Privacy

Data controller

Represented by: Prof. Dr. Manfred Rössle, contactable at the postal address above.

For privacy enquiries or to exercise your rights, please use the email address above.

Website and hosting

We host this website on Cloudflare Workers Static Assets (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit the website, your IP address, the requested URL, the time of access and browser data are processed. This serves our legitimate interest in providing the website and keeping it secure (Article 6(1)(f) GDPR). Cloudflare acts partly on our behalf and partly for its own security purposes.

Data may be processed outside the European Economic Area (EEA). Cloudflare’s published data processing agreement provides for the EU–US Data Privacy Framework for covered transfers to the US and EU Standard Contractual Clauses for other restricted transfers. Privacy policy · Agreement and transfer safeguards

Under its agreement, Cloudflare retains data processed on our behalf until the contract ends or the data is no longer needed to fulfil the contract, whichever comes first, subject to statutory retention requirements. For its own purposes, Cloudflare determines retention according to the relevant purpose and legal requirements.

We do not use our own analytics or advertising trackers. Depending on the security features enabled, Cloudflare may set cookies to identify automated traffic and record completed security checks. Further information is available in Cloudflare’s cookie documentation. Information about registration and the optional Luma embed is provided below.

Your browser stores settings and reading positions locally for language selection and navigation; this information is not sent to us. Your language choice remains stored until you change it or clear the website’s data. Your reading position is stored briefly when switching languages and also in the relevant browser history entry so it can be restored when you reload or navigate back and forward. The legal bases are Section 25(2)(2) of the German TDDDG and, where personal data is processed, Article 6(1)(f) GDPR (our interest in providing these features).

Contact by email

The association Freunde der Wirtschaftsinformatik Aalen e.V. handles your email enquiries and processes your name, email address and message for this purpose. We use Aalen University’s email system for these communications. Access is available to the people handling your enquiry on behalf of the association and those responsible for operating the university’s email system. Further information about the university’s system is provided in Aalen University’s privacy notice (in German).

For enquiries about participation or a contract, the legal basis is Article 6(1)(b) GDPR. For other enquiries, it is our legitimate interest in responding (Article 6(1)(f) GDPR). Contacting us is voluntary; without a contact address, we cannot reply.

We delete the data once the correspondence has concluded, unless retention obligations or the establishment, exercise or defence of legal claims require us to keep it longer.

Map and directions

The venue map uses OpenStreetMap data and is served as a static image with this website. Displaying it does not cause our website to connect to OpenStreetMap or Google Maps. Our website does not request your location.

“Get directions” opens Google Maps as an external service. The link includes the venue as the destination, but no starting point determined by us. When you open it, Google processes information including your IP address and browser data under its own privacy policy. Our directions link does not transmit a referrer URL.

Registration via Luma

Event registration is handled through Luma (Luma Labs, Inc., USA). The only registration details we ask you to provide are your name and email address. Our organising team uses these details to manage your registration and send information about your participation. The legal basis is Article 6(1)(b) GDPR. You cannot register through Luma without providing these details.

A Luma form offered on our website loads only when you select “Agree and load Luma”. Only then does Luma receive your IP address and browser data. The legal basis is your consent under Article 6(1)(a) GDPR and, where device access requires consent, Section 25(1) of the German TDDDG. Selecting “Withdraw consent” removes the form; your consent is not stored permanently. This does not delete data already transmitted or cookies already set. Withdrawal does not cancel your registration. If you choose the direct registration link instead, you visit Luma’s external website.

Luma provides the technical platform for registration. It also processes data independently for its own platform features. According to its own information, Luma uses cookies and may use analytics services such as Google Analytics. Further details are provided in Luma’s privacy policy.

According to Luma, data is hosted in the US. Luma identifies Standard Contractual Clauses as a safeguard for international data transfers. Further information is available in its data processing agreement and information about transfer safeguards.

Where we process registration data to organise the event, we delete it after the event and its follow-up activities have concluded, once it is no longer needed to address outstanding enquiries or matters. Statutory retention requirements and retention necessary for the establishment, exercise or defence of legal claims remain unaffected.

Photos from past events

Our event recaps document previous events with photographs. We publish photographs of identifiable people on the basis of their consent (Article 6(1)(a) GDPR). These images are publicly accessible worldwide. The photographs remain in our publicly accessible archive as a permanent record of the events, with no fixed end date, for as long as consent remains in place. You may withdraw your consent at any time with effect for the future by using the contact address above and identifying the photograph concerned. We will then remove it from our website.

Your rights

Subject to the conditions set out in law, you have the right to access, rectification, erasure, restriction of processing and data portability.

Right to object: Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation.

Withdrawal of consent: You may withdraw your consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal. Contact: wi.sekretariat@hs-aalen.de.

You may lodge a complaint with a data protection supervisory authority, such as the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.