Privacy Policy

We are pleased that you are visiting the website of the Deutsche Gesellschaft für Regulatorische Angelegenheiten e.V. and assure you that the protection of your data during your visit on our homepage is important to us. We treat your personal data confidentially in accordance with the statutory data protection regulations and this privacy policy.

In the following, we will inform you which of your personal data is collected when you visit our website and for what purposes it is used.

Please note that it may be necessary to amend our privacy policy from time to time due to changes in the law or changes to our internal processes. We therefore recommend that you read it every time you visit our website.

1. Responsible within the meaning of the Data Protection Act

Deutsche Gesellschaft für Regulatorische Angelegenheiten e.V. (in the following DGRA)
Adenauerallee 15
D-53111 Bonn
Phone: +49 (0) 228 / 368 26 46
Fax: +49 (0) 228 / 368 26 47
E-Mail: info@dgra.de

We have appointed a data protection officer:

normcondata GmbH
Ettore-Bugatti-Str. 41
D-51149 Köln
Phone: +49 (0) 2203 / 980 65 00
E-Mail: cs@normcondata.de

2. Collection and storage of personal data and the nature and purpose of their use

2.1 Web statistics

For website analysis we use Matomo, an open source software, a product of InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. Matomo collects the following data when you visit our website. If individual pages of our website are accessed, the following data is stored unless the browser's ‘Do-Not-Track’ function is activated:

• abbreviated, anonymised IP
• websites visited
• browser and plugins used
• time and duration of the visit
• search engine references and referrers

All information collected is used exclusively for analysing the use of our website. Matomo uses cookies, Javascript and tracking pixels for this purpose. The data obtained by means of web analysis is not combined with personal data (e.g. form entries) that may be collected when you use our website; your data is never used to draw conclusions about your person. They are also not passed on to third parties and are not compared with data from other sources.

You can object to the collection of data by Matomo at any time (see below) or prevent the storage of cookies by deactivating cookies in your browser. JavaScript and tracking pixels collect various information about the visitor's computer (e.g. the IP address, the time the page was accessed, the browser type and the existence of cookies that were previously set by the same server). You can also deactivate these in your browser at any time. Please note, however, that deactivating cookies means that you will not be able to use all the functions of our website.

Matomo

2.2 Login to the personal area

Every person who has access to the personal area is assigned a user account in which their personal data is stored. As soon as you apply for membership of the DGRA or become a student of the MDRA degree programme, you consent to the storage of this data.

As long as you are logged in, you are identified in the system. This means that your activities on the entire website can theoretically be assigned to you personally in the web logs. You should therefore not log in to the personal area if you wish to browse the freely accessible areas of our website anonymously. By logging in, you have access to extended offers on our website.

You can delete your user account at any time. You also have the option of deciding for yourself which data you share in your personal area and which you do not. You can make changes yourself at any time after logging in. If you would like your user account to be deleted, please send us a brief email with your deletion request to: info@dgra.de.

2.3 Contact forms

You will find several contact forms on our website. Data entered there will be processed exclusively for the purpose of processing and answering your enquiry and then deleted. Mandatory fields are marked with an *. The data will not be disclosed to third parties. Please note that your e-mail will be sent unencrypted. Your data will be processed exclusively for the purpose of processing and answering your enquiry and then deleted. The data will not be disclosed to third parties.

2.4 Newsletter

You can subscribe to the newsletter on our website. We collect and process the following data for this purpose:

• Mandatory fields: Name, e-mail address
• Optional fields: Address, telephone number.

We will only use your e-mail address to send you the newsletter. You can unsubscribe from the newsletter at any time here or by sending a short message to info@dgra.de. After cancellation, your data will be deleted immediately.

2.5 Events and programmes

You can register for events via our website. We collect the following data to process your registration:

• Mandatory fields: Title, first name, surname, email address, your participation in shared meals if applicable and - depending on the requirements of the specific event - whether you are a member, university employee, MDRA student or representative of the authorities.
• Optional fields: Title, company, telephone and fax, other billing address or cost centre.

After your registration, we will collect your data in the content management system of our website. We use your data to create your participant certificate, which we will send you by e-mail after the event, to send you the invoice and to send you information and documents about the event by e-mail and to give you the opportunity to rate and comment on our event afterwards.

All data provided to us will be exported to our local database for further processing and used there to organise our events: We include some of your data (name, company and location) in the participant lists for the events. We may use your contact details (name, postal address, e-mail address) to send you event-related materials (e.g. registration confirmation, link to the documents, general event information, invoices). You have the option to object to the use of your data for these purposes at any time by sending an email to info@dgra.de with your objection.

2.6 Application form

Membership form (also applies to the paper version of the form): The data you enter (mandatory fields are marked with an *) will be sent to the DGRA secretariat for further processing and, if necessary, entered into the membership database. The purpose of data collection is to enable membership data management. In addition to your entries, metadata such as your IP address, browser identification and date are recorded. This data is stored by the software and is only used for legal prosecution in the event of misuse. Your membership data will be deleted when you leave, provided there are no statutory retention obligations.

By joining, you agree to receive the newsletter with information about the association's activities and invitations to events by email. You can revoke this consent at any time.

2.7 reCaptcha

We use the Google service reCaptcha to determine whether a human or a computer is making a certain entry in our contact or newsletter form. Google uses the following data to check whether you are a human or a computer: IP address of the end device used, the website that you visit on our site and on which the captcha is integrated: the date and duration of the visit, the identification data of the browser and operating system type used, Google account if you are logged in to Google, mouse movements on the reCaptcha areas and tasks in which you have to identify images. The legal basis for the data processing described is Article 6(1)(f) of the General Data Protection Regulation. We have a legitimate interest in this data processing to ensure the security of our website and to protect us from automated entries (attacks).

3. Application form for the MDRA-course

3.1 Purpose of the processing of personal data

In the event of an application, your name, title, date of birth, postal address, email address, any other contact details and qualification data (such as university entrance qualification, CV, etc.) will be collected and stored in order to process your application as part of the application process. Furthermore, the data is used to statistically analyse the results of the procedure.

3.2 Legal basis of the processing

The processing is based on the cooperation agreement between the Rheinische-Friedrich Wilhelms Universität Bonn and the DGRA e.V.

3.3 Duration of data storage

Your data will be deleted at the end of your studies, provided there are no statutory retention obligations.

3.4 Consequences of an objection to the processing

Admission to the programme is not possible if an objection is made to the processing of the data. Applications that have already been submitted will be withdrawn with the objection. Notifications issued up to that point will remain valid.

4. Data security / SSL encryption

Our website is SSL-encrypted for security reasons and to protect the transmission of confidential content, such as your contact enquiries or registrations for events that you send us. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and by the closed display of the key or lock symbol in the lower status bar of your browser.

4. Your rights

• in accordance with Art. 15 GDPR, to request information about your personal data processed by us;
• in accordance with Art. 16 GDPR, to demand the immediate correction of incorrect or the completion of your personal data stored by us
• to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR
• to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller
• in accordance with Art. 7 para. 3 GDPR, to revoke your consent once given to us at any time; this means that we may no longer continue the data processing based on this consent in the future
• to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, workplace or domicile for this purpose.