Data Protection Policy

We are pleased about your interest in BalticNet-PlasmaTec, the international plasma technology cluster. The protection of your privacy when visiting our website is very important to us. If personal data is processed, we follow the applicable data protection laws.

1 General information about data processing

1.1 Scope and purpose of the processing of personal data

In principle, we collect and use your personal data only insofar as it is necessary to provide a functional website, as well as our content and services offered on the website. The processing of your personal data takes place based either on your consent or to the extent as the legal regulations allow this data processing even without consent.

1.2 Legal basis for data processing

Your personal data is processed based on the EU General Data Protection Regulation (GDPR) and the Landesdatenschutzgesetz – DSG M-V (State Data Protection Act).

The person responsible according to the General Data Protection Regulation and other national data protection laws of the member states and other data protection regulations is:

BalticNet-PlasmaTec

Legally represented by the General Manager: Alexander Schwock

Brandteichstraße 20, 17489 Greifswald, Germany

Fon: +49 3834 550 102

bnpt@balticnet-plasmatec.org

1.2.1 Given consent to the processing Art. 6 (1) lit. a GDPR

Insofar as you have given us consent to process personal data for specific purposes, Art. 6 (1) lit. a GDPR serves as the legal basis for the processing of personal data. Consent given can be revoked by you at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.

1.2.2 Pre-contractual and contractual measures (membership) Art. 6 (1) lit. b GDPR

Processing of personal data in the context of the performance of a contract (membership) to which you are a party or in order to take steps prior to entering a contract at your request is based on Art. 6 (1) lit. b GDPR. The purposes of data processing are governed by the respective contract documents and the subject matter of the contract.

1.2.3 Legal obligation Art. 6 (1) lit. c GDPR

If processing of personal data is necessary to comply with a legal obligation to which we are subject, Art. 6 (1) lit. c GDPR serves as a legal basis.

1.2.4 Legitimate interests Art. 6 (1) lit. f GDPR

If processing is necessary for the purposes of the legitimate interests pursued by BalticNet-PlasmaTec or by a third party (e.g., to assert legal claims and defend against legal disputes; to ensure IT security; to prevent criminal acts) and if your interests, fundamental rights and freedoms as data subject do not override the aforementioned interest, Art. 6 (1) lit. f GDPR serves as the legal basis for processing.

1.3 Data erasure and retention period

We process and store your personal data for as long as this is necessary to satisfy the respective purpose. If your data is no longer required to fulfil the purpose of the data processing, it will be deleted, unless this deletion is subject to statutory retention obligations. The data that you have given us, will be deleted after two months at the latest upon request, otherwise, we will delete the history of our communication with you after five years at the latest.

1.4 Access to personal data within BalticNet-PlasmaTec and by third parties

Within BalticNet-PlasmaTec, those entities gain access to your data and require it as a part of the “least privilege” (assignment of user rights to the lowest possible extent) and the “need-to-know” principle (knowledge of data only if necessary).

We may only transfer data to third parties outside BalticNet-PlasmaTec if this is necessary, if statutory provision so requires, if you have given your consent or if processors commissioned by us have contractually agreed to comply with the requirements of the GDPR and applicable local data protection law.

Under these circumstances, recipients of personal data may include responsible BalticNet-PlasmaTec entities, which are responsible for the processing of your data, and service providers if required.

1.5 Transfer of personal data to a third country or an international organisation

A transfer of data to countries outside the EU/EEA (so-called third countries) will only take place as it is necessary or required by law, you have given your consent or as part of data processing by a processor. If service providers in third countries are deployed, in addition to written instructions, they are required to comply with data protection standards in Europe by agreeing on the EU standard contractual clauses.

1.6 IT security and links to third-party websites

BalticNet-PlasmaTec uses technical and organizational security measures to protect your data that we manage against accidental or intentional destruction, manipulation, loss or access by unauthorized persons.

Our websites contain links to other websites. Our Privacy Policy does not apply to these websites.

1.7 Obligation to provide personal data

While entering into a membership request, you must provide the personal data that BalticNet-PlasmaTec must collect due to legal provisions.

If we provide you with services on this website that you can voluntarily use, there is no duty to provide your data to us, but without your personal data, you may not be able to use or benefit from our services.

1.8 „Profiling“ and automated decision-making

We do not use fully automated decision-making according to Art. 22 GDPR. BalticNet-PlasmaTec does not use “profiling”. If we use it in individual cases, we will inform you about this separately, if it is required by law and – if necessary – obtain your prior consent.

1.9 Sources of your personal data

We use data that we receive from you through personal contact, registration forms, membership requests or social media channels.

2 Hosting

We host the content of our website with the following provider:

External hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the hoster(s). This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

External hosting is carried out to fulfil the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). If a corresponding consent has been requested, the processing is carried out exclusively based on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Our hoster(s) will only process your data to the extent necessary to fulfil its performance obligations and follow our instructions concerning this data.

We use the following hoster(s):

  • Jan Pietruska
  • jan pietruska INTERNETAGENTUR
  • Am Mühlentor 1, 17489 Greifswald, Germany

3 Data processing for the provision of the website and the creation of log files

By default, when you visit our website, our web servers obtain and collect the name of your Internet service provider, your IP address, the website from which you are visiting us, the websites you visit on our website, and the date and duration of the visit. This data is stored in the log files of our systems and is used for problem or error analysis. However, the use of the IP address is limited to the technically necessary extent and is abbreviated and therefore used only anonymously, so that it is not possible to assign the IP address to a user. The data is not merged with personal data.

The temporary storage of the abbreviated IP address by our systems is technically necessary to display the website on your terminal device. Storage in log files is done to ensure the functionality of the website. Data is not being analysed for marketing purposes in this context.

For these purposes, we have a legitimate interest in processing data according to Art. 6 (1) (f) GDPR.

The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Therefore, there is no possibility for you as a user to object to such processing.

4 Data processing in respect of services offered on the website

On our website, various services are offered, for the use of which we request personal data from you.

4.1 Data processing in the context of marketing activities (DOI, Tracking)

We want to provide you with information, which is individually tailored, to your interests as much as possible. In order for you to use these services, we will require personal data from you, such as name, e-mail address, subject and message, which you can provide to us via a contact form on the contact page.

  • In the sending of personalized information (e.g. invitations to trade fairs and events, surveys, invitations to join projects and company communications) of BalticNet-PlasmaTec by e-mail, and
  • In the tracking of your user behaviour in connection with BalticNet-PlasmaTec offers (which sections, articles, and other content on BalticNet-PlasmaTec websites you visited).

The collection of your data via the membership and contact form serves to send information to you. The tracking information of your usage behaviour, serves exclusively, to be able to send you information tailored to your interests as individually as possible.

If you submit the membership form and the contact form, you will receive a personal confirmation e-mail and further details from us to your provided e-mail address. The legal basis for the processing of your personal data is Art. 6 (1) lit. a GDPR.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. Therefore, the data is stored as long as the membership exists. At any time you have the possibility to revoke your consent to the processing of personal data by e-mail to bnpt@balticnet-plasmatec.org. In this case, all personal data stored in the course of contacting us as well as information about your usage behaviour will be deleted.

4.2 Use of our contact and membership forms

The website has contact and membership request forms that can be used to contact us electronically.

To use the contact form, you can fill in the information in the respective input mask (e.g. name, e-mail address, subject and message). This personal data will be sent to the person in our cluster that is responsible for processing and storing in our systems.

To use the membership form, you can fill in the information in the respective input mask (e.g. name, e-mail address, company name, phone number etc.). This personal data will be sent to the person in our cluster that is responsible for processing and storing in our systems.

The data filled in the input masks will be used exclusively to process your inquiry.

The legal basis for the processing of your personal data is Art. 6 (1) (a) GDPR.

The data will be erased as soon as the communication process is completed.

You have the right to withdraw your consent to the processing of personal data at any time by sending an e-mail to bnpt@balticnet-plasamtec.org. In this case, all personal data stored as part of the contract will be deleted with effect in the future.

4.3 Data processing in connection with Cookies and social media networks

4.3.1 Cookies

We use cookies. Cookies are text files that are placed and stored on a computer system via an internet browser. Cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the visited Internet pages and servers to distinguish your individual browser from other Internet browsers that contain other cookies. A specific Internet browser can be recognised and identified via the unique cookie ID. The use of cookies enables us to provide more user-friendly services to the users of this website. Information and offers on our website can be optimised in the interests of the user, for example by recognising the user of the website. This means that access data does not have to be re-entered each time the website is visited, as this is done by the website and the cookie stored on the user’s computer system. However, a distinction must be made in the use of cookies with regard to different purposes. If these small files are absolutely necessary in order to display the website properly, they are not used voluntarily. The legal basis for the integration of cookies in this case is Art. 6 (1) lit.f GDPR.

In the following, we have compiled links where you can find detailed information on how to deactivate cookies in common browsers:

Mozilla Firefox: https://support.mozilla.org/de/kb/drittanbieter-cookies-schutz-aktivitatenverfolgung

Microsoft Edge: https://support.microsoft.com/de-de/windows/verwalten-von-cookies-in-microsoft-edge-anzeigen-zulassen-blockieren-l%C3%B6schen-und-verwenden-168dab11-0753-043d-7c16-ede5947fc64d

Google Chrome: https://support.google.com/chrome/answer/95647

Safari: https://support.apple.com/de-de/guide/safari/ibrw850f6c51/mac

4.3.2 Data processing in connection with social media networks

In addition to this website, BalticNet-PlasmaTec provides and manages profiles and pages on the social media platforms Twitter and LinkedIn in order to provide the public with a broad range of information and to enable effective communication with the users.

If users visit one of our profiles on one of the platforms mentioned above their data could be processed outside the boundaries of the European Union, resulting in a lower level of data protection. The processing of your personal data is performed by the third parties who run these social networks, based on their own data protection declarations. Please contact the respective third parties to learn more about the kind and scope of data processing. Please contact the respective person who runs the platform if you would like to make any information enquiries and exercise your rights as only s/he has access to your user data.

4.3.3 Processing of your personal data when contacting us

If you provide us with personal data by contacting us, e.g. by e-mail, contact form or direct message within social media, we process your data according to Art. 6 (1) p. 1 lit. b GDPR to fulfil the contract or for the implementation of pre-contractual measures that are carried out in response to your request or according to Art. 6 (1) p. 1 lit. f GDPR due to our legitimate interest in answering your request. Thereby, we process the data that you provide to us directly via your inquiry. It may also happen that we visit your public profile and store data from it, provided that this is necessary for the above-mentioned purposes.

5 Your rights as a data subject

If your personal data is being processed, you are the data subject according to the GDPR and you have the following rights:

5.1 Right of access (Art. 15 GDPR)

Upon request, you can obtain confirmation from us as to whether your personal data is being processed by us. If this is the case, you can request us to give you access to the information provided by law (see Art. 15 (1) GDPR). We will also notify you of appropriate safeguards according to Art. 46 GDPR in the context of data transfer in case your personal data is being transferred to a third country or an international organization. There are restrictions according to Art. 34 and 35.

5.2 Right to rectification (Art. 16 GDPR)

You have a right to rectification and/or completion if the processed personal data is inaccurate or incomplete. We have to rectify the data without due delay.

5.3 Right to restriction of processing (Art. 18 GDPR)

Provided that the legal requirements are met (see Art. 18 (1) GDPR), you have the right to restrict the processing of your personal data. For consequences of the restrictions please refer to Art. 18 (2) and (3) GDPR.

5.4 Right to erasure (Art. 17 GDPR)

You have the right to demand from us the erasure of your personal data without undue delay, and we are obliged to immediately erase this data if any of the reasons according to Art. 17 (1) GDPR apply. The right to erasure does not apply in cases of Art. 17 (3) GDPR. Furthermore, there are restrictions according to Art. 34 and 35 BDSG.

5.5 Right to notification

If you have exercised your right to rectification, erasure, or restriction of processing, we are obliged to notify each recipient to whom the personal data have been disclosed of this rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. We have to inform you about those recipients upon your request.

5.6 Right to data portability (Art. 20 GDPR)

You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format. For details, please refer to Art. 20 GDPR.

5.7 Right to object (Art. 21 GDPR)

You have the right to object at any time to the processing of your personal data that is based on Art. 6 (1) (e) or (f) GDPR on grounds relating to your particular situation. Further details can be found in Art. 21 GDPR.

In addition, you have a right to complain to a supervisory authority according to Art. 77 GDPR in connection with § 19 GDPR.

6 Name and contact details of the controller

BalticNet-PlasmaTec

Alexander Schwock
Brandteichstraße 20
17489 Greifswald, Germany

7 Contact details of the data protection officer

BalticNet-PlasmaTec

Alexander Schwock
Brandteichstraße 20
17489 Greifswald, Germany