1. name and address of the controller
The controller within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is the

University of Münster,
represented by the Rector, Prof. Dr. Johannes Wessels,
Schlossplatz 2, 48149 Münster
Phone: + 49 251 83-0
E-mail: mailbox@uni-muenster.de

2. Name and address of the data protection officer
The data protection officer of the controller is
Nina Meyer-Pachur
Schlossplatz 2, 48149 Münster
Phone: + 49 251 83-22446
E-mail: datenschutz@uni-muenster.de

3. general information on data processing
We collect and use our users' personal data only insofar as this is necessary to provide a functional website and our content and services and if a legal basis allows us to do so.

Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis for the processing of personal data.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which the University of Münster is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

If the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the University of Münster, Art. 6 para. 1 lit. e GDPR serves as the legal basis for the processing.

If processing is necessary to safeguard a legitimate interest of the University of Münster or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing. This does not apply if the University of Münster is acting in an official capacity in the corresponding processing.

Duration of storage of personal data
The personal data of the data subject will only be stored by us for as long as the purpose of the storage exists. If the processing is based on the consent of the data subject, the data will only be stored until the data subject withdraws their consent, unless there is another legal basis for the processing.

Right to rectification and erasure of personal data
The data subject has the right to obtain from us without undue delay the rectification of inaccurate personal data concerning him or her. The data subject also has the right to obtain from us the erasure of personal data concerning him or her without undue delay as soon as the purpose of the storage no longer applies or, if the processing is based on the consent of the data subject, if the data subject withdraws his or her consent and there is no other legal basis for the processing.

The data subject's personal data will also be erased if the data subject objects to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, if the personal data has been processed unlawfully or if erasure is required to fulfill a legal obligation by European or national legislation in regulations to which the University of Münster is subject.

The personal data of the data subject will continue to be erased if the data subject objects to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, if the personal data have been unlawfully processed or if erasure is required to fulfill a legal obligation imposed by European or national legislators in regulations to which the University of Münster is subject.

However, personal data will not be erased in the cases described above if the processing of personal data is necessary for the University of Münster to fulfill a legal obligation imposed on it by the European or national legislator or if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the University of Münster or if the further storage of personal data is necessary for the establishment, exercise or defense of legal claims.

Right of revocation
If the processing of personal data is based on the consent of the data subject, the data subject may withdraw their consent at any time. The processing of personal data carried out until the revocation remains lawful despite the revocation.

Right to information
The data subject has the right to obtain from the University of Münster confirmation as to whether or not personal data concerning him or her are being processed. If this is the case, the data subject has a right to information about which personal data is involved and for what purposes it is processed. They also have a right to information about the duration of the planned storage of this data or which criteria are used to determine the storage period.

4. provision of the website and creation of log files

Scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

• Information about the browser type and version used
• The user's operating system
• The user's internet service provider
• The IP address of the user
• Date and time of access
• Websites from which the user's system accesses our website
• Websites that are accessed by the user's system via our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

Legal basis for the processing
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

Purpose of the processing
Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

The data is stored in log files to ensure the functionality of the website. We also use the data to optimize the website and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.

Duration of storage of personal data
The data is deleted when the respective session has ended.

If the data is stored in log files, it is deleted after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated so that it is no longer possible to assign the calling client.

5. Use of cookies

Scope of data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change. The following data is stored and transmitted in the cookies

• Log-in information
• Session settings

Legal basis for the processing
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR.

The legal basis for the processing of personal data using cookies for other purposes is Art. 6 para. 1 lit. a GDPR if the user has given their consent.

Purpose of the processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change. These purposes also constitute our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 lit. f GDPR.

Cookies are required for the following applications

• Single sign-on
• Binding login sessions to specific servers ("sticky sessions")

The user data collected by technically necessary cookies is not used to create user profiles.

Duration of storage of personal data
Cookies are stored on the user's computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

6. e-mail contact

Scope of data processing
It is possible to contact us on our website via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.

The data will not be passed on to third parties in this context. The data is used exclusively for the purpose of maintaining contact.

Legal basis for data processing
The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR.

Purpose of the data processing
The processing of personal data serves us solely to process the contact. This also constitutes the necessary legitimate interest in processing the data.

Duration of storage of personal data
The personal data sent by email will be deleted when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.