Legal Information

DATENSCHUTZ

Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the EU Member States, as well as other data protection regulations, is: 

German Center for Digital Tasks in Higher Education (DZdA) 

East Bavarian University of Applied Sciences (OTH) Amberg-Weiden 
Represented by the President,Prof. Dr. med. Clemens Bulitta 

Kaiser-Wilhelm-Ring 23  
92224 Amberg  

Phone:+49 (9621) 482-0 
amberg@oth-aw.de 

Contact information for the appointed Data Protection Officer

Martin Hofmann, B.Eng. (FH) 

Kaiser-Wilhelm-Ring 23 
92224 Amberg 
Phone: +49 (961) 382-1709 
datenschutzbeauftragter@oth-aw.de 

A. Data Processing

1. Provision of the Website and Creation of Log Files

Data and information are collected each time this website is accessed or used. This data and information are stored in the server’s log files. The following may be collected: 

  • IP address 
  • Information about the browser type and version used 
  • Date and time of access 
  • User’s Internet service provider 
  • User’s operating system 
  • Websites from which the user’s system accessed our website 
  • Websites accessed by the user’s system via our website 

This data is collected on the basis of Article 6(1)(f) of the GDPR. The controller has a legitimate interest in ensuring the technical integrity and optimization of its website; to this end, server log files must be collected. 

The system must temporarily store the IP address in order to deliver the website to the user’s computer. To do this, the user’s IP address must be stored for the duration of the session. 

Data is stored in log files to ensure the proper functioning of the website, to optimize the website’s content, and to ensure the security of our IT systems. 

The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collected for the purpose of providing the website, this occurs when the respective session ends. 

If the data is stored in log files, this occurs after 28 days at the latest. Storage beyond this period is possible. In such cases, users’ IP addresses are deleted or anonymized so that the client that accessed the site can no longer be identified. 

2. Email Forms

The website contains email forms that can be used for electronic communication. When you use these forms, the data you enter in the form fields is transmitted. Your consent to the processing of this data is obtained as part of the submission process, and reference is made to this Privacy Policy. Furthermore, when consent is obtained, the specific purpose of the data processing is explained. 

The legal basis for the processing of your personal data is your consent (Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, provided that special categories of personal data, such as health data, are provided in the email form). Consent is given voluntarily. The retention period for the data depends on the specific purpose of processing and is indicated separately in the email form. Consent may be withdrawn at any time. 

3. Contact via Email

Visitors can also contact the controller via the email addresses provided on the website. In this case, the user’s personal data transmitted via email will be stored. The data will not be disclosed to third parties. 

The legal basis for the processing is Article 6(1)(e) of the GDPR in conjunction with Article 4 of the Bavarian Data Protection Act (BayDSG), if the processing of the personal data you provide is necessary to handle your request as part of the performance of our duties. The provision of any additional information by you is voluntary and based on your consent pursuant to Article 6(1)(a) of the GDPR. 

The data will be used exclusively for processing the conversation and for the purpose stated in the conversation. 

B. Web Analytics

The website of the controller uses the open-source web analytics service Matomo in Log Analytics mode. 

In this process, usage data is analyzed directly from the server logs. Matomo’s analysis is based on the data stored in the web server’s access log files. These access log files contain information about all requests sent to the server, including details about activity on the website and the devices used to access it. This information is transmitted to the web server by the device used when the website is accessed. The web server does not access the device’s storage in this process. 

No cookies are set in Log Analytics mode. The use of this analytics tool is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. 

Hosting 

We host Matomo exclusively on our own servers, so that all analytics data remains with us and is not shared with third parties. 

C. Cookies

Zur Verwaltung der eingesetzten Cookies und ähnlichen Technologien (Tracking-Pixel, Web-Beacons etc.) und diesbezüglicher Einwilligungen setzen wir das Consent Tool „Real Cookie Banner“ ein. Details zur Funktionsweise von „Real Cookie Banner“ finden Sie unter <a href="/en/“https://devowl.io/de/rcb/datenverarbeitung/“/" rel="“noreferrer“" target="“_blank“">https://devowl.io/de/rcb/datenverarbeitung/</a>. 

The legal basis for the processing of personal data in this context is Article 6(1)(c) of the GDPR and Article 6(1)(f) of the GDPR. Our legitimate interest is the management of the cookies and similar technologies used, as well as the related consents. 

Providing personal data is neither required by contract nor necessary for entering into a contract. You are not obligated to provide personal data. If you do not provide personal data, we will not be able to manage your consents. 

The website operated by the responsible party uses cookies. Cookies are text files that are stored in the user’s web browser or by the web browser on the user’s computer. When a user visits a webpage, a cookie may be stored on the user’s operating system. This cookie contains a unique string that allows the browser to be uniquely identified when the website is visited again. 

There are different types of cookies. First, there is a distinction between first-party cookies and third-party cookies. While first-party cookies are set by the website you are currently visiting—and only that website can read the information stored in these cookies—third-party cookies are set by third parties who are not the operators of this website. The controller does not use third-party cookies. 

In addition, a distinction is made between session cookies and persistent cookies. Session cookies contain information that is stored only temporarily and is automatically deleted when you leave the website. Persistent cookies are automatically deleted after a specified retention period, which may vary depending on the type of cookie. However, you can delete these cookies at any time via your browser settings. 

The purpose of using necessary (including technically necessary) cookies is to make it easier for users to navigate websites. 

The legal basis for storing cookies or for storing information on the end user’s device and accessing such information already stored on the device is provided by the Act Regulating Data Protection and the Protection of Privacy in Telecommunications and Digital Services (TDDDG). In addition, the legal basis for the further processing of the personal data collected in this context is provid d by the General Data Protection Regulation. 

Cookies are stored on the user’s computer and transmitted to us from there. As a user, you therefore have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing the settings in your web browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled on our website, you may not be able to use all of the website's features to their full extent. 

Essential Cookies (Essential Category) 

Essential cookies are set to make a website usable by enabling basic functions, ensuring that the website works properly. The legal basis for processing personal data using cookies to provide specific functions you have requested or to optimize the website for web audience measurement (necessary cookies) is Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in storing necessary cookies to ensure the technically flawless and optimized provision of its services. 

D. Rights of the Data Subject

You have the following rights: 

  • The right to access the personal data we hold about you (Art. 15 GDPR); 
  • The right to have inaccurate or incomplete personal data rectified (Art. 16 GDPR); 
  • The right to erasure of stored personal data, unless processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims (Art. 17 GDPR); 
  • Right to restriction of processing of personal data (Art. 18 GDPR); 
  • Right to data portability (Art. 20 GDPR); 
  • Right to object to processing that serves our legitimate interests, a public interest, or profiling, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims (Art. 21 GDPR); 
  • The right to withdraw your consent to the collection, processing, and use of your personal data at any time, with effect for the future (Art. 7(3) GDPR). As a result, we may no longer continue processing your data based on this consent in the future. 
  • The right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR (Art. 77 GDPR). 

E. Withdrawal of Consent/Objection to Processing

You may withdraw the consent you have given to the controller. der verantwortlichen Stelle können Sie Ihre erteilte Einwilligung widerrufen. 

F. Data Subject Rights

You may exercise your data subject rights, such as the right to access stored data, by contacting datenschutzbeauftragter@oth-aw.de.

 

Scroll to Top