Privacy Policy

Information pursuant to Art. 13 GDPR

Purpose of the Website

This website serves as the information and service platform for the Institute for English and American Studies at RWTH Aachen University. It provides information about the institute, its staff, research activities, and teaching offerings. Additionally, it offers various online services for students and staff members, including office hour booking, colloquium registration, and the KOALAB booking system.

1. Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Rector of RWTH Aachen University
Templergraben 55
52062 Aachen (street address)
52056 Aachen (mailing address)

Phone: +49 241 80-1
Fax: +49 241 80-92312
Email: rektorat@rwth-aachen.de
Website: www.rwth-aachen.de/rektorat

For the implementation of this website:

RWTH Aachen University
Institute for English and American Studies
Head of Institute: Prof. Dr. Stella Neumann
Kármánstraße 17/19
52062 Aachen

Phone: +49 241 80 96112
Email: sekretariat.intemann@ifaar.rwth-aachen.de

2. Name and Address of the Data Protection Officer

Contact details of the officially appointed data protection officer:

Data Protection Office of RWTH Aachen University
Templergraben 83
52062 Aachen (street address)
52056 Aachen (mailing address)
Germany

Phone: +49 241 80 94114
Email: dsb@rwth-aachen.de

3. General Information on Data Processing

a) Subject and Purpose of Processing Personal Data

This website serves the public relations of RWTH Aachen University and, in particular, the Institute for English and American Studies. The following services and functionalities are provided:

  • Office Hours Booking System: Students can book appointments with staff members. We process names, email addresses, and matriculation numbers.
  • Colloquium Registration: Staff members register colloquium presentations. We process names, email addresses, topic information, and supervisor details, as well as matriculation numbers.
  • KOALAB Booking System: Students can book study spaces. We process names, email addresses, and booking time preferences.
  • User Authentication: Staff and students log in using their RWTH Single Sign-On credentials. We process usernames, email addresses, and role information.
  • Public Information: Staff profiles, research information, and general institute information are published for informational purposes.

b) Recipients of the Data

In addition to the controller, the following recipients may have access to personal data:

  • Institute Staff: Authorized staff members of the Institute for English and American Studies have access to booking and registration data relevant to their duties.
  • Email Service: Email notifications are sent via the RWTH email infrastructure.

c) Legal Basis for Processing Personal Data

The processing of personal data occurs on the following legal bases:

  • Public Relations and Information: Art. 6 (1) sentence 1 lit. e), (3) GDPR in conjunction with § 3 (1) DSG NRW and §§ 3, 8 (6) HG NRW (public task)
  • User Authentication: Art. 6 (1) sentence 1 lit. e), (3) GDPR in conjunction with § 18 DSG NRW (employee data for login purposes)
  • Service Usage (Bookings, Registrations): Art. 6 (1) sentence 1 lit. e), (3) GDPR in conjunction with § 3 (1) HG NRW (fulfillment of university tasks)
  • Technical Operation and Security: Art. 6 (1) sentence 1 lit. e), (3) GDPR in conjunction with § 3 (1) DSG NRW and § 3 HG NRW, as well as Art. 32 (1) GDPR (security measures)

d) Data Deletion and Storage Duration

Personal data of the affected person will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may continue beyond this if provided for by European or national legislators in EU regulations, laws, or other provisions to which the controller is subject.

Specific storage periods:

  • Office Hour Bookings: Deleted 12 months after the appointment date
  • Colloquium Registrations: Archived after completion; personal data anonymized after 3 years
  • KOALAB Bookings: Deleted 6 months after the booking date
  • User Accounts: Deleted when the employment or study relationship ends, or upon request
  • Contact Inquiries: Deleted after 10 years following the last correspondence

4. Provision of the Website and Creation of Log Files

a) Subject and Purpose of Processing Personal Data

Each time this website is accessed, an exchange of information between your device (e.g., computer, tablet, or mobile phone) and the servers that provide the website for retrieval is technically necessary. With each access, data about this process is temporarily processed and stored in a log file. The following data is collected:

  • Date and time of access
  • IP address of the user
  • Request details and target address
  • Name of the retrieved file
  • Amount of data transferred
  • Notification of whether the access/retrieval was successful
  • Information about the browser type and version used
  • Information about the user's operating system
  • The user's Internet service provider
  • Websites from which the user's system reached the RWTH Aachen University website
  • Information about the websites and files accessed

The log data is processed to ensure proper operation of the website, i.e., to identify, narrow down, or eliminate disruptions or errors. Furthermore, the log data is processed for technical security, particularly for protection against and defense of cyber attacks.

b) Legal Basis for Processing Personal Data

The temporary storage of data for technical communication and log files is based on Art. 6 (1) sentence 1 lit. e), (3) GDPR in conjunction with § 3 (1) DSG NRW and § 3 HG NRW, as well as Art. 32 (1) GDPR.

c) Data Deletion and Storage Duration

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Normally, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of users are deleted or anonymized so that assignment to the accessing client is no longer possible.

5. Use of Cookies

a) Subject and Purpose of Processing Personal Data

This website uses cookies. Cookies are information managed by the Internet browser, usually in a database. When a user accesses a website, a cookie can be stored on the user's computer system. This cookie contains a characteristic string that enables unique identification of the browser when the website is accessed again.

The purpose of using technically necessary cookies is to ensure the functionality of this website. The following data is stored and transmitted:

  • Session ID for user authentication (login status)
  • CSRF token for security purposes
  • Language settings

We do not use tracking cookies or analytics tools. We only use technically necessary cookies required for the functionality of the website.

b) Legal Basis for Processing Personal Data

The legal basis for processing personal data using technically necessary cookies is Art. 6 (1) sentence 1 lit. e), (3) GDPR in conjunction with § 3 (1) DSG NRW and § 3 HG NRW.

c) Data Deletion and Storage Duration

Session cookies are automatically deleted when you close your browser. Persistent cookies have a maximum validity period corresponding to the duration of your login session, typically up to 14 days.

6. Contact

a) Subject and Purpose of Processing Personal Data

For contacting the Institute for English and American Studies at RWTH Aachen University, we offer you the option of using email addresses or postal mail. The processing of your personal data occurs exclusively for the purpose of handling your request, such as answering your question or fulfilling data subject rights. Storage serves further correspondence within the scope of the Institute's activities. When you contact us by email, the data you voluntarily provide will be stored so that we can respond to your request.

b) Legal Basis for Processing Personal Data

This processing serves the fulfillment of university tasks and is based on Art. 6 (1) sentence 1 lit. e), (3) GDPR in conjunction with § 3 (1) DSG NRW and § 3 (1) HG NRW.

c) Data Deletion and Storage Duration

The personal data we receive by email or based on your postal submission will be deleted as soon as storage is no longer necessary for the purpose you pursued or in connection with administrative processes triggered thereby and the applicable retention obligations. The retention period for an administrative process is ten years after processing the last entry. The retention period in connection with the exercise of data subject rights is 3 years.

7. Rights of the Data Subject

If personal data is processed, you have the following rights vis-à-vis the controller.

According to Articles 15 et seq. GDPR, you have, under the conditions defined therein, the right to information about the relevant personal data, as well as the right to rectification or erasure or restriction of processing, a right to object to processing, and the right to data portability.

You also have the right pursuant to Article 77 GDPR to lodge a complaint with the competent data protection supervisory authority (https://www.ldi.nrw.de/kontakt) if you believe that the processing of personal data concerning you violates this regulation.

If the processing is based on your consent (cf. Art. 6 (1) sentence 1 lit. a), Art. 9 (2) lit. a) GDPR), you also have the right to revoke your consent at any time, without affecting the lawfulness of processing carried out on the basis of the consent until the revocation; the revocation only takes effect for the future.

To exercise the aforementioned rights, please send an email to: anglistik-admins@ifaar.rwth-aachen.de

8. External Services

This website does not embed external services such as YouTube, Google Maps, or other third-party content that would transmit your data to external providers. All content is hosted on RWTH servers.