The Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V. (MPG) takes the protection of your personal data very seriously. We process personal data gathered when visiting our websites in compliance with the applicable data protection legislation and, as a matter of principle, only to the extent that this is necessary to provide a functioning website and our content and services. We neither publish your data nor transmit them to third parties on an unauthorized basis. In the following sections, we explain which data we record when you visit one of our websites, and how exactly they are utilized:
Each time you visit our website, our service and applications automatically record data and information from the system of the visiting device.
The following data are gathered temporarily:
These data are stored in our systems' log files. There is no storage of these data together with other personal data relating to the user.
The legal basis for the temporary saving of data and log files is Article 6 (1) lit. f GDPR. Storage occurs in log files in order to ensure the website's functionality. The data also serve to optimize the websites, eliminate malfunctions and ensure our IT system security. Our justified interest in data processing pursuant to Article 6 (1) lit. f GDPR also lies in such purposes.
The recording of data for the provision of the website and the storage of data in log files are essential to operate the website. It is therefore not possible for the user to object.
The data are deleted as soon as they are no longer required in order to fulfil the purpose of their collection. If data are gathered for the provision of the website, this is the case if the respective visit is ended. In the event that data are stored in log files, this is the case after seven days at the latest. Storage above and beyond this period is possible. In this case, the users' IP addresses are deleted or removed so they can no longer be allocated to the visiting device. Usage log of computational models is deleted in arbitrary intervals.
When you run one of the models offered on this website, the parameters you enter are transmitted to our server, the model is evaluated, and the result is returned to your browser. Neither the parameters you entered nor the result are stored; what is recorded about the run is the usage log described in Section A, which contains no input parameters and no results.
So that we can tell how many different people use each model, the usage log records a pseudonym in place of your IP address: a short nickname calculated from the address together with a secret known only to us. Your IP address itself is never written to disk, and the nickname cannot be turned back into it. The secret changes every day, so the same visitor receives an unrelated nickname the next day and cannot be recognised or followed from one day to the next.
To prevent a single visitor from overloading the service, the number of model runs per IP address is limited. For this purpose your IP address is held in the working memory of the web server for at most one minute and is then discarded. It is not written to disk and is not combined with any other data.
The legal basis is Article 6 (1) lit. f GDPR. Our legitimate interest lies in operating the service reliably, protecting it against overload and misuse, and understanding how many people and which of our models are of use to the scientific community. The daily change of the secret keeps the pseudonym to what that purpose requires: it allows visitors to be counted, and not to be tracked over time.
The IP address used for rate limiting is discarded automatically after one minute at the latest, and is never stored in the usage log. The usage log, including the pseudonyms, is deleted at irregular intervals, as stated in Section A.
Your personal data are only transmitted to public institutions and authorities if legally required or for the purpose of criminal prosecution due to attacks on our network infrastructure. The data are not shared with third parties for any other purposes.
The controller within the meaning of the General Data Protection Regulation and other national data protection acts as well as other data protection legislation is the
Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V. (MPG)
Hofgartenstrasse 8
D-80539 Munich, Germany
Telephone: +49 (89) 2108-0
Contact form: https://www.mpg.de/kontakt/anfragen
Internet: https://www.mpg.de
The controller’s Data Protection Officer can be reached as follows:
Data Protection Officer of the MPG
Hofgartenstrasse 8
D-80539 Munich, Germany
Telephone: +49 (89) 2108-1554
datenschutz@mpg.de
As a data subject whose personal data are collected in the context of the above-mentioned services, you generally have the following rights unless legal exceptions apply in individual cases:
- Information (Article 15 GDPR)
- Correction (Article 16 GDPR)
- Deletion (Article 17 (1) GDPR)
- Restriction of processing (Article 18 GDPR)
- Data transmission (Article 20 GDPR)
- Revocation of processing (Article 21 GDPR)
- Revocation of consent (Article 7 (3) GDPR)
- Right to complain to the regulator (Article 77 GDPR). For the MPG, this is the Bavarian Data Protection Authority (BayLDA), Postfach 1349, 91504 Ansbach, Germany.