1. Name and Contact Data of the Data Controller and the Commisioner for Data Protection

The Data Controller or person with overall responsibility for data protection as defined in the General Data Protection Regulation, in other data protection legislation that is valid in member-states of the European Union and in other provisions relating to the protection and privacy of personal data is:

Hamburg University of Technology (TU Hamburg)
Am Schwarzenberg-Campus 1
21073 Hamburg

E-Mail: pressestelle(at)tuhh.de

The TU Hamburg is a corporation under German public law. It is legally represented by the President of TU Hamburg, currently Prof. Dr. Andreas Timm-Giel.

The Commisioner for Data Protection for the person in charge of data processing is:

External data protection officer of the TU Hamburg

datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
E-Mail: office(at)datenschutz-nord.de

2. Processing of Personal Data

a) Provision of the Website

Whenever you visit and use the TU Hamburg website the system automatically records data and information. This data and information is stored in server log files.

The data stored about every website access is as follows:

• IP address
• Date and time
• Page visited
• Data transferred
• Access status
• Browser version
• Page previously visited

The legal basis for storing data and for log files is Art. 6 para. 1 lit. f GDPR.

Temporary storage of the IP address by the system is necessary to enable provision of the website to the user’s computer. That requires the user’s IP address to be stored for the duration of the session.

Storage in log files is undertaken to ensure the functionality of the website, to optimize the content of the website and to guarantee the security of our IT systems.

Data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collection to provide the website this is the case once the session is over.

In the case of data storage in log files this is the case after seven days at the latest. Further storage is possible, but in that case the users’ IP addresses are deleted or altered so that identification of the calling client is no longer possible.

b) Newsletters / Reminders

You can subscribe to newsletters / reminders on a few websites of the TU Hamburg.

Your consent to the processing of data is sought as part of the registration process with reference to the Data Protection Declaration. When you subscribe to a newsletter / reminder you will be shown the data collected in the input mask.

The legal basis for data processing after registration for a newsletter / reminder is, subject to the user’s consent, Art. 6 para. 1 lit. a GDPR.

Personal data that you provide when subscribing to a newsletter / reminder is used solely to mail the newsletter / reminder and is not passed on to third parties. You can unsubscribe from the newsletter / reminder at any time. Your data will then be deleted from the system without delay.

c) Online Forms

There are online forms on a few of websites of the TU Hamburg that can be used for electronic communication. They can be used for the following purposes:

• To register for events
• As a contact form

Data entered in the input mask is submitted. Your consent to the processing of this data is sought, with reference to the Data Protection Declaration, as part of the submission process.

The legal basis for data processing after registration for a newsletter is, subject to the user’s consent, Art. 6 para. 1 lit. a GDPR.

Data is processed solely for the purpose in question. It is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

d) Cookies

We use cookies on our websites. Cookies are small data files stored by the Internet browser on the user’s computer harddrive. When a user calls up a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed.

We use cookies to make our website more user-friendly.

The processing of personal data based on the use of cookies is lawful pursuant to Article 6 paragraph 1 lit. f GDPR (General Data Protection Regulation).

The purpose of using technically necessary cookies is to simplify the use of websites for users.

Cookies are stored on the user's computer and transmitted to us. Therefore, you as the user also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by making a change in your browser settings. Cookies that have already been stored can be deleted at any time. This can also be done automatically. However, disabling cookies for our website may result in some functions not working correctly.

3. Embedding of Third-party Services and Content

a) External search service "Google Custom Search

Google Custom Search (Google Custome Search Engine "Google CSE")

The central search function for our website is provided by the Google Custom Search Engine (CSE). This search function allows for full text searching through the online material of our website. This search function is accessed by a search box, embedded in the header bar of each individual webpage.

To inform website users of the search service, the text "Enhanced by Google" is displayed in the search box.

Activation of the search

By entering a search term in the search box and pressing the enter key, the user activates the search function and the search results page is called up, which loads the corresponding search results from Google by means of a plug-in provided by Google.

Search results page

The plugin developed and provided by Google LLC. (Google Custom Search Engine "Google CSE") is integrated into the search results page by us as a software module "as-is" (without alteration).

The plugin enables automated communication (data exchange) between the called search results page and the Google service when the search results page is called upon. The use of the search function provided by Google involves a dynamic transfer of data by the Google service provider to the search results page.

Data protection

No data is transferred to the search service provider (Google) when a user accesses a web pages of the TU Hamburg in which the "Google custom search" is integrated. Data will only be transmitted to Google after a user has activated the search box, started a full-text search, and activated the search results page. By using the search function within the search results page, user data is also transferred to Google at the same time.

By using the full-text search and thus calling up the search results page, you consent to the use of the Google search service and thus also to the transfer of data to the Google service. This includes, for example, the search terms you enter and the IP address of the computer you are using. Please note that different data protection standards apply to Google than to the TU Hamburg‘s websites. We point out that the data processing, in particular the storage, deletion and use of possibly transmitted personal data is the responsibility of the provider of the search service and that we have no influence on the type and scope of the transmitted data or on its further processing.

If you are logged in to Google at the same time while using our website search service, the Google service is able to assign the information directly to your user profile. You should log out to avoid the collection of profile information about you.

Further information from Google about the handling of user data (privacy policy) can be found here : policies.google.com/privacy

b) Social media:

We maintain online presences on the social networks Facebook, Instagram (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland), Twitter (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland), YouTube (Google Ireland Limited Gordon House, Barrow Street Dublin 4. Ireland) and LinkedINn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) to inform you and communicate with you via these platforms. You can access our social media channels via corresponding links on our websites. As soon as you access the respective social media channels in the respective network, the terms and conditions and data processing information of the respective operators apply there.

c) OpenStreetMap (OSM)

Some of our websites used a plugin to integrate maps. The open source mapping tool "OpenStreetMap" (OSM) is used here.
The provider is the OpenStreetMap Foundation. When a page with an integrated OSM plugin is called up, a connection to OpenStreetMap servers is established. The operators of OpenStreetMap learn which page with OSM map you have just called up as well as your IP address.

The use of OpenStreetMap is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the web pages. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f EU-DSGVO.

Details on the handling of user data can be found on the OpenStreetMap data protection page.

4. Website analysis with AWStats

As part of our public relations work, the TU Hamburg statistically evaluates user access to our website using the AWStats analysis tool. The collection, processing and use of this data as well as its evaluation is solely for statistical purposes and for optimizing our website content.

AWStats does not use cookies for the evaluation. The analysis is carried out via the log files kept on our server - see above under "2. Provision of the website". The data from the log files of the web server are analyzed in anonymized form without identifying users by IP addresses or other personal data. The web servers are operated directly by the TU Hamburg.

5. Rights of the Person in Question

You have the right to information free of charge about your personal data that we store and to the correction, deletion or limitation of processing of the data we have collected.

You have the right for reasons arising from your specific situation to file at any time an objection to the processing of your personal data on the basis of Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions.

You have the right to revoke your data protection declaration of consent at any time. Revocation of your consent does not affect the legality of processing undertaken prior to your revocation.

Regardless of any other administrative law or judicial redress procedure you have the right of appeal to a supervisory authority if you are of the opinion that processing of your personal data is in breach of the GDPR.

6. Supplementary Note on Data Protection

Different functions and services are used on the various TU Hamburg websites. If personal data is collected, you will find appropriate references to this in the page information. In all other respects, the data protection declaration on this page applies.