Data protection policy
1. Name and address of the responsible controller
The responsible controller as defined in the EU General Data Protection Regulation (GDPR) and other national data protection laws of the EU member states as well as other data protection-related provisions is:
Universität Münster / University of Münster
represented by its Rector, Prof Dr Johannes Wessels,
Schlossplatz 2, D-48149 Münster
Tel.: + 49 251 83-0
Email:
2. Contact details of the data protection officer
The data protection officer appointed by the responsible controller can be reached under:
Stabsstelle Datenschutz
Schlossplatz 2, D-48149 Münster
Tel.: + 49 251 83-22446
Email:
3. General information on data processing
We collect and use the personal data of our users insofar as necessary for operating a functional website and delivering our content and services, and to the extent to which the law permits.
Legal basis for processing personal data
Whenever we obtain the consent from a data subject to process personal data, Art. 6 (1 a) GDPR serves as the legal basis for processing this personal data.
Whenever processing such data is necessary for compliance with a legal regulation, to which the University of Münster is subject, Art. 6 (1 c) GDPR serves as the legal basis.
If processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the University of Münster, Art. 6 (1 e) GDPR serves as the legal basis for processing this data.
If processing is necessary for safeguarding the legitimate interests of the University of Münster or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 (1 f) GDPR serves as the legal basis for processing this data. This does not apply to processing tasks which the University of Münster is obliged to perform as a public authority.
Duration of storage of personal data
We reserve the right to retain the data subject’s personal data for as long as the purpose of such storage exists. If processing is permitted on the basis of the subject’s consent, his/her personal data is only stored until the data subject withdraws his/her consent, except in cases where processing is governed by a different legal basis.
Rights of the data subject
The data subject has the right to information on whether the University of Münster is processing their personal data (Art. 15 GDPR), the right to the rectification of their personal data (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to object to processing of their data (Art. 21 GDPR) and the right to withdrawal of their consent (Art. 7 (3) GDPR).
In addition, the data subject has the right to file a complaint with a supervisory authority, e.g., with the State representative for data protection and freedom of information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), PO box 20 04 44, D-40102 Düsseldorf, Tel.: +49 211 38424-0, Email:
4. Provision of the website and creation of log files
Scope of data processing
For every access query to our website, our server automatically collects data and information from the querying computer system.
The following data is collected in this process:
(1) information on the browser type and version
(2) the user’s operating system
(3) the user’s Internet service provider
(4) the user’s IP address
(5) the date and time of the query
(6) websites from which the user’s system was directed to our website
(7) websites which the user’s system accesses via our website
This data is compiled in log files and saved on our server. No further personal data is stored together with the log file data.
Legal basis for processing
The legal basis for temporarily processing data and log files is provided in Art. 6 (1 f) GDPR.
Purpose of processing
The temporary storage of the IP address on our server is necessary for granting the user’s system access to our website. For this purpose, the user’s IP address must remain stored on our server for the duration of the session.
Data storage in log files is required to ensure the functionality of the website. Furthermore, the data enables us to optimise the website and guarantee the security of our IT systems. Data analysis for marketing-related purposes is not performed in this context.
These purposes correspond to the legitimate interests of data processing as indicated in Art. 6 (1 f) GDPR.
Duration of storage of personal data
The data is erased at the conclusion of the respective session.
All data stored in log files is erased within seven days. A longer period of data storage is possible. In such cases, the user’s IP address is erased or anonymised in such a way that renders it impossible to identify the querying client.
5. Use of cookies
Scope of data processing
Our website uses cookies. Cookies are small text files saved on or by the web browser, installed on the user’s computer system. Cookies are often saved on the user’s operating system whenever a user accesses a website. The file contains a distinctive sequence of characters which enables the browser to correctly identify a website when it is visited again.
We use cookies to improve the user friendliness of our website. Some elements on our website make it necessary to identify a querying browser after a page change. The following data is saved and transmitted through and by cookies:
(1) login information
(2) session settings
Legal basis for processing
The legal basis for processing personal data using technically necessary cookies is provided in Art. 6 (1 f) GDPR.
Purpose of processing
The purpose of using technically necessary cookies is to make it easier for the client to use the website.
The user data collected with technically necessary cookies is not used for creating user profiles.
Duration of storage of personal data
Cookies are saved on the user’s computer which transfers them to our server. Consequently, as the user, you have complete control over how cookies are used by your system. By changing the settings in your web browser, you can deactivate or restrict the transmission of cookies to external websites. You can also delete all saved cookies on your system at any time. Restrictions on cookie usage can be managed automatically by your browser. If you choose to deactivate cookies for our website, it may prevent you from taking full advantage of all the features offered on this website.
6. Email contact
Scope of data processing
On our website, users can personally contact the the editors or authors via email by using the email address provided for such purposes. In this case, the email together with the user’s personal data is saved on our server.
The user’s personal data is not shared with third parties in this context. The data is exclusively used for purposes of establishing and maintaining contact with the user.
Legal basis for processing
The legal basis for processing the user’s personal data, acquired as a result of the user sending an email, is provided in accordance with Art. 6 (1 f) GDPR.
Purpose of processing
The user’s personal data is processed only for the purpose of establishing and maintaining contact with the user. This corresponds to the legitimate interests of processing personal data in accordance with Art. 6 (1 f) GDPR.
Duration of storage of personal data
All personal data sent to us via email is deleted as soon as the respective dialogue with the user is concluded. The dialogue is deemed concluded when circumstances indicate that the issue in question has been clarified to the satisfaction of all parties.
