Source: https://sumo-rhine.com/en/data-privacy-notice/
Timestamp: 2020-06-04 05:40:03
Document Index: 414009374

Matched Legal Cases: ['Art. 6', 'Art. 32', 'Art. 25', 'Art. 13', 'Art. 6', 'Art. 7', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

The following notices provide an overview of what happens to your personal information on sumo-rhine.com when you visit our website. We inform you about your rights regarding your personal data and describe how, when and for what purposes we collect and process personal data.
Personal data are all data that personally identifies you. When you use this site, personal data (IP addresses, contact data, user data, etc.) is collected to the extent necessary for its operation, but as little as possible. We treat this data confidentially in accordance with the statutory data protection regulations and this privacy policy.
The “controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. It is the contact for all questions concerning the assertion of your rights. The controller for this website is:
http://www.dfiu.kit.edu/english/
A. Kira Schumacher
Phone: +49 (0)721 608 44572
Our Data Protection Commissioner can be contacted at datenschutzbeauftragter@kit.edu or by ordinary mail with “Die Datenschutzbeauftragte” (the data protection commissioner) being indicated on the envelope.
You have the right to receive information at any time free of charge about the origin, recipients and purpose of your stored personal data.
You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format if the processing is carried out by automated means and is legally based on your consent.
You have the right to request the correction or deletion of your personal data or the restriction of its processing. A possible deletion does not include data that we are obliged to keep due to administrative, legal or security reasons.
Many data processing operations are only possible with your express consent. However, you can withdraw your consent at any time. To do this, simply send an informal e-mail to the contact person. The legality of the data processing carried out until the withdrawal remains unaffected by the withdrawal.
In the event of violations of data protection law, you have the right to lodge a complaint with the responsible supervisory authority. Supervisory authority of KIT:
Street address: Königstrasse 10 a
Postal address: Post office box 10 29 32
Details of data collection and processing
The webspace provider of sumo-rhine.com (webgo GmbH, Wandsbeker Zollstr. 95, 22041 Hamburg, Germany) collects and stores information automatically transmitted by your browser in so-called server log files. These are:
This can be used to generate statistics on user behavior, as far as the database allows it. These data are not merged with other data sources. The legal basis is Art. 6 para. 1 lit. f GDPR, which permits the processing of personal data if the controller has an overriding legitimate interest.
No personal data is collected on this page that you actively provide. SSL or TLS encryption is therefore not necessary.
In accordance with Art. 32 GDPR, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons.
Measures shall include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to, access to, inputting, disclosure, securing and separation of data. In addition, we have established procedures to ensure the exercise of data subjects’ rights, deletion of data and reaction to data threats. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and processes, in accordance with the principle of data protection through technology design and data protection-friendly default settings (Art. 25 GDPR).
We inform you about the legal basis of our data processing in accordance with Art. 13 GDPR. If the legal basis is not mentioned in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR, the legal basis for processing in order to fulfil our services and carry out contractual measures as well as answer inquiries is Art. 6 para. 1 lit. b GDPR, the legal basis for processing in order to fulfil our legal obligations is Art. 6 para. 1 lit. c GDPR, and the legal basis for processing in order to safeguard our legitimate interests is Art. 6 para. 1 lit. f GDPR. In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 para. 1 lit. d GDPR serves as the legal basis.