Data policy

Information about data protection in accordance with Article 13 and 14 General Data Protection Regulation (GDPR): use of the “FISH-FIT” online database

1. Name of the processing activity
   Personal data is processed for the purpose of activation as well as the use of the controller’s “FISH-FIT” online database.

2. Controller’s name and contact details
   Prof. Dr. Tanja Schwerdtle
   Max Rubner-Institut
   Federal Research Institute for Nutrition and Food
   Haid-und-Neu-Str. 9
   76131 Karlsruhe, Germany
   Phone: +49 721 6625-0
   Fax: +49 721 6625-111
   Email: kontakt/poststelle@mri.bund.de

3. Contact details of the data protection officer
   Max Rubner-Institut
   Federal Research Institute for Nutrition and Food
   Hermann-Weigmann-Str. 1
   24103 Kiel, Germany
   Phone: +49 431 609 – 2289
   Email: datenschutz@mri.bund.de
    
4. Purposes of processing and categories of personal data
   Registration is required to access and use the FISH-FIT database.
   
   If you want to use our “FISH-FIT” online database, the following data will be collected during registration:
   If unlawful access to this service is suspected, the IP address of the computer from which the interaction originate is also stored.
   
   In this context, personal data is stored on a server located in the Federal Republic
   of Germany.
    
   • First and last name
   • Title
   • Email address
   • Name, address and country of institute/authority/organisation to which you belong.
   • Your function at institute/authority/organisation
      
5. Legal basis of processing
   Article 6 (1) (b), (c) and (e) GDPR in conjunction with section 3 German Federal Data Protection Act (BDSG).
   
   Your name in connection with database entries published by you or other documents is used in accordance with Article 6 (1) (c) GDPR in conjunction with section 13 German Copyright Act (UrhG).
   
   The legal basis for processing by employees of the controller is:
   
   Article 6 (1) (b) and (e) and Article 88 GDPR in conjunction with sections 3, 26 BDSG; section 106 (4) German Federal Civil Service Act (BBG), German Tariff Agreement for Public Sector Employees (TVöD), if applicable in conjunction with corresponding specialist law or decrees that are implemented by the use of the databases.
    
6. Recipient of the personal data
   The controller is the recipient of the personal data.
    
7. Transfer of personal data to a third country
   No data is transferred to a third country or international organisation.
    
8. Storage duration of personal data
   Personal data is deleted on deregistration of the user account and by no later than the point at which the legal reason for storing it no longer applies.
   
   If you obtain access to authentic material (tissue material) in the context of the use of
   “FISH-FIT”, the controller is obliged to store your personal data for twenty years in
   accordance with Regulation (EU) No. 511/2014.
    
9. Rights of data subjects
   As a data subject you may assert the following rights vis-à-vis the Max Rubner-Institut
   under GDPR (see point 2 for the data protection officer):
   
   Right of access – Article 15 GDPR
   You have the right of access to information about the data processed concerning your person, the origin and recipients of such data as well as the purpose of processing and the storage duration. The exceptions to this right as set down in section 34 BDSG apply.
   
   Right to rectification – Article 16 GDPR
   You have the right to rectification of inaccurate data concerning your person.
   
   Right to erasure – Article 17 GDPR
   Furthermore, you have the right to request the erasure of your personal data by the controller.
   
   However, this is only possible if the personal data concerning you is no longer necessary, is being processed unlawfully or if consent in this regard has been revoked. The exceptions to this right as set down in section 35 BDSG apply.
   
   Right to restriction of processing 18 GDPR
   Furthermore, you have a right to restriction of processing. The right to restriction of processing confers the option to prevent further processing of the personal data concerning you for the time being. Such a restriction applies above all in the phase during which other rights asserted by the data subject are being examined.
   
   Where a restriction on the processing of personal data concerning you has been applied, such personal data shall only be processed, with the exception of storage, subject to your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
   
   Right to data portability – Article 20 GDPR
   The right to data portability confers the option to receive the personal data concerning you in a common, machine- readable format from the controller in order to have it transmitted to another controller, if necessary, or the right to have the personal data transmitted directly from one controller to another controller, insofar as this is technically feasible.
   
   However, this right is not available if the data is being processed for the performance of tasks carried out in the public interest (Art. 20 (3) sentence 2 GDPR).
   
   Right to object – Article 21 GDPR
   In addition, you have the right to object to the processing. The right to object confers the option to object to the further processing of your personal data in a specific situation where this is justified by the performance of tasks in the public interest and by public and private interests. The exceptions to this right as set down in section 36 BDSG apply.
   
   Right to complain – Article 77 GDPR
   If you feel that your rights have been violated with regard to the processing of your personal data by the Max Rubner-Institut, you have the right to lodge a complaint with a data protection supervisory authority.
   
   You can contact the data protection supervisory authority responsible for the Max Rubner-Institut as follows:
   
   The Federal Commissioner for Data Protection and Freedom of Information
   Graurheindorfer Straße 153
   53117 Bonn, Germany
   Phone: +49 (0)228 997799-0
   Fax: +49 (0)228 997799-5550
   Email: poststelle@bfdi.bund.de
    
10. Data not collected directly from you
    Data concerning contractual contacts or individuals is also collected by contractual partners or other public agencies and shared with the MRI, e.g., in the case of German governmental demand monitoring and/or framework agreements.
     
11. Use of "Matomo" for website analysis
    FISH-FIT uses the web analytics tool "Matomo" to collect and analyse visitor statistics. The following data from your browser session is collected by a JavaScript tracking of the software "Matomo":
     
    • IP address (shortened and pseudonymised, example: “77.87.229.100” becomes “77.87.0.0”)
    • Date and time of the request
    • Title of the page being viewed
    • URL of the page being viewed
    • Files that were clicked and downloaded
    • Links to an outside domain that were clicked
    • Jump page
    
    As we use "Matomo" only for anonymous data without the use of tracking cookies and without sharing it with third parties, no active consent via a cookie banner is required for this analysis process. Our legal basis for this is Article 6 (1) (f) of the GDPR, as we have a legitimate interest in improving our services and user experience.
    
    Only the controllers of FISH-FIT can access the data stored by "Matomo" on this portal via the Matomo analysis interface. Analysing the data enables FISH-FIT to analyse the number of our visitors.
    
    Visitor logs are only analysed in the restricted area of fish-fit.org (no determination of the provider or use of Geo-IP, no multi-domain tracking) and deleted monthly. All data are reset daily to ensure that no long-term profiles are created.
     

Max Rubner-Institut, Booth: 12/2024