DLR takes the protection of personal data very seriously. We want you to know when we store data, which types of data are stored and how it is used. As an incorporated entity under German civil law, we are subject to the provisions of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telecommunications Telemedia Data Protection Act (TTDPA). This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected. We have taken technical and organisational measures to ensure our compliance and the compliance of external service providers with the data protection regulation.
This website uses SSL – that is, TLS encryption – in order to protect the transfer of personal data and other confidential information (for example, orders or enquiries sent to the controller).
We herewith advise you that the transmission of data via the Internet (i.e., through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third-party access.
The controller in the meaning of the General Data Protection Regulation, other national data protection laws in the Member States and related data protection regulations is:
Deutsches Zentrum fuer Luft- und Raumfahrt e. V. (DLR)
Linder Hoehe
51147 Cologne
Telephone: +49 2203 601-0
Email: datenschutz@dlr.de
WWW: https://www.dlr.de
The controller’s appointed data protection officer is:
Uwe Gorschütz, Deutsches Zentrum fuer Luft- und Raumfahrt e. V., Linder Hoehe, 51147 Cologne
Email: datenschutz@dlr.de
Among others, we use the following terms in this Privacy Policy, set out in the General Data Protection Regulation and the Federal Data Protection Act:
1. Personal data
Personal data refers to any information relating to an identified or identifiable natural person (hereinafter: ‘data subject’). An identifiable natural person is one who can be identified – directly or indirectly – in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
2. Data subject
A data subject is any identified or identifiable natural person whose personal data is processed by the controller.
3. Processing
Processing is any operation or set of operations performed on personal data or on sets of personal data – whether or not by automated means – such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction.
4. Restriction of processing
Restriction of processing means the marking of stored personal data with the aim of limiting its processing in the future.
5. Profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
6. Pseudonymisation
Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
7. Controller or data processing controller
Controller or data processing controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
8. Processor
Processor means a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
9. Recipient
Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities that may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.
10. Third party
Third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
11.Consent
Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
1. Scope of processing of personal data
We process personal data concerning our users exclusively to the extent required to provide a functioning website, as well as our content and services. Ordinarily, we will only process the personal data of our users after obtaining their consent. An exception to this rule is where obtaining prior consent is factually impossible and the processing of the data is permitted by law.
2. Legal grounds for the processing of personal data
Where we obtain consent from the data subject for the processing of personal data, the legal grounds are set out in Art. 6, paragraph 1, part (a) of the EU General Data Protection Regulation (GDPR).
Where personal data is processed for the performance of a contract in which the data subject is a contractual partner, the legal grounds are set out in Art. 6, paragraph 1, part (b) of the GDPR. This also applies to processing that is necessary for pre-contractual measures.
Where personal data is processed for compliance with a legal obligation to which our research centre is subject, the legal grounds are set out in Art. 6, paragraph 1, part (c) of the GDPR.
Where processing of personal data is necessary for the protection of vital interests of the data subject or another natural person, the legal grounds are set out in Art. 6, paragraph 1, part (d) of the GDPR.
Where processing is necessary for the legitimate interests of our research centre or a third party, and where the fundamental rights and freedoms of the data subject do not override the first interests, the legal grounds are set out in Art. 6, paragraph 1, part (f) of the GDPR.
3. Data deletion and duration of data storage
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. In addition, storage takes place if authorised by Union or Member State directives, laws or other regulations to which the controller is subject. Blocking or deletion of the data shall also take place when a storage period stipulated by one of the above standards comes to an end, except where it is necessary to continue storing the data to enter into or perform a contract.
4. Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time with effect for the future. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
1. External hosting
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website. The hoster is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). Our hoster processes your data only to the extent necessary to fulfill its service obligations and follows our instructions in this regard.
We use the following hoster:
IP-Projects
Am Vogelherd 14, 97295 Waldbrunn
2. conclusion of a contract for order processing
In order to ensure data protection-compliant processing, we have concluded an order processing contract with our hoster.
1. Server log files
The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. The information comprises:
This data is not merged with other data sources.
This data is recorded on the basis of Art. 6(1)(f) GDPR. The operator of the website has a legitimate interest in the technically error free depiction and the optimization of the operator’s website. In order to achieve this, server log files must be recorded.
The collection of data for the provision of our website and the storage of data in log files is crucial to operation of the website. Hence, users are not granted a right to object.
2. Contact
Request by e-mail, telephone, or fax
If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass these data on without your consent.
These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is required for the performance of pre-contractual measures. In all other cases, the data are processed on the basis of our legitimate interest in the effective handling of inquiries submitted to us (Art. 6(1)(f) GDPR) or on the basis of your consent (Art. 6(1)(a) GDPR) if it has been obtained; the consent can be revoked at any time.
The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.
a) Description and scope of data processing
Our website uses cookies. Cookies are text files placed on the user’s computer system by a browser and stored there.
Numerous websites and servers use cookies. Many cookies contain what is referred to as a cookie ID. A cookie ID is a unique cookie identifier. It consists of a sequence of characters with which Internet pages and servers can be assigned to the Internet browser in which the cookie was stored. This enables visited Internet pages and servers to distinguish the data subject’s individual browser from other Internet browsers containing different cookies. The unique cookie ID is used to recognise and identify a particular Internet browser.
The use of cookies allows DLR to provide visitors to this website more user-friendly services than would be possible without cookies.
We use technically necessary cookies to improve our website’s user friendliness. Some elements on our website make it necessary to recognise the accessing browser when moving from page to page. Cookies can be used to optimise the information and services on our website in the interests of our users. As stated above, cookies allow us to recognise visitors to our website. The purpose of this recognition is to facilitate use of our website by visitors. For instance, visitors to a website that uses cookies do not need to enter login details during each visit, as this information is obtained by the website from the cookie placed on the user’s computer system.
In addition, our website does not use cookies to analyse Internet usage by visitors.
b) Legal basis for data processing
The legal grounds for the processing of personal data using technically necessary cookies are set out in Art. 6, paragraph 1, part (f) of the EU General Data Protection Regulation (GDPR).
c) Purpose of data processing
Technically necessary cookies are used to make our website user friendly. Some functions on our website cannot be provided without the use of cookies, as they require that the browser is recognised when moving from page to page.
The user data collected with technically necessary cookies is not used to produce user profiles.
e) Duration of storage; right to objection and removal
The data subject can adjust the settings of the Internet browser at any time to prevent our website from placing cookies as described, and therefore block cookies on a permanent basis. In addition, the browser or other software programs can be used to delete cookies that have already been placed at any time. This is possible with all standard Internet browsers. The data subject may not be able to use the full functionality of our website if cookies are disabled in the active Internet browser.
You can change the settings of your Internet browser to disable or restrict the transfer of cookies at any time. Cookies that have already been placed on your computer can be deleted at any time. This can take place automatically. Disabling cookies may prevent you from using the full functionality of our website.
The controller has integrated components of YouTube on this website. YouTube is an Internet video portal that enables video publishers to upload video clips free of charge and that permits other users to view, rate and comment on these videos, also free of charge. YouTube allows the dissemination of all kinds of videos, so that full movies and TV programmes, as well as music videos, trailers and videos produced by users, are accessible on the Internet portal.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
With each visit to one of the individual pages of this Website that are operated by the controller and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the Information Technology system of the data subject is automatically prompted to download a display of the corresponding YouTube component.
The embedding code for YouTube videos was generated in advanced data privacy mode (for more detailed information in this regard, visit https://support.google.com/youtube/answer/171780).
Further information about YouTube is available at https://www.youtube.com/intl/en/yt/about/. During the course of this technical procedure, YouTube and Google acquire knowledge of the specific sub-page of our website that was visited by the data subject.
If the data subject is simultaneously logged into YouTube, YouTube recognises – with each visit to a sub-page that contains a YouTube video – which specific sub-page of our website the data subject visited. This information is collected by YouTube and Google and associated with the YouTube account of the data subject.
YouTube and Google will receive information through the YouTube component that the data subject has visited our website if the data subject is simultaneously logged into YouTube when visiting our website; this occurs regardless of whether the person clicks on a YouTube video or not. If such a transmission of information to YouTube and Google is not desirable for the data subject, then he or she can prevent this by logging off from their YouTube account before visiting our website.
YouTube’s privacy policy, which is available at https://policies.google.com/privacy, provides information on the collection, processing and use of personal data by YouTube and Google.
The data subject has granted consent for this form of data processing by confirming the use of cookies upon first access of the DLR website. The legal basis for processing of the data after consent by the user is set out in Art. 6, paragraph 1, part (a) of the EU General Data Protection Regulation (GDPR).
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller in accordance with the provisions set out below: