Welcome to the website of the European Hub for Cultural Psychology. The following section outlines how your data is handled in accordance with Article 13 of the General Data Protection Regulation (GDPR) to inform you about data processing procedures when visiting our website.

1. General Information on Data Protection on This Website

We take the continuous protection of your data and our legal obligations in this regard very seriously. This privacy policy explains which data is collected, processed, and used when you visit our website www.cultural-psychology-hub.eu , as well as how we ensure the protection of your data.

Please note that our website contains links that may redirect you to other websites operated by third parties. These third parties are responsible for ensuring compliance with GDPR, and we do not assume responsibility for the protection of your data on these websites. Such links are clearly marked or can be identified by a change in your browser’s address bar.

If you have any questions, please feel free to contact us using the contact details provided in Section 2.

2. Name and Contact Details of the Data Controller and Data Protection Officer

This privacy policy applies to data processing by:

Data Controller:
Sigmund Freud Privatuniversität Wien GmbH
Freudplatz 1
A-1020 Vienna
Email: rektorat@sfu.ac.at
Phone: +43 (0)1 798 40 98

The Data Protection Officer of the European Hub for Cultural Psychology can be reached at the above address, attn. Max Vogel, or via email at max.vogel@sfu-berlin.de.

3. Collection and Storage of Personal Data and Its Use

Personal data refers to any information that can be used to identify a natural person directly, such as name, birthdate, address, or email address.

Disclosure of your identity is required only when you contact us directly through our website. Otherwise, we would not be able to respond to your inquiry. Providing personal data is entirely your choice.

Generally, you can use our website without disclosing your identity. However, if you choose not to disclose certain details, some website features may not be fully available to you.

a) When Visiting the Website

When accessing our website www.cultural-psychology-hub.eu, your browser automatically sends information to our server. This information is stored temporarily in a log file and includes:

• IP address of the requesting device,
• Date and time of access,
• Name and URL of the retrieved file,
• Referring website (Referrer-URL),
• Browser type and version, as well as the operating system and internet service provider.

The data is processed for the following purposes:

• Ensuring a smooth connection to the website,
• Optimizing website usability,
• Analyzing system security and stability,
• Other administrative purposes.

The legal basis for processing this data is Article 6(1)(f) GDPR, based on our legitimate interest in achieving the purposes outlined above. We do not use the collected data to draw conclusions about your identity.

This information is transmitted by your browser unless configured otherwise. Log files are stored for 30 days and then automatically deleted unless required for legal or contractual purposes.

Additionally, we use cookies, analytics tools, and plugins when you visit our website. Further details can be found in Sections 6, 7, and 8 of this privacy policy.

b) Newsletter Subscription

If you have explicitly consented under Article 6(1)(a) GDPR via our consent banner or contact form checkbox, we use your provided email address to send newsletters regularly. Providing an email address is sufficient for receiving the newsletter.

You may withdraw your consent at any time, for example, by clicking the unsubscribe link in any newsletter. Alternatively, you may email your request to max.vogel@sfu-berlin.de.

c) Use of the Contact Form

If you have any inquiries, you can contact us using the form provided on our website. A valid email address and name are required to process your request.

Processing of your data for contact purposes is based on Article 6(1)(b) or (f) GDPR or, where consent is given, on Article 6(1)(a) GDPR.

Your data will be deleted once your inquiry is resolved. You have the right to object under Article 21 GDPR. No data will be shared with third parties.

4. Hosting of the Website

Our website is externally hosted. The personal data collected on this site is stored on the host’s servers. This includes the data listed in Section 3(a).

External hosting ensures a secure, efficient, and reliable service provision (Article 6(1)(b) and (f) GDPR).

If you have given consent, data processing is based on Article 6(1)(a) GDPR. You may withdraw your consent at any time.

We use the following hosting provider:

Hetzner Online GmbH
Industriestr. 25
D-91710 Gunzenhausen

A data processing agreement (DPA) has been concluded with the hosting provider to ensure compliance with GDPR.

5. Data Sharing

a) Your data will only be shared with third parties under the following circumstances:

• You have given explicit consent (Article 6(1)(a) GDPR),
• The transfer is necessary for legal claims (Article 6(1)(f) GDPR),
• There is a legal obligation (Article 6(1)(c) GDPR),
• It is required for contract performance (Article 6(1)(b) GDPR).

b) Data Transfer to Third-Party Service Providers or Abroad

We transfer data as part of contract processing in accordance with Art. 28 GDPR to service providers (see Sec. 4). Furthermore, we do not transfer personal data to a third country outside the EU unless you have consented to such a transfer in the cases mentioned below (see Sec. 8).

6. Use of Cookies

We use cookies on our website, some of which are necessary for the use of this website. These are small files automatically created by your browser and stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not damage your device, nor do they contain viruses, Trojans, or other malware.

Information is stored in cookies that relates to the specific device being used. However, this does not mean that we obtain direct knowledge of your identity. Some cookies contain only information about certain settings and are not personally identifiable. They may also be necessary to facilitate user navigation, security, and the implementation of the website.

The use of cookies serves to make the use of our services more pleasant for you. For example, we use session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our website.

Furthermore, we use temporary cookies to enhance user experience, which are stored on your device for a specified period. If you revisit our website to use our services, it will automatically recognize that you have been with us before and recall the settings and inputs you previously made, so you do not have to enter them again.

We also use cookies to statistically record and analyze the use of our website for the purpose of optimizing our offerings (see Sec. 7). These cookies enable us to recognize that you have visited us before when you return to our website. These cookies are automatically deleted after a predefined period.

The data processed by cookies is necessary for the aforementioned purposes to safeguard our legitimate interests as well as those of third parties in accordance with Art. 6(1) sentence 1 lit. f GDPR. We also use cookies based on Section 25(2) No. 2 TTDSG.

For statistical analysis of website accesses, we use the open-source software Matomo. This software employs cookies stored as text files on your computer, enabling an analysis of your use of the website. The information generated about your website usage is stored on the provider’s server in Germany, with the IP address anonymized immediately after processing and before storage. You can prevent the installation of cookies by adjusting your browser settings accordingly. However, this may result in the inability to use all website functions fully.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or that a warning appears before a new cookie is placed. However, complete deactivation of cookies may result in limited website functionality.

7. Use of Analytics and Tracking Tools for Advertising Purposes

The tracking measures listed below and used by us are carried out based on Art. 6(1) sentence 1 lit. a or f GDPR as well as Section 25(1) TTDSG, provided you have given your consent via our consent banner. This consent is voluntary and can be revoked at any time. We use these tracking measures to ensure a demand-oriented design and continuous optimization of our website. Additionally, we use tracking measures to statistically record website usage and evaluate it for the purpose of optimizing our offerings. These interests are considered legitimate under the aforementioned regulations.

When you visit our website, the third-party providers listed below may retrieve recognition features for your browser or device, evaluate your IP address, store or read recognition features on your device, or access specific tracking pixels. These features can be used by third-party providers to recognize your device on other websites. Furthermore, we may commission third-party providers to display advertisements tailored to the websites you visited on our site.

If you log in with your own user data to third-party providers, there is the possibility of linking recognition features across different browsers and devices (e.g., laptop and smartphone). This allows third-party providers to control our advertising campaigns across different devices.

The respective purposes of data processing and data categories can be found in the descriptions of the corresponding tracking tools.

Matomo

We use the open-source software Matomo for analyzing and statistically evaluating website usage. For this purpose, cookies are used (see Sec. 6). The information generated by the cookie about website usage is transmitted to our servers and compiled into pseudonymous usage profiles. The generated information (IP address, page views, time, and browser and system data) is stored on the provider’s server in Germany. This information is used to evaluate website usage and enable a demand-oriented website design. No data is passed on to third parties.

You can decide whether a unique web analytics cookie may be placed in your browser to allow the website operator to collect and analyze various statistical data.

We store your data for 30 days. Additionally, we delete your data once its necessity ceases unless legal or contractual retention obligations oppose this.

In no case is the IP address linked to other user-related data. IP addresses are anonymized so that no attribution is possible (IP masking).

Your visit to this website is currently being tracked by Matomo Web Analytics. Learn more here (https://matomo.org/privacy-policy/) if you want to prevent Matomo from tracking your visits in the future.

Revocation of Your Consent: You have the right to withdraw your consent at any time with future effect. Until you exercise your right of revocation, our data processing remains lawful.

8. Use of Plugins

On our website, we use social plugins from the social networks Instagram as well as Google plugins such as YouTube and Google Maps. This is based on Article 6 (1) sentence 1 lit. a and f GDPR and Section 25 (1) TTDSG to enhance the visibility of the European Hub for Cultural Psychology or optimize our website’s usability. The underlying promotional purpose constitutes a legitimate interest under the GDPR. The respective providers are responsible for ensuring that their operations comply with data protection regulations.

We integrate these plugins using a two-click method to protect visitors to our website as much as possible. These plugins are only activated with your consent. Once activated, your browser establishes a direct connection with the servers of the respective service provider.

When you activate a plugin, the respective service provider receives your IP address and other data related to your visit to our website, regardless of whether you have an account with that service. If you are logged in, the data may be directly linked to your profile.

We have no control over how and to what extent the respective service processes your personal data once the plugin is activated. However, it is likely that the service provider will create usage profiles from your data and use them for personalized advertising. Additionally, your data may be used to inform other users of the service about your activity on our website.

Integration is based on your consent, as given via our consent banner. Please be aware that embedding many plugins may result in data processing outside the EU or EEA. In some countries, there is a risk that authorities may access your data for security and surveillance purposes without notifying you or allowing you to seek legal recourse. If we use service providers in non-secure third countries and you provide consent, data transfer occurs based on Article 49 (1) lit. a GDPR.

If you no longer wish your personal data to be processed by activated social or Google plugins, you can revoke your consent. Until then, data processing remains lawful.

a) Instagram

Our website also integrates social plugins from Instagram, operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA („Instagram“).

These plugins are identifiable by an Instagram logo, such as an „Instagram camera“ icon.

When you visit a page on our website containing such a plugin, your browser establishes a direct connection to Instagram’s servers. The plugin’s content is transmitted directly from Instagram to your browser and embedded into the website. This allows Instagram to receive information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram account or are not logged in.

This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there. If you are logged into Instagram, your visit may be associated with your Instagram account. If you interact with the plugins, such as by clicking the „Instagram“ button, this information is also transmitted directly to an Instagram server and stored there.

Additionally, this information is published on your Instagram account and displayed to your contacts.

If you do not want Instagram to associate data collected through our website with your Instagram account, you must log out of Instagram before visiting our website.

For more details, please refer to Instagram’s privacy policy: https://help.instagram.com/155833707900388.

b) YouTube

This website integrates videos from YouTube, operated by Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland. When you visit a page that embeds YouTube content, a connection is established with YouTube’s servers, informing them of which pages you visited.

Furthermore, YouTube may store various cookies on your device or use similar technologies (e.g., device fingerprinting) to collect visitor information. This data helps YouTube compile video statistics, improve usability, and prevent fraud attempts. If you are logged into your YouTube account, YouTube can associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.

Using YouTube is in our interest to provide an engaging online presence, provided you have given consent to store cookies or access information on your device. This consent is revocable at any time.

More information on YouTube’s data processing can be found in its privacy policy: https://policies.google.com/privacy?hl=en.

c) Google Maps

This website uses Google Maps, a service provided by Google Ireland Limited. To use Google Maps’ features, your IP address must be stored. This data is usually transferred to and stored on a Google server in the USA.

We have no control over this data transmission. When Google Maps is activated, Google may also use Google Fonts for consistent font display. Your browser downloads the necessary web fonts into its cache for proper text and font rendering.

The use of Google Maps is in our interest to provide a user-friendly and convenient website experience. Your consent to store cookies or access device information is revocable at any time.

For details on Google’s data processing, refer to its privacy policy: https://policies.google.com/privacy?hl=en.

9. Data Subject Rights

You have the right to:

• Request information about your processed personal data (Art. 15 GDPR – Right of Access);
• Request correction of incorrect or incomplete data (Art. 16 GDPR – Right to Rectification);
• Request deletion of your stored personal data (Art. 17 GDPR – Right to Erasure);
• Request restriction of data processing under certain conditions (Art. 18 GDPR – Right to Restriction of Processing);
• Receive your data in a structured, machine-readable format or have it transmitted to another controller (Art. 20 GDPR – Right to Data Portability);
• Withdraw consent at any time, affecting future data processing (Art. 7 (3) GDPR – Right to Withdraw Consent);
• Lodge a complaint with a supervisory authority (Art. 77 GDPR – Right to Lodge a Complaint).

For using your rights, please contact us at max.vogel@sfu-berlin.de

10. Data Security When Using the Website

During your visit to our website, we use the common SSL (Secure Socket Layer) protocol in combination with the highest level of encryption supported by your browser. Typically, this is 256-bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology instead. You can recognize whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

Additionally, we employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

11. Updates and Amendments to This Privacy Policy

This privacy policy is currently valid and has the status of January 2023.

Due to the ongoing development of our website and services or changes in legal or regulatory requirements, it may be necessary to amend this privacy policy. The latest version of this privacy policy can be accessed and printed at any time from our website at https://cultural-psychology-hub.eu/privacy-policy/.

Source:
https://anwaltsblatt.anwaltverein.de/files/anwaltsblatt.de/Dokumente/2018/s0196_1_t8938.html (with modifications)