Data privacy statement
Data privacy statement for “Europa macht Schule” and “Back to School”
We, the German Academic Exchange Service (hereinafter referred to as “we” or “DAAD”), are delighted that you have visited our website and are interested in the Europa macht Schule programme and the Back to School programme line. Your privacy is very important to us. We take the protection of your personal data and its confidential treatment very seriously. Your personal data will be processed exclusively in accordance with the provisions of European Union data protection law, in particular the General Data Protection Regulation (hereinafter referred to as “GDPR”). This privacy policy informs you about the processing of your personal data and your data protection rights when using our website and your data for participation in the Europa macht Schule (EmS) programme and the Back to School (BtS) programme line, as well as in events within the framework of the EmS and BtS programmes.
1. Data controller and data protection officer; contact details
1.1 The controller responsible for processing your personal data is:
Deutscher Akademischer Austauschdienst e. V. (DAAD) Kennedyallee 50
53175 Bonn
Germany
Phone: +49 (0)228 / 882-0
E-mail
1.2 You can contact our data protection officer as follows:
Dr Gregor Scheja
Scheja & Partners GmbH & Co. KG
Adenauerallee 136
53113 Bonn
Germany
Tel.: (+49) 0228-227 226 0
https://www.scheja-partner.de/kontakt/kontakt.html
2. Subject of data protection
The subject of data protection is personal data. This is all information that relates to an identified or identifiable natural person (known as the data subject). This includes, for example, information such as your name, postal address, email address or telephone number, but also information that is necessarily generated during the use of our website, such as information about the start, end and scope of use.
3 . Type, scope, purposes and legal basis of processing
3.1 “Europa macht Schule” programme
In this section, we inform you about data processing in connection with the Europa macht Schule programme.
3.1.1 Registration and implementation of the programme
You can register for the Europa macht Schule programme using a form on “Mein DAAD”. The privacy policy of “Mein DAAD” applies to the one-time registration on “Mein DAAD”.
After successfully registering with “My DAAD”, you will be automatically redirected to the registration form on our website to complete your registration for the programme. From then on, this privacy policy will apply.
When registering for the EmS programme, the following personal data will be processed, among other things:
- Personal (contact) data: Including title, name, gender, email address, current place of residence including address, telephone number, date of birth, nationality.
- Contact details of the school you are attending through EmS: including name, type of school, postal address, email address, class, subject.
Registration for the programme is not possible without providing the information marked as mandatory.
We process this personal data for the purpose of preparing and implementing your participation in our programme. The purposes include in particular
- Inclusion in the master data management system
- Communication with you
- Preparation, completion and processing of projects
- Issuing and, if applicable, sending certificates/attestations
- public relations
- Registration of applications for the programme
- Sending information materials (including certificates, evaluations)
Processing is carried out on the basis of Art. 6 (1) (b) GDPR.
3.1.2 Preparation and implementation of events
We process your data in connection with EmS events for the following purposes:
- Preparation, implementation and follow-up of events
- Creation of name badges, certificates, attendance lists, meal distribution, etc.
- Informing speakers, the event venue and the accommodation provider of the data relevant to them
The following personal data is processed for this purpose:
- Personal (contact) data: Including title, name, gender, email address, current place of residence including address, telephone number, date of birth, nationality.
- Contact details of your school with which you are participating in EmS: Including name, type of school, postal address, email address, class, subject.
- Selection of the date of the event and information about arrival and departure, accommodation
Without providing the information marked as mandatory, it is not possible to register for the respective event. Processing is carried out on the basis of Art. 6 (1) (b) GDPR.
When registering for the programme and its events, you also have the option of providing further voluntary information: postal address in Germany and other voluntary information. Please note that this information is not required for registration and that you alone decide whether you wish to provide us with this data.
In order for us to take special requests into account when registering you, we may require your consent to the processing of special categories of personal data. This applies in particular to data relating to reduced mobility or health-related requirements for the catering provided. If you have given your consent for specific purposes, the purposes will be determined by the content of the consent you have given.
Data processing is carried out on the basis of Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR[1] . In cases where you are required to provide data for this purpose, we will expressly point this out. Without the provision of this data, we would not be able to comply with your request covered by your consent. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent until withdrawal.
We will delete the data when it is no longer necessary for the purposes for which we have collected it or when you have withdrawn your consent and there is no other legal basis for processing. If the latter applies, we will delete the data after the other legal basis has ceased to exist.
[1] Special categories of personal data are data that reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data for the unique identification of a natural person, health data, or data concerning a natural person’s sex life or sexual orientation.
3.1.3 Recording and publication of image and audio material in the context of events
3.1.3.1 Purposes
Within the framework of the programme and its events, we process image and/or audio material in order to make it available within the DAAD and/or to third parties.
The image and/or audio material in which you are recognisable will be processed for the following purposes:
- Reporting on our event(s)
- Public relations work for the event(s)
- Forwarding of image and/or audio material to sponsors/cooperation partners of the Europa macht Schule programme for their public relations work
If the aforementioned purposes require the publication of image and audio material, this may be done in the following media if there is a corresponding legal basis:
- Website of the DAAD, the NA, and EmS
- EmS social media accounts (e.g. Facebook, Instagram) and video services (e.g. YouTube)
- DAAD funders/EmS cooperation partners’ social media accounts (e.g. Facebook, Instagram) and video services (e.g. YouTube)
- Print media of the DAAD, the NA and EmS (e.g. EmS annual report)
Further details on the purposes may be found in the respective contract documents or in the content of any declaration of consent submitted when registering for the programme.
3.1.3.2 Legal
3.1.3.2.1 Data processing for the purpose of fulfilling the contract
If the processing of image and/or audio material is necessary for the fulfilment of a contract with you or for the implementation of pre-contractual measures, data processing is carried out on the basis of Art. 6 para. 1 letter b) GDPR.
3.1.3.2.2 Consent
If we process image and/or audio material on the basis of a declaration of consent submitted by you, this is done on the basis of Art. 6 (1) (a) GDPR.
If we process special categories of personal data within the meaning of Art. 9 para. 1 GDPR[1] for specific purposes, this will only be done on the basis of your express consent (Art. 9 para. 2 letter a) GDPR).
You can withdraw your consent at any time. Please note, however, that this withdrawal only takes effect for the future, i.e. the lawfulness of the data processing carried out on the basis of your consent prior to the withdrawal remains unaffected by the withdrawal.
3.1.3.3 Processing to safeguard legitimate interests
Where necessary, we process image and/or audio material in which you can be seen and/or heard for the purpose of safeguarding our legitimate interests or the legitimate interests of third parties. Data processing in this case is based on Art. 6 para. 1 letter f) GDPR.
We only process the material if, after weighing up the interests involved, we assume that the DAAD’s interests in processing the image and/or audio material outweigh those of the data subject. The legitimate interests lie in the purposes mentioned in section 2.
[1] Special categories of personal data are data that reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data for the unique identification of a natural person, health data, or data concerning a natural person’s sex life or sexual orientation.
3.2 “Back to School” programme line
In this section, we inform you about data processing in connection with the BtS programme line.
3.2.1 Registration and implementation of the programme line
You can register for the Back to School programme using a form provided by LimeSurvey.
When you register for our BtS programme, the following personal data will be processed, among other things:
- Personal (contact) data: Including name, gender, email address, current place of residence including address and telephone number, university in Germany, degree programme, matriculation number
- Details of the framework of the stay abroad, including host country, university, date of return from the host country, type of stay
- Date of participation in the webinar and registration for the programme
The purposes for which we process your data correspond to those of the Europa macht Schule programme under section 3.1.1.
Without providing the information marked as mandatory, it is not possible to register for the programme. Processing is carried out on the basis of Art. 6 (1) (b) GDPR.
3.2.2 Preparation and implementation of events
We process your data in connection with BtS events for the following purposes:
- Preparation, implementation and follow-up of events
The following personal data is processed for this purpose:
- Personal (contact) details: Including name and email address
- Date of participation in the webinar
Registration for the respective event is not possible without providing the information marked as mandatory. Processing is carried out on the basis of Art. 6 (1) (b) GDPR.
You can also provide voluntary information when registering for the event. For more details, please refer to section 3.1.2.
3.2.3 Recording and publication of image and audio material during events
The provisions under Section 3.1.3 apply to the recording and publication of image and audio material in the context of BtS events.
3.3 Website europamachtschule.de
In this section, we inform you about data processing in connection with your visit to the website www.europamachtschule.de.
3.3.1 Provision of our website
When you access our website via your device, we process the following data:
- Date and time of access,
- Duration of the visit,
- Operating system used,
- Amount of data sent,
- Type of event,
- IP address,
- domain name.
We process this data on the basis of Article 6(1)(f) GDPR for the purpose of providing the service, ensuring technical operation and for the purpose of determining and eliminating malfunctions. In doing so, we pursue the interest of enabling the use of our website and its technical functionality. This data is processed automatically when you visit our website. Without this provision, you cannot use our services. We generally delete this data after 7 days, unless we need it for the above-mentioned purposes for a longer period of time in exceptional cases. In such a case, we will delete the data immediately after the purpose has ceased to exist.
3.3.2 DAAD publication orders
If you use the “Online order form for publications & giveaways”, you will be redirected to the DAAD website. The DAAD’s privacy policy applies here.
3.3.3 EmS Abroad
If you register as an international student, teacher or location member at an EmS location abroad (EmS Abroad), you will be redirected to the relevant Google forms to enter your personal data. Google’s privacy policy applies here. The personal data will be collected and processed accordingly by the respective EmS locations abroad.
3.3.4 Map service
We use the Google Maps map service on our website, a map service provided by Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). When you visit a page that contains Google Maps, your browser establishes a direct connection to Google’s servers. The map content is transmitted directly from Google to your browser and integrated into the website via a so-called iFrame. If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use the map display. Further information on data processing by Google can be found in Google’s privacy policy.
3.3.5 YouTube videos
Video clips from the YouTube video portal are embedded on our website. YouTube is a portal of YouTube, LLC, a subsidiary of Google Inc.
For data protection reasons, we have decided not to embed the video clips directly into our site, but to deactivate them by default. When you visit our site, no data is therefore transmitted to Google. You will therefore only see a preview image of the video clip on our website. To play the video clip, you must activate it by clicking on the preview image. By clicking, you consent to the transfer of data to YouTube. The legal basis for the processing of your data is your consent in accordance with Art. 6 para. 1 lit. a, 49 para. 1 lit. a GDPR. Only after this activation will a connection to Google’s servers be established and data transmitted to Google. In this respect, your personal data will be transferred to entities in a third country (outside the European Economic Area), although no level of data protection comparable to that under EU law is guaranteed in this respect. Therefore, compliance with the data protection principles of Union law is not guaranteed. We have no influence on the scope of the data collected in this respect.
For more info on the purpose and scope of data collection, as well as further processing and use of the data by Google, your rights in this regard, and settings options for protecting your privacy, please check out Google’s privacy policy at: https://www.google.de/intl/de/policies/privacy.
The terms of use for YouTube can be found at: https://www.youtube.com/t/terms.
3.3.6 Cookies
Information about cookies and the associated data processing can be found under Cookie Einstellungen
3.3.7 Links to third-party offers
Websites and services of other providers linked to from this website have been and are designed and provided by third parties. We have no influence on the design, content and function of these third-party services. We expressly distance ourselves from all content of all linked third-party offers. Please note that third-party offers linked to [this website] may install their own cookies on your device or collect personal data. We have no influence over this. Please inform yourself directly with the providers of these linked third-party offers if necessary.
4. Recipients of personal data
Internal recipients: Within the DAAD, only those persons who need it for the purposes specified in section 3 have access to your personal data.
External recipients: We only pass on your personal data to external recipients outside the DAAD if this is necessary for the processing or handling of your enquiry, if there is another legal permission or if we have your consent to do so. External recipients may be:
a) Processors
External service providers that we use to provide services, for example in the areas of technical infrastructure and maintenance for the DAAD’s services or the provision of content. These processors are carefully selected and regularly reviewed by us to ensure that your privacy is protected. The service providers may only use the data for the purposes specified by us.
b) Public authorities
Authorities and government institutions, such as public prosecutors, courts or tax authorities, to whom we are required to transfer personal data for legally binding reasons.
c) Private entities
- Traders, cooperation partners or assistants of the DAAD to whom data is transferred for the purpose of implementing our programme on the basis of consent or another legal basis, such as service providers, organisers or institutions, speakers and lecturers.
- Platform operators of the social networks used (such as Facebook, Instagram, YouTube, etc.)
- Cooperation partners of the Europa macht Schule programme
- Providers and users of social media platforms (such as Facebook, Instagram, YouTube, etc.).
5. Automated individual decision-making, including profiling
Automated decisions in individual cases, including profiling within the meaning of Art. 22 GDPR, do not take place.
6. Data processing in third countries
If data is transferred to entities whose registered office or place of data processing is not located in a Member State of the European Union or in another contracting state of the Agreement on the European Economic Area, we will ensure prior to the transfer that, except in cases where the law permits exceptions, the recipient either has an adequate level of data protection (e.g. through an adequacy decision by the European Commission, through appropriate safeguards such as the agreement of so-called EU standard contractual clauses of the European Union with the recipient) or that you have given your sufficient consent. You can obtain an overview of the recipients in third countries and a copy of the specific arrangements agreed to ensure an adequate level of data protection from us. Please use the information provided in section 1 for this purpose.
7. Storage period
The storage period for personal data can be found in the respective chapter on data processing. In addition, the following applies in general: we only store your personal data for as long as this is necessary to fulfil the purposes for which it was collected or, in the case of consent, for as long as you have not revoked your consent. In the event of an objection, we will delete your personal data unless further processing is permitted under the relevant legal provisions. We will also delete your personal data if we are obliged to do so for legal reasons.
8. Rights of data subjects
As a data subject, you have numerous rights. In detail:
- Right to information: You have the right to obtain information about the data we have stored about you.
- Right to rectification and erasure: You can request that we rectify incorrect data and, if the legal requirements are met, erase your data.
- Restriction of processing: You can request that we restrict the processing of your data, provided that the legal requirements are met.
- Data portability: If you have provided us with data on the basis of a contract or consent, you may, if the legal requirements are met, request that you receive the data you have provided in a structured, commonly used and machine-readable format or that we transfer it to another controller.
Objection to data processing on the legal basis of “legitimate interest” pursuant to Article 6(1)(f) GDPR: You have the right to object to our processing of your data at any time for reasons arising from your particular situation, provided that this is based on the legal basis of “legitimate interest”. If you exercise your right to object, we will cease processing your data unless we can demonstrate compelling legitimate grounds for the further processing which override your rights. To exercise your right to object, please contact us using the contact details provided in section 1.
- Withdrawal of consent: If you have given us your consent to process your data, you can withdraw this consent at any time with effect for the future. The lawfulness of the processing of your data until withdrawal remains unaffected by this.
- Right to lodge a complaint with the supervisory authority: You may also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. To do so, you can contact the data protection authority responsible for your place of residence or country or the data protection authority responsible for us.
How to contact us:
Furthermore, you can contact us free of charge if you have any questions about the processing of your personal data, your rights as a data subject and any consent you may have given. To exercise all of your aforementioned rights, please contact via email or send a letter to the address given in section 1 above. Please ensure that we are able to clearly identify you.