Privacy Policy
最后更新:
This document is not available in your language and is shown in English.
This is a convenience translation. In case of doubt, the German version is the legally binding one.
This Application (hereinafter referred to as “RoboTUM” or “this Application”) collects some Personal Data from its Users. This Privacy Policy describes how and why we collect, store, use, and share your information when you use our services. By using this Application, you agree to the collection and use of information in accordance with this policy.
This document can be printed for reference by using the print command in the settings of any browser.
1. Owner and Data Controller
RoboTUM
c/o NEXT Prototypes e.V.
Lichtenbergstr. 4a
85748 Garching bei München
Germany
Register of associations: VR 208020
Registering court: Amtsgericht München (Munich Local Court)
Owner contact phone: +49 (0) 15902141860
Owner contact email: bastian.steinlein@tum.de
2. Information in accordance with § 5 DDG (German Digital Services Act)
Information in accordance with § 5 DDG is provided above (see Owner and Data Controller).
Liability for Content
As a service provider, we are responsible for our own content on these pages under the general laws in accordance with § 7 (1) DDG. However, pursuant to §§ 8 to 10 DDG, we as a service provider are not obliged to monitor transmitted or stored third-party information, or to investigate circumstances that indicate illegal activity. Obligations to remove or block the use of information under the general laws remain unaffected by this. Liability in this respect is, however, only possible from the point in time at which knowledge of a specific infringement of the law is obtained. Upon becoming aware of such infringements, we will remove this content immediately.
Liability for External Links
Our pages contain links to external third-party websites over whose content we have no influence and for which we cannot assume any liability. The respective provider or operator of the linked pages is always responsible for the content of those pages.
3. Types of Data Collected
Among the types of Personal Data that this Application collects, by itself or through third parties, there are:
- Usage Data
- The data you enter in the application form: name, contact details, and the content of your answers
Complete details on each type of Personal Data collected are provided in the dedicated sections of this Privacy Policy or by specific explanation texts displayed prior to the Data collection.
Freely Provided Data: Personal Data may be freely provided by the User (for example, when contacting RoboTUM).
Usage Data: Collected automatically when using this Application (e.g., IP addresses, browser type, operating system).
Unless specified otherwise, all Data requested by this Application is mandatory. Failure to provide this Data may make it impossible for this Application to provide its services. Where this Application specifically states Data is not mandatory, Users are free not to communicate that Data without consequences to the availability or the functioning of the Service. Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner.
No cookies: this Application does not set cookies of its own and does not use tracking tools. The one exception is the embedded application form on the “Build With Us” page, which is provided by Notion and may set cookies or comparable storage within its own frame; see “Application Form (Notion)” below. That form is the only content on this site loaded from a third party.
The site stores two values locally in your browser: fcisar-theme, which
remembers whether you chose the light or the dark theme, and fcisar-lang,
which remembers the language version you last opened. These are not cookies.
They are kept in localStorage, which means they are never sent to the server;
they contain no identifier, and nothing about you can be derived from them.
Because both only carry out a setting you chose yourself, they are strictly
necessary within the meaning of § 25 (2) no. 2 TDDDG and require no consent. You
can delete them at any time by clearing your browser’s site data.
Users are responsible for any third-party Personal Data obtained, published, or shared through this Application and confirm that they have the third party’s consent to provide the Data to the Owner.
4. Mode and Place of Processing the Data
Methods of Processing
The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.
Data processing is carried out using computers and/or IT-enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Owner, in some cases, the Data may be accessible to certain types of persons in charge involved with the operation of this Application (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time.
Legal Basis of Processing
The Owner may process Personal Data relating to Users if one of the following applies:
- Users have given their consent for one or more specific purposes.
- Provision of Data is necessary for the performance of a contract with the User and/or for any pre-contractual obligations.
- Processing is necessary for compliance with a legal obligation to which the Owner is subject.
- Processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Owner.
- Processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.
In any case, the Owner will gladly help to clarify the specific legal basis that applies to the processing. In particular, whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.
Place
The Data is processed at the Owner’s operating offices and in any other places where the parties involved in the processing are located.
The server on which this Application runs is located in Germany. Personal Data processed by this Application itself therefore stays within the European Union.
One exception exists: the application form embedded on the “Build With Us” page is operated by Notion Labs, Inc. in the United States. Opening that page, and submitting the form, transfers Data to a third country. Details, including the legal basis for that transfer, are in “Application Form (Notion)” below. No other part of this Application transfers Data outside the European Union.
Retention Time
Personal Data shall be processed and stored for as long as required by the purpose they have been collected for. Therefore:
- Personal Data collected for contract performance between the Owner and the User shall be retained until such contract has been fully performed.
- Personal Data collected for the purposes of the Owner’s legitimate interests shall be retained as long as needed to fulfill such purposes.
The Owner may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing and such consent is not withdrawn. Furthermore, the Owner may be obliged to retain Personal Data for a longer period whenever required by law or by an order of an authority.
Once the retention period expires, Personal Data shall be deleted. Therefore, the right to access, erasure, rectification, and data portability cannot be enforced after the expiration of the retention period.
5. The Purposes of Processing
The Data concerning the User is collected to allow the Owner to:
- Provide its Service
- Process applications submitted through the application form
- Comply with its legal obligations
- Respond to enforcement requests
- Protect its rights and interests (or those of its Users or third parties)
- Detect malicious or fraudulent activity
- Conduct Analytics
For specific information about the Personal Data used for each purpose, the User may refer to the section “Detailed Information on the Processing of Personal Data.”
6. Detailed Information on the Processing of Personal Data
Application Form (Notion)
The application form on the “Build With Us” page is not hosted by us. It is provided by Notion Labs, Inc., United States (“Notion”) and embedded into that page in an inline frame.
What happens when you open the page. The form is loaded from Notion’s servers as soon as the page opens, without any further action on your part. Your browser therefore contacts Notion directly and transmits, at a minimum, your IP address, the time of the request, and the technical data your browser sends with any request (browser type and version, operating system, referring page). We have no influence over this transmission and no access to the data it produces. Notion may also store data on your device within its own frame.
What happens when you submit the form. The answers you enter — including your name, your contact details, and anything you write in a free-text field — are transmitted to Notion, stored there, and made available to the team leads of FC Isar Robotics. We use these answers solely to process your application and to contact you about it.
Legal basis. Processing of the data you enter is based on Art. 6 (1) (b) GDPR, as it serves to take steps at your request prior to entering into a relationship with the team, and additionally on Art. 6 (1) (f) GDPR, our legitimate interest in a workable application process. The loading of the embed itself is likewise based on Art. 6 (1) (f) GDPR, our legitimate interest in offering an application route without operating our own form infrastructure.
Processing on our behalf. Notion acts as a processor for us within the meaning of Art. 28 GDPR. The relevant contract is Notion’s Data Processing Addendum, which is incorporated by reference into the terms under which we use the service and applies wherever Notion processes personal data subject to the GDPR on our behalf. Its current text is published at notion.so/Data-Processing-Addendum.
Transfer to a third country. Notion processes data in the United States. Notion Labs, Inc. has certified to the U.S. Department of Commerce that it adheres to the EU–U.S. Data Privacy Framework. The transfer therefore takes place on the basis of the European Commission’s adequacy decision of 10 July 2023 for that framework (Art. 45 GDPR). Certified organisations are listed at dataprivacyframework.gov. In addition, the Data Processing Addendum named above incorporates the European Commission’s Standard Contractual Clauses (Art. 46 (2) (c) GDPR), which cover the transfer independently of the certification.
Notion’s own privacy policy, which governs what Notion does with the data as a controller in its own right, is at notion.com/trust/privacy-policy.
Retention. Applications are kept for as long as they are needed for the application process and any resulting collaboration, and are deleted afterwards.
How to avoid it. If you do not want your data transmitted to Notion, do not open the “Build With Us” page and do not use the form. You can apply and reach us by e-mail instead; the addresses are on the contact page and at the end of this document. Nothing is lost by choosing that route.
Analytics
This Application may use third-party analytics tools to monitor and analyze web traffic. These tools help us understand how Users interact with this Application, so we can improve its functionality and user experience. The Personal Data collected can include Usage Data (e.g., pages visited, time spent on each page, and other similar information). Such tools are only used without cookies and without tracking across websites.
7. The Rights of Users
Users may exercise certain rights regarding their Data processed by the Owner. In particular, Users have the right to do the following:
- Withdraw their consent at any time.
- Object to processing of their Data. Users have the right to object if the processing is carried out on a legal basis other than consent.
- Access their Data.
- Verify and seek rectification.
- Restrict the processing of their Data.
- Have their Personal Data deleted or otherwise removed.
- Receive their Data and have it transferred to another controller.
- Lodge a complaint. Users have the right to bring a claim before their competent data protection authority.
Details About the Right to Object to Processing
Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the Owner, or for the legitimate interests pursued by the Owner, Users may object to such processing by providing a ground related to their particular situation.
Users must know that, however, should their Personal Data be processed for direct marketing purposes, they can object to that processing at any time without providing any justification.
How to Exercise These Rights
Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. These requests can be exercised free of charge and will be addressed as early as possible and always within one month.
8. Additional Information About Data Collection and Processing
Legal Action
The User’s Personal Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action arising from improper use of this Application or the related Services. The User declares to be aware that the Owner may be required to reveal personal data upon request of public authorities.
Additional Information About User’s Personal Data
In addition to the information contained in this Privacy Policy, this Application may provide the User with additional and contextual information concerning particular Services or the collection and processing of Personal Data upon request.
System Logs and Maintenance
For operation and maintenance purposes, this Application and any third-party services may collect files that record interaction with this Application (System logs) or use other Personal Data (such as the IP Address) for this purpose.
Information Not Contained in This Policy
More details concerning the collection or processing of Personal Data may be requested from the Owner at any time. Please see the contact information at the beginning of this document.
How “Do Not Track” Requests Are Handled
This Application does not support “Do Not Track” requests. To determine whether any of the third-party services used honor “Do Not Track” requests, please read their privacy policies.
9. Changes to This Privacy Policy
The Owner reserves the right to make changes to this Privacy Policy at any time by notifying its Users on this page, within this Application, and/or — if technically and legally feasible — by sending a notice via any contact information available to the Owner. It is strongly recommended to check this page often.
Should the changes affect processing activities performed on the basis of the User’s consent, the Owner shall collect new consent from the User, where required.
10. Definitions and Legal References
Personal Data (or Data): Any information that directly, indirectly, or in connection with other information allows for the identification of a natural person.
Usage Data: Information collected automatically through this Application (or third-party services employed in this Application), which can include: the IP addresses or domain names of the computers utilized by the Users, the URI addresses, the time of the request, etc.
User: The individual using this Application who must coincide with or be authorized by the Data Subject.
Data Subject: The natural person to whom the Personal Data refers.
Data Processor (or Data Supervisor): The natural or legal person, public authority, agency, or other body which processes Personal Data on behalf of the Controller.
Data Controller (or Owner): The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data.
If you have any questions about this Privacy Policy, please contact us at:
Email: bastian.steinlein@tum.de
Phone: +49 (0) 15902141860
