Privacy Policy

We are very pleased about your interest in our company. Data protection has a particularly high priority for the management of AIGNOSCO. The use of the Internet pages of AIGNOSCO is generally possible without providing any personal data. However, if a data subject wishes to use special services of our company via our website, the processing of personal data could become necessary.

Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

General Data Processing

Scope of the Privacy Policy

This privacy policy applies to the processing of personal data.

• According to Art. 4 No. 1 GDPR, 'personal data' means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
• According to Art. 4 No. 2 GDPR, 'processing' means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.

Purposes and Legal Basis for Processing Personal Data

According to Art. 2 Para. 6 BayHSchG, Art. 4 Para. 1 Sentences 1 and 2 BayEGovG, AIGNOSCO provides its services and administrative services as well as public information about its activities on its websites. Personal data is only processed on the website insofar as it is necessary for the provision of a functional website, the presentation of specific content, or the provision of certain services or offers. The processing of personal data is carried out either on a legal basis or based on user consent. If the processing of personal data is based on consent, it is carried out under Art. 6 Para. 1 lit. a GDPR. When processing personal data necessary for the performance of a contract to which the user is a party, Art. 6 Para. 1 lit. b GDPR serves as the legal basis. If the processing of personal data is necessary to fulfill a legal obligation, Art. 6 Para. 1 lit. c GDPR applies. In cases where processing is necessary to protect the vital interests of the data subject or another natural person, Art. 6 Para. 1 lit. d GDPR serves as the legal basis. The processing may also be necessary to perform a task in the public interest assigned to the university (Art. 6 Para. 1 lit. b GDPR). Additional legal bases may arise from specific legal regulations, which are referenced in each individual case. AIGNOSCO uses cookies, log files, and web analysis tools for creating business statistics, conducting organizational reviews, maintaining or auditing our web service, and ensuring network and information security under Art. 6 Para. 1 BayDSG, § 13 Para. 7 TMG, Art. 11 Para. 1 BayEGovG. As far as and as soon as the purpose of the processing is not affected, AIGNOSCO anonymizes or pseudonymizes personal data.

Data Deletion and Retention Periods

The personal data of website users will be deleted or blocked as soon as the purpose of the storage ceases and there is no obligation to archive it. Data is also deleted or blocked when a storage period, as provided for by European or national legislation in EU regulations, laws, or other provisions, expires unless continued storage of the data is necessary for the conclusion or fulfillment of a contract. If provided for in the aforementioned provisions, storage may continue beyond this.

Data Security

To adequately and comprehensively protect the security of your data during processing, and especially during transmission, we use, where necessary and aligned with the current state of technology, appropriate technical and organizational measures.

Specific Information on Data Processing

Each time the website is accessed, data and information are automatically collected from the computer system of the accessing device. Additionally, AIGNOSCO processes your personal data as far as you provide it via the website. When processing your personal data, AIGNOSCO particularly observes data protection principles such as necessity, purpose limitation, data minimization, lawfulness, accuracy, and integrity.

Use of Active Components and Cookies

The information offered includes JavaScript applications, primarily for navigational elements, e.g., field-dependent visibility in contact forms. No personal data is stored in this process. You can disable the use of these functionalities by changing your browser settings. Disabling them may impair the display of certain elements, such as contact forms, video players, or accordions. Cookies are partially used on the website, e.g., to identify user sessions and make the website more user-friendly. Cookies are text files stored in the internet browser or by the internet browser on the user’s computer system. When a user visits a webpage, a cookie can be stored on the user's operating system. This cookie contains a unique string of characters that allows the browser to be uniquely identified the next time the website is accessed. The cookies used in public offerings only store a session ID to identify the user session (session cookie). These session cookies are automatically deleted after your visit when you close your browser. Cookies used are stored on your computer and transmitted from there to the website. As a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. The storage of these cookies can be disabled in your internet browser settings at any time, which can also be automated.

Rights of the Data Subject

If personal data concerning you is processed, you are considered a data subject within the meaning of the GDPR and you are entitled to the following rights against the data controller:

Right of Access

You have the right to request confirmation from the controller as to whether personal data concerning you is being processed. If such processing is taking place, you can request information about the following:

• the purposes for which the personal data is being processed;
• the categories of personal data being processed;
• the recipients or categories of recipients to whom the personal data concerning you has been disclosed or will be disclosed;
• the planned duration of storage of the personal data concerning you, or if specific information is not possible, criteria for determining the storage duration;
• the existence of the right to rectify or delete personal data concerning you, the right to restrict processing by the controller, or the right to object to such processing;
• the existence of the right to lodge a complaint with a supervisory authority; the supervisory authority directly responsible for data protection is the Bavarian Data Protection Officer (https://www.datenschutz-bayern.de (external link));
• all available information about the source of the data, if the personal data was not collected from you;
• the existence of automated decision-making, including profiling, pursuant to Art. 22(1) and (4) GDPR and – at least in such cases – meaningful information about the logic involved as well as the significance and envisaged consequences of such processing for the data subject.
• You also have the right to be informed about whether the personal data concerning you is transferred to a third country or an international organization. In this context, you can request information about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

The right of access is subject to legal restrictions and is not absolute. It may be limited in the following cases:

• If a large amount of information about the data subject is stored, the controller may require you to specify which information or processing activities your request relates to.
• Clearly unfounded or excessive requests, or repeated requests, may be refused or subject to a fee.
• Providing access must not infringe on the rights of the controller or others (e.g., professional secrets, business secrets, data concerning other individuals).
• Under the conditions specified in Art. 10 of the BayDSG, access may be denied.
• In the context of processing for scientific or historical research purposes or for statistical purposes, your right of access may also be restricted if it is likely to render impossible or seriously impair the achievement of the research or statistical purposes and the restriction is necessary for the fulfillment of these purposes.

Right to Rectification

You have the right to request the rectification or completion of inaccurate or incomplete personal data concerning you. AIGNOSCO will make the rectification without undue delay. For data processing related to scientific or historical research purposes or statistical purposes, your right to rectification may be restricted if it is likely to render impossible or seriously impair the achievement of these purposes, and the restriction is necessary for their fulfillment.

Right to Restrict Processing

You have the right to request the restriction of processing of personal data concerning you under the following conditions:

• if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
• if the processing is unlawful, and you oppose the erasure of the personal data and request the restriction of its use instead;
• if the controller no longer needs the personal data for the purposes of processing, but you require it for the establishment, exercise, or defense of legal claims; or
• if you have objected to processing pursuant to Art. 21(1) GDPR pending the verification of whether the legitimate grounds of the controller override yours.

If the processing of personal data concerning you has been restricted under the above conditions, you will be informed before the restriction is lifted. In the context of processing for scientific or historical research purposes or for statistical purposes, your right to restriction may be limited if it is likely to render impossible or seriously impair the achievement of these purposes and the restriction is necessary for their fulfillment.

Right to Erasure

1. Obligation to Delete

   You have the right to request the immediate erasure of personal data concerning you, and AIGNOSCO is obligated to erase this data without undue delay if one of the following reasons applies:

   • The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
   • You withdraw your consent on which the processing is based according to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal ground for the processing.
   • You object to the processing pursuant to Art. 21(1) GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
   • The personal data concerning you has been unlawfully processed.
   • The erasure of personal data concerning you is required for compliance with a legal obligation under Union or Member State law to which the controller is subject.
   • The personal data concerning you has been collected in relation to the offer of information society services referred to in Art. 8(1) GDPR.
2. Notification to Third Parties

   If AIGNOSCO has made the personal data concerning you public and is obligated to erase it pursuant to Art. 17(1) GDPR, AIGNOSCO will take reasonable measures, including technical measures, to inform controllers processing the personal data that you have requested the erasure of all links to, or copies or replication of, such personal data.

3. Exceptions

   The right to erasure does not apply to the extent that processing is necessary:

   • for exercising the right of freedom of expression and information;
   • for compliance with a legal obligation which requires processing under Union or Member State law or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
   • for reasons of public interest in the area of public health in accordance with Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
   • for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Art. 89(1) GDPR to the extent that the right referred to in (a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
   • for the establishment, exercise, or defense of legal claims.

Right to be Informed

If you have exercised your right to rectification, erasure, or restriction of processing against AIGNOSCO, AIGNOSCO is obligated to notify each recipient to whom the personal data concerning you has been disclosed of the rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. You also have the right to be informed about these recipients by AIGNOSCO.

Right to Data Portability

You have the right to receive the personal data concerning you, which you have provided to AIGNOSCO, in a structured, commonly used, and machine-readable format, and the right to transmit those data to another controller without hindrance from AIGNOSCO, where:

• the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR; and
• the processing is carried out by automated means.

In exercising your right to data portability, you also have the right to have the personal data transmitted directly from AIGNOSCO to another controller, where technically feasible. This right must not adversely affect the rights and freedoms of others. The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in AIGNOSCO.

Right to Object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR, including profiling based on those provisions. In this case, AIGNOSCO will no longer process the personal data concerning you unless AIGNOSCO demonstrates compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

Right to Withdraw Consent

You have the right to withdraw your consent for the processing of your personal data at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. To withdraw your consent, you can contact AIGNOSCO via the email address provided in this Privacy Policy.

Right to Lodge a Complaint

If you believe that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. The supervisory authority responsible for data protection in Bavaria is the Bavarian Data Protection Officer (https://www.datenschutz-bayern.de (external link)).

Applicability of the General Privacy Policy and Scope of a Supplementary Privacy Policy by the Responsible Party for the Website Content

The general privacy policy applies to those websites for which AIGNOSCO is responsible. A supplementary privacy policy may also apply to a particular AIGNOSCO website if the person or entity responsible for the website content processes personal data further and informs about this. This is particularly relevant when specific services are offered by individual sections. The supplementary privacy policy can expand on the general privacy policy but cannot replace it. The general privacy policy is part of any supplementary privacy policy.

Status, Updates, and Applicability of the General Privacy Policy

This general privacy policy is current as of 11/2024. We reserve the right to regularly update this privacy policy to reflect current legal requirements, technical changes, and to ensure that our services and offerings comply with data protection regulations. The version of the policy in effect at the time of your visit to an AIGNOSCO website will apply.