Commitment to Data Protection
- ...
- Home
- Commitment to Data Protection
Dear users of the ZEW services,
The protection and confidential handling of your personal data is of central concern to us. We would therefore like to take this opportunity to inform you about how, to what extent, and for what purpose ZEW collects, processes and uses this data.
ZEW processes your personal data, which is collected when you visit our website and when you use other ZEW services, in compliance with legal regulations, in particular the guidelines set out in the EU General Data Protection Regulation (GDPR).
1.1 Fundamentals
ZEW’s online services are generally accessible without any requirements pertaining to personal information. Certain services (subscription to the ZEW Monthly, press distribution lists, enrolment for seminars or events etc.) do require users to provide us with personal information. It is left to your discretion whether you decide to make use of these services.
Minors under the age of 18 should not share any of their personal data with us without prior permission from a parent or guardian.
The responsible party is the ZEW – Leibniz Centre for European Economic Research, L 7, 1 68161 Mannheim
Phone +49/ (0)621-1235-01, Telefax +49/ (0)621-1235-255, E-mail: info@zew.de
Executive Directors: Professor Achim Wambach, PhD and Claudia von Schuttenbach
You can reach our data protection officer, Dr. Thomas Wirth at the above address or via e-mail at: datenschutzbeauftragter@zew.de
1.2 Access protocols
When you access the ZEW website www.zew.de, information is sent automatically to our website server via the browser used on your device. This information is stored temporarily in what is known as a logfile. The following information is recorded without any action on your part and stored until it is deleted automatically:
- User IP address
- Access date and time
- Name and URL of the page accessed
- The website through which the page was accessed (referrer URL)
- The type of browser used and, if necessary, the operating system used on your computer as well as the name of your access provider.
This data is processed by us for the following purposes:
- Providing a smooth connection to our website,
- Ensuring that our website is user-friendly,
- Assessing the security and stability of our systems and
- Other administrative purposes.
We process your data in accordance with Art. 6 para. 1 p. 1 lit. f of the GDPR. Our interest in your data is legitimate based on the purposes of data processing listed above. The data is processed anonymously; individual user profiles are not being compiled.
In addition, we use cookies and analytical services when you visit our website. For further information, please refer to sections 3 and 4 in this commitment to data protection.
1.3 ZEW Monthly and ZEW press distribution list
According to Art. 6 para. 1 p. 1 lit. a of the GDPR, as long as you have expressly given your consent, we will use your e-mail address to send you our ZEW Monthly or press releases on a regular basis. In order to subscribe to the ZEW Mothly or our press releases, you must provide us with an e-mail address. Except for providing us with your e-mail address, it is also possible to subscribe to the ZEW Monthly or press releases under a pseudonym. Apart from your e-mail address, none of your personal information is stored by us, unless you provide us with this information voluntarily in order to access special publication or press-related services, or to improve our services. Access to the server is restricted to a small group of authorised personnel. Data is not passed on to a third party!
You can cancel your subscription at any time, for example, via the link provided at the bottom of every ZEW Monthly and press release. Alternatively, you can unsubscribe at any time by sending an e-mail to zewmonthly@zew.de or redaktion@zew.de.
1.4 Registration for ZEW events
Any electronic data you provide for registration will be deleted immediately after you complete the event, unless you expressly agree to receive information about future ZEW events. If you register for further ZEW events, your data will be processed in accordance with Art. 6 para. 1 p. 1 lit. b of the GDPR on the basis of your voluntarily given consent and, if necessary, with the involvement of a processor according to Art. 28 of the GDPR. The personal data collected by us in order to process your registration form will be deleted as soon as it is no longer required to fulfil the purpose for which it was originally collected.
1.5 Other contact and information services
We invite users to contact us with any question they might have via the contact forms or e-mail addresses provided on the website. In order to take advantage of this service, you must provide a valid e-mail address so that we know who the question is coming from and so that we can send you a response. This means that any personal data contained in the e-mail is stored by us. Any other information you provide is voluntary. In this case, none of your data will be passed on to third parties. Your data is used exclusively for the purpose of responding to your inquiry.
Data for the purpose of establishing contact is processed by us according to Art. 6 para. 1 p.1 lit. a of the GDPR, based on your freely given consent, i.e. in the form of sending an e-mail, in accordance with Art. 6 para. 1 lit. f of the GDPR. If the goal of the e-mail communication is the execution of a contract, the processing of the data is also supported by Art. 6 para. 1 lit. b of the GDPR.
The personal data collected will be deleted as soon as it is no longer required to fulfil the purpose for which it was originally collected. In the case of personal data collected via an online contact form or sent via e-mail, this happens as soon as the conversation with the user comes to an end. The conversation can be seen to have come to an end when it is clear from the given circumstances that the issue being discussed has been definitively resolved.
1.6 Application forms
If you would like to apply for a position at ZEW, you can send us your application via the forms provided on our website. The data you send to us is encrypted in transit. Only staff in our personnel department and those in charge of the hiring process have access to your application.
For the purposes of processing your application, your data is processed with your consent according to Art. 6 para. 1 p. 1 lit. a of the GDPR.
Personal data collected by us as part of the application process will be deleted six months after the end of application process, unless you agree to have your data stored for longer in order to remain in our application pool.
We will not pass your personal data on to third parties for any other purpose than those listed below.
We only share your data with third parties if:
- you have given express permission for us to do so, according to Art. 6 para. 1 p. 1 lit. a of the GDPR,
- there is a legal requirement to do so, according to Art. 6 para. 1 p. 1 lit. c of the GDPR or
- this is legally permissible and required for the execution of contractual relationships, according to Art. 6 para. 1 p. 1 lit. b of the GDPR.
The ZEW website contains links to third party web pages. Clicking on such web links means you leave the ZEW website. These pages or their data protection policies (which may deviate from the ZEW standards) cannot be influenced by ZEW. We are not responsible for third party web page information or content. Any personal data you pass on to third parties is not regulated by the ZEW data protection policy. We therefore recommend that you read the data protection policy provided by each company carefully before passing on your personal data.
When you visit our website, our cookie banner informs you about the use of cookies. We would like to inform you about the type of cookies we use and how you can prevent cookies from being set.
In order to expand the range of functions we can offer our online users and to make our site easier to use, we use what are known as “cookies” on our website. Cookies are small text files that can be placed on your computer. Some of these cookies are deleted at the end of the browser session (so-called session cookies) Other cookies remain on your computer and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit (so-called persistent cookies). Cookies collect and process individual user information, for example on browser, location and IP address.
The processing of personal data through essential cookies is carried out on the basis of Art. 6 Par. 1 lit. f of the GDPR.
The processing of data through non-essential cookies is carried out on the basis of Art. 6 Par. 1 lit. a of the GDPR.
Essential cookies help to make the website more user friendly. Some functions on our website are not available without using cookies, as the website needs to be able to identify your browser after changing to a different page. User data collected through essential cookies will not serve to create user profiles.
This purpose represents a legitimate interest on our part in processing your personal data based on Art. 6 Par. 1 lit. f of the GDPR.
Non-essential cookies make our website user friendly and easy to navigate. In addition they process usage data and behaviour for statistical purposes. They are only set after you permitted cookies by checking the boxes in our cookie banner.
Your consent is voluntary. The collection and storage of data through cookies can be adapted in your browser settings and you can prevent the setting of new cookies. Cookies are stored on your computer which will transfer them to our website. You have full control over the use of cookies. In your browser settings you can deactivate or limit the transfer of cookies. You can delete existing cookies at any time. This can be an automated process. Please note that some functions on our website may no longer be fully available after cookies are disabled.
Personal data will be deleted once it is no longer needed for the purpose it was collected for, especially after cookies are disabled. The following table shows the lifetime of individual cookies.
List of utilised cookies
Necessary (2)
Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
Name | Provider | Purpose | Expiry | Type |
1.gif | Usercentrics GmbH | Used to count the number of sessions on the website, which is necessary to optimise the provision of CMP products. | Session | Pixel Tracker |
CookieConsent | Cookiebot | Stores the user's cookie consent state for the current domain. | 1 year | HTTP Cookie |
Statistics (5)
Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.
Name | Provider | Purpose | Expiry | Type |
collect | Used to send data to Google Analytics about the visitor's device and behavior. Tracks the visitor across devices and marketing channels. | Session | Pixel Tracker | |
_ga | Registers a unique ID that is used to generate statistical data on how the visitor uses the website. | 2 years | HTTP Cookie | |
_ga_# | Used by Google Analytics to collect data on the number of times a user has visited the website as well as dates for the first and most recent visit. | 2 years | HTTP Cookie | |
_gat | Used by Google Analytics to throttle request rate | 1 day | HTTP Cookie | |
_gid | Registers a unique ID that is used to generate statistical data on how the visitor uses the website. | 1 day | HTTP Cookie |
On every page of the ZEW website the icon to change cookie settings is located in the lower left corner of the screen:
We use the tracking tool described in the following in accordance with Art. 6 para. 1 p.1 lit. f of the GDPR. We employ such tools in order to make continual improvements to our website and to ensure it remains user-friendly. We also use this tracking tool in order to statistically monitor and evaluate user traffic on our website with the aim of optimising the content we provide for you. These are considered legitimate interests under the legal regulation cited above. Online sessions and campaigns come to an end after a fixed period of time has passed.
This website uses the service “Google Analytics” offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent Company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA to analyse user behaviour on the website. The service uses “cookies”, which are text files placed on your device. Data collected by cookies is usually send to and stored on a US-based Google server.
IP anonymisation has been activated for this website. The IP address of users located in EU Member States or the European Economic Area will be shortened. The IP address is shortened in a way that a personal reference can no longer be established. Within the framework of the agreement on data processing between the website operator and Google Inc., Google Inc. will use the collected data to provide an analysis of user behaviour and activity on the website, in addition to providing services related to internet use.
You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of this website.
A browser plug-in may prevent cookies from transferring collected data (including your IP address) to Google Inc. and your data being used by Google Inc. You can use the following link to find the required plug-in: https://tools.google.com/dlpage/gaoptout?hl=de
For further information please refer to:
Website: https://marketingplatform.google.com/intl/de/about/analytics/;
Data protection policy: https://policies.google.com/privacy
Types of processing and data: https://privacy.google.com/businesses/adsservices;
Google ads data processing terms and standard contractual clauses for processors in third countries: https://business.safety.google/adsprocessorterms
In accordance with Art. 6 para. 1 p. 1 lit. f of the GDPR, we provide links to the social networks X, YouTube, Flickr, and LinkedIn on our website in order to raise ZEW’s profile on these platforms. This promotional purpose is viewed as a legitimate interest by the GDPR. The responsibility for protecting users’ data lies with the respective provider. Direct contact between these networks and our users is not established until the user actually clicks on one of these links. User data is not provided automatically to these platform providers. Users that click the share link while they are logged into one of the social networks mentioned above, will see an information window to confirm the text before it is sent. You are able to share website content under consideration of data protection on social media without providers creating a full online profile.
For X and YouTube we use the option to embed videos and posts directly into the website. We implemented a two-click solution for this purpose. A direct connection between networks and users will not be formed unless the user clicks the “show content” button.
X
Functions of the X service (formerly Twitter) are integrated on this website. These functions are offered by the parent company X Corp, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
The Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland, is responsible for the data processing of persons living outside the USA.
When the social media element is active, a direct connection is established between your end device and the X server. X (formerly Twitter) thereby receives information about your visit to this website. By using X (formerly Twitter) and the ‘Re-Tweet’ or ‘Repost’ function, the websites you visit are linked to your X (formerly Twitter) account and made known to other users.
We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by X (formerly Twitter). Further information on this can be found in the privacy policy of X (formerly Twitter) at: https://x.com/en/privacy.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time.
X Corp. is certified in accordance with the ‘EU-US Data Privacy Framework’ (DPF). Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/list.
You can change your data protection settings for X (formerly Twitter) in the account settings at https://twitter.com/account/settings.
YouTube
A link to the YouTube page operated by Google is integrated on our website. The operator of the pages is Google Ireland Limited (‘Google’), Gordon House, Barow Street, Dublin 4, Ireland. However, according to Google, data is also transferred to the USA, namely to YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.
Clicking on the ‘YouTube’ button establishes direct contact between you and YouTube. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. After activating a YouTube video, further data processing operations may be triggered over which we have no influence.
The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Further information about data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=en.
YouTube is certified in accordance with the ‘EU-US Data Privacy Framework’ (DPF). Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/list.
Flickr
We use Flickr to show and store images.
Flickr is a service by Flickr, Inc., c/o SmugMug, Inc., 67 E Evelyn Ave, Ste 200, Mountain View, CA 94041, USA
Guidelines on data protection at Flickr, Inc: https://www.flickr.com/help/privacy
Information on how to change your data protection setting: https://help.flickr.com/en_us/change-your-privacy-settings-rygl6XoJm.
A sharing link of the LinkedIn network is integrated on our website. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
By clicking on the LinkedIn button, the link establishes direct contact between LinkedIn and you. A connection to the LinkedIn server is established and data such as the IP address of your computer and the website you visited are transmitted to LinkedIn. As soon as you are logged into your LinkedIn account, LinkedIn is able to associate your visit to our website with you and your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn.
LinkedIn's parent company, LinkedIn Corporation from Sunnyvale CA, USA, is certified in accordance with the ‘EU-US Data Privacy Framework’ (DPF).
Further information on the protection of your data when using the service can be found here:
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Standard contractual clauses (guarantee of data protection level for processing in third countries): https://legal.linkedin.com/dpa
Possibility of objection (opt-out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Data processing agreement: https://legal.linkedin.com/dpa
ZEW employs technical and organisational security measures to protect the data we collect from incidental or deliberate manipulations, loss, destruction or unauthorised access. Our security measures are continually updated in line with the latest technological advances.
You have the right:
- to request information regarding the personal data we have stored on you in accordance with Art. 15 of the GDPR. In particular, you can request information regarding the purpose of the data collection, the type of personal data collected, the types of recipient your data has been or will be made available to, how long your data will be stored for, whether you have a right to amend or delete your data, restrict the processing of your data or to object to your data being stored, whether you have a right of complaint, the origin of your data (if this information has not been gathered by us) as well as whether automated decision-making including profiling was used and, if so, any relevant information gleaned from these processes;
- to request the immediate amendment of inaccurate personal data stored by us, in accordance with Art. 16 of the GDPR;
- to request the deletion of any personal data stored by us, as long as the processing of this data is not required under the right to freedom of speech and freedom of information, to fulfil a legal requirement, for reasons of public interest or for the assertion, exercise or defence of legal claims, according to Art. 17 of the GDPR;
- according to Art. 18 of the GDPR, to request that the processing of your personal be restricted in cases where the accuracy of the data is disputed by you personally, processing the data is illegal, but you refuse to have the data deleted and we no longer need it, though you require it for the assertion, exercise or defence of legal claims or you have filed an objection to the processing of your data under Art. 21 of the GDPR;
- to receive the personal data that you provide to us in a structured, commonly used machine-readable format or request that this data be sent to another responsible party, in accordance with Art. 20 of the GDPR;
- to withdraw your previously granted consent regarding the storage and processing of your data at any time under Art. 7 para. 3 of the GDPR. This means that we cannot continue processing the data originally provided with this consent in the future, and
- to file a complaint with the appropriate supervisory authority, according to Art. 77 of the GDPR. In most cases, you can contact the supervisory authority responsible for your usual place of residence or workplace or for our registered office.
Every newsletter or press release you receive also contains information on how to cancel your subscription. Once your subscription has been cancelled, your data will be deleted.
Right of objection
If your personal data are being processed on the basis of legitimate interests according to Art. 6 para. 1 p. 1 lit. f of the GDPR, you have the right, under Art. 21 of the GDPR, to file an objection to your personal data being processed, as long as there are sufficient grounds based on your particular circumstances or the objection is targeted at direct advertising. In the latter case, you have a general right of objection without having to provide evidence of any special circumstances.
If you wish to exercise your right of revocation or of objection, simply send an e-mail to datenschutzbeauftragter@zew.de.
This commitment to data protection is currently valid as of April 2022.
ZEW reserves the right to revise this declaration on data protection in accordance with lawful regulations at any time. In the case of changes we will post the revised version of the declaration on the web so that you always have access to the most up-to-date valid version.