Privacy Policy

1. Contents On This Page
  • Name and address of the responsible person
  • Name and address of the data protection officer
  • General information on data processing
  • Contact form and e-mail contact
  • Form input
  • Cookies
  • Registration
  • Rights of the data subject
2. Name and Address of the Responsible Person

The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is the

Institut für Wirtschaftsinformatik (extern)

Königsworther Platz 1
30167 Hannover
Phone +49 511 762 - 4978

represented by the head of the institute, Prof. Dr. Michael H. Breitner

Contact:

Prof. Dr. Michael H. Breitner
Phone +49 511 762 – 4901
Fax: +49 511 762 – 4013
E-Mail:

3. Name and Address of the Data Protection Officer

Data Protection Officer of Leibniz Universität Hannover:
Gottfried Wilhelm Leibniz University of Hannover
- Datenschutzbeauftragter -
Welfengarten 1
30167 Hannover
Phone +49 511 762-0
Fax +49 511 762-8258
E-Mail:

4. General Information on Data Processing

As a matter of principle, we process personal data of our users only to the extent that this is necessary to provide a functional website and our contents and services. If individual websites, web pages or functions carry out processing that deviates from this data protection declaration, the corresponding information will be provided in a separate data protection declaration.

5. Use of Contact Form and E-Mail Contact

A contact form is available on our website, which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. Your consent is obtained during the sending process for the data processing, and reference is made to this data protection declaration. Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation. The legal basis for the processing of the data is Art. 6 para. 1 lit. a) DSGVO if the user has given his consent. The legal basis for processing data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. e), para. 3 DSGVO in conjunction with. §3 NSDG and §3 NHG. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) DSGVO.
The processing of personal data from the input mask serves us solely to process the contact.
The other personal data processed during the submission process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the contact form's input mask and those sent by e-mail, this is the case when the respective conversation with the user has ended, and there are no legal storage obligations to the contrary. The conversation is ended when the circumstances indicate that the matter in question has been conclusivelyclarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
The user has the possibility to revoke his consent to the processing of personal data at any time.If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case unless there are legal obligations to retain data.

6. Form Input

If, in addition, there is the option of entering personal or business data (e. g., e-mail addresses, names, addresses) within the Internet offer, the disclosure of this data by the user takes place on an expressly voluntary basis. The legal basis for this processing is - unless otherwise stated or information is provided via a separate data protection declaration - Art. 6 para. 1 lit. a) DSGVO.
The information provided with regard to the self-created building configurations is provided on an expressly voluntary basis and is not understood as personal data (e.g. location, house size, etc.), but as input parameters required for the calculation.
This information will not be passed on to third parties. All input parameters are processed only to fulfill the purpose of the website.

7. Cookies

This website uses only necessary cookies.

Cookie Purpose Duration of Storage
CSRF Token Prevention of Cross Side Request Forgery (CSRF) attacks 1 Year
Session ID Session recognition Duration of the visit to the website (session)
8. Registration

8.1 Description and Scope of Data Processing

We offer users the opportunity to register on our website by providing personal data. The data is entered in an input mask and transmitted to us, and stored. The data is not passed on to third parties. The use of all offered services is permitted - if and so far technically possible and reasonable - without specification of any personal data or under specification of anonymized data or an alias. The following data is collected during the registration process:

  • E-mail address
  • Date and time of registration

As part of the registration process, the user's consent to the processing of this data is obtained.

8.2 Legal Basis for Data Processing

The legal basis for processing the data is Art. 6 (1) lit. a DSGVO if the user has given his consent.

8.3 Purpose of Data Processing

The processing of the e-mail address serves only to reset the password in case it has been forgotten.
Registration of the user is necessary for the provision of certain content and services on our website. This includes the storage of individually created building configuration scenarios in order to be able to view and edit them at a later time.

8.4 Duration of Storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for the data collected during the registration process when the registration on our website is cancelled or modified.

8.5 Additional Option: Sharing Scenarios with the Community

Users have the option to share selected scenarios of the building configuration with registered and non-registered users of the website. In doing so, an individual identification number is generated, which the user can actively share with other people. The possibility is explicitly on a voluntary basis, the consent of which must be actively obtained by the user. The shared information and parameters contained in the scenario do not reflect any personal data. The website operator does not pass on this data, which is at the discretion of the user.

8.6 Right to withdraw or cancel your consent

As a user, you have the option to cancel your registration at any time. You can have the data stored about you changed at any time. In doing so, all user data will be deleted and all scenarios of the building configuration linked to the user, including the scenarios released for sharing, will be deleted and can no longer be retrieved.
The change of data is possible via a form on the website.

9. Rights of the Data Subject

If personal data is processed by you, you are a data subject within the meaning of the GDPR and you are entitled to the following rights against the controller if the legal requirements are met:

  • Right to information pursuant to Art. 15 DSGVO
  • Right to rectification pursuant to Art. 16 DSGVO
  • Right to restriction of processing pursuant to Art. 18 DSGVO
  • Right to erasure pursuant to Art. 17 DSGVO
  • Right to information pursuant to Art. 19 DSGVO
  • Right to data portability pursuant to Art. 20 DSGVO
  • Right to object pursuant to Art. 21 DSGVO
  • Right to revoke the declaration of consent under data protection law pursuant to Art. 7 (3) DSGVO
  • Right to lodge a complaint with a supervisory authority

In addition, you have the right to object to data processing at any time. We will then no longer process your data unless there are compelling reasons for the processing worthy of protection or the processing serves the assertion, exercise or defense of legal claims. If you make use of the aforementioned rights, the responsible party will check whether the legal requirements are met.
You have the right to revoke your declaration of consent under data protection law at any time. The revocation ofconsent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority responsible for Leibniz Universität Hannover is:
The State Commissioner for Data Protection in Lower Saxony.
Prinzenstr. 5
30159 Hannover
Phone +49 511 120 - 4500
Fax +49 511 120 - 4599
E-Mail: