Browse: Home   /   Privacy Police

Privacy Police

I. Data Controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Rektor der RWTH Aachen
Templergraben 55
52062 Aachen (house adress)
52056 Aachen (postal adress)
Phone: +49 241 80 1
Fax: +49 241 80 92312
Email:
Website: www.rwth-aachen.de/rektorat

II. Data protection officer

Accessibility of the official data protection officer:

Data protection officer of the RWTH
Templar Trench 55
52062 Aachen (house address)
52056 Aachen (postal address)
Germany
Phone: +49 241 80 93665
Fax: +49 241 80 92678
Email:
Website: www.rwth-aachen.de/datenschutz

III. Data Processing – General Information

1. Scope of processing personal data

RwTH Aachen processes personal data of the users of the site only insofar as this is necessary for the provision of a functional website as well as the content and services. The processing of personal data of the users takes place regularly only with the consent of the user. An exception applies in cases where prior consent is not possible for factual reasons and the processing of the data is permitted by legal regulations.

2. Legal basis for the processing of personal data

Insofar as RWTH Aachen obtains the consent of the data subject for processing transactions of personal data, Art. a EU General Data Protection Regulation (GDPR) as a legal basis.

In the case of the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. b GDPR as the legal basis. This also applies to processing operations required to carry out pre-contractual measures.

Insofar as processing of personal data is necessary for the fulfilment of a legal obligation to which RWTH Aachen is subject, Art. c GDPR as the legal basis.

If the processing is necessary in order to safeguard a legitimate interest of the institution or a third party and the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the first interest, Article 6(1) of the year serves as a matter for the first. f GDPR as the legal basis for processing.

3. Data erasure and storage time

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is omitted. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. A blocking or deletion of the data shall also take place if a storage period prescribed by the above standards expires, unless there is a requirement for further storage of the data for a contract or fulfillment of the contract.

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Every time the website is accessed, the RWTH Aachen system automatically collects data and information from the computer system of the calling computer.

The following data is collected:

  1. Information about the type of browser and the version used
  2. The user's operating system
  3. The user's Internet service provider
  4. The user's IP address
  5. Date and time of access
  6. Websites from which the user's system enters the website
  7. Websites accessed by the user's system through the website

The data is stored in the log files of the university's system. This data, together with other personal data of the user, will not be stored.

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. f DSGVO.

3. Purpose of data processing

The data is used to optimize the website and to ensure the security of information technology systems. An evaluation of the data for marketing purposes will not take place in this context.

4th. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. Normally, this is the case after seven days at the latest. It is possible to store it beyond. In this case, users ' IP addresses are deleted or alienated, so that it is no longer possible to assign the calling client.

5. Possibility of opposition and disposal

The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. There is therefore no possibility of objection on the part of the user.

V. Use of cookies

1. Description and scope of data processing

The website of RWTH Aachen uses cookies. Cookies are text files that are stored in the internet browser or the internet browser on the user's computer system. If a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be clearly identified when revisiting the site.

The following data is stored and transmitted in the cookies:

  • Anonymous IDs to identify the logged-in editors of the website
  • Consent to the use of external services

2. Legal basis for data processing

The legal basis for the processing of personal data using cookies is Art. f DSGVO. In the case of processing of consent in connection with the storage of cookies, this is done on the basis of Art. a GDPR.

3. Purpose of data processing

RWTH Aachen uses the cookies used on the site to identify the logged-in editors of the website, as well as to temporarily store consent to access external services such as Google Maps.

4th. Duration of storage, possibility of objection and disposal

Cookies are stored on the user's computer and transmitted to the site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for the RWTH Aachen website, all functions of the website may no longer be able to be used in full.

VI. Mailing lists

1. Description and scope of data processing

On the website of rwTH Aachen you can subscribe to various free mailing lists. The data from the input mask will be transmitted to the RWTH Aachen University when registering. These are:

  1. Your e-mail address
  2. Your name (optional)
  3. Password (freely selectable)
  4. Language preference

Your consent will be obtained for the processing of the data as part of the registration process.

In connection with the data processing for the mailing lists, the data will not be passed on to third parties. The data will only be used for sending the e-mails.

2. Legal basis for data processing

The legal basis for the processing of the data after registration to the mailing lists by the user is Art. 6 sec. 1 lit. a GDPR.

3. Purpose of data processing

The purpose of collecting the user's e-mail address is to deliver the e-mails.

4th. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. The user's data is therefore stored as long as the subscription to the mailing list is active.

5. Possibility of opposition and disposal

The subscription to the mailing list can be cancelled by the affected user at any time. For this purpose, a corresponding link can be found in each e-mail sent via the mailing list. The user will also receive a monthly membership reminder with links to delete and edit the settings of his or her membership.

VII. Contact form and email contact

1. Description and scope of data processing

A feedback form is available on the website of RWTH Aachen, which can be used for electronic contact. If a user takes advantage of this possibility, the data entered in the input mask is transmitted and stored. This data is:

  1. Title
  2. Name
  3. Address (optional)
  4. E-mail address
  5. Telephone (optional)

Furthermore, forms can be used for various registration and contact purposes, which in each case request data tailored to the occasion from the user.

For the processing of the data, the consent of the user is obtained during the sending process and reference is made to this data protection declaration.

Alternatively, it is possible to contact the e-mail address provided. In this case, the personal data of the user transmitted by the e-mail will be stored.

In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.

2. Legal basis for data processing

The legal basis for the processing of the data is Art. a GDPR.

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. f DSGVO.

3. Purpose of data processing

The processing of personal data from the input mask is used by RWTH Aachen solely for the processing of contact. In the case of e-mail contact, this also requires the necessary legitimate interest in processing the data.

The other personal data processed during the sending process are used to prevent misuse of the contact form and to ensure the security of the university's information technology systems.

4th. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. For the personal data from the contact form input mask and those sent by email, this is the case when the respective conversation with the user is over. The conversation ends when it can be seen from the circumstances that the matter in question has been finally resolved.

5. Possibility of opposition and disposal

The user has the option at any time to revoke his consent for the processing of the personal data. If the user contacts RWTH Aachen via e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot continue.

The e-mail contact for the revocation of the consent and the objection of the storage can be made via the following address: .

All personal data stored in the course of contact will be deleted in this case.

VIII. Google maps

On the website of the RWTH Aachen University, geographical information for contact and access purposes is displayed in the RWTH Navigator. The Navigator is based on the Google Maps API, which is used by Google Inc., 1700 Amphitheatre Parkway, Mountain View, CA 94043. By calling the map service, Google can determine your IP address and the language of the system, as well as various browser-specific information.

The requested geographic locations are transferred directly to the service from the navigator's menu. When calling the page with a GPS-enabled device, the location location can also be transmitted. Further personal data will not be transferred to Google.

Google uses cookies. The data processing processes as well as the purposes of the processing can be requested and viewed directly from Google.

When you access the RWTH Navigator, you will be asked for your consent to use the Map Service under these conditions. You can revoke this declaration of consent at any time.

The use of Google Maps is carried out in the interest of a quick find-out of the institutions represented on the websites of the RWTH Aachen. The legal basis is the legitimate interest in accordance with Art. f DSGVO.

IX. Youtube

The website of RWTH Aachen uses plugins of the Google-operated site YouTube. The site is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you visit any of our sites equipped with a YouTube plugin, connect to the servers of YouTube is made. The YouTube server will be told which of our pages you have visited.

If you are logged into your YouTube account, you can allow YouTube to assign your browsing behavior directly to your personal profile. You can prevent this by you log out from your YouTube account.

The use of YouTube is in the interest of an appealing presentation of our online offers. The legal basis is the legitimate interest in accordance with Art. f DSGVO.

For more information on how to handle user data, please refer to YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

X. Rights of the data subject

If personal data is processed by you, you are a data protection in the social security of the GDPR and you have the following rights towards the controller:

1. Right

You can request confirmation from the controller as to whether personal data concerning you is processed by RWTH Aachen.

If such processing is available, you may request the following information from the controller:

  1. the purposes for which the personal data are processed;
  2. the categories of personal data that are processed;
  3. the recipients or categories of recipients to whom the personal data concerning you has been or is still being disclosed;
  4. the planned duration of the storage of the personal data concerning you or, if specific information is not possible, criteria for determining the storage period;
  5. the existence of a right to rectification or erasure of personal data concerning you, a right to restrict processing by the controller or a right to object to such processing;
  6. the existence of a right of appeal to a supervisory authority;
  7. all available information on the origin of the data if the personal data are not collected from the data subject;
  8. the existence of automated decision-making, including profiling in accordance with Article 22(1) and (4) GDPR and, at least in such cases, meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organisation. In this context, you may request that you be informed of the appropriate guarantees in accordance with Article 46 GDPR in connection with the transmission.

This right of access may be limited to the extent that it is likely to make it impossible or seriously impeded to the realisation of research or statistical purposes and the restriction is necessary for the fulfilment of research or statistical purposes.

2. Right to correction

You have the right to correct and/complete or to the person responsible, provided that the processed personal data that concerns you is incorrect or incomplete. The controller must make the correction without delay.

Their right to rectification may be limited to the extent that it is likely to make the implementation of research or statistical purposes impossible or seriously impaired and the restriction is necessary for the performance of research or statistical purposes.

3. Right to restrict processing

You may request the restriction of the processing of personal data concerning you under the following conditions:

  1. if you dispute the accuracy of the personal data concerning you for a period that allows the controller to verify the accuracy of the personal data;
  2. the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data;
  3. the controller no longer needs the personal data for the purposes of the processing, but you need it to assert, exercise or defend legal claims, or
  4. if you have objected to the processing in accordance with Art. 21 sec. 1 GDPR and it is not yet clear whether the legitimate reasons of the controller outweigh your reasons.

Where the processing of personal data concerning you has been restricted, such data may be processed, except for its storage, only with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.

If the restriction of processing has been restricted according to the above conditions, you will be informed by the controller before the restriction is lifted.

Their right to restrict processing may be limited to the extent that it is likely to make it impossible or seriously impeded to the realisation of research or statistical purposes and the restriction is necessary for the performance of research or statistical purposes.

4th. Right to erasure

a) Obligation to delete

You may require the person responsible to delete the personal data concerning you immediately, and the person responsible is obliged to delete that data immediately if one of the following reasons applies:

  1. The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
  2. You revoke your consent, to which the processing in accordance with Art. a or Art. A GDPR and lacks another legal basis for processing.
  3. You object to the processing in accordance with Art. 21 sec. 1 GDPR and there are no primary legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 sec. 2 GDPR.
  4. The personal data concerning you has been processed unlawfully.
  5. The erasure of personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.
  6. The personal data concerning you have been collected in relation to the information society services offered in accordance with Article 8(1) GDPR.

b) Information to third parties

If the controller has made the personal data concerning you public and is obliged to delete them in accordance with Art. 17 sec. 1 GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to inform data controllers who process the personal data that you, as a data subject, have requested from them the deletion of all links to such personal data or from copies or replications of that personal data.

c) Exceptions

The right to deletion does not exist as far as processing is necessary

  1. the exercise of the right to freedom of expression and information;
  2. to fulfil a legal obligation requiring processing under the law of the Union or the Member States to which the controller is subject, or to carry out a task which is in the public interest or in the exercise of official authority delegated to the controller;
  3. for reasons of public interest in the field of public health in accordance with Article 9(2) lit. (h) and i and Article 9(3) GDPR;
  4. for archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) GDPR, insofar as the law referred to in section (a) is likely to make the achievement of the objectives of such processing impossible or seriously impairs, or
  5. for the assertion, exercise or defence of legal claims.

5. Right to be informed

If you have asserted the right to rectification, erasure or restriction of the processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed, this rectification or deletion of the data or restriction of the processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed of these recipients in respect of the controller.

6. Right to data portability

You have the right to receive the personal data that you have provided to the person responsible in a structured, common and machine-readable format. You also have the right to transmit this data to another person responsible without obstruction by the person responsible for whom the personal data was provided, provided that

  1. the processing on a consent pursuant to Art. a GDPR or Art. a GDPR or on a contract in accordance with Art. b GDPR and
  2. processing is carried out using automated procedures.

In exercising this right, you also have the right to obtain that the personal data relating to you be transmitted directly by another person responsible, as far as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to data portability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.

7. Right to object

You have the right, for reasons arising from your particular situation, at any time against the processing of personal data concerning you, which is subject to Article 6(1) of the Year. Ee or f GDPR is made to appeal; This also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you, unless he can prove compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves the purpose of the assertion, exercise or defence of legal claims.

If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is related to such direct marketing.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the opportunity to exercise your right to object in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.

You also have the right, for reasons arising from your particular situation, to object to this in the processing of personal data concerning you for scientific or historical research purposes or for statistical purposes in accordance with Art. 89(1) GDPR.

Their right to object may be limited to the extent that it is likely to make the implementation of research or statistical purposes impossible or seriously impaired and the restriction is necessary for the fulfilment of research or statistical purposes.