Privacy Policy
Data protection is a top priority for the Technical University of Munich. We want you to know when we collect which data and how we use it. Personal data is collected on this central university web server (www.tum.de) only to the extent technically necessary. Data processing is subject to applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), the Bavarian Data Protection Act (BayDSG), and the Telemedia Act (TMG).
Below, we provide information on the nature, scope, and purpose of the collection and use of personal data. This information can be accessed at any time on our website.
A. General Information.
NAME AND CONTACT DETAILS OF THE CONTROLLER
Technical University of Munich
Mailing address: Arcisstr. 21, 80333 Munich
Phone: 089/289-01
Fax: 089/289-22000
poststelle(at)tum.de
CONTACT DETAILS OF THE DATA PROTECTION OFFICER
The Data Protection Officer of the Technical University of Munich
Mailing address: Arcisstr. 21, 80333 Munich
Phone: 089/289-17052
Email: beauftragter(at)datenschutz.tum.de
PURPOSES AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
The purpose of the processing is to fulfill the public duties assigned to us by law, in particular to inform the public.
Unless otherwise specified, the legal basis for the processing of your data is derived from Art. 4(1) of the Bavarian Data Protection Act (BayDSG) in conjunction with Art. 6(1)(e) of the General Data Protection Regulation (GDPR). Accordingly, we are permitted to process the data necessary to fulfill a task incumbent upon us.
RECIPIENTS OF PERSONAL DATA
The technical operation of our data processing systems is carried out by:
Leibniz Computing Center (LRZ) of the Bavarian Academy of Sciences
Boltzmannstraße 1
D-85748 Garching near Munich
Phone: (089) 35831 8000
Fax: (089) 35831 9700
Email: lrzpost(at)lrz.de
www.lrz.de
If necessary, your data will be transferred to the competent supervisory and auditing authorities for the exercise of their respective control rights.
To prevent threats to information technology security, data may be forwarded to the State Office for Information Technology Security during electronic transmission and processed there in accordance with Art. 12 et seq. of the Bavarian E-Government Act.
DURATION OF STORAGE OF PERSONAL DATA
Your data will only be stored for as long as is necessary to fulfill our obligations in compliance with statutory retention periods.
YOUR RIGHTS
- To the extent that we process your personal data, you, as the data subject, have the following rights:
- You have the right to access the data stored about you (Art. 15 GDPR).
- If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR).
- If the legal requirements are met, you may request erasure or restriction of processing (Art. 17 and 18 GDPR).
- If you have consented to the processing or a data processing agreement exists and the data processing is carried out using automated means, you may have a right to data portability (Art. 20 GDPR).
- If you have consented to the processing and the processing is based on this consent, you may withdraw your consent at any time with effect for the future. The lawfulness of the data processing carried out on the basis of consent until its withdrawal remains unaffected by this.
You have the right to object to the processing of your data at any time for reasons arising from your particular situation, provided that the processing is based exclusively on Article 6(1)(e) or (f) of the GDPR (Article 21(1), first sentence, of the GDPR) .
RIGHT TO FILE A COMPLAINT WITH THE SUPERVISORY AUTHORITY
You also have the right to file a complaint with the Bavarian State Commissioner for Data Protection. You can reach them using the following contact information:
Mailing address: P.O. Box 22 12 19, 80502 Munich
Address: Wagmüllerstraße 18, 80538 Munich
Phone: 089 212672-0
Fax: 089 212672-50
Email: poststelle(at)datenschutz-bayern.de
FURTHER INFORMATION
For more detailed information regarding the processing of your data and your rights, you can contact us using the contact details listed above (at the beginning of A.).
B. Information about the website.
TECHNICAL IMPLEMENTATION
Our web server is operated by the Leibniz Computing Center of the Bavarian Academy of Sciences (LRZ). The personal data you provide when visiting our website is therefore processed on our behalf by the LRZ:
Leibniz Computing Center (LRZ) of the Bavarian Academy of Sciences
Boltzmannstraße 1
D-85748 Garching near Munich
Phone: (089) 35831 8000
Fax: (089) 35831 9700
Email: lrzpost(at)lrz.de
www.lrz.de
LOGGING
When you visit this or other websites, you transmit data to our web server via your web browser. The following data is temporarily recorded in a log file during an active connection for communication between your web browser and our web server:
- IP address of the requesting computer
- Date and time of access
- Name, URL, and amount of data transferred for the accessed file
- Access status (requested file transferred, not found, etc.)
- Identification data of the browser and operating system used (if transmitted by the requesting web browser)
- Website from which the access originated (if transmitted by the requesting web browser)
The data in this log file is processed as follows:
- The log entries are continuously and automatically analyzed to detect attacks on the web servers and respond accordingly.
- In individual cases, i.e., in the event of reported malfunctions, errors, and security incidents, a manual analysis is performed.
- Log entries older than seven days are anonymized by truncating the IP address.
- The anonymized logs are used to generate access statistics. The software used for this purpose is operated locally by the LRZ.
The IP addresses contained in the log entries are not merged with other data sets by the LRZ, so that the LRZ cannot identify individual persons.
ACTIVE COMPONENTS
Active components such as JavaScript, Java applets, or ActiveX controls are used on this website. You can disable this functionality by adjusting the settings of your web browser.
COOKIES
To expand the functionality of our website and make it more convenient for you to use, we sometimes use so-called “cookies.” With the help of these cookies, data may be stored on your computer when you visit our website. However, you can disable the storage of cookies or set your browser so that cookies are only stored for the duration of the respective Internet connection. However, this may limit the functionality of our website.
Some videos on this website are embedded from YouTube. When playing the videos, the service provider may store cookies on the user’s computer. We have no control over this storage.
USE OF TWITTER
Our website features functions provided by Twitter. These are offered by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. By using Twitter and the “Retweet” function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transmitted to Twitter in the process.
Please note that, as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by Twitter. For more information, please refer to Twitter’s privacy policy at http://twitter.com/privacy.
USE OF YOUTUBE PLUGINS (VIDEOS)
Plugins from www.youtube.com are integrated into our website, which is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). When you visit pages on our website that contain such a plugin, a connection is established with the YouTube servers, and the plugin is displayed on the website via a notification to your browser. This transmits information to the YouTube server regarding which of our web pages you have visited. If you are logged in as a member of YouTube at that time, YouTube associates this information with your respective personal user accounts on these platforms. When you use these plugins—such as clicking a video’s play button or posting a comment—this information is associated with your YouTube user account, which you can prevent only by logging out before using the plugin. For more information on the collection and use of data by the platform or plugins, please refer to YouTube’s privacy policy at the following link: http://www.google.com/intl/de/policies/privacy/.
We use embedded YouTube videos in enhanced privacy mode. This means that YouTube does not store cookies for a user who views a website with an embedded YouTube video player but does not click on the video to start playback.
OpenStreetMaps
We integrate maps from the “OpenStreetMap” service, which are provided by the OpenStreetMap Foundation (OSMF) under the Open Data Commons Open Database License (ODbL). The OpenStreetMap Foundation’s privacy policy can be found here: https://wiki.osmfoundation.org/wiki/Privacy_Policy. Our site obtains map content from https://www.openstreetmap.de, which is operated by FOSSGIS e.V., Römerweg 5, 79199 Kirchzarten. The privacy policy of FOSSGIS e.V. can be found here: https://www.fossgis.de/datenschutzerklärung/.
To the best of our knowledge, your data is used by OpenStreetMap exclusively for the purposes of displaying map functions and temporarily storing your selected settings. This data may include, in particular:
- IP address for the delivery of data; storage in logs is anonymized,
- browser and device type,
- operating system,
- the fact that you are accessing content from OpenStreetMap via this website, and
- date and time of the request.
This data is processed exclusively on servers in the Federal Republic of Germany.
TWO CLICKS FOR BETTER DATA PROTECTION
Only when you click a social network button does it become active, and your browser establishes a direct connection with the respective servers. Clicking the button for the first time therefore means that you are giving your consent to the transfer of data to the corresponding provider. By activating the button, the provider receives the information that you have accessed the corresponding page of our website. If you are logged into the respective social network, your visit can be associated with your account from that moment on, even if you do not confirm the button a second time. If you interact with the plugins—for example, by posting a comment by clicking the button again—the corresponding information is transmitted directly from your browser to the provider and stored there.
C. Information on individual processing operations.
ONLINE FORMS
Personal data that you may transmit to us via contact forms, registration forms, and similar web pages on our web servers is collected only with your consent and is used exclusively for the purpose stated in the forms. Please note the relevant information on the forms. All forms collect only the personal data that is absolutely necessary. Typically, personal data is stored in a database at the Leibniz Computing Center and is accessible to the relevant TUM staff members. If the purpose of data collection is to make the data accessible to other TUM members, the principle of data minimization is observed. Your data will not be disclosed to third parties unless this is explicitly stated in the form.
Your personal data will be deleted once the purpose has been fulfilled, unless you have given your consent to further contact.
You may revoke your consent at any time with future effect. To do so, please contact it-support(at)tum.de. Your data will then be deleted immediately.