Dear users of the ZEW website,

The protection and confidential handling of your personal data is of central concern to us. We would therefore like to take this opportunity to inform you about how, to what extent, and for what purpose ZEW collects, processes and uses this data.

ZEW processes your personal data, which is collected when you visit our website, in compliance with legal regulations, in particular the guidelines set out in the EU General Data Protection Regulation (GDPR).

  • 1. Data collection

    1. Data collection

    1.1 Fundamentals

    ZEW’s online services are generally accessible without any requirements pertaining to personal information. Certain services (subscription to the ZEW Newsletter, press distribution lists, enrolment for seminars or events etc.) do require users to provide us with personal information. It is left to your discretion whether you decide to make use of these services.

    Minors under the age of 18 should not share any of their personal data with us without prior permission from a parent or guardian.

    The responsible party is the ZEW – Leibniz Centre for European Economic Research, L 7, 1 68161 Mannheim

    Phone +49/ (0)621-1235-01, Telefax +49/ (0)621-1235-255, E-mail: info@zew.de

    Executive Directors: Professor Achim Wambach, PhD, and Thomas Kohl

    You can reach our data protection officer, Dr. Thomas Wirth at the above address or via e-mail at: datenschutzbeauftragter@zew.de

    1.2 Access protocols

    When you access the ZEW website www.zew.de, information is sent automatically to our website server via the browser used on your device. This information is stored temporarily in what is known as a logfile. The following information is recorded without any action on your part and stored until it is deleted automatically:

    • User IP address
    • Access date and time
    • Name and URL of the page accessed
    • The website through which the page was accessed (referrer URL)
    • The type of browser used and, if necessary, the operating system used on your computer as well as the name of your access provider.

    This data is processed by us for the following purposes:

    • Providing a smooth connection to our website,
    • Ensuring that our website is user-friendly,
    • Assessing the security and stability of our systems and
    • Other administrative purposes.

    We process your data in accordance with Art. 6 para. 1 p. 1 lit. f of the GDPR. Our interest in your data is legitimate based on the purposes of data processing listed above. The data is processed anonymously; individual user profiles are not being compiled.

    In addition, we use cookies and analytical services when you visit our website. For further information, please refer to sections 3 and 4 in this commitment to data protection.

    1.3 ZEW Newsletter and ZEW press distribution list

    According to Art. 6 para. 1 p. 1 lit. a of the GDPR, as long as you have expressly given your consent, we will use your e-mail address to send you our newsletter or press releases on a regular basis. In order to subscribe to the ZEW Newsletter or our press releases, you must provide us with an e-mail address. Except for providing us with your e-mail address, it is also possible to subscribe to the newsletter or press releases under a pseudonym. Apart from your e-mail address, none of your personal information is stored by us, unless you provide us with this information voluntarily in order to access special newsletter or press-related services, or to improve our services. Access to the server is restricted to a small group of authorised personnel. Data is not passed on to a third party!

    You can cancel your subscription at any time, for example, via the link provided at the bottom of every newsletter and press release. Alternatively, you can unsubscribe at any time by sending an e-mail to newsletter@zew.de or redaktion@zew.de.

    1.4 Registration for ZEW professional training courses

    Any electronic data you provide for registration will be deleted immediately after you complete your course, unless you expressly agree to receive information about future ZEW events. When you register for further training courses at ZEW, your data is processed with your consent according to Art. 6 para. 1 p. 1 lit. b of the GDPR. The personal data collected by us in order to process your registration form will be deleted as soon as it is no longer required to fulfil the purpose for which it was originally collected.

    1.5 Other contact and information services

    We invite users to contact us with any question they might have via the contact forms or e-mail addresses provided on the website. In order to take advantage of this service, you must provide a valid e-mail address so that we know who the question is coming from and so that we can send you a response. This means that any personal data contained in the e-mail is stored by us. Any other information you provide is voluntary. In this case, none of your data will be passed on to third parties. Your data is used exclusively for the purpose of responding to your inquiry.

    Data for the purpose of establishing contact is processed by us according to Art. 6 para. 1 p.1 lit. a of the GDPR, based on your freely given consent, i.e. in the form of sending an e-mail, in accordance with Art. 6 para. 1 lit. f of the GDPR. If the goal of the e-mail communication is the execution of a contract, the processing of the data is also supported by Art. 6 para. 1 lit. b of the GDPR.

    The personal data collected will be deleted as soon as it is no longer required to fulfil the purpose for which it was originally collected. In the case of personal data collected via an online contact form or sent via e-mail, this happens as soon as the conversation with the user comes to an end. The conversation can be seen to have come to an end when it is clear from the given circumstances that the issue being discussed has been definitively resolved.

    1.6 Application forms

    If you would like to apply for a position at ZEW, you can send us your application via the forms provided on our website. The data you send to us is encrypted in transit. Only staff in our personnel department and those in charge of the hiring process have access to your application.

    For the purposes of processing your application, your data is processed with your consent according to Art. 6 para. 1 p. 1 lit. a of the GDPR.

    Personal data collected by us as part of the application process will be deleted six months after the end of application process, unless you agree to have your data stored for longer in order to remain in our application pool.

  • 2. Third party involvement

    2. Third party involvement

    We will not pass your personal data on to third parties for any other purpose than those listed below.

    We only share your data with third parties if:

    • you have given express permission for us to do so, according to Art. 6 para. 1 p. 1 lit. a of the GDPR,
    • there is a legal requirement to do so, according to Art. 6 para. 1 p. 1 lit. c of the GDPR or
    • this is legally permissible and required for the execution of contractual relationships, according to Art. 6 para. 1 p. 1 lit. b of the GDPR.

    The ZEW website contains links to third party web pages. Clicking on such web links means you leave the ZEW website. These pages or their data protection policies (which may deviate from the ZEW standards) cannot be influenced by ZEW. We are not responsible for third party web page information or content. Any personal data you pass on to third parties is not regulated by the ZEW data protection policy. We therefore recommend that you read the data protection policy provided by each company carefully before passing on your personal data.

  • 3. Cookies

    3. Cookies

    When you visit our website, our cookie banner informs you about the use of cookies. We would like to inform you about the type of cookies we use and how you can prevent cookies from being set.

    In order to expand the range of functions we can offer our online users and to make our site easier to use, we use what are known as “cookies” on our website. Cookies are small text files that can be placed on your computer. Some of these cookies are deleted at the end of the browser session (so-called session cookies) Other cookies remain on your computer and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit (so-called persistent cookies). Cookies collect and process individual user information, for example on browser, location and IP address.

    The processing of personal data through essential cookies is carried out on the basis of Art. 6 Par. 1 lit. f of the GDPR.

    The processing of data through non-essential cookies is carried out on the basis of Art. 6 Par. 1 lit. a of the GDPR.

    Essential cookies help to make the website more user friendly. Some functions on our website are not available without using cookies, as the website needs to be able to identify your browser after changing to a different page.  User data collected through essential cookies will not serve to create user profiles.

    This purpose represents a legitimate interest on our part in processing your personal data based on Art. 6 Par. 1 lit. f of the GDPR.

    Non-essential cookies make our website user friendly and easy to navigate. In addition they process usage data and behaviour for statistical purposes. They are only set after you permitted cookies by checking the boxes in our cookie banner.

    Your consent is voluntary. The collection and storage of data through cookies can be adapted in your browser settings and you can prevent the setting of new cookies. Cookies are stored on your computer which will transfer them to our website. You have full control over the use of cookies. In your browser settings you can deactivate or limit the transfer of cookies. You can delete existing cookies at any time. This can be an automated process. Please note that some functions on our website may no longer be fully available after cookies are disabled.

    Personal data will be deleted once it is no longer needed for the purpose it was collected for, especially after cookies are disabled. The following table shows the lifetime of individual cookies. 

    List of utilised cookies

    CookiesPurposeLifetime

    CookieConsent

    (necessary)

    Saves the users’ status of consent to cookies on the current domain.

    1 year

    fe_typo_user

    (necessary)

    Maintains the same conditions for every page request

    session (end of session)

    Collect

    (statistics)
    Used to transfer data regarding the device and user behaviour to Google Analytics. Identifies the visitor across different devices and marketing channels.session (end of session)

    _ga

    (statistics)

    Registers an individual ID to collect statistic data on how the visitor uses the website.

    2 years

    _gat

    (statistics)

    Used by Google Analytics to limit the request rate

    1 day

    _gid

    (statistics)

    Registers an individual ID to generate statistic data on the visitor’s use of the website.

    1 day

    On every page of the ZEW website the icon to change cookie settings is located in the lower left corner of the screen:

    Picture of a paper clip
  • 4. Use of Google Analytics

    4. Use of Google Analytics

    We use the tracking tool described in the following in accordance with Art. 6 para. 1 p.1 lit. f of the GDPR. We employ such tools in order to make continual improvements to our website and to ensure it remains user-friendly. We also use this tracking tool in order to statistically monitor and evaluate user traffic on our website with the aim of optimising the content we provide for you. These are considered legitimate interests under the legal regulation cited above. Online sessions and campaigns come to an end after a fixed period of time has passed.

    This website uses the service “Google Analytics” offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent Company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA to analyse user behaviour on the website. The service uses “cookies”, which are text files placed on your device. Data collected by cookies is usually send to and stored on a US-based Google server.

    IP anonymisation has been activated for this website. The IP address of users located in EU Member States or the European Economic Area will be shortened. The IP address is shortened in a way that a personal reference can no longer be established. Within the framework of the agreement on data processing between the website operator and Google Inc., Google Inc. will use the collected data to provide an analysis of user behaviour and activity on the website, in addition to providing services related to internet use.

    You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of this website.

    A browser plug-in may prevent cookies from transferring collected data (including your IP address) to Google Inc. and your data being used by Google Inc. You can use the following link to find the required plug-in: https://tools.google.com/dlpage/gaoptout?hl=de

    For further information please refer to:

    Website: https://marketingplatform.google.com/intl/de/about/analytics/;
    Data protection policy: https://policies.google.com/privacy

    Types of processing and data: https://privacy.google.com/businesses/adsservices;
    Google ads data processing terms and standard contractual clauses for processors in third countries: https://business.safety.google/adsprocessorterms

  • 5. Social media

    5. Social media

    In accordance with Art. 6 para. 1 p. 1 lit. f of the GDPR, we provide links to the social networks Twitter, YouTube, Flickr, LinkedIn, Xing and Facebook on our website in order to raise ZEW’s profile on these platforms. This promotional purpose is viewed as a legitimate interest by the GDPR. The responsibility for protecting users’ data lies with the respective provider. Direct contact between these networks and our users is not established until the user actually clicks on one of these links. User data is not provided automatically to these platform providers. Users that click the share link while they are logged into one of the social networks mentioned above, will see an information window to confirm the text before it is sent. You are able to share website content under consideration of data protection on social media without providers creating a full online profile.

    For Twitter and YouTube we use the option to embed videos and tweets directly into the website. We implemented a two-click solution for this purpose. A direct connection between networks and users will not be formed unless the user clicks the “show content” button.

    Twitter

    The website features a sharing link to Twitter Inc.’s messenger platform Twitter and tweets are embedded via a two-click solution. Twitter content is marked by the Twitter logo.

    By clicking the Twitter icon you can share an article with your Twitter contacts. By clicking the Twitter icon, you activate a direct connection between your device and Twitter, and your IP address, websites you visited and other data will be transferred to Twitter.

    For further information please refer to:

    Service provider: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland, Parent Company: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Data Protection Policy: https://twitter.com/privacy, (settings: https://twitter.com/personalization).

    YouTube

    Our website features YouTube content, which is a Google-operated site. The site is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. By clicking the YouTube icon, you create a direct connection between your device and YouTube. The YouTube server will be provided with information on which web pages you visited.

    While you are logged into your YouTube account, YouTube can connect your internet activities to your personal profile. Please log out of your YouTube account to prevent data transfer.

    For further information please refer to:

    Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website: https://www.youtube.com; data protection policy: https://policies.google.com/privacy; opt-out plug-in: https://tools.google.com/dlpage/gaoptout?hl=de, settings for advertisements: https://adssettings.google.com/authenticated.

    Flickr

    We use Flickr to show and store images.
    Flickr is a service by Flickr, Inc., c/o SmugMug, Inc., 67 E Evelyn Ave, Ste 200, Mountain View, CA 94041, USA

    Guidelines on data protection at Flickr, Inc: https://www.flickr.com/help/privacy  

    Information on how to change your data protection setting: https://help.flickr.com/en_us/change-your-privacy-settings-rygl6XoJm.

    LinkedIn

    Our website features a LinkedIn sharing link. By clicking the LinkedIn icon you create a direct connection between your device and LinkedIn. Through this direct connection, personal data, for example your IP address and your search history, is transferred to a LinkedIn server. LinkedIn can identify you and connects your visit on our website to your user account while you are logged into your LinkedIn account. Please not that we, as the provider of the website, have no knowledge of the kind of data LinkedIn collects or how the collected data is used.

    For further information please refer to:

    Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Website: https://www.linkedin.com; data protection policy: https://www.linkedin.com/legal/privacy-policy; standard contractual clauses (data protection standards for processors in third countries): https://legal.linkedin.com/dpa; Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out; data processing agreement: https://legal.linkedin.com/dpa.

    XING

    Our website features a XING sharing link. By clicking the XING icon you create a direct connection between your device and the server operated by New Work SE, am Standkai 1, 40457 Hamburg, Germany.

    Use the following link to access XING’s data protection policy:
    https://privacy.xing.com/de/datenschutzerklaerung/allgemeine-hinweise

    Facebook

    By clicking the Facebook sharing link, you can share an article from our website on your Facebook profile. By clicking the Facebook icon, you create a direct connection between your device and Facebook, your IP address, websites you visited and other data will be transferred to Facebook. While you are logged into a Facebook account, Facebook can connect your data to your Facebook profile and show that you liked an article. This includes information on the types of content users view or engage with, or the actions they take (see under “Things that you and others do and provide” in Facebook’s Data Policy): https://www.facebook.com/policy), as well as information about the devices they use (e.g. IP addresses, operating system, browser type, language settings, cookie data; see under “Device information” in Facebook’s Data Policy: https://www.facebook.com/policy). As explained in Facebook’s Data Policy under “How do we use this information?”, Facebook also collects and uses information to provide analytics services called Page Insights to page admins to help them understand how people interact with their pages and the content associated with them. We have entered into a joint controllership arrangement with Facebook (Information about Page Insights, https://www.facebook.com/legal/terms/page_controller_addendum), that defines which security standards Facebook needs to implement and in which Facebook agrees to respect data subjects rights (users may send a request for the disclosure or deletion of data directly to Facebook). The agreement with Facebook respects the user’s right to obtain information, right to erasure, withdrawal of consent and the right to object to the competent supervisory authority.

    For further information please refer to:

    (https://www.facebook.com/legal/terms/information_about_page_insights_data); Service provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Website: https://www.facebook.com; data protection policy: https://www.facebook.com/about/privacy; standard contractual clauses (data protection standards for processors in third countries)

  • 6. Security

    6. Security

    ZEW employs technical and organisational security measures to protect the data we collect from incidental or deliberate manipulations, loss, destruction or unauthorised access. Our security measures are continually updated in line with the latest technological advances.

  • 7. Your rights

    7. Your rights

    You have the right:

    • to request information regarding the personal data we have stored on you in accordance with Art. 15 of the GDPR. In particular, you can request information regarding the purpose of the data collection, the type of personal data collected, the types of recipient your data has been or will be made available to, how long your data will be stored for, whether you have a right to amend or delete your data, restrict the processing of your data or to object to your data being stored, whether you have a right of complaint, the origin of your data (if this information has not been gathered by us) as well as whether automated decision-making including profiling was used and, if so, any relevant information gleaned from these processes;
    • to request the immediate amendment of inaccurate personal data stored by us, in accordance with Art. 16 of the GDPR;
    • to request the deletion of any personal data stored by us, as long as the processing of this data is not required under the right to freedom of speech and freedom of information, to fulfil a legal requirement, for reasons of public interest or for the assertion, exercise or defence of legal claims, according to Art. 17 of the GDPR;
    • according to Art. 18 of the GDPR, to request that the processing of your personal be restricted in cases where the accuracy of the data is disputed by you personally, processing the data is illegal, but you refuse to have the data deleted and we no longer need it, though you require it for the assertion, exercise or defence of legal claims or you have filed an objection to the processing of your data under Art. 21 of the GDPR;
    • to receive the personal data that you provide to us in a structured, commonly used machine-readable format or request that this data be sent to another responsible party, in accordance with Art. 20 of the GDPR;
    • to withdraw your previously granted consent regarding the storage and processing of your data at any time under Art. 7 para. 3 of the GDPR. This means that we cannot continue processing the data originally provided with this consent in the future, and
    • to file a complaint with the appropriate supervisory authority, according to Art. 77 of the GDPR. In most cases, you can contact the supervisory authority responsible for your usual place of residence or workplace or for our registered office.

    Every newsletter or press release you receive also contains information on how to cancel your subscription. Once your subscription has been cancelled, your data will be deleted.

     Right of objection

    If your personal data are being processed on the basis of legitimate interests according to Art. 6 para. 1 p. 1 lit. f of the GDPR, you have the right, under Art. 21 of the GDPR, to file an objection to your personal data being processed, as long as there are sufficient grounds based on your particular circumstances or the objection is targeted at direct advertising. In the latter case, you have a general right of objection without having to provide evidence of any special circumstances.

    If you wish to exercise your right of revocation or of objection, simply send an e-mail to datenschutzbeauftragter@zew.de.

  • 8. Validity and changes to the data protection policy

    8. Validity and changes to the data protection policy

    This commitment to data protection is currently valid as of April 2022.

    ZEW reserves the right to revise this declaration on data protection in accordance with lawful regulations at any time. In the case of changes we will post the revised version of the declaration on the web so that you always have access to the most up-to-date valid version.

Further Questions?

Should you have any questions or comments regarding data protection at ZEW, please contact our data protection officer: datenschutzbeauftragter@zew.de.