Privacy policy
for the project website www.hypobatt.eu
of the Ingolstadt University of Applied Sciences (THI)
The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the statutory provisions (European Data Protection Regulation - DSGVO, Bavarian Data Protection Act - BayDSG).
In accordance with these provisions, we inform you in this data protection information about the aspects of the processing of your data in this application that are relevant for you.
Name and contact details of the person responsible
Ingolstadt University of Applied Sciences (THI)
Esplanade 10, 85049 Ingolstadt, Germany
represented by the President Prof. Dr. Walter Schober
Phone +49 841 9348-0
Email info@thi.de
Contact details of the data protection officer
Ingolstadt University of Technology
Esplanade 10, 85049 Ingolstadt
Phone +49 841 9348-1234
Email datenschutz@thi.de
1 Introduction
With our website, we inform you about our research project in accordance with the tasks assigned to us, pursuant to Art. 6 Para. 1 lit. e DSGVO in conjunction with Art. 4 BayDSG, Art. 2 Para. 2 BayHIG. Art. 4 BayDSG, Art. 2 para. 2 BayHIG. You can contact us via this website or receive regular information by newsletter.
2 Enquiries by e-mail, telephone or contact form
2.1 Purpose of processing
If you contact us by e-mail, telephone or the contact form on the website, we store and process personal data for the purpose of processing your enquiry, such as
- your surname and first name
- your e-mail address or telephone number, if you have provided us with this information
- your request and the communication about it.
2.2 Legal basis
The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 lit. a DSGVO, our legitimate interest in answering your enquiry in accordance with Art. 6 para. 1 lit. f DSGVO or, if your enquiry is in connection with a contract or is required for pre-contractual measures, Art. 6 para. 1 lit. b DSGVO.
2.3 Recipients
Recipients of your data are service providers who act as order processors for THI. We oblige these service providers to comply with data protection regulations within the meaning of Art. 28 DSGVO. Your data will not be passed on beyond this.
2.4 Storage period
We store your data until you request us to delete it, you revoke your consent to processing it or the purpose for storing it no longer applies. Mandatory legal provisions (e.g. statutory retention obligations) remain unaffected.
2.5 Provision mandatory or required
The provision of your data is voluntary. However, we cannot process your request without this data.
3 Registration on our website
3.1 Purpose of the processing
Certain content and functions on our website are only accessible if you register. We collect the following data for registration:
- Mail address
- Password
To verify that a registration is actually made by the owner of an e-mail address, we use the "double opt-in" procedure.
3.2 Legal basis
The legal basis for this data processing is your express consent in accordance with Art. 6 Para. 1 lit. a DSGVO. You can revoke this at any time with effect for the future at info@hypobatt.eu.
3.3 Recipients
Recipients of your data are service providers who act as processors for THI. We oblige these service providers to comply with data protection regulations within the meaning of Art. 28 DSGVO. Your data will not be passed on beyond this.
3.4 Storage period
We process and store your data only as long as we have your consent.
3.5 Provision mandatory or required
The provision of your data is voluntary. However, without this data we cannot grant you access to the extended content and functions.
4 Comment function (blog)
4.1 Purpose of processing
When you leave a comment on our website, we store not only the content but also the time of creation and your user name. This is for our security and to be able to take action against illegal content if necessary.
4.2 Legal basis
The processing of this data is based on Art. 6 para. 1 lit. e DSGVO in conjunction with. Art. 4 BayDSG, Art. 2 para. 2 BayHIG for public discussion and science communication.
4.3 Recipients
Recipients of your data are service providers who act as processors for THI. We oblige these service providers to comply with data protection regulations in the sense of Art. 28 DSGVO. Your data will not be passed on beyond this.
4.4 Storage period
We store your data until you request us to delete it or the purpose for storing it no longer applies. Mandatory legal provisions (e.g. statutory retention obligations) remain unaffected. We reserve the right to delete any content at any time, even without prior notice.
4.5 Provision mandatory or required
The provision of your data is voluntary. However, without this data we cannot grant you access to the comment function.
5 Newsletter
5.1 Purpose of the processing
If you register for our newsletter, we will send you information about our project and our research institute. To verify that a registration is actually made by the owner of an e-mail address, we use the "double opt-in" procedure. We process and store the following personal data:
- Your surname and first name
- Your e-mail address
5.2 Legal basis
The legal basis for this data processing is your express consent in accordance with Art. 6 Para. 1 lit. a DSGVO. You can revoke this consent at any time with effect for the future at info@hypobatt.eu. There is also a corresponding link in every newsletter.
5.3 Recipients
Recipients of your data are service providers who act as order processors for THI. We oblige these service providers to comply with data protection regulations in accordance with Art. 28 DSGVO. Your data will not be passed on beyond this.
5.4 Storage period
We store your data until you request us to delete it, you revoke your consent to processing it or the purpose for storing it no longer applies. Mandatory legal provisions (e.g. statutory retention obligations) remain unaffected.
5.5 Provision mandatory or required
The provision of your data is voluntary. However, we cannot send you a newsletter without this data.
6 General operation of our web service
For the creation, operation and hosting of our website, we use the service provider Wix.com Ltd, 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter "WIX"). This is a tool that makes it easier for us to manage and host the website.
When you contact our website (for example, via an app or browser), WIX collects user behaviour, pages visited, the region from which you access the website and the number of visitors. In addition, WIX automatically collects information of a general nature. This information includes, for example, the type of web browser, the operating system used, your IP address, time information and the like.
The data may be stored in various WIX data centres around the world. We have preset a storage location that is either within the scope of the GDPR or in a country for which there is an adequacy decision by the EU Commission.
You can find further details in the data protection declaration of WIX. There you will also find further information on your rights in this regard and setting options for protecting your privacy:
https://de.wix.com/about/privacy
6.1 Purpose of processing
We process the data in particular for the purpose of ensuring the smooth use of our website, to guarantee network and information security and for other administrative purposes. Information of this kind is statistically evaluated by us, if necessary, in order to optimise our website and the technology behind it.
6.2 Legal basis
The processing is carried out in accordance with Art. 6 para. 1 lit. e DSGVO in conjunction with Art. 6 para. 3 DSGVO. Art. 6 para. 3 DSGVO, Art. 6 para. 1 BayDSG for the operation of our website, for certain functions after we have obtained consent from you pursuant to Art. 6 para. 1 lit. a DSGVO, as well as on the basis of our legitimate interest pursuant to Art. 6 Art. 1 lit. f DSGVO.
6.3 Recipients
The recipients of your data are WIX and its sub-service providers. We have concluded an agreement with WIX for processing on behalf within the meaning of Art. 28 DSGVO.
6.4 Storage period
Your data will be deleted as soon as the purpose for storing it no longer applies, but at the latest after three months.
6.5 Provision prescribed or required
The provision of the aforementioned personal data is not required by law or contract. However, without this data, the functionality of our website cannot be guaranteed. For this reason, an objection is excluded.
6.6 Secure data transmission
When you call up this information offer, we provide an HTTPS-encrypted connection with the TLS 1.2 encryption protocol, so that your data is protected from being read by third parties during data transmission. We recommend that you keep your internet browser up to date in order to use this option.
7 Cookies
We use cookies to ensure the correct technical and functional provision of this information service. Cookies are small text files that are stored on your computer and saved by your browser. Cookies do not cause any damage to your computer and do not contain viruses.
The legal basis for the storage of information and the processing of personal data by means of cookies is § 25 TTDSG. The use of functional cookies is voluntary. If these cookies are blocked, the provision of certain functions may not be fully possible.
8 Data subject rights
Under the General Data Protection Regulation, you have the following rights in relation to your personal data:
- If your personal data are processed, you have the right to obtain information about the data stored about you (Art. 15 DSGVO). Please note that this right to information may be restricted or excluded in certain cases (cf. in particular Art. 10 of the Bavarian Data Protection Act - BayDSG).
- If incorrect personal data is processed, you have the right to have this data corrected (Art. 16 DSGVO).
- If the legal requirements are met, you may request the deletion or restriction of processing (Art. 17 and 18 DSGVO).
- If you have consented to the data processing or if there is a contract for data processing and the data processing is carried out with the help of automated procedures, you may have the right to data portability (Art. 20 DSGVO).
- If you make use of your above-mentioned rights, the public body will check whether the legal requirements for this are met.
- Furthermore, you have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for us is the Bavarian State Commissioner for Data Protection, Wagmüllerstraße 18, 80538 Munich.
Right of objection
For reasons arising from your particular situation, you may object to the processing of personal data concerning you by us at any time (Art. 21 DSGVO). If the legal requirements are met, we will subsequently no longer process your personal data.
Right to object to direct marketing
If your personal data is processed for direct marketing purposes, you may object to the processing of your personal data by us at any time (Art. 21 (2) DSGVO). This also applies to profiling, insofar as it is connected with this direct advertising. If the legal requirements are met, we will subsequently no longer process your personal data.
Right of revocation
You may revoke your consent at any time with effect for the future (Art. 7 (3) DSGVO). This does not affect the lawfulness of the data processing carried out on the basis of the consent until the revocation.