General remarks
The website mediencmampus.h-da.de serves as the public face of the Media Campus at Darmstadt University of Applied Sciences, disseminates information and supports the university’s activities. The website has its own distinctive, consistent design.

Responsibility and Accountability
No guarantee is given regarding the operation of the website or the accuracy and up-to-date nature of the information. The faculty of Media at Darmstadt University of Applied Sciences is responsible for the operation of the server. Editorial responsibility lies with a team of students and staff. The faculty office bears overall responsibility for content and, in cases of doubt, decides on the admissibility of the data.

Handling of Data
Darmstadt University of Applied Sciences takes the protection of personal data very seriously. We process personal data collected when you visit our websites in accordance with the applicable data protection regulations. In particular, the EU General Data Protection Regulation (GDPR), the Hessian Data Protection and Freedom of Information Act (HDSIG) and the Telemedia Act (TMG) apply.

Below, we provide information on the nature, scope and purposes of the collection and use of personal data.

We will neither publish your data nor pass it on to third parties without authorisation.

1. Data collection and processing when accessing our website
When you visit our websites, our web servers automatically record each visit in a log file.

This data is stored separately from any other data you enter whilst using our website. We are unable to link this data to a specific person. This data is used solely to monitor and ensure the reliable technical operation of the web server. This data is deleted after a retention period of 7 days.
The following data is collected:

• IP address (anonymised)
• Date and time of access
• Name and URL of the file accessed
• Amount of data transferred
• Web server access status (file transferred, file not found, command not executed, etc.)

Logins when accessing restricted areas are partially logged in order to detect attempts at misuse and password attacks. No data is stored that could be used to create personalised profiles based on user behaviour.
The legal basis for the processing is Article 6(1)(b) of the GDPR.

2. Use and disclosure of personal data
In general, it is not necessary for you to provide personal data in order to use our website. However, in order for us to actually provide some of our services (e.g. registration for an event), we may require your personal data.

Any use of your personal data is limited to the stated purposes and to the extent necessary to achieve those purposes. None of this data will be disclosed to third parties without the user’s prior consent.

The data provided is stored in a database accessible only to administrators.

Personal data will only be disclosed to public authorities where required by mandatory national legislation.
The legal basis for the processing is Article 6(1)(b) and (c) of the GDPR.

3. Cookies
The Mediencampus website uses cookies. Cookies are text files that are placed and stored on a computer system via a web browser.

Numerous websites and servers use cookies. Many cookies contain what is known as a cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters that enables websites and servers to be associated with the specific web browser in which the cookie was stored. This enables the websites and servers visited to distinguish the data subject’s individual browser from other web browsers that contain different cookies. A specific web browser can be recognised and identified via the unique cookie ID.

By using cookies, ewa can provide users of this website with more user-friendly services that would not be possible without setting cookies.

Cookies enable us to optimise the information and opportunities on our website to suit the user’s needs. As already mentioned, cookies allow us to recognise users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, a user of a website that uses cookies does not have to re-enter their login details every time they visit the website, as this is handled by the website and the cookie stored on the user’s computer system. Another example is the shopping basket cookie in an online shop. The online shop uses a cookie to remember the items a customer has placed in their virtual shopping basket.

The data subject may prevent our website from setting cookies at any time by adjusting the settings of their web browser accordingly, thereby permanently objecting to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via a web browser or other software programmes. This is possible in all common web browsers. If the people using the web browser disable the setting of cookies, it may not be possible to use all the functions of our website to their full extent.

4. Data protection provisions regarding the use of YouTube
The data controller has integrated YouTube components into this website. YouTube is an online video portal that enables video publishers to upload video clips free of charge and allows other users to view, rate and comment on them, also free of charge. YouTube permits the publication of all types of videos, which is why complete films and television programmes, as well as music videos, trailers and user-generated videos, are available via the website.
YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time a user accesses one of the individual pages of this website, which is operated by the data controller and on which a YouTube component (YouTube video) has been integrated, the web browser on the data subject’s IT system is automatically prompted by the respective YouTube component to download a display of the corresponding YouTube component from YouTube. Further information on YouTube can be found at www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google are informed of which specific subpage of our website is being visited by the data subject.
If the data subject is logged into YouTube at the same time, YouTube recognises which specific subpage of our website the data subject is visiting when a subpage containing a YouTube video is accessed. This information is collected by YouTube and Google and associated with the data subject’s respective YouTube account.
YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is logged into YouTube at the same time as accessing our website; this occurs regardless of whether the data subject clicks on a YouTube video or not. If the people concerned do not wish this information to be transmitted to YouTube and Google, they can prevent such transmission by logging out of their YouTube account before accessing our website.
The privacy policy published by YouTube, which is available at www.google.de/intl/de/policies/privacy/, provides information on the collection, processing and use of personal data by YouTube and Google.
You can specify in your browser settings whether cookies may be set or not.

The legal basis for the processing is Article 6(1)(b) of the GDPR.

5. Privacy Policy on the Use of Facebook
The data controller has integrated components from Facebook into this website. Facebook is a social network.
A social network is a social meeting place operated on the internet, an online community that generally enables users to communicate with one another and interact in a virtual space. A social network can serve as a platform for exchanging opinions and experiences, or enable the online community to share personal or business-related information. Among other things, Facebook allows users of the social network to create private profiles, upload photos and connect with others via friend requests.
Facebook is operated by Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. Where a data subject resides outside the USA or Canada, the data controller responsible for the processing of personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Each time a user accesses one of the individual pages of this website – which is operated by the data controller and on which a Facebook component (Facebook plug-in) has been integrated, the web browser on the data subject’s IT system is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins can be found at developers.facebook.com/docs/plugins/. As part of this technical process, Facebook becomes aware of which specific subpage of our website is being visited by the data subject.
Provided the data subject is logged into Facebook at the same time, Facebook recognises, each time the data subject accesses our website and throughout the entire duration of their visit to our website, which specific subpage of our website the data subject is visiting. This information is collected by the Facebook component and linked by Facebook to the respective Facebook account of the people concerned. If the data subject clicks on one of the Facebook buttons integrated into our website – for example, the ‘Like’ button – or posts a comment, Facebook associates this information with the data subject’s personal Facebook user account and stores this personal data.
Facebook always receives information via the Facebook component that the person has visited our website if the person is logged into Facebook at the same time as accessing our website; this occurs regardless of whether the person clicks on the Facebook component or not. If the people concerned do not wish such information to be transmitted to Facebook, they can prevent this by logging out of their Facebook account before visiting our website.
Facebook’s privacy policy, which is available at de-de.facebook.com/about/privacy/, provides information on the collection, processing and use of personal data by Facebook. It also explains the settings options Facebook offers to protect the data subject’s privacy. In addition, various applications are available that make it possible to prevent data being transmitted to Facebook. People may use such applications to prevent data being transmitted to Facebook.

6. Privacy Policy on the Use of Vimeo
The data controller has integrated components from Vimeo into this website. Vimeo is an online video portal that enables video publishers to upload video clips free of charge and allows other users to view, rate and comment on them, also free of charge. Vimeo permits the publication of all types of videos, which is why complete films and television programmes, as well as music videos, trailers and user-generated videos, are available via the internet portal. Vimeo is operated by Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA.

Each time a user accesses one of the individual pages of this website, which is operated by the data controller and on which a Vimeo component (Vimeo video) has been integrated, the web browser on the data subject’s IT system is automatically prompted by the respective Vimeo component to download a representation of the relevant Vimeo component from Vimeo. Further information on Vimeo can be found at https://vimeo.com/de/about. As part of this technical process, Vimeo becomes aware of which specific subpage of our website is being visited by the data subject. If the data subject is logged into Vimeo at the same time, Vimeo recognises which specific subpage of our website the data subject is visiting when a subpage containing a Vimeo video is accessed. This information is collected by Vimeo and assigned to the data subject’s respective Vimeo account.

Vimeo always receives information via the Vimeo component that the data subject has visited our website if the data subject is logged into Vimeo at the same time as accessing our website; this occurs regardless of whether the data subject clicks on a Vimeo video or not. If the people concerned do not wish this information to be transmitted to Vimeo, they can prevent such transmission by logging out of their Vimeo account before accessing our website. Vimeo’s privacy policy, available at https://vimeo.com/privacy, provides information on the collection, processing and use of personal data by Vimeo.

7. Voiceflow

On our website, we use an AI-powered chatbot from Voiceflow, a service provided by Voiceflow Inc., to offer you an interactive way to get in touch and receive support. Voiceflow is operated by Voiceflow, Inc., 1055 Bay Street Suite 2012, Toronto, ON, Canada, M5S 3A3. The chatbot is designed to answer frequently asked questions and provide general information. Use of the chatbot is voluntary. Voiceflow’s applicable privacy policy is available at www.voiceflow.com/privacy.

When using the chatbot, the following data may be processed:

• User input: All text entered by you in the chat box, including questions, enquiries or other messages.
• Technical data: This includes your IP address, browser information, operating system, and the time and duration of use.
• Other data: Where applicable, location data or other voluntary information that you provide in the chat.

The data is used exclusively to respond to your enquiries and to improve the chatbot service. The processing of your data is based on Article 6(1)(b) of the GDPR (performance of a contract or pre-contractual measures) and Article 6(1)(f) of the GDPR (legitimate interest). Our legitimate interest lies in providing a user-friendly and efficient online service.

Voiceflow Inc. may have access to the processed data in the context of providing and improving the chatbot service. Voiceflow Inc. is a provider based in Canada. Canada is recognised by an adequacy decision of the European Commission as a country with an adequate level of data protection. Any transfer of data takes place exclusively in accordance with the legal requirements set out in Article 44 et seq. of the GDPR.

The data transmitted via the chatbot is stored only for as long as is necessary to process your enquiry. Anonymised data may be used to improve the chatbot system.

You have the right to request information about the processing of your personal data, to have incorrect data rectified, and to request the erasure of your data, provided there are no statutory retention obligations. Further information on your rights can be found in the general sections of this privacy policy.

8. Security
Our technical and organisational security measures, which we use to protect all data from unauthorised access, are always kept up to date with the latest technical standards. Personal information is always transmitted in encrypted form.

9. Links to third-party websites
Our websites may contain links to websites operated by third parties. Please note that this privacy policy applies exclusively to the websites of Darmstadt University of Applied Sciences’ main portal. We have no influence over, and do not monitor, whether other providers comply with the applicable data protection regulations.

10. Right of access, rectification, restriction of processing or erasure of data
Users of our websites have the right to access the personal data stored about them, as well as the right to have inaccurate data rectified, to restrict processing, to have data erased, to object to processing and to data portability.
The Data Protection Officer at Darmstadt University of Applied Sciences can be contacted at datenschutz@h-da.de.
Please note that you have the right to lodge a complaint with a supervisory authority.
The competent supervisory authority is:
The Hessian Data Protection Commissioner
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Telephone: 0611 1408-0
Email: poststelle@datenschutz-hessen.de
Website: www.datenschutz.hessen.de

11. Validity and up-to-date status of the privacy policy
By using our website, you consent to the use of your data as described above. This privacy policy is effective immediately and supersedes all previous versions.