Privacy Policy

Information on the Controller/Data Protection Officer
General information on Processing Personal Data
Provision of the Website and Creation of Log Files
Use of Cookies
E-Mail Contact
Registration for our Events/Registration Mask
Consultation Booking
Newsletter Dispatch
Newsletter-Tracking
Online-Marketing
No use of Social Media Plug-Ins
Integration of videos from YouTube
Your Rights/Right of Complaint
Further information

1. Information on the Controller/Data Protection Officer

1. Name and Adress of the Controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection provisions is the:

Technical University of Munich
represented by the President Prof. Dr. Thomas F. Hofmann
Arcisstraße 21
80333 Munich
Germany
Tel.: 089/289-01
Mail: poststelle(at)tum.de
Website: www.lll.tum.de

2. Name and Adress of the Data Protection Officer

Data Protection Officer of the Technical University of Munich

Data Protection Officer of the Technical University of Munich
Postal address: Arcisstr. 21, 80333 München
Tel.: 089/289-17052
Mail: beauftragter(at)datenschutz.tum.de

2. General information on Processing Personal Data

1. Scope of Data Processing

As a matter of principle, we collect and use personal data of our users only to the extent that this serves to fulfill the public tasks assigned to us by law, in particular the provision of information to the public. This also includes the provision of a functional website as well as our content and services. The collection and use of personal data of our users is regularly only carried out with the consent of the user. An exception applies in those cases where it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted by legal regulations.

2. Lawfulness of Data Processing

The legal basis for the processing of your data results from Art. 4 Para. 1 of the Bavarian Data Protection Act (BayDSG) and Art. 2 of the Bavarian Higher Education Act (BayHSchG) in conjunction with Art. 6 Para. 1 S. 1 lit. e, Para. 3 of the General Data Protection Regulation (GDPR).

Insofar as we obtain the consent of the data subject for processing personal data, Article 4 Para. 1 of the BayDSG in conjunction with Article 6 Para. 1 S. 1 lit. a of the GDPR serves as the legal basis for the processing of personal data. Please note that as of December 1, 2021, the storage of information in “end devices” of end users and access to information already stored in them will be based on the legal basis of Art. 4 Para. 1 of the BayDSG in conjunction with § 25 of the Telecommunications Telemedia Data Protection Act (TTDSG). § 25 TTDSG is then the legal basis for the consent requirement when using cookies and comparable technologies.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 4 Para. 1 of the BayDSG in conjunction with Article 6 Para. 1 lit. b of the GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which we are subject, Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Article 4 Para. 1 of the BayDSG in conjunction with Article 6 Para. 1 S. 1 lit. d of the GDPR serves as the legal basis.

If the processing is necessary for the purpose of the legitimate interest of us or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the former interest, Article 4 Para. 1 of the BayDSG in conjunction with Article 6 Para. 1 S. 1 lit. f of the GDPR shall serve as the legal basis for the processing.

3. Data Erasure and Storage Period

The personal data of the data subject shall be deleted as soon as the purpose of the storage ceases to apply. In addition, storage may take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. The data will also be deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

4. Recipients of Personal Data

During the operation of our website, various data recipients gain access to personal data. Our web server is operated by the Leibniz Computing Center of the Bavarian Academy of Sciences (LRZ). The personal data you transmit when visiting our website is therefore processed by the LRZ on our behalf:

Leibniz Computing Center of the Bavarian Academy of Sciences (LRZ)
Boltzmannstraße 1
D-85748 Garching near Munich
Tel.: (089) 35831 8000
Fax: (089) 35831 9700
Mail: lrzpost(at)lrz.de
https://www.lrz.de

If necessary, your data will be transmitted to the responsible supervisory and auditing authorities for the exercise of the respective control rights.

In order to avert threats to information technology security, data may be forwarded to the State Office for Information Security in the case of electronic transmission and processed there on the basis of Art. 12 et seq. of the Bavarian E-Government Act.

Further data recipients can be found under the respective processing activities in this privacy policy.

3. Provision of the Website and Creation of Log Files

1. Description and Scope of Data Processing

When you call up this or other Internet pages, you transmit data to our web server via your Internet browser. The following data is temporarily recorded in a log file during an ongoing connection for communication between your Internet browser and our web server:

IP address of the requesting computer
Date and time of access
Name, URL and transferred data volume of the retrieved file
Access status (requested file transferred, not found, etc.)
Recognition data of the browser and operating system used (if transmitted by the requesting web browser)

2. Legal Basis for Data Processing

The legal basis for the temporary storage of the data and the log files is Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. f GDPR.

3. Purpose of Data Processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session

The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes are also our legitimate interest in data processing according to Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 !. lit. f GDPR.

4. Storage Period

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

5. Possibility of Objection

The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

4. Use of Cookies

1. General About Cookies We Use

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. Information stored in a cookie may include, for example, the language settings on a website (in our case, you can choose whether the website is displayed in German or in English) or the consent to the use of cookies.

For a better understanding of what types of cookies there are, the following distinction serves:

Temporary cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser.
Permanent cookies remain stored even after you close the browser. They are deleted automatically after a specified duration, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
First-party cookies: These are set by ourselves.
Third-party cookies: These are mainly used by commercial operators (so-called third parties) to process user information.
Necessary (also essential) cookies are those that are absolutely necessary for the operation of the website.
Statistical and marketing cookies: these are cookies used for online marketing purposes (in particular, marketing of advertising space, targeted advertising) and analysis of user behavior for the purpose of optimizing the online offer. Such cookies are also used for profiling. Profiling serves to show users such content that corresponds to their potential interests. Insofar as we use cookies or tracking technologies, we will point this out to you separately in the data protection declaration or in the context of obtaining consent.

You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may then not be able to use all functions of this website.

2. Description and Scope of Data Processing

Durch die Cookies werden Nutzungsdaten (unter anderem Zugriffszeiten, von Ihnen besuchte Websites, angesehene Inhalte) und Meta-/Kommunikationsdaten (Informationen zu Ihren Geräten, IP-Adressen) gespeichert.

3. Legal Basis for Data Processing

If we ask you to give consent to the processing of your personal data using cookies and you consent, the legal basis for the data processing is your consent (Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. a GDPR or, as of December 1, 2021, § 25 Para.1 of the Telecommunications Telemedia Data Protection Act [TTDSG]). Otherwise, the legal basis for the processing of personal data using cookies is Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. f GDPR or, as of December 1, 2021, § 25 Para. 2 TTDSG.

4. Storage Period

In the context of obtaining consent (so-called cookie consent), we point out the storage period of the respective permanent cookie. Otherwise, the storage period can be up to two years. Session cookies are deleted when you log out or close the browser.

5. Objection and Revocation of Consent

If the processing of your personal data by cookies is based on a legal permission, you can object to the processing at any time. You can initially declare your objection by means of your browser settings (for example, by deactivating the use of cookies). Please note here that certain functions of our website (e.g. the preset language) will then no longer function. We draw your attention to further objection options in the information on the service providers and cookies used.

If the processing of personal data by cookies is based on your consent, you can revoke your consent at any time. For this purpose, we use a cookie consent management tool. In this tool, you will receive information about the cookies we use (processing and provider). In addition, you can give and/or revoke your consent in this tool. The declaration of consent is stored by a cookie. This is done so that the query on the use of cookies does not have to be repeated and we can also prove the consent in accordance with our legal obligation. The settings that you have made in the cookies tool are stored in the cookie.

Here you can find the cookie settings:

Change Cookie Preferences

5. E-Mail Contact

1. Description and Scope of Data Processing

You can use the e-mail addresses provided to contact us. The user’s personal data transmitted with the e-mail will be stored.

In this context, the data will not be passed on to third parties. The data will be used exclusively for processing the conversation.

2. Legal Basis for Data Processing

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. f GDPR. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. b of the GDPR.

3. Purpose of Data Processing

In the case of contact by e-mail, our legitimate interest in processing the data is to respond to your contact.

4. Storage Period

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

5. Possibility of Objection and Erasure

If you contact us by e-mail, you can object to the storage of your personal data at any time, e.g. by e-mail. In such a case, the conversation cannot be continued.

All personal data stored in the course of contacting us will be deleted in this case, unless a contract is concluded and the personal data from the e-mail communication must continue to be processed for this purpose.

6. Registration for our Events/Registration Mask

1. Description and Scope of Data Processing

You have the option of registering for events via our website. For this purpose, you can provide information about yourself in the registration masks. Such information, which is mandatory for registration, is marked with an asterisk “*”. Without this information you cannot register for the event. All other information is voluntary and not required for participation in our events.

Depending on the type of event, different data will be requested. For certificate courses, for example, proof of knowledge gained by participants is required, but not for our Virtual Info Sessions.

The following data will be processed depending on the event:

First name, last name
Telephone number
e-mail address
title
Date of birth
Position/Department
Organization/Company
Billing address
For proof of knowledge: CV or link to a LinkedIn profile

In addition, you have the option of subscribing to our newsletter (please see our “Newsletter Dispatch” notice in this Privacy Policy).

2. Legal Basis for Data Processing

In addition to Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. b of the GDPR (for mandatory data), the legal basis for processing the data is your consent in accordance with Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. a of the GDPR.

3. Purpose of Data Processing

We process your information solely for the purpose of hosting the event for which you register.

4. Storage Period

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is generally the case after five years. If necessary, longer storage periods may result from tax and commercial law retention and documentation obligations, as well as from regulations that apply to our university, in accordance with Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1. lit. c GDPR.

5. Possibility of Objection and Erasure

You can revoke your consent at any time. We will then only process your data insofar as this is necessary for the execution of the contract with you and/or there are retention obligations beyond this.

7. Newsletter Dispatch

1. Description and Scope of Data Processing

You have the possibility to subscribe to our free newsletter. In it, we will inform you, among other things, about trainings and events or other topics that might interest you. In doing so, we will process the following data.

e-mail address
First and last name
title

In addition, the following data will be collected during registration:

Date/Time

For the processing of the data, your consent is obtained during the registration process via the so-called double opt-in and reference is made to this data protection declaration. We also store the registration process so that we can prove that it has taken place correctly.

2. Legal Basis for Data Processing

The legal basis for the processing of newsletter subscription data is your consent pursuant to Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. a GDPR as well as Section 7 Para. 2 No. 3 UWG or our legitimate interest in being able to prove that the registration process has been carried out properly (Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. f GDPR). As of December 1, 2021, legal basis is Art. 4 Para. 1 of the BayDSG in conjunction § 25 Para.1 of the Telecommunications Telemedia Data Protection Act [TTDSG]).

3. Purpose of Data Processing

The collection of your name, title and e-mail address serves to deliver the newsletter and to address you correctly.

The collection of other personal data as part of the registration process serves to prevent misuse of the services or the used e-mail address and to be able to prove the proper process of registration.

4. Storage Period

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. Accordingly, the above data will be stored as long as the subscription to the newsletter is active. Thereafter, we may store the unsubscribed e-mail address for up to three years on the basis of our legitimate interest to be able to prove consent previously given. The purpose of processing for this period until deletion is limited to the defense of claims.

5. Possibility of Objection and Erasure

You can unsubscribe from the newsletter at any time. For this purpose, you will find a corresponding “Unsubscribe” link in each newsletter. This also enables you to revoke your consent to the storage of the personal data collected during the registration process.

6. Newsletter Dispatch Service Provider

In connection with the data processing for the dispatch of newsletters, the data is not passed on to third parties. For the newsletter dispatch, we use the company Inxmail GmbH, Wentzingerstraße 17, 79106 Freiburg, Germany (please find the privacy policy of Inxmail here: https://www.inxmail.de/datenschutz). We have concluded an order processing agreement (Art. 28 GDPR) with Inxmail (hereinafter also newsletter service provider). The data is used exclusively for sending the newsletter.

8. Newsletter-Tracking

1. Description and Scope of Data Processing

To measure how successful our newsletter is, we have our service provider Inxmail measure the open rate and click rate of our newsletter. The open rate is the ratio between the number of recipients who open the newsletter and the number of emails delivered. Opening recipients are those who have opened the mailing at least once, which is recorded by an image inserted in the newsletter (so-called “tracking pixel”). This is loaded from the server of our newsletter service provider upon opening. For the opening rate, the click rate is also used. The click-through rate is the percentage ratio of clickers to openers. This provides us with information about which topics are relevant for those recipients who open the newsletter.

The following data is collected:

– Information about your browser and system
– IP address
– Time of the retrieval

2. Legal Basis for Data Processing

The legal basis for newsletter tracking (measurement of opening and click-through rates, as well as storage of the measurement result) is your consent, which you gave when subscribing to the newsletter with reference to this privacy policy (Art. 4 Para. 1 of the BayDSG Art. 6 Para. 1 lit. a GDPR or, from 1 December 2021, § 25 Para. 1 of the Telecommunications Telemedia Data Protection Act [TTDSG]).

3. Purpose of Data Processing

The information obtained as part of the newsletter tracking is used for the technical improvement of the newsletter dispatch based on technical data or the recipient groups and their reading behavior and access times. Likewise, the information is obtained as to whether the newsletter has been opened, when this occurs and which links are clicked in it (please also see the notes under point 1 of this section). It is true that this information can be assigned to individual newsletter recipients. Under no circumstances, however, do we want to monitor the recipients of our newsletter. The information obtained enables us to tailor our newsletter service even better to the interests of the recipients, e.g. by adapting different content to the interests of the recipients and learning about the reading habits of the recipients.

4. Storage Period

We store your data in anonymized form for 2 years until you revoke your consent.

5. Possibility of Objection and Erasure

You can object to the newsletter tracking at any time for the future. To do so, simply cancel the subscription to the newsletter. For this purpose, you will find a corresponding link (“Unsubscribe”) in every newsletter. This ends your newsletter subscription and the newsletter tracking

9. Online-Marketing

In the context of online marketing, we process personal data for the purpose of displaying promotional or other content intended to be targeted at the potential interests of users. Another purpose of the processing is the measurement of the effectiveness of the measures and the optimization of our website content.

For this purpose, relevant information is stored in so-called user profiles in relation to said content. These user profiles are stored in cookies (please also see our information on cookies in this privacy policy). The stored information includes, among other things

online networks used
websites visited
content viewed
browser used
computer system used
usage times
IP addresses
device information

However, the IP addresses are pseudonymized by shortening the IP address to protect users. Insofar as JavaScript content from external providers is used, you can prevent the processing of personal data by installing a JavaScript blocker such as the browser plug-in “NoScript” (www.noscript.net) or deactivating JavaScript in your browser.

If you have a user account with the corresponding service (e.g. Google, Facebook) and are logged in there, the collected data will be directly assigned to your account. If you do not wish to be associated with your profile, you must log out before visiting our website or before giving your consent to the processing of your data.

In the following, we will first provide you with information on the third-party services used as well as on the third-party providers themselves, then we will go into detail about the legal basis, the purpose of processing, the storage period.

1. ALEXA METRICS

(a) Service

“Alexa Metrics” is used on our website. This service is provided by Alexa Internet, Inc. and allows us to analyze user behavior on our website and to design our website according to user needs.

(b) Provider

Alexa Internet, Corporation Service Company, 2730 Gateway Oaks Drive, Suite 100, Sacramento, CA 95833, USA; Website: www.alexa.com; Privacy Policy: https://www.alexa.com/help/privacy; Opt-Out for Alexa Measurement Pixel: https://support.alexa.com/hc/en-us/articles/200685410-Opting-Out-of-Alexa-Measurement-Pixel

2. GOOGLE TAG MANAGER

(a) Service

The “Google Tag Manager” is used on our website. This service is provided by Google Ireland Ltd. and allows us to manage website tags via an interface. The Google Tag Manager takes over the function that Telex implement, but does not itself collect any personal data

(b) Provider

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Privacy policy: https://policies.google.com/privacy;

3. GOOGLE DOUBLECLICK

(a) Service

Google DoubleClick is an online marketing tool of Google Ireland Ltd. This tool is used on our website for marketing and optimization purposes. Among other things, Google DoubleClick uses cookies (please see the information on cookies in this privacy policy) to prevent ads from being displayed more than once. Also, via the set cookie, the “conversion” can be recorded, which have reference ad requests. This is the case, for example, if you see a Double Click ad and at a later point in time visit the advertiser’s website with the same browser and buy something or use services there.

(b) Provider

4. GOOGLE ADS

(a) Service

We use Google Ads, a service of Google Ireland Ltd. on our website. With Google Ads, we can draw attention to our offers with the help of advertising media on external websites. This allows us to draw conclusions about the success of individual advertising measures. The advertising media are delivered by Google via so-called “AdServers”. We use so-called AdServer cookies to measure success. If you arrive at our website via a Google ad, Google Ads will store a cookie on your end device. This contains the following information: Unique-Cookie-ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), opt-out information (marking that the user does not want to be addressed anymore). However, we only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are successful.

(b) Provider

5. FACEBOOK-PIXEL

(a) Service

Facebook Pixel is an analytics service provided by Facebook Ireland Ltd. that combines data from the Facebook network with actions taken through this website. This allows users of the website to be shown interest-based advertisements (“Facebook Ads”) when visiting the Facebook social network or other websites that also use the method. We thereby pursue the interest of showing you advertisements that are of interest to you in order to make our website more interesting for you. For this purpose, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of the Facebook Pixel, Facebook receives the information that you have called up the corresponding web pages of our website or clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is the possibility that the provider learns and stores your IP address and other identifying features.

(b) Provider

Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com; Privacy policy: https://www.facebook.com/about/privacy; Opt-out: https://www.facebook.com/settings?tab=ads.

6. GOOGLE ANALYTICS

(a) Service

Our website uses Google Analytics, a web analytics service provided by Google, Inc. or Google Ireland Ltd. (“Google”). The information stored in a cookie about your use of our website is usually transferred to a Google server in the USA and stored there. However, in the case of activation of IP anonymization as on this website, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

(b) Provider

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com/intl/de/about/analytics/; Privacy Policy: https://policies.google.com/privacy; Option to object (opt-out): Opt-out plugin objection: https://tools.google.com/dlpage/gaoptout?hl=de, objection settings for the display of advertising: https://adssettings.google.com/authenticated

7. GOOGLE MAPS

(a) Service

On our website we use the offer of Google Maps. This allows us to show you interactive maps directly on the website and enables you to use the map function comfortably.

(b) Provider

8. LINKEDIN INSIGHT TAG

(a) Service

Our website uses LinkedIn Insight Tag. This is an analytics service provided by LinkedIn Corporation or LinkedIn Ireland Unlimited Company, which links data from the LinkedIn network to actions taken through this website. We use it to pursue the interest of showing you advertising that is of interest to you in order to make our website more interesting for you.

(b) Provider

LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA; Website https://www.linkedin.com; Security measures: IP-Masking (pseudonymization of the IP address); Privacy Policy: https://www.linkedin.com/legal/privacy-policy, Cookie-Policy: https://www.linkedin.com/legal/cookie_policy; Option to object (opt-out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

9. MICROSOFT ADVERTISING

(a) Service

Microsoft Advertising is used on our website. This analysis tool is provided by Microsoft Corporation. Via a conversion tracking tag from Microsoft Advertising, we can learn more about user behavior when you reach our website via a Microsoft advertisement (e.g. keyword, ad, click behavior on our website, etc.). In doing so, we only receive data or evaluations about your behavior on the Internet. We do not know what data Microsoft processes. Microsoft also processes data in the USA, among other places. The standard contractual clauses approved by the EU Commission apply as the basis for data processing.

(b) Provider

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; Privacy Policy: https://privacy.microsoft.com/de-DE/privacystatement; Option to object: https://account.microsoft.com/privacy/ad-settings/signedout1.

10. YUMPU

(a) Service

Our website uses the yumpu software (which is provided by i-magazine AG). Through the software yumpu, we can track the reading behavior of our users. We do not know which data i-magazine AG processes.

(b) Provider

Yumpu is software by i-magazine AG, Gewerbestrasse 3, 9444 Diepoldsau; Privacy Policy: https://www.yumpu.com/de/info/privacy_policy.

11. GOOGLE MARKETING PLATTFORM

We use the Google Marketing Platform on our website, a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). The Google Marketing Platform consists of various individual services. Google Analytics” and “Double Click” are used on this website to display advertising.

For the functioning and the objection options of Google Analytics, the above under point C.I of this data protection declaration applies accordingly.

The following applies to Double Click: When you visit a website and view or click on an advertisement served via websites of the Google advertising network, a DoubleClick cookie may be stored in your browser. The DoubleClick cookie identifier assigned to your browser is the same identifier used when you visit websites that use DoubleClick advertising programs. If your browser already has a DoubleClick cookie, no further DoubleClick cookie should be dropped.

In addition, Double Click uses so-called floodlight pixels. These establish a connection to Google’s servers when our website is loaded and transmit information about your visit to our website.

You can revoke your consent to the service just mentioned at any time by calling up the Cookie Law banner again under Services or by generally making new cookie settings. You can change your Cookie preferences for this website anytime via the link under paragraph 4.5 in this data privacy declaration.

In connection with the Google Marketing Platform, we process your personal data as follows:

(a) Purpose of processing

We process your personal data in order to use the Google Marketing Platform to serve advertisements.

b) Legal basis of the processing

The processing of your personal data to use the Google Marketing Platform to serve advertisements is based on your consent.

c) Recipients/categories of recipients of your personal data

We disclose your personal data to Google.

d) Storage period of your personal data

We store your personal data for as long as it is necessary for the use of the Google Marketing Platform for the display of advertising.

e) Third country reference of the processing of your personal data

Google processes your personal data in the USA. The USA does not offer a sufficient level of data protection. However, any transfer of personal data will take place in compliance with the conditions laid down in Art. 44-50 of the GDPR as well as the other provisions of the GDPR in order to ensure that the level of protection for natural persons thereby guaranteed is maintained.

f) Obligation to provide your personal data

You are not obliged to disclose personal data. However, if you have not used any of the above functions to deactivate tracking by the Google Marketing Platform, you will not be able to access this website without your personal data being processed by the Google Marketing Platform.

2. Description and Scope of Data Processing

Through the above-mentioned services of our online marketing, the following personal data of you will be processed:

– Usage data (characteristics identifying the user, information about the beginning and end as well as the scope of the respective usage, web pages visited, information about the content viewed by the user).
– Meta/communication data
– Location data
– Event data (Facebook)

3. Legal Basis for Data Processing

If you consent to the use of the third-party providers, the legal basis for the processing of your personal data is consent (Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. a GDPR). Processing does not take place without consent (please also see the section on cookies or the cookie settings). Please note that as of December 1, 2021, the storage of information in “end devices” of end users and access to information already stored in them will be based on the legal basis of Art. 4 Para. 1 of the BayDSG in conjunction with § 25 of the Telecommunications Telemedia Data Protection Act (TTDSG). § 25 TTDSG is then the legal basis for the consent requirement when using cookies and comparable technologies.

4. Purpose of Data Processing

We use the above services for the purposes of tracking, re-marketing, to make our offer more attractive, to obtain information about our target audience and to measure the success of our ad campaigns.

5. Storage Period, Possibility of Objection and Erasure

In the cookie settings, you will find information on the duration of cookie storage and can revoke your consent (please see the section on cookies). Please also refer to the data protection declarations of the respective providers (see above) with regard to the storage period and the options for objection and removal. In addition, you can disable cookies in the settings of your browser.

6. Security Measures

The IP address is pseudonymized (IP masking).

10. No use of Social Media Plug-Ins

We do not use any social media plug-ins. On our website, we only point out that we maintain our own presences on the social networks Facebook, LinkedIn, Instagram and Twitter, and that we have a Spotify and YouTube channel. If you click on the logo, you will be redirected to our respective presence in the social networks. In doing so, the data mentioned under III. 1 of this data protection declaration will be transmitted to the respective provider of the social network. If you have an account with the respective provider and are logged in, the data may be linked to your account. We do not know what other data is collected or processed by the respective provider of the social network and have no influence on this.

You can prevent the data processing by not clicking on the icon. For more information on the purpose and scope of data collection and its processing by the provider of the social networks, please refer to the privacy policy of the provider, which is communicated below. There you will also receive further information about your rights in this regard and setting options for protecting your privacy.

(a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; https://www.facebook.com/policy.php; Privacy policy: https://www.facebook.com/about/privacy;

(b) Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025; Privacy policy: https://help.instagram.com/155833707900388

(c) Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland; Privacy policy: https://twitter.com/de/privacy

(d) Spotify AB, Regeringsgatan 19, 11153 Stockholm, Sweden; Privacy policy: https://www.spotify.com/de/legal/privacy-policy/

(e) YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; privacy notices can be found here: https://policies.google.com/privacy?hl=de

(f) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; privacy notices can be found here: https://www.linkedin.com/legal/privacy-policy

11. Integration of videos from YouTube

We also show videos on our website. This also results in the processing of personal data. The purpose of the processing is to provide you with attractive content via our website.

On our website, we show videos that are loaded from YouTube. The service provider of the YouTube video platform is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The privacy policy: from Google can be found here: https://policies.google.com/privacy; Possibility of objection (Opt-Out): Opt-Out-Plugin: https://tools.google.com/dlpage/gaoptout?hl=de, Settings for the display of advertisements: https://adssettings.google.com/authenticated.

By playing YouTube videos, data is transmitted from you to Google. This means that personal data may also be transmitted to the USA and processed there. The European Court of Justice has ruled that the USA does not have an adequate level of data protection. We explicitly point this out to you and you can then decide whether you want to play YouTube videos on our website or not. We have no influence on the processing of personal data by Google.

For this reason, you will be informed of this circumstance before playing a YouTube video and can decide whether or not to let the video play. If you allow the video to play, you declare your consent to the data processing to us. You can revoke your consent at any time via the cookie settings (please also see our information on cookies).

The legal basis for data processing is your consent in accordance with Art. 4 Para. 1 of the BayDSG in conjunction with Art. 6 Para. 1 S. 1 lit. a GDPR. Please note that as of December 1, 2021, the storage of information in “end devices” of end users and access to information already stored in them will be based on the legal basis of Art. 4 Para. 1 of the BayDSG in conjunction with § 25 Telecommunications Telemedia Data Protection Act (TTDSG). § 25 TTDSG is then the legal basis for the consent requirement when using cookies and comparable technologies.

12. Your Rights/Right of Complaint

1. Your Rights

Insofar as we process personal data from you, you have the following rights as a data subject:

You have the right to information about the data stored about you (Art. 15 GDPR).
If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR).
If the legal requirements are met, you may request the erasure or restriction of processing (Art. 17 and 18 GDPR).
If you have consented to the processing or if there is a contract for data processing and the data processing is carried out with the help of automated procedures, you may have a right to data portability (Art. 20 GDPR).
If you have consented to the processing and the processing is based on this consent, you can revoke the consent at any time for the future. The lawfulness of the data processing carried out on the basis of the consent until the revocation is not affected by it. You have the right to object to the processing of your data at any time on grounds relating to your particular situation, if the processing is carried out exclusively on the basis of Art. 6 Para. 1 S. 1 letter e) or f) GDPR (Art. 21 Para. 1 sentence 1 GDPR).

2. Right of Appeal to the Supervisory Authority

Furthermore, there is a right of appeal to a supervisory authority. The Bavarian State Commissioner for Data Protection is responsible for the Technical University of Munich.

You can reach this authority under the following contact data:

Postal address: P.O. Box 22 12 19, 80502 Munich, Germany
Address: Wagmüllerstrasse 18, 80538 Munich, Germany
Telephone: 089 212672-0
Fax: 089 212672-50
E-mail: post office(at)datenschutz-bayern.de
https://www.datenschutz-bayern.de/

13. Further information

For more information about the processing of your data and your rights, you can contact us at the contact details mentioned above (at the beginning of I.).

contact details mentioned above (at the beginning of I.).