for the website of Hydrogen Center Bavaria (German: Zentrum Wasserstoff.Bayern; H2.B) at h2.bayern<\/em><\/p>\n This Privacy Policy explains how personal data is processed when you visit the website of Hydrogen Center Bavaria (H2.B) or use the contact, information, registration and appointment services offered there.<\/p>\n Personal data means any information relating to an identified or identifiable natural person. This includes, for example, your name, email address, telephone number, IP address and information about your professional activity or an organisation.<\/p>\n H2.B is an institution of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU).<\/p>\n The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:<\/p>\n Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU) FAU is a state institution and at the same time a corporation under public law. It is legally represented by its President.<\/p>\n Within FAU, the following organisational unit is responsible for the content and operation of this website:<\/strong><\/p>\n Hydrogen Center Bavaria (H2.B) Data Protection Officer of FAU For general questions about the processing of your data by H2.B, please contact info@h2.bayern<\/strong><\/p>\n We process personal data only to the extent necessary to provide this website, perform the statutory and public tasks of FAU and H2.B, or handle the services you use.<\/p>\n Depending on the processing activity, the following legal bases in particular may apply:<\/p>\n Where we request consent, providing it is voluntary. You may withdraw your consent at any time with effect for the future. This does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.<\/p>\n This website is hosted by the following service provider:<\/p>\n ALL-INKL.COM \u2013 Neue Medien M\u00fcnnich The hosting provider supplies the technical infrastructure required to operate the website. To the extent that the provider processes personal data on our behalf, a data processing agreement pursuant to Art. 28 GDPR is in place.<\/p>\n In order for a website to be delivered to your device, your IP address must be technically processed during the connection. However, no visitor or access logs that can be accessed by us or evaluated for our own purposes are enabled with the hosting provider for the H2.B website.<\/p>\n In particular, H2.B does not permanently store or evaluate visitors’ IP addresses with the hosting provider. This does not affect short-term technical processing within the hosting provider’s infrastructure where such processing is required solely to establish the connection, deliver the website or ensure technical security.<\/p>\n Within the WordPress content management system used on this website, technical events may be logged where this is necessary for operation, troubleshooting, maintenance or security. Visitor IP addresses are not stored in these WordPress logs.<\/p>\n Depending on the technical event, the following information in particular may be processed:<\/p>\n The processing is carried out exclusively to ensure functionality, identify and remedy technical errors, and protect the website and its administrative areas. If, in an individual case, technical log data can be related to an identifiable person, the processing is based on Art. 6(1)(e) GDPR in conjunction with Arts. 4 and 5 BayDSG or, where applicable, Art. 6(1)(f) GDPR.<\/p>\n Technical log data is deleted as soon as it is no longer required for the relevant operational, maintenance or security purpose. In the event of a specific fault or security incident, the affected data may continue to be processed until the matter has been conclusively resolved.<\/p>\n Technical log data is not used to analyse the usage behaviour of individual visitors, recognise users across multiple page views, create personal usage profiles or personalise advertising.<\/p>\n This website uses an encrypted HTTPS connection. This protects data that you transmit to us from unauthorised access while it is being transferred.<\/p>\n Please note that communication by unencrypted email may generally involve security risks. Therefore, please send particularly confidential information only after prior consultation with us.<\/p>\n This website uses technically necessary cookies or comparable storage technologies. These are required to provide basic functions, for example to store privacy and cookie settings, provide security functions and technically enable forms.<\/p>\n The storage of information on, or access to information in, your device is based on Section 25(2) no. 2 TDDDG. The subsequent processing of personal data is based on Art. 6(1)(e) GDPR in conjunction with Arts. 4 and 5 BayDSG or, where applicable, Art. 6(1)(f) GDPR.<\/p>\n Cookies that are not technically necessary, analytics or marketing technologies, and external media are used or loaded only if you have previously consented through the consent management system.<\/p>\n The legal bases are Section 25(1) TDDDG for the storage of information on, or access to information in, your device and Art. 6(1)(a) GDPR for the subsequent processing of personal data.<\/p>\n You may change your selection at any time using the cookie settings available on the website or withdraw consent with effect for the future. The cookies and services currently used are explained there according to their purpose and function.<\/p>\n To ensure that your selection can be applied and, where necessary, demonstrated, the selected settings, the time of selection, a technical identifier and the version of the consent text used may be processed. This processing is carried out to comply with data protection accountability and evidentiary obligations on the basis of Art. 6(1)(c) GDPR in conjunction with Art. 5(2) and Art. 7(1) GDPR.<\/p>\n Data relating to the consent decision is deleted when it is no longer required to apply the selection and demonstrate the consent, and where there are no statutory reasons for further storage.<\/p>\n We use the WordPress plugin Real Cookie Banner to manage the cookies, comparable storage technologies and services requiring consent that are used on this website.<\/p>\n The software is developed by:<\/p>\n devowl.io GmbH Real Cookie Banner is used to:<\/p>\n Data Processed<\/strong><\/p>\n When the consent banner is used, the following information in particular may be processed:<\/p>\n IP addresses are not stored as part of the consent documentation.<\/p>\n No geolocation or regional restriction based on the IP address takes place.<\/p>\n Processing and Storage in WordPress<\/strong><\/p>\n Real Cookie Banner is installed as a plugin directly in this WordPress website. The documented consent decisions are stored in the WordPress database on our web server.<\/p>\n During normal operation, consent data is not transmitted to devowl.io GmbH for processing. Merely displaying or using the consent banner does not give devowl.io GmbH access to the documented consent decisions.<\/p>\n A technically necessary cookie or comparable local storage technology is used in the browser so that your selection can be applied during subsequent page views.<\/p>\n Legal Bases<\/strong><\/p>\n Storing the consent decision on your device or accessing this information is technically necessary and is based on Section 25(2) no. 2 TDDDG.<\/p>\n The processing and documentation of your selection is carried out to comply with our statutory accountability and evidentiary obligations on the basis of Art. 6(1)(c) GDPR in conjunction with Art. 5(2) and Art. 7(1) GDPR.<\/p>\n Where consent management is additionally necessary for the data protection-compliant operation of the website, the processing is also based on Art. 6(1)(e) GDPR in conjunction with Arts. 4 and 5 BayDSG.<\/p>\n Storage Period<\/strong><\/p>\n Documented consent decisions are stored only for as long as necessary to apply your selection and comply with statutory evidentiary obligations.<\/p>\n The data is deleted when it is no longer required for these purposes and where no statutory documentation obligations or requirements relating to the establishment, exercise or defence of legal claims prevent deletion.<\/p>\n Changing and Withdrawing Your Selection<\/strong><\/p>\n You can view and change your consent decision at any time using the \u201cCookie Settings\u201d menu item available on the website.<\/p>\n Any consent given can be withdrawn there at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.<\/p>\n Technically necessary services cannot be disabled where they are required to provide the website or store your privacy decision.<\/p>\n No personalised audience measurement or user tracking takes place on this website. No personal usage profiles are created for advertising or marketing purposes.<\/p>\n If an analytics tool is used in the future, this Privacy Policy will be updated accordingly before the tool is activated. An analytics service that is not technically necessary will be loaded only after prior consent.<\/p>\n If you contact us by email, telephone or contact form, we process the information you provide in order to handle your enquiry.<\/p>\n Depending on the means of contact and the content of your enquiry, the following information in particular may be processed:<\/p>\n The data is used to review your enquiry, assign it to the appropriate contact person, respond to it and, where applicable, take any further steps requested by you.<\/p>\n Where handling your enquiry serves the performance of the public tasks of H2.B or FAU, the processing is based on Art. 6(1)(e) GDPR in conjunction with Arts. 4 and 5 BayDSG and the relevant provisions of higher education law.<\/p>\n If your enquiry concerns entering into or performing a contract, Art. 6(1)(b) GDPR is an additional or overriding legal basis. As a rule, consent is not required for processing the information necessary to handle your enquiry.<\/p>\n Information marked as mandatory is required in order to process your enquiry. Without this information, it may not be possible to process your enquiry, or processing may be limited. Voluntary information is not required in order to submit the form.<\/p>\n Please upload only files that are necessary for your enquiry and that you are authorised to transmit. In particular, please do not submit health data, copies of identity documents, bank details, login credentials or other particularly sensitive information unless this is expressly required and has been agreed with us in advance.<\/p>\n For structured processing, form data may be transferred automatically via Make to Bigin by Zoho or to other systems required for the relevant procedure. Only the information necessary for the specific purpose is processed.<\/p>\n Within FAU and H2.B, access to your information is restricted to employees who require it to handle your enquiry. Information is transferred to other bodies or project partners only where this is necessary to handle an enquiry expressly directed towards that purpose, where a statutory basis exists, or where you have given prior consent.<\/p>\n The data is deleted when your enquiry has been conclusively handled, no further communication is expected, and no statutory, contractual, archival or documentation-related reasons require further processing.<\/p>\n Brevo GmbH We use Brevo to send our newsletter, event announcements, press information and other information services that have been expressly requested.<\/p>\n The following data in particular may be processed:<\/p>\n The legal basis for sending communications is your consent pursuant to Art. 6(1)(a) GDPR. Registration and confirmation data is processed to demonstrate valid consent on the basis of Art. 6(1)(c) GDPR in conjunction with Art. 5(2) and Art. 7(1) GDPR.<\/p>\n After registering, you will receive an email asking you to confirm your registration. You will be added to the selected mailing list only after this confirmation. Unconfirmed registrations are deleted as soon as they are no longer required to carry out and document the registration process.<\/p>\n Brevo processes the data on our behalf. A data processing agreement pursuant to Art. 28 GDPR is in place with Brevo. Brevo may use other group companies and sub-processors to provide its services.<\/p>\n Where personal data is processed outside the European Union or the European Economic Area, this takes place only under the conditions set out in Arts. 44 et seq. GDPR, in particular on the basis of an adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses and, where applicable, supplementary protective measures.<\/p>\n We use Brevo to evaluate opening and clicking behaviour on an individual basis. For this purpose, invisible tracking pixels may be included in emails and links may be designed as measurable redirect links. When a message is opened or a link is clicked, Brevo may attribute the relevant event to a specific recipient.<\/p>\n The information processed may include, in particular, the email address or a recipient identifier, the campaign or message identifier, delivery and receipt status, the time and frequency of openings, links clicked, the IP address, and browser and device information. The evaluation is used to measure the reach and use of our information services, improve content and delivery design, and identify which topics are of interest to individual recipients.<\/p>\n The legal basis for personalised performance measurement is your separate consent pursuant to Art. 6(1)(a) GDPR. Where tracking pixels, redirect links or comparable technologies store information on your device or access information stored on it, this takes place on the basis of your consent pursuant to Section 25(1) TDDDG.<\/p>\n Consent to personalised open and click tracking is obtained separately from consent to receive the newsletter. You may withdraw your consent to performance measurement at any time with effect for the future without unsubscribing from the newsletter as a whole. To do so, please contact info@h2.bayern. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.<\/p>\n You may unsubscribe from an information service at any time using the unsubscribe link contained in the relevant message or by sending a notice to info@h2.bayern. After unsubscribing, your address will no longer be used to send the relevant information service. Unsubscribing also ends personalised performance measurement for future messages from that information service.<\/p>\n Data required solely for sending communications is deleted or blocked as soon as it is no longer needed for that purpose. Data used to demonstrate consent and its withdrawal may continue to be processed where this is necessary to comply with statutory evidentiary obligations or for the establishment, exercise or defence of legal claims.<\/p>\n Zoho Corporation GmbH We use the Bigin by Zoho customer relationship management system to manage professional contacts in a structured manner and handle enquiries. The European data region has been selected for the Zoho account used by us. Service data stored in Bigin is stored on servers within the European Union.<\/p>\n Zoho processes the data on our behalf. A data processing agreement pursuant to Art. 28 GDPR is in place with Zoho Corporation GmbH.<\/p>\n The following data in particular may be processed in Bigin:<\/p>\n As a rule, only professional contact details and information required for the relevant communication, cooperation or handling of a matter are stored. Special categories of personal data within the meaning of Art. 9 GDPR are generally not stored in the CRM system.<\/p>\n The CRM system is used in particular to handle enquiries, assign contacts to the responsible employees, document communications, manage contact persons at organisations, prepare and follow up events and meetings, handle cooperation and networking enquiries, and record consent, unsubscribe requests and objections.<\/p>\n Where contact management is necessary to perform the public tasks of H2.B and FAU, the processing is based on Art. 6(1)(e) GDPR in conjunction with Arts. 4 and 5 BayDSG and the relevant provisions of higher education law. Art. 6(1)(b) GDPR may apply to contract-related matters. Art. 6(1)(a) GDPR applies to information services based on consent.<\/p>\n Contact data may be imported into Bigin in particular from contact and registration forms, from Zeeg when an appointment is booked, from Brevo in connection with the status of a newsletter registration, and through automatic transfers using Make.<\/p>\n A contact enquiry, appointment booking or registration as an Alliance partner does not automatically result in inclusion in a newsletter mailing list. Separate consent is required for this.<\/p>\n Within H2.B, access to data stored in Bigin is restricted to employees who require it for their respective tasks. Access rights are assigned according to responsibilities and duties.<\/p>\n Where Zoho uses additional sub-processors or access from a third country is required in connection with support or security services, processing takes place only under the conditions set out in Arts. 44 et seq. GDPR and in accordance with the data processing agreement.<\/p>\n Contact data is processed in Bigin only for as long as it is required for the relevant purpose, to handle the matter, or for an ongoing cooperation. In particular, data is deleted or corrected when an enquiry has been conclusively handled, a cooperation or Alliance partnership has ended, a person is no longer acting as a contact person, or the data is clearly outdated.<\/p>\n Before deletion, we check whether any statutory, contractual or archival retention obligations apply or whether the data is still required for the establishment, exercise or defence of legal claims.<\/p>\n We use Make to technically automate certain workflows and transfer data between the systems used. According to the general terms and conditions, the provider of the Make services is Celonis, Inc., New York, USA.<\/p>\n The European Union data region has been selected for the H2.B organisation. Organisational and execution data intended for carrying out the automations is therefore generally processed in the EU data region.<\/p>\n Make processes personal data on our behalf. A data processing agreement pursuant to Art. 28 GDPR is in place.<\/p>\n Make is used, for example, to transfer data in a controlled manner between forms on the website, Zeeg, Bigin by Zoho, Brevo and, where applicable, internal email or administration systems.<\/p>\n The data processed depends on the relevant automated procedure. It may include, in particular, names and professional contact details, organisation and role, the content and time of an enquiry, appointment and booking data, information relating to a newsletter registration, consent and unsubscribe status, internal procedure identifiers, and technical status and error messages.<\/p>\n Only the data required for the relevant automated procedure is transferred via Make. Make is not used to create personal behavioural, interest or probability profiles.<\/p>\n Make does not establish an independent legal basis for processing. The legal basis depends on the underlying procedure. Depending on the procedure, processing therefore takes place in particular on the basis of Art. 6(1)(a), (b) or (e) GDPR.<\/p>\n Make may use group companies and sub-processors. Where personal data is processed outside the European Union or the European Economic Area, this takes place only under the conditions set out in Arts. 44 et seq. GDPR. Safeguards may include, in particular, an adequacy decision, participation in the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses together with supplementary protective measures.<\/p>\n Make may temporarily process execution and status information to carry out, monitor and troubleshoot automated workflows. This may include timestamps, status information, internal process and system identifiers, information about source and target systems, technical input and output data, and error messages.<\/p>\n Data processed in Make is stored only for as long as necessary to technically carry out the relevant workflow, analyse errors, ensure functionality or handle a specific matter. Make is not used as a permanent archive or as the primary system for personal contact data.<\/p>\n Zeeg GmbH We use the Zeeg appointment scheduling service to arrange certain meetings, consultation hours and other appointments.<\/p>\n When you schedule an appointment via Zeeg, the following data in particular may be processed: your name, email address, organisation or company, position or role, selected type of appointment, requested appointment time, time zone, messages entered by you or answers to booking questions, and information relating to confirmations, changes and cancellations.<\/p>\n The processing is carried out to display available appointments, receive and manage your booking, coordinate with the persons involved, send appointment confirmations and reminders, and handle changes or cancellations.<\/p>\n Please do not enter health data, login credentials or other particularly sensitive information in free-text fields.<\/p>\n Where the appointment serves the performance of H2.B’s public tasks, processing is based on Art. 6(1)(e) GDPR in conjunction with Arts. 4 and 5 BayDSG. Where scheduling the appointment serves pre-contractual measures or the performance of a contract, processing is based on Art. 6(1)(b) GDPR.<\/p>\n Zeeg processes appointment booking data on our behalf. A data processing agreement pursuant to Art. 28 GDPR is in place with Zeeg. According to the provider, appointment scheduling data is processed on servers in Germany or within the European Union.<\/p>\n Data provided when booking an appointment may be transferred automatically via Make to Bigin and to the calendar and communication systems required to conduct the appointment. Only information necessary for appointment management and contact handling is transferred.<\/p>\n Booking an appointment does not result in inclusion in a newsletter or information mailing list. Separate consent is required for this.<\/p>\n Appointment booking data is deleted when it is no longer required to conduct and follow up the appointment and where no statutory, contractual or documentation-related reasons require further processing. Where relevant contact data is transferred to Bigin for the further handling of a matter, the criteria described there apply to that data.<\/p>\n We embed maps provided by Google Maps to display locations and assist with route planning. For users in the European Economic Area, the provider is generally:<\/p>\n Google Ireland Limited Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, may also be involved in processing in connection with the provision of Google Maps.<\/p>\n When Google Maps is loaded, a direct connection is established between your browser and Google’s servers. The following data in particular may be transmitted to or processed by Google:<\/p>\n If you are signed in to a Google account while using the service, Google may associate the processing with your Google account. We do not have complete control over the scope, purposes and storage period of processing by Google.<\/p>\n Google Maps is loaded only after you have consented to the use of external map content through the consent management system. No connection to Google Maps is established before you give consent; a placeholder may be displayed instead of the map.<\/p>\n Where Google Maps stores information on your device or accesses information stored on it, the legal basis is Section 25(1) TDDDG. The legal basis for the subsequent processing of personal data is Art. 6(1)(a) GDPR.<\/p>\n You may withdraw your consent at any time with effect for the future using the cookie settings. Following withdrawal, Google Maps content will no longer be loaded during future page views until you give consent again.<\/p>\n Where Google processes data generated when Google Maps is loaded and used for its own purposes, Google acts as an independent controller. Further processing is governed by Google’s privacy policies and settings.<\/p>\n Further information on data protection at Google: Google Privacy Policy<\/a> and Google Maps\/Google Earth Additional Terms of Service<\/a>.<\/p>\n Google operates servers at various locations worldwide. It therefore cannot be ruled out that personal data may also be processed outside the European Union or the European Economic Area, in particular in the USA.<\/p>\n According to its own statements, Google LLC is certified under the EU-US Data Privacy Framework. Where no adequacy decision applies to a processing activity, Google may use other appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses.<\/p>\n As a rule, we do not store any Google Maps usage data of our own in connection with the mere embedding of the map. The storage period for data processed by Google under its own responsibility depends on the type and purpose of the data, your Google account and device settings, and Google’s privacy policies.<\/p>\n Depending on the service you use, a chain of processing activities involving several of the systems described above may arise.<\/p>\n For example, when registering for an event, an enquiry may initially be recorded in WordPress, transferred automatically via Make, assigned in Bigin to an existing organisation or contact person, and confirmed via Brevo.<\/p>\n When registering for a newsletter, the registration may be recorded through a form, the confirmed registration transferred to Brevo via Make, and the consent or unsubscribe status additionally documented in Bigin.<\/p>\n The systems involved are used only for the relevant purpose communicated to the data subjects. Transfers are limited to the data required. An appointment booking, contact enquiry or Alliance registration is not treated as consent to receive a newsletter.<\/p>\n If you apply on behalf of an organisation for admission to the Bavarian Hydrogen Alliance or are named as a contact person for an Alliance partner, the following data in particular may be processed: your name, professional contact details, role, organisation, website, field of activity, information about hydrogen-related activities, projects, interests and networking requests, as well as communication and process data.<\/p>\n The processing is carried out to review and handle the application for admission, administer the Alliance partnership, communicate with you, provide Alliance-related information, organise events and consultation hours, and facilitate networking and introductions to contacts or project partners.<\/p>\n The legal basis is Art. 6(1)(e) GDPR in conjunction with Arts. 4 and 5 BayDSG and the provisions of higher education law applicable to H2.B’s activities. Where a membership or user relationship comparable to a contractual relationship is established, Art. 6(1)(b) GDPR may also apply.<\/p>\n Information about Alliance organisations may be published in a public directory where this forms part of the Alliance concept and the organisation has been informed accordingly.<\/p>\n Personal contact details of a specific contact person are published or transferred to other Alliance or project partners only where this is necessary for the agreed Alliance service, the data subject has personally requested the introduction, or separate consent has been given.<\/p>\n The data is processed for as long as it is required for the Alliance partnership, contact facilitation or the performance of tasks. If the contact person changes, the previous contact person’s data is removed from active directories unless there are reasons for further retention.<\/p>\n Where registration for an H2.B event is offered through this website, we process the information requested in the relevant registration form. This may include, in particular, your name, professional contact details, organisation, role, selected programme items and organisational information.<\/p>\n The processing is carried out to organise, conduct and follow up the event. The legal basis is Art. 6(1)(e) GDPR in conjunction with Arts. 4 and 5 BayDSG. For paid events or other contractual relationships, Art. 6(1)(b) GDPR is an additional legal basis.<\/p>\n Where necessary, separate consent is obtained for voluntary publications, photographs, participant lists or additional information communications. If an event is organised jointly with a cooperation partner, you will be informed during the registration process of any necessary data transfer or joint controllership.<\/p>\n Event data is deleted when it is no longer required to conduct and follow up the event and where no statutory, accounting-related, archival or documentation-related reasons require further processing.<\/p>\n If you apply for a position at H2.B, your application data will be processed by H2.B in accordance with the separate privacy information applicable to recruitment procedures.<\/p>\n If a job advertisement refers to an FAU application portal or another website, the privacy information provided there also applies. Please do not submit application documents through the general contact form where the job advertisement specifies a different application channel.<\/p>\n This website contains links to third-party websites, in particular profiles on social networks and websites operated by partner organisations, event organisers and other external providers.<\/p>\n As a rule, ordinary external links do not establish a connection to the relevant third-party provider before you click them. Only when you select such a link do you leave our website. The third-party provider may then process, in particular, your IP address, browser information, the page accessed, and the date and time of access.<\/p>\n The relevant third-party provider is generally responsible for the subsequent processing. Its privacy policies apply. External content or social media components that establish a connection to a third-party provider as soon as an H2.B page is opened are loaded only after you have given prior consent.<\/p>\n Within H2.B, access to personal data is restricted to the bodies that require it for the purposes described in each case.<\/p>\n In addition, data may be transferred in particular to the following categories of recipients:<\/p>\n Service providers that process personal data on our behalf are carefully selected and contractually bound in accordance with Art. 28 GDPR.<\/p>\n Personal data is transferred to countries outside the European Union or the European Economic Area only where this is necessary for the relevant purpose and permitted under data protection law.<\/p>\n Where no adequacy decision of the European Commission exists, a transfer generally takes place only where appropriate safeguards within the meaning of Arts. 46 et seq. GDPR are in place, for example on the basis of the European Commission’s Standard Contractual Clauses. Where necessary, additional technical and organisational protective measures are implemented.<\/p>\n Personal data is stored only for as long as necessary for the relevant processing purpose.<\/p>\n In particular, data is deleted when:<\/p>\n Before deletion, we check whether statutory, contractual, budgetary, archival or other documentation and retention obligations apply, or whether the data is still required for the establishment, exercise or defence of legal claims.<\/p>\n The need for continued storage is reviewed regularly. Personal data that is no longer required or is clearly outdated is deleted, corrected or, where sufficient for statistical or documentary purposes, anonymised.<\/p>\n Where the statutory requirements are met, you have the following rights in particular:<\/p>\n To exercise your rights, you may contact info@h2.bayern, FAU or the Data Protection Officer. Please note that individual rights may be restricted by statutory provisions.<\/p>\n You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you where the processing is based on Art. 6(1)(e) or (f) GDPR.<\/p>\n We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.<\/p>\n You have the right to lodge a complaint with a data protection supervisory authority concerning the processing of your personal data. For FAU as a Bavarian public body, the competent authority is generally:<\/p>\n The Bavarian State Commissioner for Data Protection No decision based solely on automated processing, including profiling within the meaning of Art. 22 GDPR, takes place in connection with this website.<\/p>\n We review this Privacy Policy regularly and update it when the legal situation, the technical systems used or our processing activities change.<\/p>\n Last updated: 17 July 2026<\/p>\n","protected":false},"excerpt":{"rendered":"1. Scope<\/h2>\n
2. Controller<\/h2>\n
\n<\/strong>Freyeslebenstra\u00dfe 1
\n91058 Erlangen
\nGermany
\nEmail: poststelle@fau.de<\/p>\n
\nF\u00fcrther Stra\u00dfe 250
\n90429 Nuremberg
\nGermany
\nTelephone: +49 911 5302-99236
\nEmail: info@h2.bayern<\/strong><\/p>\n3. Data Protection Officer<\/h2>\n
\n<\/strong>Klaus Hoogestraat
\nc\/o ITM Gesellschaft f\u00fcr IT-Management mbH
\nB\u00fcrgerstra\u00dfe 81
\n01127 Dresden
\nGermany
\nTelephone: +49 9131 85-25860
\nEmail: datenschutzbeauftragter@fau.de<\/p>\n4. General Principles of Data Processing<\/h2>\n
\n
5. Provision and Hosting of the Website<\/h2>\n
5.1 Hosting Provider<\/h3>\n
\n<\/strong>Owner: Ren\u00e9 M\u00fcnnich
\nHauptstra\u00dfe 68
\n02742 Friedersdorf
\nGermany<\/p>\n5.2 Technically Necessary Processing and Logging<\/h3>\n
5.3 Technical Logs Within WordPress<\/h3>\n
\n
5.4 No Audience Measurement Based on Log Data<\/h3>\n
6. Encrypted Transmission<\/h2>\n
7. Cookies, Local Storage Technologies and Consent Management<\/h2>\n
7.1 Technically Necessary Storage<\/h3>\n
7.2 Services Requiring Consent<\/h3>\n
7.3 Documentation of Your Selection<\/h3>\n
7.4 Consent Management with Real Cookie Banner<\/h3>\n
\nTannet 12
\n94539 Grafling
\nGermany<\/strong><\/p>\n\n
\n
8. No Personalised Web Analytics<\/h2>\n
9. Contact by Email, Telephone and Contact Form<\/h2>\n
9.1 Scope and Purpose of Processing<\/h3>\n
\n
9.2 Legal Bases<\/h3>\n
9.3 Required Information and File Uploads<\/h3>\n
9.4 Further Processing in the Systems Used<\/h3>\n
10. Newsletters and Information Communications Using Brevo<\/h2>\n
10.1 Provider and Purposes<\/h3>\n
\n<\/strong>K\u00f6penicker Stra\u00dfe 126
\n10179 Berlin
\nGermany<\/p>\n\n
10.2 Legal Basis and Double Opt-In<\/h3>\n
10.3 Processing on Our Behalf and Possible Processing in Third Countries<\/h3>\n
10.4 Personalised Open and Click Tracking<\/h3>\n
10.5 Withdrawal, Unsubscribing and Storage Period<\/h3>\n
11. Contact and Relationship Management with Bigin by Zoho<\/h2>\n
11.1 Provider and Server Location<\/h3>\n
\n<\/strong>II. Hagen 7
\n45127 Essen
\nGermany<\/p>\n11.2 Data Processed<\/h3>\n
\n
11.3 Purposes and Legal Bases<\/h3>\n
11.4 Data Transfers and Access Authorisation<\/h3>\n
11.5 Storage Period<\/h3>\n
12. Automated Data Processing with Make<\/h2>\n
12.1 Provider and Data Region<\/h3>\n
12.2 Purposes and Categories of Data<\/h3>\n
12.3 Legal Bases<\/h3>\n
12.4 Transfers to Third Countries<\/h3>\n
12.5 Execution Logs and Storage Period<\/h3>\n
13. Online Appointment Scheduling with Zeeg<\/h2>\n
13.1 Provider<\/h3>\n
\n<\/strong>Friedrichstra\u00dfe 155
\n10117 Berlin
\nGermany<\/p>\n13.2 Data Processed and Purposes<\/h3>\n
13.3 Legal Bases and Processing on Our Behalf<\/h3>\n
13.4 Transfer to Other Systems<\/h3>\n
13.5 Storage Period<\/h3>\n
14. Google Maps<\/h2>\n
14.1 Provider and Purpose<\/h3>\n
\nGordon House, Barrow Street
\nDublin 4
\nIreland<\/p>\n14.2 Data Processed<\/h3>\n
\n
14.3 Consent and Legal Basis<\/h3>\n
14.4 Google’s Independent Responsibility<\/h3>\n
14.5 Transfers to Third Countries<\/h3>\n
14.6 Storage Period<\/h3>\n
15. Interaction Between the Systems Used<\/h2>\n
16. Bavarian Hydrogen Alliance<\/h2>\n
16.1 Registration and Support of Alliance Partners<\/h3>\n
16.2 Publication and Contact Facilitation<\/h3>\n
17. Event Registrations<\/h2>\n
18. Job Applications<\/h2>\n
19. External Links and Social Networks<\/h2>\n
20. Recipients of Personal Data<\/h2>\n
\n
21. Transfers to Third Countries<\/h2>\n
22. General Storage Period Criteria<\/h2>\n
\n
23. Your Rights<\/h2>\n
\n
Special Information on the Right to Object<\/h3>\n
24. Right to Lodge a Complaint<\/h2>\n
\n<\/strong>Wagm\u00fcllerstra\u00dfe 18
\n80538 Munich
\nGermany<\/p>\n25. Automated Decision-Making<\/h2>\n
26. Updates to This Privacy Policy<\/h2>\n