Source: http://www.brain.uni-freiburg.de/privacy-notice
Timestamp: 2019-04-21 12:07:39+00:00

Document:
Under Article 15 of EU General Data Protection Regulation (EU-GDPR), the data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and if so, what data is specifically being processed. For this, a copy of the data can be obtained, as long as there is no legal exemption. Should the data be incomplete or incorrect, the subject has the right to rectification in accordance with Article 16 EU-GDPR.
Art. 17 EU-GDPR: Erasure of personal data, when there is a cited cause for erasure.
Art. 18 EU-GDPR: Restriction of processing of personal data, when there is a cited cause.
Art. 20 EU-GDPR: Data portability to a provider, when the processing happens based on consent or on a contract.
Art. 21 EU-GDPR: The data subject has the right to object, on the grounds relating to his or her particular situation, to the otherwise legal processing of personal data.
Art. 22 EU-GDPR: The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
Processing of log data (access data): When using the web service, the access to the pages, whether or not the access was successful, the time, the data volume transferred and the IP address of the device are evaluated in order to recognise errors. The processing happens only internally and on the basis of Art. 6(1)(f) EU-GDPR, whereas the interest lies in error detection. The stored log data is deleted automatically after 7 calendar days.
The data used for the identification of the device is stored on the university server. The storage and processing occurs based on an agreement in accordance with Art 6(1)(a) EU-GDPR, which is provided by the user of the device when activating the automatic log-in function. No data is shared with third parties. The data is used exclusively for the clear identification of the device used, in connection with the automatic log-in. An automatic log-in is only successful when the digital fingerprint matches, the username and password can be decrypted and the actual log-in data matches. Automatic log-in will be deleted automatically should it not be used for 4 weeks. Additionally, the user can always deactivate automatic log-in in their account settings, e.g. when the device is lost. By storing the device´s data mentioned above, the user can keep multiple devices seperate in his/her account and deactivate automatic log-in for individual devices. The processing of the data is legitimized by the agreement up to the point of withdrawal.
To this purpose, our legitimate interest in the processing of personal data also lies in accordance with Art. 6 Para. 1 lit. f DS-GMO.
The legal basis for the processing of personal data using cookies is Art. 6 Para. 1 lit. f DS-GMO.
The recipient of the information contained in the cookies is exclusively the authorized web server, i.e. the web server of the university setting the cookie.
You can find the storage time of the cookies in the table above. As the cookies are stored on your terminal device, you also have the option of deleting them earlier. For more information, see below.
You can prevent cookies from being stored on your computer via a corresponding browser setting; however, we would like to point out that if you do so you will not be able to use some functions of our website to their full extent (see above).

References: Art. 17

Art. 18

Art. 20

Art. 21

Art. 22
 Art. 6
 Art 6
 Art. 6
 Art. 6