1. Responsible person in the sense of the data protection basic regulation
The University is represented by the acting president.
2. Data protection officer of the Julius-Maximilians-Universität Würzburg
Tel.: 0931 31-88757
3. Purpose and legal basis of data processing
The Julius-Maximilians-Universität Würzburg (JMU) offers WueData as institutional repository for the documentation and publication of research data. The primary aim of this service is to promote the preservation and accessibility of collected research data in line with the Open Science idea. To this end, researchers can upload their data in the repository, describe it with structured metadata and publish it.
The legal basis for the data processing is Art. 6 para. 1 lit. e GDPR in conjunction with Art. 4 ff BayDSG as well as Art. 85 GDPR and Art. 25 BayDSG. The legal basis for the storage of information in the end user's terminal equipment or access to information already stored in the terminal equipment is Art. 25 para. 2 TTDSG.
4. Categories and scope of data processing
4.1 Administration, editing and publication of metadata and research data
For login, administration and editing, personal identifiers of the JMU with access protection mechanisms are used and changes made with these identifiers are logged. Specifically, the following personal data is processed and stored:
User name or "Persistent ID" (when using Shibboleth)
Password (not applicable when using Shibboleth)
First and last name (optional)
ORCiD ID (optional)
Profile picture (optional)
This personal data is accessible to the administrators of the service.
While publishing research data, the following personal data will be stored and published by the data providers, as well as persons who were involved in creating the data:
E-mail address (optional)
ORCiD ID (optional)
4.2 Log Files
When you access the repository or log in via a user account, you transmit data to our web server via your internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:
IP address used
User ID or "Persistent ID" (when using Shibboleth)
Operating system used
Browser used / browser version
Visited web pages
Actions on these pages
Date and time at the time of access
Amount of data sent and received in bytes
Session cookies are mandatory for the functionality of our services. They allow us to enable so-called "sessions" in which you can perform actions that build on each other.
4.4 Communication data
If you send us a request or an opinion by ticket, e-mail, post or telephone, the information provided will be processed to deal with the request and for possible follow-up questions and the exchange of opinions.
5. Recipients of the personal data
The data is disclosed to FIZ Karlsruhe - Leibniz Institute for Information Infrastructure GmbH, Hermann-von-Helmholtz-Platz 1, 76344 Eggenstein-Leopoldshafen within the scope of order processing.
6. Duration and type of storage of personal data
6.1 Personalised access data
Personalised access to our repository will be cancelled after deactivation of the JMU account of the person concerned.
6.2 Metadata and research data
Physical preservation of all uploaded research data and added metadata is assured for at least 10 years. The focus is on their physical preservation (bitstream preservation). The long-term usability and readability of the data depends on the availability of the respective formats in which the data sets are uploaded.
6.3 Log Files
Log files and the personal data contained therein are deleted after 7 days.
Session cookies are deleted when the browser is closed. Only the general cookie disclaimer "cb_cookie_notice", which confirms the cookie information displayed in the browser, is valid for one year.
6.5 Communication data
Tickets, e-mails, notes on telephone calls and post and messages that you have not transmitted to us publicly are checked every two years to see whether it is still necessary to store your enquiries for follow-up purposes. If your data is no longer required, its processing will be restricted and it will still be stored in accordance with the statutory retention obligations, taking into account archiving law.
7. Data subjects rights
With regard to the processing of your personal data, you as a data subject are entitled to the following rights pursuant to Art. 15 et seq. GDPR:
- You can request information about whether we are processing personal data about you. If this is the case, you have the right to information about this personal data as well as other information related to the processing (Art. 15 GDPR). Please note that this right to information may be restricted or excluded in certain cases (cf. in particular Art. 10 BayDSG).
In the event that personal data about you is not (or is no longer) accurate or incomplete, you may request that this data be corrected and, if necessary, completed (Art. 16 GDPR).
If the legal requirements are met, you can request the deletion of your personal data (Art. 17 GDPR) or the restriction of the processing of this data (Art. 18 GDPR). However, the right to erasure pursuant to Article 17 (1) and (2) GDPR does not apply, inter alia, if the processing of personal data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority (Article 17 (3) (b) GDPR).
You may also object to the processing of your personal data by us at any time on grounds relating to your particular situation (Article 21 GDPR). If the legal requirements are met, we will no longer process your personal data.
If you have consented to the processing or if there is a contract for data processing and the data processing is carried out with the help of automated procedures, you may have the right to data portability (Art. 20 GDPR).
You have the right to complain to a supervisory authority within the meaning of Art. 51 DSGVO about the processing of your personal data. The competent supervisory authority for Bavarian public bodies is the Bavarian State Commissioner for Data Protection, Wagmüllerstraße 18, 80538 Munich. In addition to the right of complaint, you may also file a judicial appeal.
8. Other information on our data protection declaration
We reserve the right to amend this data protection declaration from time to time so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration will then apply to your next visit.
If you have any questions or would like to exercise your rights towards us, you can contact the data protection officer of the JMU or write an email to firstname.lastname@example.org.