{"id":300,"date":"2025-05-09T16:13:48","date_gmt":"2025-05-09T14:13:48","guid":{"rendered":"https:\/\/eunita.s.studiumdigitale.uni-frankfurt.de\/?page_id=300"},"modified":"2025-10-06T11:00:27","modified_gmt":"2025-10-06T09:00:27","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/eunita.s.studiumdigitale.uni-frankfurt.de\/ca\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n<h1 class=\"wp-block-heading\">Information on Data Protection and Consent to the Processing of Personal Data<\/h1>\n\n\n\n<p>This Privacy Policy serves to fulfill the information obligations pursuant to Article 13 of the EU General Data Protection Regulation (GDPR) when collecting personal data from data subjects at the time of collection.<\/p>\n\n\n\n<p>We attach great importance to your privacy and the protection of your personal data. Therefore, we would like to inform you here about how we use and protect the data collected about you.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">1. Name and Address of the Controller and Administrative Contacts<\/h2>\n\n\n\n<p><strong>Controller:<\/strong><br>Goethe University Frankfurt am Main<br>Theodor-W.-Adorno-Platz 1<br>60323 Frankfurt am Main<br>Germany<\/p>\n\n\n\n<p><strong>Postal Address:<\/strong><br>Goethe University Frankfurt am Main<br>60629 Frankfurt<br>Germany<\/p>\n\n\n\n<p><strong>Administrative support (technical and organizational):<\/strong><br>Goethe University Frankfurt am Main<br>House of Labour<br>studiumdigitale \u2013 Central eLearning Facility of Goethe University<br>Eschersheimer Landstr. 155\/157<br>60323 Frankfurt am Main<br>Germany<br>Phone: +49-69-798-22198 | Fax: +49-69-798-22195<br>Website: <a href=\"http:\/\/www.studiumdigitale.uni-frankfurt.de?utm_source=chatgpt.com\">http:\/\/www.studiumdigitale.uni-frankfurt.de<\/a><br>E-mail: <a>info[at]studiumdigitale.uni-frankfurt.de<\/a><\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">2. Data Protection Officer<\/h2>\n\n\n\n<p>Goethe University Frankfurt am Main<br>Data Protection Officers<br>Theodor-W.-Adorno-Platz 1<br>60323 Frankfurt am Main<br>Germany<br>Website: <a href=\"http:\/\/www.uni-frankfurt.de\/47859992\/datenschutzbeauftragte?utm_source=chatgpt.com\">http:\/\/www.uni-frankfurt.de\/47859992\/datenschutzbeauftragte<\/a><br>E-mail: <a>dsb@uni-frankfurt.de<\/a><\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">3. Purposes and Legal Bases of Processing<\/h2>\n\n\n\n<p>Personal data are processed exclusively in accordance with the GDPR:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Registration and Matching:<\/strong> Art. 6(1)(b) GDPR (performance of a contract).<\/li>\n\n\n\n<li><strong>Optional profile data (telephone number, interests, biography, profile picture):<\/strong> Art. 6(1)(a) GDPR (consent).<\/li>\n\n\n\n<li><strong>Statistical analysis (Matomo):<\/strong> Art. 6(1)(a) GDPR (consent).<\/li>\n\n\n\n<li><strong>Operation and security of the website (logfiles, cookies):<\/strong> Art. 6(1)(f) GDPR (legitimate interests).<\/li>\n\n\n\n<li><strong>Spam and abuse prevention (Google reCAPTCHA):<\/strong> Art. 6(1)(f) GDPR (legitimate interests).<\/li>\n\n\n\n<li><strong>Processing required by legal obligations (e.g. university law):<\/strong> Art. 6(1)(c) GDPR.<\/li>\n<\/ul>\n\n\n\n<p><strong>Mandatory data:<\/strong><br>Use of the EUniTa App requires the provision of a valid university e-mail address. Without this, registration is not possible.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">4. Rights of Data Subjects<\/h2>\n\n\n\n<p>You have the following rights under the GDPR with respect to your personal data:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Right of access<\/strong> (Art. 15 GDPR)<\/li>\n\n\n\n<li><strong>Right to rectification<\/strong> (Art. 16 GDPR)<\/li>\n\n\n\n<li><strong>Right to erasure<\/strong> (Art. 17 GDPR)<\/li>\n\n\n\n<li><strong>Right to restriction of processing<\/strong> (Art. 18 GDPR)<\/li>\n\n\n\n<li><strong>Right to data portability<\/strong> (Art. 20 GDPR)<\/li>\n\n\n\n<li><strong>Right to object<\/strong> (Art. 21 GDPR)<\/li>\n\n\n\n<li><strong>Right to withdraw consent<\/strong> (Art. 7(3) GDPR)<\/li>\n<\/ul>\n\n\n\n<p>Note: The lawfulness of the processing carried out until the withdrawal remains unaffected.<\/p>\n\n\n\n<p><strong>Right to lodge a complaint:<\/strong><br>You have the right to lodge a complaint with the competent supervisory authority:<\/p>\n\n\n\n<p>The Hessian Commissioner for Data Protection and Freedom of Information<br>P.O. Box 3163<br>65021 Wiesbaden<br>Germany<br>Phone: +49 611 1408 \u2013 0 | Fax: +49 611 1408 \u2013 611<br>Website: <a>https:\/\/datenschutz.hessen.de\/ueber-uns\/kontakt<\/a><\/p>\n\n\n\n<p>To exercise your rights, please contact: <a>datenschutz<a>[at]<\/a>studiumdigitale.uni-frankfurt.de<\/a><\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">5. Categories of Data, Purposes and Storage Periods<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">5.1 Registration and Profile Data<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Mandatory data:<\/strong> Name, university e-mail, password, language settings<\/li>\n\n\n\n<li><strong>Optional data:<\/strong> Profile picture, biography, telephone number<\/li>\n<\/ul>\n\n\n\n<p><strong>Profile data (required for matching):<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>First name, last name, date of birth, gender, academic field<\/li>\n\n\n\n<li>Native and foreign languages with proficiency level (A1\u2013C2)<\/li>\n\n\n\n<li>Interests (voluntary)<\/li>\n<\/ul>\n\n\n\n<p><strong>Tandem and Match Data:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Tandem request: target language, practice frequency, optional filters (academic field, internal university matches, interests)<\/li>\n\n\n\n<li>Match data: communicated by e-mail (name, university e-mail), additionally displayed in the dashboard (profile picture, academic field, language profile, interests, biography, telephone number if provided)<\/li>\n\n\n\n<li>Activity data: open tandem searches, matches, dashboard usage<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<h3 class=\"wp-block-heading\">5.2 Data Collection When Visiting the Website<\/h3>\n\n\n\n<p>When accessing the website, technically necessary data (so-called \u201cserver logfiles\u201d) are collected:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>URL of the visited page<\/li>\n\n\n\n<li>Date and time of access<\/li>\n\n\n\n<li>Referrer (source of access)<\/li>\n\n\n\n<li>Data volume transferred<\/li>\n\n\n\n<li>Browser type\/version<\/li>\n\n\n\n<li>Operating system<\/li>\n\n\n\n<li>IP address<\/li>\n<\/ul>\n\n\n\n<p><strong>Purpose:<\/strong> Ensuring functionality, security, and detection of misuse.<br><strong>Legal basis:<\/strong> Art. 6(1)(f) GDPR.<br><strong>Deletion:<\/strong> After a maximum of 7 days, unless longer storage is required due to legitimate interests or legal obligations.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<h3 class=\"wp-block-heading\">5.3 Storage Periods<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Account deletion: data remain inactive for 30 days (not visible). Afterwards they are permanently deleted.<\/li>\n\n\n\n<li>Logfiles: 7 days<\/li>\n\n\n\n<li>Backups: up to 12 months<\/li>\n\n\n\n<li>Statistical data (Matomo): 13 months<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">6. Recipients of the Data<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Other students:<\/strong> Personal data are only shared in the event of a match.<\/li>\n\n\n\n<li><strong>Local partner administrations:<\/strong> Designated units at partner universities (e.g. language centers, international offices, EUniTa coordination offices). They may only access and manage the data of their own university\u2019s users (profiles, tandem searches, matches). Access to profiles of other universities is possible only if a match with their own institution\u2019s users exists.<\/li>\n\n\n\n<li><strong>Central administration (Goethe University Frankfurt):<\/strong>\n<ul class=\"wp-block-list\">\n<li>studiumdigitale \u2013 Central eLearning Facility<\/li>\n\n\n\n<li>Dr. Maria Kopp-Kavermann, Internationales Studien- und Sprachenzentrum (ISZ), Fremdsprachen, Campus Westend, Tel.: +49 69 798-23757, E-mail: <a>kopp-kavermann<\/a><a>[at]<\/a>em.uni-frankfurt.de, Website: <a href=\"https:\/\/www.uni-frankfurt.de\/43667923\/team?utm_source=chatgpt.com\">https:\/\/www.uni-frankfurt.de\/43667923\/team<\/a><br>These central entities are responsible for the operation, coordination and overall management of the EUniTa App and have system-wide access to ensure proper operation.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>No disclosure to external third parties:<\/strong> No transfer to unrelated third parties or for marketing purposes.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">7. Transfers to Third Countries<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Google reCAPTCHA:<\/strong> To protect against spam, data (IP address, device information, usage behavior) may be transferred to Google LLC, USA.<br>Legal basis: Art. 6(1)(f) GDPR in conjunction with the EU Standard Contractual Clauses.<br>Note: Despite contractual and technical measures, a residual risk cannot be excluded when transferring data to the USA.<\/li>\n\n\n\n<li><strong>All other data:<\/strong> Processed exclusively on servers in Germany.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">8. Automated Decision-Making \/ Profiling<\/h2>\n\n\n\n<p>Matching is performed by an algorithm that considers language goals, proficiency levels, and optional filters.<br>This does <strong>not<\/strong> constitute legally binding profiling but solely provides technical support for partner matching without legal effects under Art. 22 GDPR.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">9. Cookies and Tracking<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Essential cookies<\/strong>\n<ul class=\"wp-block-list\">\n<li><code>pp_box_cookie<\/code>: stores privacy preferences (1 year)<\/li>\n\n\n\n<li><code>CAKEPHP<\/code>: session cookie, deleted when the browser is closed<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Analytics cookies (Matomo)<\/strong>\n<ul class=\"wp-block-list\">\n<li>Used only with consent, anonymized, stored for 13 months<\/li>\n\n\n\n<li>Opt-out possible at any time<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>reCAPTCHA cookies (Google)<\/strong>\n<ul class=\"wp-block-list\">\n<li>Valid for 1\u201310 years<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<p>Users can block or delete cookies in their browser settings.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">10. Technical and Organizational Measures<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Server location: Germany<\/li>\n\n\n\n<li>SSL encryption<\/li>\n\n\n\n<li>Access restricted to authorized administrators<\/li>\n\n\n\n<li>Role and rights concept (Goethe University central, partner universities local)<\/li>\n\n\n\n<li>Regular backups and security updates<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">11. Changes<\/h2>\n\n\n\n<p>We reserve the right to update this Privacy Policy if necessary.<br>The current version is available at any time on the website and in the footer of the EUniTa App.<\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Information on Data Protection and Consent to the Processing of Personal Data This Privacy Policy serves to fulfill the information obligations pursuant to Article 13 of the EU General Data Protection Regulation (GDPR) when collecting personal data from data subjects at the time of collection. We attach great importance to your privacy and the protection [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-300","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/eunita.s.studiumdigitale.uni-frankfurt.de\/ca\/wp-json\/wp\/v2\/pages\/300","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eunita.s.studiumdigitale.uni-frankfurt.de\/ca\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/eunita.s.studiumdigitale.uni-frankfurt.de\/ca\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/eunita.s.studiumdigitale.uni-frankfurt.de\/ca\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/eunita.s.studiumdigitale.uni-frankfurt.de\/ca\/wp-json\/wp\/v2\/comments?post=300"}],"version-history":[{"count":0,"href":"https:\/\/eunita.s.studiumdigitale.uni-frankfurt.de\/ca\/wp-json\/wp\/v2\/pages\/300\/revisions"}],"wp:attachment":[{"href":"https:\/\/eunita.s.studiumdigitale.uni-frankfurt.de\/ca\/wp-json\/wp\/v2\/media?parent=300"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}