B02 Data Privacy

Data Privacy

Last updated: 20 August 2026

1. Controller (Art. 4(7) GDPR)

2. Scope

This privacy policy applies to this website, which is operated within the framework of the service project S in the CRC 1475 “Metaphors of Religion” (Link) funded by the German Research Foundation (DFG). This website provides information about the project and its services and includes interactive features, such as a login area for registered users, in addition to static content.

3. Server Logs

When you access this website, the server automatically records log data necessary for functionality and security. This may include your IP address (possibly truncated), date and time of access, requested URL, HTTP status, referrer, user agent, and transfer volume.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website. Server logs are routinely deleted after 60 days.

4. Cookies

This website uses cookies only to the extent strictly necessary for its technical operation, for example to keep you logged in during a session or to remember your login state. These essential cookies do not track your behavior across websites and are not used for marketing, analytics, or advertising purposes.

The legal basis for essential cookies is Art. 6(1)(f) GDPR (legitimate interest in providing a functioning, secure website) or, where applicable, Art. 6(1)(b) GDPR (performance of a contract, e.g. providing the login service you requested). As these cookies are strictly necessary, no separate consent is required under Section 25(2) TTDSG. We do not use cookies or similar technologies for tracking, profiling, or marketing purposes.

5. User Accounts and Login

There is no public self-registration on this website. User accounts are created manually by the site administrators upon individual request and approval. If you are granted access, we process the data required to set up and manage your account (e.g. name, email address, username, password in encrypted form) and to maintain your session (e.g. via a session cookie or comparable technical identifier).

The legal basis is Art. 6(1)(b) GDPR, insofar as processing is necessary to provide the account and login functionality requested by you, and Art. 6(1)(f) GDPR for related security measures (e.g. protection against unauthorized access). Account data are stored for as long as your account remains active and are deleted upon account deletion, unless statutory retention obligations require longer storage.

6. Contact by Email

If you contact us by email, we process your message and contact details to handle and respond to your inquiry. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is responding to inquiries and communicating with you.

7. Storage, Security & Hosting

Data are stored on servers located in the European Union. Access is restricted to authorized project members where access is required for operation and maintenance. All traffic is protected by HTTPS/TLS.

8. Data Sharing

We do not share personal data with third parties except where required by law or with your explicit consent. No transfers to third countries outside the European Union are intended.

9. Your GDPR Rights

You have the following rights under the GDPR:

• Access, rectification, erasure, and restriction (Arts. 15–18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Complain to a supervisory authority (Art. 77 GDPR)

To exercise your rights, please contact the Controller listed in Section 1.

10. Retention

Personal data are stored only for as long as necessary for the stated purposes or as required by law. Server logs and temporary technical data are routinely removed after the retention period stated above, and account data are removed as described in Section 5.

11. Changes to This Policy

We may update this policy to reflect legal or technical changes. The current version will always be available on this page.