Privacy Policy

DRM Datenraum Mobilität GmbH operates a website containing general information on the Data Space project. DRM Datenraum Mobilität GmbH is a non-profit organisation in conjunction with acatech – Deutsche Akademie der Technikwissenschaften e. V. (The National Academy of Science and Engineering). DRM Datenraum Mobilität GmbH places great emphasis on the protection of privacy and complies with the statutory data protection provisions. The following explains how we handle your personal data.

The controller within the meaning of data protection legislation, in particular the EU General Data Protection Regulation (GDPR), is:

DRM Datenraum Mobilität GmbH
Karolinenplatz 4
c/o acatech – Deutsche Akademie der Technikwissenschaften e.V.
80333 Munich, Germany

Managing Director: Manfred Rauhmeier

Registered with
Munich Local Court
under HRB 267003

 

You can exercise the following rights at any time using the contact details specified further below:

  • information on the data about you stored by us and the processing thereof (Art. 15 GDPR),
  • rectification of inaccurate personal data (Art. 16 GDPR),
  • deletion of your data stored by us (Art. 17 GDPR),
  • restriction of processing, provided that we may not delete your data due to legal obligations (Art. 18 GDPR),
  • objection to the processing of your data by us (Art. 21 GDPR) and
  • data portability, provided that you have consented to the data processing or have entered into a contract with us (Art. 20 GDPR).

If you have given us consent, you may withdraw it at any time with effect for the future.

You can lodge a complaint with a competent supervisory authority at any time (Art. 77 GDPR in conjunction with § 19 BDSG), e.g. the supervisory authority of the federal state of your residence, your place of work or the place of the alleged infringement.

A list of German supervisory authorities (for the non-public sector) with their respective addresses can be found at:
https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

Type and purpose of the processing:
When you access our website, i.e. even if you do not register or otherwise submit any information, information of a general nature is automatically collected. This information (server log files) includes the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like. In particular, the data are processed for the following purposes:

  • ensuring a problem-free website connection,
  • ensuring seamless use of our website,
  • evaluation of system security and stability and
  • other administrative purposes.

We do not use the data to draw conclusions about your person. We might use such information for statistical analyses with the aim to optimise our website and the underlying technology.

Legal basis:
The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Data recipients:
Recipients of the data are the responsible party and, if applicable, technical service providers who are commissioned as data processors to operate and maintain our website.

Retention period:
The data will be deleted as soon as they are no longer needed for the purpose they were collected for. With regard to data processed with the aim of website provision, this is generally the case after the respective session has ended.

Mandatory or required provision:
The provision of the aforementioned personal data is neither statutory nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. Furthermore, individual services may be unavailable or limited. Hence, objection to the aforementioned processing is not possible.

 

Type and purpose of the processing:
Your data (the e-mail address provided) will only be used to send you the subscribed newsletter Mobility Dataspace (MDS) by e-mail. The provision of your e-mail address is necessary in order to be able to send you the newsletter and, if necessary, to identify you in case you wish to exercise your rights as a data subject.

To receive the newsletter, it is sufficient to provide your e-mail address. The data you provide will be used solely for the purpose of providing the newsletter. We might also inform you per e-mail about circumstances relevant to the service or registration (e.g., changes to the newsletter service or technical issues).

For an effective registration, a valid e-mail address is necessary. In order to verify that the registration is actually made by the holder of the e-mail address, we use the “double-opt-in” procedure. For this purpose, we log the subscription to the newsletter, the sending of a confirmation email and the receipt of the requested response. No further data are collected. The data are used exclusively for the provision of the newsletter and are not transmitted to third parties.

Legal basis:
On the basis of your explicitly given consent (Art. 6(1)(a) GDPR), we will regularly send you our newsletter or comparable information by e-mail to the e-mail address provided.

You can withdraw your consent to the storage and processing of your personal data for the purpose of newsletter mailing at any time with effect for the future, e.g. by clicking on the “unsubscribe” button in the newsletter. Furthermore, you can withdraw your consent on our website. Alternatively, you can inform us of your withdrawal via the contact option provided at the end of this privacy policy.

Data recipients:
We use Sendinblue as our service provider for newsletter mailing. Your data will hence be transmitted to Sendinblue GmbH. Sendinblue is prohibited from selling your data and using it for purposes other than newsletter mailing. Sendinblue is a certified German provider, which has been selected based on the requirements of the General Data Protection Regulation and the German Federal Data Protection Act (Bundesdatenschutzgesetz). You can find further information at https://www.sendinblue.com/legal/privacypolicy/

Retention period:
Data are processed only as long as the corresponding consent is given. Afterwards, they will be deleted.

Mandatory or required provision:
The provision of your personal data is voluntary and based solely on your consent. Unfortunately, we cannot send you our newsletter without your consent.

Withdrawal of consent
You can withdraw your consent to the storage and use of your personal data for the purpose of newsletter mailing at any time. Consent can also be withdrawn via the contact options provided on the website.

 

Purpose and legal basis
The data entered by you into the contact form will be stored for the purpose of individual communication with you.

By providing the contact form, we would like to provide an easy way for you to contact us. The information you provide will be stored for the purpose of processing your inquiry and for possible follow-up questions.

The processing of the data entered in the contact form is based on your consent (Art. 6(1)(a) GDPR).

The data entered in the contact form will be processed on the basis of a legitimate interest (Art. 6(1)(f) GDPR). 
The information you provide will be stored for the purpose of processing your inquiry and for possible follow-up questions. If you contact us, we will register the personal data that you provide to us (e.g. name, company, title, email address, etc.), to help you with your request.

Data recipients
Recipients of the data are only the responsible body and, if applicable, technical service providers who act as data processors for the operation and maintenance of our website.

All service providers are contractually obliged to treat your data confidentially.

Retention period
Data will be deleted no later than 6 months after processing the inquiry.

Mandatory or required provision
The provision of your personal data is voluntary. However, we can only process your request if you provide us relevant information.

Objection
Please find our information on your right to object according to Art. 21 GDPR below.

 

Technically necessary cookies
Type and purpose of the processing:
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

Technically necessary cookies are used to simplify the use of websites for users. Some features of our website cannot be provided without the use of cookies. For these features, it is necessary that the browser is recognised even after a page change.

Legal basis and legitimate interest:
The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in a user-friendly design of our website.

Data recipients:
Recipients of the data may be our technical service providers, who work on the operation and maintenance of our website as data processors.

Mandatory or required provision:
The provision of the aforementioned personal data is neither statutory nor contractually required. However, without this data, the service and functionality of our website are not guaranteed. Furthermore, individual services may be unavailable or limited.

Right to object:
Please find the information on your right to object to the processing according to Art. 21 GDPR further below.

Use of cookies that are not technically necessary
Furthermore, we use cookies to better tailor the offer on our website to the interests of the website visitors and to improve the website based on statistical evaluations.

Twitter
Our website integrates the functions of Twitter. Twitter Inc., based in 795 Folsom St., Suite 600, San Francisco, CA 94107, USA, offers plugins for website operators, which DRM Datenraum Mobilität GmbH uses on its website. The plugins can be recognized by a Twitter’s Tweet- or Follow-Button. Pages with these plugins establish a direct connection to Twitter and, depending on your login status, share various data with Twitter. This may allow Twitter to draw conclusions about your Internet usage on the website of DRM Datenraum Mobilität GmbH, which Twitter might use for its own purposes. The purposes and scope of the data collection by Twitter, as well its further processing are neither influenced by DRM Datenraum Mobilität GmbH, nor does DRM Datenraum Mobilität GmbH have an access to these data.

Information on the purposes and scope of data collection and their further use by Twitter, as well as your rights in this respect and options for protecting your privacy can be found at https://twitter.com/en/privacy.

You can change your Twitter privacy settings in your account settings at https://www.twitter.com/account/settings.

The content provided by Twitter is only embedded into the Webpage if you have given consent hereto. You can withdraw your consent at any time via our Consent Tool. The data collected about you in this context is transferred to countries outside the European Union, in particular to the USA. In all other respects, the statements made above under "Use of cookies that are not technically necessary" apply accordingly.

LinkedIn
Our website integrates the functions of LinkedIn. The provider thereof is the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. LinkedIn Corp. offers plugins for website operators, which DRM Datenraum Mobilität GmbH uses on its website. Any integration only takes place with your consent. The plugin establishes a direct connection between your browser and the LinkedIn server. Depending on your login status at LinkedIn, different data might be transmitted to LinkedIn. LinkedIn thereby receives, for example, the information that you have visited our website using a particular IP address. In addition, LinkedIn might be in a position to assign your visit to our website to your user account. This may allow conclusions to be drawn about your internet usage on the DRM Datenraum Mobilität GmbH website, which LinkedIn could use for its own purposes. The purposes and scope of the data collection by LinkedIn and the further processing of these data by LinkedIn are neither influenced by DRM Datenraum Mobilität GmbH, nor does DRM Datenraum Mobilität GmbH have access to these data.

The purposes and scope of the data collection and the further use and utilisation of the data by LinkedIn as well as your rights in this regard and the options for protecting your privacy can be found at https://www.linkedin.com/legal/privacy-policy.

The content provided by LinkedIn is only embedded into the Webpage if you have given consent hereto. You can withdraw your consent at any time via our Consent Tool. The data collected about you in this context is transferred to countries outside the European Union, in particular to the USA. In all other respects, the statements made above under "Use of cookies that are not technically necessary" apply accordingly.

Vimeo
Our website integrates the functions of Vimeo, which is operated by Vimeo LLC, 555 West 18th Street, New York 10011. If you have consented to the use of Vimeo and open a page of our website that contains such a plugin, your browser will establishe a direct connection to the servers of Vimeo. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. Through this integration, Vimeo receives various data, with the help of which it might draw conclusions about your internet usage on the website of DRM Datenraum Mobilität GmbH. This information (including your IP address) is transmitted by your browser directly to a Vimeo server and stored there. Vimeo may use this data for its own purposes. The purposes and scope of the data collection by Vimeo as well as the further processing of these data by Vimeo are neither influenced by DRM Datenraum Mobilität GmbH, nor does DRM Datenraum Mobilität GmbH have access to these data.

The purpose and scope of the data collection and the further use and utilisation of the data by Twitter as well as your rights in this respect and the setting options for protecting your privacy can be found at https://vimeo.com/privacy.

The content provided by Vimeo is only embedded into the Webpage if you have given consent hereto. You can withdraw your consent at any time via our Consent Tool. The data collected about you in this context is transferred to countries outside the European Union, in particular to the USA. In all other respects, the statements made above under "Use of cookies that are not technically necessary" apply accordingly.

Legal basis:
The legal basis for this processing is your consent according to Art. 6(1)(a) GDPR.

Data recipients:
Recipients of the data may be our technical service providers, who work on the operation and maintenance of our website as data processors.

Mandatory or required provision:
Of course, you can in principle visit our website also without cookies. Internet browser are in general configured to accept cookies. Generally, you can disable the use of cookies in the settings of your browser at any time (see “Withdrawal of consent”).

Please note that individual features of our website may not function if you have disabled the usage of cookies.

Withdrawal of consent:
You can withdraw your consent at any time via our Cookie Consent Tool.

Open Cookie Settings

If you have given your consent hereto, this website will use Matomo (formerly Piwik), an open source software for statistical analysis of visitor access. InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand is the provider of the Matomo software.

Matomo sets a cookie (a text file) on your device to recognise your browser. When subpages of our website are opened, the following information is collected:

  • the IP address of the user, shortened by the last two bytes (anonymised),
  • the subpage opened and the time of its opening,
  • the website from which the user has reached our website (referrer),
  • the browser, browser plug-ins, operating system and screen resolution used,
  • the length of the stay on the website,
  • the pages accessed from the relevant subpage.

The data can be used to create and evaluate pseudonymised usage profiles for the named purposes. Matomo is used to improve the quality of our website and its content. In this way, we learn how the website is used and can thus constantly optimise our offer.

By anonymising the IP address by six digits, we take into account the interest of the website visitors in the protection of their personal data. The data are neither used to personally identify the website user nor are they merged with other data. We do not transmit the information on your website usage generated using the cookie to third parties.

Third country transfer:
The data collected may be transferred to the following third countries: New Zealand
The following data protection guarantees are in place: Adequacy Decision of the EU Commission

Withdrawal of consent:
You can withdraw your consent to the storage and analysis of your data through Matomo at any time via the link below. A so-called opt-out cookie will be stored on your device. It is valid for two years. As a consequence, Matomo will not collect any session data. However, please note that the opt-out cookie will be deleted if you delete all cookies.

To secure the data stored with us, we employ technical security measures to adequately protect your data from possible unauthorized access, misuse or loss. The security measures are regularly updated and improved in line with the ongoing technical developments.

Due to a restrictive allocation of access authorisations, merely the persons needing the data to fulfil the named processing purposes have access to your data.

To protect your personal data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

The following organisations, companies or persons have been commissioned by the operator of this website with the processing of data in accordance with Art. 28 GDPR:

  • Sendinblue GmbH

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6(1)(f) GDPR (data processing on the basis of legitimate interests); this also applies to profiling within the meaning of Art. 4 No. 4 GDPR based on this provision.

If you object to the processing, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is necessary for the establishment, exercise or defence of legal claims.

Recipient of an objection
An objection can be made in any form, by sending a letter or an e-mail with the subject “Objection” and containing your name, address or other identifiers to:

DRM Datenraum Mobilität GmbH
Karolinenplatz 4 c/o acatech – Deutsche Akademie der Technikwissenschaften e.V.
80333 Munich
Germany

 

We reserve the right to adapt this privacy policy in order to comply with the current legal requirements or to take account of changes to our services (e.g. when introducing new services) in the privacy policy. In such a case, your next visit will be subject to the new privacy policy. For this reason, we kindly ask you to inform yourself about our data protection measures at regular intervals by consulting our privacy policy.

If you have any questions about data protection, please write us an e-mail or contact us directly using the following contact details:

DRM Datenraum Mobilität GmbH
Karolinenplatz 4 c/o acatech – Deutsche Akademie der Technikwissenschaften e.V.
80333 Munich
Germany

E-Mail: info@mobility-dataspace.eu