Privacy

As of September 25, 2026

1. Responsible Party

Responsible for the content pursuant to Section 18(2) of the Media Services State Treaty (MStV):

Johanna Schaffer, Anil Shah, Nina Blasse
Breitscheidstr 29, 34119 Kassel
Contact: info@zivile-uni-kassel.de

A data protection officer has not been appointed, as the requirements of Section 38 of the Federal Data Protection Act (BDSG) are not met.

2. Hosting and Server Log Files

The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit our website, the web server automatically processes technical connection data that is necessary to deliver the website and operate it securely. This may include in particular:

• IP address,
• date and time of the request,
• requested address,
• referrer URL,
• browser type and browser version,
• operating system,
• amount of data transferred, and
• HTTP status code.

The processing is carried out for the purpose of technical provision, stability, and the prevention of misuse and attacks. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and functional operation of the website. STRATO processes this data on our behalf. Insofar as personal data is processed by STRATO as a processor, a data processing agreement pursuant to Art. 28 GDPR is in place. According to its own statements, STRATO stores visitors’ IP addresses for a maximum of seven days for the purpose of detecting and defending against attacks. Data whose further retention is necessary to investigate a specific security incident may be stored for longer until the incident has been conclusively resolved.

3. Cookies and Local Storage

We do not use any cookies on this website.

4. Contact by Email

If you write to us at info@zivile-uni-kassel.de, we process the data you send us in order to handle and respond to your inquiry. This is usually your email address, the time of the message, its content, and any information you provide yourself, such as your name. Email communication and the email mailbox are provided via STRATO. Insofar as STRATO processes personal data on our behalf in this context, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR. The legal basis for handling and responding to your inquiry is Art. 6(1)(f) GDPR. Our legitimate interest lies in handling and responding to inquiries. We retain emails and the personal data they contain only for as long as is necessary to handle the inquiry, to document the communication, or to establish or enforce legal claims. Statutory retention obligations remain unaffected. Please do not send us special categories of personal data by email unless this is necessary for your inquiry.

5. External Petition

On our website, we link to a petition that is provided via the external service CryptPad. When you click the link, a connection to cryptpad.fr is established. In this process, the operator of the cryptpad.fr instance, XWiki SAS, processes in particular the technical connection data required for communication with its server, for example the IP address. XWiki SAS is responsible for this processing. CryptPad’s privacy notices apply. Data entry and processing in the petition form take place exclusively on the external CryptPad site and not on our website. Which data is collected there and for what purposes it is processed is determined by the form on that site and the privacy notices provided there. We do not receive any petition data merely because the link is accessed.

6. External Links

Our website contains links to websites and online services of third parties. When you click such a link, a connection to the respective target site is established. In this process, technical connection data, in particular your IP address, may be transmitted to the operator of the target site. The respective operators are responsible for the processing of personal data on the linked websites. Please refer to their privacy notices.

7. Recipients

Within the scope of the processing described above, personal data is transmitted in particular to the following recipients:

• STRATO GmbH as processor for hosting and the provision of the email service
• XWiki SAS as operator of the external CryptPad instance, if you access the link to the petition.

Personal data is not passed on for our own advertising purposes or sold. Statutory disclosure obligations remain unaffected.

8. Your Rights

Under the GDPR, you have the following rights in particular against the controller:

• Access to the data concerning you (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability in accordance with Art. 20 GDPR
• Objection to processing based on Art. 6(1)(f) GDPR (Art. 21)

If processing is based on consent, you may withdraw it at any time with effect for the future (Art. 7(3) GDPR). A message to info@zivile-uni-kassel.de is sufficient to exercise your rights.

9. Complaint to a Supervisory Authority

You may lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement (Art. 77 GDPR). For a controller based in Hesse, this is: The Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, https://datenschutz.hessen.de

10. Provision of Data and Automated Decision-Making

You are generally not obliged to provide us with personal data. The technically necessary connection data is required to access the website. Without the information required for an email inquiry, we may not be able to process your request. Automated decision-making, including profiling, pursuant to Art. 22 GDPR does not take place.

11. Changes to This Privacy Policy

We reserve the right to amend this privacy policy in the event of changes to the legal situation or to our services. The current version published on this website applies.