Data Protection Notice for the DFG Website

We appreciate your interest in using our website. The protection of personal data is our highest priority. Below, you will find information concerning the processing of your personal data and your rights when using our website.

1. Controller

The controller for the processing of your personal data is:

2. Data protection officer

You can contact our data protection officer as follows:

3. Your rights as a data subject

As a data subject, you have the following rights under the General Data Protection Regulation (GDPR), provided that the relevant statutory requirements contained therein are present:

  • Access to Information: You have the right to be informed about the data relating to your person which is being processed.
  • Rectification: You can request that incorrect data relating to your person be corrected. In addition, you can request that incomplete data be completed.
  • Erasure: In certain cases, you can request that your personal data be erased.
  • Restriction of processing: In certain cases, you can request that the processing of your data be restricted.
  • Data portability: Should you have provided data under a contract or with your consent, you can request to receive the data which you have provided in a structured, commonly used and machine-readable format or request that we transfer this data to another controller.

Right of objection

Right of objection in an individual case

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6 Paragraph 1 Sentence 1 GDPR; this also applies to any profiling which is based on these provisions. This personal data will no longer be processed for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms or unless the purpose of the processing is the establishment, exercise or defence of legal claims.

Right to object to the processing of data for direct advertising purposes

In individual cases, your data will be processed in order to carry out direct advertising. You have the right to object at any time to the processing of personal data relating to you for the purpose of such advertising. This also applies to profiling, should it be connected to such direct advertising. Should you object to the processing for direct advertising purposes, your personal data will no longer be processed for these purposes.

  • Withdrawal of consent: Should you have given us your consent to the processing of your data, you can withdraw this at any time with effect for the future. The lawfulness of the processing of your data prior to the withdrawal remains unaffected by this.
  • Asserting your rights: In order to exercise any of the rights listed above, please send an e-mail to or send a letter to the address provided under Number 1. Please ensure that we are able to clearly identify you.
  • Right to complain to the supervisory authority: You have the right to lodge a complaint with the supervisory authority, in particular in the Member State of your usual place of residence, place of employment or location of the alleged breach, should you consider that the processing of the personal data relating to you is unlawful.

4. Automated individual decision-making, including profiling

No automated decision-making in an individual case, including profiling as defined in Article 22 of the GDPR, takes place in connection with the use of our services.

5. Details concerning services, cookies etc.

5.1. Own services

  • Categories of Data
    Date and time of access, duration of the visit, type of end device, operating system used, the functions which you are using, quantity of data sent, type of event, IP address, domain name
  • Purpose(s)
    Provision of the service
  • Legal basis
    Point (f) of Article 6 Paragraph 1 GDPR
  • If applicable, legitimate interests being pursued
    Technical functional capability
  • Recipient or categories of recipients
    Hosting provider, IT department, external service provider for technical support
  • Third country transfer; adequacy decision (yes/no)
    --
  • If applicable, guarantees for third-party transfers and access to these
    --
  • Storage periods or criteria for determining these
    3 months after creation
  • Obligation to provide the personal data and, if applicable, consequences of non-provision
    No obligation to provide, collected automatically when service is accessed
  • If applicable, exercising of the right of objection or the withdrawal
    --
  • Source of the data
    Collected directly when the website/service is accessed
  • Categories of data
    Accessed URL, user's IP address, date and time of access, transferred data quantity, Internet site from which the user accessed the requested page (so-called “referrer URL”), websites which are accessed via our website by the user's system, http status, information about the browser type and version used, user's operating system, user's Internet service provider
  • Purpose(s)
    Statistical evaluations, improvement of the service, system security (for example prevention of misuse), error diagnosis
  • Legal basis
    Point (f) of Article 6 Paragraph 1 GDPR
  • If applicable, legitimate interests being pursued
    Statistical evaluations, improvement of the service, system security (for example prevention of misuse), error diagnosis
  • Recipient or categories of recipients
    Hosting provider, IT department, external service provider for technical support, state bodies on request
  • Third country transfer; adequacy decision (yes/no)
    --
  • If applicable, guarantees for third-party transfers and access to these
    --
  • Storage periods or criteria for determining these
    3 months after creation
  • Obligation to provide the personal data and, if applicable, consequences of non-provision
    No obligation to provide, collected automatically when service is accessed
  • If applicable, exercising of the right of objection or the withdrawal
    --
  • Source of the data
    Collected directly when the website/service is accessed
  • Categories of data
    First name and surname of the recipient, title, email address, date and time of registration
  • Purpose(s)
    Sending of the newsletter for interested persons
  • Legal basis
    Point (a) of Article 6 Paragraph 1 GDPR
  • If applicable, legitimate interests being pursued
    --
  • Recipient or categories of recipients
    Internal departments, in particular press and PR, hosting provider, order processor for sending of the newsletter, state bodies on request
  • Third country transfer; adequacy decision (yes/no)
    --
  • If applicable, guarantees for third-party transfers and access to these
    --
  • Storage periods or criteria for determining these
    Length of time between registering and deregistering for the newsletter
  • Obligation to provide the personal data and, if applicable, consequences of non-provision
    No obligation to provide
  • If applicable, exercising of the right of objection or the withdrawal
    De-registration link in each newsletter
  • Source of the data
    Collected directly in the newsletter registration form
  • Categories of data
    Number of newsletter views, number of views of the links contained in the newsletter
  • Purpose(s)
    Statistical evaluation of usage data in order to optimise the newsletter service
  • Legal basis
    Point (f) of Article 6 Paragraph 1 GDPR
  • If applicable, legitimate interests being pursued
    Statistical evaluation of usage data in order to optimise the newsletter service
  • Recipient or categories of recipients
    Internal departments, in particular press and PR, hosting provider, order processor for sending of the newsletter, state bodies on request
  • Third country transfer; adequacy decision (yes/no)
    --
  • If applicable, guarantees for third-party transfers and access to these
    --
  • Storage periods or criteria for determining these
    24 months after collection
  • Obligation to provide the personal data and, if applicable, consequences of non-provision
    No obligation to provide
  • If applicable, exercising of the right of objection or the withdrawal
    --
  • Source of the data
    Collected directly when newsletter is opened
  • Categories of data
    Cookie ID, shortened IP address of the user, webpage accessed, website from which the user accessed the requested page (so-called “referrer URL”), subpages which are viewed from the accessed webpage, duration of the website session, frequency of website access
  • Purpose(s)
    Analysis of use for the purpose of optimisation
  • Legal basis
    Point (a) of Article 6 Paragraph 1 GDPR, Paragraph 25 Section 1 TDDDG
  • If applicable, legitimate interests being pursued
    --
  • Recipient or categories of recipients
    Internal departments, in particular press and PR
  • Third country transfer; adequacy decision (yes/no) 
    --
  • If applicable, guarantees for third-party transfers and access to these 
    --
  • Storage periods or criteria for determining these
    13 months
  • Obligation to provide the personal data and, if applicable, consequences of non-provision
    No obligation to provide, collected automatically when service is accessed
  • If applicable, exercising of the right of objection or the withdrawal
    You can withdraw your consent to the processing of your data at any time via the cookie preferences on the DFG website.
  • Source of the data
    Collected directly when the website/service is accessed
  • Categories of data
    Internal value subject to selection:
    agreement to technically necessary cookies (value: “essential”) OR agreement to technically necessary and statistical cookies (values: “essential” and “analytics”)
  • Purpose(s)
    Consent management
  • Legal basis
    Point (f) of Article 6 Paragraph 1 GDPR OR Point (a) of Article 6 Paragraph 1 GDPR, Paragraph 25 Section 1 TDDDG
  • If applicable, legitimate interests being pursued
    Consent management
  • Recipient or categories of recipients
    Hosting provider, IT department, external service provider for technical support
  • Third country transfer; adequacy decision (yes/no) 
    --
  • If applicable, guarantees for third-party transfers and access to these 
    --
  • Storage periods or criteria for determining these
    30 days after collection
  • Obligation to provide the personal data and, if applicable, consequences of non-provision
    No obligation to provide
  • If applicable, exercising of the right of objection or the withdrawal
    --
  • Source of the data
    Collected directly when giving the consent
  • Categories of data
    E-mail address, first name and surname, start page on the website, message, date and time of form submission
  • Purpose(s)
    Making contact
  • Legal basis
    Point (f) of Article 6 Paragraph 1 GDPR
  • If applicable, legitimate interests being pursued
    Making contact
  • Recipient or categories of recipients
    Scientific integrity
  • Third country transfer; adequacy decision (yes/no)
    --
  • If applicable, guarantees for third-party transfers and access to these
    --
  • Storage periods or criteria for determining these
    Until the matter has been conclusively processed and resolved
  • Obligation to provide the personal data and, if applicable, consequences of non-provision
    No obligation to provide
  • If applicable, exercising of the right of objection or the withdrawal
    --
  • Source of the data
    Collected directly in the contact form

5.2. Integration of third-party services

We integrate third-party services in order to allow you to use their functions, services and features. These integrated third-party services are designed and provided by the respective providers. Therefore, we have no influence over the design, content and functions of these third-party services or the processing of personal data by their providers. Please familiarise yourself directly with the information issued by the providers of the integrated services.

  • Provider/recipient
    YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (represented by Google Inc, Amphitheatre Parkway, Mountain View, CA 94043, USA)
  • Categories of data
    IP address, crash reports, system activities, date, time, referrer URL
  • Purpose(s)
    Display of YouTube videos
  • Legal basis
    Point (a) of Article 6 Paragraph 1 GDPR, Paragraph 25 Section 1 TDDDG (Consent)

    By clicking on the slider in the video display (share external content from YouTube videos), by activating the checkbox below or activating the checkbox in the cookie settings, you agree to the data being processed.

    Your consent also covers any data transfer from YouTube to unsafe third countries, in particular the USA (Point (a) of Article 49 Paragraph 1). The USA is assessed by the European Court of Justice as a country with an insufficient level of data protection by EU standards. In particular, due to the lack of an adequacy decision and without appropriate safeguards, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly also without redress.
  • If applicable, legitimate interests being pursued
    Enabling viewing of YouTube videos
  • Data protection notice of the provider
    https://policies.google.com/privacy?hl=de&gl=de
  • If applicable, exercising of the right of objection or the withdrawal
    You can withdraw your consent at any time with effect for the future by changing the settings accordingly (share external content): to do this, deactivate the slider previously activated in the video display or the checkbox below.
  • Additional notes
    The integration takes place by means of the “privacy-enhanced mode” of YouTube.

    In the default setting no data is transferred to YouTube. Only if you agree to the use of YouTube does data exchange with YouTube take place (so-called 2-stage solution).
    The selection you make (share external content from YouTube videos) is permanently stored in your browser (local storage). 

    If you change the setting and block external content as a result, the setting stored in your browser is deleted and your data will no longer be transferred to YouTube via our website.

Consent to use the YouTube Player

By selecting the checkbox on the "Cookie settings" page, you expressly consent to us processing and transferring your IP address to YouTube LLC along with crash reports, system activity, date, time, referral URL. Your consent also includes any data transfer from YouTube to unsafe third countries without an adequate level of data protection, in particular the USA. You can withdraw this consent at any time with effect for the future by deactivating the checkbox below. Data processing carried out based on this consent prior to your withdrawal remains lawful.

5.3. Cookies

We use cookies on our website in order to provide comprehensive functionality, to make the use of our website more comfortable and to optimise our services. Cookies are small text files that are placed on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies”. These are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to recognise your browser on your next visit.

You can configure your browser to notify you regarding the placement of cookies and only permit cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing your browser. The deactivation of cookies can restrict the functionality of this website.

Cookies that are required to conduct electronic communication or to provide certain functions that you requested are stored based on point (f) of Article 6 Paragraph 1 GDPR. We as the website operator have a legitimate interest in storing cookies for the technically error-free and optimised provision of our services. Insofar as other cookies are stored (such as statistical cookies to analyse user behaviour), these are dealt with separately in this data protection notice (in addition to technically essential cookies, we only use the Matomo web analytics service, cf. section 5.1. in this regard).