Privacy Policy

Data Protection Declaration

Last amended: 20/07/2022

This statement provides you with an overview of how your personal data is collected and processed when you use our website and what you can do to improve the protection of your data.

Person responsible for processing, Art. 4 (7) EU General Data Protection Regulation (DS-GVO)

Central Institute for Mental Health (CIMH)
State foundation under public law

Postal address: Zentralinstitut für Seelische Gesundheit, P.O. Box 12 21 20, 68072 Mannheim, Germany

House address: Zentralinstitut für Seelische Gesundheit, J 5, 68159 Mannheim (ladable address)

Phone: 0621 1703-0
Fax: 0621 1703-1205


represented by the foundation board / the foundation board members Prof. Dr. med. Andreas Meyer-Lindenberg (chairman of the board / director) and Dr. Matthias Janta (commercial director), ibidem, chairman of the supervisory board Dr. Carsten Dose, ibidem

Chairman of the Supervisory Board: Dr. Carsten Dose

see also our imprint

Data protection officer

For questions, complaints or assertion of your data protection rights, please use the following address:

Data Protection Officer | Zentralinstitut für Seelische Gesundheit | J 5 | 68159 Mannheim


What is personal data?

Personal data is any information that relates to an identified or identifiable natural person. The decisive factor is therefore whether the data collected can be linked to a person. This includes information such as your name, address, telephone number, e-mail address and user behavior. Information that is not directly associated with your real identity - such as favorite websites or number of users of a site - is not personal data.

How do we collect and process personal data when you visit our website?

When you use the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 I 1 lit. f DS-GVO):

  • IP address
  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status / HTTP status code
  • amount of data transferred in each case
  • Website from which the request comes
  • browser
  • Operating system and its interface
  • Language and version of the browser software
  • How do we use personal data and pass it on?

If the opportunity for the input of personal or business data (e-mail addresses, names, addresses) is given, the input of these data takes place voluntarily. E-mails are transmitted via a contact form. If you send us such a message, your personal data will only be collected to the extent necessary for a reply. The e-mail is transmitted unencrypted. We use the personal data you provide exclusively for the purpose of technical administration of the websites and to fulfill your wishes and requirements, i.e. generally to process the contract concluded with you or to respond to your inquiry. Only if you have given us your prior consent or if you have not objected - as far as this is provided for by legal regulations - we also use this data for product-related surveys, marketing purposes and statistical purposes. Your personal data will not be passed on, sold or otherwise transferred to third parties unless this is necessary for the purpose of processing the contract or you have given your express consent. Any consent given can be revoked at any time with effect for the future.

If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we will also state the defined criteria for the storage period.

How long will your data be stored?

In principle, we store all information that you transmit to us until the respective, e.g. contractual purpose is fulfilled. For example, in the case of inquiries until they have been processed, or in the case of newsletters until you unsubscribe from the newsletter. If a longer storage is provided for by law, the storage takes place within this framework.

When will your data be deleted?

We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations. On the other hand, stored personal data will be deleted if you revoke your consent to storage, if knowledge of the data is no longer required to fulfill the purpose for which it was stored, or if storage is no longer permitted for other legal reasons. Data for billing and accounting purposes are not affected by a deletion request.

You have the following rights with regard to the personal data concerning you:

  • right to information,
  • right to correction or deletion,
  • right to restriction of processing,
  • right to object to processing,
  • right to data portability.

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

Electronic e-mails

When transmitting personal data by e-mail, we would like to point out that the Internet itself does not provide any protection mechanisms and that it is therefore generally not possible to exclude the possibility of third parties gaining knowledge of the data. The data transmitted to us will be used exclusively for the purposes specified to us, will be treated confidentially and deleted immediately after processing your request. No data will be passed on to third parties.

Data protection for applications and in the application process

We collect, process and store the personal data of applicants for the purpose of processing the application procedure. Processing may also take place electronically. This is particularly the case if an applicant sends us the relevant application documents electronically, for example by e-mail. When an employment contract is concluded with an applicant, the transmitted data is stored for the purpose of processing the employment relationship in compliance with the statutory provisions and transferred to the personnel file. If no employment contract is concluded with the applicant, the application documents will be automatically deleted six months after notification of the rejection decision, provided that no other legitimate interests of the controller are opposed to deletion. Other legitimate interests in this sense are, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG). If applicable, applicants will receive an invitation for a so-called "talent pool" for future job advertisements at the Central Institute despite a rejection in a specific application procedure. If the applicant consents, the application data is deleted after one year at the latest. Finally, the storage period is also assessed in accordance with the statutory limitation periods, which can be up to thirty years, for example, in accordance with sections 195 et seq. of the German Civil Code (BGB), with the regular limitation period being three years.

What we do for the security of processing

Our institute takes all necessary technical and organizational security measures to protect your personal data from loss and misuse. For example, your data is stored in a secure operating environment that is not accessible to the public. In certain cases, your personal data is encrypted during transmission using so-called Secure Socket Layer (SSL) technology. This means that the communication between your computer and the servers of our institute takes place using a recognized encryption method if your browser supports SSL.

These are your data protection rights

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, their origin and possible recipients and the purpose of data processing (Art. 15 DSGVO) and, if applicable. a right to rectification of inaccurate data (Art. 16 DSGVO), deletion of this data (Art. 17 DSGVO), the right to restriction of processing in accordance with Art. 18 DSGVO, to object (Art. 21 DSGVO) and the right to data portability of data provided by you in accordance with Art. 20 DSGVO. The restrictions according to §§ 9 and 10 LDSG Baden-Württemberg apply to the right to information and the right to deletion.

In addition, in the event of violations of data protection law, you have the right to lodge a complaint with the competent supervisory authority (Art. 77 DSGVO in conjunction with § 25 LDSG Baden-Württemberg). The competent supervisory authority for data protection issues is the State Commissioner for Data Protection and Freedom of Information of the State of Baden-Württemberg, P.O. Box 10 29 32, 70025 Stuttgart, tel. 0711 6155 41-0, fax 0711 6155 41-15, email: poststelle

How to revoke consent given for data processing

Many data processing operations are only possible with your express consent. You can revoke an already given consent at any time. To do so, simply send an informal e-mail to datenschutzbeauftragter The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Use of cookies

In the course of your visit to our website, we use so-called cookies. These are small text files that are stored on your computer. Cookies help us to determine the frequency of use and the number of users of our Internet pages, as well as to make our offers as convenient and efficient as possible for you. On the one hand, we use so-called session cookies, which are temporarily stored exclusively for the duration of your use of one of our Internet pages. On the other hand, we use permanent cookies to record information about visitors who repeatedly access one of our websites. The purpose of using these cookies is to provide you with an optimal user experience and to recognize you and present you with the most varied website and new content possible when you return. The content of a permanent cookie is limited to an identification number. Name, IP address etc. are not stored. An individual profile of your usage behavior does not take place. It is also possible to use our offers without cookies. You can deactivate the storage of cookies in your browser, limit it to certain websites or set your browser to notify you as soon as a cookie is sent. Please note, however, that if you deactivate cookies, you will have to reckon with a restricted display of the page and a restricted user experience. Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 Para. 1 lit. f DSGVO. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies for the analysis of your surfing behavior) are stored, these are treated separately in this privacy policy.

Use of social media plug-ins

We currently use the following social media plug-ins: Twitter. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the marking on the box above its initial letter or logo. We open up the possibility for you to communicate directly with the provider of the plug-in via the button. Only if you click on the marked box and thereby activate it, the plug-in provider receives the information that you have called up the corresponding website of our online offer. In addition, the data mentioned under § 3 of this declaration will be transmitted. In the case of Facebook, according to the provider in Germany, the IP address is anonymized immediately after collection. By activating the plug-in, your personal data is transmitted to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects the data in particular via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the grayed-out box.

We have no influence on the collected data and data processing operations, nor are we aware of the full scope of data collection, the purposes of processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.

The plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and / or needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins, we offer you the opportunity to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 I 1 lit. f DS-GVO.

The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, your data collected by us will be directly assigned to your account with the plug-in provider. If you click the activated button and link to the page, for example, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid an assignment to your profile with the plug-in provider.

For more information on the purpose and scope of data collection and processing by the plug-in provider, please refer to the privacy statements of these providers, which are provided below. There you will also receive further information about your rights in this regard and setting options for protecting your privacy.


Our website contains links to Twitter. This website is operated exclusively by Twitter International Company, 1 Cumberland St S, Fenian St, Dublin 2, D02 AX07, Ireland. The links are identified by the Twitter logo on our website.

When you visit our website, functions and data transfers to Twitter are not automatically activated. The Twitter plug-ins are only activated when you click on the links, and your browser establishes a direct connection with Twitter servers. If you follow the links and are logged in to Twitter with your user account there at the same time, the information that you have visited our website will be forwarded to Twitter. Instagram can associate your visit to the website with your account. This information is transmitted to Twitter and stored there. To prevent this, you must log out of your Twitter account before clicking on the link.

The purpose and scope of data collection by Twitter and the further processing and use of your data there, as well as your rights in this regard and settings options for protecting your privacy, can be found in Twitter's data protection information:

Changes to privacy policy

Changes may be made to this privacy policy, which will be posted on this page in a timely manner.