DALIA Search Engine for Open Educational Resources on Data Literacy
DALIA is a web-based platform for indexing and describing learning resources on the topics of data literacy and research data management using metadata. The service is provided by RWTH Aachen University and is designed to enable students, teachers, and researchers to collect, analyze, critically evaluate, and use data in a FAIR manner.
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states, as well as other data protection provisions, is:
Rector of RWTH Aachen University Templergraben 55 52062 Aachen (street address) 52056 Aachen (postal address) Phone: +49 241 80 1 Fax: +49 241 80 92312 Email: rektorat@rwth-aachen.de Website: www.rwth-aachen.de/rektorat
For the implementation of the DALIA Search Engine for Open Educational Resources on Data Literacy:
RWTH Aachen University Institute of Inorganic Chemistry Chair of Bioinorganic Chemistry Head of Department: Prof. Dr. Sonja Herres-Pawlis Landoltweg 1a 52074 Aachen Germany Phone: +49 241 80 93903 Email: contact@dalia.education
Contact details of the officially appointed Data Protection Officer:
Data Protection Office of RWTH Aachen University: Templergraben 83 52062 Aachen (street address) 52056 Aachen (postal address) Germany Phone: +49 241 80 94114 Email: dsb@rwth-aachen.de
RWTH Aachen University processes personal data of users of this site only to the extent necessary for the provision of a functioning service and its contents and services, or for the purpose of the application. The processing of users' personal data is carried out in fulfillment of RWTH's statutory tasks or based on the users' consent.
The website of the DALIA Search Engine for Open Educational Resources on Data Literacy is designed to enable users to effectively search for teaching and learning materials on the topic of data literacy.
The DALIA Search Engine is currently hosted on servers of IONOS Cloud GmbH, with whom a data processing agreement has been concluded in accordance with Art. 28(3) GDPR.
The search for teaching and learning materials using the DALIA Search Engine is a voluntary service. The processing of data during use of the search engine is carried out on the basis of Art. 6(1)(1)(a) GDPR.
Search queries and data processed within the search engine are stored in the server's working memory for the duration of processing (HTTP request) and are deleted immediately after the request is completed. The HTTP request is concluded no later than upon leaving the website.
Each time this website is accessed (cf. Section 3), a technical exchange of information between the user's end device — such as a computer, tablet, or mobile phone — and the servers providing the website is required in order to establish communication between the user's device and this website. In order to respond to a request to the website, these technical traffic data must be processed by the servers. The following data are collected in particular:
The DALIA Search Engine is currently hosted on servers of IONOS Cloud GmbH, with whom a data processing agreement has been concluded in accordance with Art. 28(3) GDPR.
The temporary storage of data for technical communication is carried out on the basis of Art. 6(1)(1)(e), (3) GDPR in conjunction with § 3(1) DSG NRW in conjunction with § 3 HG NRW.
The data are deleted as soon as they are no longer required for the purpose for which they were collected (HTTP request). This is the case no later than upon leaving the website (completion of the HTTP request). Storage beyond this point may occur if provided for by European or national legislators in EU regulations, laws, or other provisions to which the web host (IONOS Cloud GmbH) is subject. Data will also be blocked or deleted when a storage period prescribed by the aforementioned provisions expires, unless there is a necessity for further storage of the data for the conclusion or performance of a contract.
DALIA uses cookies and local storage. These are data stored by the web browser on the user's computer system.
Cookies: Only technically necessary cookies are used for the operation of the website. The purpose of using technically necessary cookies is to ensure the functionality of the website and the login process.
Local Storage: Adjustments to accessibility settings (font size, cursor size, character spacing, and line spacing) made by users are stored in the web browser's local storage. The data are stored and processed locally on the user's device only.
The legal basis for the processing of personal data using cookies is Art. 6(1)(1)(e), (3) GDPR in conjunction with § 3(1) DSG NRW in conjunction with § 3 HG NRW.
Cookies are automatically deleted by the user's browser after 365 days.
The website additionally offers the option to create a personalized user profile. This profile can be used to submit new materials to DALIA, to rate and curate existing materials, and to receive and save personalized recommendations for suitable materials.
Login: Authentication is required to control access to DALIA. Upon logging in, authentication is carried out via the identity federation for educational institutions DFN-AAI. This allows users (including those from other countries) to log in to the system using their institutional login credentials (single sign-on).
User Profile: A user profile is created on the basis of the information transmitted by the authentication service, which users may extend with additional information. In addition to mandatory master data and current session and log data, the following data are stored:
Furthermore, upon optional and revocable consent, the following data may each be stored:
Usage Data: Usage data are generated through users' activity within the system. With the explicit consent of users, DALIA stores and processes additional data for the purposes of administration, further development and maintenance of the system, technical monitoring, the preparation of statistics, troubleshooting technical issues, or the investigation of security incidents. The following data are processed:
The DFN-AAI service is used for authentication at login (cf. Section 6.1). For this purpose, a data processing agreement in accordance with Art. 28(3) GDPR has been concluded with the operator of DFN-AAI, the Verein zur Förderung eines Deutschen Forschungsnetzes e.V.
The creation and use of a personalized user profile is a voluntary service. By making use of this service, users consent to the processing of the aforementioned data (cf. Section 6.1) in accordance with Art. 6(1)(1)(a) GDPR.
The data are deleted as soon as they are no longer required for the purpose for which they were collected, unless an individual storage period is specified below. If a request for deletion of a user profile is submitted or consent to data processing is withdrawn, the data will be deleted without undue delay, provided there are no other legally permissible grounds for storage. If such grounds exist, deletion will take place once those grounds have ceased to apply.
Login: The data required for authentication are deleted upon logout, at the end of the DALIA session, after 12 hours of inactivity, or upon termination of the browser session.
User Profile: User profile data are retained in DALIA until the associated profile is deleted. From the system side, profile data are deleted when the last login was more than two years ago. Users may request the deletion of an existing profile via their user profile.
Usage Data: Usage data are deleted on a monthly basis, following the preparation of monthly statistics.
Where personal data of a data subject are processed, that person has the following rights with respect to the controller.
Pursuant to Articles 15 et seq. GDPR, the data subject has the right, under the conditions defined therein, to access the personal data concerning them, as well as the right to rectification, erasure, or restriction of processing, a right to object to processing, and the right to data portability. Furthermore, pursuant to Article 77 GDPR, the data subject has the right to lodge a complaint with the competent data protection supervisory authority (https://www.ldi.nrw.de/kontakt) if they are of the opinion that the processing of their personal data infringes this Regulation. Where processing is based on the data subject's consent (cf. Art. 6(1)(1)(a), Art. 9(2)(a) GDPR), the data subject also has the right to withdraw their consent at any time, without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal; the withdrawal takes effect only prospectively.
To exercise the aforementioned rights, the data subject should send an email to contact@dalia.education.