OSL Demo — Data Protection Information

When you use this website, we process your personal data as data controllers and save them for the duration required to fulfill the defined purposes and legal obligations. The sections below provide further details about the data this involves, how they will be processed and which rights you have in this regard.

Personal data, as defined by Article 4 (1) General Data Protection Regulation (GDPR) include all information related to an identified or identifiable natural person.

Scope of Application

This data protection information applies to data processing on all of our project websites of our project OSL Demo, as well as to all associated project service offers in the form of web utilities or mobile apps (hereinafter “Website” to facilitate readability), in each case whenever reference is made to this data protection information.

Name and Contact Information of Controller and Corporate Data Protection Office

Controller within the meaning of Art. 4 (7) GDPR:

Data Info Knowledge Dr. Simon Stier

Postfach 5128 97001 Würzburg

Personal Data Processing and Purposes of Data Processing

When visiting the website

You may access our website without having to disclose any details of your identity. The browser installed on your terminal device automatically transmits information to the server of our website (e.g. browser type and version, date and time of access) to enable connection with the website, including the IP address of your requesting terminal device. This information is temporarily stored in a so-called log file and deleted after no more than four (4) weeks.

The IP address is save anonymously by removing the last block of characters.

We cannot draw any direct conclusions about your identity from processing the IP address and other information in the log file.

Moreover, we use cookies when you visit our website. Further details can be found further below in this data protection information.

When subscribing to updates or other email list

Once you have given your explicit consent pursuant to Art. 6 (1) lit. a GDPR, we will use your email address to regularly send you information about activities on the platform OSL Demo'. The subjects and contents of the information are determined by the topics you subscribed to.

To receive our newsletter, we ask you to provide us with the following mandatory data:

• Email address
• Title
• First name
• Last name

We need your name and title to address you personally in our newsletter.

Once you have subscribed, you will receive a registration notification by email, which you need to confirm to receive the newsletter (so-called double opt-in). Your email response serves as confirmation that you are in fact the person who issued the subscription.

You may unsubscribe at any time, via your user settings.

When creating a user account

You can create a password-protected user account on our website.

Setting up the user account requires the following information:

• Title
• First and last name
• Valid email address

These data are processed in order to identify you as a user and create your user account.

To set up the user account, you must also enter a password you choose yourself. To access your user account, you will need to enter your email address and this password. In your user account, you can view the data saved in your user profile and change it at any time.

In addition, you may voluntarily provide the following information:

• phone or mobile number
• name of research organisation or company
• address
• passport photo of yours
• CV
• professional discipline / expertise

This information is voluntary and is not required to set up the user account. The information serves The information provided serves us to find suitable contacts for you as a user. At no time will the data be made publicly accessible or otherwise misused.

We process data at your request and for the purposes described by Article 6 (1) lit. b GDPR for the setup and usage of your user account and to meet the precontractual conditions. We will also use your email address for notification functions, if these are activated.

After your user account is deleted, your data will be deleted to prevent further use except if we are required pursuant to Article 6 (1) lit. c GDPR to observe a longer storage period due to retention and documentation obligations pursuant to tax and commercial law (in particular Se. 147 AO or if you have consented to longer storage pursuant to Article 6 (1) lit. a GDPR.

When creating a user account via OAuth-Provider

• ORCID: We will store public information from your profile (orcid-id, full name). More information here

When you make a contribution

You can contribute to our side by editing an existing page, creating a new one or join a discussion board.

When you do so, we store the following information

• Username
• Date & Time
• Content of your contribution

If the corresponding page is classified as public, this information is also public visible.

Cookies

This website uses cookies. Cookies are small files that your browser automatically generates and stores on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not harm your device nor do they contain viruses, Trojans or other malware.

Cookies store information associated with the specific device used. That does not mean that we can directly identify you.

We use cookies for the purpose of making the use of our offers more convenient and pleasant for you. For example, we use so-called session cookies to allow session controls or to save data entries in forms or shopping carts during the session. At the latest, session cookies are deleted when you close your browser.

We also use temporary cookies to optimize user-friendliness; these cookies are stored on your device for four (4) weeks. When you visit our site again to use our services, these cookies will automatically detect that you have visited in the past and will reapply your previous entries and settings so that you do not have to enter them again.

The data processed by the cookies are necessary for the above-mentioned purposes to protect our legitimate interests and those of third parties pursuant to Art. 6 (1) lit. f GDPR.

Most browsers automatically accept cookies. However, you can configure your browser to not save any cookies on your computer or to display a notice before new cookies are saved. Completely disabling cookies may mean that you cannot fully use all functions of our website.

Rights of the Data Subject

You have the following rights:

• pursuant to Art. 7 (3) GDPR, to withdraw your consent at any time. This means that we may not continue the data processing based on this consent in the future;
• pursuant to Art. 15 GDPR, to obtain access to your personal data processed by us. In particular, you may request information about the purposes of the processing, the categories of personal data concerned, the categories of recipients to whom the personal data have been or will be disclosed, and the envisaged period for which the data will be stored. Moreover, you have the right to request rectification, erasure, or restriction of processing, to object to processing, the right to lodge a complaint, and to obtain information about the source of your data if they were not collected by us, as well as about the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the logic involved;
• pursuant to Art. 16 GDPR, to obtain the rectification of inaccurate data or the completion of your personal data without undue delay;
• pursuant to Art. 17 GDPR, to obtain the erasure of personal data saved by us unless processing is necessary to exercise the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to establish, exercise or defend legal claims;
• pursuant to Art. 18 GDPR, to obtain restriction of processing of your personal data if you contest the accuracy of the data, the processing is unlawful but you oppose the erasure of the personal data, or if we no longer need the personal data while you still require it for establishing, exercising or defending legal claims, or if you have filed an objection to the processing pursuant to Art. 21 GDPR;
• pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us, in a structured, commonly used and machine-readable format or to transmit those data to another controller and
• pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. Generally, you may contact the supervisory authority of your habitual residence, place of work or the registered offices of our organization.

Information on your right to object pursuant to Art. 21 GDP

You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data pursuant to Art. 6 (1) lit. e GDPR (data processing carried out in the public interest) and Art. 6 (1) lit. f GDPR (data processing for purposes of legitimate interests).

If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defense of legal claims.

If your objection is directed against the processing of data for the purpose of direct marketing, we will stop the processing immediately. In this case, citing a special situation is not necessary. This includes profiling to the extent that it is related to such direct marketing.

If you would like to assert your right to object, please write to the contact address.

Data Security

All your personal data are transmitted in encrypted format, using the widely used and secure TLS (Transport Layer Security) standard. TLS is a secure and proven standard that is also used, for instance, in online banking. You will recognize a secure TLS connection by the additional s after http (i.e., https://..) in the address bar of your browser or by the lock icon in the lower part of your browser.

In all other regards, we use suitable technical and organizational security measures to protect your data against accidental or intentional manipulations, partial or complete loss, destruction, or the unauthorized access of third parties. We continuously improve our security measures in accordance with the state of the art.

Timeliness and Amendments to this Data Protection Information

The further development of our website and the products and services offered or changed due to statutory or regulatory requirements, respectively, may make it necessary to amend this data protection information. You may access and print out the latest data protection information at any time from our website.