Information on data protection in accordance with Art. 13 of the General Data Protection Regulation (GDPR) on kit-pmd-4.ydns.eu

The following information provides you with an overview of the processing of your personal data on kit-pmd-4.ydns.eu and your rights under data protection law. According to Art. 4 No. 1 of the EU General Data Protection Regulation (GDPR), personal data is any information relating to an identified or identifiable natural person.

Table of Contents

    Controller and Data Protection Commissioner

    According to the GDPR (Article 4, No. 7) and other data protection regulations, the controller is:

    Karlsruher Institut für Technologie (KIT)
    Kaiserstraße 12
    76131 Karlsruhe
    Deutschland
    Tel.: +49 721 608-0
    Fax: +49 721 608-44290
    E-Mail: info@kit.edu

    The controller is a public corporation represented by its President.

    The Data Protection Commissioner can be contacted by email at:

    datenschutzbeauftragte@kit.edu

    Accessing the website and server log files (visiting the portal)

    • The anonymized IP address
    • The date and time of access
    • The URL of the retrieved file
    • The amount of data transferred
    • The message indicating whether the retrieval was successful
    • The information about the browser and operating system used
    • The URL of the website from which the access occurred
    • The name of the internet service provider

    Scope and Purpose: When using the website for information purposes only, i.e. when you do not register or transmit other information, we will only collect the personal data that are transmitted by your browser to our server according to the settings made by you. The data serves the technical optimization of the website and to ensure the security of our information technology systems. The IP address is necessary for the operation or delivery of the website, is shortened in the log files, and is no longer available as a whole after the request. A direct conclusion about individual persons is not possible based on this data. A matching with other data records does not take place. We reserve the right to review this data retrospectively if we become aware of specific indications of illegal use.

    Recipient: There is no transfer of data to third parties.

    Legal basis: The legal basis for processing is Art. 6 par. 1 (b), par. 3 (b) GDPR in conjunction with Art. 4 LDSG respectively Art. 20 par. 1 KITG in conjunction with Art. 12 par. 1 LHG.

    Storage duration: The personal data will be stored as long as it is necessary to achieve the purpose for which it was collected. The data will be deleted after a maximum of seven days.

    Example of processing:

    • The collection and processing of this data is carried out for the purpose of providing the platform (establishing a connection), permanently ensuring system security and stability, technical administration of the network infrastructure, optimizing the internet offering, and general statistical evaluation. A personal reference is not possible due to the anonymization of the IP address.
    • The operator collects and stores this data to ensure the management of users and the processing of processes associated with their roles.
    • If a user contacts the operator using the contact details provided in the imprint, personal data will be processed.

    Cookies

    Scope and Purpose: In addition to the above data, cookies will be stored on your computer when using our website. Cookies are small text files stored by the browser you use. From these cookies, we (the server of our website) obtain certain information. We use so-called session cookies (transient cookies) that are technically required to make the website work. The following data is stored and transmitted in the cookies we use:

    • Anonymous user ID as UUID

    Recipient: There is no transfer of data to third parties.

    Legal basis: The legal basis for the processing of personal data using technically necessary cookies in accordance with § 25 (2) TDDDG is Article 6(1)(f) of the GDPR. The legitimate interest of the operator in data processing according to Article 6(1)(f) of the GDPR is also present in the aforementioned purposes.

    Storage duration: The session cookies will be deleted at the latest when you close the browser.

    Contact (Email, Phone, Forms)

    Scope and purpose: If you contact us by e-mail, telephone or via a form, the contact details you provide, such as your e-mail address, telephone number and, if applicable, your name, will be stored for the purpose of processing and responding to your request. We would like to point out that data transmission (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

    Recipient: If necessary for the response to your contact, personal data may be forwarded to responsible parties within the operator. The respective responsible employees of the operator use your personal data solely for processing your inquiry. There is no transfer of data to third parties.

    Storage duration: The personal data will be stored as long as it is necessary to fulfill the aforementioned purpose, meaning the data will be deleted when it can be assumed that further communication is no longer desired.

    Registration process as a user

    Scope and purpose: The operator collects and stores this data to ensure the management of users and the processing of processes associated with their roles. A matching with other data records does not take place. We reserve the right to review this data retrospectively if we become aware of specific indications of illegal use. As part of a registration process as a user, the operator stores the following data provided by the user:

    • Name (last name, first name)
    • Email address
    • Login name (user ID)
    • Password
    • Affiliation (research institutions or project consortia)

    Recipient: Name and login name are visible to members of the same organization assigned to them based on their affiliation. There is no transfer of data to third parties.

    Legal basis: The The legal basis for data processing is Art. 6 para. 1 lit. b GDPR.

    Storage duration: The personal data will be stored as long as it is necessary to achieve the purpose of its collection. They will be permanently removed upon deletion of the user account.

    If we link to websites outside of kit-pmd-4.ydns.eu , the data protection notices and statements there apply.

    Encrypted transmission (TLS encryption)

    This site uses TLS encryption to protect the transmission of all content, including the requests you send to us as the site operator. With TLS encryption, the data you transmit to us cannot generally be read by third parties. Please note, however, that when data is transmitted over the Internet, it is never possible to guarantee complete protection against access by third parties.

    How do we process this data?

    Your personal data is stored with us. Any use of personal data occurs only for the purposes mentioned above and only to the extent necessary to achieve these purposes. We employ technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss, or alteration, as well as against unauthorized disclosure or access. Our security standards are always in line with the latest technological developments.

    Under what conditions can we pass your data on to third parties?

    • Without the user's explicit consent, the operator will not pass on personal data to third parties.
    • The exception applies insofar as the transmission to state authorities or agencies is required by a mandatory national legal provision or if the transfer is necessary in the event of attacks on the operator's network infrastructure for legal or criminal prosecution.

    Your rights

    As far as your personal data are concerned, you have the following rights:

    • Right to revoke your consent with effect for the future, provided that processing is based on a consent according to Article 6, par. 1, sub-par. 1, a GDPR (Article 7, par. 3 GDPR).
    • Right to confirmation whether data about you are processed and right to information about the data processed and about data processing as well as right to obtain copies of the data (Article 15 GDPR).
    • Right to rectification or completion of incorrect or incomplete data (Article 16 GDPR).
    • Right to immediate erasure of your personal data (Article 17 GDPR).
    • Right to restriction of processing (Article 18 GDPR).
    • Right to data portability in a structured, standard, and machine-readable format, if processing is based on a consent according to Article 6, par. 1, sub-par. 1, a or Article 9, par. 2, a or on an agreement according to Article 6, par. 1, sub-par. 1, b (Article 20 GDPR).
    • Right to object to the future processing of your personal data, if the data are processed accord-ing to Article 6, par. 1, e or f GDPR (Article 21 GDPR).
    • Right to complain

      In addition, you have the right to complain about the processing of your personal data by the controller of this website with its super-visory authority (Article 77 GDPR). According to Article 25, par. 1, LDSG (State Data Protection Act), the su-pervisory authority of the controller of this website according to Article 51, par. 1 GDPR is:

      Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg
      Königstraße 10a
      70173 Stuttgart
      poststelle@lfdi.bwl.de
      Germany

    As of: 02.2025