Legal Basis for Processing Personal Data 
As far as we obtain the consent of the person concerned (i.e. the data subject) processing their personal data, Art. 6 para 1 lit. a) of the General Data Protection Regulation (GDPR) serves as the legal basis for processing personal data. 
 
As far as processing personal data is necessary to fulfil a legal obligation to which Dortmund University of Applied Sciences and Arts is subject, Art. 6 para 1 lit. c) GDPR serves as the legal basis. 

In the event that vital interests of the person concerned or another natural person make it necessary to process personal data, Art. 6 para 1 lit. d) GDPR serves as the legal basis. 
 
If the processing is necessary for the performance of a task carried out in the public interest or the exercise of an official authority conferred on Dortmund University of Applied Sciences and Arts, Art. 6 para 1 lit. e) GDPR serves as the legal basis for the processing. If the processing is necessary to safeguard a legitimate interest of Dortmund University of Applied Sciences and Arts or a third party and the interests, fundamental rights and freedoms of the party concerned do not outweigh the former interest, Art. 6 para 1 lit. f) GDPR serves as the legal basis for the processing. This does not apply as far as Dortmund University of Applied Sciences and Arts acts in a sovereign capacity during the processing of such data. 

Storage Period of Personal Data 
Personal data of the person concerned will only be stored by us as long as the purpose of the storage exists. If the processing is based on the consent of the person concerned, the data will only be stored as long until the person concerned revokes their consent, unless there is another legal basis for the processing. 

Right to Rectification and Erasure of Personal Data 
The person concerned has the right to demand rectification of its incorrect personal data without delay. The person concerned also has the right to demand that we erase their personal data without delay as soon as the purpose for which such data were collected no longer applies or if the processing is based on the consent of the person concerned, and such consent had been withdrawn and there is no other legal basis for the processing. 

The personal data of the person concerned will also be erased if they object to the processing in accordance with Art. 21 para 1 GDPR and there are no overriding legitimate reasons for the processing or if the personal data have been processed unlawfully or if the erasure was provided for in regulations to which Dortmund University of Applied Sciences and Arts is subject in order to fulfil a legal obligation by the European or national legislator. 

However, the personal data will not be erased in the aforementioned cases, if the processing of personal data is necessary to enable Dortmund University of Applied Sciences and Arts and the InduTwin Project Office to fulfil a legal obligation imposed by the European or national legislator or if the processing is carried out to fulfil a task of Dortmund University of Applied Sciences and Arts that is in the public interest or the exercise of official authority delegated to Dortmund University of Applied Sciences and Arts or if continued storage of personal data is necessary to assert, exercise or defend legal claims. 

Right to Withdraw Consent 
If the processing of personal data is based on the consent of the data subject, the data subject may withdraw its consent at any time with future effect. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. 

Right to Information 
The person concerned has the right to demand a confirmation of Dortmund University of Applied Sciences and Arts whether their personal data are being processed. If this is the case, the person concerned has the right to get information on what personal data is being processed and for what purpose. The person concerned also has the right to obtain information on the duration of the planned storage of their data, or on the criteria for determining how long their data is to be stored. 

Collection of General Information 

Scope of the Data Processing 
For every access query to our website, our server automatically collects data and information from the querying computer system. 

The following data is collected in this process: 

• information on the browser type and version 
• the user’s operating system 
• the user’s Internet service provider 
• the user’s IP address 
• the date and time of the query 
• websites from which the user’s system was directed to our website 
• websites which the user’s system accesses via our website 

This data is compiled in log files and saved on our server. No further personal data is stored together with the log file data. 

Legal Basis for Processing 
The legal basis for processing users’ personal data is Art. 6 para 1 lit. f) GDPR. 

Purpose of Processing 

The temporary storage of the IP address on our server is necessary for granting the user’s system access to our website. For this purpose, the user’s IP address must remain stored on our server for the duration of the session. 

Data storage in log files is required to ensure the functionality of the website. Furthermore, the data enables us to optimise the website and guarantee the security of our IT systems. Data analysis for marketing-related purposes is not performed in this context. 

Duration of Personal Data Storage 
The data is erased at the conclusion of the respective session. 

All data stored in log files is erased within seven days. A longer period of data storage is possible. In such cases, the user’s IP address is erased or anonymised in such a way that renders it impossible to identify the querying client.