Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is all data that can be used to identify you personally. Detailed information on data protection can be found in our privacy policy listed below this text.

Data Collection on this Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the “Information on the Responsible Party” section of this privacy policy.

How do we collect your data?

Your data is collected, on the one hand, when you provide it to us. This may, for example, be data you enter into a contact form.

Other data is collected automatically or with your consent when you visit the website by our IT systems. This primarily includes technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders, or other order inquiries.

What rights do you have regarding your data?

You have the right to obtain information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time with effect for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. You also have the right to lodge a complaint with the responsible supervisory authority.

You can contact us at any time about this and other questions regarding data protection.

Analysis tools and third-party tools

When you visit this website, your browsing behavior may be statistically analyzed. This is primarily done with so-called analysis programs.

Detailed information about these analysis programs can be found in the following privacy policy.

Hosting

We host the content of our website with the following provider:

External Hosting

This website is hosted externally. The personal data collected on this website is stored on the host’s servers. This may primarily include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses, and other data generated via a website.

External hosting is carried out for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 (1) (b) GDPR) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6 (1) (f) GDPR). If consent has been requested, processing will be carried out exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting). Consent can be revoked at any time.

Our host will only process your data to the extent necessary to fulfill its service obligations and follow our instructions.

We use the following hoster:

Technical University of Dresden CIDS – Center for Interdisciplinary Digital Sciences 01062 Dresden

Tel. +49 351 463-40000 Email: servicedesk@tu-dresden.de

Data Protection Officer: Mr. Jens Syckor 01062 Dresden

Tel. +49 351 463-32839 Email: informationssicherheit@tu-dresden.de

General information and mandatory information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains which data we collect and what we use it for, as well as how and for what purpose.

Please note that data transmission over the Internet (e.g., via email) may have security gaps. Complete protection against third-party access is not possible.

Note on the responsible body

The responsible body for data processing on this website is: TUD Dresden University of Technology Faculty of Business and Economics Research Group Digital Health 01062 Dresden

Tel. +49 351 463-37671 Email: digital-health@tu-dresden.de

Storage period

Unless a specific storage period is specified in this privacy policy, your data will remain with us until the purpose no longer applies. Upon request for deletion or revocation of your consent, we will delete your data unless legally required to do so.

We process data based on your consent (Art. 6 (1) (a) GDPR), for the performance of a contract (Art. 6 (1) (b)), for the fulfillment of legal obligations (Art. 6 (1) (c)), and on the basis of legitimate interests (Art. 6 (1) (f)).

Recipients

Data will only be shared with service providers, authorities, or partners within the scope of contract fulfillment, legal obligations, or legitimate interests, and always subject to contract processing agreements.

Revocation

You can revoke your consent at any time with future effect. The legality prior to the revocation remains unaffected.

Right of Objection

If processing is based on Art. 6 (1) (e)/(f) GDPR, you can object at any time for reasons related to your situation. You can refuse data processing for direct marketing purposes at any time.

Right of Complaint

You have the right to lodge a complaint with a data protection supervisory authority.

Data Portability

You can request information in machine-readable form and transfer to other responsible parties.

Information, Correction, Deletion

You have the right to access, correct, or delete your data at any time.

Restriction of processing

SSL/TLS

We use SSL/TLS to protect confidential data. Identifiable by “https://” and the lock icon.

Data collection on this website

Cookies

Our website uses cookies for technical functions, analysis, and advertising. Necessary cookies are based on Art. 6 (1) (f) GDPR; others only with your consent (Art. 6 (1) (a) & Section 25 (1) TDDDG). Revocation possible at any time. Browser settings can block cookies, which may limit functionality.

Contact form

For inquiries via form, we save your entries based on Art. 6 (1) (b)/(f) or your consent (Art. 6 (1) (a)). Deletion upon request or revocation.

Inquiries by email, telephone, fax

We store your inquiry and data based on Art. 6 (1) (b)/(f) GDPR or your consent (Art. 6 (1) (a)). Deletion upon request or revocation.

Plugins and tools

Google Fonts

We use Google Fonts for consistent typography. Your browser loads fonts from Google, which transmits your IP address to Google. Use based on Art. 6 (1) (f) GDPR or with consent (Art. 6 (1) (a) & Section 25 (1) TDDDG). Revocation possible. Support via locally installed standard font if not supported.

Google reCAPTCHA

We use reCAPTCHA to prevent automated requests. Google analyzes your behavior (e.g., IP, mouse movements) in the background. Use based on Art. 6 (1) (f) GDPR or with consent (Art. 6 (1) (a) & Section 25 (1) TDDDG). Revocation possible.

Source: e-recht24.de

Privacy in the “Health Habit Hub” app

The sections above concern the website. The following section additionally describes the processing of personal data in the “Health Habit Hub” mobile app as part of the research study.

Controller and contact

The study is conducted by Technische Universität Dresden, Chair of Business Informatics, esp. Health Informatics. Contact for data protection questions about the study: digital-health@tu-dresden.de

Voluntary participation

Participation in the study is voluntary. You may withdraw your consent at any time with effect for the future and end your participation, without any disadvantage to you.

What data we process

The app is designed for data minimisation. We do not collect your name, email address or phone number.

Processing takes place for the purpose of scientific research into health habits and for the technical operation of the app.

The legal basis is your consent under Art. 6(1)(a) GDPR, which you give at the start of the study. Where your entries constitute health data within the meaning of Art. 9 GDPR, processing is based on your explicit consent under Art. 9(2)(a) GDPR.

Recipients and processors

Your data is not passed on for advertising purposes. No tracking across other providers’ apps or websites takes place.

Storage period

Your study data is stored for the duration of the study and the subsequent analysis and archiving period in accordance with the rules of good scientific practice.

Your rights

You have the right to information, rectification, erasure, restriction of processing, data portability, and to withdraw your consent. You can export your data yourself at any time in the app. You also have the right to lodge a complaint with a data protection supervisory authority.

Deleting your account

You can delete your account yourself at any time in the app settings. This removes your access and your identifier, so that signing in is no longer possible and your previous contributions can no longer be attributed to you. Study contributions already collected remain in the dataset in anonymised form, because after your identifier is deleted they can no longer be linked to any person. This preserves the integrity of scientific analyses already carried out.