Information about the responsible body
The person responsible within the meaning of the General Data Protection Regulation and national data protection laws as well as other data protection regulations is
Ulm University of Technology
University of Applied Science
Prittwitzstrasse 10
D-89075 Ulm
The Ulm University of Technology is a corporation under public law. It is headed by the Rector Prof. Dr. Volker Reuter legally represented.
Contact:
Telephone: +49 (0731) 96537-100
Fax: +49 (0731) 96537-120
Email: info@thu.de
Official data protection officer
Our official data protection officer is Prof. Dr. Markus Schäffter.
Contact:
Email: datenschutzanwalt@thu.de
Telephone: +49 (0731) 96537-278
Fax: +49 (0731) 96537-120
Data processing as part of our website
Scope of processing personal data
As a general rule, we only collect and use personal data from our users to the extent that this is necessary to provide a functional website and our content and services.
The collection and use of information directly relating to our users (name, contact details) is regularly only carried out with the consent of the user. An exception applies in cases in which obtaining prior consent is not possible for actual reasons and the processing of the data is permitted by legal regulations.
Legal basis for processing personal data
To the extent that we obtain the consent of the data subject for processing personal data, Article 6 Paragraph 1 Letter a of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
When processing personal data that is necessary to fulfill a contract to which the data subject is a party, Art. 6 Para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
If the processing of personal data is necessary to fulfill a legal obligation, Article 6 (1) (c) GDPR serves as the legal basis.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) (d) GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest on our part or that of a third party and if the legitimate interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 Paragraph 1 Letter f of the GDPR serves as the legal basis for the processing.
Data deletion and storage period
Personal data will be deleted or blocked as soon as the purpose for storage no longer applies and any statutory retention periods have expired.
Log data that is used to detect misuse or to maintain proper operation will be deleted or overwritten after 6 months at the latest.
Data processing to provide the website: Description and scope of data processing
Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
(1) Information about the browser type and version used
(2) The operating system of the user's computer
(3) The user's Internet service provider
(4) IP address of the user, possibly also the DNS name
(5) Date and time of access
(6) URL of the website from which the user's system accesses our website
(7) URL of the website that is accessed by the user's system via our website
This data is temporarily stored in the log files of our IT systems. This data is not stored together with other personal data of the user.
Legal basis for data processing
The legal basis for the temporary storage of data and log files is Article 6 (1) (f) GDPR.
Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. To do this, the user's IP address must remain stored for the duration of the session.
The data listed is stored in the log files to ensure the functionality of the website. The data also serves us to optimize the website and to ensure the security of our information technology systems. The data will not be evaluated for marketing purposes in this context.
These purposes also include our legitimate interest in data processing in accordance with Article 6 Paragraph 1 Letter f of the GDPR.
Duration of storage / Data retention
The data will be deleted as soon as it is necessary to achieve the purpose of its collection
