Privacy policy

The controller is:

European Initiative for Exercise in Medicine e. V.
c/o Ulm University
Leimgrubenweg 14
89075 Ulm
Germany

Email: exercise.medicine@uniklinik-ulm.de

Website: https://www.exerciseismedicine.eu

Upon visiting our websites our servers are recording a set of general data and information. This set of general data and information is stored in server log files. The following information may be recorded: (1) the Internet browser and browser version used, (2) the operating system of the computer system used, (3) the website that referred to our website (referrer), (4) the sub pages that are accessed on our website, (5) time and date of the access to our website, (6) an internet protocol address (IP address), (7) the internet service provider of the accessing system and (8) or any other similar data and information, which may be used to protect our information technology system against danger in the case of an cyber attack.

When using this general data and information we are not drawing any conclusion on the directly affected data subject. Furthermore, this information is necessary to (1) deliver the contents of our websites correctly, (2) optimize the contents of our websites and the respective advertising without individualisation, (3) guarantee the long-term operational liability of our information technology systems and our websites as well as (4) provide necessary information for prosecution to law enforcement authorities in the case of a cyber attack.

The recorded sets of data and information are processed statistically and beyond that to improve data protection and data security in our organisation to finally guarantee an optimum level of data protection for all processed personal data. This optimization is a legitimate interest according to Article 6(1)(f) GDPR. This data is stored separately from all other personal data provided by the data subject and is deleted 14 days after the data subjects' access to our website.

Due to statutory obligations our websites provide contact information to electronically contact our organization rapidly and allow a direct communication with us. This also includes the provision of a public e-mail address. If a data subject contacts us via e-mail or a provided contact form, the transmitted personal data will be saved automatically. This personal data is transmitted to us on a voluntary basis and is processed by us for contacting reasons only and will not be distributed to third parties.

Our websites offer the opportunity to register for a newsletter about our services, such as memberships, congresses, conferences and education programms, to our website visitors. Which kinds of personal data are transmitted to the controller for different newsletters depends on the provided registration forms.

We periodically inform our customers and business partners about our offers and services through newsletters. Our newsletters can generally be received by a data subject if (1) the data subject provides a valid e-mail address and (2) the data subject registers for the newsletter self-reliantly. Using double opt-in procedures, we are sending out a validation e-mail to the e-mail address that has been provided by the data subject during the registration for newsletters for legal reasons. This validation e-mail is intended to verify that the owner of the provided e-mail address gives his consent to the newsletter registration as a data subject.

During the newsletter registration we are processing the IP address that is assigned by the internet service provider (ISP) to the computer system used during the registration by the data subject, along with the date and time of registration. This data processing is necessary to trace a possible abuse of the data subject's e-mail address at a later time and, therefore, serves for our legal protection.

All personal data that is processed for the newsletter registration are solely used for sending our newsletters to the registered recipients. We are offering several newsletters to subscribe to, such us newsletters for different congresses, conferences or services. The personal data of a data subject that has been provided for the subscription to a specific newsletter will categorically be used only to send out these specific newsletters. The data will not be used for any additional newsletters. Furthermore, newsletter subscribers may be informed about changes by e-mail to the registered e-mail address, if required for operational or registration purposes of the newsletter service, as well as for technical changes. The provided personal data will not be transferred to third-parties, except processors of the newsletter sendings. You can unsubscribe from our newsletter at any time. Your consent to the processing of your personal data can be revoked at any time, too. To revoke your consent and to unsubscribe from our newsletters please use the unsubscribe link, which can be found in every newsletter we send. Furthermore, you can unsubscribe from the newsletter by entering the e-mail address, which is registered for the newsletter, in the unsubscribe form on our website. Beyond that a subject may revoke the consent for the data processing by sending us a written notice.

The data for the newsletter sending is processed by processors. We have contracted the following processors for the newsletter sending:

The IT infrastructure for the data storage and the newsletter sending is provided AGNITAS AG - e-mail & marketing automation, Werner-Eckert-Straße 6, 81829 München, Germany through the software tool EMM SaaS. Further information about the privacy policy and general conditions of this processor can be found at https://www.agnitas.de/datenschutzerklaerung/ and https://www.agnitas.de/agb/.

For the newsletter creation, as well as the maintenance of recipient lists, we contracted GLOBIT - Global Information Technology GmbH, Am AKKU 7, 22885 Barsbüttel, Germany. Further information about the privacy policy of this processor can be found at https://www.globit.com/privacypolicy.html.

Our newsletters contain so called tracking pixels. A tracking pixel is a miniature graphic, which is embedded to e-mails, that are sent in HTML format, to allow us to log and analyse newsletters. This is the basis for statistical evaluations of the success or failure of our e-mail marketing campaigns. On the basis of the a tracking pixel we can reproduce if, when and on which platform, for example PC, mobile phone or tablet, an e-mail has been opened by the data subject. Furthermore we are able to see which links have been clicked in the e-mail by the recipient.

The personal data that is collected through the usage of tracking pixels is processed by us to optimize the sending of newsletters and improve the contents of the newsletters according to the recipients' interests. This personal data will not be transferred to third-parties, except processors of the newsletter sendings. Data subjects are entitled to revoke the consent for the usage of tracking pixels in the newsletters, which has been given in the double opt-in registration for newsletters, at any time. After revoking your consent we will automatically delete all data of that kind. An unsubscription from the newsletter is considered a revocation of consent.

The consent to the newsletter tracking is given on a voluntary basis and can be revoked by the data subject through editing the newsletter recipient profile at any time. You can find a link to edit your profile in every newsletter.

We store and process your personal data only for the term that is needed to reach the purpose of the data storage and processing or terms that are required by European or other legislative or regulative authorities for the processing and storage of data by the controller or the purposes of storage and processing.

Once the purpose of the data storage and processing lapses or the storage period required by European or other legislative or regulative authorities expires, the personal data will routinely and in accordance with the legal regulations be locked for processing or deleted.

Right to information
According to Article 15 GDPR you have the right to demand a confirmation whether we process your personal data. Should we process your personal data you have the right to be informed about this personal data and further information, which are explained in Article 15 GDPR.

Right to rectification
According to Article 16 GDPR you have the right to demand immediate rectification of incorrect personal data relating to you. Furthermore, taking into consideration the purposes of the processing you have the right to request the completion of incomplete personal data, also by means of a complementary declaration.

Right to erasure
You have the right to demand that we delete all of your stored personal data immediately. We are obligated to delete personal data immediately, provided the conditions of Article 17 GDPR are met. For further information about the details of these conditions we refer to Article 17 GDPR.

Right to restriction of processing
According to Article 18 GDPR you have the right to demand the restriction of processing of your personal data under certain circumstances.

Right to data portability
According to Article 20 GDPR you have the right to receive your provided personal data in a structured, common and machine-readable format from us. Furthermore, you have the right to transmit this data to a controller of your choice without any obstruction by us, insofar the processing is based on a consent according to the Articles 6(1)(a) or 9(2)(a) GDPR, as well as it is based on a contract according to Article 6(1)(b) GDPR and the data is processed by the means of automated procedures.

Right to object
According to Article 21 GDPR you have the right to object to the processing of your personal data that is based on the Articles 6(1)(e) or (f) GDPR. This also applies for a profiling based on these rules.

If we process your personal data for direct marketing purposes, you are entitled to object to the processing of your personal data for these purposes. This also applies for profiling that is linked to such direct marketing activities.

If you intend to exercise your given rights, please contact us - the controller - directly using the above stated contact information or choose one of the provided options to contact us on an alternative way to inform us. If you have any questions in this respect, please also contact us directly.

Right to logde a complaint with a supervisory authority
According to Article 77 GDPR you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider the the processing of personal data relating to you infringes the GDPR.

We have integrated the component of Google Analytics (with the anonymizer function) on this website. Google Analytics is a web analytics service. Web analytics is the collection, gathering, and analysis of data about the behavior of visitors to websites. A web analysis service collects, inter alia, data about the website from which a person has come (the so-called referrer), which sub-pages were visited, or how often and for what duration a sub-page was viewed. Web analytics are mainly used for the optimization of a website and in order to carry out a cost-benefit analysis of Internet advertising.

The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States.

During the first visit of our websites we invite the data subject to consent the usage of Google Analytics. The data subject's activities on our websites are not recorded as long as the respective consent has not been given.

In addition, the data subject has the possibility of objecting to a collection of data that are generated by Google Analytics, which is related to the use of this website, as well as the processing of this data by Google and the chance to preclude any such. For this purpose, the data subject must download a browser add-on under the link http://tools.google.com/dlpage/gaoptout and install it. This browser add-on tells Google Analytics through a JavaScript, that any data and information about the visits of Internet pages may not be transmitted to Google Analytics. The installation of the browser add-ons is considered an objection by Google. If the information technology system of the data subject is later deleted, formatted, or newly installed, then the data subject must reinstall the browser add-ons to disable Google Analytics. If the browser add-on was uninstalled by the data subject or any other person who is attributable to their sphere of competence, or is disabled, it is possible to execute the reinstallation or reactivation of the browser add-ons.

If Google does not provide this Internet browser plugin for the Internet browser or IT system used for your visit, you can deactivate Google Analytics by using this link: Deactivate Google Analytics. This deactivation only takes effect for the currently used IT system and for the currently used Internet browser.

For the web analytics through Google Analytics we use the application "_gat. _anonymizeIp". By means of this application the IP address of the Internet connection of the data subject is abridged by Google and anonymised when accessing our websites from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze the traffic on our website. Google uses the collected data and information, inter alia, to evaluate the use of our website and to provide online reports, which show the activities on our websites, and to provide other services concerning the use of our Internet site for us. This purpose is considered a legitimate interest according to Article 6(1)(f) GDPR.

Google Analytics places a cookie on the information technology system of the data subject. The definition of cookies is explained above. With the setting of the cookie, Google is enabled to analyze the use of our website. With each call-up to one of the individual pages of this Internet site, which is operated by the controller and into which a Google Analytics component was integrated, the Internet browser on the information technology system of the data subject will automatically submit data through the Google Analytics component for the purpose of online advertising and the settlement of commissions to Google. During the course of this technical procedure, the enterprise Google gains knowledge of personal information, such as the IP address of the data subject, which serves Google, inter alia, to understand the origin of visitors and clicks, and subsequently create commission settlements.

The cookie is used to store personal information, such as the access time, the location from which the access was made, and the frequency of visits of our website by the data subject. With each visit to our Internet site, such personal data, including the IP address of the Internet access used by the data subject, will be transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties.

The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such an adjustment to the Internet browser used would also prevent Google Analytics from setting a cookie on the information technology system of the data subject. In addition, cookies already in use by Google Analytics may be deleted at any time via a web browser or other software programs.

Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.de/intl/en/policies/privacy/ and under http://www.google.com/analytics/terms/us.html. Google Analytics is further explained under the following link https://www.google.com/analytics/.

Alphabet Inc. and its subsidiaries (e.g. Google LLC) comply the requirements of the EU-U.S. Privacy Shield Framework, as well as the Suisse-US Privacy Shield Framework. Further information about these treaties may be retrieved under https://www.privacyshield.gov/.

We have integrated components of YouTube on this website. The operating company of YouTube is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

YouTube videos on our website are embedded solely by usage of the “privacy-enhanced mode” of YouTube. According to its terms YouTube collects information about the visitors of a website only if they play a video. Further information about this can be accessed at https://support.google.com/youtube/answer/171780?hl=en in the section "Turn on privacy-enhanced mode".

With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a YouTube component (YouTube video) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding YouTube component. Further information about YouTube may be obtained under https://www.youtube.com/yt/about/en/. During the course of this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by the data subject.

The embedding of YouTube videos serves the purpose of providing informative, additional or scientific contents on this website, which are published by their authors to a broad audience through a public platform (YouTube). This purpose is considered a legitimate interest according to Article 6(1)(f) GDPR.

If the data subject is logged in on YouTube, YouTube recognizes with each call-up to a sub-page that contains a YouTube video, which specific sub-page of our Internet site was visited by the data subject. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google will receive information through the YouTube component that the data subject has visited our website, if the data subject is logged in on YouTube while playing the video on our website. If such a transmission of this information to YouTube and Google is not desirable for the data subject, the delivery may be prevented if the data subject logs off from their own YouTube account before a call-up to our website is made.

YouTube's data protection provisions, available at https://www.google.de/intl/en/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google.

Alphabet Inc. and its subsidiaries (e.g. Google LLC, YouTube LLC) comply the requirements of the EU-U.S. Privacy Shield Framework, as well as the Suisse-US Privacy Shield Framework. Further information about these treaties may be retrieved under https://www.privacyshield.gov/.

We process your data responsibly and neither use automated decision making nor profiling.