Privacy Policy

Thank you for your interest in the Carl Zeiss Foundation. Data protection is a top priority for us, which is why we take the protection of your personal data seriously, and we want you to feel safe when you visit our website.

When you visit our website, personal data may be collected in some cases. Personal data is always processed in line with the General Data Protection Regulation and in accordance with the country-specific data protection provisions applicable to the Carl-Zeiss-Stiftung. Through this Privacy Policy, we aim to tell you what information we collect during your visit to our website and how it is used.

I. Name and address of the controller

The Carl-Zeiss-Stiftung is the controller responsible for the careful handling of your personal data.

Carl-Zeiss-Stiftung
Breitscheidstraße 10
70174 Stuttgart
Germany
Email: info@carl-zeiss-stiftung.de
Website: www.carl-zeiss-stiftung.de
Authorised representative: Minister Petra Olschowski

II. Name and address of the data protection officer

Our data protection officer will be happy to answer any questions you may have regarding your personal data.
Matthias Stolzenburg
Breitscheidstraße 10
70174 Stuttgart, Germany
Email: datenschutz@carl-zeiss-stiftung.de

III. Provision of the website and creation of log files 

1. Description and scope of data processing

Every time a page of the Carl-Zeiss-Stiftung website is accessed and every time a file is retrieved, access data about this process is stored in a log file on our server.
Each record consists of:  

  • the page from which the file was requested 
  • the name of the file 
  • the date and time of the request 
  • the access status (file transferred, file not found etc.) 
  • a description of the type of web browser used 
  • the IP address of the client

Your data will not be stored together with other personal data.

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address line changes from "http://" to "https://" and by the padlock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6(1)(f) GDPR

3. Purposes of processing

The temporary storage of the IP address by the system is necessary to deliver the website to your computer. For this purpose, your IP address must remain stored for the duration of the session. 
Storage in log files is carried out to ensure the website’s functionality. In addition, we use your data to optimise our website and to ensure the security of our information technology systems. Your data is not evaluated for marketing purposes in this context. 
These purposes of processing are based on our legitimate interest in data processing according to Art. 6(1)(f) GDPR.

4. Storage period

Your data will be deleted as soon as it is no longer required to achieve the purposes of processing for which it was collected. When your data is collected for the provision of the website, this is the case when your session has ended. 
When your data is stored in log files, this is the case after 90 days at the latest. Storage beyond this time is possible. In this case, your IP addresses are deleted or distorted, so that it is no longer possible to attribute the accessing client.

5. Possibility of objection and removal

The collection of your data for the provision of our website and the storage of your data in log files is essential for the operation of our website. Consequently, there is no possibility for you to object.

IV. CMP Usercentrics

1. Description and scope of data processing 

When you visit our website, certain information is stored on or read from your terminal device if this is absolutely necessary for the operation of our website. This includes information processed by the "CMP usercentrics" program to ensure that only those cookies are set or read that are technically absolutely necessary to operate our website or to which you have consented. When loading the code from CMP usercentrics, your IP address is transmitted to the operator. 

The Carl-Zeiss-Stiftung commissions the company Usercentrics GmbH, Rosental 4, 80331 Munich, with cookie management. We have selected the operator according to data protection-friendly and technical criteria. The data will not be passed on to third parties. A contract on commissioned data processing is concluded with Usercentrics GmbH.

2. Legal basis for data processing 

The legal basis for the processing of personal data within the scope of CMP usercentrics is the overriding legitimate interest within the meaning of Art. 6 (1) f DSGVO. 

3. Purpose of the data processing

CMP usercentrics serves the Carl-Zeiss-Stiftung as a way to manage the consent given by the user to set cookies in a legally secure manner and to ensure the technically flawless use of the website.

4. possibility of objection and removal

Consent to the setting of technically unnecessary cookies can be revoked at any time. The transmission of the IP address to Usercentrics GmbH cannot be objected to when using the website, as this is necessary for the technical functioning of the website.

V. Matomo

1. Description and scope of data processing

Insofar as you have consented to its use when visiting our homepage, we use the open-source web analytics software ‘Matomo’ on our website.

We use Matomo to collect and process personal data for optimisation and marketing purposes. This comprises 

  • the anonymised IP address, 
  • a randomly assigned user ID, 
  • date and time of the first, last and current access to our website, 
  • total number of visits to our website, 
  • access location,
  • the language settings of the visitor. 

Cookies, i.e. small text files, are stored on your computer for data collection.

2. Legal basis for data processing

The legal basis for the processing of personal data using Matomo is your consent pursuant to Art. 6(1)(a) GDPR.

3. Purposes of processing

We use Matomo for statistical analysis (e.g. access figures of certain sub-pages) of user behaviour and optimisation of our website.

4. Storage period

The cookies stored on your computer are active for a maximum of 1 year, but you can also delete them manually at any time. 

5. Possibility of objection and removal

This data cannot be traced back to a specific person and can be deactivated at any time via the ad settings. You can, of course, switch off Matomo for future visits to the website "www.carl-zeiss-stiftung.de". To do this, deactivate the check mark next to the "Matomo" entry below and press "Save". 

VI. YouTube 

1. Description and scope of data processing 

If you have consented to the playing of videos embedded in our pages, you will be using YouTube, a Google video service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland (“Google”).

If you have not yet agreed to play the video, you will initially only see a preview image without contact being made with Google's servers.

When you use YouTube, your IP address is forwarded to Google. Google may also store cookies, which are small text files, on your computer and thereby collect data about your usage behavior.

For more information about YouTube, please see:  https://www.youtube.com/t/terms (YouTube's Terms of Use). 

It cannot be ruled out that information collected by Google services may also be transmitted to and stored by Google on servers in a third country, in particular on servers of Google's parent company, Google LLC, based at 1600 Amphitheatre Parkway, Mountain View, California, USA. 

2. Legal basis for data processing 

The legal basis for the processing of personal data in the context of YouTube is your consent in accordance with Art. 6 (1) point a GDPR. 

3. Purpose of processing 

We use YouTube to integrate videos on our website. 

4. Storage period

The duration of storage of cookies is based on YouTube's terms of use at https://www.youtube.com/t/terms.

5. Possibility of objection and removal

The data transfer to Google can be deactivated at any time via the privacy settings. You can, of course, switch off YouTube for future visits to the website “www.carl-zeiss-stiftung.de”. To do this, deactivate the check mark next to “YouTube” and press “Save”.

VII. Contact form and email contact

1. Description and scope of data processing

Our website lets you quickly contact the Carl-Zeiss-Stiftung electronically as well as submit an electronic application for job vacancies. If you use this option, the data entered in the entry screen will be transmitted to us and stored. This data generally comprises: 

  • First name
  • Last name
  • Address (optional)
  • Country (optional)
  • Phone number
  • Email address
  • For individual forms, additionally: Connection to the Carl-Zeiss-Stiftung (funding recipient, alumni etc.) as well as a link to your LinkedIn profile (optional)

Our contact and registration forms are protected against abuse and spam through the Friendly Captcha widget. Friendly Captcha is intended to verify whether data entry on our websites (e.g. in a contact form) is performed by a human or by an automated programme. For this purpose, Friendly Captcha analyses the behaviour of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor starts filling out the form.  

For the provision and administration of spam protection, the Carl-Zeiss-Stiftung commissions the service provider Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany.

2. Legal basis for data processing

The legal basis for the processing of data Art. 6(1)(a) GDPR if the user has consented.
If the email contact is made with a view to entering into a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR.

3. Purposes of processing

We exclusively process your personal data from the entry screen for the purpose of making contact. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data.

4. Storage period

Your data will be deleted as soon as it is no longer required to achieve the purposes of processing for which it was collected. For your personal data from the contact form’s entry screen and data sent by email, this is the case when the respective conversation with you has ended. The conversation is deemed to be ended when it is clear from the circumstances that the matter in question has been conclusively clarified. 

5. Possibility of objection and removal

You can, of course, withdraw your consent to the processing of personal data at any time. If you contact us by email, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.

VIII. Newsletter

1. Description and scope of data processing

On our website, we offer you the option of subscribing to our newsletter. If you use this option, the data entered in the registration form will be transmitted to us and stored. This data generally comprises:
Last name
First name
Email address

We use the double-opt-in procedure for newsletter subscription. After you have subscribed via the website, we will send you a message to the email address you have provided, in which we ask you to confirm your subscription. If you do not confirm your subscription, your subscription will be automatically deleted. This data is only collected for the purpose of being able to send you the newsletter and to document our authorisation to do so.
 
The Carl-Zeiss-Stiftung commissions the service provider 
CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany, with the delivery of the newsletter and management of email addresses. The data will not be passed on to third parties. A contract on commissioned data processing is concluded with CleverReach. You can cancel your subscription to the newsletter and withdraw your consent to the storage of your email address at any time in the newsletter or by sending an email to info@carl-zeiss-stiftung.de.

2. Legal basis for data processing

The legal basis for the processing of your data is your prior consent pursuant to data Art. 6(1)(a) GDPR.

3. Purposes of processing

The requested data will be used by the Carl-Zeiss-Stiftung exclusively for the purpose of sending the newsletter and is necessary to be able to do so.

4. Storage period

Your personal data will be stored for as long as you consent to its storage. In the event of a withdrawal of consent, the personal data will be deleted without undue delay.

5. Possibility of objection and removal

You can, of course, withdraw your consent to the processing of personal data at any time. If you contact us by email, you can object to the storage of your personal data at any time. In such a case, the newsletter can no longer be delivered to you.

IX. Event registration

1. Description and scope of data processing

We offer you the opportunity to register for events or further training via the external providers eeveno and Microsoft Forms. The data protection notices of eveno and Microsoft apply to the data processing by the providers.

If you take advantage of this opportunity, the data entered in the registration form will be transmitted to us and stored. This data is basically: 
Surname 
First name 
E-mail address
Telephone number
University / Institution

For individual forms, the following information is also required:

  • Relationship to the Carl-Zeiss-Stiftung (recipient, alumnus, etc.)
  • Title of the funded project
  • Menu selection (including allergies and intolerances)
  • Language
  • Accommodation
  • Transfer

We reserve the right to request further data if this is necessary for the event to take place (e.g. subject of study, intended degree, current employer, shoe size).

This data is collected solely for the purpose of organizing the management of participants in events and further training, to be able to send you relevant information and to be able to provide you with further registration links to cooperation or funding partners.

2. Legal basis for data processing

The legal basis for the processing of the data is your consent, which you have given in advance, in accordance with Art. 6 para. 1 lit. a DSGVO.

3. Purpose of data processing

The requested data will be used by the Carl-Zeiss-Stiftung exclusively for the purpose of conducting the corresponding event or training and is required for organizational reasons.

4. Storage period

Your personal data will be stored for as long as your consent for storage is available. In the event of a revocation of consent, the personal data will be deleted immediately.

5. Possibility of objection and removal

Of course, you have the option at any time to revoke your consent to the processing of personal data. If you contact us by e-mail, you can object to the storage of your personal data at any time.

X. Potential recipients of personal data

As a rule, the data collected on these websites is collected and processed by the Carl-Zeiss-Stiftung. If required by necessary business processes, your data will be shared with affiliated companies. 

To provide our services, your data may also be passed on to third parties involved in processing your order, such as IT service providers. When passing on personal data to these third parties, we limit this to the information that is necessary to provide the respective service. This is carried out in compliance with the required data security regulations. The Carl-Zeiss-Stiftung will only disclose your personal data to third parties who have made a commitment to data protection and to processing your data in accordance with applicable laws.

In addition, the Carl-Zeiss-Stiftung may be required to disclose your data and related information in response to a court or government order. We also reserve the right to use your data to assert or defend against legal claims.

XI. Your rights regarding the protection of your personal data

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the Carl-Zeiss-Stiftung:

1. Right of access

As part of the application process, you are always free to decide what personal data you make available to us.
Of course, you may also exercise your right under Art. 15 GDPR to request confirmation, in writing and with proof of your identity, from the Foundation as to whether and which personal data concerning you is processed by us.

2. Right of rectification

You have a right of rectification and/or completion vis-à-vis the Carl-Zeiss-Stiftung insofar as the personal data processed concerning you is inaccurate or incomplete. We shall be obliged to rectify this without delay.

3. Right to erasure

You can, of course, demand that we erase your personal data at any time.

4. Right to withdraw the declaration of consent under data protection law

Furthermore, you can withdraw your consent provided to us for the processing of your personal data at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the point in time of the withdrawal.

5. Right to restriction of processing

Likewise, under the conditions of Art. 18 GDPR, you have the right to request that the processing of your personal data be restricted.

6. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, place of work or the place of the alleged infringement, if you believe that the processing of personal data concerning you is in breach of the GDPR. 

XII. Use of presences in social networks (social media)

We use online presences on the social networks and platforms LinkedIn, Instagram and YouTube. The online presence is technically provided by a service provider, the social network or platform (hereinafter referred to as the platform) itself. The platform itself may process personal data, such as your IP address. If you are logged into the social network, the platform may be able to establish a link between your user profile and your visit. Processing of personal data by the platform occurs in particular when you visit the social media presence or interact with it, e. g. when you mark a post with "Like".

The processing of data by the platform can be found in the respective privacy policy of the platform. As a rule, the data is processed for market research and advertising purposes. The platform may use it to create user profiles and generate personalized ads.

The data may not be processed in Germany or the European Union, but in a third country. This may make it more difficult to enforce rights. The third country may not have the same level of data protection as Europe. An adequate level of protection can be achieved through various mechanisms, such as the Privacy Shield for US companies.

No plugins provided by social networks are integrated on our pages. An automatic transfer of user data to the operators of these platforms does not take place on our website.

Further and detailed information on the privacy policies of the respective platforms can be found under the links provided:

LinkedIn Privacy policy: https://www.linkedin.com/legal/privacy-policy
YouTube Privacy policy: https://policies.google.com/privacy 
Meta Privacy policy: https://www.facebook.com/privacy/policy/
Instagram Privacy policy: https://privacycenter.instagram.com/policy/