Privacy policy
Draft for review with the university's data protection officer. This page says which personal data are processed when you visit these pages of the Institute of Computer Engineering, why, and what rights you have. The German version is authoritative.
Controller
Universität zu Lübeck
represented by its President
Ratzeburger Allee 160
23562 Lübeck, Germany
Phone: +49 451 3101 1000
Email: praesident@uni-luebeck.de
The content of these pages is the responsibility of the Institute of Computer Engineering, see the legal notice.
The university's data protection officer
x-tention Informationstechnologie GmbH
Margot-Becke-Ring 37
69124 Heidelberg, Germany
Phone: +49 451 3101 1903
Email: datenschutz@uni-luebeck.de
When you visit these pages
The pages run on a server of the institute inside the university; no service provider is involved. For every request the web server records in a log:
- the IP address of your device,
- date and time of the request,
- the address requested, the server's answer and the amount of data sent,
- the page you came from (referrer) and your browser's identification.
The log serves the secure and reliable operation of the site: finding faults, detecting and fending off attacks. It is not combined with other data and not analysed to track visitors. The legal basis is Art. 6(1)(e) GDPR in conjunction with § 3 of the Schleswig-Holstein Data Protection Act (LDSG), the university's tasks, which include running its website. The logs are deleted after [period to be set in the review, for example 7 days].
Cookies and storage in your browser
These pages use no cookies for analysis or advertising and include no third-party services: fonts, pictures, videos and scripts all come from our own server. There is no tracking, no statistics tool and no social media plugin.
- django_language (cookie): remembers the language you chose (German or English), for one year.
- theme (browser storage): remembers whether you chose the light or the dark design. This value is not sent to the server.
- Only when staff log in: csrftoken (protects forms from misuse) and sessionid (keeps you logged in for the session).
These are strictly necessary for the function you asked for (§ 25(2) no. 2 TDDDG); no consent is required.
Login and AI assistants (staff only)
Staff log in with their account to edit pages. Processed are the user name, the name and the changes they make (who changed what and when). Staff can also connect an AI assistant to their account; for this the server stores an access token, which they can revoke at any time. What a connected assistant reads is processed by its provider under the provider's terms.
When you write to us
If you send us an email, we process your address and your message to deal with your request (Art. 6(1)(e) GDPR; for applications Art. 6(1)(b) GDPR and the rules on employee data). Emails are deleted when they are no longer needed and no retention obligation applies.
Links to other sites
These pages link to other services, for example the university's, Moodle, project websites and OpenStreetMap. Data reach their operators only when you follow a link; their privacy policies apply there.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Please contact the university's data protection officer.
Complaints
You can lodge a complaint with the supervisory authority:
Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein
Holstenstraße 98
24103 Kiel, Germany
www.datenschutzzentrum.de
As of 1 October 2026. The university's general privacy policy (in German): www.uni-luebeck.de/universitaet/datenschutz.html.