Privacy Policy.
The privacy policy of the Boehringer Ingelheim Foundation describes what personal data are collected by this website www.boehringer-ingelheim-stiftung.de and how these data are processed. The nature, extent, and purpose of the collection and processing of personal data depend on the actions of the user during the visit of this website. In any event, collection and processing of personal data will only take place conformable to the applicable law (e. g. the General Data Protection Regulation, "GDPR").
This website does not employ cookies.
1. General
1.1 Personal data (GDPR, Article 4(1))
Data protection refers to the protection of personal data (hereinafter also referred to as data), which in turn means any information relating to an identified or identifiable natural person. This includes, for example, data such as the person’s name, address, occupation, email address, marital status, telephone number and, if applicable, any Internet user data, such as an IP address.
1.2 Controller (GDPR, Article 4(7))
The controller – i. e. the body responsible for the processing of your personal data within the context of your use of the www.boehringer-ingelheim-stiftung.de website (hereinafter referred to as the website) – is the Boehringer Ingelheim Stiftung, (hereinafter referred to as the BIS, the website operator, or the controller). The controller’s contact details are:
Boehringer Ingelheim Stiftung
Represented by the Executive Committee: Christoph Boehringer (Chairman), Professor Dr Franz-Ulrich Hartl, Dr Dr Michel Pairet, Professor Dr. Jan-Michael Peters
Schusterstr. 46-48
55116 Mainz
Germany
Phone: +49 (0) 6131 / 27 50 8-12
Email: secretariat(at)bistiftung.de
1.3 Contact address for inquiries concerning data protection
data-protection(at)bistiftung.de
1.4 The opportunity to object
If, in accordance with this data protection declaration, you wish to deny the BIS permission to process your data entirely or for particular purposes, you can do so by sending an email to data-protection(at)bistiftung.de. Please note that objecting to such data processing may limit or entirely prevent your use of the website and your ability to access the services offered on it.
2. Scope and purposes of data processing, legal basis, provision of data, and duration of storage
2.1 Access and use of the website
Each time the website and its sub-pages are accessed, usage data is transmitted to the BIS via the user’s respective Internet browser and stored in the BIS server’s log files. The stored data sets include the following information:
- Date and time of access
- Name of the accessed sub-page
- IP address
- Referrer URL (the URL from which you came to the website)
- Amount of data transferred
- The user’s browser product and version thereof
The admissibility of such data processing is governed by Article 6(1)(b) of the GDPR, which states that data processing is lawful if it is “necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.” The data processed by the website operator are required to enable the data subject to access and use the website. This concerns data whose processing is necessary to the use of a given telecommunications medium. In the present case, the data subject would otherwise be unable to access the website.
The log files are evaluated by the BIS in an anonymous state in order to further improve the website and make it more user-friendly, find and correct errors more quickly, and manage server capacities. Performing these evaluations enables the BIS, for example, to identify the time periods in which users particularly favour using the website, and thus provide adequate data transfer resources.
The admissibility of such processing is governed by Article 6(1)(f) of the GDPR, according to which such processing is lawful if it is necessary to safeguard the legitimate interests of the data controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Making available a website that contains information, providing services to customers, and optimising website operation are legitimate interests of the website operator.
After the data subject has ceased using the website, his/her IP address is either deleted or rendered anonymous. Anonymizing an IP address consists of altering it in such a manner that, barring a disproportionately large amount of time, expense, and manpower, it can no longer be attributed to a specific or identifiable natural person.
2.2 Email at the click of a button
At some locations on the website, you are offered the opportunity to open and send an email addressed to the BIS simply by clicking on a “mailto” link. In doing so, the email address associated with your email programme is automatically employed as the sender’s email address. If you do not wish your email address to be accessed in this way, you can change your email programme’s settings to prevent such access.
The admissibility of such data processing is governed by Article 6(1)(b) of the GDPR, which states that data processing is lawful if it is “necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.” In order, however, to contact the website operator by email, it is necessary to provide the website with this personal data.
Once statutory data storage obligations have expired, the processed personal data are deleted by the controller, unless it has a legitimate interest in continuing to store the data. In any event, only those data that are genuinely required to fulfil the purpose in question will continue to be stored. To the extent that it is possible, the personal data will be rendered anonymous.
2.3 The use of cookies
The BIS website does not employ cookies.
2.4 Matomo
The BIS website uses Matomo, a web analytics application, to evaluate user behaviour. When you access and use the website, Matomo employs JavaScript to record your usage data. It collects data including the date and time of your visit to the website, your click behaviour, and the type of browser you use.
The BIS uses this information to evaluate the use of its website and to continuously improve the user experience based on these evaluations.
Such data processing activity is pursuant to Art. 6(1)(f) of the GDPR, whereby processing of such data is lawful if it is necessary for the purposes of legitimate interests pursued by the website controller. The legitimate interests of the BIS here lie in further developing and optimising its website by evaluating the information collected by Matomo, and in improving the user experience based on this information.
It is necessary to provide your personal data to access and use the website.
The personal data collected by Matomo while you use the website is immediately made anonymous and stored for an unlimited period of time. In any event, only those data that are absolutely necessary for fulfilling the aforementioned purposes will remain stored.
2.5 Funding programmes and science prizes
We process the personal data you provide to us as applicant in connection with the Exploration Grants, Plus 3, Rise up!, and Scientific Conferences funding programmes. More information about the use of your personal data can be found here.
In connection with the Heinrich Wieland Prize, we process personal data of the nominator and of the nominee for a prize as provided by the nominator. More information about the use of your personal data can be found here.
The legal basis for the processing of this personal data is Art. 6 (1) b) DSGVO (performance of a contract or a pre-contractural measure).
Some of the personal data provided in this context is subsequently processed by BIS for the purpose of internal analysis. This processing of personal data is based on Art. 6 (1) f) DSGVO (legitimate interest). The legitimate interest lies in the controlling, better and more efficient promotion of scientists and science as well as the optimization of the selection process and the workflows as a whole.
Using this personal data is necessary for the selection and the implementation of the funding programmes. You are therefore required to provide the personal data requested in this context. Without providing this data, we will not be able to decide on the grant.
Sending out information material
We send information about new or changed funding programmes to scientists who have already received funding from BIS and to scientific institutions who might be interested in applying to our funding programmes. We also use publicly available contact information of scientific institutions for this purpose.
The legal basis for processing this personal data is Art. 6 (1) f) DSGVO (legitimate interest). The legitimate interest lies in the more efficient funding of scientists and science.
You may object to receiving information by us (see section 3.5).
2.6 Notice for reviewers
Within the framework of review processes and associated activities, we process personal data of reviewers. Specifically, this may include:
- Business contact information, including your name, title, address, email address and telephone number
- General external and private data concerning your person (gender, nationality etc.)
- Data concerning previous reviews at BIS
- General categorising and assigning data (relation to a further process / proposal etc.)
- Competence data (information concerning knowledge and capabilities, certificates, vocational training completed etc.)
- Declarations (consent, agreement, other declarations relating to a matter which have been submitted etc.)
- Content-related data (for example evaluation of a proposal, assignment to a subject / topic, summaries, possible instances of bias, other content-related matters – countries, key words etc.)
2.6.1 Purposes and legal basis of the processing of personal data of reviewers
To be able to approach and engage suitable persons for the review process, we process the information in our databases of applicants and funded persons, as well as other publicly available information (for example of websites of researchers).
To evaluate funding proposals, reviewers will be asked to submit written reviews to BIS and to participate in review meetings (if applicable). During this process, personal information will be stored, for example your contact for communication.
Personal information from the review process will be made available to the BIS statutory bodies. Prior to an evaluation meeting, the contact details of the reviewers and, if applicable, the scientists under review may be shared to identify potential conflicts of interest and to organize on-site evaluations.
The legal basis for processing the personal data of reviewers is Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures) and Article 6(1)(f) GDPR (legitimate interest).
2.7 Registration to attend the Heinrich Wieland Prize award symposium
Those interested in attending the Heinrich Wieland Prize award symposium can register online at registration.heinrich-wieland-prize.de. BIS uses your data to allow you to participate in the symposium and receive information about it per email.
Our data processor is Christian Golombek/Visual IMAGE, Wehrheim.
The legal basis for processing of personal data is Art. 6 (1) b) GDPR.
Once you have registered, the following personal data will be entered into a list of symposium attendees: your first and last names, institution, city, country, and (optionally) your title. This list may be made available to all registered attendees. Such processing of data is governed by Art. 6, 1(f) of the GDPR (which safeguards the legitimate interests of the BIS). Here, the BIS’s legitimate interest lies in preparing the symposium so that those attending it can network, as well as in its advancement of science.
If you join the symposium personally, pictures, video footage and recordings may be taken by BIS (you will be allowed to express your consent at the symposium) and will be used for documenting and promoting the symposium, the Heinrich Wieland Prize and the work of BIS in general in different media (website, social media). Note that if you do not consent, you may still be part of such footage of the symposium in general. The permissibility of such publication is governed by Paragraph 22 and 23 of the Gesetz betreffend das Urheberrecht an Werken der bildenden Künste und der Photographie (German Law on the Protection of Copyright in Works of Art and Photographs) as it pertains to the consent of the person depicted; whereas the preparation of such photos and video and audio recordings is governed by Art. 6, 1(f) of the GDPR (which safeguards the legitimate interests of the BIS). Here, the BIS’s legitimate interest lies in conducting appropriate public relations work and in the advancement of science associated with this.
Some of the personal data made available by registering for the symposium will subsequently be processed by the BIS for the purpose of internal analysis. Such data processing is governed by Art. 6, 1(f) of the GDPR (which safeguards the legitimate interests of the BIS). Here, the BIS’s legitimate interest lies in optimizing the symposium and improving its planning and controlling, as well as enhancing (internal) workflows during the event, while also better and more efficiently advancing science and networking between scientists.
The personal data you provide when registering an account with the BIS and by registering to attend the symposium will be deleted as soon as it is no longer required for the aforementioned purposes unless such deletion is obstructed by statutory data retention obligations and/or the legitimate interests of the BIS.
2.8 Signing up for the Heinrich Wieland Prize newsletter
If you subscribe to receive the Heinrich Wieland Prize newsletter, the data you enter in the registration form will be transmitted to the responsible data processor. You sign up for the newsletter using a so-called double opt-in procedure, i.e. after registering, you will receive an email asking you to confirm your registration. This confirmation is necessary to avoid registration using someone else’s email address. When registering for the newsletter, the user’s IP address as well as the date and time of registration are saved. This is to prevent misuse of the services or the data subject’s email address. The data will not be passed on to third parties, unless there is a legal obligation to do so. The data is used exclusively for sending the newsletter. The subscription to the newsletter can be cancelled at any time. Likewise, the consent to the storage of personal data can be revoked at any time. For this purpose, each newsletter contains a corresponding link. The legal basis for the processing of data after subscription to the newsletter by the user is Art. 6, 1(a) of the GDPR if the user has given his consent.
BIS uses rapidmail to send and analyse newsletters. The provider is rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg. The data entered upon subscription to the newsletter will be stored on rapidmail’s servers in Germany. If you object to analysis of newsletters by rapidmail, you must unsubscribe from the newsletter. For this purpose, BIS provides a corresponding link in every newsletter message. For the purpose of analysis, emails sent with rapidmail contain a so-called tracking pixel, which connects rapidmail’s servers when the email is opened. This way, it can be determined whether a newsletter message has been opened. Furthermore, BIS can use rapidmail to determine whether and which links in the newsletter message are clicked on. Optionally, links in the email can be set as tracking links with which your clicks can be counted.
The legal basis for data processing is Art. 6, 1(a) of the GDPR. The processor of the data is rapidmail GmbH. The data will not be transferred to third countries.
Duration: The data stored with us as part of your consent for the purpose of the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from both our servers and rapidmail’s servers after you unscubscribe from the newsletter. Data storage by BIS for another purpose (e. g. email addresses for registering for scientific symposia) remains unaffected.
Option to revoke: You have the option to revoke your consent of data processing at any time with future effect. The lawfulness of data processing that has already taken place remains unaffected.
Further data protection information: For more information, see rapidmail’s data security information at https://www.rapidmail.de/datensicherheit (only in German). For more information about rapidmail’s analysis function, please visit the following link: https://www.rapidmail.de/wissen-und-hilfe (only in German).
3. Data subject’s rights to access, to rectification, to erasure, to restriction of processing, to object, and to data portability
3.1 Right to access (GDPR, Article 15)
Upon request, the BIS will inform you whether it is processing any data concerning you. The BIS endeavours to process requests for information promptly.
3.2 Right to rectification (GDPR, Article 16)
You have the right to demand the BIS to correct any inaccurate personal data concerning you without undue delay.
3.3 Right to erasure (GDPR, Article 17)
You have the right to demand the website operator to delete personal data concerning you without undue delay. Further, the operator is obliged to delete personal data without undue delay, provided that one of the reasons stated in Article 17(1)(a-f) of the GDPR applies.
3.4 Right to restriction of processing (GDPR, Article 18)
You have the right to demand the website operator to restrict its processing of your data, when one of the conditions stated in Article 18(1)(a-d) of the GDPR exists.
3.5 Right to object (GDPR, Article 21)
You have the right to object at any time, on grounds relating to your particular circumstances, to any processing of personal data concerning you for any of the purposes stated in points (e) or (f) of Article 6(1) of the GDPR. The website operator will then cease to process the data in question, unless it can demonstrate compelling and defensible grounds for continuing to process the data that override your interests, rights, and freedoms, or unless continuing to process the data serves the purpose of asserting or exercising legal claims, or defending against them.
You also have the right to object, on grounds relating to your particular circumstances, to any processing of personal data concerning you for historical, scientific, or statistical purposes, performed pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out in the public interest.
To notify us of your objection, please use the email address data-protection(at)bistiftung.de.
3.6 Right to data portability (GDPR, Article 20)
You have the right to receive, in a structured, commonly used and machine-readable format, the personal data concerning you that you have provided to the BIS. You also have the right to “transmit those data to another controller without hindrance from the controller to which the personal data have been provided” (i. e. the BIS), provided that the processing is based on consent pursuant to Article 6(1)(a) or Article 9 (2)(a) of the GDPR, or on a contract pursuant to Article 6(1)(b) of the GDPR, and the processing is carried out by automated means.
4. Withdrawal of consent
If you have given the BIS your consent to process your personal data and subsequently withdraw this consent, the lawfulness of any processing of data that has already been performed prior to your withdrawal of consent shall not be affected.
5. Right to lodge a complaint
You have the right to lodge a complaint with the respective supervisory authority.
6. Recipients of personal data
Any data that is gathered in the course of your accessing and using the website, as well as any information you provide when contacting the BIS, is transmitted to the BIS server and stored there. In addition, your data may be supplied to the following categories of recipients:
- Persons at the controller who are involved in the processing of data (e. g. administrative staff, members of the Executive Committee)
- E. g. external peer reviewers, board members
- Contractors (e. g. IT service providers, software support staff)
- Contractual partners of the website operator (e. g. hosting service provider)
7. Links to third-party websites
When visiting the BIS website, content may be displayed that is linked to the websites of third parties. The BIS has no access to the cookies or other functions employed by third parties on their websites, nor can the BIS control these. Such third parties are not subject to the data protection provisions of the website operator.
7 March 2025