Privacy Policy
I. Name and address of the data controller
The people responsible for the basic data protection regulation and other national data protection laws of the member states as well as other data protection regulations are:
Verantwortliche im Sinne der Datenschutz-Grundverordnung und anderer nationaler Datenschutzgesetze der Mitgliedstaaten sowie sonstiger datenschutzrechtlicher Bestimmungen ist die:
Technische Universität Braunschweig
Universitätsplatz 2
38106 Braunschweig
Tel.: +49 (531) 391- 0
E-Mail:
Represented by the president, Prof. Dr. Anke Kaysser-Pyzalla
https://www.tu-braunschweig.de/struktur/verwaltung/praesidium/praesident
II. Name and address of the protection supervisor
The protection supervisor for personal data for the Technical University of Braunschweig is:
Dr. Bernd Nörtemann
Bienroder Weg 80
38106 Braunschweig
Tel.: +49 (531) 391 – 7654
E-Mail:
https://www.tu-braunschweig.de/datenschutz
III. General information about Data Processing
1. Scope of personal data processing
The EXCEED SWINDON project (TU Braunschweig) collects and processes personal data of its users only insofar as this is necessary for the provision of a functional website and its contents and services and within a legal basis for the EXCEED SWINDON project (TU Braunschweig).
2. Legal basis for the processing of personal data
Insofar as the processing of personal data requires the consent of the data subject, Art. 6 clause 1 lit. a EU General Data Protection Regulation (GDPR) as legal basis.
In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 clause 1 lit. b GDPR as legal basis. This also applies to processing operations required to carry out pre-contractual actions.
Insofar as processing of personal data is required to fulfil a legal obligation to which EXCEED SWINDON (TU Braunschweig) is subject, Art. 6 clause 1 lit. c GDPR as legal basis.
In the case that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 clause 1 lit. d GDPR as legal basis.
If the processing is necessary for the performance of a task which is in the public interest or in the exercise of official authority which has been assigned to the EXCEED SWINDON project (TU Braunschweig), Art. 6 (1) (g) GDPR i. V. m. § 3 NDSG the legal basis for processing.
If the processing is necessary for the protection of a legitimate interest of the EXCEED SWINDON project (TU Braunschweig) or a third party and predominantly the interests, fundamental rights and fundamental freedoms of the person concerned are not the foremost interest, then Art. 6 clause 1 lit. f GDPR as legal basis.
3. Duration of storage of personal data
The personal data of the data subject are stored by the EXCEED SWINDON project (TU Braunschweig) only as long as the purpose for the storage exists. If the processing is based on the consent of the data subject, the data will be stored until the consent is revoked, unless there is another legal basis for the processing.
4. Rights of the person concerned
4.1 Information rights
People concerned can demand a confirmation from the person responsible, if personal data, which concerns them, are processed by the EXCEED SWINDON project (TU Braunschweig). If this is the case, they can request information from the person responsible about the following:
a) the purposes for which the personal data are processed;
b) the categories of personal data that are processed;
(c) the recipients or the categories of recipients to whom the personal data relating to them have been disclosed or are yet to be disclosed;
(d) the planned duration of storage of the personal data concerning them or, if specific information is not available, criteria for determining the duration of storage;
(e) the existence of a right to rectification or erasure of personal data concerning them, a right to restriction of processing by the controller or a right to object to such processing;
f) the existence of a right of appeal to a supervisory authority;
4.2 Right to rectification
Affected parties have a right of rectification and/or completion to the controller, if the processed personal data concerning them is incorrect or incomplete. The responsible person must make the correction without delay.
4.3 Right to restriction of processing
Subject to the following conditions, data subjects may request the restriction of the processing of personal data concerning them, if:
(a) they contest the accuracy of the personal data relating to them for a period of time enabling the controller to verify the accuracy of the personal data;
(b) the processing is unlawful and they refuse to delete the personal data and instead request the restriction of the use of the personal data;
(c) the controller no longer needs the personal data for the purposes of the processing, but needs it for the purposes of enforcing, pursuing or defending legal claims;
d) you have filed an objection against the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh your reasons.
If the processing of personal data concerning you has been restricted, such data may be stored, except that that has your consent, only for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for important public reasons.
4.4 Right to cancellation
A) Obligation to delete
Affected parties may require the controller to delete the personal data concerning them without delay, and the controller is required to delete that data immediately, provided one of the following is true:
(a) the personal data concerning them are no longer necessary for the purposes for which they were collected or otherwise processed.
b) The data subject revokes their consent, based on the processing acc. Art. 6 clause 1 lit. a or Art. 9 clause 2 lit. a GDPR and there is no other legal basis for the processing.
c) The person concerned acc. Art. 21 clause 1 GDPR objects to the processing and there are no prior justifiable reasons for the processing, or it submits. Art. 21 clause 2 GDPR Opposition to processing.
d) The personal data concerning them were processed unlawfully.
e) The deletion of the personal data concerning them is necessary for the fulfilment of a legal obligation under Union law or the law of the Member States to which the controller is subject.
f) The personal data concerning them were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.
B) Exceptions to the cancellation obligation
The right of erasure does not exist if the processing is necessary in order to:
a) exercise the right to freedom of expression and information;
(b) fulfil a legal obligation, which requires processing under Union or national law to which the controller is subject or for the performance of a task of public interest or in the exercise of official authority delegated to the controller;
c) for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
d) for archival purposes of public interest, for scientific or historical research purposes or for statistical purposes in accordance with Art. Article 89 (1) GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
e) to assert, exercise or defend legal claims.
4.5 Right to information
If data subjects have the right of rectification, erasure or restriction of processing, they are obliged to notify all the recipients to whom the personal data concerns have been corrected or deleted or processing restricted, unless: this proves to be impossible or involves a disproportionate effort.
You have a right to be informed about these recipients from the person responsible.
4.6 Right to Data Portability
You have the right to receive personally identifiable information that you have provided to the person responsible in a structured, understandable and machine-readable format. In addition, data subjects have the right to transfer this data to another person without hindrance by the person responsible for providing the personal data, provided that
a) the processing on a consent acc. Art. 6 clause 1 lit. a GDPR or Art. 9 clause 2 lit. a GDPR or on a contract acc. Art. 6 clause 1 lit. b GDPR is based and
b) the processing is done by automated means.
In exercising this right, you also have the right to have that personal data relating to their person transferred directly from one person responsible to another person responsible, as far as technically feasible. Freedoms and rights of other people may not be affected.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.
4.7 Opposition rights
Affected parties have the right at any time, for reasons arising from their particular situation, to object to the processing of personal data relating to them which, on the basis of Art. 6 clause 1 lit. e or f GDPR
The controller will cease to process personal data relating to him unless he can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.
Affected parties have the right to revoke their data protection consent at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
4.8 Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, interested parties shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their residence, place of work or place of alleged infringement, if they consider that the processing of the personal data concerning them is violating the GDPR.
The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.
IV. Description of the website and creation of log files
1. Description and scope of data processing
Every time a website of the EXCEED SWINDON project is accessed, the system automatically collects data and information from the computer system of the calling computer.
In detail, the following data is collected:
• Information about the browser type and version used
• The operating system of the user
• The IP address of the user
• Date and time of access
• Websites that are accessed by the user’s system via the website of the EXCEED SWINDON project (TU Braunschweig)
The data are stored in the log files of the TU system. Storage of this data together with other personal data of the user does not take place.
2. Legal basis for data processing
The legal basis for the temporary storage of data is Art. 6 clause 1 lit. f GDPR.
3. Purpose of the data processing
Temporary storage of the IP address by the system is necessary to maintain service operation. To do this, the user’s IP address must be kept for the duration of the session.
Storage in log files is done to ensure the functionality of the website. In addition, the EXCEED SWINDON project (TU Braunschweig) administers the data to optimize the website and to ensure the security of information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
For these purposes, the legitimate interest in data processing is in accordance with Art. 6 clause 1 lit. f GDPR.
4. Duration of storage
The data is deleted when the session is finished. In the case of storing the data in log files, this is the case after no more than seven days.
Additional storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.
V. Use of cookies
1. Description and scope of data processing
The website of the EXCEED SWINDON project (TU Braunschweig) uses cookies. These are text files which are stored in the Internet browser or by the Internet browser on the computer system or the terminal of the user. If a user calls up a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is reopened.
The EXCEED SWINDON project (TU Braunschweig) uses cookies to make the website more user-friendly. Some elements of the website require that the calling browser be identified even after a page break.
In the cookie, a unique, randomly generated identification number of the website visit is stored and transmitted for the duration of the visit.
On some pages, the EXCEED SWINDON project (TU Braunschweig) also uses cookies on its web pages, which allow an analysis of the surfing behaviour of the users.
When calling the website of the EXCEED SWINDON project (TU Braunschweig), the users are informed by an info banner about the use of cookies and refer to this privacy policy. In this context, there is also an indication of how the storage of cookies in the browser settings can be prevented.
In case of activation of the crisis communication function (highlighted display of information in crisis and / or emergency) on the website, whether the crisis communication page has already been displayed to the user is checked.
2. Legal basis for data processing
The legal basis for the processing of personal data using technically necessary cookies is Article 6 (1) lit. f GDPR.
The legal basis for the processing of personal data using cookies for analysis purposes is the consent of the user Art. 6 clause 1 lit. a GDPR.
3. Purpose of the data processing
The purpose of using cookies that are technically necessary is to simplify the use of websites for users. Some functions of the web pages of the EXCEED SWINDON project (TU Braunschweig) cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page break. For these purposes, their legitimate interest in the processing of personal data pursuant to Art. 6 clause 1 lit. f GDPR.
Cookies are required for the following applications:
a) Provision of the website
b) To recall the consent to the cookie info banner
c) Display of the crisis communication page
The user data collected through technically necessary cookies will not be used to create user profiles.
4. Duration of storage, objection, and disposal options
Cookies are stored on the computer of the user and transmitted by this to the EXCEED SWINDON project (TU Braunschweig). Therefore, users also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies already saved can be deleted at any time. This can also be done automatically. If cookies are disabled for the website of the EXCEED SWINDON project (TU Braunschweig), it may not be possible to use all functions of the website to the full.
VI. Contact
1. Description and scope of data processing
On the websites of EXCEED SWINDON project (TU Braunschweig) it is possible to contact us via forms or by e-mail. In this case, the transmitted personal data of the user will be stored.
In this context, there is no disclosure of the data to third parties. The data will be used exclusively for the processing of the stated purpose.
2. Legal basis for data processing
The legal basis for the processing of the transmitted data in the context of establishing contact is Article 6 (1) GDPR.
3. Purpose of the data processing
The processing of personal data is used by the EXCEED SWINDON project (TU Braunschweig) solely to process the contact. This is also the legitimate interest in the processing of data.
4. Duration of storage, objection and disposal options
The personal data that has been transmitted will be deleted once the purpose is fulfilled.
If the user contacts the EXCEED SWINDON project (TU Braunschweig), the user may object to the storage of his personal data at any time. In such a case, the communication won’t be continued or resumed. All personal data stored in the course of contacting will be deleted in this case.