The following Privacy Policy applies to the use of our online services at www.iaaeu.de.

We attach great importance to data protection. Your personal data is collected and processed in accordance with the applicable data protection legislation, in particular the General Data Protection Regulation (GDPR).

The controller responsible for the collection, processing and use of your personal data within the meaning of Article 4, point (7) GDPR is the Institute for Labour Law and Industrial Relations in the European Union (IAAEU), Trier University, Behringstraße 21, 54296 Trier, Germany, This email address is being protected from spambots. You need JavaScript enabled to view it..

If you wish to object to our collection, processing or use of your data in accordance with this Privacy Policy, either in its entirety or in relation to individual measures, you may address your objection to the controller.

You may save and print this Privacy Policy at any time.

We use personal data for the purpose of operating the website.

3.1 Hosting

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services, which we use for the purpose of operating the website.

In this context, we or our hosting provider process master data, contact data, content data, usage data, metadata and communication data relating to visitors to this website on the basis of our legitimate interests in providing our website efficiently and securely, pursuant to Article 6(1), first sentence, point (f) GDPR in conjunction with Article 28 GDPR.

3.2 Access data

We collect information about you when you use this website. We automatically collect information about your usage behaviour and your interaction with us and record data relating to your computer or mobile device. We collect, store and use data relating to every access to our website (known as server log files). Access data includes:

• Name and URL of the file accessed
• Date and time of access
• Volume of data transferred
• Notification of successful access (HTTP response code)
• Browser type and browser version
• Operating system
• Referrer URL (i.e. the previously visited page)
• Websites accessed by the user’s system through our website
• The user’s Internet service provider
• IP address and the requesting provider

We use this log data without associating it with you personally or otherwise creating profiles, for statistical analyses for the purpose of operating, securing and optimising our website, as well as for anonymously recording the number of visitors to our website (traffic) and the extent and nature of the use of our website and services. This information enables us to analyse data traffic, identify and rectify errors and improve our services.

This also constitutes our legitimate interest pursuant to Article 6(1), first sentence, point (f) GDPR.

We reserve the right to review the log data retrospectively if specific indications give rise to a justified suspicion of unlawful use. We store IP addresses in the log files for a limited period where this is required for security purposes or necessary for the provision of services, for example when you use one of our services. This also includes storing the IP address when you subscribe to the newsletter. We delete the IP address when it is no longer required for security purposes. We also store IP addresses where we have a specific suspicion that a criminal offence has been committed in connection with the use of our website.

3.3 Cookies

We use session cookies to optimise our website. A session cookie is a small text file sent by the respective servers when you visit a website and stored temporarily on your hard drive. This file contains a session ID, which allows different requests from your browser to be assigned to the same session. This enables your computer to be recognised when you return to our website. These cookies are deleted after you close your browser.

We also use persistent cookies to a limited extent. These are likewise small text files stored on your device, which remain on your device and enable us to recognise your browser on your next visit. These cookies are stored on your hard drive and delete themselves automatically after the specified period. Their lifespan ranges from one month to ten years. This enables us to make our services more user-friendly, effective and secure and, for example, to display information on the website that is specifically tailored to your interests.

Our legitimate interest in using cookies pursuant to Article 6(1), first sentence, point (f) GDPR is to make our website more user-friendly, effective and secure.

The cookies store data and information such as:

• Information about the number of visits to our website and the use of individual functions of our website.

When a cookie is activated, it is assigned an identification number, and your personal data is not associated with this identification number. Your name, IP address or similar data that would allow the cookie to be associated with you is not stored in the cookie. Cookie technology provides us only with pseudonymised information, for example about which pages of our website have been visited.

You can configure your browser so that you are informed in advance when cookies are set and can decide on a case-by-case basis whether to reject cookies in particular cases or generally, or so that cookies are blocked entirely. This may restrict the functionality of the website.

3.4 “Arbeitsrecht aktuell” newsletter

To subscribe to the “Arbeitsrecht aktuell” newsletter, the email address requested during the registration process is required. Registration for the newsletter is logged. After registering, you will receive a message at the email address provided asking you to confirm your registration (“double opt-in”). This is necessary to prevent third parties from registering using your email address.

When the newsletter is sent, the opening of the email and access to the newsletter are logged. This serves to record user numbers for statistical purposes.

The legal basis for sending the newsletter is your consent pursuant to Article 6(1), first sentence, point (a) GDPR in conjunction with Article 7 GDPR. The legal basis for logging the registration is our legitimate interest in demonstrating that the newsletter was sent with your consent. The legal basis for logging the opening of each newsletter email and access to the newsletter is our legitimate interest in recording user numbers for statistical purposes in order to measure the response to the newsletter.

We store the registration data for as long as it is required to send the newsletter. We retain the registration log and the delivery address for as long as there is an interest in demonstrating the consent originally given.

You may cancel your registration at any time by withdrawing your consent to receive the newsletter and thereby unsubscribing from it. A notification in text form to the following email address is sufficient for this purpose: This email address is being protected from spambots. You need JavaScript enabled to view it.. You will, of course, also find an unsubscribe link in every newsletter. Your attention is expressly drawn to your rights as a data subject under Section 5 of this Privacy Policy.

3.5 Participant database

If you register for the participant database (the “Recruitment System”) for the purpose of conducting scientific experiments, the first name, surname and email address requested are required so that we can invite you to participate in scientific experiments. The other information requested (telephone number, gender, field of study and commencement of studies) is optional and serves to make a preliminary selection from among potential participants. Registration for the “Recruitment System” is logged. After registering, you will receive a message at the email address provided asking you to confirm your registration (“double opt-in”). This is necessary to prevent third parties from registering using your email address.

The data stored in the “Recruitment System” is not disclosed to third parties. The data is used exclusively for organising scientific experiments and is used by us for the following purposes:

• To inform participants about new experiments and invite them to participate
• To select participants for particular experiments on scientific grounds
• To check whether registered participants attend or fail to attend

There is no link between the data generated during an experiment and the data in the “Recruitment System”.

The legal basis for storing your data in the “Recruitment System” and for sending invitations to participate in scientific experiments is your consent pursuant to Article 6(1), first sentence, point (a) GDPR in conjunction with Article 7 GDPR. The legal basis for logging the registration is our legitimate interest in demonstrating that storage in the “Recruitment System” and the sending of invitations to participate in scientific experiments took place with your consent.

We store the registration data for as long as it is required to send invitations, generally for the average duration of a course of study of five years. We retain the registration log and the delivery address for as long as there is an interest in demonstrating the consent originally given.

You may cancel your registration at any time by withdrawing your consent to the storage of your data in the “Recruitment System” and to the sending of invitations. A notification in text form to the following email address is sufficient for this purpose: This email address is being protected from spambots. You need JavaScript enabled to view it.. You will, of course, also find an unsubscribe link in every invitation. Your attention is expressly drawn to your rights as a data subject under Section 5 of this Privacy Policy.

3.6 Scientific experiments

When experiments are conducted, data is generated through the decisions participants make during those experiments. This data is analysed for scientific purposes by the Institute for Labour Law and Industrial Relations in the European Union (IAAEU). In this process, the decision data is anonymised and cannot be attributed to any individual. Participation in the experiments is anonymous in this sense. The anonymised data generated is used to prepare scientific research papers and presentations. These papers are published.

3.7 Contact list of the Economic Research Group

If you are added to the contact list of the Economic Research Group, your name and email address are processed in order to inform you about events and other news at the IAAEU (“information emails”). The data stored in the contact list is not disclosed to third parties. The legal basis for storing your data in the contact list and for sending information emails is our legitimate interest pursuant to Article 6(1), first sentence, point (f) GDPR. You may have yourself removed from the contact list at any time and may object to receiving further information emails at any time. A notification in text form to the respective sender is sufficient for this purpose. You will, of course, also find information on how to unsubscribe in every information email. Your attention is expressly drawn to your rights as a data subject under Section 5 of this Privacy Policy.

3.8 Email contact

When you contact us (for example via a contact form or email), we process the information you provide in order to handle your enquiry and any follow-up questions. We process further personal data only if you consent to this (Article 6(1), first sentence, point (a) GDPR) or if we have a legitimate interest in processing your data (Article 6(1), first sentence, point (f) GDPR). A legitimate interest consists, for example, in replying to your email.

Unless specifically stated otherwise, we store personal data only for as long as is necessary to fulfil the purposes pursued.

Under the applicable laws, you have various rights concerning your personal data. If you wish to exercise these rights, please send your request by email or post to the address specified in Section 1, clearly identifying yourself. An overview of your rights is provided below.

5.1 Right to confirmation and access

You have the right to receive clear information about the processing of your personal data.

In detail:

You have the right at any time to obtain confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to request, free of charge, access to the personal data stored about you, together with a copy of that data. You also have the right to receive the following information:

• The purposes of the processing;
• The categories of personal data being processed;
• The recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organisations;
• Where possible, the envisaged period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period;
• The existence of the right to request from the controller rectification or erasure of personal data concerning you or restriction of processing, or to object to such processing;
• The right to lodge a complaint with a supervisory authority;
• Where the personal data is not collected from you, any available information as to its source;
• The existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

Where personal data is transferred to a third country or an international organisation, you have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.

5.2 Right to rectification

You have the right to request that we rectify and, where applicable, complete personal data concerning you.

In detail: You have the right to obtain from us, without undue delay, the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of a supplementary statement.

5.3 Right to erasure (“right to be forgotten”)

In a number of cases, we are obliged to erase personal data concerning you.

In detail:

Pursuant to Article 17(1) GDPR, you have the right to obtain from us the erasure of personal data concerning you without undue delay, and we are obliged to erase personal data without undue delay where one of the following grounds applies:

• The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
• You withdraw the consent on which the processing was based pursuant to Article 6(1), first sentence, point (a) GDPR or Article 9(2), point (a) GDPR, and there is no other legal ground for the processing.
• You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
• The personal data has been unlawfully processed.
• The personal data must be erased to comply with a legal obligation under Union or Member State law to which we are subject.
• The personal data has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Where we have made the personal data public and are obliged pursuant to Article 17(1) GDPR to erase it, we take reasonable steps, including technical measures, taking account of available technology and the cost of implementation, to inform controllers processing the personal data that you have requested the erasure by those controllers of any links to, or copies or replications of, that personal data.

5.4 Right to restriction of processing

In a number of cases, you are entitled to request that we restrict the processing of your personal data.

In detail:

You have the right to obtain from us restriction of processing where one of the following conditions applies:

• You contest the accuracy of the personal data, for a period enabling us to verify its accuracy;
• The processing is unlawful and you have opposed the erasure of the personal data and instead requested restriction of its use;
• We no longer need the personal data for the purposes of the processing, but you require the data for the establishment, exercise or defence of legal claims; or
• You have objected to processing pursuant to Article 21(1) GDPR, pending verification of whether the legitimate grounds of our organisation override yours.

5.5 Right to data portability

You have the right to receive personal data concerning you in a machine-readable format, to transmit it or to have us transmit it. In detail:

You have the right to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit that data to another controller without hindrance from us, where:

• The processing is based on consent pursuant to Article 6(1), first sentence, point (a) GDPR or Article 9(2), point (a) GDPR, or on a contract pursuant to Article 6(1), first sentence, point (b) GDPR; and
• The processing is carried out by automated means.

When exercising your right to data portability pursuant to paragraph 1, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible.

5.6 Right to object

You have the right to object to our lawful processing of your personal data where this is justified by your particular situation and our interests in the processing do not override yours.

In detail:

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Article 6(1), first sentence, point (e) or (f) GDPR, including profiling based on those provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, unless the processing is necessary for the performance of a task carried out in the public interest.

5.7 Automated decisions, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

No automated decision-making based on the personal data collected takes place.

5.8 Right to withdraw consent under data protection law

You have the right to withdraw your consent to the processing of personal data at any time.

5.9 Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you is unlawful.

We make every effort to ensure the security of your data within the framework of applicable data protection laws and technical possibilities.

Your personal data is transmitted to us in encrypted form. We use the SSL (Secure Socket Layer) encryption system. However, we point out that data transmission over the Internet (for example when communicating by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

To safeguard your data, we maintain technical and organisational security measures in accordance with Article 32 GDPR, which we continually adapt to the state of the art.

We also do not guarantee that our services will be available at particular times; disruptions, interruptions or outages cannot be ruled out. The servers we use are carefully backed up on a regular basis.

As a general rule, we use your personal data only within our institution.

Where we outsource certain parts of data processing (“processing on behalf of the controller”), we contractually oblige processors to use personal data only in accordance with the requirements of data protection laws and to ensure that the rights of the data subject are protected.

This website uses Google Maps to display a location map. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. By using this website, you consent to the collection, processing and use by Google, one of its representatives or third-party providers of data collected automatically and data entered by you.

The terms of use for Google Maps can be found under Google Maps Terms of Service. Detailed information on privacy policies and the choices available in this regard can be found in the Privacy Centre of google.de.