Privacy policy

Responsible party

With the following data protection information, we, GWT-TUD GmbH, Freiberger Straße 33, 01067 Dresden, as the responsible party within the meaning of the General Data Protection Regulation (DS-GVO), explain which personal data we process when you visit our website or use our online services. All data transmissions in connection with our website are made via an SSL-encrypted connection.

We reserve the right to occasionally adapt our data protection information so that it always complies with current legal requirements or to reflect changes in our services. We therefore recommend that you read the data protection information regularly.

Logging and creation of log files

When you visit our website, a number of technical data are logged. This general data and information is stored in the server's log files. Your IP address, browser ID and domain, the name of the retrieved file, the date and time of the retrieval, the amount of data transferred and the successful retrieval are recorded in a log file. The processing of personal data is carried out for the provision of the Internet presence as well as for troubleshooting based on a legitimate interest pursuant to Art. 6 para. 1 p. 1 lit. f DS-GVO. The deletion of the log files takes place after 8 weeks.

Provision of the website and creation of log files

Each time our website is called up, our system automatically collects data and information from the computer system of the calling computer.

The following data is collected in this process:

• IP address of the user
• Date and time of access
• URL of the page accessed
• URL from which the user comes (so-called referer)
• Information about the type of browser and the version used (from the user agent)
• Operating system of the user (from the user agent)

This data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

Use of cookies

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:
- Session ID (for recognition of the website visitor across page changes until the browser is closed).
- Status to the info banner about the use of cookies

Google Analytics (web tracking)

On our websites, we use Google Analytics, a web analytics service provided by Google Ireland Limited (www.google.de/intl/de/about/) (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter "Google"). In this context, pseudonymized usage profiles are created and cookies (see point "Cookies") are used. The information generated by the cookie about your use of this website such as

• browser type/version
• operating system used,
• Referrer URL (the previously visited page),
• Host name of the accessing computer (IP address),
• time of the server request,

are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website and internet use for the purposes of market research and demand-oriented design of these web pages. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible (IP masking).

Third-party plug-ins/widgets (social media)

Embedding of YouTube videos

YouTube videos are embedded on our website, which are stored at YouTube (responsible is Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA), but can be played directly on our website. To protect your privacy, you must first activate the videos on our pages. When you activate or play the videos, cookies from YouTube or DoubleClick may be stored and/or read on your end device and data may be transmitted to YouTube or DoubleClick (USA, Google), such as your IP address and cookie ID, the specific address of the page accessed on our site, system date and time of access, identifier of your browser. For the purposes and scope of data collection and processing by YouTube or DoubleClick, please refer to the information at Google: https://www.google.de/intl/de/policies/privacy/. If you do not want YouTube or DoubleClick to receive data about you through the use of our website, you must not activate the videos. After activating the video, the data transfer takes place regardless of whether you have a user account with YouTube or Google, via which you are logged in, or whether there is no user account for you. If you are logged in, this data can be directly assigned to your account. If you want to avoid this as much as possible, you must log out of the visit before activating the video.

Sending newsletters via brevo

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter.

We use the so-called double opt-in procedure to ensure that the newsletter is sent with your consent. In the course of this, the potential recipient allows himself to be included in a distribution list. Subsequently, the user is given the opportunity to confirm the registration in a legally secure manner by means of a confirmation e-mail. Only if the confirmation is received, the address will be actively included in the distribution list.

We use this data exclusively for sending the requested information and offers.

The newsletter software used is brevo. Your data will be transmitted to Newsletter2Go GmbH. brevo is prohibited from selling your data and using it for purposes other than sending newsletters. brevo is a German, certified provider that has been selected in accordance with the requirements of the General Data Protection Regulation and the Federal Data Protection Act.

You can find more information here: https://www.brevo.com/de/informationen-newsletter-empfaenger

You can revoke your consent to the storage of data, e-mail address and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter.

Pludoni Widget (applicants)

We process the data you have sent us in connection with your application in order to check your suitability for the position (or, if applicable, other open positions in our companies) and to carry out the application process (e.g. first name, last name, name affixes, nationality, contact data, such as private address, (mobile) phone number, e-mail address). This may also include special categories of personal data such as health data. As a rule, your personal data is collected directly from you as part of the recruitment process. In addition, we may have received data from third parties (e.g. job placement agencies).

Regardless of the way in which you send us an application, we will enter all incoming applications in our applicant management system. This is operated by pludoni GmbH, Pillnitzer Landstraße 73b, 01326 Dresden. We have concluded an order processing agreement with the provider to legitimize the data processing. A data transfer to a third country does not take place.

Through the Empfehlungsbund job advertisements widget of pludoni GmbH (https://www.pludoni.de/impressum) that we use, a one-time secure connection is established via HTTPS to https://bms.empfehlungsbund.de. This connection setup is necessary so that our job advertisements can be displayed. Log files are created that contain access data (name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider). Log files are processed for the purpose of troubleshooting and for security reasons (e.g. to clarify acts of abuse or fraud) and stored for a maximum period of 3 months, after which they are deleted. Data whose further storage is required for evidentiary purposes is exempt from deletion until final clarification of the respective incident. For detailed information on the processing of your data in connection with the Empfehlungsbund job advertisement widget, please refer to the separate privacy policy (https://bms.empfehlungsbund.de/datenschutz#stellenanzeigen-widget) of pludoni GmbH.

Information on the processing of your personal data (customer/prospect)

The categories of personal data processed include first name, last name, name affixes, position, department, official address, (mobile) phone number, official website and e-mail address. As a rule, your personal data is collected directly from you as part of the contract initiation process.

Within our company, your personal data will only be disclosed to those persons and departments who need it to fulfill contractual and legal obligations or who are entrusted with the corresponding fulfillment of the purpose-related tasks.

In addition, we sometimes use different service providers to fulfill our contractual and legal obligations and the purpose-related tasks.
These can be, for example:

• Website hoster
• Newsletter service provider
• Software for order processing
• E-mail service provider

Contact form, StudyDesigner and mail contact

If you have any questions or requests, please do not hesitate to contact us. To facilitate communication between you and us, a contact form is available on our website, which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored.

These data are:

• Name,
• first name,
• e-mail address,
• telephone number,
• company,
• message,

The communication of address and telecommunication data marked as mandatory in our contact/message forms is necessary in order to process and answer your inquiry. The voluntary provision of further data facilitates the processing of your inquiry.

The following data is also stored at the time the message is sent:

• IP address of the user Date and time of access URL of the page called URL from which the user comes (so-called referrer) Information.
• About the browser type and version used (from the user agent) Operating system of the user (from the user agent)
• Three bytes of the IP address of the user's calling system
• Date and time the form was sent
• Information about the browser type and version used (from the user agent)
• Operating system of the user (from the user agent)
• For the processing of the data, your consent is obtained during the submission process and reference is made to this privacy policy.
  Alternatively, it is possible to contact us via the e-mail address(es) provided. In this case, the user's personal data transmitted with the e-mail will be stored.
• In this context, the data will not be passed on to unauthorized third parties. The data will be used exclusively for processing the conversation.
• We usually store the information from your inquiry for three months after answering the inquiry in case of further inquiries, if it does not concern commercial or business letters, we store these for at least six or ten years.
• Date and time

The collected data will be deleted as soon as the processing is no longer necessary. In doing so, however, we must observe retention periods under tax and commercial law.

Your data entries in the respective form

Alternatively, it is possible to contact us using the contact data provided.

The processing of the collected data such as master data (names, addresses), contact data (e-mail), content data (text entries) is carried out to answer contact inquiries and for communication. For contract fulfillment and pre-contractual inquiries on the basis of Art. 6 para 1 S 1 lit. b DS-GVO or on the basis of our legitimate interest pursuant to Art. 6 para 1 S 1 lit f DS-GVO. Your data will be deleted after final processing of your request, provided that there are no legal retention obligations to the contrary.

Registration for events

If you register for an event using a form provided on our website, we store your data such as name, address, e-mail address, address, company, bank details, if applicable, according to the information you provide.

We store the data exclusively for pre-contractual services, for the fulfillment of the contract or, if applicable, for the postal delivery of conference documents or packages. The legal basis for this processing is Art. 6 para. 1 lit. b) DS-GVO. At the same time, we then store the IP address and the date of your registration together with the time of day on the basis of our legitimate interest pursuant to Art. 6 (1) f) DS-GVO. Our legitimate interest here lies in the prevention or prosecution in the event of misuse of our registration form and in ensuring the security of our information technology systems.

We transmit personal data to third parties only if this is necessary in the context of contract processing, such as to the credit institution entrusted with payment processing or transfer to a shipping company or a direct mailer.

The collected data will be deleted as soon as the processing is no longer necessary. In doing so, however, we must observe retention periods under tax and commercial law.

Search function

When you initiate a search, your request is passed on to our search engine. During the search, it is stored when which search term was searched for and how many search results there were. An assignment to a user is not possible. Otherwise, the other statements on data collection and storage apply.

Integrated services

Google services used by us:

Google Tag Manager - Google LLC -.

We process personal data for online marketing purposes based on your consent pursuant to Art. 6 (1) lit. a DSGVO b and our legitimate interest in efficient, economical and recipient-friendly services pursuant to Art. 6 (1) lit. f DSGVO.

Google Tag Manager is a tool with which we can manage so-called website tags and thus integrate e.g. Google Analytics and other Google marketing services into our online offer. With the Tag Manager itself, for example, no profiles of users are yet created or cookies are stored. Google only learns the IP address of the user, which is necessary to run the Google Tag Manager.  The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website: https://tagmanager.google.com/; privacy policy: https://policies.google.com/privacy.

The tag manager is currently not connected to any Google service.

Other integrated services

Linking to external offers and social media

If you directly access external offers by clicking on the respective link or button, these external providers may collect and process your data - in particular, for example, log data (including IP address, browser type, operating system, previously accessed website, accessed pages, cookie information) - in accordance with their own usage guidelines or privacy statements, which you can view on their pages.

YouTube videos

Within our website, we use the YouTube embedding function to display and play YouTube videos with your consent pursuant to Art. 6 (1) lit. a DS-GVO. The service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

We use the extended data protection mode, which, according to the provider, only initiates the storage of user information when the video is played. At the moment the playback of the embedded video is started, a transmission of your IP address to Youtube takes place. Furthermore, a cookie is set to collect information about your user behavior. According to information from YouTube, this information is used, among other things, to collect video statistics, to improve user-friendliness and to prevent abusive behavior.

Further information on data protection at YouTube can be found in the provider's privacy policy at: www.google.de/intl/de/policies/privacy/; Opt-out: adssettings.google.com/authenticated.

Please note that if you are logged into YouTube at the same time, YouTube recognizes which specific subpage of our website you are visiting when you call up a subpage that contains a YouTube video. This information is collected by YouTube and Google and assigned to the respective YouTube account of the person concerned. This takes place regardless of whether you click on a YouTube video or not. If such a transmission of data is not wanted, this can prevent the transmission by logging out of their YouTube account before calling up our website.

Data subject rights

As a data subject, you may at any time request information about the personal data concerning you and, if necessary, demand correction or deletion or restriction of processing, or object to processing. There is also a right to data portability in their favor. Furthermore, if data processing is carried out on the basis of consent, this can be revoked at any time for the future. To exercise your rights, please contact our data protection officer at the above contact details:

Dresden Institute for Data Protection

E-mail: datenschutz(at)g-wt.de

Further contact details can be found at:

www.dids.de

With regard to the assertion of data subject rights, we would like to point out that, in order to obtain comprehensive measures, these should at best be addressed directly to the respective operator of the social network. Only the operators have access to all of the collected personal data of the users and can accordingly provide more comprehensive information and take any measures. If you require assistance in this regard, you can of course contact our data protection officer at any time.

In addition, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 DS-GVO if it is suspected that the personal data is being processed unlawfully.