Name of the service HAI-Flow
Description of the service Knowledge Hub for AI in Administration
Data controller and a contact person

CISPA Helmholtz-Zentrum für Informationssicherheit gGmbH
Stuhlsatzenhaus 5
66123 Saarbrücken
Germany
Email: info@cispa.de
Website: https://www.cispa.de
Data Controller’s data protection officer (if applicable)

Data Protection Officer
CISPA Helmholtz-Zentrum für Informationssicherheit gGmbH
Stuhlsatzenhaus 5
66123 Saarbrücken
Germany
Email: datenschutz@cispa.de
Jurisdiction DE, Germany, Saarland
Personal data processed

1. For all users

  • IP address *
  • access time and duration *
  • browser data *

2. For authenticated users
Following data is retrieved from your Home Organisation:

  • your email address *
  • your profile: *
    • name
    • given name
    • family name
    • preferred username
    • entitlements (e. g. virtual organisation/group/project membership)

* = the personal data is necessary for providing the service. The processing is based on Art. 6 (1) lit. f GDPR. It is the justified interest of the Data Controller.
Purpose of the processing of personal data Personal data retrieved from your Home Organisation is used to identify you to give you the permissions to access your resources with your account by associating your unique user identifier. Name and e-mail address are used to contact you.

Personal data gathered from you is needed to provide the service technically. It is written to log files. Log files are consulted in case of service malfunction to technical and forensic purposes.
Third parties to whom personal data is disclosed No personal data is disclosed to third parties without your explicit request.

Authenticated users sending files must be aware that their name and potentially email address are visible to other users of the service.
How to access, rectify and delete the personal data Contact the contact personal above. To rectify the data released by your Home Organisation, contact your Home Organisation’s IT helpdesk.
Data retention Personal data is deleted on request of the user or if the user hasn't used the service for two years.
Data Protection Code of Conduct Your personal data will be protected according to the Code of Conduct for Service Providers, a common standard for the research and higher education sector to protect your privacy.

This privacy policy is based on the Privacy policy guidelines for Service Providers