Privacy Policy

You can exercise the following rights at any time using the contact details specified further below:

• information on the data about you stored by us and the processing thereof (Art. 15 GDPR),
• rectification of inaccurate personal data (Art. 16 GDPR),
• deletion of your data stored by us (Art. 17 GDPR),
• restriction of processing, provided that we may not delete your data due to legal obligations (Art. 18 GDPR),
• objection to the processing of your data by us (Art. 21 GDPR) and
• data portability, provided that you have consented to the data processing or have entered into a contract with us (Art. 20 GDPR).

If you have given us consent, you may withdraw it at any time with effect for the future.

You can lodge a complaint with a competent supervisory authority at any time (Art. 77 GDPR in conjunction with § 19 BDSG), e.g. the supervisory authority of the federal state of your residence, your place of work or the place of the alleged infringement.

A list of German supervisory authorities (for the non-public sector) with their respective addresses can be found at:
https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

Type and purpose of the processing:
When you access our website, i.e. even if you do not register or otherwise submit any information, information of a general nature is automatically collected. This information (server log files) includes the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like. In particular, the data are processed for the following purposes:

• ensuring a problem-free website connection,
• ensuring seamless use of our website,
• evaluation of system security and stability and
• other administrative purposes.

We do not use the data to draw conclusions about your person. We might use such information for statistical analyses with the aim to optimise our website and the underlying technology.

Legal basis:
The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Data recipients:
Recipients of the data are the responsible party and, if applicable, technical service providers who are commissioned as data processors to operate and maintain our website.

Retention period:
The data will be deleted as soon as they are no longer needed for the purpose they were collected for. With regard to data processed with the aim of website provision, this is generally the case after the respective session has ended.

Mandatory or required provision:
The provision of the aforementioned personal data is neither statutory nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. Furthermore, individual services may be unavailable or limited. Hence, objection to the aforementioned processing is not possible.

Type and purpose of the processing:
Your data (the e-mail address provided) will only be used to send you the subscribed newsletter Mobility Dataspace (MDS) by e-mail. The provision of your e-mail address is necessary in order to be able to send you the newsletter and, if necessary, to identify you in case you wish to exercise your rights as a data subject.

To receive the newsletter, it is sufficient to provide your e-mail address. The data you provide will be used solely for the purpose of providing the newsletter. We might also inform you per e-mail about circumstances relevant to the service or registration (e.g., changes to the newsletter service or technical issues).

For an effective registration, a valid e-mail address is necessary. In order to verify that the registration is actually made by the holder of the e-mail address, we use the “double-opt-in” procedure. For this purpose, we log the subscription to the newsletter, the sending of a confirmation email and the receipt of the requested response. No further data are collected. The data are used exclusively for the provision of the newsletter and are not transmitted to third parties.

Legal basis:
On the basis of your explicitly given consent (Art. 6(1)(a) GDPR), we will regularly send you our newsletter or comparable information by e-mail to the e-mail address provided.

You can withdraw your consent to the storage and processing of your personal data for the purpose of newsletter mailing at any time with effect for the future, e.g. by clicking on the “unsubscribe” button in the newsletter or by contacting us directly (DRM Datenraum Mobilität GmbH, postal address: Karolinenplatz 4 c/o acatech - Deutsche Akademie der Technikwissenschaften e.V., 80333 Munich, e-mail: info@mobility-dataspace.eu).

Data recipients:
We use Sendinblue as our service provider for newsletter mailing. Your data will hence be transmitted to Sendinblue GmbH. Sendinblue is prohibited from selling your data and using it for purposes other than newsletter mailing. Sendinblue is a certified German provider, which has been selected based on the requirements of the General Data Protection Regulation and the German Federal Data Protection Act (Bundesdatenschutzgesetz). You can find further information at https://www.sendinblue.com/legal/privacypolicy/

Retention period:
Data are processed only as long as the corresponding consent is given. Afterwards, they will be deleted.

Mandatory or required provision:
The provision of your personal data is voluntary and based solely on your consent. Unfortunately, we cannot send you our newsletter without your consent.

Withdrawal of consent
You can withdraw your consent to the storage and use of your personal data for the purpose of newsletter mailing at any time. Consent can also be withdrawn via the contact options provided on the website.

Third Country Transfer
The collected data may be transferred to the following countries: France.
The following data protection guarantees are available: EU Commission adequacy decision, French/German data protection law, ISO 27001 certification and standard data protection clauses. Data protection law, ISO 27001 certification and standard data protection clauses pursuant to Art. 46 para. 2 lit. c) DSGVO.

Purpose and legal basis
The data entered by you into the contact form will be stored for the purpose of individual communication with you.

By providing the contact form, we would like to provide an easy way for you to contact us. The information you provide will be stored for the purpose of processing your inquiry and for possible follow-up questions.

The processing of the data entered in the contact form is based on your consent (Art. 6(1)(a) GDPR).

The data entered in the contact form will be processed on the basis of a legitimate interest (Art. 6(1)(f) GDPR and Art. 6(1)(b) GDPR). 
The information you provide will be stored for the purpose of processing your inquiry and for possible follow-up questions. If you contact us, we will register the personal data that you provide to us (e.g. name, company, title, email address, etc.), to help you with your request.

Data recipients
Recipients of the data are only the responsible body and, if applicable, technical service providers who act as data processors for the operation and maintenance of our website.

All service providers are contractually obliged to treat your data confidentially.

Retention period
Data will be deleted no later than 6 months after processing the inquiry.

Mandatory or required provision
The provision of your personal data is voluntary. However, we can only process your request if you provide us relevant information.

Objection
Please find our information on your right to object according to Art. 21 GDPR below.

Purpose of the processing
You are welcome to send us your application via e-mail. The data you provide will be processed exclusively for the purpose of
assessing your professional suitability and to contact you.
 
Legal base
The processing is carried out to establish an employment relationship, § 26 BDSG.
 
Receiver
Within the company, access to your data is granted to those offices that require it for the fulfilment of contractual, legal and supervisory obligations and to safeguard legitimate interests.
 
Storage time
In the event that we reject your application, the data will be deleted six months after notification of the decision.
If an employment relationship is established, the application documents will be stored for at least the period of employment.
 
Provision of data voluntary/ obligatory. Consequences of refusal
The provision of personal data is neither legally nor contractually required. However, without the information a processing of the application is not possible.

Technically necessary cookies

Type and purpose of the processing:
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

Technically necessary cookies are used to simplify the use of websites for users. Some features of our website cannot be provided without the use of cookies. For these features, it is necessary that the browser is recognised even after a page change.

Legal basis and legitimate interest:
The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in a user-friendly design of our website.

Data recipients:
Recipients of the data may be our technical service providers, who work on the operation and maintenance of our website as data processors.

Mandatory or required provision:
The provision of the aforementioned personal data is neither statutory nor contractually required. However, without this data, the service and functionality of our website are not guaranteed. Furthermore, individual services may be unavailable or limited.

Right to object:
Please find the information on your right to object to the processing according to Art. 21 GDPR further below.

Use of cookies that are not technically necessary
Furthermore, we use cookies to better tailor the offer on our website to the interests of the website visitors and to improve the website based on statistical evaluations.

Platform X (Twitter)
Our website integrates the functions of platform X (Twitter). Platform X (Twitter) Inc., based in 795 Folsom St., Suite 600, San Francisco, CA 94107, USA, offers plugins for website operators, which DRM Datenraum Mobilität GmbH uses on its website. The plugins can be recognized by a platform X (Twitter)-Post- or Follow-Button. Pages with these plugins establish a direct connection to platform X (Twitter) and, depending on your login status, share various data with platform X (Twitter). This may allow platform X (Twitter) to draw conclusions about your Internet usage on the website of DRM Datenraum Mobilität GmbH, which platform X (Twitter) might use for its own purposes. The purposes and scope of the data collection by platform X (Twitter), as well its further processing are neither influenced by DRM Datenraum Mobilität GmbH, nor does DRM Datenraum Mobilität GmbH have an access to these data.

Information on the purposes and scope of data collection and their further use by platform X (Twitter), as well as your rights in this respect and options for protecting your privacy can be found at https://twitter.com/en/privacy.

You can change your Twitter privacy settings in your account settings at https://www.twitter.com/account/settings.

The content provided by platform X (Twitter) is only embedded into the Webpage if you have given consent hereto. You can withdraw your consent at any time via our Consent Tool. The data collected about you in this context is transferred to countries outside the European Union, in particular to the USA. In all other respects, the statements made above under "Use of cookies that are not technically necessary" apply accordingly.

LinkedIn
Our website integrates the functions of LinkedIn. The provider thereof is the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. LinkedIn Corp. offers plugins for website operators, which DRM Datenraum Mobilität GmbH uses on its website. Any integration only takes place with your consent. The plugin establishes a direct connection between your browser and the LinkedIn server. Depending on your login status at LinkedIn, different data might be transmitted to LinkedIn. LinkedIn thereby receives, for example, the information that you have visited our website using a particular IP address. In addition, LinkedIn might be in a position to assign your visit to our website to your user account. This may allow conclusions to be drawn about your internet usage on the DRM Datenraum Mobilität GmbH website, which LinkedIn could use for its own purposes. The purposes and scope of the data collection by LinkedIn and the further processing of these data by LinkedIn are neither influenced by DRM Datenraum Mobilität GmbH, nor does DRM Datenraum Mobilität GmbH have access to these data.

The purposes and scope of the data collection and the further use and utilisation of the data by LinkedIn as well as your rights in this regard and the options for protecting your privacy can be found at https://www.linkedin.com/legal/privacy-policy.

The content provided by LinkedIn is only embedded into the Webpage if you have given consent hereto. You can withdraw your consent at any time via our Consent Tool. The data collected about you in this context is transferred to countries outside the European Union, in particular to the USA. In all other respects, the statements made above under "Use of cookies that are not technically necessary" apply accordingly.

Youtube
On our pages, videos from YouTube are embedded. YouTube is a service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google")). However, integration only takes place with your consent. With your consent, a direct connection to YouTube is established and - depending on your login status on YouTube - different data is transmitted. This may allow conclusions about your internet usage on the website of DRM Datenraum Mobilität GmbH, which YouTube could use for its own purposes. The purpose and scope of the data collection by YouTube as well as the further processing by YouTube are not influenced by DRM Datenraum Mobilität GmbH, nor does DRM Datenraum Mobilität GmbH have access to this data.

By using YouTube, your personal data is collected, transmitted, stored, disclosed and used by Google. Google analyzes your user behavior and, regardless of whether you have a Google account, creates a corresponding usage profile. Based on this data, content or advertising can be tailored to you.

Further information regarding the collection and use of data as well as your rights and protection options can be found at https://policies.google.com/technologies/product-privacy?hl=de and https://policies.google.com/privacy?hl=de&gl=de.

The embedding of content from YouTube only takes place with your consent. You can revoke your consent at any time via our Consent Tool. We would also like to point out that we cannot rule out the possibility that the data collected about you in this context may be transferred to countries outside the European Union, in particular to the USA. In all other respects, the statements made above under "Technically unnecessary cookies" apply.

The processing of the data is based on your consent pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO.

Legal basis:
The legal basis for this processing is your consent according to Art. 6(1)(a) GDPR.

Data recipients:
Recipients of the data may be our technical service providers, who work on the operation and maintenance of our website as data processors.

Mandatory or required provision:
Of course, you can in principle visit our website also without cookies. Internet browser are in general configured to accept cookies. Generally, you can disable the use of cookies in the settings of your browser at any time (see “Withdrawal of consent”).

Please note that individual features of our website may not function if you have disabled the usage of cookies.

Withdrawal of consent:
You can withdraw your consent at any time via our Cookie Consent Tool.

If you have given your consent hereto, this website will use Matomo (formerly Piwik), an open source software for statistical analysis of visitor access. InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand is the provider of the Matomo software.

Matomo sets a cookie (a text file) on your device to recognise your browser. When subpages of our website are opened, the following information is collected:

• the IP address of the user, shortened by the last two bytes (anonymised),
• the subpage opened and the time of its opening,
• the website from which the user has reached our website (referrer),
• the browser, browser plug-ins, operating system and screen resolution used,
• the length of the stay on the website,
• the pages accessed from the relevant subpage.

The data can be used to create and evaluate pseudonymised usage profiles for the named purposes. Matomo is used to improve the quality of our website and its content. In this way, we learn how the website is used and can thus constantly optimise our offer.

By anonymising the IP address by six digits, we take into account the interest of the website visitors in the protection of their personal data. The data are neither used to personally identify the website user nor are they merged with other data. We do not transmit the information on your website usage generated using the cookie to third parties.

Third country transfer:
The data collected may be transferred to the following third countries: New Zealand
The following data protection guarantees are in place: Adequacy Decision of the EU Commission

Withdrawal of consent:
You can withdraw your consent to the storage and analysis of your data through Matomo at any time via the link below. A so-called opt-out cookie will be stored on your device. It is valid for two years. As a consequence, Matomo will not collect any session data. However, please note that the opt-out cookie will be deleted if you delete all cookies.

The hosting of the website is provided by Pixel X e.K.. To ensure data protection-compliant processing, we have agreed the EU standard contractual clauses with the hoster. The processing servers are located within Germany. Excluded from this are the contents integrated by DRM Datenraum Mobilität GmbH on the website of social networks, platforms and other online services, such as YouTube, Twitter or LinkedIn. For these, the conditions of the respective service provider are applicable (cf. Cookies).

To secure the data stored with us, we employ technical security measures to adequately protect your data from possible unauthorized access, misuse or loss. The security measures are regularly updated and improved in line with the ongoing technical developments.

Due to a restrictive allocation of access authorisations, merely the persons needing the data to fulfil the named processing purposes have access to your data.

To protect your personal data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

The following organisations, companies or persons have been commissioned by the operator of this website with the processing of data in accordance with Art. 28 GDPR:

• Sendinblue GmbH

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6(1)(f) GDPR (data processing on the basis of legitimate interests); this also applies to profiling within the meaning of Art. 4 No. 4 GDPR based on this provision.

If you object to the processing, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is necessary for the establishment, exercise or defence of legal claims.

Recipient of an objection
An objection can be made in any form, by sending a letter or an e-mail with the subject “Objection” and containing your name, address or other identifiers to:

DRM Datenraum Mobilität GmbH
Karolinenplatz 4 c/o acatech – Deutsche Akademie der Technikwissenschaften e.V.
80333 Munich
Germany

We reserve the right to adapt this privacy policy in order to comply with the current legal requirements or to take account of changes to our services (e.g. when introducing new services) in the privacy policy. In such a case, your next visit will be subject to the new privacy policy. For this reason, we kindly ask you to inform yourself about our data protection measures at regular intervals by consulting our privacy policy.