1. Responsibility
Responsible in the sense of the GDPR (hereinafter "we"):
Goethe-Institut e.V.
80333 Munich
Germany
Phone: +49 89 15921-0
info@goethe.de
Contact details of data protection officers:
Die Datenschutzbeauftragte
Goethe-Institut e.V.
Oskar-von-Miller-Ring 18
80333 Munich
Germany
datenschutz@goethe.de
2. User account
In order to use the app, it is necessary to register and create a "Goethe.de account". To register, we process your registration data (e-mail address and password), with which you have access to personalised offers from the Goethe-Institut, your consents given, as well as your country and your preferred language.
2.1 Data on your person and content created by you
In the context of creating the Goethe.de account, only those data are required as mandatory data which we need to carry out our offers or any contractual relationship with you.
We collect and process the data provided by you in the context of the contract execution of this user contract according to Art. 6 Para. 1 lit. b GDPR
- to check your application to create a Goethe.de account
- to provide the free services in which you participate (blogs, forums, comments, self-presentation, communities, chats, etc.)
- to fulfill our obligations from contracts that exist with you, in particular the use of the paid functions of the app.
You may voluntarily provide further personal information and post content (so-called user-generated content), such as a photo of you, texts in the form of blog or forum posts, discussion posts, etc., to the website. Which data is collected in detail and which information is mandatory and which is voluntary can be seen from the respective input forms. We process the voluntarily provided data in order to protect the predominant common interests in a diverse exchange within the framework of our platform in accordance with Art. 6 para. 1 lit. f GDPR.
2.2 Personalized marketing
For marketing purposes, we also use the data you provide in your user account for a personalized design of our website and internet offers, e.g. a personal homepage and a profile area in which we present suitable offers to you. This serves to safeguard our overriding legitimate interests in optimum marketing of our offers in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.
2.3 Mail advertising
We reserve the right to use your first and last name, your postal address for our own advertising purposes, e.g. to send you interesting offers and information about our products by letter post. This serves to safeguard our predominantly legitimate interests in advertising to our customers in accordance with Art. 6 Para. 1 lit. f GDPR within the scope of a weighing of interests. You can object to the storage and use of your data for these purposes at any time by sending a message to
recht@goethe.de.
2.4 Data publishing
If you consent to the processing of your data to create a user account in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, other users may see the data you have provided using the Goethe.de account, such as your name or user name, your contributions incl. creation date and time, your memberships in groups, your friends, your learning lists, your files, your online status, your ratings, the duration of your membership, your gender and your guestbook entries.
2.5 Data consolidation
If you have already provided personal data to another Goethe-Institut service in the past and if you consent to this pursuant to Art. 6 Para. 1 lit. a GDPR, we will merge this previously provided data with your data in the app. The same applies to the opposite direction: if you wish to use other services of the Goethe-Institut's Internet offering or apps in the future, we want to make your data available internally to these services via our central customer database so that you can also use these services conveniently without re-entering your data.
2.6 Deletion
If you do not confirm your registration within 7 days, your Goethe.de account will be deleted along with the data provided during registration. If you confirm the registration, a user account will be created according to the present explanations. It is possible to delete your Goethe.de account and your data left there at any time and can be done either by sending a message to the contact option described below or by using a function in the user account provided for this purpose.
3. Using the App
3.1 Data and settings you specify
You can enter your library card number in the app. You can also make the following personal settings in the app: language, selection of a Goethe-Institut, not displaying pop-up notifications, using the camera as a scanner for QR codes.
We collect and process this data within the framework of contract processing in accordance with Art. 6 Para. 1 lit. b GDPR in order to provide the functions of the app.
3.2 Usage data
The following data is generated when using the app: Last Activity, Username at Goethe.de
We collect and process this data within the framework of contract processing in accordance with Art. 6 Para. 1 lit. b GDPR in order to provide the functions of the app.
4. Data security
We protect our systems against loss, destruction, access, alteration or distribution of your data by unauthorised persons through technical and organisational measures, such as the creation of the Goethe.de account or a subsequent login using SSL encryption.
5. Your rights and contact details
As a data subject, you have the following rights:
- pursuant to Art. 15 GDPR, you have the right to request information about your personal data processed by us to the extent specified therein;
- pursuant to Art. 16 GDPR, you have the right to demand the immediate correction of incorrect or incomplete personal data stored by us;
- In accordance with Art. 17 GDPR, you have the right to demand the erasure of your personal data stored by us, unless further processing is required;
- on the exercise of freedom of expression and information;
- to fulfill a legal obligation;
- for reasons of public interest, or
- for the assertion, exercise or defense of legal claims
- the right, pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data, insofar as
- the correctness of the data is denied by you;
- the processing is unlawful, but you refuse to delete it;
- we no longer need the data, but you need it to assert, exercise or defend legal claims, or
- you have lodged an objection against the processing under Article 21 GDPR;
- pursuant to Art. 20 GDPR, you have the right to receive the personal data you have provided to us in a structured, common and machine-readable format or to request transmission to another responsible party;
- the right to complain to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at our company headquarters.
If you have any questions regarding the collection, processing or use of your personal data, for information, correction, restriction of the processing or deletion of data as well as revocation of any consent given or objection to a specific use of data as well as regarding the right to data transfer, please contact our company data protection officer (see section 1).
6. Right of objection
Insofar as we process personal data as described above in order to safeguard our predominantly legitimate interests as part of a weighing of interests, you may object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. Insofar as processing is carried out for other purposes, you are only entitled to object if there are reasons arising from your particular situation.
After exercising your right of objection, we will not process your personal data further for these purposes unless we can prove compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms, or if the processing serves the assertion, exercise or defense of legal claims.
This does not apply if the processing is carried out for the purposes of direct marketing. Then we will not further process your personal data for this purpose.
February 2020
Goethe-Institut e.V.