Privacy Policy for Surveys

For the general website privacy policy, please click here

In the following, we inform you about the collection of personal data when participating in surveys, as well as your related rights. Personal data refers to all data that can be personally associated with you, such as your name, address, email addresses, and user behavior.

1.    Controller according to Article 4(7) of the EU General Data Protection Regulation (GDPR) is: German-American Fulbright Commission, Lützowufer 26, 10787 Berlin, Germany, Tel: +49 (0)30-284443-0, Email: info@fulbright.de

2.    Our Data Protection Officer, Attorney Susanne Klein, Beiten Burkhardt Services GmbH, Ganghoferstraße 33, 80339 Munich, can be contacted by Phone: +49 (0)69-756095-585, Email: Susanne.Klein@bbservices.gmbh

1.    We use the services of SurveyMonkey Europe UC, 2 Shelbourne Buildings, Second Floor, Shelbourne Road, Dublin 4, Ireland ("SurveyMonkey") to conduct surveys. Participation in a survey takes place via a link that we send to you by email for a specific survey. We use SurveyMonkey to gather feedback on your experiences with one of our programs or offerings. Your feedback is important to us to optimize our programs and offerings.

2.    Processing of personal data occurs only if you decide to participate in a survey and click the link provided in the email. In that case, you will be redirected to an external website hosted by SurveyMonkey. There, a connection is made with SurveyMonkey's servers, and SurveyMonkey automatically collects information about the device used. This may include the IP address, your operating system version, device type, device ID/MAC address, system and performance information, and browser type. If you use a mobile device, SurveyMonkey may also collect the UUID of that device. SurveyMonkey also sets cookies in your browser, which may include an individual identifier ("Cookie-ID"). These cookies are used, among other things, to determine who has already participated in a survey, prevent abuse, and correct errors. The cookies are automatically deleted after one year at the latest.

3.    Participation in our surveys is voluntary. When participating in a survey, your responses and inputs are collected and processed. The personal data collected may include information about your name, academic field, (host) university, and the program in which we are supporting you. Additionally, details about the type and location of your accommodation, the associated rental costs, and any additional expenses, such as for food, medicine, study materials, telecommunications, and transportation, may be requested. We conduct surveys to learn about your experiences during your participation in one of our programs and your related living conditions or your experience with other offerings from us. The evaluation of your responses is intended to help us optimize our offerings and improve the programs for future participants. Depending on the survey, you can provide a rating, select from predefined answers, or formulate your own responses. We generally do not collect special categories of personal data and ask you not to transmit any sensitive data when participating in a survey. The collected survey results are not linked with other data.

4.    The aforementioned data is transmitted to SurveyMonkey's servers. Please note that the data may also be transferred to other service providers used by SurveyMonkey, including those outside the EU or EEA, particularly in the USA. If data is transferred to the servers of SurveyMonkey's parent company in the USA (SurveyMonkey Inc., One Curiosity Way, San Mateo, California 94403, USA), this is done based on the adequacy decision of the European Commission according to Article 45 GDPR, as SurveyMonkey Inc. is certified under the EU-U.S. Data Privacy Framework. Any further data transfers to third countries also occur based on adequacy decisions by the European Commission, where legally possible. Additionally, SurveyMonkey has secured data transfers, especially through the conclusion of standard data protection clauses, so these are carried out based on Article 46(2)(c) GDPR.

5.   We have concluded a data processing agreement with SurveyMonkey. The information collected through the survey tool is processed by SurveyMonkey only according to our instructions. The transfer of the collected information to SurveyMonkey and the data processing there is thus carried out on our behalf according to Article 28 GDPR.

6.   We conduct our surveys – using SurveyMonkey – only with your consent. The legal basis for using SurveyMonkey services and the associated data processing is therefore Article 6(1)(a) GDPR. The cookies used by SurveyMonkey on the external survey pages are technically necessary cookies required for the proper and secure execution of the survey. The legal basis for using these cookies is therefore § 25(2) No. 2 TDDD. If you do not agree with the use of SurveyMonkey cookies, please do not participate in the survey. Please note that the subsequent processing and evaluation of the survey results is also based on Article 6(1)(f) GDPR. Our legitimate interest lies in the proper evaluation of the feedback you voluntarily provide by participating in the surveys.

7.   Further information on data processing can be found in SurveyMonkey's privacy policy at: https://surveymonkey.com/mp/legal/privacy/.

Information on the cookies used by SurveyMonkey on the survey pages can be found at: https://surveymonkey.com/mp/legal/survey-page-cookies/.

1.    If you have given consent to the processing of your data, you can revoke this consent at any time in accordance with Article 7(3) GDPR. The revocation of consent does not affect the lawfulness of processing based on consent before its withdrawal.

2.    If we base the processing of your personal data on Article 6(1)(e) GDPR (performance of a task carried out in the public interest) or Article 6(1)(f) GDPR (our legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. If you exercise such an objection, we ask you to explain why we should not process your personal data as we have been. In the case of a justified objection, we will examine the situation and either cease or adjust the data processing or demonstrate our compelling legitimate grounds for continuing the processing (Article 21(1) Sentence 1 GDPR).

3.    You may, of course, object to the processing of your personal data for direct marketing purposes and related data analysis at any time. You can inform us of your objection to advertising by contacting us at:

German-American Fulbright Commission, Lützowufer 26, 10787 Berlin, Germany, Tel. 030-284443-0, Email: data-protection@fulbright.de

1.    You have the right, according to Article 15 GDPR, to request information about the personal data we process about you. In particular, you can request information about the processing purposes, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right to correction, deletion, restriction of processing, or objection, the existence of a right to lodge a complaint, the source of your data if it was not collected from us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.

2.    . In accordance with Article 16 GDPR, you have the right to demand the immediate correction of inaccurate personal data or the completion of incomplete personal data stored by us. You have the right, under Article 17 GDPR, to request the deletion of your personal data stored by us, provided the processing is not necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

3.    According to Article 18 GDPR, you have the right to request the restriction of the processing of your personal data if you contest the accuracy of the data, the processing is unlawful, but you oppose its deletion, we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims, or you have objected to processing under Article 21 GDPR.

4.    You have the right, under Article 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request the transfer of this data to another controller.

5.    Additionally, according to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority regarding the processing of your personal data by us if you believe that the processing does not comply with legal requirements.

Automated decision-making (including profiling) as defined in Article 22 GDPR does not take place with us.