Introduction
The protection of personal data is a high priority for us. We want users to know when which data is processed by us, on what basis and for what purpose. We have also taken technical and organisational measures to ensure that we and our processor comply with data protection regulations.
Responsibility
The responsibility for the processing of personal data belongs to
Der Präsident der Helmut-Schmidt-Universität / Universität der Bundeswehr Hamburg
Holstenhofweg 85, 22043 Hamburg
Tel.: +49(40) 6541 2211
E-Mail: praesident@hsu-hh.de
Data Protection Officer
If you have specific questions about the protection of your personal data, please contact the data protection officer:
Beauftragte*r für den Datenschutz in der Bundeswehr
Bundesministerium der Verteidigung, Fontainengraben 150, 53123 Bonn
Tel. 01888 12 – 12 540 oder – 12 542
E-Mail: BfDBw@bmvg.bund.de
Your rights as a data subject
You can exercise the following rights at any time using the contact details provided for our data protection officer:
- Information about your data stored by us and its processing (Art. 15 DSGVO),
- Correction of incorrect personal data (Art. 16 DSGVO),
- Deletion of your data stored by us (Art. 17 DSGVO),
- Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 DSGVO),
- Objection to the processing of your data by us (Art. 21 DSGVO) and
- Data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 DSGVO).
If you have given us your consent, you can revoke it at any time with effect for the future.
You can lodge a complaint with the competent supervisory authority at any time (Art. 77 DSGVO). The supervisory authority is the Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI), Graurheindorfer Straße 153, 53117 Bonn.
E-Mail: poststelle@bfdi.bund.de
Collection of general information when visiting our website and the landing page of our learning management system (LMS; SMASCH-Labcademy)
Nature and purpose of processing
When you access our website or the landing page of our LMS (SMASCH-Labcademy), i.e. if you do not register or otherwise submit information, information of a general nature is automatically collected for a limited period of time. This information (server log files) includes, for example, the type of web browser and version, the operating system used, the domain name of your internet service provider, your IP address, the date, time and location of access and the access method.
They are processed in particular for the following purposes:
- Ensuring a smooth connection to the website,
- Ensuring the smooth use of our website,
- Evaluation of system security and stability and for other statistical purposes.
We do not use your data to draw conclusions about your person. Information of this kind may be statistically evaluated by us in order to optimise our website and the technology behind it. IP addresses are anonymised when stored in the log files and replaced by the IP address 127.0.0.1.
We only use so-called temporary cookies on our website as part of the needs-based provision of information (or to facilitate navigation). Cookies are small files that are automatically created by the user’s browser and stored on the end device when you visit our website. These session cookies do not contain any personal data and expire at the end of the session.s automatically created and stored on the end device when you visit our site. These session cookies do not contain any personal data and expire at the end of the session.
Legal Basis
On the basis of Artikel 6 Abs. 1 lit. e DSGVO in conjunction with § 5 f the Act on the Federal Office for Information Security, we are authorised to store data to protect against attacks on the Internet structure of the BMVg (Federal Ministry of Defence) and the communications technology of the Federal Government beyond the time of your visit. This data is used to initiate legal and criminal prosecution in the event of attacks on communications technology.
Recipient
The recipient of the data is https://www.manitu.de, on whose server the data for this website is stored. A corresponding data processing agreement has been concluded with the web host.
Manitu does not act as a technical service provider.
Storage duration
The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for the data used to provide the website and the landing page of the LMS when the respective session has ended.
Provision prescribed or required
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.
Access to our learning management system (SMASCH-Labcademy)
Nature and purpose of processing
A login is required to access the materials in the Moodle-based learning management system SMASCH-Labcademy. You can register and create a user account yourself. The following personal data is processed in connection with the provision and operation of the SMASCH-Labcademy:
- Connection data (IP address, browser and operating system information)
- Access data (surname, first name, user name, email, organisation)
- Content data (information voluntarily provided in the user profile; authorisations and roles; participation in interactive content)
The connection data is used in particular to ensure a smooth connection setup and smooth use of the LMS, to evaluate system security and stability and for other statistical purposes.
The access data is processed as part of the registration process at the SMASCH-Labcademy. Information about the processing of this data is provided during the initial registration process. The creation of a user account is voluntary and independent on the part of the user. User registration is required for the provision and use of Moodle content and functions. The Moodle content serves the purpose of research-practice transfer.
Content data includes all data that is entered or created in the system by users themselves. Participation in active content (e.g. forums, chats, wikis) is voluntary and serves teaching or educational purposes.
The persons entrusted with the technical administration of the Moodle platform (in the role of “manager” and “administrator”) have access to all personal data stored in the system. The data may only be processed to the extent that this is necessary to ensure the operation of Moodle and to safeguard the personal rights of the persons depicted in the materials.
Legal Basis
On the basis of your voluntarily created user account and your expressly given consent in the registration process (Art. 6 Abs. 1 lit. a DSGVO), an account will be created for you in the Moodle-based LMS, which contains the access and content data specified above.
You can revoke your consent to the storage of your personal data and its use for Moodle operations at any time with effect for the future. To do this, you can delete your Moodle account yourself or inform us of your revocation via info@smasch.eu.
Recipient
The recipient of the data is https://www.manitu.de, which is considered a processor for the operation of our LMS. A corresponding agreement on commissioned data processing has been concluded with the web host.
Manitu does not act as a technical service provider.
Storage duration
The data will only be processed in this context as long as the corresponding consent has been given. It will be deleted once consent has been withdrawn.
Provision prescribed or required
The provision of your personal data is voluntary, solely on the basis of your consent. Without your consent, you will unfortunately not be able to access the SMASCH-Labcademy services.
SSL-Encryption
To protect the security of your data during transmission, we use the state-of-the-art SSL encryption method via HTTPS.
Changes to our privacy policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
