Notice: This legal notice is also available in French and German for information purposes. In the event of any discrepancy, the German version shall prevail.
Privacy Policy
1. Controller
The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:
University of Applied Sciences for Business and Engineering Saarland
Goebenstraße 40
66117 Saarbrücken
Germany
Email: cirkla.ic@htwsaar.de
The Data Protection Officer of the University of Applied Sciences for Business and Engineering Saarland is:
Barbara Partzsch, Ass.jur.
htw saar
Haus des Wissens
Building 11
Malstatter Straße 17
66117 Saarbrücken
Germany
Email: datenschutz@htwsaar.de
2. Processing of Personal Data
The UniGR-CIRKLA Innovation Community Platform is a digital platform for knowledge exchange, networking and collaboration between members of the Circular Economy Innovation Community. The platform is accessible exclusively to registered users and its content is not publicly available.
For the registration and use of the platform, personal data such as username and email address are processed in order to identify the user and provide the platform functionalities. In addition, profile information is collected to enable networking and exchange between members of the community. Providing first name and surname, organisation, job title and region is required to participate in the community; additional information (such as profile picture, biography, organisation type or sector) may be provided voluntarily. Profile information is visible to other registered members.
Posts, comments and other content published in the general areas of the platform are visible to all registered members. Users can also communicate via direct messages and private discussions, which are visible only to the respective participants. These chats are not end-to-end encrypted in Flarum, which technically enables administrators, as part of their duties subject to confidentiality for maintenance, troubleshooting and ensuring system integrity, to access the data stored in the database. It is ensured that other users of the platform cannot access these private conversations. Content and communications created through the platform are processed and stored insofar as this is necessary to provide these functions.
When using the platform, technically necessary data, such as IP addresses and session information, are also processed for the operation and security of the platform.
If users subscribe to the newsletter, their email address is used to send information about the platform, the project and relevant activities. Consent may be withdrawn at any time with effect for the future, and the newsletter may be unsubscribed from.
For the fulfilment of reporting obligations within the project and for scientific research (e.g. to analyse platform activity and community effectiveness), aggregated metrics may be evaluated. These include purely statistical overviews based on the profile fields provided (organisation type, role, region) as well as activity metrics (e.g. number of posts or interactions). All reports, indicator data and scientific publications are produced exclusively in anonymised form as aggregated totals, so that identification of individual persons is excluded.
The processing of personal data is based on your consent pursuant to Art. 6(1)(a) GDPR.
Furthermore, data are processed for the provision and use of the platform, the administration of user accounts, and to ensure the security, stability and administration of the platform (Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR).
Further processing, in particular in the event that your data are forwarded, is carried out exclusively to fulfil legal obligations pursuant to Art. 6(1)(c) GDPR.
3. Cookies and Embedded Third-Party Content
The platform uses only technically necessary cookies. These are required in particular for login, the management of user sessions and the functionality of the platform. The platform does not use analytics, advertising or marketing cookies.
The platform may contain content from external providers, such as videos. The content is embedded using a two-click solution, meaning that a connection to the servers of the respective third-party provider is only established after you have actively given your consent. In this process, personal data, in particular the IP address and technical information, may be transmitted to the respective provider. The respective provider's privacy policy applies to the processing of personal data by that third-party provider.
4. Retention Period and Deletion
Personal data are generally stored only for as long as necessary for the respective processing purpose or as required by statutory retention obligations. Data required for the provision and use of the platform are generally stored for the duration of the existing user account.
5. Your Rights
Under the General Data Protection Regulation, you have, in particular, the following rights:
- Right of access to the processing of your personal data (Art. 15 GDPR)
- Right to rectification of inaccurate personal data (Art. 16 GDPR)
- Right to erasure of personal data (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to the processing of your personal data (Art. 21 GDPR)
In addition, pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority:
State Commissioner for Data Protection and Freedom of Information
Monika Grethel
Fritz-Dobisch-Str. 12
66111 Saarbrücken
Germany
Telephone: (0681) 94781-0
Fax: (0681) 94781-29
Email: poststelle@datenschutz.saarland.de
