The purpose of these laws is to protect individuals from having their personal rights compromised through the handling of their personal data. As all users also have the right to information about how the Wilhelm Sander Foundation uses personal data, we provide the following information on important aspects of data handling.

Users may object at any time to the use of personal data entrusted to the Wilhelm Sander Foundation, as long as it is not required for the execution of a contractual relationship or grant.

The Wilhelm Sander Foundation will, of course, gladly comply with requests for information regarding the processing of personal data and, where applicable, its completion or correction.

Responsible Entity – Name and Address
Wilhelm Sander-Stiftung
Zweigstraße 10
80336 München
Phone: +49 89 544 187-0
Telefax: +49 89 544 187-20
Websites: wilhelm-sander-stiftung.de / sanst.de / portal.wss-online.de/antragstellung
Email: info@sanst.de

Executive Board
Ernst G. Wittmann
Ralf Reichartz

Supervisory Authority
Stiftungsaufsicht von Niederbayern

Data Protection Officer – Name and Address
Klaus Gattinger
Datenschutzbeauftragter (IHK)
Schönbichl 11
86911 Riederau am Ammersee
Phone: +49 8807 949 954-0
Email: datenschutz@sanst.de

For any questions or suggestions regarding data protection, our Data Protection Officer is available to assist you.

General Data Protection Information
The Wilhelm Sander Foundation does not collect personal data (e.g. name, address, telephone number or email address) via its websites, unless this is provided voluntarily by users (e.g. when applying for grants online) or consent is given for it to be shared, or unless it is otherwise required by applicable data protection laws and regulations.

Automatically recorded non-personal data
When you access our websites, we usually automatically record non-personal data (i.e. not during registration), such as your browser type and operating system, the domain name of the website you visited before ours, how many times you have visited our website, how long you spend on our website on average, and which pages you view. This data is used solely to evaluate the attractiveness of the Wilhelm Sander Foundation’s websites and improve their content and functionality for users.

SSL/TLS encryption
For security reasons and to protect the transmission of confidential content (e.g. orders or enquiries sent to us), this site uses SSL/TLS encryption. A secure connection is indicated by ‘https://’ in the address bar of your browser and the padlock symbol. When SSL/TLS encryption is active, third parties cannot read the data you transmit.

etracker
This website uses services provided by etracker GmbH, Hamburg, Germany (www.etracker.com) for usage analysis. Cookies are used to enable statistical analysis of website usage and to display content or advertising based on usage. Cookies are small text files that are stored by the browser on the user’s device, and etracker cookies do not contain any information that could be used to identify individual users.

Data generated via etracker is processed and stored in Germany on behalf of the website provider, and is subject to strict German and European data protection laws and standards. etracker has been independently certified and awarded the ePrivacyseal.

Data processing is based on Article 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in optimising our online offering and website. IP addresses are anonymised as soon as possible and logins or device identifiers are converted into unique, non-personally identifiable keys. etracker does not use, merge with other data or disclose this information to third parties.

Users may object to this data processing at any time. There are no negative consequences for doing so.

Further information on data protection at etracker can be found on the etracker website.

Connection and usage data
When using telecommunications services to access the Wilhelm Sander Foundation website(s), connection data (e.g. IP address) and usage data (e.g. start and end time, access duration, and used telecommunications services) may be automatically recorded. This data may, in some cases, be linked to personal data. The recording, processing and use of such data are carried out in accordance with applicable data protection laws. Otherwise, the data are deleted after the legally required retention period.

Links to other Websites
The Wilhelm Sander Foundation websites may contain links to other websites. The foundation is not responsible for the data protection or content of these websites. The Foundation continuously updates its privacy policy in line with internet developments. All changes are published on this page (www.wilhelm-sander-stiftung.de; www.sanst.de).

When you voluntarily provide personal data and other information, the Foundation collects and uses it in accordance with the stated data usage procedures. The following section outlines the types of personal data collected and how it is handled for transparency purposes.

Purpose of Data Collection, Processing or Use
The foundation’s primary objective is to promote medical research, particularly in the fight against diseases such as cancer. Current funding focuses on cancer research.

This includes managing grant applicants, reviewers, reporting, contracts, accounting, payments and personnel administration.

The Wilhelm Sander Foundation owns and rents residential and commercial properties in Germany and Switzerland. Rental income is used to further the foundation’s aims, including tenant management and acquisition.

Description of the data subjects and relevant data or data categories
Applicants, co-applicants, reviewers, reporters, committee members, tenants and employees, provided that their data are necessary to fulfil the above purposes. Upon request, we will gladly inform you of the processes in which your data may be stored and the data involved.

Interested parties, applicants, and job candidates
Names, addresses, contact details, dates of birth and voluntary information provided by the individual. For approved applications, this may also include the bank details of the institute’s third-party funding office

Reviewers, reporters and committee members
Names, addresses, contact details, billing information, date of birth and voluntary information provided by the individual

Employees
Names, addresses, social security and tax information, dates of birth, other personnel data, working hours and holiday records

Tenants
Names, addresses, contact details, contract data and billing information

Recipients or categories of recipients
Internal departments involved in the respective business processes. Public authorities, where required by law; and contractors, within the scope of a partnership relationship, according to the GDPR and the BDSG/BDSG-NEU, for the fulfilment of the intended purposes.

Retention periods for data
Various legal retention obligations apply. After these periods expire, the corresponding data will be routinely deleted. Data not subject to these obligations will be deleted once the above-outlined purposes are no longer applicable.

Planned transfer to third countries
No transfer of data to third countries is planned.

Your rights as a data subject
You can contact the Wilhelm Sander Foundation’s Data Protection Officer or any other employee responsible for data processing at any time to exercise your rights as a data subject.

For the sake of transparency, the Wilhelm Sander Foundation would like to inform you of these rights; you can find detailed information in the data protection regulations (GDPR, BDSG, BDSG-NEU).

Right to withdraw consent
Any data subject has the right to withdraw their consent to the processing of personal data at any time.

Right to object
Any data subject has the right to object, for reasons arising from their particular situation, at any time to the processing of personal data concerning them carried out under Article 6(1)(e) or (f) of the GDPR.

You may also object to the processing of your personal data for scientific or historical research purposes, or for statistical purposes, unless such processing is necessary to fulfil a task carried out in the public interest.

Right of access
Under Article 15(1) of the GDPR, every data subject has the right to obtain free information on the personal data stored about them, as well as a copy of that information.

 

Right to Confirmation
Every data subject has the right to obtain confirmation from the controller as to whether personal data concerning them is being processed.

 

Right to rectification
Data subjects have the right to request the immediate correction of inaccurate personal data concerning them.

Right to erasure (right to be forgotten)
Data subjects have the right to request the deletion of their personal data if one of the following conditions is met and the processing is not required:

• Withdrawal of consent and no other legal basis exists.
• Objection under Article 21(1) or (2) of the GDPR.
• The personal data has been processed unlawfully.
• Deletion is required to comply with a legal obligation under EU or national law.

Right to restrict processing
Data subjects may request restriction of processing if:

• The accuracy of the personal data is contested, enabling a verification period.
• processing is unlawful and deletion is opposed; restriction is requested instead.
• The data are no longer needed by the controller, but are required by the data subject for the establishment, exercise or defence of legal claims.
• An objection has been lodged under Article 21(1) of the GDPR, and it is not yet clear whether the legitimate grounds of the controller outweigh those of the data subject.

Right to data portability
Data subjects have the right to receive any personal data that they have provided in a structured, commonly used and machine-readable format. They also have the right to transmit those data to another controller without hindrance where the processing is based on consent or a contract, and is carried out by automated means, unless this is required for the performance of a task carried out in the public interest. They may also request direct transmission between controllers, where technically feasible, without affecting the rights and freedoms of others.

Changes to our privacy policy
We reserve the right to update this policy periodically to reflect changes in the law or our services.

You can also download the full privacy policy as PDF (in German).

Quellenangabe
BayLDA