Directly to the content Skip to maincontent Directly to the footer Skip to footercontent

Data protection

General preliminary remarks
This website presents the Faculty of Computer Science at Darmstadt University of Applied Sciences to the outside world, disseminates information and provides support for the university's tasks. The website has an independent, standardised design.

Responsibility and competences
No liability is assumed for the operation, accuracy and topicality of the information. The Faculty of Computer Science at Darmstadt University of Applied Sciences is responsible for the operation of the server. A team of employees is responsible for editing. The Dean's Office has general responsibility for the content and decides on the admissibility of the data in cases of doubt.

Handling of data
Darmstadt University of Applied Sciences takes the protection of personal data very seriously. We process personal data that is collected when you visit our website in compliance with the applicable data protection regulations. In particular, the EU General Data Protection Regulation (GDPR), the Hessian Data Protection and Freedom of Information Act (HDSIG) and the Telemedia Act (TMG) apply.

In the following, we inform you about the type, scope and purpose of the collection and use of personal data.

Your data will neither be published by us nor passed on to third parties without authorisation.

1. data collection and processing when accessing from the Internet
When you visit our website, our web servers automatically save every access in a log file.

This data is stored separately from other data that you enter when using our website. It is not possible for us to assign this data to a specific person. This data is used exclusively to check and ensure the reliable technical operation of the web server. This data is deleted after a retention period of 7 days.
The following data is recorded:

- IP address (anonymised)
- Date and time of access
- Name and URL of the retrieved file
- Amount of data transferred
- Access status of the web server (file transferred, file not found, command not executed, etc.)

The login for Entry Requirements to protected areas is partially logged in order to be able to recognise attempts at misuse and password attacks. No data is stored that could be used to create personal profiles of user behaviour.
The legal basis for processing is Art. 6 para. 1 b) of the GDPR.

2 Use and disclosure of personal data
In general, it is not necessary for you to provide personal data in order to use our website. However, in order for us to actually provide some of our services (e.g. registration for an event), we may need your personal data.

Any use of your personal data will only take place for the stated purposes and to the extent necessary to fulfil these purposes. None of this data will be passed on to third parties without the user's prior consent.

The transmitted data is stored in a database that is only accessible to administrators.

Personal data is only transferred to state authorities within the framework of mandatory national legislation.
The legal basis for processing is Art. 6 Para. 1 b) and c) of the GDPR.

3. cookies
The Internet pages of the Faculty of Computer Science at Darmstadt University of Applied Sciences use cookies. Cookies are text files that are placed and stored on a computer system via an internet browser.

Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string that allows websites and servers to be assigned to the specific internet browser in which the cookie was stored. This enables the websites and servers visited to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognised and identified via the unique cookie ID.

Through the use of cookies, the ewa can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.

By means of a cookie, the information and offers on our website can be optimised for the benefit of the user. As already mentioned, cookies enable us to recognise the users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses cookies does not have to re-enter their access data each time they visit the website because this is taken over by the website and the cookie stored on the user's computer system. Another example is the cookie of a shopping basket in an online shop. The online shop remembers the items that a customer has placed in the virtual shopping basket via a cookie.

The data subject can prevent the setting of cookies by our website at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an internet browser or other software programmes. This is possible in all common internet browsers. If the person concerned deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.

4. data protection provisions about the application and use of YouTube
The data controller has integrated YouTube components on this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programmes as well as music videos, trailers or videos made by users themselves can be accessed via the Internet portal.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time one of the individual pages of this website is accessed, which is operated by the data controller and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the information technology system of the person concerned is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information about YouTube can be found at www.youtube.com/yt/about/de/ can be accessed. During the course of this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by the data subject.
If the data subject is logged in to YouTube at the same time, YouTube recognises which specific sub-page of our website the data subject is visiting when they access a sub-page that contains a YouTube video. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.
YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is logged in to YouTube at the same time as accessing our website; this takes place regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, they can prevent the transmission by logging out of their YouTube account before accessing our website.
The data protection provisions published by YouTube, which can be accessed at www.google.de/intl/de/policies/privacy/ provide information about the collection, processing and use of personal data by YouTube and Google.
You can specify in your browser settings whether cookies may be set or not.

The legal basis for processing is Art. 6 para. 1 b) GDPR.

5 Data protection provisions about the application and use of Facebook
The controller has integrated components of the company Facebook on this website. Facebook is a social network.
A social network is a social meeting place operated on the Internet, an online community that generally enables users to communicate with each other and interact in virtual space. A social network can serve as a platform for the exchange of opinions and experiences or enable the Internet community to provide personal or company-related information. Facebook allows users of the social network to create private profiles, upload photos and network via friend requests, among other things.
The operating company of Facebook is Facebook, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller for the processing of personal data is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Each time one of the individual pages of this website is accessed, which is operated by the data controller and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins can be accessed at developers.facebook.com/docs/plugins/. As part of this technical process, Facebook receives information about which specific subpage of our website is visited by the data subject.
If the data subject is logged in at the same time on Facebook, Facebook recognises which specific sub-page of our website the data subject is visiting each time the data subject accesses our website and for the entire duration of their stay on our website. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account of the data subject. If the data subject clicks on one of the Facebook buttons integrated on our website, for example the "Like" button, or if the data subject submits a comment, Facebook assigns this information to the personal Facebook user account of the data subject and stores this personal data.
Facebook always receives information via the Facebook component that the data subject has visited our website if the data subject is logged in to Facebook at the same time as accessing our website; this takes place regardless of whether the data subject clicks on the Facebook component or not. If the data subject does not want this information to be transmitted to Facebook, they can prevent the transmission by logging out of their Facebook account before accessing our website.
The data policy published by Facebook, which is available at de-de.facebook.com/about/privacy/ provides information about the collection, processing and use of personal data by Facebook. It also explains the setting options Facebook offers to protect the privacy of the data subject. In addition, various applications are available that make it possible to suppress the transmission of data to Facebook. Such applications can be used by the data subject to suppress data transmission to Facebook.

6. data protection provisions about the application and use of Vimeo
The data controller has integrated Vimeo components on this website. Vimeo is an Internet video portal that enables video publishers to post video clips free of charge and other users to view, rate and comment on them free of charge. Vimeo allows the publication of all types of videos, which is why complete film and television programmes as well as music videos, trailers or videos made by users themselves can be accessed via the Internet portal. The operating company of Vimeo is Vimeo, Inc. 555 West 18th Street, New York, New York 10011, USA.

Each time one of the individual pages of this website is accessed, which is operated by the data controller and on which a Vimeo component (Vimeo video) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Vimeo component to download a representation of the corresponding Vimeo component from Vimeo. Further information about Vimeo can be found at https://vimeo.com/de/about can be accessed. During the course of this technical procedure, Vimeo gains knowledge of what specific sub-page of our website was visited by the data subject. If the data subject is logged in to Vimeo at the same time, Vimeo recognises which specific sub-page of our website the data subject is visiting by accessing a sub-page that contains a Vimeo video. This information is collected by Vimeo and assigned to the respective Vimeo account of the data subject.

Vimeo always receives information via the Vimeo component that the data subject has visited our website if the data subject is logged in to Vimeo at the same time as accessing our website; this takes place regardless of whether the data subject clicks on a Vimeo video or not. If the data subject does not want this information to be transmitted to Vimeo, they can prevent the transmission by logging out of their Vimeo account before accessing our website. The data protection provisions published by Vimeo, which can be accessed at https://vimeo.com/privacy provide information about the collection, processing and use of personal data by Vimeo.

7 Voiceflow

On our website, we use an AI-supported chatbot from Voiceflow, a service of Voiceflow Inc. to offer you an interactive way to contact and support us. The operating company of Voiceflow is Voiceflow, Inc, 1055 Bay Street Suite 2012, Toronto, ON, Canada, M5S 3A3. The chatbot is used to answer frequently asked questions and provide general information. Use of the chatbot is voluntary. The applicable data protection provisions of Voiceflow are available at www.voiceflow.com/privacy can be accessed.

The following data may be processed when using the chatbot

- User input: All text input that you enter in the chat field, including questions, enquiries or other messages.
- Technical data: This includes your IP address, browser information, operating system, time and duration of use.
- Other data: If applicable, location data or other voluntary information that you provide in the chat.

The data is used exclusively to answer your enquiries and to improve the service of the chatbot. Your data is processed on the basis of Art. 6 para. 1 lit. b GDPR (fulfilment of a contract or pre-contractual measures) and Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in the provision of a user-friendly and efficient online service.

Voiceflow Inc. may gain Entry Requirements to the processed data as part of the provision and improvement of the chatbot service. Voiceflow Inc. is a provider based in Canada. Canada is recognised by an adequacy decision of the European Commission as a country with an adequate level of data protection. The data is transferred exclusively on the basis of the legal requirements pursuant to Art. 44 et seq. GDPR.

The data transmitted in the chatbot will only be stored for as long as is necessary to process your enquiry. Anonymised data can be used to improve the chatbot system.

You have the right to request information about the processing of your personal data, to have incorrect data corrected and to request the deletion of your data, provided that there are no legal obligations to retain it. Further information on your rights can be found in the general sections of this privacy policy.

8 Security
Our technical and organisational security measures, which we use to protect all data from unauthorised access, are always kept up to date. Personal information is always transmitted in encrypted form.

9. links to websites of other providers
Our websites may contain links to websites of other providers. We would like to point out that this data protection declaration applies exclusively to the websites of the central presence of Darmstadt University of Applied Sciences. We have no influence on and do not check that other providers comply with the applicable data protection regulations.

10. right to information, correction, blocking or deletion of data
Users of our websites have a right of access to the personal data stored about them and also a right to rectification of inaccurate data, restriction of processing and erasure as well as objection to processing and data portability.
The data protection officer at Darmstadt University of Applied Sciences can be contacted at datenschutz@h-da.de.
Reference is made to the existence of a right of appeal to a supervisory authority.
The competent supervisory authority is
The Hessian Data Protection Officer
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Telephone: 0611 1408-0
E-mail: poststelle@datenschutz-hessen.de
Internet: www.datenschutz.hessen.de

11 Validity and timeliness of the privacy policy
By using our website, you consent to the use of your data as described above. This data protection declaration is immediately valid and replaces all previous declarations.