Description and scope of data processing

Cookies are text files that are stored in the Internet browser or by the Internet browser on the data subject's computer system. If a data subject accesses a website, a cookie may be stored on the data subject's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

So-called temporary cookies are used when individual pages are called up. These session cookies do not contain any personal data and are automatically deleted at the end of the session when you close your web browser.

Legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. e GDPR in conjunction with § 2 para. 8 HochSchG.

Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies.

We need cookies for the following applications:

• Use of the live chat
• Log-in to internal UB websites

The Matomo analysis tool is used completely anonymously without recognition cookies (cookieless), i.e. we do not use any analysis cookies that are used to create user profiles by tracking specific surfing behavior on the individual pages. 

The service is hosted on the Data Center’s (ZDV) own servers. No personal data is collected when the statistical data is transmitted. 

Duration of storage, objection and removal options

Cookies are small text files that are stored on your end device when you visit our website. Therefore, as the data subject, you also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be automated. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Description and scope of data processing

It is possible to fill in and send web forms on our website. This is required to apply for a library card, to register for events, to send in feedback, to place orders within the framework of course reserves and internal lending, to submit purchase proposals, to apply for permanent lockers and carrels, to pre-order literature from the reading room of the Law and Economics Library for loan and to use our advisory services.

Legal basis for data processing

By providing the requested data and sending it when submitting the respective web form, you consent to its processing so that it can be used in accordance with Art. 6 para. 1 lit. a GDPR is lawful.

Purpose of data processing

The data collected from the data subject is used to issue the library card, to manage event registrations, to respond to feedback submitted, to process orders in the context of course reserves and the internal loan system as well as purchase proposals or applications for the loan of permanent lockers or carrels as well as pre-orders of literature from the reading room of the Law and Economics Library for loan or inquiries about our advisory services.

Duration of storage, objection and removal options

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Furthermore, data subjects can request the deletion of their data at any time. The consequence of the requested deletion may be that the services for the provision of which the data was collected can no longer be provided.

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

Right to information Art. 15 para. 1 GDPR

You can request confirmation from the controller as to whether personal data concerning you is being processed.

If such processing has taken place, you can request the following information from the controller:

a) the purposes for which the personal data are processed;

b) the categories of personal data that are processed;

c) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;

d) the planned duration of storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the duration of storage;

e) the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;

f) the existence of a right of appeal to a supervisory authority;

g) any available information as to the source of the data where the personal data are not collected from the data subject.

This right to information may be restricted to the extent that it is likely to render impossible or seriously impair the realization of the research or statistical purposes and the restriction is necessary for the fulfillment of the research and statistical purposes.

Right to rectification, Art. 16 GDPR

You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you is incorrect or incomplete. The controller must make the correction immediately.

Your right to rectification may be restricted to the extent that it is likely to render impossible or seriously impair the achievement of the research or statistical purposes and the restriction is necessary for the fulfillment of the research or statistical purposes.

Right to restriction of processing, Art. 18 GDPR

Under the following conditions, you may request the restriction of the processing of personal data concerning you:

a) if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;

b) if the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;

c) if the controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims; or

d) if you object to the processing pursuant to Art. 21 (1) GDPR and it has not yet been established whether the legitimate reasons of the controller outweigh your reasons.

If the processing of personal data concerning you has been restricted, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

If processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

Your right to restriction of processing may be limited to the extent that it is likely to render impossible or seriously impair the achievement of the research or statistical purposes and the restriction is necessary for the fulfillment of the research or statistical purposes.

Right to deletion, Art. 17 GDPR

a) Deletion obligation

You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

(1) The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.

(2) You withdraw your consent on which the processing is based according to Art. 6 para. 1 lit. a GDPR and there is no other legal basis for the processing.

(3) In accordance with Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR to object to the processing.

(4) The personal data concerning you has been processed unlawfully.

(5) The deletion of personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.

b) Exceptions

The right to erasure does not exist if the processing is necessary

(1) to exercise the right to freedom of expression and information;

(2) for compliance with a legal obligation which requires processing by European Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

(3) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with. Art. 89 (1) GDPR, insofar as the right referred to in section a is likely to render impossible or seriously impair the achievement of the objectives of that processing; or

(4) for the assertion, exercise or defense of legal claims.

Right to information, Art. 19 GDPR

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed about these recipients by the controller.

Right to data portability, Art. 20 GDPR

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where

• the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. Art. 6 para. 1 lit. b GDPR and
• the processing is carried out using automated procedures.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. The freedoms and rights of other persons must not be impaired by this.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right to object, Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to processing based on Art. 6 para. 1 lit. e GDPR; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

You also have the right to object, on grounds relating to your particular situation, to processing of personal data concerning you which is carried out for scientific or historical research purposes or for statistical purposes pursuant to Art. 78 GDPR. 89 para. 1 GDPR is applicable.

Your right to object may be restricted to the extent that it is likely to render impossible or seriously impair the realization of the research and statistical purposes and the restriction is necessary for the fulfillment of the research or statistical purposes.

Right to withdraw consent under data protection law, Art. 7 para. 3 GDPR

You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to lodge a complaint with the supervisory authority, Art. 13 para. 2 lit. d GDPR

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 GDPR.

The responsible supervisory authority is the

State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate
Hintere Bleiche 34
55116 Mainz
Phone: +49 6131 8920-0
Fax: +49 6131 8920-299
E-mail: poststelle@datenschutz.rlp.de