Privacy Policy

Thank you for your interest in the Carl Zeiss Foundation. Data protection is a top priority for us, which is why we take the protection of your personal data seriously, and we want you to feel safe when you visit our website.

When you visit our website, personal data may be collected in some cases. Personal data is always processed in line with the General Data Protection Regulation and in accordance with the country-specific data protection provisions applicable to the Carl Zeiss Foundation. Through this Privacy Policy, we aim to tell you what information we collect during your visit to our website and how it is used.

I. Name and address of the controller

The Carl Zeiss Foundation is the controller responsible for the careful handling of your personal data.

Carl-Zeiss-Stiftung
Breitscheidstraße 10
70174 Stuttgart
Germany
Email: info@carl-zeiss-stiftung.de
Website: www.carl-zeiss-stiftung.de
Authorised representative: Minister Petra Olschowski

II. Name and address of the data protection officer

Our data protection officer will be happy to answer any questions you may have regarding your personal data.
Matthias Stolzenburg
Breitscheidstraße 10
70174 Stuttgart, Germany
Email: datenschutz@carl-zeiss-stiftung.de

III. Provision of the website and creation of log files 

1. Description and scope of data processing

Every time a page of the Carl Zeiss Foundation website is accessed and every time a file is retrieved, access data about this process is stored in a log file on our server.
Each record consists of:  

  • the page from which the file was requested 
  • the name of the file 
  • the date and time of the request 
  • the access status (file transferred, file not found etc.) 
  • a description of the type of web browser used 
  • the IP address of the client

Your data will not be stored together with other personal data.

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address line changes from "http://" to "https://" and by the padlock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6(1)(f) GDPR

3. Purposes of processing

The temporary storage of the IP address by the system is necessary to deliver the website to your computer. For this purpose, your IP address must remain stored for the duration of the session. 
Storage in log files is carried out to ensure the website’s functionality. In addition, we use your data to optimise our website and to ensure the security of our information technology systems. Your data is not evaluated for marketing purposes in this context. 
These purposes of processing are based on our legitimate interest in data processing according to Art. 6(1)(f) GDPR.

4. Storage period

Your data will be deleted as soon as it is no longer required to achieve the purposes of processing for which it was collected. When your data is collected for the provision of the website, this is the case when your session has ended. 
When your data is stored in log files, this is the case after 90 days at the latest. Storage beyond this time is possible. In this case, your IP addresses are deleted or distorted, so that it is no longer possible to attribute the accessing client.

5. Possibility of objection and removal

The collection of your data for the provision of our website and the storage of your data in log files is essential for the operation of our website. Consequently, there is no possibility for you to object.

IV. CMP Usercentrics

1. Description and scope of data processing 

When you visit our website, certain information is stored on or read from your terminal device if this is absolutely necessary for the operation of our website. This includes information processed by the "CMP usercentrics" program to ensure that only those cookies are set or read that are technically absolutely necessary to operate our website or to which you have consented. When loading the code from CMP usercentrics, your IP address is transmitted to the operator. 

The Carl-Zeiss-Stiftung commissions the company Usercentrics GmbH, Rosental 4, 80331 Munich, with cookie management. We have selected the operator according to data protection-friendly and technical criteria. The data will not be passed on to third parties. A contract on commissioned data processing is concluded with Usercentrics GmbH.

2. Legal basis for data processing 

The legal basis for the processing of personal data within the scope of CMP usercentrics is the overriding legitimate interest within the meaning of Art. 6 (1) f DSGVO. 

3. Purpose of the data processing

CMP usercentrics serves the Carl-Zeiss-Stiftung as a way to manage the consent given by the user to set cookies in a legally secure manner and to ensure the technically flawless use of the website.

4. possibility of objection and removal

Consent to the setting of technically unnecessary cookies can be revoked at any time. The transmission of the IP address to Usercentrics GmbH cannot be objected to when using the website, as this is necessary for the technical functioning of the website.

V. Matomo

1. Description and scope of data processing

Insofar as you have consented to its use when visiting our homepage, we use the open-source web analytics software ‘Matomo’ on our website.

We use Matomo to collect and process personal data for optimisation and marketing purposes. This comprises 

  • the anonymised IP address, 
  • a randomly assigned user ID, 
  • date and time of the first, last and current access to our website, 
  • total number of visits to our website, 
  • access location,
  • the language settings of the visitor. 

Cookies, i.e. small text files, are stored on your computer for data collection. 
 
2. Legal basis for data processing

The legal basis for the processing of personal data using Matomo is your consent pursuant to Art. 6(1)(a) GDPR.

3. Purposes of processing

We use Matomo for statistical analysis (e.g. access figures of certain sub-pages) of user behaviour and optimisation of our website.

4. Storage period

The cookies stored on your computer are active for a maximum of 1 year, but you can also delete them manually at any time. 

5. Possibility of objection and removal

This data cannot be traced back to a specific person and can be deactivated at any time via the ad settings. You can, of course, switch off Matomo for future visits to the website "www.carl-zeiss-stiftung.de". To do this, deactivate the check mark next to the "Matomo" entry below and press "Save". 

VI. Contact form and email contact

1. Description and scope of data processing

Our website lets you quickly contact the Carl Zeiss Foundation electronically as well as submit an electronic application for job vacancies. If you use this option, the data entered in the entry screen will be transmitted to us and stored. This data generally comprises: 

  • First name
  • Last name
  • Address (optional)
  • Country (optional)
  • Phone number
  • Email address
  • For individual forms, additionally: Connection to the Carl Zeiss Foundation (funding recipient, alumni etc.) as well as a link to your LinkedIn profile (optional)

Our contact and registration forms are protected against abuse and spam through the Friendly Captcha widget. Friendly Captcha is intended to verify whether data entry on our websites (e.g. in a contact form) is performed by a human or by an automated programme. For this purpose, Friendly Captcha analyses the behaviour of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor starts filling out the form.  

For the provision and administration of spam protection, the Carl Zeiss Foundation commissions the service provider Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany.

2. Legal basis for data processing

The legal basis for the processing of data Art. 6(1)(a) GDPR if the user has consented.
If the email contact is made with a view to entering into a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR.

3. Purposes of processing

We exclusively process your personal data from the entry screen for the purpose of making contact. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data.

4. Storage period

Your data will be deleted as soon as it is no longer required to achieve the purposes of processing for which it was collected. For your personal data from the contact form’s entry screen and data sent by email, this is the case when the respective conversation with you has ended. The conversation is deemed to be ended when it is clear from the circumstances that the matter in question has been conclusively clarified. 

5. Possibility of objection and removal

You can, of course, withdraw your consent to the processing of personal data at any time. If you contact us by email, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.

VII. Newsletter

1. Description and scope of data processing

On our website, we offer you the option of subscribing to our newsletter. If you use this option, the data entered in the registration form will be transmitted to us and stored. This data generally comprises:
Last name
First name
Email address

We use the double-opt-in procedure for newsletter subscription. After you have subscribed via the website, we will send you a message to the email address you have provided, in which we ask you to confirm your subscription. If you do not confirm your subscription, your subscription will be automatically deleted. This data is only collected for the purpose of being able to send you the newsletter and to document our authorisation to do so.
 
The Carl Zeiss Foundation commissions the service provider 
CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany, with the delivery of the newsletter and management of email addresses. The data will not be passed on to third parties. A contract on commissioned data processing is concluded with CleverReach. You can cancel your subscription to the newsletter and withdraw your consent to the storage of your email address at any time in the newsletter or by sending an email to info@carl-zeiss-stiftung.de.

2. Legal basis for data processing

The legal basis for the processing of your data is your prior consent pursuant to data Art. 6(1)(a) GDPR.

3. Purposes of processing

The requested data will be used by the Carl Zeiss Foundation exclusively for the purpose of sending the newsletter and is necessary to be able to do so.

4. Storage period

Your personal data will be stored for as long as you consent to its storage. In the event of a withdrawal of consent, the personal data will be deleted without undue delay.

5. Possibility of objection and removal

You can, of course, withdraw your consent to the processing of personal data at any time. If you contact us by email, you can object to the storage of your personal data at any time. In such a case, the newsletter can no longer be delivered to you.

VIII. Potential recipients of personal data

As a rule, the data collected on these websites is collected and processed by the Carl Zeiss Foundation. If required by necessary business processes, your data will be shared with affiliated companies. 

To provide our services, your data may also be passed on to third parties involved in processing your order, such as IT service providers. When passing on personal data to these third parties, we limit this to the information that is necessary to provide the respective service. This is carried out in compliance with the required data security regulations. The Carl Zeiss Foundation will only disclose your personal data to third parties who have made a commitment to data protection and to processing your data in accordance with applicable laws.
In addition, the Carl Zeiss Foundation may be required to disclose your data and related information in response to a court or government order. We also reserve the right to use your data to assert or defend against legal claims.

IX. Your rights regarding the protection of your personal data

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the Carl Zeiss Foundation:

1. Right of access

As part of the application process, you are always free to decide what personal data you make available to us.
Of course, you may also exercise your right under Art. 15 GDPR to request confirmation, in writing and with proof of your identity, from the Foundation as to whether and which personal data concerning you is processed by us.

2. Right of rectification

You have a right of rectification and/or completion vis-à-vis the Carl Zeiss Foundation insofar as the personal data processed concerning you is inaccurate or incomplete. We shall be obliged to rectify this without delay.

3. Right to erasure

You can, of course, demand that we erase your personal data at any time.

4. Right to withdraw the declaration of consent under data protection law

Furthermore, you can withdraw your consent provided to us for the processing of your personal data at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the point in time of the withdrawal.

5. Right to restriction of processing

Likewise, under the conditions of Art. 18 GDPR, you have the right to request that the processing of your personal data be restricted.

6. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, place of work or the place of the alleged infringement, if you believe that the processing of personal data concerning you is in breach of the GDPR. 

X. Use of presences in social networks (social media)

We use online presences on the social networks and platforms LinkedIn, X, Instagram and YouTube. The online presence is technically provided by a service provider, the social network or platform (hereinafter referred to as the platform) itself. The platform itself may process personal data, such as your IP address. If you are logged into the social network, the platform may be able to establish a link between your user profile and your visit. Processing of personal data by the platform occurs in particular when you visit the social media presence or interact with it, e. g. when you mark a post with "Like".

The processing of data by the platform can be found in the respective privacy policy of the platform. As a rule, the data is processed for market research and advertising purposes. The platform may use it to create user profiles and generate personalized ads.

The data may not be processed in Germany or the European Union, but in a third country. This may make it more difficult to enforce rights. The third country may not have the same level of data protection as Europe. An adequate level of protection can be achieved through various mechanisms, such as the Privacy Shield for US companies.

No plugins provided by social networks are integrated on our pages. An automatic transfer of user data to the operators of these platforms does not take place on our website.

Further and detailed information on the privacy policies of the respective platforms can be found under the links provided:

LinkedIn Privacy policy: https://www.linkedin.com/legal/privacy-policy
X Privacy policy: https://twitter.com/de/privacy
YouTube Privacy policy: https://policies.google.com/privacy 
Meta Privacy policy: https://www.facebook.com/privacy/policy/
Instagram Privacy policy: https://privacycenter.instagram.com/policy/