1. AN OVERVIEW OF DATA PROTECTION
The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website, or register to participate in our educational events. The term “personal data” comprises all data that can be used to personally identify you.
For example, we securely maintain your email address to keep you informed about ISCFS activities such as biennial Congress details, abstract submissions, and membership issues. We may send you a direct email as part of personal communication between you and our staff, or confirmation emails may be generated by our abstract processing software, or we may use eblast software to communicate with ISCFS members and others information about ISCFS related activities. Under no circumstances do we share your email with anyone else.
For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included in this document.
Questions about data recording on this website
- Who is the responsible party for the recording of data on this website (i.e., the “controller”)?
- How do we record your data?
We collect your data when you share it with us. This may, for instance, be information you enter in our contact form, or when you register for the Congress. Other data shall be recorded by our IT systems automatically or after you consent to its recording during your website visit. This data comprises primarily technical information (e.g., web browser, operating system, or time the site was accessed). This information is recorded automatically when you access this website.
- How do we use your data?
A portion of the information is generated to guarantee the error-free provision of the website. Other data may be used to analyze your user patterns.
- What rights do you have as far as your information is concerned?
You have the right to receive information about the source, recipients, and purposes of your archived personal data at any time. There is no fee for such disclosures. You also have the right to demand that your data are rectified or removed. If you have consented to data processing, you have the option to revoke this consent at any time, which shall affect all future data processing. Moreover, you have the right to demand that the processing of your data be restricted under certain circumstances. Furthermore, you have the right to lodge a complaint with the relevant supervising agency. Please do not hesitate to contact us at any time if you have questions about this or any other data protection related issues.
Analysis tools and tools provided by third parties
There is a possibility that your browsing patterns will be statistically analyzed when you visit this website. Such analyses are performed primarily with what we refer to as analysis programs. For detailed information about these analysis programs, please consult our Data Protection Declaration below.
We host our website with Mittwald. The provider is the Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany (hereinafter referred to as Mittwald).
We use Mittwald according to Art. 6(1)(f) General Data Protection Regulation (GDPR). We have a legitimate interest in the most reliable depiction of our website possible. If your consent was obtained, processing will occur exclusively based on Art. 6(1)(a) GDPR. This consent may be revoked at any time.
We have a Data Processing Agreement (DPA) with the above-mentioned provider. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors based on our instructions and in compliance with GDPR.
3. GENERAL INFORMATION AND MANDATORY INFORMATION
The operators of this website take the protection of your personal data very seriously. Therefore, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.
Whenever you use this website, various personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains what data we collect and how and for what purpose it is collected and used.
We herewith advise you that the transmission of data via the Internet (i.e., through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third party access. Information about the responsible party (referred to as the “controller” in the GDPR) is in the next section.
The data processing controller of this website is
International Society of Craniofacial Surgery
3400 Civic Center Blvd., PCAM, South Pavilion, 14th Floor
Philadelphia, PA 19104-5127 United States
International Society of Craniofacial Surgery is represented by ISCFS president Dr. Richard Hopper (US) (term: 2021-2023) and his successors as president.
US Phone: +1-603-707-8206
German Phone: +49-89-1890-4618
The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g., names, e-mail addresses).
Information on data transfer to the United States and other non-EU countries.
Among other things, we use tools of companies domiciled in the United States or other countries – from a data protection perspective, non-secure, non-EU countries. If these tools are active, your personal data may potentially be transferred to these non-EU countries and may be processed there. We must point out that in these countries, a data protection level that is comparable to that in the EU cannot be guaranteed. For instance, some US enterprises are under a mandate to release personal data to security agencies and you, as the data subject, do not have any litigation options to defend yourself in court. Hence, it cannot be ruled out that US agencies (e.g., the Secret Service) may process, analyze, and permanently archive your personal data for surveillance purposes. We have no control over these processing activities.
Revocation of your consent to the processing of data
A wide range of data processing transactions are possible subject to your express consent. You can revoke at any time any consent you have already given us. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation. Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR) IN THE EVENT THAT DATA IS PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LODGE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS. (OBJECTION PURSUANT TO ART. 21(1) GDPR). IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).
Right to lodge a complaint with the relevant supervisory agency
In the event of violations of the GDPR, data subjects are entitled to lodge a complaint with a supervisory agency in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to lodge a complaint is in effect regardless of any other administrative or court proceedings available as legal recourse.
Right to data portability
You have the right to demand that we provide to you any data that we automatically process based on your consent, or in order to fulfil a contract to a third party, in a commonly used, machine readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.
SSL and/or TLS encryption
For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption program. You can recognize an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and, also by the appearance of the lock icon in the browser line. If SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.
Information about, rectification and removal of data
Within the scope of the applicable statutory provisions, you have the right to at any time demand information about your archived personal data, its source, and recipients as well as the purpose of the processing of your data. You also have a right to have your data rectified or removed. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time. Right to demand processing restrictions You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, simply contact us. The right to demand restriction of processing applies in the following cases: If you dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data. If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data in lieu of demanding the removal of this data. If we do not need your personal data any longer, and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its removal. If you have raised an objection pursuant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. If it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data. If you have restricted the processing of your personal data, this data, with the exception of archiving, may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union (EU) or an EU member state.
4. RECORDING OF DATA ON THIS WEBSITE
Our website and pages use what the industry refers to as “cookies.” Cookies are small text files that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or they are permanently archived on your device (permanent cookies). Session cookies are automatically deleted once you terminate your visit. Permanent cookies remain archived on your device until you actively delete them, or they are automatically removed by your web browser. In some cases, it is possible that third-party cookies are stored on your device once you enter our site (third party cookies). These cookies enable you or us to take advantage of certain services offered by the third party (e.g., cookies for the processing of payment services). Cookies have a variety of functions. Many cookies are technically essential since certain website functions would not work in the absence of cookies (e.g., the shopping cart function or the display of videos). The purpose of other cookies may be the analysis of user patterns or the display of promotional messages. Cookies, which are required for the performance of electronic communication transactions (required cookies) or for the provision of certain functions you want to use (functional cookies, e.g., for the shopping cart function) or those that are necessary for the optimization of the website (e.g., cookies that provide measurable insights into the web audience), shall be stored according to Art. 6(1)(f) GDPR, unless a different legal basis is cited. The operator of the website has a legitimate interest in the storage of cookies to ensure the technically error-free and optimized provision of the operator’s services. If your consent to the storage of the cookies has been requested, the respective cookies are stored exclusively according to the consent obtained (Art. 6(1)(a) GDPR); this consent may be revoked at any time. You have the option to set up your browser in such a manner that you will be notified any time cookies are placed and to permit the acceptance of cookies only in specific cases. You may also exclude the acceptance of cookies in certain cases or in general or activate the delete function for the automatic removal of cookies when the browser closes. If cookies are deactivated, the functions of this website may be limited. If third-party cookies are used or if cookies are used for analytical purposes, we will separately notify you in conjunction with this Data Protection Policy and, if applicable, ask for your consent.
Consent with Borlabs cookies
Our website uses Borlabs consent technology to obtain your consent to the storage of certain cookies in your browser or for the use of certain technologies and for their data privacy protection compliant documentation.
The provider of this technology is Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg, Germany (hereinafter referred to as Borlabs).
Whenever you visit our website, a Borlabs cookie will be stored in your browser, which archives any declarations or revocations of consent you have entered. This data is not shared with the provider of Borlabs technology. The recorded data shall remain archived until you ask us to remove it, delete the Borlabs cookie on your own, or the purpose of storing the data no longer exists. This shall be without prejudice to any retention obligations mandated by law.
To review the details of Borlabs’ data processing policies, please visit
5. ANALYSIS TOOLS AND ADVERTISING
Google Tag Manager
We use the Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store cookies, and does not carry out any independent analyses. It only manages and runs the tools used to integrated it. However, the Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States. The Google Tag Manager is used according to Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and administration of various tools on the website. If the relevant consent has been requested, the processing is carried out exclusively according to Art. 6(1)(a) GDPR. The consent can be revoked at any time.
This website uses functions of the web analysis service Google Analytics provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. Google may consolidate this data in a profile that is allocated to the respective user or the user’s device. Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. Google Analytics uses various modeling approaches to augment the collected data sets and uses machine learning technologies in data analysis. Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g., cookies or device fingerprinting). The website use information recorded by Google is, as a rule, transferred to a Google server in the United States, where it is stored. This analysis tool is used according to Art. 6(1)(f) GDPR. The operator of this website has a legitimate interest in the analysis of user patterns to optimize both the services offered online and the operator’s advertising activities. If a corresponding agreement has been requested (e.g., an agreement for the storage of cookies), the processing takes place exclusively according to Art. 6(1)(a) GDPR. The agreement can be revoked at any time. Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/
You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link:
For more information about the handling of user data by Google Analytics, please consult Google’s Data.
Contract data processing
We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.
Data on the user or incident level stored by Google linked to cookies, user IDs, or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) will be anonymized or deleted after two months. For details, please click the following link:
6. PLUG-INS AND TOOLS
YouTube with expanded data protection integration
Our website embeds videos from the website YouTube. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in the expanded data protection mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch the video.
Nevertheless, this does not necessarily mean that the sharing of data with YouTube partners can be ruled out as a result of the expanded data protection mode. For instance, regardless of whether you are watching a video, YouTube will always establish a connection with the Google DoubleClick network. As soon as you start to play a YouTube video on this website, a connection to YouTube’s servers will be established. As a result, the YouTube server will be notified about which of our pages you have visited. If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account. Furthermore, after you have started to play a video, YouTube will be able to place various cookies on your device or comparable technologies for recognition (e.g., device fingerprinting). In this way, YouTube will be able to obtain information about this website’s visitors. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud.
Under certain circumstances, additional data processing transactions may be triggered after you have started to play a YouTube video which are beyond our control. The use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6(1)(f) GDPR, this is a legitimate interest. If a corresponding agreement has been requested, the processing takes place exclusively according to Art. 6(1)(a) GDPR. The agreement can be revoked at any time.
Google Web Fonts (local embedding)
This website uses so called Web Fonts provided by Google to ensure the uniform use of fonts on this site. These Google fonts are locally installed so that a connection to Google’s servers will not be established in conjunction with this application.
For more information on Google Web Fonts, please follow this link:
and consult Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en
This website uses the mapping service Google Maps provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. To enable the use of the Google Maps features, your IP address must be stored. As a rule, this information is transferred to one of Google’s servers in the United States, where it is archived. The operator of this website has no control over the data transfer. If Google Maps has been activated, Google has the option to use Google web fonts for the purpose of the uniform depiction of fonts. When you access Google Maps, your browser will load the required web fonts into your browser cache to correctly display text and fonts. We use Google Maps to present our online content in an appealing manner and to make the locations disclosed on our website easy to find. This constitutes a legitimate interest as defined in Art. 6(1)(f) GDPR. If a respective declaration of consent has been obtained, the data shall be processed exclusively according to Art. 6(1)(a) GDPR. This declaration of consent may be revoked at any time. Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and
For more information on the handling of user data, please review Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en