privacy statement

I. Name and address of the person responsible

The person responsible within the meaning of the data protection basic regulation and other national data protection laws of the member states and other data protection regulations is the:

FH Aachen
Bayernallee 11
52066 Aachen
Germany

dvz@fh-aachen.de
T: +49.241.60090
www.fh-aachen.de

II. Name and address of Data Protection Officer

The data protection officer of the data controller is:

Thomas Lex
Bayernallee 11
52066 Aachen
Room 03011
lex(at)fh-aachen.de
T: +49.241.6009 51043

III. general information on data processing

1. Scope of processing of personal data

We only collect and use personal data of our users as far as this is necessary for the provision of our services. a functioning website and our content and services. The collection and use Personal data of our users is regularly only provided with the consent of the user. An exception applies in such cases where prior consent cannot be obtained for factual reasons, and the processing of the data is permitted by law.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, the following shall apply Art. 6 para. 1 lit. a EU data protection basic regulation (DSGVO) as legal basis for the processing personal data.

In the processing of personal data necessary for the performance of a contract to which the contracting party is a party, the processing of personal data shall be carried out in accordance with the provisions of this Article. is necessary, Art. 6 (1) (b) DSGVO serves as the legal basis. This also applies to the processing operations necessary for the implementation of pre-contractual measures.

Where the processing of personal data is necessary to comply with a legal obligation that our company is subject to, Art. 6 Para. 1 lit. c DSGVO serves as the legal basis.

In the event that vital interests of the data subject or of another natural person are harmed by a processing of personal data, Art. 6 para. 1 lit. d DSGVO serves as the legal basis.

Is the processing necessary to safeguard a legitimate interest of our company or a third party? and the interests, fundamental rights and fundamental freedoms of the person concerned do not prevail over the first interest, the following shall apply Art. 6 para. 1 lit. f DSGVO serves as legal basis for the processing.

3. Data deletion and storage duration

The personal data of the data subject shall be erased or blocked as soon as the purpose of the storage has been fulfilled. not applicable. In addition, storage can take place if this is required by the European or national legislators in Union regulations, laws or other provisions to which the person responsible is subject. was provided for. The data will also be blocked or deleted if any of the above-mentioned standards, unless there is a necessity for the further storage of the data. data for the conclusion or performance of a contract exists.

IV. Provision of the website and creation of logfiles

1. Description and scope of data processing

Every time you visit our website, our system automatically collects data and information from the computer system. of the calling computer.

The following data are collected:

  1. Information about the browser type and the version used
  2. The user's operating system
  3. The Internet Service Provider of the user
  4. The IP address of the user
  5. Date and time of access
  6. Websites from which the user's system accesses our website
  7. Websites that are accessed by the user's system via our website

The data is also stored in the log files of our system. A storage of these data together with other personal data of the user does not take place.

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f DSGVO

.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary in order to allow the delivery of the website to the the user's computer. For this purpose, the IP address of the user must be stored for the duration of the session. stay

Log files are stored to ensure the functionality of the website. In addition, the Data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes also include our legitimate interest in data processing in accordance with Art. 6 Para. 1 lit. f DSGVO

4. Duration of storage

The data shall be deleted as soon as they are no longer necessary for the purpose of their collection. In If the collection of data to provide the site, this is the case when the respective session ends is.

If the data are stored in log files, this is the case after seven days at the latest. A Storage beyond this is possible. In this case, the IP addresses of the users will be deleted or alienated so that an assignment of the calling client is no longer possible.

5. possibility of opposition and removal

The collection of data for the provision of the Website and the storage of data in log files is necessary for the operation of the Website. of the website is mandatory. Consequently, there is no possibility for the user to object.

V. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser may be stored on the user's computer system. When a user accesses a website, an Cookie can be stored on the user's operating system. This cookie contains a characteristic A string of characters that allows the browser to be uniquely identified when the website is called up again.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:

  1. Session ID

2. Legal basis for data processing

The legal basis for the processing of personal data using cookies is Article 6(1)(lit.) of the EC Treaty. f DSGVO.

3. Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these it is it is necessary that the browser is recognized even after a page change.

Für folgende Anwendungen benötigen wir Cookies:

  1. Login und alle damit zusammenhängenden Funktionen

The user data collected by technically necessary cookies are not used to create user profiles. used

4. Duration of storage, objection and removal possibility

Cookies are stored on the user's computer and transmitted to our site by the user. Therefore you have as a user also has full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies are used for our website deactivated, you may no longer be able to use all the functions of the website to their full extent.

VI. registration

1. Description and scope of data processing

On our website, we offer users the opportunity to register by providing personal data for the following purposes (only external library users and guests). The data is entered into an input mask and to us and stored. The data will not be passed on to third parties. The following data will be Framework of the registration process surveyed:

Sex, surname, first name, title, date of birth, street and no., suffix, postcode, city, e-mail, country

The following data will also be stored at the time of registration:

    li>The IP address of the user Date and time of registration

    In the course of the registration process, the user's consent is obtained for the processing of this data.

    2. Legal basis for data processing

    The legal basis for the processing of the data is Article 6(1)(a) where the user has given his consent. DSGVO. br/>

    For the purpose of registering the performance of a contract to which the User is a party or the performance of which the User is a party or the performance of which the User is a party. pre-contractual measures, then additional legal basis for the processing of the data is Art. 6 Para. 1 lit. b DSGVO

    3. Purpose of data processing

    A registration of the user is necessary for the fulfillment of a contract with the user or for the execution of the contract. pre-contractual measures are required. This includes the creation of a library card as well as the Provision of user accounts for the use of online services of Aachen University of Applied Sciences.

    4. Duration of storage

    The data shall be deleted as soon as they are no longer necessary for the purpose of their collection.

    This is applicable to the transactions performed during the registration process for the performance of a contract or for the performance of a service. pre-contractual measures when the data is no longer required for the execution of the contract, or when the data is no longer required for the execution of the contract. are. Even after the contract has been concluded, it may be necessary to disclose personal data of the contractual partner. to comply with contractual or statutory obligations.

    5. possibility of opposition and removal

    As a user, you have the possibility to cancel the registration at any time. The data stored about you can be Have them modified at any time. br/>

    If the data are necessary for the performance of a contract or for the implementation of pre-contractual measures, a premature deletion of the data only possible, unless contractual or legal obligations of a deletion be opposed.

    VII. rights of the data subject

    If personal data is processed by you, you are the data subject within the meaning of the DSGVO and the following data is available to you Rights vis-à-vis the person responsible to:

    1. Right to information

    You may request confirmation from the data controller as to whether personal data concerning you is involved, are processed by us.

    In the event of such processing, you may obtain information from the data processor regarding the following information demand:

      the purposes for which the personal data are processed; the planned duration of the storage of the personal data concerning you or, if specific information is provided, the date on which the data is to be stored are not possible, criteria for determining the storage period; the existence of a right to have personal data concerning you corrected or deleted, of a right of access to such data and of a right of access to such data. the right to limit the processing by the controller or to object to it Processing; the existence of a right of appeal to a supervisory authority; any available information about the origin of the data, if the personal data were not stored by the data subject shall be collected; the existence of automated decision-making, including profiling, in accordance with Article 22(1) and (4) DSGVO and - at least in these cases - meaningful information about the logic involved and its scope and the intended effects of such processing on the data subject.

    You have the right to request information as to whether the personal data relating to you is to be stored in an electronic file. third country or to an international organisation. In this context, you may request, to be informed of the appropriate guarantees pursuant to Art. 46 DSGVO in connection with the transmission.

    2. Right to rectification

    You have a right to rectification and/or completion vis-à-vis the person responsible, provided that the personal data that concern you are incorrect or incomplete. The person responsible has to make the correction immediately.

    3. Right to restrict processing

    Under the following prerequisites, you can restrict the processing of the request personal data:

      if you dispute the accuracy of the personally identifiable information concerning you for a period of time not longer than the The data controller makes it possible to verify the accuracy of the personal data; the processing is unlawful and you object to the deletion of the personal data and, instead, to the use of your personal data by third parties. Restriction of the use of personal data; li>the data controller no longer needs the personal data for the purposes of processing, you can use them however, for the assertion, exercise or defence of legal claims, or
    1. if you have lodged an objection against the processing pursuant to Art. 21 (1) DSGVO and have not yet been determined, whether the justifiable reasons of the person responsible outweigh your reasons.

    If the processing of personal data relating to you has been restricted, such data may - by their nature - be disclosed to third parties. storage - only with your consent or for the assertion, exercise or defense of any right or interest in legal rights or the protection of the rights of another natural or legal person or on any other ground of an important public interest of the Union or of a Member State

    .

    If the processing restriction has been restricted in accordance with the above prerequisites, you will be notified by the the responsible person before the restriction is lifted.

    4. Right to cancellation

    a) Duty to cancel

    You may request the person responsible to immediately disclose any personal data concerning you to and the person responsible is obliged to delete this data immediately if one of the data subjects is not able to do so. is applicable for the following reasons:

      < li>The personal data concerning you are collected for the purposes for which they were collected or in any other manner are no longer necessary.
    1. You revoke your consent to which the processing pursuant to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 is subject. lit. a DSGVO and there is no other legal basis for the processing.
      2. You lodge an objection against the processing pursuant to Art. 21 (1) DSGVO and there are no priority claims. legitimate reasons for the processing, or you file an objection against the processing in accordance with Art. 21 para. 2 DSGVO. Processing.
    2. The personal data concerning you have been processed unlawfully.
    3. The deletion of personal data concerning you is prohibited for the fulfilment of a legal obligation under Union law or the law of the Member States to which the person responsible is subject.
      4. The personal data concerning you have been processed in relation to Information Society services offered to you. pursuant to Art. 8 para. 1 DSGVO.
    h4>b) Information to third parties

    If the person in charge has made the personal data concerning you public and is in accordance with Art. 17 Par. 1 DSGVO to their deletion, then he meets with consideration of the available technology and the Implementation costs reasonable measures, including technical measures, to ensure data controllers, who process the personal data, to inform you that you, as the data subject of them, have the right to Deletion of all links to these personal data or of copies or replications of these personal data. data requested.

    c) Exceptions

    The right to deletion does not exist insofar as processing is necessary

    .
    1. on the exercise of freedom of expression and of information;
      2. in order to fulfil a legal obligation which processing would be subject to under Union law or the law of the Member State in which the processing is carried out. Member State to which the responsible person is subject, or to carry out a task which is not carried out in the the public interest or in the exercise of official authority entrusted to the person responsible for the performance of his or her duties was; for reasons of public interest in the field of public health pursuant to Article 9(2)(h) and (i) and Art. 9 para. 3 DSGVO; li>for archival, scientific or historical research purposes in the public interest or for the use of the public domain statistical purposes pursuant to Art. 89 para. 1 DSGVO, to the extent that the law referred to in Section a) is likely to have an adverse effect on the makes the attainment of the objectives of such processing impossible or seriously prejudicial, or
    2. for the assertion, exercise or defence of legal claims.

    5. right to information

    Do you have the right to rectify, cancel or limit the processing vis-à-vis the controller the data subject is obliged to inform all recipients to whom the personal data relating to you have been disclosed, to notify such rectification or erasure of the data or limitation of the processing, it shall be unless this turns out to be impossible or involves a disproportionate effort.

    You shall have the right vis-à-vis the person responsible to be informed of those recipients.

    6. right to data transferability

    You have the right to access the personal data concerning you that you have provided to the person responsible, in a structured, common and machine-readable format. In addition, you have the right to use these data another data controller without being hindered by the data controller, to whom the personal data may be communicated. provided that they have been made available, provided that

    1. processing on the basis of a consent pursuant to Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO, or is based on an agreement pursuant to Art. 6 (1) (b) DSGVO and
    2. the processing is carried out by automated means.

    In exercising this right, you also have the right to obtain that the personal data concerning you be be transmitted directly by a responsible person to another responsible person, as far as this is technically feasible. is. Freedoms and rights of other persons must not be affected by this.

    The right to data portability shall not apply to the processing of personal data which is necessary for the performance of the following tasks is necessary for a task carried out in the public interest or in the exercise of official authority, which has been assigned to the person responsible.

    7. right to object

    They shall have the right at any time, on grounds arising from their particular situation, to object to the processing of the personal data relating to you, which takes place on the basis of Art. 6 Para. 1 lit. e or f DSGVO, This shall also apply to profiling based on these provisions.

    The person responsible shall no longer process the personal data relating to you, unless he/she can prove compelling grounds for processing worthy of protection that protect your interests, rights and freedoms or the processing serves the assertion, exercise or defence of legal claims.

    If the personal data concerning you are processed for the purpose of direct marketing, you have the right, at any time object to the processing of your personal data for the purpose of such processing. advertising; this also applies to profiling in so far as it is connected with such direct advertising.

    If you object to processing for the purposes of direct marketing, the personal data relating to you shall be processed in accordance with the provisions of this Article. data is no longer processed for these purposes.

    You have the possibility to use, in connection with the use of Information Society services, any of the following Directive 2002/58/EC - Exercise your right of objection by means of automated procedures in which technical specifications can be used.

    For data processing for scientific, historical or statistical research purposes:

    .

    You also have the right, for reasons arising from your particular situation, to object to the processing of your personal data in the following cases personal data relating to him/her which are used for scientific or historical research purposes or for the purposes of statistical purposes pursuant to Art. 89 (1) DSGVO, to contradict this.

    Your right of objection may be limited to the extent that it is likely to prejudice the realisation of the research or development project. statistical purposes is rendered impossible or seriously impaired and the restriction on the fulfilment of the research objectives is not removed. or for statistical purposes.

    8. right to revoke the declaration of consent

    under data protection law

    You have the right to revoke your declaration of consent under data protection law at any time. By the revocation the lawfulness of the processing carried out on the basis of the consent until revocation shall not be affected by the consent. touched. h3>9. automated case-by-case decision including profiling

    You have the right not to rely solely on any automated processing - including profiling - for any purpose whatsoever. decision that has legal effect with respect to you or that you may be subject to in your own similarly significantly affected. This shall not apply where the decision

    1. is necessary for the conclusion or performance of a contract between you and the person responsible,
      2. (li) by virtue of legislation of the Union or of the Member States to which the person responsible is subject, and that such legislation provides for appropriate measures to safeguard your rights and freedoms and to protect your rights and freedoms and to ensure that legitimate interests, or
    2. with your express consent.

    However, such decisions may not be applied to special categories of personal data as referred to in Article 9(1). DSGVO, unless Article 9(2)(a) or (g) applies and appropriate measures are taken to protect the rights and interests of the data subject. and your legitimate interests have been met.

    With regard to the cases referred to in (1) and (3), the person responsible shall take appropriate measures to ensure that the rights and obligations of the persons concerned are respected. to safeguard your freedoms and your legitimate interests, including at least the right to obtain intervention of a person on the part of the person responsible, on presentation of his or her own position and on appeal against the decision I've heard.

    10. Right of appeal to a supervisory authority

    p> Without prejudice to any other administrative or judicial remedy, you shall have the right to complaint to a supervisory authority, in particular in the Member State in which they are staying, at their place of work or the place of the alleged infringement, if you consider that the processing of the personal data concerning you does not infringe the rights of the individual concerned. personal data violates the DSGVO.

    The supervisory authority to which the complaint has been lodged shall inform the complainant of the state of play and the results of the appeal, including the possibility of a judicial remedy in accordance with Art. 78 DSGVO.

    VIII. Visual assistance software Eye-Able®

    Eye-Able® is a software of Web Inclusion GmbH to ensure barrier-reduced access to information on the internet for all people. The necessary files such as JavaScript, stylesheets and images are loaded from servers of the FH Aachen, just like this page. Eye-Able uses the browser's local storage to save the settings when functions are activated. All settings are only stored locally and are not transferred further.

    For more information on Eye-Able®, please see the following privacy policy: https://eye-able.com/datenschutz/