1. Privacy at a Glance
General Notices
The following notices provide a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to our privacy policy text below this section.
Data Collection on Our Website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find their contact details in the legal notice (Impressum) of this website.
How do we collect your data?
Your data is collected in part by you providing it to us. This may include data such as information you enter into a contact form.
Other data is collected automatically by our IT systems when you visit the website. This primarily includes technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter our website.
What do we use your data for?
Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right to receive free information about the origin, recipients, and purpose of your stored personal data at any time. You also have the right to request the correction, restriction, or deletion of this data. To do so and for further questions about data protection, you can contact us at any time using the address provided in the legal notice. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
2. General Notices and Mandatory Information
Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection laws and this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this is done.
We would like to point out that data transmission over the internet (e.g., communication via email) may have security gaps. Complete protection of data against access by third parties is not possible.
Note on the Responsible Party
The responsible party for data processing on this website is:
Verfasste Studierendenschaft am Karlsruher Institut für Technologie (KIT)
AStA am KIT
Adenauerring 7
76131 Karlsruhe
Phone: +49 (0) 721 18123800
Email: vorsitz@asta-kit.de
The responsible party is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your express consent. You can revoke any consent you have already given at any time. To do so, simply send us an informal email. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Complaint Right with the Competent Supervisory Authority
In the event of violations of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the State Data Protection Officer of the federal state in which our company is headquartered. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to Data Portability
You have the right to receive the data that we process automatically based on your consent or in fulfillment of a contract, either yourself or a third party in a commonly used, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent that it is technically feasible.
SSL or TLS Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser bar.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Information, Restriction, Deletion
Within the framework of the applicable legal provisions, you have the right to obtain free information about your stored personal data, its origin, recipients, and the purpose of data processing, as well as the right to correct, restrict, or delete this data at any time. To do so and for further questions about personal data, you can contact us at any time using the address provided in the legal notice.
Objection to Advertising Emails
We hereby object to the use of contact information published within the legal notice obligation to send unsolicited advertising and informational materials. The operators of the website expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.
3. Data Collection on Our Website
Cookies
The internet pages use what are known as cookies in part. Cookies do not cause any damage to your computer and do not contain viruses. Cookies are used to make our offer more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g., shopping cart function) are stored based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. If other cookies (e.g., cookies for analyzing your surfing behavior) are stored, they are treated separately in this privacy policy.
Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources.
The legal basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.
Registration on This Website
You can register on our website to use additional features on the site. The data entered for this purpose will only be used for the purpose of using the specific offer or service for which you registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.
For important changes to the scope of the offer or for technically necessary changes, we use the email address provided during registration to inform you in this way.
The processing of the data entered during registration is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke any consent you have given at any time. To do so, simply send us an informal email. The legality of the data processing that has already taken place remains unaffected by the revocation.
The data collected during registration will be stored by us as long as you are registered on our website and will then be deleted. Statutory retention periods remain unaffected.
Processing of Data (Customer and Contract Data)
We collect, process, and use personal data only insofar as it is necessary for the establishment, content, or modification of the legal relationship (inventory data). This is based on Art. 6 para. 1 lit. b GDPR, which permits the processing of data to fulfill a contract or pre-contractual measures. Personal data about the use of our website (usage data) is collected, processed, and used by us only insofar as this is necessary to enable the user to use the service or to bill for it.
The collected customer data will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.
Data Transfer in Connection with Contract Fulfillment for Online Shops, Dealers, and Goods Dispatch
We only transmit personal data to third parties if this is necessary in the context of contract processing, for example, to the companies entrusted with the delivery of the goods or the financial institution commissioned with payment processing. Further transmission of data does not take place or only if you have expressly consented to the transfer. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.
The legal basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data to fulfill a contract or pre-contractual measures.
Data Transfer in Connection with Contract Fulfillment for Services and Digital Content
We only transmit personal data to third parties if this is necessary in the context of contract processing, for example, to the financial institution commissioned with payment processing.
Further transmission of data does not take place or only if you have expressly consented to the transfer. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.
The legal basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data to fulfill a contract or pre-contractual measures.