Privacy Notice (for different functions or relationships)

1. Provision of the website and creation of logfiles

Every time our website is accessed, our servers and applications automatically log data and information from the accessing computer system.

The following data are saved temporarily:

• Your IP address
• Date and time of your website visit
• The address of the website visited
• The address of the previously visited website (referrer)
• Name and version of your browser / operating system (insofar as it has been transmitted by your browser)

The data is saved in our systems' logfiles. This data is not stored together with other personal data relating to the website visitor.

The legal basis for the temporary saving of the data and logfiles is Article 6 (1) lit. f GDPR. The data is saved in log files in order to ensure the functional capability of the website. In addition, the data serves to optimise the web pages, eliminate faults and ensure the security of our IT systems. These purposes also constitute our legitimate interest in data processing according to Article 6 (1) lit. f GDPR.

The data is deleted as soon as it is no longer required in order to fulfil the purpose of its collection. In the case of the collection of the data for the purpose of providing the website, this applies when the session in question is finished. In the case of saving data in logfiles, this applies after a maximum of seven days.

Data collection for the purpose of providing the website and the saving of data in logfiles are essential to operate the website. It is therefore not possible for the website visitor to object.

2. Newsletter and SHARE User Support

If you have decided to subscribe to the SHARE newsletter or to contact the SHARE User Support the required personal data are stored. As a rule, this includes your email address, first and last names as well as other data needed to deliver the newsletter or to respond to your inquiries. Your data are used only in order to provide you with the desired offer to your satisfaction and in order to respond to your inquiries.

The legal basis for processing of personal data of newsletter subscribers or persons requesting SHARE user support is consent of the respective person according to Article 6 (1) lit. a GDPR. The data is deleted as soon as it is no longer required in order to fulfil the purpose of the data processing.

The SHARE newsletter is issued several times a year via email to provide an overview of activities across the project and comprises a central newsletter published by the central SHARE Coordination Team and, where available, a national newsletter published by the respective national SHARE Country Teams. By subscribing for the SHARE newsletter you agree to receive these emails.

If you wish to cancel your subscription to the SHARE newsletter, you can send us an email with the subject "Unsubscribe SHARE newsletter". Unsubscribing is possible at any time. This information on how to unsubscribe is also provided at the end of each newsletter.

Data transmission

By subscribing to the SHARE newsletter you give your consent that SHARE-ERIC stores and processes your personal data and, in particular, may transmit your full name and email address (as well as updates of these details) to the SHARE Country Teams at the national partner institutions of SHARE-ERIC for the purpose of transmission of the central and national SHARE newsletter.

Your personal data will only be transmitted to government organisations and authorities if this is legally required or for prosecution in the event of attacks on our network infrastructure.

Your personal data are not provided to any other third parties for any other purpose.

3. SHARE users and applicants

The legal basis for the processing of personal data of SHARE users and applicants is Article 6 (1) lit. b of the GDPR. The data is deleted as soon as it is no longer required in order to fulfil the purpose of the data processing (performance of the contract). It may also be necessary to continue to store the personal data after the end of the contract in order to fulfil contractual or statutory obligations. As a user, you can cancel the registration at any time. If the data are required to fulfil a contract or to implement pre-contractual measures, early deletion of the data is possible only to the extent that no contractual or statutory obligations prevent such deletion.

Details on how personal data of registered SHARE users and applicants are processed and used are described in the SHARE Conditions of Use (see Section "9. SHARE user data privacy policy").

4. Participants in SHARE interviews and related data collections ("SHARE respondents")

Participation in the "Survey of Health, Ageing and Retirement in Europe" (SHARE) is voluntary. The legal basis for the processing of personal data of SHARE respondents that participate in the study is Article 6 (1) lit. a of the GDPR or, where special categories of data are concerned, Article 9 (2) lit. a of the GDPR (i.e., the SHARE respondent's consent). Details on how personal data of SHARE respondents are processed and used are described in the SHARE Data Protection Statement ("Statement concerning data protection and absolute confidentiality of your personal information" in national language) that is provided to each SHARE respondent prior to each interview.

Information on the responsibilities of the joint controllers in each SHARE country

In each country that is part of the study, SHARE is conducted under the responsibility of the European Research Infrastructure Consortium "SHARE-ERIC" in cooperation with its national Scientific Partner Institutions as joint controllers. SHARE-ERIC and the respective individual national Scientific Partner Institutions have concluded a "Joint Controller Arrangement" (i.e., an agreement on the fulfilment of obligations according to Article 26 GDPR in the case of joint responsibility). More detailed information on the responsibilities of the joint controllers can be found here: "Essence" of the Joint Controller Arrangement according to Article 26 (2) sentence 2 GDPR. (In case you should need assistance in understanding or translating the document, you can contact us via email.)

5. General

Rights of data subjects

As an affected person, whose personal data are processed in the context of the above-mentioned activities, processes and services, you have the following rights in principle, insofar as in individual cases no statutory exceptions apply:

• Right of access by the data subject (Art. 15 GDPR)
• Right to rectification (Article 16 of the GDPR)
• Right to erasure (Article 17 (1) of the GDPR)
• Right to restriction of processing (Article 18 of the GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Article 21 of the GDPR)
• Right to withdrawal of consent (Article 7 (3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

Data protection officer

For inquiries that relate to data privacy and data protection please contact the data protection officer of SHARE-ERIC: DSB-ShareEric@he-c.de