1. Scope
This privacy policy informs users about the nature, scope, and purpose of the processing of personal data by the controller according to Art. 4 No. 7 GDPR, namely the
Georg-August-University Göttingen
Public Law Foundation
University Medical Center Göttingen
Robert-Koch-Str. 40
37075 Göttingen
represented by the Board
Phone: 0551 390
Email: poststelle(at)med.uni-goettingen.de
(hereinafter referred to as “UMG”)
within the framework of the internet service provided at https://www.umg.eu – hereinafter referred to as “website”.
The legal foundations of data protection can be found in the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), the Lower Saxony Data Protection Act (NdsDSG), and the Telemedia Act (TMG). The UMG declares to comply with the applicable laws, especially when processing personal data.
Contact to the Data Protection Officer of UMG
University Medical Center Göttingen
-Data Protection Officer-
37099 Göttingen
Phone: 0551 3962762
datenschutz(at)med.uni-goettingen.de
Data Protection Supervisory Authority Responsible for UMG in Matters of Data Protection
The State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hannover
Phone: 0511 120 45 00
Fax: 0511 120 45 99
poststelle(at)lfd.niedersachsen.de
Excluded from this declaration are other websites and subdomains that are not managed in the central Content Management System (typo3 CMS) of UMG. For these internet presences, the data protection responsibility lies with the respective departments or persons who created these pages.
2. Handling of Personal Data
Personal data is all information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (Art. 4 No. 1 GDPR)
The law refers to the processing of personal data: Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (Art. 4 No. 2 GDPR). Personal data is only processed by UMG if this is legally permitted or if users consent to the processing (see Art. 6 GDPR).
2.1 Processing when Visiting the Website
By visiting this website, information about the access (date, time, viewed page) may be stored through the use of Matomo as a web analytics tool.
The Matomo web analytics tool uses cookies to enable the website operator to collect and analyze various statistical data, for example to improve the quality of the website’s structure and content or to enable user-oriented and smooth navigation. Cookies are small text files that are stored on the users’ hard drive, assigned to the browser used. They provide certain information to the party that sets the cookie (in this case UMG). On the one hand, they serve the user-friendliness of websites and thus the users, for example in the context of storing login data. On the other hand, the information helps to collect statistical data on website usage and analyze it to improve the offer.
So-called “session cookies” are used, limited to the duration of the website use, which allow, for example, storing device-specific information on the users’ access device (PC, smartphone, etc.). This allows the user’s computer to be recognized when they return to our website. Session cookies are automatically deleted as so-called “transient cookies” when users close the browser or log out. Cookies cannot cause any damage to the computer. They do not pose a security threat in terms of viruses or spying on the computer.
Users can influence the use of cookies. Most current browsers have an option to restrict or completely prevent the storage of cookies. Many online advertising cookies from companies can be blocked via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/uk/your-ad-choices/.
If you agree to the use of the web analytics cookie by the Matomo web analytics tool, the following usage data will be collected and stored in a database when accessing the website:
- • IP address (in shortened form, 2 bytes, e.g., 192.168.xxx.xxx)
- • Date and time of the request
- • Page title of the accessed page
- • URL (address) of the accessed page
- • Previous URL (address) of the accessed page
- • Used display resolution
- • Time zone
- • File that was clicked or downloaded
- • External link that was clicked
- • User’s location (country, region, city)
- • Browser language
- • Browser
The processing of the log file and use of the web analytics cookie is solely for statistical purposes.
2.2 Processing when Contacting via Email or Contact Form
If personal data (e.g., name, address, and email addresses) is collected via the contact form or email inquiry, this is always done on a voluntary basis. We point out that personal data provided to us in the context of initial inquiries via email is processed electronically in order to process the inquiries.
In this context, it should be noted that communication via email may have security gaps. In particular, manipulation of electronic documents by third parties cannot be completely ruled out. Furthermore, it is possible for knowledgeable experts to view or modify emails on their way to UMG. If users do not want to take the risks associated with email use, another form of communication should be chosen.
Additional personal data is only processed if it was provided in the email itself, for example, if this serves to conclude confidentiality agreements or other contracts.
Data will only be passed on to third parties if this is necessary to achieve the purpose pursued with the inquiry (e.g., for processing personal data to fulfill a contract [cf. Art. 6 Para. 1b GDPR] or to fulfill legal obligations [cf. Art. 6 Para. 1c GDPR] or if vital interests of the data subject make this necessary [cf. Art. 6 Para. 1d GDPR]).
2.3 Integration of Usercentrics
This website uses the consent management technology from Usercentrics to obtain your consent for the storage of certain cookies on your end device or for the use of certain technologies and to document this in a data protection-compliant manner. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Website: https://usercentrics.com/de (hereinafter referred to as “Usercentrics”).
When you visit our website, technical and personal data is transferred to Usercentrics:
- • Your consent(s) or the withdrawal of your consent(s)
- • Your IP address
- • Information about your browser
- • Information about your end device
- • Time of your visit to the website
Furthermore, Usercentrics stores a cookie in your browser to be able to assign the given consents or their withdrawal to you. The data collected in this way is stored until you request us to delete it, delete the Usercentrics cookie yourself, or the purpose for data storage no longer applies. Mandatory statutory retention obligations remain unaffected.
Usercentrics is used to obtain the legally required consents for the use of certain technologies. The legal basis for this is Art. 6 Para. 1 lit. c GDPR.
2.4 Integration of YouTube Videos
YouTube videos are embedded on this website, which are stored on http://www.YouTube.com and can be played directly from our website.
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the following data is transmitted to YouTube:
- • Your IP address
- • Date and time of the request
- • Information about your browser
- • Information about your end device
- • Referrer URL (the previously visited website)
- • Viewed videos
The data transmission occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information about your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
2.5 Integration of Grün Spendino Donation Forms
Donation forms from GRÜN spendino are integrated on this website. The technical operator of GRÜN spendino is GRÜN Software Group GmbH, Pascalstraße 6, 52076 Aachen, Germany.
When you visit pages with an embedded donation form, a connection is established with the servers of GRÜN Software Group GmbH. In addition, the following data is transmitted to GRÜN spendino:
- • Your IP address
- • Information about your browser
- • Information about your end device
- • Time of your visit to the website
Solely for the purpose of donation collection and donation management, your personal data such as first name, last name, street, house number, city, postal code, account holder, and account details are processed and stored when using the form.
For further information on the collection, processing, storage, and deletion of your data, please refer to the Privacy Policy for Fundraising and the Privacy Policy of GRÜN Software Group GmbH.
2.6 Heroes Job Board
A job board from Heroes is integrated on this website. The technical operator of the job board is heroes GmbH, Welfenstraße 22, 81541 Munich, Germany. When you visit pages with an embedded job board, a connection is established with the servers of heroes GmbH. In addition, the following data is transmitted to heroes:
- • Your IP address
- • Date and time of the request
- • Information about your browser
- • Information about your end device
- • External link that was clicked
For further information on the purpose and scope of data collection and its processing by Heroes, as well as on objection, please refer to Heroes’ privacy policy: https://heroes.eu/datenschutzerkl%C3%A4rung
If you want to view details of a job posting or apply online to our company, you will be redirected directly to the UMG’s external career portal. Information on how applicants are handled can be found in the privacy policy of the applicant portal: https://umg.recruiting-portal.com/main.do
2.7 Podcaster.De Podcast Hosting
This website uses the podcast hosting service Podcaster.de, Brunnenstraße 147, 10115 Berlin, Germany. The podcasts are loaded from Podcaster.de or transmitted via Podcaster.de.
The use is based on our legitimate interests, i.e., interest in a secure and efficient provision, analysis, and optimization of our podcast offerings in accordance with Art. 6 para. 1 lit. f. GDPR.
Podcaster.de processes IP addresses, browser and device information to enable podcast downloads/playbacks and to determine statistical data.
Further information and opt-out options can be found in Podcaster.de’s privacy policy: https://www.podcaster.de/privacy.
2.8 Podigee Podcast Hosting
This website uses the podcast hosting service Podigee provided by Podigee GmbH, Schlesische Straße 20, 10997 Berlin, Germany. The podcasts are loaded from Podigee or transmitted via Podigee.
The use is based on our legitimate interests, i.e., interest in a secure and efficient provision, analysis, and optimization of our podcast offerings in accordance with Art. 6 para. 1 lit. f. GDPR.
Podigee processes IP addresses and device information to enable podcast downloads/playbacks and to determine statistical data, such as access numbers. This data is anonymized or pseudonymized before being stored in Podigee’s database, unless it is necessary for providing the podcasts.
Further information and opt-out options can be found in Podigee’s privacy policy: https://www.podigee.com/de/about/privacy/.
2.9 External Links
 |
Kennzeichnung von externen Links auf dieser Webseite. |
Our website contains links to external third-party websites. Please note that we have no influence on the content and privacy practices of these external sites. When you follow such a link, you leave our website. The processing of personal data on these external websites occurs outside our area of responsibility. We therefore recommend that you carefully read the privacy policies of the linked pages before entering personal data there or using their services.
To show you that a link is external, we mark such links with a symbol (↗) or a corresponding note. This way, you can easily recognize when you are leaving our website.
3. Right to Information; Deletion and Blocking
Users can request the statutory rights to information under GDPR and BDSG from the person responsible for content named in the imprint. The following rights are available to the user:
- • Right to information (Art. 15 GDPR)
- • Right to rectification (Art. 16 GDPR)
- • Right to erasure (Art. 17 GDPR)
- • Right to restriction of processing (Art. 18 GDPR)
- • Right to data portability (Art. 20 GDPR)
- • Right to object to processing (Art. 21 GDPR)
The deletion or blocking of stored personal data is carried out in accordance with legal requirements. Users also have the right to complain to a data protection supervisory authority (e.g., to the data protection supervisory authority responsible for UMG, as specified above under 1.) in accordance with Art. 77 GDPR.
Last updated: February 2025
