summaryrefslogtreecommitdiffstats
path: root/templates/agb/_page.html
blob: 986732415ed029b2621a544debd3ecc71c2a1d06 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
<div class="row">
	<div class="col-md-6">
		<h2>Privacy Policy</h2>

		<p><b>Name of service</b>: {{suite}}</p>

		<h4>Service description</h4>

		<p>{{suite}} enables the operation of computer pools with non-persistent virtual machines, which are tailored by
			lecturers to their courses. Those VMs can optionally be shared across universities.</p>

		<h2>Obligations</h2>

		<p>Every user who uploads or modifies virtual teaching environments is responsible for ensuring that all license
			provisions applicable at their own institution are complied with. At the same time, they are also obliged to
			ensure to the best of their knowledge and belief that there is no malware (viruses, trojans, etc.) in the
			virtual teaching environments in accordance with the recommendations of the {{suite}} team.</p>

		<h2>Data controller and contact information</h2>

		<p>University of Freiburg, IT Services: <a href="mailto:{{helpmail}}">{{helpmail}}</a></p>

		<p><b>Jurisdiction</b>: DE-BW Germany Baden-Württemberg</p>

		<h2>Personal data processed</h2>

		<p>The following data is requested from your Home Organisation</p>

		<ul>
			<li>your unique user identifier (IdPPersistentNameIdentifier)</li>
			<li>your role in your Home Organisation (eduPersonScopedAffiliation)</li>
			<li>your permission to use this service independent of your role (eduPersonEntitlement)</li>
			<li>your first and last name (sn, givenName) (*)</li>
			<li>your email address (mail) (*)</li>
		</ul>

		<p>The data marked with (*) is not stored on our servers but only forwarded to your institution, unless you
			participate
			in the central VM exchange.</p>

		<h4>Purpose of the processing of personal data</h4>

		<p>The data is used</p>

		<ul>
			<li>to authorise your access to and use of the resources we provide</li>
			<li>to relate shared public VMs to the owning/uploading person</li>
		</ul>

		<h4>Third parties to whom personal data is disclosed</h4>

		<p>We may share your personal data with third parties (or otherwise allow them access to it) in the following
			cases:</p>

		<ol>
			<li>(a) to satisfy any applicable law, regulation, legal process, subpoena or governmental request</li>
			<li>(b) to enforce this Privacy Notice, including investigation of potential violations thereof</li>
			<li>(c) to relate shared VMs with the owner/uploading person e.g. when the VM is downloaded to a {{suite}}
				satellite server of another institution using the service
			</li>
		</ol>

		<p>Your personal data may also be accessible by others users of the service if you shared a public VM.</p>

		<h4>How to access, rectify and delete the personal data</h4>

		<p>Contact the data controller above.
			To rectify the data released by your Home Organisation, contact your Home Organisation's IT helpdesk.</p>

		<p><b>Data retention</b>: Personal data is deleted on request by the user or if the user hasn't used the service
			for two years.</p>

		<h4>Data Protection Code of Conduct</h4>

		<p>Your personal data will be protected according to the <a
				href="http://www.geant.net/uri/dataprotection-code-of-conduct/v1"
				rel="nofollow">Code of Conduct for Service Providers</a>, a common standard for the research and higher
			education sector to protect your privacy.</p>
	</div>
	<div class="col-md-6">
		<h2>Datenschutz</h2>
		<p>
			Bei der Registrierung für den {{suite}}-Dienst werden die folgenden
			Nutzerinformationen von der Heimateinrichtung an den zentralen
			{{suite}}-Server des Dienstbetreibers ({{provider}})
			verschlüsselt übermittelt:
		</p>
		<ul>
			<li>Vor- und Nachname (<a href="{{linkidmsn}}">sn</a>, <a href="{{linkidmgivenname}}">givenName</a>) (*)</li>
			<li>E-Mailadresse (<a href="{{linkidmmail}}">mail</a>) (*)</li>
			<li>Eindeutige, anonyme Nutzerkennung (<a href="{{linkidmpid}}">IdPPersistentNameIdentifier</a>)</li>
			<li>Heimateinrichtung (<a href="{{linkidmepsa}}">eduPersonScopedAffiliation</a>)</li>
			<li>Status des Nutzers (Dozent/Mitarbeiter, Student, ..., <a
					href="{{linkidmepsa}}">eduPersonScopedAffiliation</a>)
			</li>
		</ul>
		<p>
			Die mit (*) gekennzeichneten Daten werden nicht zentral gespeichert,
			sondern nur an Ihre Einrichtung weitergeleitet, es sei denn, Sie nehmen
			am zentralen VM-Austausch teil.
			<br>
			Wenn Sie nicht am {{suite}}-Dienst
			teilnehmen, werden keine Daten übertragen. Die Vorschriften des
			Landesdatenschutzgesetzes (LDSG) und bereichsspezifische
			Datenschutzvorschriften (insbesondere TKG, TMG) in den jeweils geltenden
			Fassungen werden beachtet.
		</p>

		<h2>Pflichten</h2>
		<p>
			Jeder Nutzer, der virtuelle Lehrumgebungen hochlädt oder modifiziert, ist dafür
			verantwortlich, dass alle an der eigenen Institution gültigen Lizenzbestimmungen
			eingehalten werden. Gleichzeitig ist er auch dazu verpflichtet, dass er gemäß der
			Empfehlungen des {{suite}}-Teams nach bestem Wissen und Gewissen dafür sorgt,
			dass sich keine Schadsoftware (Viren, Trojaner, …) in den virtuellen
			Lehrumgebungen befindet.
		</p>
	</div>
</div>