Privacy Policy

I.        Information on the Controller/Data Protection Officer. III

1.     Name and Adress of the Controller. III

2.     Name and Adress of the Data Protection Officer. III

II.       General information on Processing Personal Data. III

1.     Scope of Data Processing. III

2.     Lawfulness of Data Processing. IV

3.     Data Erasure and Storage Period. IV

4.     Recipients of Personal Data. V

III.     Provision of the Website and Creation of Log Files. V

1.     Description and Scope of Data Processing. V

2.     Legal Basis for Data Processing. V

3.     Purpose of Data Processing. VI

4.     Storage Period. VI

5.     Possibility of Objection. VI

IV.     Use of Cookies. VI

1.     General About Cookies We Use. VI

2.     Description and Scope of Data Processing. VII

3.     Legal Basis for Data Processing. VII

4.     Storage Period. VII

5.     Objection and Revocation of Consent VIII

V.      E-Mail Contact/Contact form.. VIII

1.     Description and Scope of Data Processing. VIII

2.     Legal Basis for Data Processing. VIII

3.     Use of ReCaptcha. VIII

4.     Purpose of Data Processing. X

5.     Storage Period. X

6.     Possibility of Objection and Erasure. X

VI.     Registration for our Events/Registration Mask. X

1.     Description and Scope of Data Processing. X

2.     Legal Basis for Data Processing. XI

3.     Purpose of Data Processing. XI

4.     Storage Period. XI

5.     Possibility of Objection and Erasure. XI

 

VII.        Newsletter Dispatch. XI

1.     Description and Scope of Data Processing. XI

2.     Legal Basis for Data Processing. XII

3.     Purpose of Data Processing. XII

4.     Storage Period. XII

5.     Possibility of Objection and Erasure. XIII

6.     Newsletter Dispatch Service Provider. XIII

VIII.      Newsletter-Tracking. XIII

1.     Description and Scope of Data Processing. XIII

2.     Legal Basis for Data Processing. XIII

3.     Purpose of Data Processing. XIII

4.     Storage Period. XIV

5.     Possibility of Objection and Erasure. XIV

IX.     Online-Marketing. XIV

a.     Alexa Metrics. XV

b.          Google Tag Manager. XV

c.     Google DoubleClick. XV

d.          Google Ads. XVI

e.          Facebook-Pixel XVI

f.      Google Analytics. XVII

g.     Google Maps. XVII

h.          LinkedIn Insight Tag. XVIII

i.      Microsoft Advertising. XVIII

j.      Yumpu. XIX

2.     Description and Scope of Data Processing. XIX

3.     Legal Basis for Data Processing. XIX

4.     Purpose of Data Processing. XIX

5.     Storage Period, Possibility of Objection and Erasure. XIX

6.     Security Measures. XX

X.       No use of Social Media Plug-Ins. XX

XI.     Integration of videos from YouTube. XXI

XII.        Your Rights/Right of Complaint XXI

1.     Your Rights. XXI

2.     Right of Appeal to the Supervisory Authority. XXII

XIII.       Further information. XXII

I. Information on the Controller/Data Protection Officer

1. Name and Adress of the Controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection provisions is the:

 

Technical University of Munich

represented by the President Prof. Dr. Thomas F. Hofmann

Arcisstraße 21

80333 Munich

Germany

Tel.: 089/289-01

Mail: poststelle(at)tum.de

Website: www.wi.tum.de

Name and Adress of the Data Protection Officer

Data Protection Officer of the Technical University of Munich

Dr. Christina Green

Postal address: Arcisstr. 21, 80333 München

Tel.: 089/289-01

Mail: beauftragter(at)datenschutz.tum.de[MT1] 

General information on Processing Personal Data

Scope of Data Processing

As a matter of principle, we collect and use personal data of our users only to the extent that this serves to fulfill the public tasks assigned to us by law, in particular the provision of information to the public. This also includes the provision of a functional website as well as our content and services. The collection and use of personal data of our users is regularly only carried out with the consent of the user. An exception applies in those cases where it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted by legal regulations.

Lawfulness of Data Processing

The legal basis for the processing of your data results from Art. 4 Para. 1 of the Bavarian Data Protection Act (BayDSG) and Art. 2 of the Bavarian Higher Education Act (BayHSchG) in conjunction with Art. 6 Para. 1 S. 1 lit. e, Para. 3 of the General Data Protection Regulation (GDPR).

 

Insofar as we obtain the consent of the data subject for processing personal data, Article 4 Para. 1 of the BayDSG in conjunction with Article 6 Para. 1 S. 1 lit. a of the GDPR serves as the legal basis for the processing of personal data. Please note that as of December 1, 2021, the storage of information in "end devices" of end users and access to information already stored in them will be based on the legal basis of Art. 4 Para. 1 of the BayDSG in conjunction with § 25 of the Telecommunications Telemedia Data Protection Act (TTDSG). § 25 TTDSG is then the legal basis for the consent requirement when using cookies and comparable technologies.

 

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 4 Para. 1 of the BayDSG in conjunction with Article 6 Para. 1 lit. b of the GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

 

Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which we are subject, Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. c GDPR serves as the legal basis.

 

In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Article 4 Para. 1 of the BayDSG in conjunction with Article 6 Para. 1 S. 1 lit. d of the GDPR serves as the legal basis.

 

If the processing is necessary for the purpose of the legitimate interest of us or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the former interest, Article 4 Para. 1 of the BayDSG in conjunction with Article 6 Para. 1 S. 1 lit. f of the GDPR shall serve as the legal basis for the processing.

Data Erasure and Storage Period

The personal data of the data subject shall be deleted as soon as the purpose of the storage ceases to apply. In addition, storage may take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. The data will also be deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

Recipients of Personal Data

During the operation of our website, various data recipients gain access to personal data. Our web server is operated by the Leibniz Computing Center of the Bavarian Academy of Sciences (LRZ). The personal data you transmit when visiting our website is therefore processed by the LRZ on our behalf:

 

Leibniz Computing Center of the Bavarian Academy of Sciences (LRZ)

Boltzmannstraße 1

D-85748 Garching near Munich

Tel.: (089) 35831 8000

Fax: (089) 35831 9700

Mail: lrzpost(at)lrz.de

www.lrz.de

 

If necessary, your data will be transmitted to the responsible supervisory and auditing authorities for the exercise of the respective control rights.

In order to avert threats to information technology security, data may be forwarded to the State Office for Information Security in the case of electronic transmission and processed there on the basis of Art. 12 et seq. of the Bavarian E-Government Act.

 

Further data recipients can be found under the respective processing activities in this privacy policy.

Provision of the Website and Creation of Log Files

Description and Scope of Data Processing

When you call up this or other Internet pages, you transmit data to our web server via your Internet browser. The following data is temporarily recorded in a log file during an ongoing connection for communication between your Internet browser and our web server:

  • IP address of the requesting computer
  • Date and time of access
  • Name, URL and transferred data volume of the retrieved file
  • Access status (requested file transferred, not found, etc.)
  • Recognition data of the browser and operating system used (if transmitted by the requesting web browser)

    Legal Basis for Data Processing

The legal basis for the temporary storage of the data and the log files is Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. f GDPR.

Purpose of Data Processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

 

The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

 

These purposes are also our legitimate interest in data processing according to Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 !.  lit. f GDPR.

Storage Period

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

 

In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

Possibility of Objection

The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

Use of Cookies

General About Cookies We Use

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. Information stored in a cookie may include, for example, the language settings on a website (in our case, you can choose whether the website is displayed in German or in English) or the consent to the use of cookies.

 

For a better understanding of what types of cookies there are, the following distinction serves:

  • Temporary cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser.
  • Permanent cookies remain stored even after you close the browser. They are deleted automatically after a specified duration, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
  • First-party cookies: These are set by ourselves.
  • Third-party cookies: These are mainly used by commercial operators (so-called third parties) to process user information.
  • Necessary (also essential) cookies are those that are absolutely necessary for the operation of the website.
  • Statistical and marketing cookies: these are cookies used for online marketing purposes (in particular, marketing of advertising space, targeted advertising) and analysis of user behavior for the purpose of optimizing the online offer. Such cookies are also used for profiling. Profiling serves to show users such content that corresponds to their potential interests. Insofar as we use cookies or tracking technologies, we will point this out to you separately in the data protection declaration or in the context of obtaining consent.

You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may then not be able to use all functions of this website.

Description and Scope of Data Processing

Durch die Cookies werden Nutzungsdaten (unter anderem Zugriffszeiten, von Ihnen besuchte Websites, angesehene Inhalte) und Meta-/Kommunikationsdaten (Informationen zu Ihren Geräten, IP-Adressen) gespeichert.

Legal Basis for Data Processing

If we ask you to give consent to the processing of your personal data using cookies and you consent, the legal basis for the data processing is your consent (Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. a GDPR or, as of December 1, 2021, § 25 Para.1 of the Telecommunications Telemedia Data Protection Act [TTDSG]). Otherwise, the legal basis for the processing of personal data using cookies is Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. f GDPR or, as of December 1, 2021, § 25 Para. 2 TTDSG.

Storage Period

In the context of obtaining consent (so-called cookie consent), we point out the storage period of the respective permanent cookie. Otherwise, the storage period can be up to two years. Session cookies are deleted when you log out or close the browser.

Objection and Revocation of Consent

If the processing of your personal data by cookies is based on a legal permission, you can object to the processing at any time. You can initially declare your objection by means of your browser settings (for example, by deactivating the use of cookies). Please note here that certain functions of our website (e.g. the preset language) will then no longer function. We draw your attention to further objection options in the information on the service providers and cookies used.

 

If the processing of personal data by cookies is based on your consent, you can revoke your consent at any time. For this purpose, we use a cookie consent management tool. In this tool, you will receive information about the cookies we use (processing and provider). In addition, you can give and/or revoke your consent in this tool. The declaration of consent is stored by a cookie. This is done so that the query on the use of cookies does not have to be repeated and we can also prove the consent in accordance with our legal obligation. The settings that you have made in the cookies tool are stored in the cookie.

 

Here you can find the cookie settings[MT2] .

E-Mail Contact/Contact form

Description and Scope of Data Processing

You can use the e-mail addresses provided or the contact form to contact us. The user's personal data transmitted in this way will be stored.

 

In this context, the data will not be passed on to third parties. The data will be used exclusively for processing the conversation.

Legal Basis for Data Processing

The legal basis for the processing of data transmitted in the course of sending an e-mail or via the contact form is Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. f GDPR. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. b of the GDPR.

Use of ReCaptcha

We use Google-ReCaptcha when entering information in the contact form to detect bots. This allows us to prevent receiving numerous fake requests, so-called spam.

 

For this purpose, personal data of website visitors is processed and sent to Google - even before the user clicks on the "I am not a robot" checkbox. This includes:

  • IP address
  • Information about the operating system
  • Date
  • Settings of the user device (e.g. language settings, location, browser, etc.)
  • Referr URL (page address from which the user came)
  • Cookies (please also see the general information on cookies in this data protection declaration)
  • Mouse movements and keyboard strokes
  • Screen resolution
  • length of stay

Please note that the above list is not exhaustive. Rather, they are examples of data which, to our knowledge, are processed by Google.

 

Through the integration of Google ReCaptcha, user data is stored on Google servers, which may be located in the EU but also in EU third countries (e.g. USA). We would like to point out that many third countries (including the USA) are not considered secure under European data protection law.

 

Legal basis: If you consent to the use of Google-ReCaptcha, the legal basis for the processing of your personal data is your consent (Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. a GDPR). Please note that from 1 December 2021, the storage of information in "end devices" (“Endeinrichtung”) of end users and access to information already stored in it will be based on the legal basis of Art. 4 Para. 1 of the BayDSG in conjunction with Section 25 of the Telecommunications Telemedia Data Protection Act (TTDSG). Section 25 TTDSG is then the legal basis for the consent requirement when using cookies and comparable technologies.

 

Processing does not take place without consent (please also see the section on cookies or the cookie settings).

 

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; privacy policy: https://policies.google.com/privacy.

 

Storage period/data deletion: We have no knowledge of how long Google processes/stores the data. If you have a Google account and are logged into your Google account when using the Google ReCaptcha service, the data will be merged. If you want to avoid the merging of data, you should log out of your Google account. To delete the data processed by the Google ReCaptcha service again, you must contact Google support at support.google.com.

Purpose of Data Processing

In the case of contact by e-mail or via the contact form, our legitimate interest in processing the data is to respond to your contact.

Storage Period

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

Possibility of Objection and Erasure

If you contact us by e-mail or via the contact form, you can object to the storage of your personal data at any time, e.g. by e-mail. In such a case, the conversation cannot be continued.

 

All personal data stored in the course of contacting us will be deleted in this case, unless a contract is concluded and the personal data from the e-mail communication must continue to be processed for this purpose.

 [MT1]Die Datenschutzerklärung (DSE) bitte der Datenschutzbeauftragten zukommen lassen, damit die Verarbeitungstätigkeiten in das von der TUM geführte Verarbeitungsverzeichnis aufgenommen werden können.

 

Nur zur Info: Die Daten habe ich aus dem Fragebogen entnommen. Mir ist aufgefallen, dass die ti und die TUM einen anderen Datenschutzbeauftragten benannt haben. Das ist unerheblich, wenn die wi Frau Dr. Green als Datenschutzbeauftragten benannt hat. Bitte die E-Mail-Adresse checken.

 [MT2]Bitte als Link zu den Cookie-Consent-Tool gestalten.

 

Registration for our Events/Registration Mask

Description and Scope of Data Processing

You have the option of registering for events via our website. For this purpose, you can provide information about yourself in the registration masks. Such information, which is mandatory for registration, is marked with an asterisk "*". Without this information you cannot register for the event. All other information is voluntary and not required for participation in our events.

 

Depending on the type of event, different data will be requested. For certificate courses, for example, proof of knowledge gained by participants is required, but not for our Virtual Info Sessions.

 

The following data will be processed depending on the event:

    • First name, last name
    • Telephone number
    • e-mail address
    • title
    • Date of birth
    • Position/Department
    • Organization/Company
    • Billing address
    • For proof of knowledge: CV or link to a LinkedIn profile

In addition, you have the option of subscribing to our newsletter (please see our "Newsletter Dispatch" notice in this Privacy Policy).

Legal Basis for Data Processing

In addition to Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. b of the GDPR (for mandatory data), the legal basis for processing the data is your consent in accordance with Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. a of the GDPR.

Purpose of Data Processing

We process your information solely for the purpose of hosting the event for which you register.

Storage Period

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is generally the case after five years. If necessary, longer storage periods may result from tax and commercial law retention and documentation obligations, as well as from regulations that apply to our university, in accordance with Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1. lit. c GDPR.

Possibility of Objection and Erasure

You can revoke your consent at any time. We will then only process your data insofar as this is necessary for the execution of the contract with you and/or there are retention obligations beyond this.

Newsletter Dispatch

Description and Scope of Data Processing

You have the possibility to subscribe to our free newsletter. In it, we will inform you, among other things, about trainings and events or other topics that might interest you. In doing so, we will process the following data.

    • e-mail address
    • First and last name
    • title

In addition, the following data will be collected during registration:

  • IP address of the user
  • Date/Time

For the processing of the data, your consent is obtained during the registration process via the so-called double opt-in and reference is made to this data protection declaration. We also store the registration process so that we can prove that it has taken place correctly.

Legal Basis for Data Processing

The legal basis for the processing of newsletter subscription data is your consent pursuant to Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. a GDPR as well as Section 7 Para. 2 No. 3 UWG or our legitimate interest in being able to prove that the registration process has been carried out properly (Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. f GDPR). As of December 1, 2021, legal basis is Art. 4 Para. 1 of the BayDSG in conjunction § 25 Para.1 of the Telecommunications Telemedia Data Protection Act [TTDSG]).

Purpose of Data Processing

The collection of your name, title and e-mail address serves to deliver the newsletter and to address you correctly.

 

The collection of other personal data as part of the registration process serves to prevent misuse of the services or the used e-mail address and to be able to prove the proper process of registration.

Storage Period

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. Accordingly, the above data will be stored as long as the subscription to the newsletter is active. Thereafter, we may store the unsubscribed e-mail address for up to three years on the basis of our legitimate interest to be able to prove consent previously given. The purpose of processing for this period until deletion is limited to the defense of claims.

Possibility of Objection and Erasure

You can unsubscribe from the newsletter at any time. For this purpose, you will find a corresponding "Unsubscribe" link in each newsletter. This also enables you to revoke your consent to the storage of the personal data collected during the registration process.

Newsletter Dispatch Service Provider

In connection with the data processing for the dispatch of newsletters, no data is passed on to third parties. We use the company rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg, Germany, for sending newsletters (please find the privacy policy of rapidmail here: https://www.rapidmail.de/datenschutz). We have concluded order processing agreement (Art. 28 DSGVO) with rapidmail (hereinafter also referred to as newsletter service provider). The data is used exclusively for sending the newsletter.

Newsletter-Tracking

Description and Scope of Data Processing

To measure how successful our newsletter is, we have our service provider rapidmail measure the open rate and click rate of our newsletter. The open rate is the ratio between the number of recipients who open the newsletter and the number of emails delivered. Opening recipients are those who have opened the mailing at least once, which is recorded by an image inserted in the newsletter (so-called "tracking pixel"). This is loaded from the server of our newsletter service provider upon opening. For the opening rate, the click rate is also used. The click-through rate is the percentage ratio of clickers to openers. This provides us with information about which topics are relevant for those recipients who open the newsletter.

 

The following data is collected:

The legal basis for newsletter tracking (measurement of opening and click-through rates, as well as storage of the measurement result) is your consent, which you gave when subscribing to the newsletter with reference to this privacy policy (Art. 4 Para. 1 of the BayDSG Art. 6 Para. 1 lit. a GDPR or, from 1 December 2021, § 25 Para. 1 of the Telecommunications Telemedia Data Protection Act [TTDSG]).

Purpose of Data Processing

The information obtained as part of the newsletter tracking is used for the technical improvement of the newsletter dispatch based on technical data or the recipient groups and their reading behavior and access times. Likewise, the information is obtained as to whether the newsletter has been opened, when this occurs and which links are clicked in it (please also see the notes under point 1 of this section). It is true that this information can be assigned to individual newsletter recipients. Under no circumstances, however, do we want to monitor the recipients of our newsletter. The information obtained enables us to tailor our newsletter service even better to the interests of the recipients, e.g. by adapting different content to the interests of the recipients and learning about the reading habits of the recipients.

Storage Period[MT1] 

We store your data in anonymized form for 2 years until you revoke your consent.

Possibility of Objection and Erasure

You can object to the newsletter tracking at any time for the future. To do so, simply cancel the subscription to the newsletter. For this purpose, you will find a corresponding link ("Unsubscribe") in every newsletter. This ends your newsletter subscription and the newsletter tracking

Online-Marketing

In the context of online marketing, we process personal data for the purpose of displaying promotional or other content intended to be targeted at the potential interests of users. Another purpose of the processing is the measurement of the effectiveness of the measures and the optimization of our website content.

 

For this purpose, relevant information is stored in so-called user profiles in relation to said content. These user profiles are stored in cookies (please also see our information on cookies in this privacy policy). The stored information includes, among other things

  • online networks used
  • websites visited
  • content viewed
  • browser used
  • computer system used
  • usage times
  • IP addresses
  • device information

However, the IP addresses are pseudonymized by shortening the IP address to protect users. Insofar as JavaScript content from external providers is used, you can prevent the processing of personal data by installing a JavaScript blocker such as the browser plug-in "NoScript" (www.noscript.net) or deactivating JavaScript in your browser.

 

If you have a user account with the corresponding service (e.g. Google, Facebook) and are logged in there, the collected data will be directly assigned to your account. If you do not wish to be associated with your profile, you must log out before visiting our website or before giving your consent to the processing of your data.

 

In the following, we will first provide you with information on the third-party services used as well as on the third-party providers themselves, then we will go into detail about the legal basis, the purpose of processing, the storage period.

Alexa Metrics

Service

“Alexa Metrics" is used on our website. This service is provided by Alex Internet, Inc. and allows us to analyze user behavior on our website and to design our website according to user needs.

Provider

Alexa Internet, Corporation Service Company, 2730 Gateway Oaks Drive, Suite 100, Sacramento, CA 95833, USA; Website: www.alexa.com; Privacy Policy: https://www.alexa.com/help/privacy; Opt-Out for Alexa Measurement Pixel: https://support.alexa.com/hc/en-us/articles/200685410-Opting-Out-of-Alexa-Measurement-Pixel

Google Tag Manager

Service

The "Google Tag Manager" is used on our website. This service is provided by Google Ireland Ltd. and allows us to manage website tags via an interface. The Google Tag Manager takes over the function that Telex implement, but does not itself collect any personal data

Provider

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Privacy policy: https://policies.google.com/privacy;

Google DoubleClick

Service

Google DoubleClick is an online marketing tool of Google Ireland Ltd. This tool is used on our website for marketing and optimization purposes. Among other things, Google DoubleClick uses cookies (please see the information on cookies in this privacy policy) to prevent ads from being displayed more than once. Also, via the set cookie, the "conversion" can be recorded, which have reference ad requests. This is the case, for example, if you see a Double Click ad and at a later point in time visit the advertiser's website with the same browser and buy something or use services there.

Provider

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Privacy policy: https://policies.google.com/privacy;

Google Ads[MT2] 

Service

We use Google Ads, a service of Google Ireland Ltd. on our website. With Google Ads, we can draw attention to our offers with the help of advertising media on external websites. This allows us to draw conclusions about the success of individual advertising measures. The advertising media are delivered by Google via so-called "AdServers". We use so-called AdServer cookies to measure success. If you arrive at our website via a Google ad, Google Ads will store a cookie on your end device. This contains the following information: Unique-Cookie-ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), opt-out information (marking that the user does not want to be addressed anymore). However, we only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are successful.

Provider

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Privacy policy: https://policies.google.com/privacy;

Facebook-Pixel[MT3] 

Service

 

Facebook Pixel is an analytics service provided by Facebook Ireland Ltd. that combines data from the Facebook network with actions taken through this website. This allows users of the website to be shown interest-based advertisements ("Facebook Ads") when visiting the Facebook social network or other websites that also use the method. We thereby pursue the interest of showing you advertisements that are of interest to you in order to make our website more interesting for you. For this purpose, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of the Facebook Pixel, Facebook receives the information that you have called up the corresponding web pages of our website or clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is the possibility that the provider learns and stores your IP address and other identifying features.

 

Provider

 

Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com; Privacy policy: https://www.facebook.com/about/privacy; Opt-out: https://www.facebook.com/settings?tab=ads.

Google Analytics

Service

 

Our website uses Google Analytics, a web analytics service provided by Google, Inc. or Google Ireland Ltd. ("Google"). The information stored in a cookie about your use of our website is usually transferred to a Google server in the USA and stored there. However, in the case of activation of IP anonymization as on this website, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

 

The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

 

Provider

 

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com/intl/de/about/analytics/; Privacy Policy: https://policies.google.com/privacy; Option to object (opt-out): Opt-out plugin objection: https://tools.google.com/dlpage/gaoptout?hl=de, objection settings for the display of advertising: https://adssettings.google.com/authenticated

Google Maps

Service

 

On our website we use the offer of Google Maps. This allows us to show you interactive maps directly on the website and enables you to use the map function comfortably.

 

Provider

 

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Privacy policy: https://policies.google.com/privacy;

LinkedIn Insight Tag

Service

 

Our website uses LinkedIn Insight Tag. This is an analytics service provided by LinkedIn Corporation or LinkedIn Ireland Unlimited Company, which links data from the LinkedIn network to actions taken through this website. We use it to pursue the interest of showing you advertising that is of interest to you in order to make our website more interesting for you.

 

Provider

 

LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA; Website https://www.linkedin.com; Security measures: IP-Masking (pseudonymization of the IP address); Privacy Policy: https://www.linkedin.com/legal/privacy-policy, Cookie-Policy: https://www.linkedin.com/legal/cookie_policy; Option to object (opt-out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Microsoft Advertising

Service

 

Microsoft Advertising is used on our website. This analysis tool is provided by Microsoft Corporation. Via a conversion tracking tag from Microsoft Advertising, we can learn more about user behavior when you reach our website via a Microsoft advertisement (e.g. keyword, ad, click behavior on our website, etc.). In doing so, we only receive data or evaluations about your behavior on the Internet. We do not know what data Microsoft processes. Microsoft also processes data in the USA, among other places. The standard contractual clauses approved by the EU Commission apply as the basis for data processing.

 

Provider

 

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; Privacy Policy: https://privacy.microsoft.com/de-DE/privacystatement; Option to object: https://account.microsoft.com/privacy/ad-settings/signedout

Yumpu[MT4] [SC5] 

Service

 

Our website uses the yumpu software (which is provided by i-magazine AG). Through the software yumpu, we can track the reading behavior of our users. We do not know which data i-magazine AG processes.

 

Provider

 

Yumpu is software by i-magazine AG, Gewerbestrasse 3, 9444 Diepoldsau; Privacy Policy: https://www.yumpu.com/de/info/privacy_policy.

 

Description and Scope of Data Processing

 

Through the above-mentioned services of our online marketing, the following personal data of you will be processed:

  • - Usage data (characteristics identifying the user, information about the beginning and end as well as the scope of the respective usage, web pages visited, information about the content viewed by the user).
  • - Meta/communication data
  • - Location data
  • - Event data (Facebook)

    Legal Basis for Data Processing

If you consent to the use of the third-party providers, the legal basis for the processing of your personal data is consent (Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. a GDPR). Processing does not take place without consent (please also see the section on cookies or the cookie settings). Please note that as of December 1, 2021, the storage of information in "end devices" of end users and access to information already stored in them will be based on the legal basis of Art. 4 Para. 1 of the BayDSG in conjunction with § 25 of the Telecommunications Telemedia Data Protection Act (TTDSG). § 25 TTDSG is then the legal basis for the consent requirement when using cookies and comparable technologies.

 

Purpose of Data Processing

 

We use the above services for the purposes of tracking, re-marketing, to make our offer more attractive, to obtain information about our target audience and to measure the success of our ad campaigns.

 

Storage Period, Possibility of Objection and Erasure

 

In the cookie settings, you will find information on the duration of cookie storage and can revoke your consent (please see the section on cookies). Please also refer to the data protection declarations of the respective providers (see above) with regard to the storage period and the options for objection and removal. In addition, you can disable cookies in the settings of your browser.

 

Security Measures

 

The IP address is pseudonymized (IP masking).

No use of Social Media Plug-Ins

We do not use any social media plug-ins. On our website, we only point out that we maintain our own presences on the social networks Facebook, LinkedIn, Instagram and Twitter, and that we have a Spotify and YouTube channel. If you click on the logo, you will be redirected to our respective presence in the social networks. In doing so, the data mentioned under III. 1 of this data protection declaration will be transmitted to the respective provider of the social network. If you have an account with the respective provider and are logged in, the data may be linked to your account. We do not know what other data is collected or processed by the respective provider of the social network and have no influence on this.

 

You can prevent the data processing by not clicking on the icon. For more information on the purpose and scope of data collection and its processing by the provider of the social networks, please refer to the privacy policy of the provider, which is communicated below. There you will also receive further information about your rights in this regard and setting options for protecting your privacy.

 

Facebook[MT6]  Inc., 1601 S California Ave, Palo Alto, California 94304, USA; https://www.facebook.com/policy.php; Privacy policy: https://www.facebook.com/about/privacy;

Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025; Privacy policy: https://help.instagram.com/155833707900388

Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland; Privacy policy

: twitter.com

Spotify AB, Regeringsgatan 19, 11153 Stockholm, Sweden; Privacy policy

: www.spotify.com

YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; privacy notices can be found here: https://policies.google.com/privacy?hl=de

LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; privacy notices can be found here: https://www.linkedin.com/legal/privacy-policy

 

 

Integration of videos from YouTube

We also show videos on our website. This also results in the processing of personal data. The purpose of the processing is to provide you with attractive content via our website.

 

On our website, we show videos that are loaded from YouTube. The service provider of the YouTube video platform is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The privacy policy: from Google can be found here: https://policies.google.com/privacy; Possibility of objection (Opt-Out): Opt-Out-Plugin: https://tools.google.com/dlpage/gaoptout?hl=de, Settings for the display of advertisements: https://adssettings.google.com/authenticated.

 

By playing YouTube videos, data is transmitted from you to Google. This means that personal data may also be transmitted to the USA and processed there. The European Court of Justice has ruled that the USA does not have an adequate level of data protection. We explicitly point this out to you and you can then decide whether you want to play YouTube videos on our website or not. We have no influence on the processing of personal data by Google.

 

For this reason, you will be informed of this circumstance before playing a YouTube video and can decide whether or not to let the video play. If you allow the video to play, you declare your consent to the data processing to us. You can revoke your consent at any time via the cookie settings (please also see our information on cookies).

 

The legal basis for data processing is your consent in accordance with Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. a GDPR. Please note that as of December 1, 2021, the storage of information in "end devices" of end users and access to information already stored in them will be based on the legal basis of Art. 4 Para. 1 of the BayDSG in conjunction with § 25 Telecommunications Telemedia Data Protection Act (TTDSG). § 25 TTDSG is then the legal basis for the consent requirement when using cookies and comparable technologies.

Your Rights/Right of Complaint[MT7] 

Your Rights

 

Insofar as we process personal data from you, you have the following rights as a data subject:

  • You have the right to information about the data stored about you (Art. 15 GDPR).
  • If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR).
  • If the legal requirements are met, you may request the erasure or restriction of processing (Art. 17 and 18 GDPR).
  • If you have consented to the processing or if there is a contract for data processing and the data processing is carried out with the help of automated procedures, you may have a right to data portability (Art. 20 GDPR).
  • If you have consented to the processing and the processing is based on this consent, you can revoke the consent at any time for the future. The lawfulness of the data processing carried out on the basis of the consent until the revocation is not affected by it. You have the right to object to the processing of your data at any time on grounds relating to your particular situation, if the processing is carried out exclusively on the basis of Art. 6 Para. 1 S. 1 letter e) or f) GDPR (Art. 21 Para. 1 sentence 1 GDPR).

    Right of Appeal to the Supervisory Authority

Furthermore, there is a right of appeal to a supervisory authority. The Bavarian State Commissioner for Data Protection is responsible for the Technical University of Munich.

You can reach this authority under the following contact data:

 

Postal address: P.O. Box 22 12 19, 80502 Munich, Germany 

Address: Wagmüllerstrasse 18, 80538 Munich, Germany 

Telephone: 089 212672-0 

Fax: 089 212672-50 

E-mail: post office(at)datenschutz-bayern.de

www.datenschutz-bayern.de

Further information

For more information about the processing of your data and your rights, you can contact us at the contact details mentioned above (at the beginning of I.).

 [MT1]Wie lange werden die Daten zum Tracking gespeichert und warum?

 

Gibt es die Möglichkeit, die Analyse ohne Identifizierbarkeit der Empfänger zu betreiben? Wenn ja, wie?

 

Das hätte den Vorteil, dass vergangene Analysen wegen des fehlenden Personenbezugs bei einem Widerruf nicht gelöscht werden müssten.

 [MT2]Ich gehe davon aus, dass die Angab „Google Ads Conversion Tracking“ sich auf das PlugIn Google Ads bezieht, da die „Conversion“ eine Funktion dieses Tools ist. Sonst bitte noch einmal Bescheid geben. Genau

 [MT3]

 [MT4]Mit ist nicht klar, wie Yumpu auf der Website eingesetzt wird. Wenn der Nutzer auf die Seite von Yumpu weitergeleitet wird, kann er ggf. dort einen Vertrag mit Yumpu abschließen. Bitte mehr Info dazu.

 

In diesem Zusammenhang: Besteht ein Auftragsverarbeitungsvertrag oder ein Vertrag über die gemeinsame Verantwortung mit der i-magazine AG? Je nach Art des Vertages wird dann auch deutlich, ob das Unternehmen die Daten auch zu eigenen Zwecken oder nur als Auftragsverarbeiter verarbeitet. Das müsste in der DSE ebenfalls angegeben werden.

 [SC5]Der Nutzer muss sich nicht anmelden um unsere Inhalte zu sehen, wird auf die Broschürenansicht geleitet. Für uns sind lediglich die anonymen Klickzahlen sichtbar. Eine Auftragsverabeitungsvertrag besteht daher nicht.

 [MT6]

 [MT7]Diesen Teil habe ich ebenfalls von der TUM-DSE übernommen.