Privacy Statement

Privacy policy according to the General Data Protection Regulation (GDPR)

I. Name and address of the person responsible

Institute for Prehistory and Early History
Christian-Albrechts University Kiel
Johanna-Mestorf-Strasse 2-6
24118 Kiel
Germany
Phone: 0431 880-2067
E-mail: jna@ufg.uni-kiel.de
Website: http://www.ufg.uni-kiel.de

II. Name and address of the data protection officer

Daniela Geißler
Christian-Albrechts-Universität Kiel
Christian-Albrechts-Platz 4
24118 Kiel
Germany
Tel.: +49 431 880-1773
E-Mail: dgeissler@praesidium.uni-kiel.de
Website: http://www.uni-kiel.de/gf-praesidium

III. General information on data processing

1. Description and scope of the processing of personal data

As a matter of principle, we only process the personal data of our users to the extent that this is necessary for the provision of a functioning website and our content and services. The processing of personal data of our users is generally only carried out with the consent of the user. An exception applies in those cases in which it is not possible to obtain prior consent and the processing of the data is permitted by legal regulations.

The personal data of the person concerned will be deleted or blocked as soon as the purpose of the storage no longer applies. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a necessity for the continued storage of the data for the conclusion or fulfilment of a contract.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures. Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our institution is subject, Art. 6 (1) c GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) (d) GDPR serves as the legal basis. If the processing is necessary to protect a legitimate interest of our institution or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) lit. f GDPR serves as the legal basis for the processing.

IV. Provision of the website and creation of log files

1. Description, scope and legal basis of data processing

In order to be able to analyse the use and impact of our journal and the published articles, we collect and log access to the journal's homepage, issues, articles and additional files. All data is anonymised. No personal information is logged. IP addresses are anonymised by hashing (using SHA 256) in combination with a secure, 64-character salt that is automatically randomly generated and overwritten daily. Therefore, IP addresses cannot be reconstructed. By anonymising the data, it is not possible to draw conclusions about your person. Our legitimate interest as well as the legal basis results from Art. 6 para. 1 lit. f GDPR.

The following information is collected in addition to the anonymised IP addresses:
(1) access type (e.g. administrative)
(2) Browser of the user
(3) Date and time of access
(4) URL requested
(5) HTTP status code

2. Purpose of data processing and duration of storage

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session. 

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

3. Possibility of objection and elimination

If you wish, you can opt-out of anonymised data collection here. By clicking on the "Opt-out" button, you can actively decide against participating in the statistical analysis. When you click on the "Opt-out" button, a cookie will be created on your system to store your decision. If your browser's privacy settings cause cookies to be automatically deleted, you will need to opt out again the next time you access this website. The cookie is only valid for one browser. If you use a different browser, you must log out again. No individual information is stored in this cookie.

Please note that the collection of data for the provision of the website and the storage of data in log files, which are absolutely necessary for the operation of the website, are not affected by your decision to decline the detailed evaluation process. The user has no right to object to this.

V. Use of cookies

1. Description, scope and legal basis of data processing

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again. 

We use cookies to make our website more user-friendly, which is also our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. This is also the legal basis for the processing of personal data using cookies. Some elements of our website require that the browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:
(1) language settings
(2) log-in information
(3) search settings

2. Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.

3. Duration of storage, objection and removal options

Cookies are stored on the user's computer and transmitted to our website by the user. Therefore, you as a user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

VI. Registration

1. Description, scope and legal basis of data processing

On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. The data is not passed on to third parties. The following data is collected during the registration process:
(1) First name
(2) Surname
(3) Institutional affiliation (optional)
(4) Country (optional)
(5) E-mail address

In addition, there is the possibility to use radio buttons to indicate the wish for
(6) notification of new publications and announcements and
(7) the role of reviewer
to be stored.

The following data is also stored at the time of registration:
Date and time of registration

As part of the registration process, the user's consent to the processing of this data is obtained.

The legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR when an author contract is made and Art. 6 para. 1 lit. a GDPR in other cases.

2. Purpose of data processing and duration of storage

Registration of the user is necessary for the provision of certain contents and services on our website. This is the only way, for example, for authors to submit their texts to our website and for reviewers to evaluate the submitted texts.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for the data collected during the registration process when the registration on our website is cancelled or modified or when the data is no longer required for the performance of the contract. It may also be necessary to store personal data of the contractual partner after the conclusion of the contract in order to comply with contractual or legal obligations.

3. Possibility of objection and removal

As a user, you have the option of cancelling your registration at any time. You can have the data stored about you changed at any time. To do so, you must log in and change your profile. If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

VII. Rights of the data subject

1. Rights of the user

As a user, you have the right to request information free of charge about what personal data has been stored about you. You also have the right to have inaccurate data corrected and to have processing of your personal data restricted or deleted. If applicable, you can also exercise your right to data portability. If you believe that your data has been processed unlawfully, you can lodge a complaint with the relevant supervisory authority. 

2. Deletion of data

Unless your request conflicts with a legal obligation to retain data, you have a right to have your data deleted. Data stored by us will be deleted if it is no longer necessary for its intended purpose and there are no legal retention periods. If deletion cannot be carried out because the data is required for permissible purposes, data processing will be restricted. In this case, the data will be blocked and not processed for other purposes.

3. Right to information

If you have asserted the right to rectification, erasure or restriction of processing against the person responsible, they are obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right against the person responsible to be informed about these recipients.

4. Right to object

Users of this website may exercise their right to object to the processing of their personal data at any time.

5. Contact

If you wish to have your personal data corrected, blocked, deleted or informed about the personal data stored about you, or if you have any questions regarding the collection, processing or use of your personal data, or if you wish to revoke any consent you have given, please contact us at the following e-mail address: jna@ufg.uni-kiel.de.