Privacy policy

Implement is a research project consisting of the project partners Leuphana University Lüneburg (project management) and Technische Hochschule Lübeck. The AOK Nordost is funding this research project.

1. Data protection at a glance

The Institute for Interactive Systems (ISy) at Technische Hochschule Lübeck attaches particular importance to compliance with the General Data Protection Regulation. Personal data is processed exclusively on the basis of the relevant laws and only for the purposes stated below. The data will only be processed in accordance with the specifications of this data protection declaration.

General notes

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally.

For detailed information on the subject of data protection, please refer to our detailed data protection declaration listed below this text.

Data collection on our online platform

Who is responsible for data collection on this online platform?

The entity responsible for data processing is:

Prof. Dr. Monique Janneck
Technische Hochschule Lübeck
Institute for Interactive Systems
Mönkhofer Weg 239
23562 Lübeck

E-Mail: monique.janneck[at]th-luebeck.de

Data protection officer of Technische Hochschule Lübeck:

Kirstin Vedder
Technische Hochschule Lübeck
Mönkhofer Weg 239
23562 Lübeck

E-Mail: datenschutz[at]th-luebeck.de

The technical data processing of the online platform is carried out by the platform operator on servers located in Germany:

Technische Hochschule Lübeck
Mönkhofer Weg 239
23562 Lübeck

How do we collect your data?

On the one hand, your personal data is collected during contact. This can be, for example, data that you enter in a contact form. On the other hand, our systems automatically collect server log data when you visit the online platform.

During participation in the interventions, the Institute for Interactive Systems at Technische Hochschule Lübeck collects, stores and processes the following types of data in order to fulfill the contractual services, taking into account the legal regulations:

Personal data and communication data such as your user name and e-mail address. If applicable, associated company data may be collected.
Server log data includes the IP address of the device used to access the website or a service, the type of browser, the system configuration, and date and time information.
Contents, input data and selection fields during training participation and participation in the corporate health analysis.

What do we use your data for?

The stored data will be processed as part of the research project to analyze your user behavior. The research partners Leuphana University Lüneburg and Technische Hochschule Lübeck process the above-mentioned data exclusively to fulfill the project objective, i. e. the use and evaluation of the online platform and the creation of corresponding research publications. No one except the named research partners has access to your data. All evaluations are anonymized.

The checks on the start page are used to give you an individual training recommendation. The data from the checks is not saved. However, if you register on the platform, you can optionally save the results in your account.
The company health analysis is used to identify and reduce stresses and strains in your company. The data collected in this survey is processed in such a way that no individual persons can be identified. To this end, minimum case number rules are taken into account to ensure that questions with insufficient response numbers are grouped or not evaluated at all. The minimum number of participants is 8. Only the anonymized evaluation results are transmitted to your company.
Inputs made in the work-directed interventions serve as your personal notes and as a basis for further exercises in the interventions and are therefore saved. These inputs are not evaluated by other persons. For selected text fields, there is a marked option to submit the input for viewing by the responsible health consultant and the manager of your company. This serves to prepare team workshops. The decision to submit your input is voluntary and forwarding is anonymous. The decision to submit your input can be revoked at any time. The people to whom you grant access can be viewed under “Contact & Help”.
Inputs made in the health interventions serve as your personal notes for better reflection. If you have selected coaching for the interventions, only the e-coach personally assigned to you and his or her supervisor have access to your inputs. The coaches use your inputs to provide individual, appropriate assistance. The coaches and supervisors are bound by confidentiality.
The technical data is collected to ensure error-free provision of the online platform.

Your rights regarding your personal data

You have the right to obtain information about the origin, recipient and purpose of your stored personal data at any time. You also have the right to request the correction, blocking or deletion of this data. If the processing is based on voluntary consent, you can revoke this consent at any time with effect for the future. You also have the right to data portability and the right to object. For this purpose, as well as for further questions on the subject of data protection, you can contact us at any time at the specified contact addresses. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

Technische Hochschule Lübeck has been designated as the central point of contact for asserting your data subject rights against the responsible parties in the agreement. However, in accordance with Art. 26 GDPR, you can assert your data subject rights against all responsible parties.

Deletion of your personal data

You can delete your account and thus your stored personal data at any time independently and without giving reasons. After deleting your account, you will no longer have access to the online platform. Content and texts that you create within the interventions will also be deleted by deleting your account. Your entries in the corporate health analysis will continue to be stored anonymously for research purposes. After the end of the project, all data stored on the online platform will be deleted with a period of 6 months. The anonymized results of the evaluations remain as a project result.

2. General notes and mandatory information

Privacy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We point out that data transmission over the Internet (eg communication by e-mail) may be subject to security gaps. A complete protection of the data against access by third parties is not possible.

Note on the responsible party

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

The entity responsible for data processing is:

Prof. Dr. Monique Janneck
Technische Hochschule Lübeck
Institute for Interactive Systems
Mönkhofer Weg 239
23562 Lübeck

E-Mail: monique.janneck[at]th-luebeck.de

The technical data processing of the online platform is carried out by the platform operator on servers located in Germany:

Technische Hochschule Lübeck
Mönkhofer Weg 239
23562 Lübeck

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke an already given consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right of appeal to the competent supervisory authority

In the event of violations of data protection law, the person concerned has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection commissioner of the federal state in which our company is based. A list of the data protection officers and their contact details can be found in the following link:

https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Data subject rights

You have the right:

in accordance with Art. 15 GDPR to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
in accordance with Art. 16 GDPR to immediately demand the correction of incorrect or completion of your personal data stored by us;
pursuant to Art. 17 GDPR to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
pursuant to Art. 20 GDPR to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
to revoke your consent at any time in accordance with Art. 7 (3) GDPR. This has the consequence that we may no longer continue the data processing based on this consent for the future, and
complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office.

3. Data protection officers

Data protection officer of the Technische Hochschule Lübeck

Kirstin Vedder
Technische Hochschule Lübeck
Mönkhofer Weg 239
23562 Lübeck
E-Mail: datenschutz[at]th-luebeck.de

Competent supervisory authority for Schleswig-Holstein

Independent State Center for Data Protection Schleswig-Holstein
Holstenstraße 98
24103 Kiel
Telefon: 0431/988-1200
E-Mail: mail[at]datenschutzzentrum.de

4. Data collection on our website

Personal data and communication data such as your user name and e-mail address. If applicable, associated company data may be collected.
Contents, input data and selection fields during training participation and participation in the corporate health analysis.
Server log files

Server log files

The Institute for Interactive Systems at Technische Hochschule Lübeck automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

Cookies

This platform partly uses so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested are stored on the basis of Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies for analyzing your surfing behavior) are stored, these are treated separately in this privacy policy.

Registration on this website

You can register on our website to use the interventions on the site. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.

The processing of the data entered during registration is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing already carried out remains unaffected by the revocation.

The data collected during registration will be stored by us for as long as you are registered on our website and will then be deleted. Legal retention periods remain unaffected. See point Deletion of your personal data.

Processing of data (customer and contract data)

We collect, process and use personal data only to the extent that they are necessary for the establishment, content or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. We collect, process and use personal data about the use of our websites (usage data) only to the extent necessary to enable the user to use the service.

Deletion of your personal data

Data transmission

Data transfer only takes place within the project consortium and is always anonymized.

5. Analysis tools and advertising

WordPress Stats

This website uses the WordPress tool Stats to statistically analyze visitor traffic. Provider is Automattic Inc, 60 29th Street #343, San Francisco, CA 94110-4929, USA.

WordPress Stats uses cookies, which are stored on your computer and allow an analysis of the use of the website. The information generated by the cookies about the use of our website is stored on servers in the USA. Your IP address is anonymized after processing and before storage.

"WordPress Stats" cookies remain on your terminal device until you delete them.

The storage of "WordPress Stats" cookies is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the anonymized analysis of user behavior in order to optimize both its website and its advertising.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. When deactivating cookies, the functionality of our website may be limited.

You can object to the collection and use of your data for the future by setting an opt-out cookie in your browser by clicking on this link: https://www.quantcast.com/opt-out/.

If you delete the cookies on your computer, you must set the opt-out cookie again.

Gravatar

Furthermore, WordPress uses Gravatar by default to assign you an avatar if necessary. Your IP address is transmitted in the process. For privacy reasons, we have disabled the Gravatar function here.