Privacy Policy for “Control Advent Calendar” (CAC)
The operators of “Control Advent Calendar” (hereafter referred to as CAC) and the Technische Universität Berlin, Germany, are committed to the careful and secure handling of the personal data of CAC participants, website visitors, and third parties, in compliance with legal data protection regulations (GDPR). With this statement, we aim to inform you about the nature, scope, and purpose of processing your personal data. By agreeing to the CAC privacy policy, you consent to the CAC operators collecting, processing, and using your personal data for the operation, further development, and improvement of “Control Advent Calendar.” You can withdraw this consent at any time with effect for the future.
Responsible Party
The responsible party within the meaning of the General Data Protection Regulation (GDPR) is
Prof. Dr. Steffi Knorn
Fachgebiet Regelungstechnik (ER2-1)
Institut für Prozess- und Verfahrenstechnik
Fakultät 3
Technische Universität Berlin
Hardenbergstraße 36a
D-10623 Berlin
Germany
control.advent@gmail.com
“Control Advent Calendar” is operated at Technische Universität Berlin (TUB) with the website and databases hosted on the web servers of TUB. You can find the TUB’s privacy policy here:
https://www.tu.berlin/datenschutz
Contacts for General Data Protection Questions
Team Datenschutz
info@datenschutz.tu-berlin.de
+49 30 314-21784, -29595, -28973
1. Collection of HTTP Protocol Data
Each time a user accesses the CAC (Control Advent Calendar) online service, data about this process is stored and processed in a log file. Specifically, the following data is recorded for each access: anonymized IP address, date and time of access, browser type and version, operating system, URL, and the previously visited webpage. The temporary storage of the IP address by the system is necessary to allow the website to be delivered to the user’s device. For this purpose, the user’s IP address must be stored for the duration of the session. Storage in log files occurs to ensure the functionality of the website. Additionally, we use this data for statistical analysis and to improve the service for our participants, visitors, and other parties interested in CAC, as well as to ensure the security of our IT systems. No evaluation of the data for marketing purposes is conducted, nor is this data stored together with other personal data of the user. Before any storage beyond a single session, each dataset is anonymized by altering the IP address. Therefore, it is not possible to associate the collected data with any specific individual.
The legal basis for the temporary storage of data and log files is Article 6(1)(f) of the GDPR. Processing serves a legitimate interest of the CAC provider or a third party. This interest does not override the interests, fundamental rights, and freedoms of the affected person.
The data is deleted as soon as it is no longer necessary to fulfill the purpose for which it was collected. Long-term storage is possible if the users’ IP addresses are deleted or modified so that the calling client can no longer be identified.
Since the collection of data is essential for providing the website and the storage of data in log files is necessary for the operation of the online service, there is no option for the user to object to this collection and storage.
2. Cookies
Our website uses cookies. Cookies are small text files that are transferred from a website server to a user’s computer. This allows us to automatically receive certain information, such as IP address, browser type, operating system, and your internet connection details. Cookies cannot be used to run programs or transmit viruses to a computer. The information contained in cookies helps us facilitate navigation and ensure the proper display of our web pages. Under no circumstances will the data we collect be shared with third parties or linked with personal data.
Of course, you can view our website without cookies. Most internet browsers are initially set to accept cookies. In general, you can disable the use of cookies at any time through your browser settings. Please use your internet browser’s help function to learn how to change these settings. Note that certain functions of our website may not work if you have disabled the use of cookies.
3. Participation in the “Control Advent Calendar” (CAC)
From November 1 of each year, we offer CAC participants the option to register on our website by providing personal data. Only a valid email address is mandatory for registration. Other information is optional and is used solely for generating individual certificates after completing the advent calendar or for statistical analysis of the educational aspects of the CAC. Address information is required to allow participants to enter the prize draw and receive prizes by mail if they win. The data is entered into an input form, transmitted to us via an encrypted SSL connection, and stored in the CAC participant database. As part of the registration process, users consent to the processing of this data and are directed to this privacy policy.
If you win a prize, your email address may be shared with prize sponsors if necessary to arrange prize collection. These service providers are required by agreements to protect and later delete your personal data.
The legal basis for data processing, with user consent, is Article 6(1)(a) of the GDPR.
In general, data is deleted as soon as it is no longer necessary to fulfill the purpose for which it was collected. For data collected during the registration process or preparatory steps, this means once the data is no longer required for participation. Even after completion or termination of participation, it may be necessary to retain certain personal data to meet contractual or legal obligations.
All personal data from a given year’s CAC is deleted after January 31 of the following year. Individual certificates cannot be issued after this date.
As a CAC participant, you can delete your participant account at any time to end your participation.
You can also update your stored data at any time using the online change form or by submitting a written request.
4. Contact Forms and Email Contact
When you contact us via email or contact form, the information you provide will be stored for the purpose of processing your inquiry and for any follow-up questions. When using the contact form, your consent for the processing of data is obtained during the submission process, and you are directed to this privacy policy.
Alternatively, you can reach us through the provided email address. In this case, the personal data transmitted with the email will be stored. The data will be used solely for processing the conversation. Any other personal data processed during the submission process serves to prevent misuse of the contact form and to ensure the security of our IT systems.
The legal basis for processing the data is Article 6(1)(a) of the GDPR if user consent is provided. The legal basis for processing data transmitted via email is Article 6(1)(f) of the GDPR. If the email contact aims at concluding a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR.
The user has the option to withdraw their consent for the processing of personal data in writing at any time. If the user contacts us via email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. All personal data stored during the contact will be deleted in this case.
5. Distribution of Newsletters and Mailings
On our website, we offer CAC participants and interested parties the opportunity to register with personal data for receiving newsletters or mailings.
As part of your registration as a CAC participant, you have the option to receive the CAC newsletter as well as mailings about CAC activities. The email addresses provided by users to the CAC operator will be used for sending these communications. Your consent for processing the data is obtained during the registration process, and you are directed to this privacy policy.
At various points on the CAC website, users can sign up the CAC newsletter. The personal data submitted through these input forms will be stored and used solely for the purpose of sending these communications.
The collection of the user’s email address is necessary to deliver the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the email address used.
The legal basis for processing the data upon user registration for the newsletter is Article 6(1)(a) of the GDPR, provided that user consent is obtained.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. The user’s email address will be stored for as long as the newsletter subscription or participation in CAC remains active, unless contractual or legal obligations prevent deletion.
Newsletter subscriptions can be canceled at any time by the affected user in writing, via the online change form, or through a corresponding link in the newsletter.
6. Inclusion of External Links
This privacy policy applies only to the content of the CAC online services. On our website, we use links to external websites whose content is not hosted on our servers. The external content of these links was checked at the time the links were created. However, it cannot be ruled out that the content may have been changed by the respective providers afterward. If you notice that the content of external providers violates applicable law, please inform the contacts mentioned above.
7. Minors
The submission of personal data from minors requires the consent of a parent or legal guardian.
8. Data Security
We take precautions based on the current state of technology to protect your data from loss, destruction, alteration, manipulation, and unauthorized access. As far as your data is collected and processed by us, it is stored on specially protected servers of TUB. These servers are protected by technical and organizational measures against loss, destruction, access, alteration, or distribution of your data by unauthorized persons. Access to your data is limited to a small number of authorized individuals responsible for the technical, commercial, or editorial management of the servers. All our employees are obligated to maintain confidentiality.
9. Your Rights as Data Subjects
You can exercise the following rights at any time using the contact details of our Data Protection Officer:
- Information about your data stored with us and its processing
- Correction of inaccurate personal data
- Deletion of your data stored with us
- Restriction of data processing, if we are not yet permitted to delete your data due to legal obligations
- Objection to the processing of your data by us
- Data portability, provided you have consented to data processing or have entered into a contract with us.
If you have given us consent, you can revoke it at any time with effect for the future. You may also file a complaint with the supervisory authority responsible for you at any time. Your competent supervisory authority is determined by the state of your residence, your workplace, or the presumed infringement.
10. Changes to the Privacy Policy
The operator of the “Control Advent Calendar” (CAC) reserves the right to change this privacy policy. The current version of the privacy policy can always be found on the CAC website at www.control-advent.com.
Latest version: 1 November 2024