Privacy Policy

 

I. Scope

The following data protection declaration refers to the central web offer of www.rptu.de and other official websites of the Rheinland-Pfälzische Technische Universität Kaiserslautern-Landau (RPTU), its organs and institutions. For contents of other providers, to which reference is made, for example, via links, other conditions than those described in this data protection declaration may apply.


II. Contact details of the controller

The controller for the processing of your personal data is:

Rhineland-Palatinate Technical University Kaiserslautern-Landau (RPTU).
Gottlieb-Daimler-Strasse, Building 47
67663 Kaiserslautern

Phone: +49 631 205 0
E-Mail: info[at]rptu.de

The Rhineland-Palatinate Technical University Kaiserslautern-Landau (RPTU) is a public corporation. It is represented by the president, Prof. Dr. Malte Drescher. 

III. Contact details of the data protection officer

You can reach our data protection officer by phone +49 631 205-5698 or by e-mail: datenschutz[at]rptu.de.

The postal address is:

Rhineland-Palatinate Technical University Kaiserslautern-Landau
The data protection officer
P.O. Box 3049
67653 Kaiserslautern

IV. Web Analysis

The RPTU uses the open source software tool Matomo on its websites for statistical evaluation of the accesses, for error detection and to be able to improve its websites continuously. The following data is stored for this purpose:

  • anonymized IP address of the calling system
  • date and time of access
  • web page or file accessed
  • HTTP status code
  • referencing website
  • subpages to which the user is directed from the accessed page
  • frequency the page is accessed
  • web browser used and operating system


This data is only stored on RPTU servers. The data is not passed on to third parties. Due to the anonymization of IP addresses, it is no longer possible to assign them to the calling computer.

The data is deleted as soon as it is no longer required for the analyses. The software sets a cookie for seven days on the user's computer in order to recognise returning visitors.

The legal basis for the collection and evaluation of this data is Art. 6 para. 1 lit. e, Art. 6 para. 3 lit. b , Art. 6 para. 3 lit. b EU General Data Protection Regulation (GDPR) in conjunction with § 3 Rhineland-Palatinate State Data Protection Act (LDSG).

If you do not agree with the storage and evaluation of this data, you can object to its storage and use at any time by mouse click. In this case a so-called opt-out cookie is stored in your browser, which means that Matomo does not collect any session data.

Your objection will only remain effective if you do not delete the Matomo deactivation cookie on your computer. You will have to perform the opt-out again if you use another computer or another web browser. If you have activated the "Do Not Track" setting in your browser, no opt-out is required.

V. Contact forms and e-mail contact
 

On the RPTU website there are contact forms which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. For the processing of the data, your consent is obtained during the sending process and reference is made to this data protection declaration.

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored. If you provide your e-mail address, we assume that we are entitled to contact you by e-mail. Otherwise, please expressly instruct us to use a different form of communication.

In this context, the data will not be passed on to third parties.

The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given his consent.

If the e-mail contact aims at the conclusion of a contract, the legal basis for this processing is Art. 6 para. lit. b GDPR.

We would like to point out that the processing of the data may also be done based on Art. 6 para. 1 lit. e,  Art. 6 para. 3 lit. b GDPR in conjunction with § 3 LDSG. Processing of the personal data provided by you is necessary for the purpose of processing your request within the framework of the public duties and legal obligations incumbent upon us.

The data is used exclusively for processing the conversation; unless further processing is permitted by law. The data is generally deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended.

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. You can revoke your consent and object to the storage via the contact form or by e-mail. All personal data stored in the course of contacting us will be deleted in this case.


VI. Cookies

When accessing individual pages, cookies may be used which are required for the functionality of our content management system (e.g. for password-protected pages and forms). Some elements of our website require that the accessing browser can be identified even after a page change.

These technically necessary cookies are not used to create user profiles and are usually deleted after closing the browser.

You can deactivate or restrict the storage of cookies on your system by the settings in your Internet browser. Cookies already stored can be deleted at any time. If cookies for our website are deactivated or deleted, it is possible that not all functions of the website can be fully used.


VII. Provision of the website and creation of log files

Every time our website is called up and used, data and information are automatically recorded in the log files of our servers. This collection is necessary to ensure proper operation, to detect errors and to detect attacks and malfunctions of our web offer.

The following data is collected during access (access logs):

  •  date and time of access
  •   visited website
  •   referencing website
  •   browser configuration


The following data is collected in case of an error message (error logs):

  •  date and time of access
  •   nature of the error
  •   URL of the called up web page and, if applicable, the referencing web page
  •   IP address of the user
  •   user name in the event of an authentication error for password-protected websites


These data is not stored together with other personal data of the user.

The legal basis for the temporary storage of the data in the log files is Art. 6 para. 1 lit. e, Art. 6 para. 3 lit. b GDPR in conjunction with § 3 LDSG.

The error logs are used exclusively to identify and correct technical errors.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after seven days.


VIII. General information on data processing
As a matter of principle, we process personal data of our users only to the extent necessary to provide a functional website and our contents and services.


Possible legal basis for processing personal data

The legal basis is Art. 6 para. 1 lit. a GDPR, if the data processing of RPTU is based on your consent as a data subject.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as processing of personal data is necessary for compliance with a legal obligation to which the RPTU is subject, Art. 6 para. 1 lit. c, Art. 6 para. 3 lit. b GDPR in conjunction with § 3 LDSG serves as the legal basis.

In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

If the processing is necessary for the performance of a task of the RPTU which is in the public interest or in the exercise of official authority, Art. 6 para. 1 lit. e, Art. 6 para. 3 lit. b GDPR in conjunction with § 3 LDSG serves as the legal basis for the processing.

If the processing is necessary to protect a legitimate interest of the RPTU or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing; unless the RPTU is acting in a sovereign capacity in the relevant processing.


Recipients of personal data
As a matter of principle, your personal data will not be passed on to other bodies or persons, unless required by law.


Storage period
The personal data will be stored until the processing is completed. They are deleted immediately when the stated purpose has been achieved or the procedure concerned has been completed and there is no obligation to archive them. Storage may take place beyond this if this has been provided for by the European or national legislator in Union regulations, laws or other regulations to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires.


Protection of minors
The website is aimed at persons over the age of 16. Persons under the age of 16 should not transmit any personal data to RPTU without the consent of their parents or guardians. Processing can only take place with the appropriate consent or in the context of fulfilling a legal obligation. Insofar as necessary - in particular insofar as chargeable Internet services are used - the date of birth or age is collected. This is pointed out separately in the data protection information of the respective Internet service.

IX. Rights of the data subject

According to the GDPR, every person affected by data processing has the following rights in particular:

  • Right to information about the personal data stored about you and its processing (Art. 15 GDPR).
  • Right to rectification, insofar as data concerning you is incorrect or incomplete (Art. 16 GDPR).
  • Right to erasure of personal data stored about you, insofar as one of the conditions under Art. 17 GDPR applies. However, the right to erasure pursuant to Art. 17 para. 1 and 2 GDPR does not apply, inter alia, if the processing of personal data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority (Art. 17 para. 3 lit. b GDPR).
  • Right to restriction of processing, in particular insofar as the accuracy of the data is contested, for the duration of the verification of accuracy, if the data are processed unlawfully but the data subject requests restriction of processing instead of erasure, if the data subject requires the data for the assertion or exercise of legal claims or for the defense against such and the data therefore cannot be erased, or if, in the event of an objection pursuant to Art. 21, it is not yet clear whether the legitimate interests of the controller outweigh those of the data subject (Art. 18 GDPR).
  • Right to object to the processing of personal data on personal grounds, unless there is a compelling public interest in the processing which overrides the interests, rights and freedoms of the data subject, or the processing is for the establishment, exercise or defense of legal claims (Art. 21 GDPR).


Right to withdraw the declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time. The revocation will only take effect for the future; that is, the revocation will not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.


Right to complain to the supervisory authority
You have the right to complain to the Rhineland-Palatinate State Commissioner for Data Protection and Freedom of Information (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz) if you believe that your personal data is being processed unlawfully by the RPTU.

Postal address:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz

Postfach 3040
55020 Mainz

Website: www.datenschutz.rlp.de


X. Changes to the RPTU Privacy Policy

In order to take into account the current legal requirements and technical changes, as well as to implement our services and offers in a data protection compliant manner, we reserve the right to regularly update this privacy policy. The current status is January 2023.

Please note that only the German version of this Privacy Policy is legally binding. The English version is for information purposes only.