Privacy Policy

This privacy policy contains information about the processing of your personal data when visiting our website.

I. Personal Data

When you use the applicant portal to apply for a course of study at KIT, we collect personal data in accordance with general regulations and special regulations applicable to universities in the state Baden-Württemberg. According to Art. 4, No. 1 of the EU General Data Protection Regulation (GDPR), personal data is “any information relating to an identified or identifiable natural person”.

II. Controller

The controller of data processing within the meaning of the GDPR and other data protection legislation:

Karlsruhe Institute of Technology (KIT)
Kaiserstraße 12
76131 Karlsruhe
Germany
Phone: +49 721 608-0
Fax: +49 721 608-44290
E-mail: info@kit.edu

Karlsruhe Institute of Technology (KIT) is a corporation governed by public law. It is represented by the President, Prof. Dr.-Ing. Holger Hanselka.

Our Data Protection Officer can be contacted at datenschutzbeauftragter∂kit.edu or by ordinary mail with “Die Datenschutzbeauftragte” (the data protection officer) being indicated on the envelope.

III. Data processing

When you access the portal through your web browser, we collect personal data that your browser transmits to our server according to the settings you have made. These are stored in so-called server log files. We collect the following data which are necessary for the presentation of the pages and to ensure stability and security:

• IP address
• Date and time of access
• Time zone difference to Greenwich Mean Time (GMT)
• Type of request (specific site)
• Access status / HTTP status code
• Data volume transmitted
• Website from which an accessing system reaches our website
• Browser

The IP address is anonymized before it is stored in the server log files. The data cannot be attributed to a specific person. It is not merged with other data sources. We reserve the right to retrospectively check this data if we become aware of concrete indications of illegal use.

1. Cookies

In addition to the data mentioned above, cookies are stored on your personal computer when using our website. Cookies are small text files stored in your computer system by the browser used by you, through which we (the server of our website) obtain certain information. Cookies cannot execute any programs or transmit viruses to your computer. They serve to make internet offers more user-friendly, more effective, and quicker. It is distinguished between session cookies (transient cookies) and permanent (persistent) cookies.

Transient cookies are deleted automatically when you close the browser. They include in particular the session cookies. These store a so-called session ID, through which queries of your browser can be allocated to the joint session. They allow us to identify your computer when you return to our website. Session cookies are deleted when you log out or close the browser.

We use session cookies exclusively. We do not use any persistent cookies or flash cookies.

You can set your browser such that you will be informed about the setting of cookies and you can permit cookies in individual cases only, exclude the acceptance of cookies in certain cases or in general, and activate automatic deletion of cookies when closing your browser. When deactivating cookies, functionality of this website may be limited.

2. Encryption

The website uses state-of-the-art TLS encryption for security reasons and to protect the transmission of confidential content.

3. Analytics

We use the open source software tool Matomo on our website to analyze the surfing behavior of visitors to our website. The software sets a cookie on your computer. We store the following data:

• Two bytes of the IP address of the requesting system of the user
• The visited website
• The website from which the user directed to the accessed website (referrer)
• The subpages that are visited
• The time spent on the website
• The frequency of visiting

The software runs exclusively on the servers of our website. Your personal data is only stored there. The data will not be passed on to third parties.

The software is set up in such a way that the IP addresses are not stored completely, but 2 bytes of the IP address are masked (e.g.: 192.168.xxx.xxx). In this way it is no longer possible to assign the shortened IP address to the calling computer.

We process the data to analyze the surfing behavior of our website visitors. Through this analysis we are able to constantly improve our website and its user-friendliness. The data is deleted as soon as it is no longer required for our recording purposes. The data is automatically deleted after six months at the latest. The legal basis for the processing is Art. 6, par. 1, (f) GDPR.

4. Inquiries

When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions. We delete the data collected in this context after the storage is no longer necessary or restrict the processing if there are legal storage obligations.

5. Registration

The registration process for participation in an event is only available in the German language. Please consult the German version of the privacy policy for further information or contact us directly.

6. Recipients

In the case of your website visit, the recipient of your data is the web host Pixel X e.K. (Kuhstraße 26-27, 38100 Braunschweig), as far as the hosting is performed by this service provider.

Your inquiries will be processed by the project participants KIT-ITAS, KIT-INE as well as by supporting administrative departments.

IV. Legal basis

The legal basis for the processing of personal data in connection with the website visit is Art. 6, par. 1 (e), par. 3 (b) GDPR in conjunction with Section 4 Landesdatenschutzgesetz Baden-Württemberg (State data protection act of the state Baden-Württemberg).

V. Rights

You have the following rights regarding your personal data:

• The Right to withdraw your consent with effect for the future if the processing is based on consent pursuant to Art. 6, par. 1, (a) GDPR (Art. 7, par. 3 GDPR)
• the right to obtain confirmation as to whether data concerning you is being processed and information on the data processed, further information on data processing, and copies of data (Art. 15 GDPR)
• the right to rectify or complete inaccurate or incomplete data (Art. 16 GDPR)
• the right to erasure of data concerning you without undue delay (Art. 17 GDPR)
• the right to restriction of processing (Art. 18 GDPR)
• the right to object to the future processing of the data concerning you which is based on Art. 6, par. 1, point (e) or (f) GDPR (Art. 21 GDPR)

You also have the right to lodge a complaint with a supervisory authority about the processing of the personal data concerning you by Karlsruhe Institute of Technology (KIT) (Art. 77 GDPR). Supervisory authority of KIT in the sense of Art. 51, par. 1 GDPR is according to Art. 25, par. 1 LDSG:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg)