Privacy Policy

Data protection is an important concern for the Technical University of Munich. We want you to know when we store which data and how we use it. Personal data is collected on this central university web server (www.tum.de). Data processing is subject to the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), the Bavarian Data Protection Act (BayDSG) and the Telemedia Act (TMG).

Below we inform you about the type, scope and purpose of the collection and use of personal data. This information can be accessed at any time on our website.

A. General information

Name and contact details of the person responsible

Technical University of Munich
represented by the President Prof Dr Thomas F. Hofmann
Postal address: Arcisstr. 21, 80333 Munich
Telephone: +49 89 289-01
Fax: +49 89 289-22000
poststelle@tum.de

Contact details of the data protection officer

The Data Protection Officer of the Technical University of Munich
Postal address: Arcisstr. 21, 80333 Munich
Telephone: +49 89 289-17052
Email: beauftragter@datenschutz.tum.de

Purposes and legal bases for the processing of personal data

The purpose of the processing is to fulfil the public tasks assigned to us by law, in particular to inform the public.
Unless otherwise stated in this privacy policy, the legal basis for the processing of your data results from Art. 4 para. 1 of the Bavarian Data Protection Act (BayDSG) in conjunction with Art. 6 para. 1 subpara. 1 letter e) of the General Data Protection Regulation (GDPR). Accordingly, we are permitted to process the data required to fulfil a task incumbent upon us.

Recipients of personal data

When operating our website, various data recipients receive access to personal data.

Our web server is operated by the Leibniz Supercomputing Centre of the Bavarian Academy of Sciences and Humanities (LRZ). The personal data transmitted by you when you visit our website is therefore processed by the LRZ on our behalf:

Leibniz Supercomputing Centre (LRZ) of the Bavarian Academy of Sciences and Humanities
Boltzmannstraße 1
D-85748 Garching near Munich
Phone: +49 89 35831 8000
Fax: +49 89 35831 9700
Email: lrzpost@lrz.de
https://www.lrz.de

If necessary, your data will be transmitted to the responsible supervisory and auditing authorities to exercise the respective control rights.

To prevent threats to information technology security, data may be forwarded to the State Office for Information Technology Security in the event of electronic transmission and processed there on the basis of Art. 12 ff. of the Bavarian E-Government Act.

Further data recipients can be found in section "B. Information on the website" of this privacy policy.

Duration of the storage of personal data

Your data will only be stored for as long as is necessary for the fulfilment of tasks, taking into account statutory retention periods.

Your rights

If we process your personal data, you have the following rights as a data subject:

• You have the right to information about the personal data stored about you (Art. 15 GDPR).
• If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR).
• If the legal requirements are met, you can request the erasure or restriction of processing (Art. 17 and 18 GDPR).
• If you have consented to the processing or a contract for data processing exists and the data processing is carried out using automated procedures, you may have a right to data portability (Art. 20 GDPR).
• If you have consented to the processing and the processing is based on this consent, you can revoke your consent at any time for the future. This does not affect the lawfulness of the data processing carried out on the basis of the consent until revocation. You have the right to object to the processing of your data at any time for reasons arising from your particular situation if the processing is carried out exclusively on the basis of Art. 6 para. 1 letter e) or f) GDPR (Art. 21 para. 1 sentence 1 GDPR).

Right to lodge a complaint with the supervisory authority

You also have the right to lodge a complaint with a supervisory authority. The Bavarian State Commissioner for Data Protection is responsible for the Technical University of Munich. You can reach them using the following contact details:
Address: Wagmüllerstraße 18, 80538 Munich
Telephone: +49 89 212672-0
Fax: +49 89 212672-50
Email: poststelle@datenschutz-bayern.de
https://www.datenschutz-bayern.de/

Further information

For more information on the processing of your data and your rights, you can contact us using the contact details given above (at the beginning of A.).

I. Log files

When you access this or other websites, you transmit data to our web server via your internet browser. The following data is temporarily recorded in a log file during an ongoing connection for communication between your Internet browser and our web server:

• IP address of the requesting computer
• Date and time of access
• Name, URL and transferred data volume of the retrieved file
• Access status (requested file transferred, not found, etc.)
• Recognition data of the browser and operating system used (if transmitted by the requesting web browser)

The data in this log file is processed as follows

• The log entries are continuously and automatically analysed in order to detect attacks on the web servers and react accordingly.
• In individual cases, i.e. reported malfunctions, errors and security incidents, a manual analysis is carried out.
• Log entries that are older than seven days are anonymised by shortening the IP address.
• The anonymised logs are used to generate access statistics. The software used for this is operated locally by the LRZ.

The IP addresses contained in the log entries are not merged by the LRZ with other databases, so that the LRZ cannot draw any conclusions about individual persons.

II. Cookies and external services

Cookies and similar technologies

Cookies are small text files that are stored on your computer or mobile device when you visit our website. We receive various information when cookies are set.

In addition to cookies, some services use so-called "local storage entries". A local storage entry is functionally comparable to cookies, the difference being that local storage stores information in your browser's cache. Where services on our website use local storage, we expressly point this out in this privacy policy. In addition, some services also use so-called "tracking pixels".

Essential cookies

Certain cookies are technically necessary for the proper operation of our website and the proper display of content in order to be able to show you our website at all. Without these cookies, our website cannot be offered.

Cookies and similar technologies for statistics and external content

Cookies and similar technologies from external services are used to extend and optimise the functionality of our website and to make it more convenient for you to use. You do not have to accept the cookies and similar technologies used for this purpose, but you will not be able to use the extended functions. You can also make cookie settings in your browser. However, this may limit the functionality of our website. The same applies to local storage entries, which you can delete from your browser cache.

I. Online Formular

Personal data that you may send to us via contact forms, registration forms and similar websites on our web servers will only be accepted with your consent and will only be used for the purpose stated in the forms. Please note the corresponding information on the forms.

In all forms, only the personal data that is absolutely necessary is collected. Any additional information you provide is voluntary. Personal data is usually stored in a database at the Leibniz Supercomputing Centre and is accessible to the relevant TUM employees. If the purpose of the data collection is to make the data accessible to other members of TUM, the principle of data minimisation will be observed. Your data will not be passed on to third parties unless this is explicitly stated in the form.

Your personal data will be deleted after fulfilment of the purpose, unless you have given your consent to further contact.

The legal basis is Art. 6 (1) (a) GDPR. You can revoke your consent at any time for the future. This does not affect the lawfulness of the data processing carried out on the basis of the consent until the revocation. To do so, please contact it-support@tum.de. Your data will then be deleted immediately.