I. Scope


This data protection declaration is intended to inform the users of this website in accordance with the Federal Data Protection Act and the Telemedia Act about the nature, scope and purpose of the collection and use of personal data by the website operator. The operator of this website is:




Bernhard-Nocht-Strasse 74

D-20359 Hamburg

Tel.: +49 40 42818-0 (24 h daily)

Fax: +49 40 42818-265

URL: www.bnitm.de

E-mail: bni(at)bnitm.de


The website operator takes your data protection very seriously and treats your personal data confidentially and in accordance with the statutory regulations.

Please bear in mind that data transmission on the Internet can always be subject to security vulnerabilities. Full protection against access by third parties is not possible.


II. access data


The website operator collects data on accesses to the site and stores these as "server log files". The following data is logged in this way:


    Visited website

    Time at the time of access

    Amount of data sent in bytes

    Source/reference from which you accessed the page

    Browser used

    Operating system used

    IP address used


This data is largely necessary for the visitor to access the website. Furthermore, this data is used for statistical evaluations and to improve and correct errors on the website. However, the website operator reserves the right to check the server log files retrospectively if there are concrete indications of illegal use.


III. handling of personal data


The website operator only collects, uses and discloses your personal data if this is permitted by law or if you consent to the data processing.

Personal data includes all information that can be used to identify you as a person and that can be traced back to you - for example, your name, e-mail address and telephone number.

Data will not be exported to or processed in countries outside the European Economic Area.


IV. Handling of contact data


If you contact the website operator using the contact options provided, your details will be stored so that they can be used to process and respond to your enquiry. This data will not be passed on to third parties without your consent.


V. a) Data processing Course participation


The website operator offers you the opportunity to sign up and register for participation in certain courses via its website and to access provided content via a Moodle platform in the course of or after the courses.

Use of the course registration is required for participation in these courses.

By completing and submitting a course registration or course enrolment form, the following personal data will be processed for the purpose of reserving your participation in the course, allocating payments and, if necessary, further consultation:


    Data to be entered during registration

    The fields for name, e-mail address, address and telephone number are required in order to clarify queries regarding your participation in the course, to send you a confirmation of your participation and to be able to allocate your payment of the course fee.

    Data you can enter during registration

    You do not have to enter any further data for course registration. However, you are free to enter additional information about yourself when registering.

    Data collected in the background when registering for a course (logging):

    Anonymous usage statistics are compiled.


Access to this data is granted to employees of the course secretariat, the course management and IT staff responsible for the maintenance and administration of the underlying systems. However, they only process this data to the extent necessary to ensure that the registration process runs properly.

No personal data will be passed on to third parties; legal obligations to pass on data remain unaffected.

Personal data relating to course registration will be deleted at the request of the user or three years after registration has taken place.


Through the use of the Moodle platform, access data is collected - as is the case when visiting any website.

Beyond this, no personal data is collected.

The Moodle platform uses cookies, which are required for registration (login) on the platform.

In addition to Moodle, zoom, Webex and other apps or programmes are used for the digital delivery of courses. Where necessary, order processing contracts exist between the BNITM and the respective software providers.


V. b) Data processing Alumni platform


The website operator provides a platform for alumni, visiting scientists and persons otherwise associated with the Bernhard Nocht Institute for Tropical Medicine. A Moodle system is used for this platform. You are free to use this Moodle platform, but it is a prerequisite for participation in the courses provided.

Subject and scope of data processing:


When using Moodle, the following personal data about you is processed for the purposes of user administration, user authentication and the delivery of virtual courses:

Staff responsible for the administration and system management of the Moodle platform at BNITM have access to all of the above data, but only process this data to the extent necessary to ensure the proper operation of the learning platform.

No personal data will be passed on to third parties; legal obligations to pass on data remain unaffected.


    Data already stored in the BNITM and entered in the Moodle database during the first login (registration). These are: Your login name, your last name, your first name and your e-mail address. This data is mandatory for using the learning platform.

    Data you must enter during registration

    Information about yourself, your expertise and your relationship to BNITM will be requested during registration. This is relevant in order to verify your identity and your relationship to the BNITM.

    Data you can enter during registration

    You do not have to enter any further data to use the learning platform, but you are free to enter further information about yourself when registering or later on your profile page. You also have the option of uploading a picture of yourself. The data you enter when registering, the data you enter in your profile and your role (e.g. teacher or student) can generally be viewed by managers, teachers and other students. You can set certain data to be hidden from other students, to be visible only to members of the courses you are taking, or to be visible to all users. Please note: administrators and teachers will still be able to see this data.

    Data that is collected in the background when using the learning platform (logging), in particular at what time you access which parts of the course offerings and profiles of other users, if applicable also whether you have completed set tasks and whether and how you have participated in workshops. Some of this data can be viewed by the "Teacher" role. Anonymous usage statistics are compiled.

    Data that you enter yourself when using the learning platform, e.g. posts you make in forums or messages you send in a chat.


The following tools are available to you on the learning platform:


    Chat: In the chat you can communicate with other users in real time. The messages are visible to all course members with your name as well as the time of your contribution and, if applicable, your picture. The conversation history is temporarily saved until the last user has left the current chat session. Afterwards, all chat data will be deleted. Chat logs are not stored.


    Forums: In forums you can communicate with other course members on a time-delayed basis. Your contributions are visible to other course members with the day and time of the entry, your name and, if applicable, your picture. Postings in forums and attached files are available to other users even after your Moodle access has been deactivated, until the course in question is deleted.


Deletion of data:


Personal information on your profile page will be deleted upon request by the user or after three years of inactivity. You can delete profile data that you have entered voluntarily at any time.

The deletion of a course is initiated by the course instructor.



In particular, contributions to wikis, forums and journals, as well as files provided by you, will be accessible to other users even after your Moodle access has been deactivated, until the course concerned is deleted.


V. c) Data processing newsletter/press mailing list


If you would like to receive the newsletter or press information, we require a valid email address from you as well as the ability to verify that you are the owner of the email address.

Your data will be treated confidentially and will only be used to send you the information you have requested.


VI. cookies


This website uses cookies. These are small text files which are stored on your terminal device. Your browser accesses these files. The use of cookies increases the user-friendliness and security of this website.

Current browsers offer the setting option of not allowing cookies. Note: It is not guaranteed that you will be able to access all the functions of this website without restrictions if you make the appropriate settings.


The cookies used are in detail:


    Cookies from Google Analytics (see the "Google Analytics" section for more information).

    Cookies from Moodle platforms, which are stored when you use these platforms.

    This relates to:

        Alumni platform

        Course material delivery platform

        BNITM staff platform


    When you use Moodle, three cookies are stored on the computer you are using.

    You can only use Moodle if you allow cookies in your browser, at least temporarily. The cookies named "MoodleSession" and "MoodleSessionTest" are session cookies that are deleted after you close your browser. These cookies are necessary to allow access to all pages after login. The third cookie is called "MOODLEID". With this cookie, your login name is stored in your browser in the form of an RC4 cipher and transmitted back to our server each time you contact us.

    It is thus possible that when you log in to our Moodle server again, the login name is already automatically entered into the login form. This cookie is valid for 60 days and will be automatically deleted by your browser after this period, unless you have specified in your browser settings that cookies should be deleted earlier.



VII Google Analytics


This website uses the "Google Analytics" service provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to analyse website usage by users. The service uses "cookies" - text files that are stored on your terminal device. The information collected by the cookies is usually sent to a Google server in the USA and stored there.

IP anonymisation is used on this website. The IP address of the user is shortened within the member states of the EU and the European Economic Area. This shortening eliminates the personal reference of your IP address. Under the terms of the data sharing agreement between the website operators and Google Inc., Google Inc. will use the information collected to analyse website usage and activity and to provide services relating to internet usage.

You have the following options to prevent the collection by Google Analytics:


    Click on the following link to download an opt-out cookie that will prevent the collection of your data when you visit our website from now on: Deactivate Google Analytics

    Your browser must therefore allow cookies to be stored. If you delete your cookies regularly, you will need to click on the link again each time you visit this website.

    Furthermore, you can use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to and used by Google LLC. This link will take you to the corresponding plugin.

    You have the option to prevent the storage of cookies on your device in principle by making the appropriate settings in your browser. However, it is not guaranteed that you will be able to access all functions of this website without restrictions if your browser does not allow cookies.


Here you can find more information on the use of data by Google Inc.



VIII Integration of third-party services and content


Our website contains content from third-party platforms, such as videos from YouTube and maps from Google Maps. In order to use these services, your browser integrates the files from the respective providers. You can read the information stored about you on the servers of third-party providers in the respective data protection declarations of the third-party providers.


IX. Rights of the user: information, correction and deletion


As a user of the website, you can request to be informed free of charge about the personal data stored about you. Provided that your request does not conflict with a legal obligation to retain data (e.g. data retention), you have the right to have incorrect data corrected and to have your personal data blocked or deleted.

You have the right to have the processing of your personal data restricted in accordance with Art. 18 DSGVO.

You have the right to revoke any consent you have given to us to process your data at any time.

You have the right, in accordance with Art. 20 DSGVO, to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transfer this data to another controller.

To do so, contact our data protection officer at datenschutz(at)bnitm.de.

If you are of the opinion that the processing of personal data concerning you violates the provisions of the GDPR, you have the right to lodge a complaint with the competent supervisory authority.


Privacy policy for online applications


Collection, processing and use of your data


If you would like to apply to the Bernhard Nocht Institute for Tropical Medicine (BNITM), we require various personal details for the application process and to carry out the selection procedure. Therefore, when you apply online, the following data will be collected, processed and used for the purpose of processing your application:


  • Job for which you are applying
  • First and last name
  • Telephone number
  • E-mail address
  • Date of birth
  • Street, postcode, city, country
  • Curriculum vitae
  • Application documents such as references
  • Other documents
  • Cover letter
  • Salary expectations
  • Earliest starting date


We may also analyse the data you provide internally after the selection process to compile statistics on the application process. This evaluation is carried out exclusively for our own purposes and in anonymous form.



We treat your data as strictly confidential and do not pass it on to third parties without your consent.



As part of the selection process, we will contact you either by post, e-mail or telephone using the addresses or telephone numbers you have provided.

Application exclusively for a specific position


If you have applied for a specific job advertised by us, we will only consider your application documents for this specific job.

Application for other positions


We regularly have interest and need for suitable and competent applicants in other areas as well. We are therefore naturally pleased to consider your application for other vacancies. The prerequisite for this is that you have expressly consented to such use when sending your application. If you have given us such consent, we will contact you by post, e-mail or telephone if we consider you suitable for the vacant position to ask you whether you are interested in taking part in the selection process for the vacant position.



You may have expressly given us the following consents and we have recorded these. In accordance with our obligation under the Telemedia Act, we keep the content of these consents available for you to retrieve at any time in our data protection statement. You can revoke these consents at any time with effect for the future.


    I consent to the encrypted electronic collection, processing and use of the data I have provided for the purpose of processing my application. If I provide information about my racial and ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health or sex life in my application, in particular in my CV or certificates, my consent also relates to this particular information.



    I agree that the data I have provided will be stored for a period of 2 years so that my application can also be considered for future vacancies, provided that a separate declaration of consent has been issued.



Deletion of your data and right of withdrawal


We generally delete your data 6 months after the selection process for the specific vacancy for which you have applied has been completed, unless you have consented to the further use of your data for filling further vacancies.

If you have consented to the further use of your data for filling further vacancies, we will delete your data 2 years after this consent has been given.

Of course, you have the right to withdraw your application at any time.