Privacy Policy

Information on the Controller/Data Protection Officer
General information on Processing Personal Data
Provision of the Website and Creation of Log Files
Use of Cookies
E-Mail Contact
Registration for our Events/Registration Mask
Booking of Consultation Appointments
Newsletter Dispatch
Newsletter-Tracking
Online-Marketing
No use of Social Media Plug-Ins
Integration of videos from YouTube
Your Rights/Right of Appeal
Transfer to Third Countries
Further Information

1. Information on the Controller/Data Protection Officer

1.1 Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is the

Technical University of Munich
represented by the President Prof. Dr. Thomas F. Hofmann
Arcisstr. 21
80333 Munich
Munich, Germany
Phone: 089/289-01
E-mail: poststelle(at)tum.de
Website: www.lll.tum.de

1.2 Name and Address of the Data Protection Officer

Data Protection Officer of the Technical University of Munich
Postal address: Arcisstr. 21, 80333 München
Tel.: 089/289-17052
Mail: beauftragter(at)datenschutz.tum.de

2. General information on Processing Personal Data

2.1 Scope of Data Processing

We only collect and use our users’ personal data insofar as this serves to fulfill the public tasks assigned to us by law, in particular to inform the public. This also includes the provision of a functional website as well as our content and services. The collection and use of our users’ personal data only takes place regularly with the user’s consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

2.2 Lawfulness of Data Processing

Unless otherwise stated in this privacy policy, the legal basis for the processing of your data results from Art. 4 para. 1 of the Bavarian Data Protection Act (BayDSG) and Art. 2 of the Bavarian Higher Education Act (BayHSchG) in conjunction with Art. 6 para. 1 lit. e, para. 3 of the General Data Protection Regulation (GDPR).

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 4 para. 1 of the BayDSG in conjunction with Art. 6 para. 1 sentence 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data. Please note that from December 1, 2021, the storage of information in “end devices” of end users and access to information already stored in them will be based on the legal basis of Art. 4 para. 1 of the BayDSG in conjunction with Section 25 of the Telecommunications Telemedia Data Protection Act (TDDDG). § Section 25 TDDDG is then the legal basis for the consent requirement for the use of cookies and comparable technologies.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 4 para. 1 of the BayDSG in conjunction with Art. 6 para. 1 sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which we are subject, Art. 4 para. 1 of the BayDSG in conjunction with Art. 6 para. 1 sentence 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 4 para. 1 of the BayDSG in conjunction with Art. 6 para. 1 sentence 1 lit. d GDPR serves as the legal basis.

If the processing is necessary to safeguard our legitimate interests or those of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 4 para. 1 of the BayDSG in conjunction with Art. 6 para. 1 sentence 1 lit. f GDPR serves as the legal basis for the processing.

2.3 Data Erasure and Storage Period

The personal data of the data subject will be deleted as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

2.4 Recipients of Personal Data

When operating our website, various data recipients receive access to personal data. Our web server is operated by the Leibniz Supercomputing Center of the Bavarian Academy of Sciences and Humanities (LRZ). The personal data transmitted by you when you visit our website is therefore processed by the LRZ on our behalf:

Leibniz Supercomputing Center (LRZ) of the Bavarian Academy of Sciences and Humanities
Boltzmannstraße 1
D-85748 Garching near Munich
Telephone: (089) 35831 8000
Fax: (089) 35831 9700
E-mail: lrzpost(at)lrz.de
https://www.lrz.de

If necessary, your data will be transmitted to the responsible supervisory and auditing authorities to exercise the respective control rights.

In order to avert threats to information technology security, data may be forwarded to the State Office for Information Technology Security in the event of electronic transmission and processed there on the basis of Art. 12 ff. of the Bavarian E-Government Act.
Further data recipients can be found under the respective processing activities in this privacy policy.

3. Provision of the Website and Creation of Log Files

3.1 Description and Scope of Data Processing

When you access this or other Internet pages, you transmit data to our web server via your Internet browser. The following data is temporarily recorded in a log file during an ongoing connection for communication between your Internet browser and our web server:

IP address of the requesting computer
Date and time of access
Name, URL and transferred data volume of the retrieved file
Access status (requested file transferred, not found, etc.)
Identification data of the browser and operating system used (if transmitted by the requesting web browser)

3.2 Legal Basis for Data Processing

The legal basis for the temporary storage of data and log files is Article 6(1)(1)(f) GDPR.

3.3 Purpose of Data Processing

Die vorübergehende Speicherung der IP-Adresse durch das System ist notwendig, um eine Auslieferung der Website an den Rechner des Nutzers zu ermöglichen. Hierfür muss die IP-Adresse des Nutzers für die Dauer der Sitzung gespeichert bleiben.
Die Speicherung in Logfiles erfolgt, um die Funktionsfähigkeit der Website sicherzustellen. Zudem dienen uns die Daten zur Sicherstellung der Sicherheit unserer informationstechnischen Systeme. Eine Auswertung der Daten zu Marketingzwecken findet in diesem Zusammenhang nicht statt.
In diesen Zwecken liegt auch unser berechtigtes Interesse an der Datenverarbeitung nach Art. 4 Abs. 1 des BayDSG in Verbindung mit Art. 6 Abs. 1 S. 1 lit. f DSGVO.

3.4 Storage Period

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the accessing client.

4. Use of Cookies

4.1 General About Cookies We Use

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. The information stored in a cookie can include, for example, the language settings on a website (with us you have the choice of whether the website is displayed in German or English) or consent to the use of cookies.

The following distinction helps you to better understand what types of cookies there are:

Temporary cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
Permanent cookies remain stored even after the browser is closed. They are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.
First-party cookies: These are set by us.
Third-party cookies (= cookies from third-party providers): These are mainly used by traders (so-called third parties) to process user information.
Necessary (also essential) cookies are those that are absolutely necessary for the operation of the website.
Statistical and marketing cookies: These are cookies that are used for online marketing purposes (in particular marketing of advertising space, targeted advertising) and analysis of user behavior for the purpose of optimizing the online offering. Such cookies are also used for profiling. Profiling is used to show users content that matches their potential interests. If we use cookies or tracking technologies, we will inform you of this separately in the privacy policy or when obtaining your consent.

You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may then not be able to use all the functions of this website.

4.2 Description and Scope of Data Processing

The cookies store usage data (including access times, websites you have visited, content you have viewed) and meta/communication data (information about your devices, IP addresses).

4.3 Legal Basis for Data Processing

If we ask you to consent to the processing of your personal data using cookies and you consent, the legal basis for the data processing is your consent (,Art. 6 para. 1 sentence 1 lit. a GDPR, Section 25 para. 1 of the Telecommunications Digital Services Data Protection Act [TDDDG]). Otherwise, the legal basis for the processing of personal data using cookies is Art. 6 para. 1 sentence 1 lit. f GDPR, Section 25 para. 2 TDDDG.

4.4 Storage Period

In the context of obtaining consent (so-called cookie consent), we point out the storage period of the respective permanent cookie. Otherwise, the storage period can be up to two years. Session cookies are deleted when you log out or close the browser.

If the processing of your personal data by cookies is based on legal permission, you can object to the processing at any time. You can first declare your objection by changing your browser settings (e.g. by deactivating the use of cookies). Please note that certain functions of our website (e.g. the default language) will then no longer work. We will draw your attention to further objection options in the information on the service providers and cookies used.

If the processing of personal data by cookies is based on your consent, you can withdraw your consent at any time. We use a cookie consent management tool for this purpose. This tool provides you with information about the cookies we use (processing and provider). You can also give and/or withdraw your consent in this tool. The declaration of consent is stored by a cookie. This is done so that the query about the use of cookies does not have to be made again and we can also prove the consent in accordance with our legal obligation. The settings you have made in the cookie tool are stored in the cookie.

You can access the cookie settings here:

5. E-Mail Contact

5.1 Description and Scope of Data Processing

You can use the e-mail addresses provided to contact us. The user’s personal data transmitted with the e-mail will be stored.
The data will not be passed on to third parties in this context. The data is used exclusively for processing the conversation.

5.2 Legal Basis for Data Processing

The legal basis for the processing of data transmitted in the course of sending an email is Art. 4 para. 1 of the BayDSG in conjunction with Art. 6 para. 1 sentence 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 4 para. 1 of the BayDSG in conjunction with Art. 6 para. 1 sentence 1 lit. b GDPR.

5.3 Purpose of Data Processing

If you contact us by email, our legitimate interest in processing the data is to respond to your contact.

5.4 Storage Period

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is deemed to have ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

5.5 Possibility of Objection and Erasure

If you contact us by email, you can object to the storage of your personal data at any time, e.g. by email. In such a case, the conversation cannot be continued.
All personal data stored in the course of contacting us will be deleted in this case, unless a contract is concluded and the personal data from the e-mail communication must continue to be processed for this purpose.

6. Registration for our Events/Registration Mask

6.1 Description and Scope of Data Processing

You have the option of registering for events via our website. To do so, you can enter your personal details in the registration forms. Information that is mandatory for registration is marked with an asterisk “*”. You cannot register for the event without this information. All other information is voluntary and not required for participation in our events.
Depending on the type of event, different data may be requested. For certificate courses, for example, proof of knowledge gained by participants is required, but not for our Virtual Info Sessions.

Depending on the event, the following data is processed

First name, surname
telephone number
e-mail address
title
Date of birth
Position/Department
Organization/Company
Billing address
For proof of knowledge: Curriculum vitae or link to a LinkedIn profile

You also have the option of subscribing to our newsletter (please see our information on “Sending newsletters” in this privacy policy).

6.2. Legal Basis for Data Processing

In addition to Art. 4 para. 1 of the BayDSG in conjunction with Art. 6 para. 1 sentence 1 lit. b GDPR (for mandatory information), the legal basis for the processing of the data is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

6.3 Purpose of Data Processing

We process your data exclusively for the purpose of carrying out the event for which you have registered.

6.4 Storage Period

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is generally the case after five years. If necessary, longer storage periods may result in accordance with Art. 4 para. 1 of the BayDSG in conjunction with Art. 6 para. 1 sentence 1 lit. c GDPR, from tax and commercial law storage and documentation obligations, as well as from regulations that apply to our university.

6.5 Possibility of Objection and Removal

You can withdraw your consent at any time. We will then only process your data insofar as this is necessary for the performance of the contract with you and/or there are additional retention obligations.

7. Booking of Consultation Appointments

We have integrated meetergo on this website. The provider is meetergo GmbH, Hansaring 61, 50670 Cologne (hereinafter referred to as meetergo). meetergo provides an online appointment booking tool. If you make an appointment with us online, the data you enter for this purpose will be stored on meetergo’s servers in Germany. In addition, meetergo briefly records your IP address, your referrer URL, the time of access and can determine that you have made a request to us; this data is used exclusively for the technical provision of the service and is then automatically deleted again. The use of meetergo is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in making appointments as uncomplicated as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.

8.1 Description and Scope of Data Processing

You have the option of subscribing to our free newsletter. In it, we inform you about training and events or other topics that may be of interest to you. We process the following data for this purpose

e-mail address
First name and surname
title

The following data is also collected when you register: Date/time

As part of the registration process, your consent is obtained for the processing of the data via the so-called double opt-in and reference is made to this privacy policy. We also store the registration process so that we can prove that it has been carried out correctly.

8.2 Legal Basis for Data Processing

The legal basis for the processing of newsletter subscription data is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

8.3 Purpose of Data Processing

The purpose of collecting your name, title and email address is to deliver the newsletter and to be able to address you correctly.
The collection of other personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used and to be able to prove that the registration process has been carried out correctly.

8.4 Storage Period

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. The above-mentioned data will therefore be stored for as long as the subscription to the newsletter is active. Thereafter, we may store the unsubscribed e-mail address for up to three years on the basis of our legitimate interest in order to be able to prove that consent was previously given. The purpose of the processing for this period until deletion is limited to the defense against claims.

8.5 Possibility to Object

You can cancel your subscription to the newsletter at any time. For this purpose, there is a corresponding “Unsubscribe” link in every newsletter. This also allows you to withdraw your consent to the storage of the personal data collected during the registration process.

No data is passed on to third parties in connection with the data processing for sending newsletters. We use the company Inxmail GmbH, Wentzingerstraße 17, 79106 Freiburg, Germany, to send newsletters (you can find Inxmail’s privacy policy here: https://www.inxmail.de/datenschutz). We have concluded an order processing agreement (Art. 28 GDPR) with Inxmail (hereinafter also referred to as the newsletter service provider). The data is used exclusively for sending the newsletter.

9.1 Description and Scope of Data Processing

In order to measure how successful our newsletter is, we have our service provider Inxmail measure the open rate and click rate of our newsletter. The open rate is the ratio between the number of recipients who open the newsletter and the number of emails delivered. Open recipients are those who have opened the mailing at least once, which is recorded by an image inserted in the newsletter (so-called “tracking pixel”). This is loaded from the server of our newsletter service provider when the newsletter is opened. The click rate is also used for the opening rate. The click rate is the percentage ratio of clicking recipients to opening recipients. This provides us with information about which topics are relevant for those recipients who open the newsletter.

The following data is collected:

Information about your browser and system
IP address
Time of the retrieval

9.2 Legal Basis for Data Processing

The legal basis for newsletter tracking (measurement of opening and click rates and storage of the measurement result) is your consent, which you gave when subscribing to the newsletter with reference to this privacy policy (Art. 6 para. 1 lit. a GDPR. § Section 25 (1) of the Telecommunications Digital Services Data Protection Act [TDDDG]).

9.3 Purpose of Data Processing

The information obtained as part of newsletter tracking is used for the technical improvement of the newsletter dispatch on the basis of technical data or the recipient groups and their reading behavior as well as the access times. Information is also obtained as to whether the newsletter has been opened, when this happens and which links are clicked in it (please also see the information under point 1 of this section). This information can be assigned to individual newsletter recipients. Under no circumstances, however, do we wish to monitor the recipients of our newsletter. The information obtained enables us to tailor our newsletter service even better to the interests of the recipients, e.g. by adapting different content to the interests of the recipients and getting to know the reading habits of the recipients.

9.4 Storage Period

We store your data in anonymized form for 2 years until you withdraw your consent.

9.5 Possibility to Object

You can object to newsletter tracking at any time for the future. To do so, simply unsubscribe from the newsletter. There is a corresponding link (“Unsubscribe”) in every newsletter for this purpose. This will end your subscription to the newsletter and the newsletter tracking.

10. Online-Marketing

In the context of online marketing, we process personal data for the purpose of presenting advertising or other content that is intended to address the potential interests of users. Another purpose of the processing is to measure the effectiveness of the measures and to optimize our website content.

For this purpose, relevant information is stored in so-called user profiles in relation to said content. These user profiles are stored in cookies (please also see our information on cookies in this privacy policy). The information stored includes, among other things

online networks used
websites visited
content viewed
browser used
computer system used
usage times
IP addresses
Device information

However, the IP addresses are pseudonymized by shortening the IP address to protect the user. If Java Script content from external providers is used, you can prevent the processing of personal data by installing a Java Script blocker such as the browser plug-in “NoScript” (www.noscript.net) or deactivating Java Script in your browser.

If you have a user account with the relevant service (e.g. Google, Facebook) and are logged in there, the data collected will be assigned directly to your account. If you do not wish to be associated with your profile, you must log out before visiting our website or before giving your consent to the processing of your data.

In the following, we will first provide you with information on the services used by the third-party providers and on the third-party providers themselves, after which we will go into the legal basis, the purpose of processing and the storage period

10.1.1 Alexa Metrics

(a) Service
Our website uses “Alexa Metrics”. This service is provided by Alexa Internet, Inc. and enables us to analyze user behavior on our website and to design our website in line with requirements.

(b) Provider
Alexa Internet, Corporation Service Company, 2730 Gateway Oaks Drive, Suite 100, Sacramento, CA 95833, USA; Website: www.alexa.com; Privacy Policy: https://www.alexa.com/help/privacy; Opt-Out for Alexa Measurement Pixel: https://support.alexa.com/hc/en-us/articles/200685410-Opting-Out-of-Alexa-Measurement-Pixel

10.1.2 Google Tag Manager

(a) Service
The “Google Tag Manager” is used on our website. This service is provided by Google Ireland Ltd. and enables us to manage website tags via an interface. The Google Tag Manager takes over the function that Telex implements, but does not itself collect any personal data.

10.1.3 Google DoubleClick

(a) Service
Google DoubleClick is an online marketing tool from Google Ireland Ltd. This tool is used on our website for marketing and optimization purposes. Among other things, Google DoubleClick uses cookies (please refer to the information on cookies in this privacy policy) to prevent ads from being displayed more than once. The cookie can also be used to record “conversions” that are related to ad requests. This is the case, for example, if you see a DoubleClick ad and later visit the advertiser’s website with the same browser and make a purchase or use services there.

10.1.4 Google Ads

(a) Service
We use Google Ads, a service provided by Google Ireland Ltd, on our website. With Google Ads, we can draw attention to our offers with the help of advertising material on external websites. This allows us to draw conclusions about the success of individual advertising measures. The advertising material is delivered by Google via so-called “AdServers”. We use so-called AdServer cookies to measure success. If you reach our website via a Google ad, Google Ads will store a cookie on your device. This cookie contains the following information: Unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), opt-out information (marking that the user no longer wishes to be addressed). However, we only receive statistical evaluations from Google. Based on these evaluations, we can recognize which of the advertising measures used are successful.

10.1.5 Facebook-Pixel

(a) Service
Facebook Pixel is an analytics service provided by Facebook Ireland Ltd. that combines data from the Facebook network with the actions taken through this website. This allows users of the website to be shown interest-based advertisements (“Facebook ads”) when they visit the Facebook social network or other websites that also use the process. We are interested in showing you advertisements that are of interest to you in order to make our website more interesting for you. For this purpose, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our level of knowledge: By integrating the Facebook Pixel, Facebook receives the information that you have accessed the corresponding web pages of our website or have clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible for the provider to find out and store your IP address and other identifying features.

(b) Provider
Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com; Privacy Policy: https://www.facebook.com/about/privacy; Opt-Out: https://www.facebook.com/settings?tab=ads.

10.1.6 Google Analytics

(a) Service
Our website uses Google Analytics, a web analytics service provided by Google Inc. or Google Ireland Ltd (“Google”). The information stored in a cookie about your use of our website is generally transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated as on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

(b) Provider
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com/intl/de/about/analytics/; Privacy Policy: https://policies.google.com/privacy; Opt-Out: Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de, Settings for the display of advertisements: https://adssettings.google.com/authenticated

10.1.7 GOOGLE MAPS

(a) Service
We use the Google Maps service on our website. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.

10.1.8 LinkedIn Insight Tag

(a) Service
Our website uses LinkedIn Insight Tag. This is an analysis service provided by LinkedIn Corporation or LinkedIn Ireland Unlimited Company, which links the data from the LinkedIn network with the actions taken through this website. We are interested in showing you advertising that is of interest to you in order to make our website more interesting for you.

(b) Provider
LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA; Website: https://www.linkedin.com; Security measures: IP masking (pseudonymization of the IP address); Privacy Policy: https://www.linkedin.com/legal/privacy-policy, Cookie Policy: https://www.linkedin.com/legal/cookie_policy; Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

10.1.9 Microsoft Advertising

(a) Service
Microsoft Advertising is used on our website. This analysis tool is provided by Microsoft Corporation. Using a conversion tracking tag from Microsoft Advertising, we can learn more about user behavior when you access our website via a Microsoft advertisement (e.g. keyword, ad, click behavior on our website, etc.). We only receive data or evaluations of your behavior on the Internet. We do not know what data Microsoft processes. Microsoft also processes data in the USA, among other places. Data processing is based on the standard contractual clauses approved by the EU Commission.

(b) Provider
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; Privacy Policy: https://privacy.microsoft.com/de-DE/privacystatement; Opt-out: https://account.microsoft.com/privacy/ad-settings/signedout

10.1.10 Yumpu

(a) Service
Our website uses the yumpu software (which is provided by i-magazine AG). The yumpu software enables us to track the reading behavior of our users. We do not know what data i-magazine AG processes.

(b) Provider
Yumpu is a software of i-magazine AG, Gewerbestrasse 3, 9444 Diepoldsau; privacy policy: https://www.yumpu.com/de/info/privacy_policy

10.1.11 Google Marketing Platform

We use the Google Marketing Platform on our website, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). The Google Marketing Platform consists of various individual services. On this website, “Google Analytics” and “Double Click” are used to display advertising.

The above information in section C.I of this privacy policy applies accordingly to the functionality and objection options of Google Analytics.
The following applies to Double Click: If you access a website and display or click on an advertisement placed via websites of the Google advertising network, a DoubleClick cookie may be stored in your browser. The DoubleClick cookie identifier assigned to your browser is the same as that used when you visit websites that use DoubleClick advertising programs. If your browser already has a DoubleClick cookie, no further DoubleClick cookie should be stored.

Double Click also uses so-called floodlight pixels. These establish a connection to Google’s servers when our website is loaded and transmit information about your visit to our website.

You can revoke your consent to the aforementioned service at any time by calling up the Cookie Law banner under Services again or generally change the cookie settings. You can change your cookie preferences at any time under section 4.5 of this privacy policy.

We process your personal data in connection with the Google Marketing Platform as follows

a) Purpose of processing
We process your personal data in order to use the Google Marketing Platform to display advertising.

b) Legal basis of the processing
The processing of your personal data for the use of the Google Marketing Platform for the display of advertising is based on your consent.

c) Recipients/recipient categories of your personal data
We disclose your personal data to Google.

d) Storage duration of your personal data
We store your personal data for as long as is necessary for the use of the Google Marketing Platform for the display of advertisements.

e) Third country reference of the processing of your personal data
Google processes your personal data in the USA. Any transfer of personal data takes place in compliance with the conditions laid down in Art. 44-50 GDPR and the other provisions of the GDPR to ensure that the level of protection for natural persons is maintained.

f) Obligation to provide your personal data
You are not obliged to provide personal data. However, if you have not used any of the above-mentioned functions to deactivate tracking by the Google Marketing Platform, it is not possible to access this website without processing your personal data as part of the Google Marketing Platform.

10.1.12 Outbrain Pixel

If you have given your consent, we will implement a pixel from Outbrain UK Limited (“Outbrain”) on our website to collect data for retargeting and conversion tracking. This pixel determines whether the user who accesses our website has an Outbrain UUID. If there is a UUID associated with the user, Outbrain can allow us to retarget this UUID and send us the total number of UUIDs that have reached our site. If there is no Outbrain UUID for the user, the Outbrain pixel does not collect any data about this user. We do not receive any information from Outbrain with which we can personally identify one of our customers. If you use different browsers and/or different end devices, Outbrain attempts to recognize this and merge the individual Outbrain UUIDs of your browsers/end devices. To do this, Outbrain uses its own linking methods based on the data collected by Outbrain, such as the IDs of advertising partners or encrypted e-mail addresses that partners provide to Outbrain.

The collection and processing of this data is the sole responsibility of Outbrain. Outbrain provides us with evaluations or other information created on the basis of the data collected only in aggregated, anonymized form. We cannot assign the information provided to us to any natural person. We have no knowledge of the details of the processing of personal data in Outbrain’s area of responsibility. Information on the processing of personal data by Outbrain can be found in Outbrain’s data policy: https://www.outbrain.com/legal/privacy#privacy-policy.

You can control the processing of data by Outbrain by activating or deactivating Outbrain for the browser you are currently using in our “Cookie Dashboard”. Alternatively, you can deactivate Outbrain for the browser you are currently using by deactivating the storage of cookies in your browser settings.

The controller for data processing is Outbrain Inc, 39 West 13th Street, 3rd floor, New York, NY 10011.

(i) The purpose of data processing by Outbrain is to enable Outbrain to collect and process user data on our website. The purposes of the processing are determined solely by Outbrain.

(ii) The processed data are:

Outbrain UUID
This is a unique user ID that is assigned by Outbrain. By assigning a UUID, Outbrain can combine the pages visited and the clicks on Outbrain’s recommendations from this UUID.

Outbrain HTTP data
This is log data that is generated for technical reasons when the Outbrain tool used on the website is used via the Hypertext Transfer Protocol (Secure) (HTTP(S)): This includes IP address, device type, browser type, operating system, the pages visited, the time of the visit and the referring URLs.

Usage data
Usage data is primarily clicks on advertisements, time spent on the website and information about websites visited. This information is linked to the Outbrain UUID.

(iii) The legal basis for enabling Outbrain to collect personal data via our website is Article 6(1)(a) GDPR (consent). We do not process any personal data via this pixel in our area of responsibility. We have no knowledge of the details of the processing of the data in Outbrain’s area of responsibility, in particular the legal basis used by Outbrain for the processing.

(iv) The data is generated independently by Outbrain. We do not know whether Outbrain uses other data sources.

(v) The recipient of the data is Outbrain as the controller responsible for the collection and processing of personal data. Data may also be transferred to the USA. The data will only be transferred if you have given us your consent to do so in accordance with Art. 6 para. 1 letter a, 49 para. 1 sentence 1 letter a GDPR. Corresponding information on the risks of such data transfers and revocation options can be found under B. I. 3.

(vi) The pixel loses its validity after 90 days and, according to Outbrain, does not contain any personal data other than the UUID.

(vii) The provision of data is not required by law or contract or necessary for the conclusion of a contract. The data subject is under no obligation to provide the data. If the data is not provided, Outbrain cannot carry out retargeting or conversion tracking.

(viii) We do not use automated decision-making in our area of responsibility. We have no knowledge of the details of the processing of the data in Outbrain’s area of responsibility, in particular of any automated decision-making.

10.1.13 Microsoft Clarity

We use the analysis tool Microsoft Clarity on our website, a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”). Microsoft Clarity enables us to analyze user behavior on our website, in particular by recording mouse movements, scrolling behavior and clicks. This information helps us to better understand the use of our website and to continuously improve the user experience.

The legal basis is your consent (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG), which you can revoke at any time with effect for the future.

Microsoft Clarity collects the following information, among others

Pages visited on our website
Length of stay on the pages
Mouse movements and click behavior
Anonymized IP address
Technical information, such as browser used, operating system and device type

This data cannot be directly linked to a person. Microsoft Clarity also uses cookies to store information about the use of our website.

The data collected by Microsoft Clarity may be transferred to the USA and processed there. Microsoft is committed to complying with the data protection standards of the GDPR and is part of the Data Privacy Framework Program (DPF).

Further information on data protection at Microsoft Clarity can be found at: https://privacy.microsoft.com/de-de/privacystatement.

10.2 Scope of the Processing of Personal Data

The above-mentioned online marketing services process the following personal data about you:

Usage data (characteristics for identifying the user, information about the start and end as well as the scope of the respective use, websites visited, information about the content viewed by the user)
Meta/communication data
Location data
Event data (Facebook)

10.3 Legal Basis for the Processing of Personal Data

If you consent to the use of third-party providers, the legal basis for the processing of your personal data is consent (Art. 6 para. 1 sentence 1 lit. a GDPR, Section 25 para. 1 TDDDG).

Processing does not take place without consent (please also see the section on cookies and cookie settings).

10.4 Purpose of Data Processing

We use the above-mentioned services for the purposes of tracking, re-marketing, to make our offer more attractive, to obtain information about our target group and to be able to measure the success of our advertising campaigns.

10.5 Duration of Storage, Objection and Removal Options

In the cookie settings, you will find information on the duration of cookie storage and can revoke your consent (please refer to the section on cookies). Please also refer to the data protection declarations of the respective providers (see above) with regard to the storage period, objection and removal options. You can also disable cookies in your browser settings.

10.6 Security Measures

The IP address is pseudonymized (IP masking).

We do not use any social media plug-ins. On our website, we merely point out that we maintain our own presences on Facebook, LinkedIn, Instagram and Twitter and have a Spotify and YouTube channel. If you click on the logo, you will be redirected to our respective presence on the social networks. The data mentioned under III. 1. of this privacy policy will be transmitted to the respective provider of the social network. If you have an account with the respective provider and are logged in, the data can be linked to your account. We do not know what other data is collected or processed by the respective social network provider and have no influence over this.
You can prevent data processing by not clicking on the icon. Further information on the purpose and scope of data collection and its processing by the social network provider can be found in the provider’s privacy policy provided below. There you will also find further information on your rights in this regard and setting options to protect your privacy.

(a) Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; https://www.facebook.com/policy.php

(b) Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025; information on data protection can be found here: https://help.instagram.com/155833707900388

(c) Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland; information on data protection can be found here: https://twitter.com/de/privacy

(d) Spotify AB, Regeringsgatan 19, 11153 Stockholm, Sweden; information on data protection can be found here: https://www.spotify.com/de/legal/privacy-policy/

(e) YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; information on data protection can be found here: https://policies.google.com/privacy?hl=de

(f) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; https://www.linkedin.com/legal/privacy-policy

12. Integration of Videos from YouTube

We also show videos on our website. This also results in the processing of personal data. The purpose of the processing is to provide you with attractive content via our website.

On our website, we show videos that are loaded from YouTube. The service provider of the YouTube video platform is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. You can find Google’s privacy policy here: https://policies.google.com/privacy; opt-out option: Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de, settings for the display of advertisements: https://adssettings.google.com/authenticated.

When you play YouTube videos, your data is transmitted to Google. This means that personal data may also be transferred to the USA and processed there. The European Court of Justice has ruled that the USA does not have an adequate level of data protection. We explicitly point this out to you and you can then decide whether you want to play YouTube videos on our website or not. We have no influence on the processing of personal data by Google.

For this reason, you will be informed of this fact before you play a YouTube video and can decide whether or not to play the video. If you allow the video to be played, you give us your consent to data processing. You can revoke your consent at any time via the cookie settings (please also see our information on cookies).

The legal basis for data processing is your consent pursuant to Art. 4 para. 1 of the BayDSG in conjunction with Art. 6 para. 1 sentence 1 lit. a GDPR. Please note that from December 1, 2021, the storage of information in “end devices” of end users and access to information already stored in them will be based on the legal basis of Art. 4 para. 1 of the BayDSG in conjunction with § 25 Telecommunications Telemedia Data Protection Act (TTDSGTDDDG). § Section 25 TTDSGTDDDG is then the legal basis for the consent requirement for the use of cookies and comparable technologies.

13. Your Rights/Right of Appeal

13.1 Your Rights

If we process your personal data, you have the following rights as a data subject:

You have the right to information about the personal data stored about you (Art. 15 GDPR).
If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR).
If the legal requirements are met, you can request the erasure or restriction of processing (Art. 17 and 18 GDPR).
If you have consented to the processing or a contract for data processing exists and the data processing is carried out using automated procedures, you may have a right to data portability (Art. 20 GDPR).
If you have consented to the processing and the processing is based on this consent, you can revoke your consent at any time for the future. This does not affect the lawfulness of the data processing carried out on the basis of the consent until revocation. You have the right to object to the processing of your data at any time for reasons arising from your particular situation if the processing is carried out exclusively on the basis of Art. 6 para. 1 letter e) or f) GDPR (Art. 21 para. 1 sentence 1 GDPR)

13.2 Right of Appeal to the Supervisory Authority

You also have the right to lodge a complaint with a supervisory authority. The Bavarian State Commissioner for Data Protection is responsible for the Technical University of Munich.

You can reach him under the following contact details:

Postal address: P.O. Box 22 12 19, 80502 Munich
Address: Wagmüllerstraße 18, 80538 Munich
Telephone: 089 212672-0
Fax: 089 212672-50
E-mail: poststelle(at)datenschutz-bayern.de
https://www.datenschutz-bayern.de/

14. Transfer to Third Countries

If there is a transfer of personal data to a third country, this is described in this declaration in connection with the respective processing. The current Standard Contractual Clauses (SCC) of the EU Commission are used to secure the transfer if there is no adequacy decision for the third country. In the case of third country transfers to the USA, the data recipient regularly participates in the Data Privacy Framework Program (DPF).

15. Further Information

For further information on the processing of your data and your rights, you can contact us using the contact details given above (at the beginning of I.).