Deutsch Intern
  • 50-jähriges Jubiläum des Rechenzentrums
Information Technology Centre

Privacy Policy

Non-binding informative English version

 

Basic information

Controller

Julius-Maximilians-University Würzburg
(Statutory body under public law)

Its president represents the university.

Sanderring 2, 97070 Würzburg

Phone: +49(0)931-31-0
Fax: +49(0)931-31-82600

Contact details of the data protection officer

Data Protection Officer of the Julius-Maximilians-University Würzburg
Sanderring 2
97070 Würzburg
Phone: +49(0)931-31-0
E-Mail: datenschutz@uni-wuerzburg.de

General

With regard to the processing of your personal data, you, as a data subject, have the following rights under Art. 15 e.g. GDPR to:

  • You can request information  about whether we process personal data from you. If this is the case, you have the right to information about these personal data as well as to other information related to the processing (Art. 15 GDPR). Please note that in certain cases this right of access may be limited or excluded (see in particular Art. 10 BayDSG).
  • In the event that personal data about you is no longer (no longer) accurate or incomplete, you may request a correction  and, if necessary,  completion of such data (Art. 16 GDPR).
  • If the legal requirements are met, you can request the deletion of your personal data (Art. 17 GDPR) or the restriction of the processing of this data (Art. 18 GDPR). However, the right to erasure under Art. 17 sec. 1 and 2 GDPR does not exist, among other things, if the processing of personal data is necessary for the performance of a task. This is in the public interest or is in the exercise of official authority (Art. 17 sec. 3(3) (b GDPR).
  • If you have consented to the processing or if there is a contract for data processing and the data processing is carried out by means of automated procedures, you may have the right to data portability  (Art. 20 GDPR).
  • If there is an international transfer of personal data without the basis of an adequacy decision of the EU Commission, you have the right to obtain a copy of the contractual guarantees upon request to us.
  • You have the right to complain to a supervisory authority within the meaning of Article 51 GDPR about the processing of your personal data. The Bavarian State Commissioner for Data Protection, Wagmüllerstraße 18, 80538 Munich, is responsible for the supervisory authority for Bavarian public authorities. In addition to the right of complain, you may also seek for a judicial remedy.

Withdrawal of consent

Insofar as the processing is carried out on the basis of consent, you have the right to withdraw your consent at any time. The revocation only works for the future; that is, the revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Right to object (article 21 GDPR)

For reasons arising from your particular situation, you can also object to the processing of personal data concerning you by us at any time (Art. 21 GDPR). If the legal requirements are met, we will no longer process your personal data.

The obligation to archive with its precedence over the deletion remains  unaffected in the context of limits for the deletion of data.

Service Information

Categories of personal data

eLabFTW enables digital management of research data in an electronic web-based lab book. To use the service, the storage and processing of the following personal data is required:

  • Master data, including accounts information: name, e-mail address, membership in eLabFTW teams
  • Traffic data: log data and cookies
  • Project data and documentation

Name and e-mail adress of the user are transferred to eLabFTW upon login via Shibboleth.

Users can enter additional information to their profile, e.g. their ORCID-iD, if they wish to do so.

eLabFTW at the Universität Würzburg only uses necessary Cookies (session cookies), e.g. for navigation on the web site.

Purposes and legal bases of the processing

Personal data is processed for the purpose of handling the login as well as further user account management.

  • The legal basis for processing the master data and the traffic data is point e of Article 6(1) GDPR in conjunction with Article 2, Article 6(2) and Article 10(2) BayDSG.
  • The legal basis for processing the research data is Article 85(2) GDPR in conjunction with Article 25 BayDSG.
  • Support is provided within the scope of the permissible extension of purpose in accordance with Article 6(1) BayDSG. The legal basis for quality management is point e of Article 6(1) GDPR in conjunction with Article 4 BayDSG (Article 7 BayHO, Article 10 BayHSchG).

Storage of personal data

This instance of eLabFTW is operated by the IT Centre of the University of Würzburg. The collected personal data is stored inside the MySQL data base, which is connected to this instance of eLabFTW and which is only accessible by the system administrator.

Recipients

Recipients of personal data may be research partners of the University of Würzburg involved in specific projects. The transfer of this data is under the scientific resposibility of the project members.

The IT Centre does not disclose any personal data to third parties.

Marketing

No personal data is disclosed to third parties for the purpose of marketing.

International flow of personal data

International data transfer is not currently planned.

Limits for the deletion of the different categories of data

  • Project data, communication and documentation will be stored as appropriate until no longer required. It is the sole responsibility of the team admins to assess the necessity of ongoing storage of the data.
  • User accounts are as well stored as appropriate until no longer required.
  • Log data is deleted after three months unless it is anonymized.
  • The session cookies are deleted after the browser session is ended.