I. Name and Address of the Data Controller
The Data Controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States as well as other data protection regulations is:
Albert Ludwigs University of Freiburg
Friedrichstraße 39
79098 Freiburg
+49 (0)761/203-0
info@uni-freiburg.de
II. Name and Address of the Data Protection Officer
The Data Protection Officer of the Controller is:
Albert Ludwigs University of Freiburg
Data Protection Officer
Fahnenbergplatz
79085 Freiburg
datenschutzbeauftragter@uni-freiburg.de
III. Note of this Privacy Policy
This information on data protection/data protection declaration refers to the website of the Life Imaging Center , which is operated by the University of Freiburg. Please contact us in case you want to withdraw consent to process your personal data or if you want to know which data we store from you.
IV. General Information on Data Processing
In cases where the processing of personal data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller, Article 6(1)(e), paragraph 3 GDPR in conjunction with the task-assigning norms of Union or national law serves as the legal basis.
If the processing is necessary for the purposes of the legitimate interests pursued by the University of Freiburg or a third party, and these interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Article 6(1)(f) GDPR serves as the legal basis for the processing.
V. Provision of the Website and Creation of Log Files
The following data is collected:
This data is also stored in our system’s log files. The IP address is anonymized after the end of the usage session before storage in the log files. This data is not stored together with other personal data of the user.
Storage in log files is done to ensure the functionality of the website. Additionally, the data is used for technical optimization, tracking access numbers, and ensuring the security of our IT systems.
These purposes also constitute our legitimate interest in data processing according to Article 6(1)(f) GDPR.
Right to Object
The collection of data for the provision of the website and the temporary storage of data in log files is essential for the operation of the website. Therefore, the user has no right to object.
Duration of Storage
The data will be deleted as soon as it is no longer necessary for the purposes for which it was collected. In the case of data collection for the provision of the website, this occurs when the respective session is ended. For data stored in log files, this occurs after two weeks. Further storage is only possible in cases of concrete suspicion of attacks on our website and for error analysis.
VI. Use of Cookies
We use cookies to ensure the proper functioning of the website, improve accessibility, navigation, and presentation of our website, and to embed media from our video portal.
The following types of cookies are used on our websites:
Except for the technically required cookies, other cookies are activated only after explicit consent. These consents can be revoked at any time. If technically required cookies are blocked or deleted through browser settings, some functions of our website may only be available in a limited manner.
2.1 Description and Scope of Data Processing
We use cookies to make our websites functional. Some elements of our website require the requesting browser to be recognized even after a page change.
The following data is stored and transmitted in the cookies listed here:
| Origin | Name | Purpose | Validity |
|---|---|---|---|
| uni-freiburg.de | serverid | Load balancer assignment | Until the end of the browser session |
| videoportal.uni-freiburg.de | framework | Session ID, timestamp for video player | 7 days |
Table 1: Overview of Technically Required Cookies
2.2 Legal Basis for Data Processing
The legal basis for data processing using the technically required cookies listed under VI. 2.1 in accordance with Section 25 (2) No. 2 TDDDG is Article 6 (1) (f) GDPR.
2.3 Purpose of Data Processing
The purpose of using technically necessary cookies is to enable the usability of the websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized after a page change.
We need cookies for the following applications:
These purposes also constitute our legitimate interest in data processing according to Article 6 (1) (f) GDPR.
2.4 Duration of Storage, Objection, and Removal Options
The storage duration of the cookies can be found in Table 1 under VI. 2.1.
Cookies are stored on the user’s computer and transmitted to our site from there. Therefore, you as the user have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the storage of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, not all functions of the website may be fully usable.
3.1 Description and Scope of Data Processing
On our website, we have individual offers for which we require your consent (e.g., Google search). Upon agreement, you have the option to store your consent permanently. For this, we ask for your one-time or permanent consent before using a corresponding webpage for the first time.
For permanent consent, the following data is stored and transmitted in the cookies listed here:
| Origin | Name | Purpose | Validity |
|---|---|---|---|
| uni-freiburg.de | unifreiburg_allow_google_search | Opt-in cookie for Google search | 1 year |
Table 2: Cookies for Consent Management
3.2 Legal Basis for Data Processing
The legal basis for data processing using the technically required cookies listed under VI. 3.1 in accordance with Section 25 (2) No. 2 TDDDG is Article 6 (1) (f) GDPR.
3.3 Purpose of Data Processing
The purpose of using cookies for consent management is to permanently store consent so that consent does not need to be obtained again for future page visits, and to provide proof of the given consent.
Providing proof of the given consent also constitutes our legitimate interest in data processing according to Article 6 (1) (f) GDPR.
3.4 Duration of Storage, Objection, and Removal Options
The storage duration of the cookies can be found in Table 2 under VI. 3.1.
Cookies are stored on the user’s computer and transmitted to our site from there. Therefore, you as the user have full control over the use of cookies. You can withdraw your consent at any time by deleting the corresponding cookie in your browser or system.
4.1 Google Search
On our website, we offer the option of a comprehensive search across all university portals using Google’s Programmable Search Engine (see X.1. Google Search). In the event of your consent, cookies from Google are stored on your system. Information on data protection and the cookies used by Google can be found in Google’s Privacy Policy [https://policies.google.com].
VII. Contact Form and Email Contact
At the time the message is sent, the following additional data is also stored:
(1) Date and time of submission
For the processing of the data, your consent is obtained during the submission process, and reference is made to this privacy policy.
Alternatively, contact is possible via the provided email address. In this case, the user’s personal data transmitted with the email will be stored.
In this context, no data is passed on to third parties. The data is used exclusively for processing the conversation.
The legal basis for processing data transmitted in the course of sending an email is Article 6 (1) (f) GDPR.
The other personal data processed during the submission process is used to prevent misuse of the contact form and ensure the security of our information technology systems.
The personal data additionally collected during the submission process will be deleted after a maximum period of seven days.
VIII. Web Analysis Using Matomo
Matomo is configured so that the IP address is not stored in full (masking of two bytes of the IP address). This way, it is no longer possible to associate the truncated IP address with the requesting computer.
When individual pages of our website are accessed, the following data is stored:
Matomo is also configured so that no cookies are set for the analysis of usage behavior.
The data collected by Matomo is stored exclusively on servers of the University of Freiburg. The stored data is not shared with third parties. There is no merging of this data with any other stored data that may be collected when using other services that require the provision of personal information.
This also constitutes our legitimate interest in data processing according to Article 6 (1) (f) GDPR.
By anonymizing the IP address and avoiding the use of cookies, the interests of the users in protecting their personal data are adequately taken into account.
IX. Video Portal of the University of Freiburg (VIMP)
On our website, videos from the University of Freiburg’s video portal are embedded on certain pages to provide you with engaging media content. When you access a page with embedded videos, technically necessary cookies are set. For more information about the cookies used, please refer to section VI. 2. “Technically Necessary Cookies for Using the Website.”
X. Collection and Processing of Personal Data When Integrating External Services with Consent
To better convey information and improve the discoverability of our content, we integrate third-party services on our website. Below is an overview of the services used.
1.2 Consent Declaration
After clicking the tab, you will be presented with a selection dialog containing information about data protection and the option to consent to the search either once or permanently (valid for 1 year). If consent is given once, users must agree again on subsequent accesses. In the case of permanent consent, we store a cookie on your system to avoid having to obtain your consent again for future searches. For more information about the cookie used, please refer to section VI. 3. “Technically Necessary Cookies for Managing Consents.”
1.3 Data Exchange with Google
With your consent, the previously entered search term is passed to a Google script, which then returns the search results. The script developed by Google (Google Programmable Search Engine) is integrated into the search results page by the University of Freiburg unchanged. This script enables automated communication (data exchange) with dynamic data transfer between the accessed page and the Google service.
1.4 Google’s Privacy Notices and Privacy Policy
By consenting to the use of Google Search, you agree to the transfer of data to the Google service. This includes the search term you entered and possibly other search parameters. Furthermore, Google may collect additional personal data through the integrated script call, such as the IP address of your computer. Please note that Google has different privacy provisions than those of the University of Freiburg’s website. We expressly inform you that the responsibility for the processing, storage, deletion, and use of any transmitted and additionally collected personal data rests solely with Google, and the University of Freiburg has no influence over the type and scope of the data collected or its further processing.
Information about Google’s privacy practices and cookies can be found in Google’s Privacy Policy [https://policies.google.com].
XI. Privacy Policies for Social Media
The University of Freiburg uses various social media platforms to complement its existing communication channels such as its website, press releases, newsletters, print materials, and events. These platforms are used for current reporting on university topics, events, news from science, research, and teaching, service offerings, student jobs, and other campus-related information. As the responsibility for editorial oversight of these services remains with the University of Freiburg, we have published separate privacy policies for the following external services:
XII. Rights of the Data Subject
If your personal data is processed, you are considered a data subject under the GDPR, and you have the following rights against the University of Freiburg:
If such processing occurs, you can request information from the University of Freiburg about:
You have the right to request information on whether personal data is transferred to a third country or an international organization. In this context, you can request to be informed about the appropriate safeguards according to Article 46 GDPR related to the transfer.
If the processing of your personal data is restricted, such data – apart from being stored – may only be processed with your consent or for the assertion, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of substantial public interest of the Union or a Member State.
If the restriction of processing is based on the aforementioned conditions, the University of Freiburg will inform you before the restriction is lifted.
4.2 Notification to Third Parties
If the University of Freiburg has made your personal data public and is obliged to erase it according to Article 17 (1) GDPR, the University will, considering the available technology and the implementation costs, take reasonable steps, including technical measures, to inform controllers who are processing the personal data that you, as the data subject, have requested the erasure of all links to this personal data or copies or replicas of this personal data.
4.3 Exceptions
The right to erasure does not apply to the extent that processing is necessary:
You have the right to be informed by the University of Freiburg about these recipients.
In exercising this right, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible. The rights and freedoms of others must not be adversely affected as a result.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the University of Freiburg.
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Art. 6(1) of the GDPR.
The University of Freiburg shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise, or defence of legal claims.
You have the possibility, in the context of the use of information society services, and notwithstanding Directive 2002/58/EG, to exercise your right to object by automated means using technical specifications.
You have the right to withdraw your consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 of the GDPR.