Privacy Policy
Controller
Technical University of Munich, legally represented by its President Prof. Dr. Thomas F. Hofmann
Arcisstraße 21, 80333 Munich, Germany
Phone: +49 89 289-01
Email: poststelle@tum.de
Data protection officer
Data Protection Officer of TUM
Arcisstraße 21, 80333 Munich, Germany
Phone: +49 89 289-17052
Email: beauftragter@datenschutz.tum.de
Purposes and legal bases of processing
Public search without login: The terminology is provided as part of TUM’s public task (Art. 6(1)(e) GDPR in conjunction with Art. 4 BayDSG). No user account is required for searching; no personal search profiles are created.
Strictly necessary session cookie: A technically necessary cookie is set to store the selected interface language and to protect against cross-site request forgery (Art. 6(1)(e)/(f) GDPR, Section 25(2) no. 2 TDDDG). No consent is required for this.
Server log data: When the application is accessed, technically necessary data (IP address, date/time, requested resource, HTTP status code, user agent) is processed to ensure operation and security (Art. 6(1)(e)/(f) GDPR). Retention period: [insert retention period, e.g. 7 days].
Backend login (staff/editors only): Login for terminology maintenance is performed via SAML/Shibboleth using the TUM account. The account identifier (eduPersonPrincipalName), name, email address and authorisation attributes (eduPersonEntitlement/affiliation) are processed for authentication and access control (Art. 6(1)(e) GDPR, Art. 4 BayDSG).
No external services, no tracking
No analytics, tracking or advertising services and no external font or CDN resources are integrated.
Recipients of the data
A processor (hosting) may be used for technical operation on the basis of a contract pursuant to Art. 28 GDPR: [insert processor/host]. The identity provider of TUM or the DFN-AAI is involved for login. No transfer to third countries outside the EU/EEA takes place.
Retention period
Log data is deleted after [retention period]. Backend accounts exist as long as a corresponding authorisation is in place; they are then deleted or anonymised.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), objection (Art. 21) and data portability (Art. 20), where the respective conditions are met. Please contact the controller or the data protection officer.
Right to lodge a complaint
You have the right to lodge a complaint with the data protection supervisory authority:
Bavarian State Commissioner for Data Protection (BayLfD)
Wagmüllerstraße 18, 80538 Munich (P.O. Box 22 12 19, 80502 Munich)
Phone: +49 89 212672-0
Email: poststelle@datenschutz-bayern.de
https://www.datenschutz-bayern.de