Data Privacy
This data privacy policy applies to the central part of the website of the Cluster of Excellence CASA.
Name and Address of the Responsible Party:
The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the member states, as well as other data protection provisions, is:
Cluster of Excellence CASA / Horst Görtz Institute for IT Security
Ruhr University Bochum
Universitätsstraße 150
44801 Bochum
Germany
Tel.: +49 234 32-201
Fax: +49 234 32-14201
Email: info(at)cas.ruhr-uni-bochum.de
Website: www.casa.rub.de
Name and address of the data protection officer of Ruhr-University Bochum
Ruhr-Universität Bochum
Dr. Kai-Uwe Loser
Datenschutzbeauftragter
Universitätsstraße 150
44780 Bochum
Tel.: +49 234 32-28720
Email: dsb(at)rub.de
Webseite: https://dsb.ruhr-uni-bochum.de/
General information on data processing
1. Scope of Processing of Personal Data
We collect and use personal data of our users only to the extent necessary for the provision of a functional website and our content and services. The collection and use of personal data of our users regularly take place only with the user's consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of data is permitted by legal regulations.
2. Legal Basis for the Processing of Personal Data
In cases where we obtain the consent of the data subject for the processing of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
In cases where the processing of personal data is necessary for the performance of tasks carried out in the public interest or in the exercise of official authority, Article 6(1)(e) GDPR serves as the legal basis.
3. Data Deletion and Storage Duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if provided for by the European or national legislator in Union regulations, laws, or other provisions to which the controller is subject. Blocking or deletion of data also occurs when a storage period prescribed by the aforementioned standards expires, unless there is a necessity for further storage of the data for the conclusion or fulfillment of a contract.
Provision of the Website and Creation of Log Files
1. Description and Scope of Data Processing
When accessing our website and retrieving any file from CASA's offerings, our system automatically collects data and information from the computer system of the accessing device.
The following data is collected:
- Information about the browser type and version
- The user's operating system
- The internet service provider of the user
- The user's IP address
- Date and time of access
- Websites from which the user's system accessed our website
- Websites that are accessed by the user's system through our website
This data is also stored in our system's log files. Storage of this data, along with other personal user data, does not occur.
2. Purpose of Data Processing and Legal Basis
The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user's device. For this purpose, the user's IP address must be stored for the duration of the session.
The storage in log files is done to ensure the functionality of the website. Additionally, the data is used for website optimization and to ensure the security of our information technology systems. No analysis of the data for marketing purposes takes place in this context.
The legal basis for the temporary storage of data and log files is Art. 6(1)(e) GDPR.
3. Duration of Storage
The data is deleted as soon as it is no longer necessary for the purpose of its collection. In the case of data collected for the provision of the website, this occurs when the respective session is ended.
In the case of data stored in log files, this happens no later than 24 hours. Extended storage is possible, in which case the user's IP addresses are either deleted or anonymized so that attribution to the accessing client is no longer possible.
4. Objection and Removal Option
The collection of data for the provision of the website and the storage of data in log files are mandatory for the operation of the website. Therefore, there is no option for users to object.
Use of Cookies
1. Description and Scope of Data Processing
Our website uses cookies. Cookies are text files stored by the internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a unique character string that enables the browser to be identified when the website is accessed again.
We use cookies to make our website more user-friendly. Some elements of our website require the calling browser to be identifiable even after a page change.
The following data is stored and transmitted in the cookies:
- Preferred font size
- Preferred contrast version
- System login status (only for editorial/administration purposes)
- Expiry date
Additionally, we use cookies on our website that enable the analysis of user behaviour (see the next section).
The data collected from users in this way is pseudonymized through technical measures. Therefore, it is no longer possible to associate the data with the respective user. The data is not stored together with other personal user data.
Upon accessing our website, users are informed about the use of cookies for analytical purposes through an info banner, and they are referred to this privacy policy. In this context, instructions on how to prevent the storage of cookies in browser settings are also provided.
2. Purpose of Data Processing and Legal Basis
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary for the browser to be recognized even after a page change.
The user data collected through technically necessary cookies is not used to create user profiles.
The use of analysis cookies is for the purpose of improving the quality of our website and its content. Through analysis cookies, we learn how the website is used and can continuously optimize our offering.
The legal basis for processing personal data using cookies is Art. 6(1)(e) GDPR.
3. Duration of Storage, Objection, and Removal Option
Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user, you have full control over the use of cookies. By adjusting the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully utilize all functions of the website.
Web Analysis with Matomo (formerly PIWIK)
1. Scope of Processing Personal Data
We use the open-source software tool Matomo (formerly PIWIK) on our website to analyze the browsing behavior of our users. The software places a cookie on the user's computer (for information on cookies, see above). When individual pages of our website are accessed, the following data is stored:
- Two bytes of the user's IP address
- The accessed webpage
- The website from which the user reached the accessed webpage (referrer)
- Subpages accessed from the called webpage
- Duration of the visit to the webpage
- Frequency of webpage visits
The software operates exclusively on the servers of Ruhr-University Bochum. Personal user data is only stored there, and no data is passed on to third parties.
The software is configured to store only a partial IP address, with 2 bytes masked (e.g., 192.168.xxx.xxx). This way, association of the truncated IP address with the accessing computer is no longer possible.
2. Purpose of Data Processing and Legal Basis
Processing the personal data of users allows us to analyze their browsing behavior. By evaluating the gathered data, we can compile information about the use of individual components of our website. This helps us continuously improve the website and its user-friendliness. The anonymization of the IP address adequately addresses users' interest in the protection of their personal data.
The legal basis for processing users' personal data is Art. 6(1)(e) GDPR.
3. Duration of Storage
The data is deleted as soon as it is no longer needed for our recording purposes. In our case, this occurs after 90 days.
4. Objection and Removal Option
Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user, you have full control over the use of cookies. By adjusting the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, some functions of the website may not be fully usable.
We offer users the option to opt out of the analysis process on our website. To do this, you need to follow the corresponding link. This sets another cookie on your system, signaling our system not to store the user's data. If the user deletes this cookie from their system in the meantime, they must set the opt-out cookie again. Alternatively, you can activate the "Do-not-Track" setting in your browser.
For more information on Matomo software's privacy settings, please visit the following link: https://matomo.org/docs/privacy/.