Privacy policy

acatech – Deutsche Akademie der Technikwissenschaften e. V. operates a website containing general information on its work. This includes an interactive section in which publications and information materials are available to download. acatech – Deutsche Akademie der Technikwissenschaften e. V. attaches great importance to the protection of privacy and complies with the statutory data protection provisions. We hereby inform you how we process your personal data.

The Controller within the meaning of the data protection legislation; in particular, the General Data Protection Regulation (GDPR), is:

acatech – Deutsche Akademie der Technikwissenschaften e. V.
Karolinenplatz 4
80333 München

Managing Director: Wolfgang Siegel

Registration:
Entered in the register of associations
Court of registration: Amtsgericht München
Registration number: VR202021

Your rights as a data subject

You may exercise the following rights at any time by contacting our Data Protection Officer using the contact details provided:

• the right to information on the data we have stored on you and how these data are processed (Art. 15 GDPR),
• the right to rectification of inaccurate personal data (Art. 16 GDPR),
• the right to erasure of the data we have stored on you (Art. 17 GDPR),
• the right to restriction of processing where we are not yet permitted to erase your data on
• the grounds of statutory obligations (Art. 18 GDPR),
• the right to object to processing of the data we have on you (Art. 21 GDPR) and
• the right to data portability where you have consented to data processing or entered into a contract with us (Art. 20 GDPR).

If you have provided consent, you may withdraw it any time with future effect.

You may at any time lodge a complaint with the supervisory authority relevant to you (Art. 77 GDPR in conj. with section 19 of the German Federal Data Protection Act [Bundesdatenschutzgesetz – BDSG]). The supervisory authority relevant to you goes by the federal state in which you reside, work or the alleged breach took place. A list of supervisory authorities (for the non-public sector) and their addresses can be found here (in German).

Information about your right to object under Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (processing is necessary for the purposes of the legitimate interests), including profiling based on those provisions within the meaning of Art. 4 no. 4 GDPR.

If you object, we will no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

You may send your objection without any formal requirements with “objection” in the subject line and stating your name, address or other identifier to:

Deutsche Akademie der Technikwissenschaften e.V.
Karolinenplatz 4
80333 München
Email: datenschutz(at)acatech.de

Collection of general information when you visit our website

Nature and purpose of processing:
When you access our website, i.e. even if you do not register or otherwise transmit any information, information of a general nature is automatically collected. This information (server log files) includes the type of web browser, the operating system used, the domain name of your Internet Service Provider and your IP address. This information is exclusively such that does not enable us to identify you personally.
It is processed for the following purposes in particular:

• to ensure you connect to the website without any problems,
• to ensure your interrupted use of our website,
• to analyse system security and stability, and
• for other administrative purposes.

We do not use your data in order to identify you personally. We may statistically analyse such information in order to optimise our website and the technology behind it.

Legal basis:
The data are processed pursuant to point (f) of Art. 6(1) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipient:
The sole recipients of the data are the Controller and any technical service providers engaged for the operation and maintenance of our website, who act as processors.

Duration of storage:
The data will be erased as soon as they are no longer required for the purpose for which they were collected. For data used for website provision, this is, in principle, when the relevant session has ended. If the data are stored in log files, these are stored for a maximum of 30 days.

Provision prescribed or required:
The provision of the aforementioned personal data is not prescribed either by law or contract. However, website service and function cannot be guaranteed without the IP address. In addition, individual services may be limited or unavailable. For this reason, it is not possible to object.

Cookies

Like many other websites, we use so-called “cookies”. Cookies are small text files that are placed on your hard drive by a website server. They enable us automatically to collect certain data, such as IP address, browser used, operating system and your Internet connection.

Cookies cannot be used to launch programs or place viruses on a computer. Using the information contained in cookies, we can make it easier for you to navigate our website and enable our website to display correctly.

Under no circumstances will the data collected by us be shared with third parties or associated with personal data without your consent.

Of course, you can, in principle, view our website without cookies. Internet browsers are routinely configured to accept cookies. In general, you can disable the use of cookies at any time in your browser settings. Please use your Internet browser’s Help feature to find out how to change these settings. Please note that some website functions may not work if you disable the use of cookies.

You can delete some or all cookies in your browser settings. In addition, information and directions are available on how to delete these cookies or block them before they are stored. You will find the necessary information by following the applicable link for your browser provider below:

Mozilla Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
Internet Explorer: https://support.microsoft.com/en-ph/help/17442/windows-internet-explorer-delete-manage-cookies
Google Chrome: https://support.google.com/accounts/answer/61416?hl=en&co=GENIE.Platform%3DDesktop
Opera: https://help.opera.com/en/latest/web-preferences/
Safari: https://support.apple.com/en-ie/guide/safari/sfri11471/mac

You can also find information on cookies and what cookies are used on this website (with your consent) in our cookie consent tool, which you can access at any time by clicking on the following link. The link enables you to provide and withdraw consent to certain cookies.

Strictly necessary cookies

Nature and purpose of processing:
We use the cookie consent tool provided by the company Borlabs to inform you about the cookies used on our website and to obtain your consent to the use of cookies.

Legal basis:
The data are processed pursuant to point (f) of Art. 6(1) GDPR on the basis of our legitimate interest in the user-friendliness of our website and in the documentation of consent.

Recipient:
The recipient of the data is acatech – Deutsche Akademie der Technikwissenschaften e.V.

Provision prescribed or required:
The provision of the personal data is not prescribed either by law or contract. However, website service and function cannot be guaranteed without these data. In addition, individual services may be limited or unavailable.

Not strictly necessary cookies

Nature and purpose of processing:
Cookies can also serve to better tailor the offering on a website to visitors’ interests or generally improve it based on statistical analysis.
The data analysis cookies are only created if you have consented to this.

If you allow us to use cookies by providing consent, the following cookies may be used on our website:

• _juicer_session: This Juicer.io cookie is used to distinguish between visitors.
  Date of expiry: End of session
• _juicer_mixpanel_tracking_id, _ga; _gid: Juicer uses Mixpanel and Google Analytics for server-side tracking of website operators that use the juicer.io social media wall. According to Juicer, the personal data are processed in anonymised form. In addition, according to the manufacturer, what users click on in the embedded feed is not tracked.
  Date of expiry: End of session
• human_detected: This Juicer.io cookie is used to distinguish between search engines, robots and users.
  Date of expiry: End of session

Legal basis:
The legal basis for this processing is your consent pursuant to point (a) of Art. 6(1) GDPR. If information is stored, e.g. through cookies, or information already stored on your end device is accessed, the legal basis is your consent pursuant to section 25 of the German Telecommunications-Telemedia Data Protection Act (Telekommunikation-Telemedien-Datenschutz-Gesetz – TTDSG).

Recipient:
The recipients of the data are any technical service providers engaged for the operation and maintenance of our website, who act as processors. All service providers are contractually obliged to treat your data confidentially.

An overview of recipients and details of the technical function of the tools used as well as information on how to block data transmission (tracking) can be found in our cookie consent tool.

Duration of storage:
Details of duration of cookie storage can be found in the above table or in our cookie consent tool.

Provision prescribed or required:
Data provision is voluntary, solely on the basis of your consent. However, note that without your consent you will not be able to fully use all the features of this website.

Withdrawal of consent:
You may withdraw your consent at any time. To do so, click on the link provided above and configure the settings accordingly in the cookie consent banner that appears.

Cookie-based use of Matomo

Nature and purpose of processing:
We use Matomo (formerly Piwik) on this website. Matomo is an open-source website traffic analytics software. The provider of the Matomo software is InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand.

If you have consented, Matomo uses cookies that enable your use of the website to be analysed. The information created by the cookie about your use of the website is stored on a server in Germany. We have configured Matomo not to carry out profiling. Matomo is used for the purpose of improving the quality of our website and its contents. Matomo analytics tell us how the website is being used, enabling us to steadily improve our online presence.

The IP address is anonymised directly after processing and before storage by removing the last two bytes. You have the option of preventing the installation of the cookies by changing your browser settings. Please note that if you do so, some of the features of this website may no longer be available.

Further information on privacy settings in the Matomo software can be found at the following link: matomo.org/wp-content/uploads/2022/07/privacy.png.

Legal basis:
The legal basis for cookie placement is your consent pursuant to section 25(1) TTDSG. The legal basis for subsequent processing is your consent pursuant to point (a) of Art. 6(1) GDPR.

Recipient:
We engage technical service providers for website operation and maintenance, who act as our processors.

All service providers are contractually obliged to treat your data confidentially.

Duration of storage:
The data are erased once they are no longer required for our storage purposes. In our case, this happens automatically after 13 months.

Withdrawal of consent:
There are three different options available for you to withdraw your consent to the processing of data by Matomo with future effect:

Firstly, you may disable all cookies in your browser. However, this may result in you not being able to use some features of our website that require identification.

Secondly, you can enable the “Do Not Track” setting in your browser. We have configured Matomo to honour this setting. Thirdly, you can set an opt-out cookie by clicking below. The opt-out cookie is valid for two years. Once this is set, Matomo will not record your further visits to our website. However, note that deleting all cookies will delete the opt-out cookie.

Further information on privacy settings in the Matomo software can be found at the following link: matomo.org/wp-content/uploads/2022/07/privacy.png.

You can also prevent the use of cookies by configuring your browser software accordingly; however, note that if you do, you may not be able to fully use all the features of this website.

Provision prescribed or required:
Data provision is voluntary, solely on the basis of your consent.

Photos at events of acatech – Deutsche Akademie der Technikwissenschaften e.V.

Nature and purpose of processing:
Photos of participants are taken at events. These photos are published on the acatech website, in acatech documents/activity reports as well as in the newsletter and on social networks. These photos are published solely for the purpose of documenting and providing information on the events of acatech – Deutsche Akademie der Technikwissenschaften e.V.

Legal basis:
The legal basis for this processing is your consent pursuant to point (a) of Art. 6(1) GDPR.

Recipient:
Within acatech, the parties/organisational units that are given access to your data are those that need access to fulfil our contractual or statutory obligations or for processing and performance based on our legitimate interests.

Service providers (processors) engaged by us may also receive data for these purposes if they require the data to provide their respective service (e.g. support/maintenance of EDP/IT applications, archiving, data destruction). All service providers are contractually obliged to treat your data confidentially.

Where photos are published on social networks, your data may be transferred to a third country pursuant to Art. 45 GDPR. This includes processing in the USA. Guarantees are in place in the form of agreed standard contractual clauses or a joint controllership agreement.

Links to the privacy policies of the social networks in question:

• Facebook
• YouTube
• LinkedIn

Duration of storage:
The data are only stored as long as the purpose and your consent are given.

Provision prescribed or required:
The provision of your personal data is voluntary, solely on the basis of your consent. Without your consent, we will not use photos of you for the aforementioned purposes.

Withdrawal of consent:
You may withdraw your consent at any time by sending an email to datenschutz@acatech.de. If you withdraw consent, photos that mainly show only the data subject will be removed immediately from the website and will not be used in future publications. If the data subject appears in photos with other people, the photo does not have to be removed; in this case, it is sufficient if the data subject is immediately rendered unrecognisable in the photo (e.g. by pixelation).

Subscriptions – Newsletter

Nature and purpose of processing:
The data you enter into the input screen are used solely to send you via email the newsletter you have subscribed to. We ask for your name and your academic title so we can address you personally in the newsletter and, if need be, for identification purposes, if you wish to exercise your rights as a data subject.

To receive the newsletter, all you need to give is your email address. If you sign up to receive our newsletter, the data you give are used solely for this purpose. Subscribers may also be informed via email about circumstances relating to the service or registration (e.g. changes to the newsletter service or technical situations).

For effective registration, we require a valid email address. To check that the owner of an email address has actually attempted to sign up, we use the “double opt-in” method. To this end, we keep a record of subscriptions to the newsletter, the sending of a confirmation email and the receipt of the reply requested by the confirmation email. No other data are collected. The data are used solely for sending you the newsletter and are not shared with third parties.

Legal basis:
On the basis of your express consent (point (a) of Art. 6(1) GDPR), we regularly send you our newsletter or comparable information to the email address you give.

You may withdraw your consent to the storage of your personal data and their use for sending you the newsletter at any time with future effect by clicking on the “Unsubscribe” link in the newsletter. In addition, you may withdraw consent by unsubscribing to the newsletter on the website. Alternatively, you may inform us of the withdrawal of your consent using the contact form at the bottom of this privacy policy.

Recipient:
The newsletter software used is Sendinblue. If you subscribe to the newsletter, your data are shared with Sendinblue GmbH. Sendinblue is prohibited from selling your data or using them for purposes other than for sending newsletters. Sendinblue is a German, certified provider selected in accordance with the requirements of the General Data Protection Regulation and the German Federal Data Protection Act. Further information is available here.

Duration of storage and withdrawal of consent:
The data are only processed for this purpose as long as consent is given. Then they are erased. You may withdraw your consent at any time by unsubscribing at the link provided below.

Provision prescribed or required:
The provision of your personal data is voluntary, solely on the basis of your consent. Unfortunately, without your consent we cannot send you our newsletter.

If you NO LONGER wish to receive our newsletter, you may unsubscribe here (in German) or via the link in our newsletter.

Subscriptions – Podcast

LetsCast.fm

We use the web player of LetsCast.fm on our website to enable you to listen to our podcasts from our website directly. In using the web player, personal data as well as your IP address, your browser version and operating system are transferred to letscast.fm. Such data are processed for the purpose of statistical analysis of the listeners’ playback and for the safe and efficient provision and optimisation of our podcast offering.

If a podcast is launched via LetsCast.fm, the user’s browser requests the JavaScript file for the LetsCast.fm web player from the LetsCast.fm server when loading the website. The requesting IP address is stored in anonymised form in a LetsCast.fm server log. If the request is successful, the browser creates an iFrame embedding a player. If listeners then press play, the audio file is requested from the LetsCast.fm server. The data mentioned above are then collected by LetsCast.fm.

Further information on the purpose and extent of data collection and data processing by LetsCast.fm is available in the provider’s privacy statements (in German). They also contain further information on your rights in relation to this and on the protection of your privacy.

Legal basis:
The legal basis for this processing is your consent pursuant to point (a) of Art. 6(1) GDPR.

Recipient:
Starting the LetsCast.fm web player automatically establishes a connection with LetsCast.fm.
Duration of storage and withdrawal of consent:
Your data are stored for five days, unless you have withdrawn consent, in which case your data will be erased immediately. To withdraw your consent, it is sufficient to send an informal email to: info@produktgenuss.de

Transfer to a third country:
Your data are not transferred to a third country.

Provision prescribed or required:
The provision of your personal data is voluntary, solely on the basis of your consent. If you do not consent, you will not be able to listen to our podcast.

Contact via email

Nature and purpose of processing:
The data sent by you via email are stored for the purpose of individual communication with you. For this, the use of a valid email address and your name is required. The purpose of this is to assign someone to deal with your query and reply to it. The provision of further data is optional.

Legal basis:
The data sent via email are processed on the basis of legitimate interests (point (f) of Art. 6(1) GDPR).

We provide email addresses to give you a simple means of contacting us. The data you provide are stored for the purpose of dealing with the query and for potential follow-up questions.

If you make contact with us for a quotation, the data sent via email are processed to take steps prior to entering into a contract (point (b) of Art. 6(1) GDPR).

Recipient:
Within acatech, the parties who are given access to your data are those that require them to fulfil contractual, statutory and supervisory obligations.

Duration of storage:
Data are erased no later than six months after the query has been dealt with. If a contractual relationship results, we are subject to the statutory storage periods under the German Commercial Code (Handelsgesetzbuch), and will delete your data at the end of such periods.

Provision prescribed or required:
The provision of your personal data is voluntary. However, we can only deal with your query if you tell us your name, your email address and the reason for your query.

Contact form “Ask acatech”

Nature and purpose of processing:
The data entered by you are stored for the purpose of individual communication with you. For this, you must give us the following data:

• Your name
• A valid email address
• The subject
• The medium/background to your enquiry

The purpose of such data is to assign someone to deal with your query and reply to it. The provision of further data is optional.

Legal basis:
The data entered in the contact form are processed on the basis of legitimate interests (point (f) of Art. 6(1) GDPR).

We provide the contact form to give you a simple means of contacting us. The data you provide are stored for the purpose of dealing with the query and for potential follow-up questions.

If you make contact with us for a quotation, the data entered in the contact form are processed to take steps prior to entering into a contract (point (b) of Art. 6(1) GDPR).

Recipient:
Within acatech, the parties who are given access to your data are those that require them to fulfil contractual, statutory and supervisory obligations.

Duration of storage:
Your data are erased no later than six months after the query has been dealt with.

If a contractual relationship results, we are subject to the statutory storage periods under the German Commercial Code (Handelsgesetzbuch), and will delete your data at the end of such periods.

Provision prescribed or required:
The provision of your data is voluntary. However, we can only deal with your query if you give us your name, your email address, your subject and your medium/background to your enquiry.

Email applications

Purpose of processing:
To enable you to send us your application via email. We process the data provided by you solely to assess your professional suitability and to make contact with you.

Legal basis:
Your data are processed to establish an employment relationship (section 26 BDSG).

Recipient:
Within acatech, the parties who are given access to your data are those that require them to fulfil contractual, statutory and supervisory obligations as well as in the pursuit of legitimate interests.

Transfer to a third country and guarantee:
Your data are not transferred to a third country.

Duration of storage:
In the event that your application is unsuccessful, your data will be erased six months after you are informed of the decision.

If an employment relationship results, the application papers will be stored for at least the duration of the employment.

Provision of data voluntary/mandatory. Consequences of refusal:
The provision of personal data is not prescribed either by law or contract. However, without such data it is not possible to process your application.

Application for Lernwerkstatt Technikkommunikation 2023

Nature and purpose of processing:
We provide a form to enable you to send us your application. We process the data provided by you solely to assess your professional suitability and to make contact with you.

Legal basis:
The data are processed to take steps at the request of the data subject prior to entering into a contract as part of the event “Lernwerkstatt Technikkommunikation 2023”, pursuant to point (b) of Art. 6(1) GDPR.

Recipient:
Within acatech, the parties who are given access to your data are those that require them to fulfil contractual, statutory and supervisory obligations as well as in the pursuit of legitimate interests. For the purpose of organising the events and selecting the participants, the personal data are processed jointly between acatech and Wissenschaft im Dialog gGmbH.

Duration of storage:
In the event that your application is unsuccessful, your data will be erased six months after you are informed of the decision.

If participation in the event results, the application papers will be stored by us for at least the duration of the event.

Provision prescribed or required:
The provision of the personal data is not prescribed either by law or contract. However, without such data it is not possible to process your application.

Video conferences on Zoom and Teams

Purpose of processing, legal basis and legitimate interest
To hold events, telephone and video conferences as well as online meetings, we use the video conferencing tools Zoom and Teams. Zoom is a service provided by Zoom Video Communications, Inc. while Teams is provided by Microsoft Corporation. Both providers have their registered offices outside the EU.

You can find further information on how each provider processes data here for Zoom and here for Teams.

We use these conferencing tools on the basis of our legitimate interest in the practicable and user-friendly holding of events and conferences (point (f) of Art. 6(1) GDPR).

Data recipients
The recipient of the data is Zoom Video Communications Inc./Microsoft Corporation.

Transfer to a third country
Your data may be transferred to a third country; specifically, the USA. Please note that the level of data protection in the USA is not equivalent to the European Union. Nor has the European Commission made an adequacy decision for the US yet. To protect your data after transfer, we have agreed standard contractual clauses with both service providers. We will provide you with a copy of the standard contractual clauses on request.

Duration of storage
The data are erased generally no later than six months after the event to which they relate.

Provision prescribed or required:
The provision of your personal data is voluntary. However, you can only take part in our webinars if you provide us with the data required to do so.

Objection to processing
Read the information on your right to object under Art. 21 GDPR further below.

Social media feed via Juicer

We embed social media feeds from social networks in our website. For this, we use the plugin Juicer provided by SaaS.group LLC, 304 S. Jones Blvd #1205, Las Vegas NV 89107, USA.

Juicer makes it possible to collate social media activity and unify it into a single social media feed, and to integrate this into the website in the form of a social wall. Hence automatically updated posts (content, including written material, images and videos) from acatech’s social media channels (Instagram and LinkedIn) can be displayed on the social wall. Website users are served static assets (image and video files) directly from the servers of the social networks.

The advantage of Juicer is that the social wall on the website always shows up-to-date posts and can be viewed by all, i.e. including those who do not have an Instagram, Twitter, LinkenIn or YouTube account.

The legal basis for this processing is your consent pursuant to point (a) of Art. 6(1) GDPR in conjunction with section 25(1) TTDSG. The data are only processed for this purpose as long as consent is given.

Further information on Juicer’s privacy policy is available at the following link.

As soon as you enter our website, your browser establishes a direct connection to Juicer’s servers in the USA. In the process, cookies are placed on your end device, and your IP address, mobile equipment identity, type of browser, URL of the last website you visited and similar user information is transferred to Juicer and stored there. If you click on a social media post in Juicer, your activity can by tracked by Juicer and a connection will be established with the servers of Instagram, Twitter, LinkedIn and YouTube – depending on which of these networks the post is from. Regardless of whether or not you have an account on these networks, data will thus be transferred to the relevant server. According to Juicer, however, server-side tracking is only carried out for Juicer’s customers, and not of the feed visitors’ behaviour. According to Juicer, personal data, which are stored to track user behaviour, are processed in anonymised form. If you interact with the Juicer plugin; i.e. share a post with others on Instagram, Twitter, LinkedIn or YouTube, you leave our website. The shared content will then be transferred directly to the social media platform’s server, stored there, published in the social network and displayed there for your contacts to see. It is also possible that further services and technology will be loaded by the platforms. If you are logged in as a member of the network, this information will be associated with your personal user account on the platform. You can only prevent this by logging out before using the plugin. Note that as the provider of the pages we are not informed of the content of the transferred data or their use. Further information on this and on the collection and use of data by the platforms can be found in their respective privacy policies.

The recipient of the data is SaaS.group LLC as the processor and any technical service providers engaged for the operation and maintenance of our website, who act as processors. All service providers are contractually obliged to treat your data confidentially.

Juicer processes your data in the USA. We have agreed corresponding standard contractual clauses approved by the EU Commission as suitable guarantees for transfer to a third country. We will provide you with a copy of these on request.

Details of the duration of cookie storage can be found in the above table or in our cookie consent tool.

The provision of your personal data is voluntary, solely on the basis of your consent. You suffer no disadvantages as a result. However, website service and function cannot be guaranteed without these data.

You may withdraw your consent at any time. To do so, click on the link provided above and configure the settings accordingly in the cookie consent banner that appears.

Social media publications

We have profiles, accounts and fan pages on LinkedIn, Twitter, YouTube and Instagram. We provide a simple link that enables you to get from our website to our presences in the social network sites.

Data processing by social media providers
We cannot rule out the possibility that data are transferred to a third country, e.g. to servers located in the USA, through our company presences in these social networks. Note further that, as the operator of an Instagram, LinkedIn or Twitter fan page and of the YouTube channel, we are joint controller for the processing of the personal data with the social media provider (Art. 26 GDPR). We have entered into corresponding joint controllership agreements with the respective provider. Based on data processing in the USA, we have agreed corresponding standard contractual clauses with this company.

As the operator, we do not make decisions regarding the processing of insights data and all other information ensuing from Art. 13 GDPR, including the legal basis, the identity of the Controller and the duration of storage of cookies on users’ end devices.

Information on joint controllership
Information on joint controllership and processing of your data by the social media provider can be found at the links below:

https://legal.linkedin.com/pages-joint-controller-addendum
https://www.facebook.com/legal/terms/page_controller_addendum

If you have a profile on the corresponding website and are logged in, the provider can e.g. analyse your behaviour and create a profile of your behaviour. These user data are regularly processed for market research and for (personalised) advertising purposes.

Requests for information and further information
If you would like to exercise your right to information or user rights, it is possible to do so in respect of us or Instagram, Twitter, YouTube or LinkedIn. Further information about the collection and use of data as well as your rights and ways of protecting yourself can be found at:

https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect
https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
https://twitter.com/en/privacy
https://policies.google.com/privacy?hl=en

Embedded YouTube videos

Nature and purpose of processing:
We embed YouTube videos on some of our websites. The operator of such plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter: “YouTube”). If you visit a page with the YouTube plugin, a connection will be established to the YouTube servers. YouTube will receive information on what pages you visit. If you are logged into your YouTube account, YouTube will be able to associate your online activity with you personally. You can prevent this by logging out of your YouTube account beforehand.
If

you start a YouTube video, the provider uses cookies that collect information about the user’s behaviour.

Further information on the purpose and extent of data collection and data processing by YouTube is available in the provider’s privacy statements. They also contain further information on your rights in relation to this and configuration options to protect your privacy.

Legal basis:
The legal basis for this processing is your consent pursuant to point (a) of Art. 6(1) GDPR. If information is stored on your end device, or information already stored on your end device is accessed, the legal basis is your consent pursuant to section 25 of the TTDSG.

Recipient:
Opening YouTube automatically establishes a connection with Google.

Duration of storage and withdrawal of consent:
Users who have disabled cookies for Google Ads need not concern themselves with such cookies when viewing YouTube videos. However, YouTube also files non-personal user information in other cookies. If you wish to prevent this, you must block cookie storage in your browser.

Further information on YouTube’s privacy policy can be found here.

Transfer to a third country:
Loading and playing a YouTube video automatically establishes a connection to YouTube, which processes your data in the USA. Please note that the level of data protection in the USA is not equivalent to the European Union. Nor has the European Commission made an adequacy decision for the US yet. To protect your data after transfer as well, we have agreed standard contractual clauses with the service provider. We will provide you with a copy of the standard contractual clauses on request.

Provision prescribed or required:
The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may limit the functionality of the website.

Links to social media

We do not use social media plugins to store or analyse our users’ data. While our website does contain links to LinkedIn, Twitter, Instagram and YouTube, these are not directly connected to us, which means that your data are not collected, stored, or used otherwise or for other purposes.

SSL encryption

To protect the security of your data during transfer, we use state-of-the-art encryption methods (e.g SSL) over HTTPS.

Processors used

The following organisations, companies or persons have been charged by the operator of this website with the processing of data:

• Google LLC
• Hetzner Online GmbH
• olli Design GmbH
• SendinBlue GmbH

Amendment of our privacy provisions

We reserve the right to amend this privacy policy so that it complies with the latest legal requirements at all times or to reflect changes in our services in the privacy policy; e.g. on the introduction of new services. In that event, the new privacy policy will apply the next time you visit. For this reason, we ask you to inform yourself about our data protection practices at regular intervals by reading our privacy policy.

Questions for the Data Protection Officer

If you have any questions about data protection, please send us an email or contact us direct as follows:

Datenschutzbeauftragte der acatech
c/o activeMind AG
Management- und Technologieberatung
Potsdamer Straße 3
80802 München
Tel.: +49 (0) 89 / 91 92 94-900
Email: datenschutz@acatech.de