Privacy Notice

Note: The following English translation is intended solely to assist reader understanding and is not legally binding. Please see the original German text for the official version.

General information on the processing of your data

Note: The following English translation is intended solely to assist reader understanding and is not legally binding. Please see the original German text for the official version. The Philipps-Universität Marburg processes data in accordance with the provisions of data protection law, in particular the European General Data Protection Regulation (GDPR) and the Hessian Data Protection and Freedom of Information Act (Hessisches Datenschutz- und Informationsfreiheitsgesetzes / HDSIG). This privacy notice provides you with the information required by Art. 13 GDPR.

The Philipps-Universität Marburg takes the protection of your data seriously. In a precise, transparent, understandable, and easily accessible manner, we would like to inform you when we collect which data when you access our website and how we use that data.

Your data will be stored or processed in the state of Hesse of the Federal Republic of Germany and not in areas outside the jurisdiction of the GDPR. This website operates on the IT systems of the Philipps-Universität Marburg as well as Mittwald GmbH.

Due to the further development of our website and the implementation of new technologies, changes to the content of this privacy notice may become necessary. We therefore ask you to read this privacy notice again from time to time.

• Scope
• Name and address of the responsible personname
• Data protection officer
• Processing of your data
• Transferring of personal data
• Your rights
• Analysis Tools
• Validity

Scope

This privacy notice applies to the Philipps-Universität Marburg’s website at “https://www.calm-qe.de” and to the personal and non-personal data collected on our website.

For the websites of other providers which are referred to, e.g. via links, the privacy notices and policies of those providers apply.

Name and address of the responsible person

Responsible for the processing of personal data on this website is the:

Philipps-Universität Marburg – The President
Prof. Dr. Thomas Nauss
Biegenstrasse 10, 35037 Marburg, Germany
Tel. +49 (0)6421 28-20, Fax +49 (0)6421 28-22500
Internet: https://www.uni-marburg.de
Email: info@uni-marburg.de

Data protection officer

Philipps-Universität Marburg – Data Protection Officer
Dr. Rainer Viergutz
Biegenstrasse 10, 35037 Marburg, Germany
Tel. +49 (0)6421 28-20
Email: datenschutz@uni-marburg.de

Processing of your data

According to Article 4 of the GDPR, “‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.”

Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6(1)(a) GDPR serves as the legal basis for the processing.
If the processing of personal data serves to fulfill a legal obligation, we process your data in accordance with Art. 6(1)(c) GDPR.

If the processing is necessary for the undertaking of a task which is in the public interest or in the exercising of the public authority vested in the Philipps-Universität Marburg, Art. 6(1)(e) GDPR serves as the legal basis.

Access data

In order to deliver our website to your device or web browser, temporary storage of the IP address by the web servers of the Mittwald GmbH is necessary.

When you access our website, the following data is stored in the form of access logs:

• the IP address of the client / accessing device
• the (server) time of access
• the HTTP method and the URL of the request
• the HTTP status code of the server response
• the byte size of the server response
• the page of origin transmitted by the browser
• the user agent (the browser’s self-designation)

The access logs of the web servers record which page views occurred at what time. They contain the following data: IP, directory protection user, date, time, pages accessed, logs, status code, data volume, referrer, user agent, host name accessed.

The IP addresses are stored anonymously. For this purpose, the last one to three digits are removed, i.e. “127.0.0.1” becomes “127.0.0.0”. IPv6 addresses are also anonymized. The anonymized IP addresses are stored for 60 days. Details of the directory protection user used are anonymized after one day.

Error logs, which record incorrect page views, are deleted after seven days. In addition to the error messages, these contain the accessing IP address and, depending on the error, the website accessed.

The assignment of an IP address to a natural person is thus not possible or only possible through a disproportionately large undertaking.

In order to ward off an ongoing or imminent deliberate attack on our website and to secure evidence thereof, the Philipps-Universität Marburg reserves the right to briefly deactivate the anonymization of the IP address in the log files.

Transferring of personal data

References to other websites

Our website may contain references (“links”) to external content. The links may refer to services that are also operated by the Philipps-Universität Marburg or to services that are operated by other providers. For example, the social media icons of Facebook, Instagram, X (formerly Twitter), or YouTube lead to the respective services and the Philipps-Universität Marburg has no influence on whether these providers also comply with the legal data protection regulations. Please therefore always check the privacy notices of the other providers and – in the case of services operated by the Philipps-Universität Marburg – the relevant privacy notice for that service.

Recipients of your data in case of legal or judicial obligation

The data stored when you access our website will only be passed on to third parties if we are obliged to do so by law or by a court decision, or if this is necessary for legal or criminal prosecution in the event of an attack on our website.

Your rights

According to the relevant data protection laws, you have rights based on the processing of personal data for the purposes mentioned above by the party responsible for that data:

• You have the right of information access [JC1] under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR, and the right to data portability under Art. 20 GDPR.
• Insofar as data processing is based on your consent, you have the right to revoke your consent in whole or in part at any time without giving reasons. You can declare this revocation informally to the Philipps-Universität Marburg. A revocation will result in the prohibition of any further use of your data in the future. The lawfulness of the previous processing of your personal data remains unaffected by your revocation.
• If you believe that your personal data is not being processed lawfully, you may contact the Data Protection Officer at datenschutz@uni-marburg.de.
• In addition, there is a right of appeal to the supervisory authority:
  Hessian Officer for Data Protection and Freedom of Information
  Prof. Dr. Alexander Rossnagel
  Postfach 3163
  65021 Wiesbaden
  Germany
  Internet: https://datenschutz.hessen.de
  Email: poststelle@datenschutz.hessen.de