Privacy

1 Responsible for data processing

The person responsible within the meaning of the Basic Data Protection Regulation and other national data protection laws of the member states as well as other data protection provisions is:

Rector of the RWTH Aachen
Templergraben 55
52062 Aachen (Address)
52056 Aachen (Postal address)
Phone: +49 241 80 1
Fax: +49 241 80 92312
E-Mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
Website: www.rwth-aachen.de/rektorat

2 Data protection officer

Accessibility of the data protection officer appointed by the authorities:

Data Protection Officer of RWTH
Templergraben 55
52062 Aachen (Home address)
52056 Aachen (Postal address)
Germany
Phone: +49 241 80 93665
Fax: +49 241 80 92678
E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
Website: www.rwth-aachen.de/datenschutz

3 General information about data processing

3.1. scope of processing of personal data

The RWTH Aachen processes personal data of the users of the site only to the extent necessary to provide a functional website as well as content and services. The processing of users' personal data is regularly only carried out with the user's consent. An exception applies in those cases in which prior consent cannot be obtained for actual reasons and the processing of the data is permitted by statutory provisions.

3.2. legal basis for the processing of personal data

Insofar as RWTH Aachen University obtains the consent of the data subject for the processing of personal data, Art. 6 Para. 1 lit. a EU Data Protection Ordinance (DSGVO) serves as the legal basis.

Article 6 para. 1 lit. b DSGVO serves as a legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is required to fulfil a legal obligation to which RWTH Aachen University is subject, Art. 6 Para. 1 lit c DSGVO serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of the university or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f DSGVO serves as legal basis for the processing.

3.3 Data erasure and storage time

The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. In addition, the data may be stored if the European or national legislator has provided for this in EU ordinances, laws or other regulations to which the person responsible is subject. The data shall also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless it is necessary for the further storage of the data for the conclusion or performance of a contract.

4 Provision of the website and creation of log files

4.1. description and scope of data processing

Each time the website is accessed, the RWTH Aachen University system automatically collects data and information from the computer system of the accessing computer.

The following data will be collected:

  • Information about the accessing device: operating system, browser incl. version information;
  • If applicable: the website from which you were redirected to our website (referrer information);
  • Date and time of the access;
  • IP (Internet Protocol) address of the device used to access our Internet presence; the IP address is only recorded in a limited way for 2 bytes (e.g. "192.168.xxx.xxx");
  • File request

The data is stored in the log files of the university's system. These data will not be stored together with other personal data of the user.

4.2 Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f DSGVO.

4.3 Purpose of data processing

The data serve to optimise the website and to ensure the security of the information technology systems. The data is not evaluated for marketing purposes in this context.

4.4. duration of storage

The data are deleted as soon as they are no longer required for the purpose of their collection. This is normally the case after seven days at the latest. Storage going beyond this is possible. In this case the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

4.5. possibility of opposition and elimination

The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no possibility for the user to object.

5 Use of cookies

5.1. description and scope of data processing

Our website uses session cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user calls up a website, a session cookie can be stored on the user's operating system. This session cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

We use session cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The following data is stored and transmitted in the session cookies:

  • Language settings
  • Log-In-Status

You are entitled to the rights of data subjects mentioned in section 7 under the conditions described in more detail.

To protect your personal data, we do not use web analysis tools on our website.

5.2 Legal basis for data processing

The legal basis for the processing of personal data using session cookies is Art. 6 para. 1 lit. f DSGVO.

5.3 Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized also after a page change. The user data collected by technically necessary cookies are used not to create user profiles.

In these purposes also our legitimate interest lies in the processing of personal data according to Art. 6 Para. 1 lit. f DSGVO.

5.4. duration of storage, possibility of opposition and elimination

Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, you as a user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that all functions of the website can no longer be used to the full extent.

6 Integration of map material

We do not use maps of other service providers on our pages.

7 Web analysis by Matomo

Scope of processing of personal data: On our website we use the open source software tool Matomo to analyse the surfing behaviour of our users. The software sets a cookie on the user's computer (for cookies see above). If individual pages of our website are accessed, the following data is stored:

(1) Two bytes of the IP address of the calling system of the user

(2) The web page called up

(3) The website from which the user has accessed the called website (referrer)

(4) The subpages that are called from the called web page

(5) The length of stay on the website

(6) The frequency of the call of the web page

The software runs exclusively on the servers of our website. A storage of the personal data of the users takes place only there. The data will not be passed on to third parties.

The software is set so that the IP addresses are not stored completely, but 2 bytes of the IP address are masked (e.g.: 192.168.xxx.xxx). In this way, it is no longer possible to assign the shortened IP address to the calling computer.

The legal basis for processing users' personal data is Art. 6 Para. 1 lit. f DSGVO.

Purpose of data processing: The processing of personal user data enables us to analyse the surfing behaviour of our users. By evaluating the data collected, we are able to compile information on the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. In these purposes our legitimate interest also lies in the processing of data in accordance with Art. 6 Para. 1 lit. f DSGVO. By anonymizing the IP address, the interest of users in the protection of their personal data is sufficiently taken into account.

Duration of storage: The data is deleted as soon as it is no longer needed for our recording purposes. In our case this is the case after 3 months.

Opposition and removal option: Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, you as a user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that all functions of the website can no longer be used to the full extent.

If you do not agree with the storage and evaluation of this data from your visit, you can object to its storage and use at any time by clicking on the following link. In this case, a so-called opt-out cookie will be stored in your browser, which means that Matomo does not collect any session data. Please note that the complete deletion of your cookies means that the opt-out cookie is also deleted and may have to be reactivated by you.

 

For more information about the privacy settings of the Matomo software, see the following link: https://matomo.org/docs/privacy/.

8 Newsletter

On our website you have the possibility to subscribe to the following newsletter:

When registering for the newsletter, all you need to do is enter your e-mail address. In addition, the date and time of registration will be collected during registration.

Your consent will be obtained for the processing of your data during the registration process and reference will be made to this data protection declaration. No data will be passed on to third parties in connection with data processing for the dispatch of newsletters. The data are used exclusively for the dispatch of the newsletter.

Legal basis for the processing of data after registration for the newsletter by the user is subject to the consent of the user Art. 6 para. 1 lit. a DSGVO.

Purpose of data processing: The purpose of collecting the user's e-mail address is to deliver the newsletter.

Duration of storage: The data are deleted as soon as they are no longer required for the purpose of their collection. The user's e-mail address is stored as long as the newsletter subscription is active.

A possibility of opposition and removal: Subscription to the newsletter may be terminated by the user concerned at any time. For this purpose a suitable left is in each new type character. This also enables the revocation of the consent to the storage of personal data collected during the registration process.

9 Forms

On the website there are some forms with which you can send data to us. In this section you will first find general information that applies to all forms. The sub-items then contain detailed information on the data collected, the legal basis, the purpose of the data processing and the duration of the storage.

For all forms, the system collects the date and time when the form was sent as well as the language in which the website is displayed. The IP address is not stored with our forms in principle.

You are of course entitled in principle (under the conditions described in more detail) to the rights of data subjects mentioned in paragraph 10. If there is a opportunity to object or remove , please contact This email address is being protected from spambots. You need JavaScript enabled to view it. and describe as exactly as possible when you sent which form with which data (ideally a forwarding of the confirmation e-mail). We will then arrange for the relevant form data to be deleted.

9.1  registration forms for events

Our website contains the following forms for the possibility of event registration:

Registration form for free events: half-time-event

The following data is collected here (X = mandatory field) and transmitted:

  • for the purpose of event management and contact:
 Free Events
Salutation optional
Akad. Title optional
First name, last name X
Company / University X
Department / Institute optional
Position optional
Address optional
Email X
Phone optional
Fax optional
Art of the participation Member, Press, Other
Comment  
  • for the print on the name tag for the event
 Free Events
Salutation optional
Akad. Title optionel
First name, last name X
Company / University X

The legal basis for this is Art. 6 para. 1 lit. b) and f) DSGVO and for the voluntary information Art. 6 para. 1 lit. a) DSGVO.

Duration of storage: the data in the database are automatically deleted after 365 days. In addition, the registration is forwarded by e-mail to the persons responsible for the respective event. There the data are stored for the fulfilment of legal storage or retention periods.

Opportunity to object and to remove : With regard to the data voluntarily provided in the optional fields, you have the option at any time to revoke your consent to the processing of your personal data.

The data submitted with the mandatory fields of the form are required for the organisation of the events and there is therefore at most a right of objection if you wish to cancel your participation in the event. In the case of events for which a fee is charged, the General Terms and Conditions must be observed. For the cancellation procedure see above.

9.2  request forms for datasets

Our website contains the following forms for the possibility of requesting access to datasets:

Request form for dataset: EviLOG

The following data is collected here (X = mandatory field) and transmitted:

  • for the purpose of communication and usage evaluation:
 Datasets
Name X
Email address X
Organization X
Usage optional
Message optional

The legal basis for this is Art. 6 para. 1 lit. b) and f) DSGVO and for the voluntary information Art. 6 para. 1 lit. a) DSGVO.

Duration of storage: the data in the database are automatically deleted after 365 days. In addition, the registration is forwarded by e-mail to the persons responsible for the dataset. There the data are stored for the fulfilment of legal storage or retention periods.

Opportunity to object and to remove : With regard to the data voluntarily provided in the optional fields, you have the option at any time to revoke your consent to the processing of your personal data.

The data submitted with the mandatory fields of the form are required for communication. You can contact us if you want the data to be deleted.

10 Rights of the person concerned

If personal data is processed by you, you are the data subject within the meaning of the DSGVO and you have the following rights vis-à-vis the person responsible:

10.1. right to information

You may request confirmation from the person responsible as to whether personal data concerning you will be processed by RWTH Aachen University.

If such processing is available, you can request information from the person responsible about the following information:

  1. the purposes for which the personal data will be processed;
  2. the purposes for which the personal data will be processed; the purposes for which the personal data will be processed
  3. the categories of personal data that will be processed;
  4. the categories of personal data that will be processed
  5. the recipients or categories of recipients to whom the personal data relating to you has been or will be disclosed;
  6. the recipients or categories of recipients to whom the personal data relating to you has been or will be disclosed; the recipients or categories of recipients to whom the personal data relating to you has been or will be disclosed; the recipients or categories of recipients to whom the personal data relating to you have been or will be disclosed; the recipients or categories of recipients to whom the personal data relating to you have been or will be disclosed;</// the recipients
  7. the planned duration of the storage of the personal data concerning you or, if it is not possible to provide specific information in this respect, criteria for determining the duration of the storage;
  8. the planned duration of the storage of the personal data concerning you or, if it is not possible to provide specific information in this respect, the criteria for determining the duration of the storage; the planned duration of the storage; the planned duration of the storage; the planned duration of the storage; the planned duration of the storage; the planned duration of the storage
  9. the existence of a right to rectify or delete personal data concerning you, a right to limit the processing by the controller or a right to object to such processing;
  10. the existence of a right to rectify or delete personal data concerning you, a right to limit the processing by the controller or a right to object to such processing; the existence of a right to rectify or delete personal data concerning you, a right to limit the processing by the controller or a right to object to such processing by the controller or a right to oppose such processing; the existence of a right to rectify or delete personal data concerning you, a right to limit the processing by the controller or a right to oppose such processing; the existence of a right to oppose such processing
  11. the existence of a right of appeal to a supervisory authority;
  12. the existence of a right of appeal to a supervisory authority; the existence of a right of appeal to a supervisory authority
  13. all available information on the origin of the data if the personal data are not collected from the data subject;
  14. all available information on the origin of the data if the personal data are not collected from the data subject; all available information on the origin of the data if the personal data are not collected from the data subject; all available information on the origin of the data if the personal data are not collected from the data subject; all available information on the origin of the data if the personal data are not collected from the data subject
  15. the existence of automated decision making including profiling in accordance with Article 22(1) and (4) DSGVO and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing on the data subject.
  16. the existence of automated decision making including profiling in accordance with Article 22(1) and (4) DSGVO and - at least in these cases - meaningful information about the logic involved as well as the scope and intended effects of such processing on the data subject. the existence of automated decision making including profiling in accordance with Article 22(1) and (4) DSGVO and - at least in these cases - meaningful information about the logic involved as well as the scope and intended effects of such processing for the data subject. the existence of automated decision making including profiling in accordance with Article 22(1) and (4) DSGVO

You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 DSGVO in connection with the transfer.

This right of access may be restricted to the extent that it is likely to render impossible or seriously impair the realisation of the research or statistical purposes and that the restriction is necessary for the fulfilment of the research or statistical purposes.

10.2. right of rectification

You have a right of rectification and/or completion vis-à-vis the person responsible if the personal data processed concerning you are inaccurate or incomplete. The data controller must rectify this immediately.

Your right to rectification may be limited to the extent that it is likely to render impossible or seriously impair the achievement of the research or statistical purposes and that the limitation is necessary for the achievement of the research or statistical purposes.

10.3. right to limit processing

You may request that the processing of your personal data be restricted under the following conditions:

  1. if you dispute the accuracy of the personal data concerning you for a period that allows the data controller to verify the accuracy of the personal data;
  2. the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data;
  3. the data controller no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or
  4. the data controller no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or the data controller no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or the data controller no longer needs the personal data for the purposes of processing.
  5. if you have objected to the processing pursuant to Art. 21 para. 1 DSGVO and it has not yet been established whether the justified reasons of the data controller outweigh your reasons.
  6. If you have objected to the processing pursuant to Art. 21 para. 1 DSGVO and it has not yet been established whether the justified reasons of the data controller outweigh your reasons.

Where the processing of personal data concerning you has been restricted, such data may be processed only with your consent or for the purpose of asserting, exercising or defending legal rights or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State, apart from their storage.

If the processing restriction has been restricted according to the above prerequisites, you will be informed by the person responsible before the restriction is lifted.

Your right to limit the processing may be limited to the extent that it is likely to render impossible or seriously impair the achievement of the research or statistical purposes and that the limitation is necessary for the achievement of the research or statistical purposes.

Your right to limit the processing may be limited to the extent that it is likely to render impossible or seriously impair the achievement of the research or statistical purposes and that the limitation is necessary for the achievement of the research or statistical purposes.

10.4. right to deletion

a) Obligation to delete

You may request the data controller to delete the personal data concerning you immediately, and the data controller shall be obliged to delete this data immediately if one of the following reasons applies:

  1. The personal data concerning you are no longer necessary for the purposes for which they were collected or processed in any other way.
  2. You revoke the consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a DSGVO and there is no other legal basis for the processing.
  3. You object to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate reasons for the processing, or you object to the processing pursuant to Art. 21 (2) DSGVO.
  4. The personal data concerning you have been processed unlawfully.
  5. The deletion of personal data concerning you is necessary to comply with a legal obligation under Union law or the law of the Member States to which the data controller is subject.
  6. The personal data concerning you have been collected in relation to information society services offered pursuant to Art. 8 para. 1 DSGVO.

b) Information to third parties

If the person responsible has made the personal data concerning you public and is obliged to delete them pursuant to Art. 17 para. 1 DSGVO, he shall take appropriate measures, also of a technical nature, taking into account the available technology and the implementation costs, to inform the persons responsible for data processing who process the personal data that you, as the person concerned, have requested them to delete all links to this personal data or copies or replications of this personal data.

c) Exceptions

The right to deletion does not exist if the processing is required

  1. on the exercise of freedom of expression and information;
  2. on the exercise of freedom of expression and information; on the exercise of freedom of expression and information; on the exercise of freedom of expression and information
  3. to fulfil a legal obligation which the processing requires under the law of the Union or of the Member States to which the controller is subject, or to carry out a task carried out in the public interest or in the exercise of official authority vested in the controller;
  4. to carry out a task carried out in the public interest or in the exercise of official authority vested in the controller;
  5. for reasons of public interest in the field of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 DSGVO;
  6. for archival purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 DSGVO, insofar as the law referred to in Section a) is likely to make it impossible or seriously impair the attainment of the objectives of such processing, or
  7. for the purposes of archives in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 DSGVO, or
  8. for the assertion, exercise or defence of legal claims.

10.5 Right to information

If you have exercised your right to rectify, cancel or limit the processing of your personal data against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, cancellation or limitation of processing, unless this proves impossible or involves a disproportionate effort.

You have the right vis-à-vis the person responsible to be informed of these recipients.

10.6 Right to data transferability

You have the right to receive the personal data concerning you that you have provided to the responsible person in a structured, common and machine-readable format. In addition, you have the right to communicate these data to another responsible person without being hindered by the responsible person to whom the personal data was provided, provided that

  1. the processing is based on a consent pursuant to Art. 6 Para. 1 lit. a DSGVO or Art. 9 Para. 2 lit. a DSGVO or on a contract pursuant to Art. 6 Para. 1 lit. b DSGVO and
  2. processing is performed using automated procedures.

In exercising this right, you also have the right to request that the personal data concerning you be transmitted directly by a responsible person to another responsible person, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this.

The right to data transfer does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

10.7 Right of objection

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you on the basis of Art. 6 Para. 1 lit. e or f DSGVO; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless he can prove compelling legitimate reasons for the processing outweighing your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data concerning you are processed for the purpose of direct advertising, you have the right at any time to object to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling to the extent that it is connected with such direct advertising.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility to exercise your right of objection in relation to the use of Information Society services - notwithstanding Directive 2002/58/EC - by means of automated procedures using technical specifications.

You also have the right, for reasons arising from your particular situation, to object to the processing of personal data concerning you which is carried out for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 DSGVO.

Your right of objection may be limited to the extent that it is likely to render impossible or seriously impair the realisation of the research or statistical purposes and that the limitation is necessary for the fulfilment of the research or statistical purposes.