Data Protection

Statement on Data Protection

The Federal Ministry of Education and Research (BMBF) takes the protection of your personal data very seriously which is why personal data is only processed by us as necessary. What data is needed and processed for what purpose and on what basis depends on the type of service that you require or on what task we need it for.

The term ‘personal data’ is used here to refer to any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier.

This statement on data protection provides you with detailed information on what data is collected for what purpose and on what basis, how you can contact the ‘data controller’ (the responsible entity) and the Data Protection Officer and what rights you have concerning the processing of personal data.

  1. Data Controller and Data Protection Officer

The entity which has responsibility for the processing of personal data (the ‘controller’) is the

Federal Ministry of Education and Research (BMBF)
53170 Bonn, Germany
Phone: +49 (0)228 9957-0
Fax: +49 (0)228 99578-3601
E-mail: bmbf[at]bmbf.bund.de
DE-Mail: poststelle[at]bmbf-bund.de-mail.de

If you have specific questions concerning the protection of your data please contact the BMBF’s official Data Protection Officer:

Federal Ministry of Education and Research (BMBF)
Datenschutzbeauftragte/r
53170 Bonn, Germany
Phone: +49 (0)228 9957-2539
Fax: +49 (0)228 9957-8-2539
E-mail: datenschutz[at]bmbf.bund.de

For the operative implementation, support and continuous development of the webpage www.gesundheitsforschung-bmbf.de the following service provider processes personal data on BMBF’S behalf:

German Aerospace Center (DLR)
DLR Project Managament Agency (DLR-PT)
Departement Health
Heinrich-Konen-Str. 1
53227 Bonn
www.dlr-pt.de

This statement on data protection provides you with an overview of how the Federal Ministry of Education and Research (BMBF) and DLR-PT ensures the protection of your data and what types of data are collected and for what purpose and on what basis.

  1. Processing of data resulting from your visit to this website

Whenever a website is visited, certain data is collected and exchanged which is needed to provide the necessary service, namely:

  • IP address
  • your browser type and version
  • the operating system used
  • the web page accessed
  • the page previously visited (referrer URL)
  • the time of server request

Click [here] to see what data your internet browser communicates to our server.

After your visit to the website, this data is stored in log files on an external server at our service provider “DLR Project Management Agency”.

In accordance with Article 6 (1) (c) and (e) of the EU General Data Protection Regulation (GDPR) in conjunction with Section 5 of the Act on the Federal Office for Information Security (BSI-Gesetz), we are also required to store data past the time of your visit in order to protect the internet infrastructure against attacks and to recognize, contain or remedy disruptions to or problems with federal/BMBF communications technology. This data is analysed and, in case of attacks on the communications technology, needed to initiate legal and criminal proceedings.

Data logged during access to the BMBF’s website is only disclosed to third parties in so far as we are legally obliged to do so or if disclosure is required for criminal or other prosecution in the case of attacks on federal communications technology. Data will not be disclosed to others in any other cases. The BMBF does not merge this data with other data sources.

a) Web analytics

If you have given your consent in accordance with Article 6 (1) (a) of the GDPR, the BMBF, together with its service provider contracted for support and development “DLR Project Management Agency”, will analyse information on your use of our website for statistical purposes as part of public relations work and for the purpose of providing information on tasks within the BMBF’s remit as needed.

It does so using the Matomo web analytics service.

The software uses permanent cookies to recognize visitors returning even after longer periods of time. This type of information is stored as a text file on the hard drive of the user’s computer. The cookie is valid for 13 months after which it deletes itself.

The software also uses session cookies. Session cookies are small information units that are stored by the provider of a website in the active memory of the visiting user’s computer. A randomly generated, unique ID number, a so-called session ID, is stored in a session cookie. A cookie also contains information on its origin and the maximum period of time it is to be stored on a computer. These cookies cannot store any further types of data. The software uses session cookies to provide for the unambiguous identification of visitors.

The following data is stored when individual pages of our website are accessed:

  • two bytes of the IP address of the user’s retrieving system (anonymous)
  • the web page accessed
  • the website from which the user reached the accessed web page (referrer)
  • the sub-pages loaded via the accessed web page
  • the length of time spent on the web page
  • how often the page has been accessed

The software is configured so that IP addresses are stored incomplete with 2 bytes concealed (e.g. 192.168.xxx.xxx). This makes it impossible for the shortened IP address to be linked to the retrieving computer, meaning that you remain anonymous as the user.

The relevant software runs only on the web servers of our service provider “DLR Project Management Agency” on behalf of the BMBF. These are the only servers where user information is stored. No data is disclosed to third parties.

If you want to modify your decision regarding use of the cookie for web analytics purposes and give your consent or withdraw it again, you can do this by changing your settings before continuing your visit. The default setting for web analytics is that they are disabled.

b) Session cookies

The DLR-PT uses so-called session cookies to make the website more user-friendly. Such cookies are used on the basis of Article 6 (1) (e) GDPR in conjunction with Section 3 of the Federal Data Protection Act (BDSG) as part of the BMBF’s and DLR-PT’s public relations work for the purpose of providing information on its assigned tasks as needed.

Session cookies are small information units that are stored by the provider of a website in the active memory of the visiting user’s computer. A randomly generated, unique ID number, a so-called session ID, is stored in a session cookie. A cookie also contains information on its origin and the maximum period of time it is to be stored on a computer. These cookies cannot store any further types of data.

The session cookies used by the DLR-PT are deleted as soon as you end a session.

Handling cookies
You can control the use of cookies with all internet browsers. Most browsers are set up to accept all cookies without asking the user for permission. However, by changing the settings in your browser you can deactivate or restrict the use of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically.

Please set your browser to accept session cookies if you would like to make full use of the BMBF’s shopping basket feature.

If you refuse all cookies: notify that you might not be able to make full use of all the functions on this website.

Reviewing your data
You can view the data that has been automatically transmitted by your browser to our server by clicking [here].

Any internet browser can be set up to notify you if cookies are set and to display their contents. Detailed information is available on the websites of the Federal Commissioner for Data Protection and Freedom of Information and the Federal Office for Information Security.

  • 3. Gathering of personal data when you contact us

Various personal data is collected and processed depending on the method used to contact us.

a) Means of contact, legal basis and purpose of processing

Contact via e-mail
You can contact the DLR Project Management Agency, Department Health, via the e-mail address of individual staff members or the following central e-mail addresses: Gesundheitsforschung@dlr.de

You can contact the BMBF via the e-mail address of individual staff members or the following central e-mail addresses or via the online contact form:

If you use one of the e-mail addresses given above, the data communicated by you (e.g. surname, first name, address) or at least your e-mail address and the information contained in the e-mail (any personal data communicated by you) will be stored for the purpose of contacting you and responding to your enquiry.

Please note that the data will be processed in compliance with Article 6 (1) (e) of the General Data Protection Regulation (GDPR) in conjunction with Section 3 of the Federal Data Protection Act (BDSG) for the purpose of fulfilling the BMBF’s tasks. In order to respond to your message, it is necessary to process the personal data you provide.

Note on contacting the BMBF via the address information[at]bmbf.bund.de

Enquiries sent to the e-mail address information@bmbf.bund.de are dealt with by the staff of the BMBF’s service provider contracted for this purpose, “Telemark Rostock - Kommunikations- und Marketinggesellschaft mbH”.

Letters and faxes
If you write a letter or fax to the BMBF or DLR-PT, the data communicated by you (e.g. surname, first name, postal address) and the information contained in the letter or fax (including any personal data communicated by you) will be stored for the purpose of contacting you and responding to your enquiry. 
Please note that the data will be processed in compliance with Article 6 (1) (e) GDPR in conjunction with Section 3 BDSG for the purpose of fulfilling the BMBF’s tasks. In order to respond to your message, it is necessary to process the personal data you provide.

Telephone (hotlines)
If you contact a member of the staff of the DLR Project Management Agency by telephone, your personal data will be used to respond to your enquiry as needed.

The BMBF offers a range of service telephone numbers, namely:

  • the general service numbers: (Bonn) +49 (0)228 9957-0
    (Berlin) + 49 (0)30 1857-0
  • the hotline for the Federal Training Assistance Act (BAföG) (0800-2236341 for calls from within Germany)
  • the hotline for the Upgrading Training Assistance Act (AFBG) (0800 6223634 for calls from within Germany)
  • the hotline for the continuing education grant (Bildungsprämie) (0800 2623000 for calls from within Germany), and
  • the continuing education counselling hotline (Infotelefon Weiterbildungsberatung) (0800 2017 909 for calls from within Germany).

Telephone enquiries to any of these helplines are dealt with by the staff of the BMBF’s service partner “Telemark Rostock - Kommunikations- und Marketinggesellschaft mbH”. If you use one of these service numbers your data (e.g. surname, first name, address, e-mail address, telephone number) will be stored where necessary for the purpose of responding to your enquiry.

Please note that the data will be processed in compliance with Article 6 (1) (e) GDPR in conjunction with Section 3 of the Federal Data Protection Act (BDSG) for the purpose of fulfilling the BMBF’s tasks.

You can reach the Federal Funding Advisory Service on Research and Innovation at the telephone number 0800 26 23 008 (within Germany) or on +49 30 20199 – 518 (from abroad).

If you contact the Federal Funding Advisory Service on Research and Innovation your enquiry will be handled by staff of the BMBF’s service provider contracted for this purpose, “Project Management Jülich”. If you use this service number your data (e.g. surname, first name, address, e-mail address, telephone number) will be stored where necessary for the purpose of responding to your enquiry.

Please note that the data will be processed in compliance with Article 6 (1) (e) GDPR in conjunction with Section 3 of the Federal Data Protection Act (BDSG) for the purpose of fulfilling the BMBF’s tasks.

The "Hotline Working and Living in Germany" (+49 (0)30-1815-1111) is part of the Federal Government's demographic strategy and operated jointly by the Federal Office for Migration and Refugees (BAMF) and the International Placement Services (ZAV) of the Federal Employment Agency (BA) under a cooperative arrangement between the Federal Ministry for Economic Affairs and Energy (BMWi), the Federal Ministry of the Interior, Building and Community (BMI) and the Federal Ministry of Education and Research (BMBF). You can find information about data protection concerning this service here.

The single government service telephone number (115) is subject to the data protection provisions of the Federal Ministry of the Interior, Building and Community. You can consult these at www.115.de or at www.bmi.bund.de.

b) Length of storage and forwarding of personal data processed where contact has been taken up

If your personal data is collected and processed for the purpose of responding to your enquiry by the service provider DLR-Project Management Agency contracted by us it will store your data solely for the purpose of responding to your enquiry and in accordance with the statutory and contractual requirements. If the staff of the service provider are unable to respond to your message, it will be forwarded to the BMBF.

BMBF staff will only process the data communicated to the extent necessary to respond to your message. The data is stored in these cases in accordance with the statutory periods for retaining records set out in the Registry Directive (Registraturrichtlinie, RegR), which supplements the Joint Rules of Procedure of the Federal Ministries (Gemeinsame Geschäftsordnung der Bundesministerien, GGO).

Where the enquiry involves a matter which concerns a service provider of the BMBF or which can only be answered by a service provider of the BMBF, the enquiry will be forwarded to the relevant service provider together with the personal data required for responding to your enquiry. The service provider processes your data solely for the purpose of responding to your enquiry and in accordance with the statutory and contractual requirements.

In these cases, the data will be passed on in compliance with Article 6 (1) (e) of the General Data Protection Regulation (GDPR) in conjunction with Section 3 of the Federal Data Protection Act (BDSG) for the purpose of fulfilling the BMBF’s tasks.

Furthermore, it may be necessary for the purposes of legal and technical supervision to pass your personal data, which has been supplied to us, to those authorities supervised by us in connection with your enquiry. In such cases, the data will be forwarded in accordance with Section 25 (1) BDSG in conjunction with Section 23 (1) (6) BDSG.

Under Section 1 of the Act on the Powers of the Petitions Committee of the German Bundestag (Gesetz über die Befugnisse des Petitionsausschusses des Deutschen Bundestages, GGArt45cG), the BMBF is required to transmit your personal data to the Petitions Committee of the German Bundestag where it is necessary for the purpose of preparing decisions on complaints in accordance with Article 17 of the German Basic Law (Grundgesetz, GG).

  • 4. Security Camera

The premises of the Federal Ministry of Education and Research (BMBF) in Bonn (Heinemannstrasse 2 and 6, 53175 Bonn) and in Berlin (Kapelle-Ufer 1, 10117 Berlin) are monitored by security cameras in order to prevent trespassing by unauthorized persons. Video material is processed in compliance with Article 6 (1) (e) of the General Data Protection Regulation (GDPR) in conjunction with Section 4 of the Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG). Video material recorded in this way is only passed to third parties if we are legally required to do so or it is necessary for the purpose of the legal or criminal prosecution of trespassers. Data will not be disclosed to others in any other cases.

Recordings are only analysed in suspicious circumstances. Otherwise, recordings are deleted after a period of eight days.

  • 5. Your rights

You have the following rights vis-à-vis the data controller concerning your personal data:

  • right of access (Article 15 GDPR)
  • right to rectification (Article 16 GDPR)
  • right to erasure (Article 17 GDPR)
  • right to restriction of processing (Article 18 GDPR)
  • right to object to collection, processing and/or use (Article 21 GDPR)
  • right to data portability (Article 20 GDPR)
  • If the personal data is processed on the basis of your consent (in accordance with Article 6 [1][a] GDPR), you can withdraw your consent at any time for the purpose in question. The lawfulness of processing your personal data on the basis of the consent provided by you remains valid until your withdrawal of consent has been received.

You may exercise the aforementioned rights by sending an e-mail to bmbf@bmbf.bund.de or poststelle@bmbf-bund.de-mail.de.

You also have the right to submit a complaint to the supervisory authority under data protection law (Federal Commissioner for Data Protection and Freedom of Information, BfDI).

Questions and complaints may also be addressed to the BMBF’s Data Protection Officer datenschutz[at]bmbf.bund.de.