1. General Information
The protection of your data is of particular importance to us. We will only use your data within the limits set by the Hessian Data Protection and Freedom of Information Act and the General Data Protection Regulation. The Bavarian Data Protection Act (BayDSG) provides further legal bases for data processing by the Technical University of Munich.
Unless otherwise specified in detail, the service providers and partners mentioned here process your data on the basis of a data processing agreement using the EU Standard Contractual Clauses in accordance with Article 46(2)(c) and (d) of the GDPR. The provider has committed to complying with EU data protection standards.
The following entities are responsible for the processing of your personal data:
University of Kassel
Mönchebergstraße 19, 34109 Kassel
Phone: +49 561 804-0
Email: poststelle@uni-kassel.de
The University of Kassel is a public-law body. It is represented by its President, Prof. Dr Ute Clement.
Data Protection Officer of the University of Kassel
Mönchebergstraße 19, 34109 Kassel
Phone: +49 561 804-7036/-2011
Email: datenschutz@uni-kassel.de
Further general information on data protection at the University of Kassel can also be found here: www.uni-kassel.de/go/datenschutz
Technical University of Munich (TUM) Campus Straubing
Petersgasse 5, 94315 Straubing
Phone: +49 9421 187-0
Email: info@cs.tum.de
The TUM Straubing Campus for Biotechnology and Sustainability is a branch of the Technical University of Munich. It is legally represented by the Rector, Prof. Dr Volker Sieber, and the Managing Director, Dr.-Ing. Norbert Fröhlich. The Technical University of Munich is a public-law corporation. It is legally represented by the President, Prof. Dr Thomas F. Hofmann.
Data Protection Officer of the Technical University of Munich
Arcisstr. 21, 80333 Munich
Phone: +49 89 289-17052
Email: beauftragter@datenschutz.tum.de
2. Your Rights
You have the following rights with respect to us:
a) Right of Access
You have the right to request confirmation from us as to whether we are processing personal data concerning you. You also have the right to access your personal data that we process, pursuant to Article 15 of the GDPR.
b) Right to Rectification
You have the right to have your data corrected and supplemented in accordance with Article 16 of the GDPR.
c) Right to Erasure
You have the right to have your personal data erased without delay (“right to be forgotten”) under Article 17 of the GDPR,
- if the data is no longer needed,
- if you have objected to the processing on the grounds of a specific situation and our legitimate interests do not override yours,
- if the data is being processed unlawfully,
- if erasure is necessary to comply with a legal obligation,
- if you have withdrawn the consent required for the processing of the data.
d) Right to Restriction
You have the right to restrict the processing of your personal data under Article 18 of the GDPR,
- if you contest the accuracy of your personal data while we verify its accuracy.
- if the processing of your personal data is unlawful.
- if we no longer need your data, but you need it to assert, exercise, or defend legal claims.
- if you have objected to the processing of your data and it is still unclear whether our legitimate interest outweighs your interests.
e) Portability
You have the right to data portability in accordance with Article 20 of the GDPR.
f) Withdrawal of Consent for Processing Based on Consent
If we process your personal data for specific purposes based on your consent, you have the right to withdraw your consent at any time, effective for the future.
g) Right to Object under Article 21 of the GDPR
RIGHT TO OBJECT TO PROCESSING BASED ON LEGITIMATE INTERESTS
YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA, IF THE PROCESSING IS BASED ON OUR LEGITIMATE INTERESTS AND YOU HAVE GROUNDS RELATED TO YOUR SPECIFIC SITUATION.
RIGHT TO OBJECT TO DIRECT MARKETING
IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT AT ANY TIME, PURSUANT TO ART. 21(2) of the GDPR, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA.
YOU MAY SUBMIT YOUR OBJECTION AT ANY TIME, WITHOUT FOLLOWING ANY SPECIFIC FORMAT, TO THE CONTACT INFORMATION PROVIDED.
h) How do I exercise my rights?
You can exercise all of your rights, for example, by sending an email to the contact information listed above; however, you can also contact us by mail, by phone, or in person.
i) Right to File a Complaint
You also have the right to file a complaint with a supervisory authority, in particular with the State Data Protection Commissioner responsible for us:
The Hessian Commissioner for Data Protection and Freedom of Information
P.O. Box 3163, 65021 Wiesbaden
Email: Poststelle@datenschutz.hessen.de
Phone: 0611 14080
The Bavarian State Commissioner for Data Protection
P.O. Box 22 12 19, 80502 München
Email: poststelle@datenschutz-bayern.de
Phone: 089 212672-0
3. Data Collection When Using Our Website
3.1. What data is collected when you visit our website?
To create an account on our website and/or use our feedback feature, you only need to provide your name and organization. As a result, only the following data is collected:
- Name
- Your Organization
- Email address
- IP address
3.2. For what purpose is this data collected?
Our website provides access to the results of a university project. With your account, you gain access to a case database and a software prototype. When you enter data on our website into the designated forms, questionnaires, and free-text fields, or use drop-down menus and selection fields, we store this information. However, your entries when using the software prototype are stored only with your consent. This data is used to further develop and improve the software prototype. As a general rule, this data is used exclusively in anonymized form.
To help us further develop the software prototype, we also provide a feedback form. You can use this form to send comments, suggestions for improvement, and similar feedback to the project team. This data is also used exclusively in an anonymized form.
3.3. On what legal basis does our portal collect and analyze information using the provided tools?
You must check the box to consent to the processing of your data and confirm that you have read and understood this privacy notice.
The legal basis for the processing of your personal data is Article 6(1)(a) of the GDPR, according to which the processing is based on your consent. In addition, we rely on Article 6(1)(f) of the GDPR, which refers to the legitimate interest in conducting scientific research projects aimed at expanding understanding in specific scientific fields and contributing to the general academic knowledge base.
3.4. When do we delete data?
We delete the data we have stored about you after 10 years, in accordance with the principles of good scientific practice. Anonymized entries are stored indefinitely.
3.5. Use of Matomo
Our website uses Matomo, a self-hosted open-source tool, to collect anonymous usage data for this website. Data on visitor behavior is collected to identify potential issues – such as pages that cannot be found, search engine problems, or unpopular pages – and to optimize the user experience. Once the data is processed, Matomo generates reports that are accessible to the operators of this website so they can take appropriate action (layout changes, new content, etc.).
Matomo processes the following data:
- Cookies
- Anonymized IP addresses
- Pseudo-anonymized location (based on the anonymized IP address)
- Date and time
- Title of the page accessed
- URL of the page accessed
- URL of the previous page (if permitted)
- Screen resolution
- Local time
- Files that were clicked on and downloaded
- External links
- Page load time
- Country, region, city
- Browser’s primary language
- Browser’s user agent
- Interactions with forms (but not their content)
4. Data Collection and Processing When Visiting our Website
4.1. Log Files
When you access this site, the following information is stored in log files:
- Name of the file accessed,
- Date and time of access,
- Confirmation of successful access,
- IP addresses of the requesting computers.
This data is not combined and therefore does not allow for any conclusions to be drawn about specific individuals. The log files are deleted after 28 days.
We use these log files for anonymized statistical analysis to optimize our website and its content, to ensure the functionality and security of our IT systems – and thus the protection of the data we process – and, if necessary, to provide law enforcement authorities with the necessary information in the event of attacks on our IT systems. These are our legitimate interests within the meaning of Article 6(1)(f) of the GDPR. We store the data from our server log files separately from any other personal data. They are deleted as soon as they are no longer necessary to fulfill the purpose for which they were stored or if their storage is prohibited for other legal reasons.
The servers are located within the EU. To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL) via HTTPS.
Our legitimate interest in using this service, within the meaning of Article 6(1)(f) of the GDPR, is to ensure the reliable delivery and display of our website, as well as to maintain information security.
4.2. Information about cookies
The session cookies we set are automatically deleted at the end of your visit to our website.
We use cookies to optimize our website. These are small text files stored on your computer via your browser. Cookies contain a unique identifier, known as a cookie ID. This enables the websites and servers you visit to recognize and associate your specific web browser. This allows us to provide you with better access to our site. For example, this recognition prevents you from having to re-enter your login credentials or repeatedly re-enter data if you browse other sites in the meantime. Our legitimate interest in the use of cookies within the meaning of Article 6(1)(f) of the GDPR is to technically optimize the use of our portal. If we have obtained your consent, which you may revoke at any time (e.g., consent to the storage of cookies), processing is based on Article 6(1)(a) of the GDPR.
You do not want that?
All major browsers also offer options for managing cookies on an individual basis. You can install appropriate add-ons or configure your browser to block only third-party cookies, to delete all cookies when you close the browser, or to prevent websites from tracking your user activity in general (Do Not Track).
You can find information for each browser at the following links:
Chrome https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Microsoft Edge https://support.microsoft.com/de-de/help/4027947/microsoft-edge-delete-cookies
Safari https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/
Firefox https://support.mozilla.org/de/products/firefox/protect-your-privacy/cookies
Opera https://help.opera.com/de/latest/web-preferences/cookies
4.3. Data processing for inquiries submitted via our contact form or by email, and use of the feedback feature
If you use the feedback feature or the contact form on our website, or if you send us an email, we will process the personal data you voluntarily provide (e.g., your name and email address) in order to respond to your inquiry.
We will delete or block your data if it is no longer necessary to fulfill the purpose for which it was stored, if its storage is prohibited for other legal reasons, or if you request that your data be deleted or blocked. Our legitimate interest, as defined in Article 6(1)(f) of the GDPR, is to make it easier for visitors to our website to contact us. We process the data on a server located within the EU. To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL) via HTTPS.
Please note that complete data security cannot be guaranteed when communicating via email. With unencrypted emails, there is a possibility that they may be accessed by unauthorized third parties, despite transport encryption.