieval.

Cookies are used to make your visit to our website more pleasant. For example, we use session cookies to ascertain that you have already visited individual pages of our website. These cookies will be automatically removed once you have left our site.

Data processed by cookies are necessary for the aforementioned purposes of safeguarding our own legitimate interests and those of third parties in accordance with Art. 6 (1), sentence 1 f) GDPR.

Most browsers accept cookies automatically. You can, however, configure your browser such that no cookies will be stored on your computer or such that you will always be asked for permission before a new cookie is created. Fully disabling cookies may, however, prevent you from being able to access certain features of our website.

Web analytics

For data privacy reasons, we deliberately refrain from use of web analytics tools.

Social-media links

If our web pages contain links to social media with identifying logos, these will not be social-media plugins but merely links to any content we may have within these media. If you click on one of these links, your IP address will generally be transmitted to the operators of the various platforms.

Should you avail yourself of one of these services and also be logged in with your specific account, data logged by the operators of these social media may include details of your surfing history. Transmission of your IP address to the operators of the web pages accessed is necessary for technical reasons and applies to all web pages. We have no influence on any further processing by the providers concerned. You are referred to the data privacy notices of such providers.

Data processing in third countries

Processing of your personal data in countries outside the European Union and the European Economic Area (third countries) will not take place, with the exception of the cases specified in relation to the aforementioned and subsequently mentioned services and processing.

Special information on data privacy

Use of our contact form, email enquiries

If you make contact with us using a form provided on the website, or by email, the data you have provided (name, your email address, your message and (if applicable) your telephone number), including the recipient you have chosen, will be processed and stored by us in order to answer your question(s).

Data processing for the purpose of contacting us takes place in accordance with Art. 6 (1) sentence 1 a) GDPR on the basis of your voluntarily given consent, or in accordance with Art. 6 (1) b) GDPR for the implementation of pre-contractual or contractual measures, where this contact with us means a contractual relationship is established.

We will remove data generated in conjunction with this once their storage is no longer necessary, or we will restrict their processing if statutory storage requirements apply (max. ten years where commercial and tax law require archiving of business email correspondence).

Data processing is necessary for the performance of a contract to which you are party, or in order to take steps at your request prior to entering into a contract, pursuant to Art. 6 (1) b) GDPR. In all other cases, processing will be carried out on the basis of Art. 6 (1) f) GDPR, as we have a legitimate interest in the processing of enquiries.

Events

We use the ticketing services platform eveeno.com for staging events; ordering, invoicing, payment and ticketing are processed on our behalf via this service provider. If you register for one of our events, you will be directed to the eveeno website. The following data are collected and stored by eveeno:

• Participant’s email address and name;
• Address;
• Payment mode;
• Telephone number
• EFN (einheitliche Fortbildungsnummer, i.e. a reference number issued to physicians in Germany for accredited CME);
• Billing address (if applicable).

eveeno’s data privacy notice (contact: Andreas Bothe) can be viewed here: https://eveeno.com/de/privacy

Data will be processed and stored until such time as the purpose of this processing has been fulfilled and statutory retention periods do not prevent removal.

Data processing is necessary for the performance of a contract to which you are party, pursuant to Art. 6 (1) b) GDPR. In all other cases, processing will be carried out on the basis of Art. 6 (1) f) GDPR, as we have a legitimate interest in such processing.

Disclosure of data

Your personal data will not be transmitted to third parties for any purposes other than those given below. We will share your personal data with third parties only where:

• you have given your express consent to this in accordance with Art. 6 (1) sentence 1 a) GDPR;
• this is permitted by law and, in accordance with Art. 6 (1) sentence 1 b) GDPR, necessary for execution of arrangements arising from the contractual relationship,
• there is, in accordance with Art. 6 (1) sentence 1 c) GDPR, a legal requirement that this disclosure take place;
• such disclosure is, under Art. 6 (1) sentence 1 f) GDPR, necessary for the establishment, exercising or defence of legal claims, and there are no grounds for assuming that you have a legitimate and overriding interest warranting the non-disclosure of your data. 

Your rights

You have the following rights towards us regarding your personal data:

• Right to information about your personal data that have been processed by us (pursuant to Art. 15 GDPR);
• Right to correction of data, or to have incomplete data completed (pursuant to Art. 16 GDPR);
• Right to removal of your data (pursuant to Art. 17 GDPR);
• Right to restriction of processing (pursuant to Art. 18 GDPR);
• Right to data portability (pursuant to Art. 20 GDPR);
• Right to lodge a complaint with a supervisory authority (pursuant to Art. 77 GDPR);
   The competent supervisory authority under whose direct jurisdiction we fall is the Data Protection
  Officer for the Federal State of Lower Saxony: https://lfd.niedersachsen.de/startseite/.

Right of objection and revocation

If you have given your consent to the processing of your data, you may revoke this consent at any time. Should you revoke your consent, this will affect the legitimacy of our processing of your personal data once you have notified us of thereof.

If we base the processing of your personal data on a balancing of interests (the legal basis for which being Art. 6 (1) f) GDPR) then you may, pursuant to Art. 21 GDPR, object to this processing. This is the case if the processing is, in particular, not required for the performance of a contract with you, as explained by us above in this data privacy notice for each individual data-processing activity and function on our web pages. Should you exercise a right to make such an objection, we ask that you explain the reasons why we should not process your personal data as we generally do. When we receive your objection supported with reasons, we will examine the situation and either stop or adjust data processing or explain to you our compelling legitimate grounds for continuing this processing.

Option of contacting us regarding your rights

You can get in touch with us at any time with a view to exercising your rights. It is best to use the following email address for this purpose:

datenschutz@foerderverein.mhh-hno.de

Data-security

Please note that, when you visit our web pages, a widely used technology called Secure Socket Layer (SSL) encryption is in place; we use this in conjunction with the strongest level of encryption supported by your browser. This will generally be 256-bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology instead. You can tell whether a given page on our website is encrypted by looking for the closed padlock or key icon in the bottom status bar of your browser.

We also take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or unauthorized access by third parties. Our security measures are continuously being improved in line with technological advances.

Up-to-date nature of, and changes to, this data privacy notice

This data privacy notice is currently valid and was last updated on 1 August 2021.

It may be necessary to alter this data privacy notice due to the further development of our website and our offering, or owing to changes in statutory or official requirements. You can access the latest version of our data privacy notice at all times by visiting our website.