DALIA Portal
German

Privacy Notice (pursuant to Art. 13 GDPR)

DALIA Search Engine for Open Educational Resources on Data Literacy


Preamble

DALIA is a web-based platform for indexing and describing learning resources on the topics of data literacy and research data management using metadata. The service is provided by RWTH Aachen University and is designed to enable students, teachers, and researchers to collect, analyze, critically evaluate, and use data in a FAIR manner.


1. Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states, as well as other data protection provisions, is:

Rector of RWTH Aachen University Templergraben 55 52062 Aachen (street address) 52056 Aachen (postal address) Phone: +49 241 80 1 Fax: +49 241 80 92312 Email: rektorat@rwth-aachen.de Website: www.rwth-aachen.de/rektorat

For the implementation of the DALIA Search Engine for Open Educational Resources on Data Literacy:

RWTH Aachen University Institute of Inorganic Chemistry Chair of Bioinorganic Chemistry Head of Department: Prof. Dr. Sonja Herres-Pawlis Landoltweg 1a 52074 Aachen Germany Phone: +49 241 80 93903 Email: contact@dalia.education


2. Name and Address of the Data Protection Officer

Contact details of the officially appointed Data Protection Officer:

Data Protection Office of RWTH Aachen University: Templergraben 83 52062 Aachen (street address) 52056 Aachen (postal address) Germany Phone: +49 241 80 94114 Email: dsb@rwth-aachen.de


3. General Information on Data Processing

RWTH Aachen University processes personal data of users of this site only to the extent necessary for the provision of a functioning service and its contents and services, or for the purpose of the application. The processing of users' personal data is carried out in fulfillment of RWTH's statutory tasks or based on the users' consent.

3.1 Subject Matter and Purpose of the Processing of Personal Data

The website of the DALIA Search Engine for Open Educational Resources on Data Literacy is designed to enable users to effectively search for teaching and learning materials on the topic of data literacy.

3.2 Recipients of the Data

The DALIA Search Engine is currently hosted on servers of IONOS Cloud GmbH, with whom a data processing agreement has been concluded in accordance with Art. 28(3) GDPR.

3.3 Legal Basis for the Processing of Personal Data

The search for teaching and learning materials using the DALIA Search Engine is a voluntary service. The processing of data during use of the search engine is carried out on the basis of Art. 6(1)(1)(a) GDPR.

3.4 Data Erasure and Storage Period

Search queries and data processed within the search engine are stored in the server's working memory for the duration of processing (HTTP request) and are deleted immediately after the request is completed. The HTTP request is concluded no later than upon leaving the website.


4. Provision of the Website

4.1 Subject Matter and Purpose of the Processing of Personal Data

Each time this website is accessed (cf. Section 3), a technical exchange of information between the user's end device — such as a computer, tablet, or mobile phone — and the servers providing the website is required in order to establish communication between the user's device and this website. In order to respond to a request to the website, these technical traffic data must be processed by the servers. The following data are collected in particular:

  • Date and time of access
  • IP address of the user
  • Request details and destination address
  • Name of the file retrieved
  • Volume of data transmitted
  • Notification of whether the access/retrieval was successful
  • Information about the browser type and version used
  • Information about the user's operating system
  • Websites from which the user's system accessed the DALIA Search Engine website
  • Information about the websites and files accessed

4.2 Recipients of the Data

The DALIA Search Engine is currently hosted on servers of IONOS Cloud GmbH, with whom a data processing agreement has been concluded in accordance with Art. 28(3) GDPR.

4.3 Legal Basis for the Processing of Personal Data

The temporary storage of data for technical communication is carried out on the basis of Art. 6(1)(1)(e), (3) GDPR in conjunction with § 3(1) DSG NRW in conjunction with § 3 HG NRW.

4.4 Data Erasure and Storage Period

The data are deleted as soon as they are no longer required for the purpose for which they were collected (HTTP request). This is the case no later than upon leaving the website (completion of the HTTP request). Storage beyond this point may occur if provided for by European or national legislators in EU regulations, laws, or other provisions to which the web host (IONOS Cloud GmbH) is subject. Data will also be blocked or deleted when a storage period prescribed by the aforementioned provisions expires, unless there is a necessity for further storage of the data for the conclusion or performance of a contract.


5. Use of Cookies and Local Storage

5.1 Subject Matter and Purpose of the Processing of Personal Data

DALIA uses cookies and local storage. These are data stored by the web browser on the user's computer system.

Cookies: Only technically necessary cookies are used for the operation of the website. The purpose of using technically necessary cookies is to ensure the functionality of the website and the login process.

Local Storage: Adjustments to accessibility settings (font size, cursor size, character spacing, and line spacing) made by users are stored in the web browser's local storage. The data are stored and processed locally on the user's device only.

5.2 Legal Basis for the Processing of Personal Data

The legal basis for the processing of personal data using cookies is Art. 6(1)(1)(e), (3) GDPR in conjunction with § 3(1) DSG NRW in conjunction with § 3 HG NRW.

5.3 Data Erasure and Storage Period

Cookies are automatically deleted by the user's browser after 365 days.


6. Personalized User Profile

6.1 Subject Matter and Purpose of the Processing of Personal Data

The website additionally offers the option to create a personalized user profile. This profile can be used to submit new materials to DALIA, to rate and curate existing materials, and to receive and save personalized recommendations for suitable materials.

Login: Authentication is required to control access to DALIA. Upon logging in, authentication is carried out via the identity federation for educational institutions DFN-AAI. This allows users (including those from other countries) to log in to the system using their institutional login credentials (single sign-on).

User Profile: A user profile is created on the basis of the information transmitted by the authentication service, which users may extend with additional information. In addition to mandatory master data and current session and log data, the following data are stored:

  • Resources added to DALIA by users
  • Reviews created
  • Membership in communities joined in DALIA

Furthermore, upon optional and revocable consent, the following data may each be stored:

  • Personal details for the user's own profile (research discipline, comment, application, etc.)
  • Target audience and learning preferences
  • Competency level in the area of data literacy
  • Social media contact information
  • Browsing history of viewed learning materials

Usage Data: Usage data are generated through users' activity within the system. With the explicit consent of users, DALIA stores and processes additional data for the purposes of administration, further development and maintenance of the system, technical monitoring, the preparation of statistics, troubleshooting technical issues, or the investigation of security incidents. The following data are processed:

  • Session history (including search terms and resources clicked)
  • Anonymized IP address
  • History of recommendations displayed and selected

6.2 Recipients of the Data

The DFN-AAI service is used for authentication at login (cf. Section 6.1). For this purpose, a data processing agreement in accordance with Art. 28(3) GDPR has been concluded with the operator of DFN-AAI, the Verein zur Förderung eines Deutschen Forschungsnetzes e.V.

6.3 Legal Basis for the Processing of Personal Data

The creation and use of a personalized user profile is a voluntary service. By making use of this service, users consent to the processing of the aforementioned data (cf. Section 6.1) in accordance with Art. 6(1)(1)(a) GDPR.

6.4 Data Erasure and Storage Period

The data are deleted as soon as they are no longer required for the purpose for which they were collected, unless an individual storage period is specified below. If a request for deletion of a user profile is submitted or consent to data processing is withdrawn, the data will be deleted without undue delay, provided there are no other legally permissible grounds for storage. If such grounds exist, deletion will take place once those grounds have ceased to apply.

Login: The data required for authentication are deleted upon logout, at the end of the DALIA session, after 12 hours of inactivity, or upon termination of the browser session.

User Profile: User profile data are retained in DALIA until the associated profile is deleted. From the system side, profile data are deleted when the last login was more than two years ago. Users may request the deletion of an existing profile via their user profile.

Usage Data: Usage data are deleted on a monthly basis, following the preparation of monthly statistics.


7. Rights of the Data Subject

Where personal data of a data subject are processed, that person has the following rights with respect to the controller.

Pursuant to Articles 15 et seq. GDPR, the data subject has the right, under the conditions defined therein, to access the personal data concerning them, as well as the right to rectification, erasure, or restriction of processing, a right to object to processing, and the right to data portability. Furthermore, pursuant to Article 77 GDPR, the data subject has the right to lodge a complaint with the competent data protection supervisory authority (https://www.ldi.nrw.de/kontakt) if they are of the opinion that the processing of their personal data infringes this Regulation. Where processing is based on the data subject's consent (cf. Art. 6(1)(1)(a), Art. 9(2)(a) GDPR), the data subject also has the right to withdraw their consent at any time, without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal; the withdrawal takes effect only prospectively.

To exercise the aforementioned rights, the data subject should send an email to contact@dalia.education.

Data
Literacy
Alliance
Sign up to our newsletterThe DALIA newsletter informs you about upcoming events and milestones.
Follow