Skip to content
Snippets Groups Projects
Commit 49325ad2 authored by Stephan Porada's avatar Stephan Porada :speech_balloon:
Browse files

Add GDPR statment and links

parent 7ec576e6
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
web/app/main/views.py
+ 4
− 2
View file @ 49325ad2
......@@ -58,9 +58,11 @@ def poster():
@main.route('/privacy_policy')
def privacy_policy():
return render_template('main/privacy_policy.html.j2',
title='Privacy policy')
title=('Information on the processing of personal'
' data for the nopaque platform (GDPR)'))
@main.route('/terms_of_use')
def terms_of_use():
return render_template('main/terms_of_use.html.j2', title='General Terms of Use of the platform nopaque') # noqa
return render_template('main/terms_of_use.html.j2',
title='General Terms of Use of the platform nopaque') # noqa
web/app/templates/auth/register.html.j2
+ 2
− 1
View file @ 49325ad2
......@@ -16,7 +16,8 @@
<div class="card-content">
<h2>Register</h2>
<p>Simply enter a username and password to receive your registration email. After that you can start right away.</p>
<p>It goes without saying that the <a>General Data Protection Regulation</a> applies, only necessary data is stored.</p>
<p>It goes without saying that the <a href="{{ url_for('main.privacy_policy') }}">General Data Protection Regulation</a> applies, only necessary data is stored.</p>
<p>Please also read our <a href="{{ url_for('main.terms_of_use') }}">terms of use</a> before signing up for nopaque!</p>
</div>
</div>
</div>
......
web/app/templates/main/privacy_policy.html.j2
+ 139
− 1
View file @ 49325ad2
{% extends "nopaque.html.j2" %}
{% block page_content %}
<div class="col s12">
<p>With these data protection notices, Bielefeld University fulfils its obligation to provide information in accordance with Articles 13 & 14 of the EU General Data Protection Regulation (GDPR) on the above-mentioned processing of personal data. Terms such as "personal data", "processing", "data controller", "third party", etc. are used as defined in Article 4 GDPR.</p>
</div>
<h3>Privacy policy</h3>
<div class="col s12">
<div class="card">
<div class="card-content">
<span class="card-title">§ 1 Contact Details</span>
<p>Bielefeld University, a legal entity under public law established by the state of North Rhine-Westphalia (NRW), is responsible for processing the data. It is represented by its rector, Prof. Dr. Ing. Gerhard Sagerer.</p>
<h6>§ 1.1. Contact details of the data controller</h6>
<ul class="browser-default">
<li>Data protection officer of the Faculty of History</li>
<li>Prof. Dr. Stefan Gorißen</li>
<li>Universitätsstraße 25</li>
<li>D-33615 Bielefeld</li>
<li>Phone: +49 521 / 106-3152</li>
<li>Email:
<a href="mailto:stefan.gorissen@uni-bielefeld.de">stefan.gorissen@uni-bielefeld.de</a>
</li>
<li>Web:
<a href="https://www.uni-bielefeld.de">https://www.uni-bielefeld.de</a>
</li>
</ul>
<h6>§ 1.2. Technical contact person</h6>
<ul class="browser-default">
<li>Dr. Johanna Vompras</li>
<li>Email:
<a href="mailto:johanna.vompras@uni-bielefeld.de">johanna.vompras@uni-bielefeld.de</a>
</li>
<li>Web.:
<a href="https://www.uni-bielefeld.de/(en)/sfb1288/projekte/inf.html">https://www.uni-bielefeld.de/(en)/sfb1288/projekte/inf.html</a>
</li>
</ul>
<h6>§ 1.2. Contact details of the data protection officer</h6>
<ul class="browser-default">
<li>The data protection officer responsible is:</li>
<li>Phone: +49 521 106-5225</li>
<li>
Email: <a href="mailto:datenschutzbeauftragte@uni-bielefeld.de">datenschutzbeauftragte@uni-bielefeld.de</a>
</li>
</ul>
</div>
</div>
</div>
<div class="col s12">
<div class="card">
<div class="card-content">
<span class="card-title">§ 2 General information on data processing and its purpose</span>
<p>We process the personal data of our users only to the extent necessary to provide a functioning website and its functionalities.</p>
<p>The following personal data is collected and stored within the system:</p>
<h6>Master Data</h6>
<p>Within the scope of user authentication the following personal data is collected and processed:</p>
<ul class="browser-default">
<li>User name</li>
<li>E-Mail</li>
</ul>
<p>Registration of the user is required for the provision of certain content and services within nopaque.</p>
<h6>Protocol Data</h6>
<p>In general, when a website is visited, for technical reasons information is automatically sent from the browser to the server and stored there in access protocols. When using a web application, additional protocol data is also generated, which is necessary for tracking technical errors. This information includes:</p>
<ul class="browser-default">
<li>IP address</li>
<li>User account</li>
<li>Complete HTTP request URL</li>
<li>HTTP action (e.g. GET: call up a page, POST: send form data)</li>
<li>Access status (HTTP status code)</li>
<li>data volume retrieved</li>
<li>Date and time of the action</li>
<li>User-Agent string</li>
</ul>
<p>Locally logged data will be used by the development team in order to debug and improve tools. This data can only be viewed by the technical administration and by the employees responsible for the nopaque platform. Data is stored for seven days to ensure proper technical operation and to find the cause of errors and is deleted <u>afterwards</u>.</p>
<p>Logged data may be used to understand how researchers are using the nopaque platform. To be able to use the data for research purposes, we reserve the right to store it in an anonymous and aggregated form for a longer period of time (up to two years after completion of the SFB 1288 INF project).</p>
<h6>Cookies</h6>
<p>Browsers store so-called cookies. Cookies are files that can be stored by the provider of a website in the directory of the browser program on the user's computer. These files contain text information and can be read again by the provider when the page is called up again. The provider can use these cookies, for example, to always deliver pages in the theme selected by the user.</p>
<p>The storage of cookies can be switched off in the browser settings or provided with an expiry time. By deactivating cookies, however, some functions that are controlled by cookies can then only be used to a limited extent or not at all.</p>
<p>NOPAQUE uses cookies for the following purposes:</p>
<ul class="browser-default">
<li>Recognition of a user during a session in order to assign personal content and other user-defined settings.</li>
<li>Login Script with ‘Remember Me’ feature allows the user to preserve their logged in status. When the user checks the Remember Me option, then the logged in status is serialized in the session and stored in cookies in an encrypted way.</li>
</ul>
<h6>Content Data</h6>
<p>The content data includes all data that is entered or created by users themselves in the system. This data is listed here because it is assigned to individual authors and may contain personal data. This may include: uploaded files, images, texts or other media files. Please note that files and scans submitted to NOPAQUE are stored in order to allow persistent access during a work session and between work sessions.</p>
<p>According to § 4 paragraph 2 of the General Terms of Use for the use of NOPAQUE at Bielefeld University, the users themselves are responsible for the content they post and must comply with the legal provisions of data protection. This includes in particular the deletion of personal data that may no longer be processed.</p>
</div>
</div>
</div>
<div class="col s12">
<div class="card">
<div class="card-content">
<span class="card-title">§ 3 Legal basis of the data processing</span>
<p>The legal basis for the processing of personal data for user authentication is <b>Article 6 (1) letter e GDPR</b>. The processing is carried out within the framework of the fulfilment of the tasks of Bielefeld University in accordance with HG NRW (NRW Higher Education Act), if necessary in connection with an order of the university to be named or by a special law, e.g. University Statistics Act, State Civil Servants Act, Staff Representation Act, Equal Opportunities Act.</p>
<p>The collection of personal data for user authentication is based on the consent of the data subjects as stated in <b>Article 6 (1) letter a GDPR</b>. The legal basis for the transmission of personal data is <b>Article 6 (1) letter c GDPR</b>.</p>
</div>
</div>
</div>
<div class="col s12">
<div class="card">
<div class="card-content">
<span class="card-title">§ 4 Data transmissions</span>
<p>Your personal data, which are processed by Bielefeld University for the purposes mentioned under 2. will not be transferred to third parties.</p>
<p>In individual cases, data may also be legally transmitted to third parties, for example, to law enforcement authorities for the investigation of criminal offences within the framework of the <b>Code of Criminal Procedure (StPO)</b>. If technical service providers are given access to personal data, this is done on the basis of a contract in accordance with <b>Article 28 GDPR</b>.</p>
</div>
</div>
</div>
<div class="col s12">
<div class="card">
<div class="card-content">
<span class="card-title">§ 5 Duration of processing / data deletion</span>
<p>Data processed for user authentication are deleted immediately after account deletion.</p>
</div>
</div>
</div>
<div class="col s12">
<div class="card">
<div class="card-content">
<span class="card-title">§ 6 Your rights as a data subject</span>
<p>As a data subject, you have certain rights under <b>GDPR</b> that you may assert at any time:</p>
<ul class="browser-default">
<li>the right to access information about whether or not personal data concerning you is processed, and if so, what categories of data are being processed (<b>Article 15 GDPR</b>),</li>
<li>the right to demand the rectification or completion of data concerning you (<b>Article 16 GDPR</b>),</li>
<li>the right to erasure of your personal data in accordance with <b>Article 17 GDPR</b>,</li>
<li>the right to demand the restriction of the processing of your data per <b>Article 18 GDPR</b>,</li>
<li>the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the processing based on consent before its withdrawal (<b>Article 7 (3) GDPR</b>),</li>
<li>the right to object to the future processing of your data in accordance of <b>Article 21 GDPR</b>,</li>
<li>the right to receive personal data concerning you and your account in a structured, common and machine-readable format in accordance of <b>Article 20 GDPR</b>.</li>
</ul>
<p>In addition to the aforementioned rights, you have the right to lodge a complaint with the data protection supervisory authority (<b>Article 77 GDPR</b>); for example, the university is under the supervision of the</p>
<ul>
<li>North Rhine-Westphalia State Commissioner</li>
<li>for Data Protection and Freedom of Information</li>
<li>(Landesbeauftragte für Datenschutz und</li>
<li>Informationsfreiheit Nordrhein-Westfalen)</li>
<li>Kavalleriestraße 2-4</li>
<li>40213 Düsseldorf, German</li>
</ul>
</div>
</div>
</div>
{% endblock %}
web/app/templates/main/terms_of_use.html.j2
+ 4
− 4
View file @ 49325ad2
......@@ -20,10 +20,10 @@
<div class="card-content">
<span class="card-title">§ 2 Right of use</span>
<p>(1) The nopaque platform is available to users exclusively for the purposes of teaching and research. Any other use, especially for business, commercial is not permitted. The following groups shall be entitled to use the nopaque platform:</p>
<p>
- students, teaching staff and employees at Bielefeld University<br>
- external researchers from outside the University Bielefeld
</p>
<ul class="browser-default">
<li>students, teaching staff and employees at Bielefeld University</li>
<li>external researchers from outside the University Bielefeld</li>
</ul>
<p>&nbsp;</p>
<p>(2) The use of the system is free of charge.</p>
<p>&nbsp;</p>
......
web/app/templates/nopaque.html.j2
+ 2
− 1
View file @ 49325ad2
......@@ -217,7 +217,8 @@
<div class="col s12 m3 offset-m1">
<h5 class="white-text">Legal Notice</h5>
<ul>
<li><a class="grey-text text-lighten-3" href="https://www.uni-bielefeld.de/(en)/impressum/">Legal Notice</a> / <a class="grey-text text-lighten-3">Privacy statement</a></li>
<li><a class="grey-text text-lighten-3" href="https://www.uni-bielefeld.de/(en)/impressum/">Legal Notice</a></li>
<li><a class="grey-text text-lighten-3" href="{{ url_for('main.privacy_policy') }}">Privacy statement (GDPR)</a></li>
<li><a class="grey-text text-lighten-3" href="{{ url_for('main.terms_of_use') }}">Terms of use</a></li>
<li></li>
</ul>
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment