I. Scope of application
II. Access data
III. Handling of personal data
IV. Dealing with contact data
V. a) Data processing Course participation
V. b) Data processing alumni platform
V. c) Data processing press distribution list
VI. Cookies
VII. Matomo
VIII. Integration of third-party services and content
IX. Rights of the user: information, correction and deletion
 


I. Scope of application

This privacy policy is intended to inform users of this website about the type, scope and purpose of the collection and use of personal data by the website operator in accordance with the Federal Data Protection Act and the Telemedia Act. The operator of this website is:
BERNHARD-NOCHT-INSTITUTE FOR TROPICAL MEDICINE
- FOUNDATION UNDER PUBLIC LAW -
Bernhard-Nocht-Straße 74
D-20359 Hamburg
Phone: +49 40 42818-0 (24 h daily)
Fax: +49 40 42818-265
URL: www.bnitm.de
E-mail: bni(at)bnitm.de
The website operator takes your data protection very seriously and treats your personal data confidentially and in accordance with the statutory provisions.
Please bear in mind that data transmission on the Internet can always be subject to security vulnerabilities. Complete protection against access by third parties is not possible.

^ TOP


II Access data

The website operator collects data about access to the site and stores it as "server log files". The following data is logged in this way:

   Website visited
   Time at the time of access
   Amount of data sent in bytes
   Source/reference from which you reached the page
   Browser used
   Operating system used
   IP address used

This data is largely required for the visitor to access the website. Furthermore, this data is used for statistical evaluations and to improve and troubleshoot the website. However, the website operator reserves the right to check the server log files retrospectively if there are concrete indications of unlawful use.

^ TOP


III Handling of personal data

The website operator only collects, uses and passes on your personal data if this is permitted by law or if you consent to the data processing.
Personal data is all information that can be used to identify you personally and that can be traced back to you - for example, your name, e-mail address and telephone number.
Data is not exported or processed in countries outside the European Economic Area.

^ TOP


IV. Dealing with contact data

If you contact the website operator using the contact options provided, your details will be stored so that they can be used to process and respond to your inquiry. This data will not be passed on to third parties without your consent.

^ TOP
V. a) Data processing Course participation

The website operator offers you the opportunity to sign up and register for participation in certain courses via its website and to access the content provided via a Moodle platform during or after the course.
Use of the course registration form is required for participation in these courses.
By completing and submitting a course registration or course application form, the following personal data will be processed for the purpose of reserving your participation in the course, allocating payments and, if necessary, further consultation:

   Data that you must enter during registration
   The fields for name, e-mail address, address and telephone number are required in order to clarify any queries regarding your participation in the course, to send you a confirmation of your participation and to be able to allocate your payment of the course fee.
   Data that you can enter during registration
   You do not need to enter any further data to register for the course, but you are free to provide additional personal details when registering.
   Data collected in the background when registering for a course (logging):
   Anonymous usage statistics are created.

Employees of the course secretariat, the course management and IT staff who are responsible for the maintenance and administration of the underlying systems have access to this data. However, they only process this data to the extent necessary to ensure that the registration process runs smoothly.
No personal data will be passed on to third parties; statutory transmission obligations remain unaffected.
Personal data relating to course registration will be deleted upon request by the user or three years after registration.
When using the Moodle platform, access data is collected - as is the case when visiting any website.
No other personal data is collected.
The Moodle platform uses cookies, which are required for logging in to the platform.
In addition to Moodle, Zoom, Webex and other apps or programs are used for the digital delivery of courses. Where necessary, there are order processing contracts between the BNITM and the respective software providers.

^ TOP


V. b) Data processing alumni platform

The website operator provides a platform for alumni, visiting scientists and other persons associated with the Bernhard Nocht Institute for Tropical Medicine. A Moodle system is used for this platform. You are free to use this Moodle platform, but it is a prerequisite for participation in the courses provided.
Purpose and scope of data processing:

When using Moodle, the following personal data is processed for the purpose of user administration, authentication of users and the implementation of virtual courses:
Employees responsible for the administration and system management of the Moodle platform at the BNITM have access to all of the above-mentioned data, but only process this data to the extent necessary to ensure the proper operation of the learning platform.
No personal data will be passed on to third parties; statutory transmission obligations remain unaffected.

   Data that is already stored in the BNITM and that is entered in the Moodle database during the first login (registration). These are: Your login name, your last name, your first name and your e-mail address. This data is mandatory for using the learning platform.
   Data that you must enter during registration
   Information about yourself, your expertise and your connection to BNITM will be requested during registration. This is relevant in order to verify your identity and your connection to BNITM.
   Data that you can enter during registration
   You do not need to enter any further data to use the learning platform, but you are free to provide additional information about yourself when registering or later on your profile page. You also have the option of uploading a picture of yourself. The data you enter when registering, the data you enter in your profile and your role (e.g. teacher or student) can generally be viewed by managers, teachers and other students. You can set certain data to be hidden from other students, to be visible only to members of the courses you are enrolled in, or to be visible to all users. Please note: this data is always visible to administrators and teachers.
   Data that is collected in the background when using the learning platform (logging), in particular at what time you access which components of the course offerings and profiles of other users, possibly also whether you have completed assigned tasks and whether and how you have participated in workshops. Some of this data can be viewed by the "Teacher" role. Anonymous usage statistics are created.
   Data that you enter yourself when using the learning platform, e.g. posts that you make in forums or messages that you send in a chat.
   

The following tools are available on the learning platform:

   Chat: In the chat, you can communicate with other users in real time. The messages are visible to all course members with your name, the time of your contribution and, if applicable, your picture. The conversation history is saved temporarily until the last user has left the current chat session. All chat data is then deleted. Chat logs are not saved.

   Forums: In forums, you can communicate with other course members on a time-delayed basis. Your posts are visible to other course members with the date and time of the entry, your name and, if applicable, your picture. Posts in forums and attached files can be accessed by other users even after your Moodle access has been deactivated until the course in question is deleted.

Deletion of data:

Personal data on your profile page will be deleted at the user's request or after three years of inactivity. You can delete profile data that you have entered voluntarily at any time.
The deletion of a course is initiated by the course instructor.
In particular, contributions in wikis, forums and journals as well as files provided by you can be accessed by other users even after your Moodle access has been deactivated until the affected course is deleted.

^ TOP


V. c) Data processing Press distribution list

If you would like to receive press releases, we require a valid e-mail address and the ability to verify that you are the owner of the e-mail address.
Your data will be treated confidentially and will only be used to send you the information you have requested.

^ TOP


VI Cookies

This website uses cookies. These are small text files that are stored on your end device. Your browser accesses these files. The use of cookies increases the user-friendliness and security of this website.
Common browsers offer the setting option of not allowing cookies. Note: There is no guarantee that you will be able to access all functions of this website without restrictions if you make the appropriate settings.
The cookies used are in detail:

   Cookies from Matomo (further information in the section " Matomo")
   Cookies from Moodle platforms that are stored when you use these platforms.
   This concerns:
       Alumni platform
       Platform for the provision of course material

   When you use Moodle, three cookies are stored on the computer you are using.
   You can only use Moodle if you allow cookies in your browser, at least temporarily. The cookies with the names "MoodleSession" and "MoodleSessionTest" are session cookies that are deleted after you close your browser. These cookies are necessary to enable access to all pages after logging in. The third cookie is called "MOODLEID". With this cookie, your login name is stored in your browser in the form of an RC4 cipher and transmitted back to our server each time you contact it.
   This makes it possible for the login name to be automatically entered in the login form when you log in to our Moodle server again. This cookie is valid for 60 days and is automatically deleted by your browser after this time if you have not specified in your browser settings that cookies should be deleted earlier.

^ TOP

VII. Matomo

We use the web analysis tool "Matomo" for the needs-based design of our websites. Matomo creates user profiles on the basis of pseudonyms. For this purpose, permanent cookies are stored on your end device and read by us. In this way, we are able to recognize and count returning visitors. Data entered in forms is not recorded and is not visible at any time.

Data processing is based on your consent in accordance with Section 25 (1) TTDSG, Art. 6 (1) (a) GDPR, provided that you have given your consent via our banner. You can withdraw your consent at any time. Please make the appropriate settings via our banner.

Further information on Matomo's terms of use and data protection regulations can be found at: https://matomo.org/privacy/

^ TOP


VIII Integration of third-party services and content

Our website contains content from third-party platforms, such as videos from YouTube and maps from Google Maps. In order to use these services, your browser integrates the files from the respective providers. You can read the information stored about you on the servers of third-party providers in the respective privacy policies of the third-party providers.

We embed map services on our websites that are not stored on our servers. When you access our pages with embedded map services, content from the third-party provider that provides the map services is loaded. As a result, the third-party provider receives the information that you have accessed our site and the usage data technically required in this context. We have no influence on further data processing by the third-party provider. The embedding takes place on the basis of Art. 6 para. 1 lit. f GDPR in the interest of enabling you to use map services.

^ TOP


IX. Rights of the user: information, correction and deletion

As a user of the website, you can request information free of charge about what personal data has been stored about you. If your request does not conflict with a legal obligation to retain data (e.g. data retention), you have the right to have incorrect data corrected and to have your personal data blocked or deleted.
You have the right to restrict the processing of your personal data in accordance with Art. 18 GDPR.
You have the right to withdraw your consent to the processing of your data at any time.
In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller.
Please contact our data protection officer at datenschutz(at)bnitm.de.
If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the competent supervisory authority.

Privacy policy for online applications
Collection, processing and use of your data

If you would like to apply to the Bernhard Nocht Institute for Tropical Medicine (BNITM), we require various personal details in order to process your application and carry out the selection procedure. When you apply online, the following data will therefore be collected, processed and used for the purpose of processing your application:

   Position for which you are applying
   First and last name
   Phone number
   E-mail address
   Date of birth
   Street, postal code, city, country
   Curriculum vitae
   Application documents such as certificates
   Further documents
   Cover letter
   Salary expectations
   Earliest entry date

We may also evaluate the data you submit internally following the selection process in order to compile statistics on the application process. This evaluation is carried out exclusively for our own purposes and in anonymized form.
Confidentiality

We treat your data as strictly confidential and do not pass it on to third parties without your consent.
Contact us

As part of the selection process, we will contact you either by post, e-mail or telephone using the address or telephone number you have provided.
Application exclusively for a specific position

If you have applied for a specific position advertised by us, we will only consider your application documents for this specific position.
Application for other positions

We are also regularly interested in and in need of suitable and competent applicants in other areas. We are therefore naturally pleased if we can also consider your application for other vacancies. The prerequisite for this is that you have expressly consented to such use when sending your application. If you have given us such consent, we will contact you by post, e-mail or telephone if you appear suitable for the vacant position to ask you whether you are interested in taking part in the selection process for the vacant position.
Consents

You may have expressly given us the following consents and we have recorded these. In accordance with our obligation under the German Telemedia Act, we keep the content of these consents available for you to access at any time in our privacy policy. You can revoke these consents at any time with effect for the future.

   I agree that the data I provide may be collected, processed and used electronically in encrypted form for the purpose of processing my application. If I provide information about my racial and ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health or sex life in my application, in particular in my CV or references, my consent also applies to this specific information.
   I agree that the data I have provided will be stored for a period of 2 years so that my application can also be considered for future vacancies, provided that a separate declaration of consent has been issued.


Deletion of your data and right of withdrawal

We generally delete your data 6 months after completion of the selection process for the specific position for which you have applied, unless you have consented to the further use of your data to fill other vacancies.
If you have consented to the further use of your data to fill other vacancies, we will delete your data 2 years after you have given your consent.
Of course, you have the right to withdraw your application at any time.