II. Contact details of the controller
Responsible for the processing of your personal data is
Rheinland-Pfälzische Technische Universität Kaiserslautern-Landau
Gottlieb-Daimler-Strasse, Building 47
Tel.: +49 631 205 0
III. Contact details of the data protection officer
You can reach our data protection officer by phone +49 631 205-4434 or by email: datenschutz(at)uni-kl.de
The postal address is:
Rheinland-Pfälzische Technische Universität Kaiserslautern-Landau
IV. Web Analysis
The RPTU uses the open source software tool Matomo on its websites for statistical evaluation of the accesses, for error detection and to be able to improve its websites continuously. The following data is stored for this purpose:
- anonymized IP address of the calling system
- date and time of access
- web page or file accessed
- HTTP status code
- referencing website
- subpages to which the user is directed from the accessed page
- frequency the page is accessed
- web browser used and operating system
This data is only stored on RPTU servers. The data is not passed on to third parties. Due to the anonymization of IP addresses, it is no longer possible to assign them to the calling computer.
The data is deleted as soon as it is no longer required for the analyses.
The software sets a cookie for seven days on the user's computer in order to recognise returning visitors.
The legal basis for the collection and evaluation of this data is Art. 6 (1) lit. e in conjunction with Art. 6 (3) lit. b EU Data Protection Regulation (DSGVO). Art. 6 para. 3 lit. b EU General Data Protection Regulation (DSGVO) in conjunction with. § 3 Rhineland-Palatinate State Data Protection Act (LDSG).
If you do not agree with the storage and evaluation of this data, you can object to its storage and use at any time by mouse click. In this case a so-called opt-out cookie is stored in your browser, which means that Matomo does not collect any session data.
Your objection will only remain effective if you do not delete the Matomo deactivation cookie on your computer. You will have to perform the opt-out again if you use another computer or another web browser. If you have activated the "Do Not Track" setting in your browser, no opt-out is required.
V. Contact forms and email contact
On the RPTU website there are contact forms which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. For the processing of the data, your consent is obtained during the sending process and reference is made to this data protection declaration.
Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored. If you provide your e-mail address, we assume that we are entitled to contact you by e-mail. Otherwise, please expressly instruct us to use a different form of communication.
In this context, the data will not be passed on to third parties.
The legal basis for the processing of the data is Art. 6 para. 1 lit. a DSGVO if the user has given his consent.
If the e-mail contact aims at the conclusion of a contract, the legal basis for this processing is Art. 6 (1) lit. b DSGVO.
We would like to point out that the processing of the data is also based on Art. 6 para. 1 lit. e i.V.m. Art. 6 para. 3 lit. b DSGVO in conjunction with. § 3 LDSG can take place. Processing of the personal data provided by you is necessary for the purpose of processing your request within the framework of the public duties and legal obligations incumbent upon us.
The data is used exclusively for processing the conversation; unless further processing is permitted by law. The data is generally deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended.
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. You can revoke your consent and object to the storage via the contact form or by e-mail. All personal data stored in the course of contacting us will be deleted in this case.
When accessing individual pages, cookies may be used which are required for the functionality of our content management system (e.g. for password-protected pages and forms). Some elements of our website require that the accessing browser can be identified even after a page change.
These technically necessary cookies are not used to create user profiles and are usually deleted after closing the browser.
You can deactivate or restrict the storage of cookies on your system by the settings in your Internet browser. Cookies already stored can be deleted at any time. If cookies for our website are deactivated or deleted, it is possible that not all functions of the website can be fully used.
VII. Provision of the website and creation of log files
Every time our website is called up and used, data and information are automatically recorded in the log files of our servers. This collection is necessary to ensure proper operation, to detect errors and to detect attacks and malfunctions of our web offer.
The following data is collected during access (access logs):
- Date and time of access
- visited website
- referencing website
- browser configuration
The following data is collected in the event of an error message (error logs):
- Date and time of access
- Type of error
- URL of the accessed website and, if applicable, the referencing website
- IP address of the user
- User name in the event of an authentication error for password-protected websites
These data is not stored together with other personal data of the user.
The legal basis for the temporary storage of the data in the log files is Art. 6 para. 1 lit. e in conjunction with. Art. 6 para. 3 lit. b DSGVO in conjunction with. § 3 LDSG.
The error logs are used exclusively to identify and correct technical errors.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after seven days.
VIII. General information on data processing
As a matter of principle, we process personal data of our users only to the extent necessary to provide a functional website and our contents and services.
Possible legal basis for processing personal data
The legal basis is Art. 6 para. 1 lit. a DSGVO, if the data processing of RPTU is based on your consent as a data subject.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as processing of personal data is necessary for compliance with a legal obligation to which the RPTU is subject, Art. 6 para. 1 sentence 1 lit. c in conjunction with. Art. 6 para. 3 lit. b DSGVO in conjunction with. § 3 LDSG as the legal basis.
In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 (1) (d) DSGVO serves as the legal basis.
If the processing is necessary for the performance of a task of the RPTU which is in the public interest or in the exercise of official authority, Art. 6 para. 1 lit. e in conjunction with. Art. 6 para. 3 lit. b DSGVO in conjunction with. § 3 LDSG as the legal basis for the processing.
If the processing is necessary to protect a legitimate interest of the RPTU or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) (f) DSGVO serves as the legal basis for the processing; unless the RPTU is acting in a sovereign capacity in the relevant processing.
Recipients of personal data
Data transfers are made on the basis of law or with your consent. As a matter of principle, your personal data will not be disclosed to third parties unless required by law.
If and to the extent that we involve third parties in the performance of contracts (such as service providers), they will only receive personal data to the extent that the transfer is necessary for the corresponding service.
The personal data will be stored until the processing is completed. They are deleted immediately when the stated purpose has been achieved or the procedure concerned has been completed and there is no obligation to archive them. Storage may take place beyond this if this has been provided for by the European or national legislator in Union regulations, laws or other regulations to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires.
Protection of minors
The website is aimed at persons over the age of 16. Persons under the age of 16 should not transmit any personal data to RPTU without the consent of their parents or guardians. Processing can only take place with the corresponding consent or in the context of fulfilling a legal obligation. Insofar as necessary - in particular insofar as chargeable Internet services are used - the date of birth or age is collected. This will be pointed out separately in the data protection information of the respective Internet service.
IX. Rights of the data subject
According to the DSGVO, every person affected by data processing has the following rights in particular:
- Right to information about the personal data stored about you and its processing (Article 15 DSGVO).
- Right to rectification, insofar as data concerning you is incorrect or incomplete (Art. 16 DSGVO).
- Right to erasure of personal data stored about you, insofar as one of the conditions under Art. 17 DSGVO applies. However, the right to erasure pursuant to Art. 17(1) and (2) of the DSGVO does not apply, inter alia, if the processing of personal data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority (Art. 17(3)(b) of the DSGVO).
- Right to restriction of processing, in particular insofar as the accuracy of the data is contested, for the duration of the verification of accuracy, if the data are processed unlawfully but the data subject requests restriction of processing instead of erasure, if the data subject requires the data for the assertion or exercise of legal claims or for the defense against such and the data therefore cannot be erased, or if, in the event of an objection pursuant to Art. 21, it is not yet clear whether the legitimate interests of the controller outweigh those of the data subject (Art. 18 DSGVO).
- Right to object to the processing of personal data on personal grounds, unless there is a compelling public interest in the processing which overrides the interests, rights and freedoms of the data subject, or the processing is for the establishment, exercise or defense of legal claims (Art. 21 DSGVO).
X. Right to withdraw consent
You have the right to revoke your consent at any time. The revocation will only take effect for the future; that is, the revocation will not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
XI. Right to complain to the supervisory authority
You have the right to lodge a complaint with the Rhineland-Palatinate State Commissioner for Data Protection and Freedom of Information if you believe that your personal data is being processed unlawfully by RPTU.
The Rhineland-Palatinate State Commissioner for Data Protection and Freedom of Information.
P.O. Box 3040