Privacy Policy AINCRA Online Tool

1. Responsible Body

The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (EU-GDPR) is:

Universität Bremen
Bibliothekstraße 1
28359 Bremen
Deutschland
Email: prokip@uni-bremen.de

2. Data Protection Officer

The data protection officer for the controllers is:

Universität Bremen
Referat 06
Katja Losch-Kremer
Bibliothekstraße 1–3
28359 Bremen
Deutschland
Email: datenschutz@uni-bremen.de

3. Type and Scope of Data Processing

The following data is processed when using the online application:

All data entered by users is stored on servers at the University of Bremen.
The email address is collected as potential personal data if it is provided when sharing data.
Other personal data is only processed if it is actively entered by the user.

The data is accessible to employees assigned to the project and the application administration.

The provision of personal data is voluntary.

4. Purposes of Processing

The data is processed for the following purposes:

Scientific evaluation and further development of the instrument
Provision and operation of the online application
Administration and technical maintenance

For scientific purposes, only data sets that have been explicitly released (shared) for use are accessed.

5. Legal Basis for Processing

Processing is carried out in accordance with Art. 6(1) EU-GDPR on the following basis:

Art. 6(1)(a) EU-GDPR (consent), provided that consent has been obtained
Art. 6(1)(e) EU-GDPR (public interest), where applicable
Art. 6(1)(f) EU-GDPR (legitimate interest) with regard to technical provision and IT security

6. Storage and Deletion

The data is stored exclusively on servers belonging to the University of Bremen.

The data is stored indefinitely, unless the data subject requests deletion and there are no legal reasons preventing deletion.

Data can be deleted at any time by:

Contacting us by email at: prokip@uni-bremen.de
Providing the shared link or
Providing the project title, insofar as this constitutes a unique identifier, or
Providing the email address, if it was submitted.

In the event of a request for deletion, the data will be deleted immediately, provided that there are no legal retention obligations that prevent this. These shared data sets may be used by the University of Bremen. They may also be used by other project partners of the University of Bremen within the scope of research projects, provided that a corresponding consortium or cooperation agreement and/or a joint responsibility agreement pursuant to Art. 26 EU-GDPR regulates joint responsibility for this scientific use.

7. Disclosure of Data

Data will not be disclosed to third parties unless:

this is required by law, or
the data subject has explicitly consented to this.

8. Rights of Data Subjects

Data subjects have the following rights under the EU-GDPR:

Right of access (Art. 15 EU-GDPR)
Right to rectification (Art. 16 EU-GDPR)
Right to erasure (Art. 17 EU-GDPR)
Right to restriction of processing (Art. 18 EU-GDPR)
Right to data portability (Art. 20 EU-GDPR)
Right to object (Art. 21 EU-GDPR)
Right to withdraw consent (Art. 7(3) EU-GDPR)

In addition, there is a right to lodge a complaint with the responsible data protection supervisory authority. The State Commissioner for Data Protection and Freedom of Information of the Free Hanseatic City of Bremen is responsible for the state of Bremen.

9. Data Security

Appropriate technical and organisational measures are taken in accordance with Art. 32 EU-GDPR to protect data against loss, manipulation and unauthorised access.