DATA PROTECTION INFORMATION

DATA PROTECTION INFORMATION

(Privacy Policy of the Wheat Initiative)

1. Controller

The controller within the meaning of Art. 4(7) GDPR is:

The Wheat Initiative
c/o Julius Kühn-Institut (JKI)
Königin-Luise-Straße 19
14195 Berlin
Germany
Email: wheat.initiative@julius-kuehn.de
Website: https://www.wheatinitiative.org

The EU-based Managing Institution is responsible for the processing of personal data within the framework of the Wheat Initiative.

2. Data Protection Officer

The Data Protection Officer (DPO) of the Managing Institution can be contacted at:

Data Protection Officer
Julius Kühn-Institut
Erwin-Baur-Str. 27
06484 Quedlinburg

Germany
Email: datenschutz@julius-kuehn.de

You may contact the Data Protection Officer at any time regarding questions about data protection.

3. Accessing Our Website

When you visit our website, information is automatically transmitted by your browser to our server.

The following data are processed:

  • IP address

  • Date and time of access

  • Requested page/URL

  • Referrer URL

  • Browser type and version

  • Operating system

  • Internet service provider

Purpose of processing

The processing of this data serves:

  • ensuring secure operation of the website

  • maintaining system security and stability

  • technical administration of the website

Legal basis

Art. 6(1)(f) GDPR (legitimate interest in the secure and functional provision of our website).

Log files are stored for a maximum of 7 days unless longer retention is required for security reasons.

4. Hosting

Our website is hosted by a service provider located within the European Union.

We have concluded a data processing agreement pursuant to Art. 28 GDPR with the hosting provider.

The provider processes personal data only on our behalf and according to our instructions. 

5. Cookies

Our website uses cookies.

Cookies are small files stored on your device when visiting a website.

Essential cookies

These cookies are technically necessary for the operation of the website.

Legal basis:
Art. 6(1)(f) GDPR.

Optional cookies (e.g. analytics)

Optional cookies are only used after you have given consent via the cookie banner.

Legal basis:
Art. 6(1)(a) GDPR.

You can withdraw or modify your consent at any time via the cookie settings.

6. Web Analytics (Google Analytics)

If you provide consent via our cookie banner, we use Google Analytics, a web analytics service provided by:

Google Ireland Ltd.
Gordon House, Barrow Street
Dublin 4, Ireland

Google Analytics helps us understand how visitors use our website and allows us to improve our services.

The following data may be processed:

  • anonymised IP address

  • browser information

  • pages visited

  • usage behaviour

  • timestamps

Legal basis

Art. 6(1)(a) GDPR (consent).

Data transfers

Google may process data on servers located outside the European Union (e.g. in the United States).

Where this occurs, transfers are carried out on the basis of appropriate safeguards pursuant to Art. 44–49 GDPR, such as EU Standard Contractual Clauses.

Further information:
https://policies.google.com/privacy

7. Contact Form and Email Communication

If you contact us via contact form or email, the following data may be processed:

  • Name

  • Email address

  • Organisation

  • Content of your message

  • IP address (technical protection)

Legal basis

  • Art. 6(1)(b) GDPR (pre-contractual communication)

  • Art. 6(1)(f) GDPR (legitimate interest in communication)

Data will be deleted once the inquiry has been resolved unless statutory retention obligations apply.

8. Membership and Expert Working Groups (EWG)

When you become a member, representative or Expert Working Group participant of the Wheat Initiative, we process:

  • name and title

  • institutional affiliation

  • professional contact details

  • role within the Wheat Initiative

Purpose of processing

  • organisation and coordination of Wheat Initiative activities

  • governance and internal communication

  • scientific networking and collaboration

  • implementation of the Wheat Initiative Charter

Legal basis

  • Art. 6(1)(b) GDPR (membership / participation)

  • Art. 6(1)(f) GDPR (legitimate interest in coordination and collaboration)

Access to data

Access to personal data is limited to:

  • the Wheat Initiative Secretariat

  • representatives of member institutions acting within the framework of the Wheat Initiative.

Personal data are not used for purposes outside the Wheat Initiative and are not transferred to third parties for independent use.

9. International Nature of the Wheat Initiative

The Wheat Initiative is an international research network.

Access to personal data by members located outside the European Union may occur in the context of Initiative activities.

Where personal data are transferred to third countries, such transfers are carried out in accordance with Art. 44–49 GDPR and appropriate safeguards (e.g. Standard Contractual Clauses).

Processing remains under the responsibility of the EU-based Managing Institution.

10. Social Media Links

Our website contains links to external social media platforms (e.g. X, Bluesky, LinkedIn).

These links are implemented as simple external hyperlinks.

When visiting our website, no personal data are transmitted to these platforms.

A data transfer to the respective provider only occurs when you actively click on the link and access the external platform.

The respective social media provider is then responsible for further data processing on its website.

Legal basis:
Art. 6(1)(f) GDPR (legitimate interest in public communication).

11. Embedded YouTube Videos

Some pages of our website contain videos hosted on YouTube, a service provided by:

Google Ireland Ltd.
Dublin, Ireland.

To protect your personal data, YouTube videos are not loaded automatically when you visit our website.

Instead:

  • Videos are displayed using a placeholder image and an information notice.

  • A connection to YouTube servers is established only after you actively click the “Load video” button.

Before loading the video you will see a notice stating:

“This video is hosted by YouTube. By clicking ‘Load video’, personal data (e.g. your IP address) may be transmitted to YouTube.”

Only after clicking the button will the YouTube video be loaded and a connection to YouTube servers established.

In this process personal data such as your IP address may be transmitted to Google.

If you are logged into a Google or YouTube account at that time, Google may associate your viewing behaviour with your user account.

The legal basis for loading the video after your interaction is:

Art. 6(1)(a) GDPR (consent through active user action).

If you do not wish data to be transmitted to YouTube, please do not click the “Load video” button.

Further information:
https://policies.google.com/privacy

12. Recipients of Personal Data

Personal data may be shared with:

  • hosting providers

  • IT service providers

  • tax advisers

  • analytics providers (if consented)

All service providers are bound by data processing agreements pursuant to Art. 28 GDPR.

13. Storage Period

Personal data are stored only for as long as necessary for the respective processing purposes or as required by statutory retention obligations.

14. Your Rights

You have the following rights under the GDPR:

  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to object (Art. 21 GDPR)

  • Right to withdraw consent at any time (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR.

15. Right to Object

If personal data are processed on the basis of Art. 6(1)(f) GDPR, you may object to the processing at any time for reasons arising from your particular situation.

Please contact: wheat.initiative(a)julius-kuehn.de

16. Data Security

We use SSL encryption and appropriate technical and organisational measures in accordance with Art. 32 GDPR to protect personal data against loss, manipulation or unauthorised access.

Security measures are continuously updated in line with technological developments.