Privacy Policy

This Privacy Policy informs you about the nature, scope and purpose of the processing of personal data (hereinafter referred to as „data”) in the context of providing our services as well as within our online offering and the websites, functions and content associated with it, as well as external online presences, such as our social media profiles (hereinafter jointly referred to as „online offering”). With regard to the terms used, such as „processing” or „controller”, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

I. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection provisions is:

Deutsche Gesellschaft für Nuklearmedizin e.V.
Managing Director: Götz Jonas
Nikolaistraße 29, 37073 Göttingen,
eMail: office@nuklearmedizin.de
Internet: www.nuklearmedzin.de
Telephone: + 49 (0) 551 / 48857-401
Fax: + 49 (0) 551 / 48857-79

II. General information on data processing

1. Scope of the processing of personal data

As a general rule, we process our users’ personal data only to the extent necessary to provide a functional website as well as our content and services. The processing of our users’ personal data is regularly carried out only with the user’s consent or where the processing of the data is permitted by statutory provisions.

2. Legal basis for the processing of personal data

Where we obtain the consent of the data subject for processing operations involving personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
Where the processing of personal data is necessary for the performance of a contract to which the data subject is party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations required to take steps prior to entering into a contract. This applies in particular to the processing of personal data in connection with applying for membership in our association.
Where the processing of personal data is necessary for compliance with a legal obligation to which our association is subject, Article 6(1)(c) GDPR serves as the legal basis.
Where processing of personal data is necessary in order to protect the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis.

Where processing is necessary for the purposes of the legitimate interests pursued by our association or its members or by a third party, and the interests, fundamental rights and fundamental freedoms of the data subject do not override the first-mentioned interest, Article 6(1)(f) GDPR serves as the legal basis for processing.

3. Data erasure and storage period

The personal data of the data subject shall be erased or blocked as soon as the purpose of storage no longer applies. Storage may continue beyond this point where this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data shall also be blocked or erased when a storage period prescribed by the aforementioned standards expires, unless further storage of the data is necessary for the conclusion or performance of a contract

III. Provision of the website and creation of log files

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data are collected:

Information on the browser type and version used
The user’s operating system
The user’s Internet service provider
The user’s IP address
Date and time of access
Websites from which the user’s system accesses our website
Websites accessed by the user’s system via our website

We process the aforementioned data for the following purposes:

ensuring a smooth connection to the website,
ensuring convenient use of our website,
evaluating system security and stability, and
for other administrative purposes.

The legal basis for data processing is Article 6(1), sentence 1, point (f) GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.
The data are erased as soon as they are no longer necessary for the purpose for which they were collected. Where data are collected for the provision of the website, this is the case when the respective session has ended.
The collection of data for the provision of the website and the storage of data in log files are essential for the operation of the website. Consequently, the user has no right to object.

IV. Use of cookies

We use cookies on our website. These are small files that are automatically created by your browser and stored on your device (laptop, tablet, smartphone or similar) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware.
Information is stored in the cookie that results in each case in connection with the specific device used. However, this does not mean that we thereby obtain direct knowledge of your identity.
The use of cookies serves, on the one hand, to make use of our offering more convenient for you. We use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our website.
In addition, we also use temporary cookies to optimise user-friendliness; these are stored on your device for a specified period of time. If you visit our website again to use our services, it is automatically recognised that you have already visited us and which entries and settings you have made, so that you do not have to enter them again.
On the other hand, we use cookies to statistically record the use of our website and evaluate it for the purpose of optimising our offering for you. These cookies enable us to automatically recognise when you visit our website again that you have already visited us. These cookies are automatically deleted after a defined period of time.
The data processed by cookies are necessary for the aforementioned purposes in order to safeguard our legitimate interests and those of third parties pursuant to Article 6(1), sentence 1, point (f) GDPR.
Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. Completely disabling cookies may, however, mean that you cannot use all the functions of our website.
The user data collected in this way are pseudonymised by means of technical measures. It is therefore no longer possible to attribute the data to the accessing user. The data are not stored together with other personal data of the users.
When accessing our website, the user is informed about the use of cookies for analytical purposes and their consent is obtained for the processing of the personal data used in this context. In this context, reference is also made to this Privacy Policy.
The legal basis for the processing of personal data using cookies is Article 6(1)(f) GDPR.
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary for the browser to be recognised again after changing pages.
Cookies are stored on the user’s computer and transmitted from it to our website. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

V. Contact form and e-mail contact

Contact can be made via the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail will be stored.
The legal basis for processing the data is your consent pursuant to Article 6(1)(a) GDPR.
If the e-mail contact aims at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. The processing of personal data from the input mask serves us solely to process the contact request and your enquiry. In the event of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data.
The data are erased as soon as they are no longer necessary for the purpose for which they were collected. With regard to personal data from the form input mask and those transmitted by e-mail, this is the case when the respective conversation with the user has ended. The conversation is deemed to have ended when the circumstances indicate that the matter concerned has been conclusively clarified.
The user may withdraw their consent to the processing of personal data at any time. If the user contacts us by e-mail, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of making contact will be erased in this case.

VI. Web analysis Webalizer

On our website, we use the „Webalizer” tool for the purpose of analysing user behaviour. The analysis of user behaviour is important because it enables us to analyse the demand for content and thus optimise the online offering. The user data collected are not used to create user profiles.
The „Webalizer” tool only collects statistical data, such as the most frequently visited website content, the most frequently used browsers and the countries from which most requests originate.
In the version we use, the „Webalizer” tool anonymises IP addresses. For this purpose, the last three digits of IP addresses are truncated before they are used, if applicable, to analyse usage behaviour, so that it is no longer possible to establish a personal reference and you remain anonymous to us as a user.
The anonymised data records are stored on our web server and evaluated internally exclusively for statistical purposes. These data are not disclosed to third parties at any time. The „Webalizer” tool does not use cookies.
The legal basis for data processing using „Webalizer” in the form described is Article 6(1)(f) GDPR.
The „Webalizer” tool tells us how the website is used and thus enables us to continuously optimise our online offering. This also constitutes our legitimate interest in processing personal data pursuant to Article 6(1)(f) GDPR.
We erase the stored statistical information no later than after three years.

VIII. Disclosure of data to third parties

Your personal data will not be transferred to third parties for purposes other than those listed below.
We only disclose your personal data to third parties if:

you have given your express consent pursuant to Article 6(1), sentence 1, point (a) GDPR,
disclosure is necessary pursuant to Article 6(1), sentence 1, point (f) GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed,
there is a legal obligation to disclose the data pursuant to Article 6(1), sentence 1, point (c) GDPR, and
this is permitted by law and necessary pursuant to Article 6(1), sentence 1, point (b) GDPR for the performance of contractual relationships with you.

IX. Rights of the data subject

You have the following rights vis-à-vis us with regard to personal data concerning you:

the right of access to your personal data processed by us pursuant to Article 15 GDPR,
the right to rectification of inaccurate personal data or completion of your personal data stored by us pursuant to Article 16 GDPR
the right to erasure pursuant to Article 17 GDPR, unless data processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
the right to restriction of processing pursuant to Article 18 GDPR,
the right to object to processing pursuant to Article 21 GDPR
the right to data portability pursuant to Article 20 GDPR.
the right to lodge a complaint pursuant to Article 77 GDPR: You also have the right to complain to a data protection supervisory authority about our processing of your personal data
right to withdraw consent pursuant to Article 7(3) GDPR: You may withdraw your consent to data processing once given at any time vis-à-vis us. This means that we may no longer continue data processing based on this consent in the future. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to object

Where your personal data are processed on the basis of legitimate interests pursuant to Article 6(1), sentence 1, point (f) GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 GDPR, provided there are grounds relating to your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without requiring you to specify a particular situation.
If you wish to exercise your right to withdraw consent or object, it is sufficient to send an e-mail to: info@nuklearmedizin.de.

X. Data security

During your visit to the website, we use the widely used SSL procedure (Secure Socket Layer) in conjunction with the highest level of encryption supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognise whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
Furthermore, we use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

XI. Current status and amendment of this Privacy Policy

This Privacy Policy is currently valid and was last updated in March 2019.
Due to the further development of our website and offerings via it, or due to changed legal or regulatory requirements, it may become necessary to amend this Privacy Policy. The current Privacy Policy can be accessed at any time on our website under by you.