Data protection information (according to Art. 13 GDPR)
DALIA search engine for open educational resources (OER) on data literacy

1. Name and address of the person responsible
   The controller according to the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is the:
   Rector of RWTH Aachen University
   Templergraben 55
   52062 Aachen (home address)
   52056 Aachen (postal address)
   Telephone: +49 241 80 1
   Fax: +49 241 80 92312
   E-mail: rektorat@rwth-aachen.de
   Website: www.rwth-aachen.de/rektorat
   
   For the implementation of the DALIA search engine for Open Educational Resources on Data Literacy:
   RWTH Aachen University
   Institute of Inorganic Chemistry
   Chair of Bioinorganic Chemistry
   Head of the institution Prof. Dr. Sonja Herres-Pawlis
   Landoltweg 1a
   52074 Aachen
   Germany
   Phone: +49 241 80 93903
   E-mail: contact@dalia.education
2. Name and address of the data protection officer
   Contact details of the officially appointed data protection officer:
   Data Protection Office of RWTH Aachen University:
   Templergraben 83
   52062 Aachen (home address)
   52056 Aachen (postal address)
   Germany
   Phone: +49 241 80 94114
   E-Mail: dsb@rwth-aachen.de
3. General information on data processing
   RWTH Aachen University processes the personal data of users of the website only insofar as this is necessary to provide a functional service as well as the content and services or for the purpose of the application. The processing of users' personal data is carried out to fulfill the tasks of RWTH Aachen University or with the consent of the users.
   

   1. Subject matter and purpose of the processing of personal data
      The website of the DALIA search engine for open educational resources on data literacy serves to enable users to effectively search for teaching and learning materials on the topic of data literacy.
   2. Recipient of the data
      The DALIA search engine is currently hosted on Open Telekom Cloud servers. The usual traffic data (see point 4 a)) is processed by the web host Open Telekom Cloud for the purpose of security and stored if necessary. The recipient of the data is therefore Telekom Deutschland GmbH, with which an order processing agreement pursuant to Art. 28 para. 3 GDPR exists.
   3. Legal basis for the processing of personal data
      The search for teaching and learning materials using the DALIA search engine is a voluntary offer. By using the search engine, users consent to the processing of the aforementioned traffic data (see point 4 a)) in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.
   4. Duration of storage and deletion of data
      Search queries or data processed in the search engine are stored in the server's working memory for the duration of processing (HTTP query) and deleted immediately after the query. The HTTP request is completed at the latest when you leave the website.
4. Provision of the website
   1. Subject matter and purpose of the processing of personal data
      Each time you visit this website (see point 3), an exchange of information between your end device, for example your computer, tablet or cell phone, and servers that make the website available for retrieval is technically necessary in order to establish communication between your end device and this website. In order to respond to a request to the website, this technical traffic data must be processed by the servers. In detail, the following data is collected:

      • Date and time of access
      • IP address of the user
      • Request details and destination address
      • Name of the retrieved file
      • Volume of data transferred
      • Message as to whether the access / retrieval was successful
      • Information about the browser type and version used
      • Information about the user's operating system
      • Websites from which the user's system accesses the DALIA search engine website
      • Information about the websites and files accessed
   2. Legal basis for the processing of personal data
      The temporary storage of data for technical communication takes place based on Art. 6 para. 1 sentence 1 lit. e), para. 3 GDPR in conjunction with § Section 3 (1) DSG NRW in conjunction with. § SECTION 3 HG NRW.
   3. Duration of storage and deletion of data
      The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected (HTTP request). This is the case at the latest when you leave the website (completion of the HTTP request). Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the web host (Telekom Deutschland GmbH) is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
5. Use of cookies
   1. Subject matter and purpose of the processing of personal data
      We do not use cookies that store personal data and do not use any tracking methods. We only use technically required cookies for the operation of the website. The purpose of using technically necessary cookies is to ensure the functionality of the website. The following data is stored and transmitted:

      1. Setting for visibility of notification pop-up via prototype status Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When users access a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
   2. Legal basis for the processing of personal data
      The legal basis for the processing of personal data using cookies is Art. 6 para. 1 sentence 1 lit. e), para. 3 GDPR in conjunction with § Section 3 (1) DSG NRW in conjunction with. § SECTION 3 HG NRW.
   3. Duration of storage and deletion of data
      The cookies are automatically deleted by the user's browser after a specified period of time.

      1. Cookie for setting the visibility of notification popup via prototype status is deleted after 365 days.
6. Rights of the data subject

   If personal data of the data subject is processed, he/she has the following rights vis-à-vis the controller:

   Pursuant to Article 15 et seq. GDPR, the data subject has the right of access to the personal data concerned and the right torectification or erasure or restriction of processing, the right to object to processing and the right to data portability. In accordance with Article 77 GDPR, he/she also has the right to lodge a complaint with the competent data protection supervisory authority (https://www.ldi.nrw.de/kontakt) if the data subject is of the opinion that the processing of personal data concerning him/her violates this regulation. If the processing is based on the consent of the data subject (see Art. 6 para. 1 sentence 1 lit. a), Art. 9 para. 2 lit. a) GDPR), he/she also has the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal; this only takes effect for the future.

   To exercise the aforementioned rights, the data subject should send an e-mail to contact@dalia.education.