<div class="row">
<div class="col-md-6">
<h2>Privacy Policy</h2>
<p><b>Name of service</b>: {{suite}}</p>
<h4>Service description</h4>
<p>{{suite}} enables the operation of computer pools with non-persistent virtual machines, which are tailored by
lecturers to their courses. Those VMs can optionally be shared across universities.</p>
<h2>Obligations</h2>
<p>Every user who uploads or modifies virtual teaching environments is responsible for ensuring that all license
provisions applicable at their own institution are complied with. At the same time, they are also obliged to
ensure to the best of their knowledge and belief that there is no malware (viruses, trojans, etc.) in the
virtual teaching environments in accordance with the recommendations of the {{suite}} team.</p>
<h2>Data controller and contact information</h2>
<p>University of Freiburg, IT Services: <a href="mailto:{{helpmail}}">{{helpmail}}</a></p>
<p><b>Jurisdiction</b>: DE-BW Germany Baden-Württemberg</p>
<h2>Personal data processed</h2>
<p>The following data is requested from your Home Organisation</p>
<ul>
<li>your unique user identifier (IdPPersistentNameIdentifier)</li>
<li>your role in your Home Organisation (eduPersonScopedAffiliation)</li>
<li>your permission to use this service independent of your role (eduPersonEntitlement)</li>
<li>your first and last name (sn, givenName) (*)</li>
<li>your email address (mail) (*)</li>
</ul>
<p>The data marked with (*) is not stored on our servers but only forwarded to your institution, unless you
participate
in the central VM exchange.</p>
<h4>Purpose of the processing of personal data</h4>
<p>The data is used</p>
<ul>
<li>to authorise your access to and use of the resources we provide</li>
<li>to relate shared public VMs to the owning/uploading person</li>
</ul>
<h4>Third parties to whom personal data is disclosed</h4>
<p>We may share your personal data with third parties (or otherwise allow them access to it) in the following
cases:</p>
<ol>
<li>(a) to satisfy any applicable law, regulation, legal process, subpoena or governmental request</li>
<li>(b) to enforce this Privacy Notice, including investigation of potential violations thereof</li>
<li>(c) to relate shared VMs with the owner/uploading person e.g. when the VM is downloaded to a {{suite}}
satellite server of another institution using the service
</li>
</ol>
<p>Your personal data may also be accessible by others users of the service if you shared a public VM.</p>
<h4>How to access, rectify and delete the personal data</h4>
<p>Contact the data controller above.
To rectify the data released by your Home Organisation, contact your Home Organisation's IT helpdesk.</p>
<p><b>Data retention</b>: Personal data is deleted on request by the user or if the user hasn't used the service
for two years.</p>
<h4>Data Protection Code of Conduct</h4>
<p>Your personal data will be protected according to the <a
href="http://www.geant.net/uri/dataprotection-code-of-conduct/v1"
rel="nofollow">Code of Conduct for Service Providers</a>, a common standard for the research and higher
education sector to protect your privacy.</p>
</div>
<div class="col-md-6">
<h2>Datenschutz</h2>
<p>
Bei der Registrierung für den {{suite}}-Dienst werden die folgenden
Nutzerinformationen von der Heimateinrichtung an den zentralen
{{suite}}-Server des Dienstbetreibers ({{provider}})
verschlüsselt übermittelt:
</p>
<ul>
<li>Vor- und Nachname (<a href="{{linkidmsn}}">sn</a>, <a href="{{linkidmgivenname}}">givenName</a>) (*)</li>
<li>E-Mailadresse (<a href="{{linkidmmail}}">mail</a>) (*)</li>
<li>Eindeutige, anonyme Nutzerkennung (<a href="{{linkidmpid}}">IdPPersistentNameIdentifier</a>)</li>
<li>Heimateinrichtung (<a href="{{linkidmepsa}}">eduPersonScopedAffiliation</a>)</li>
<li>Status des Nutzers (Dozent/Mitarbeiter, Student, ..., <a
href="{{linkidmepsa}}">eduPersonScopedAffiliation</a>)
</li>
</ul>
<p>
Die mit (*) gekennzeichneten Daten werden nicht zentral gespeichert,
sondern nur an Ihre Einrichtung weitergeleitet, es sei denn, Sie nehmen
am zentralen VM-Austausch teil.
<br>
Wenn Sie nicht am {{suite}}-Dienst
teilnehmen, werden keine Daten übertragen. Die Vorschriften des
Landesdatenschutzgesetzes (LDSG) und bereichsspezifische
Datenschutzvorschriften (insbesondere TKG, TMG) in den jeweils geltenden
Fassungen werden beachtet.
</p>
<h2>Pflichten</h2>
<p>
Jeder Nutzer, der virtuelle Lehrumgebungen hochlädt oder modifiziert, ist dafür
verantwortlich, dass alle an der eigenen Institution gültigen Lizenzbestimmungen
eingehalten werden. Gleichzeitig ist er auch dazu verpflichtet, dass er gemäß der
Empfehlungen des {{suite}}-Teams nach bestem Wissen und Gewissen dafür sorgt,
dass sich keine Schadsoftware (Viren, Trojaner, …) in den virtuellen
Lehrumgebungen befindet.
</p>
</div>
</div>
