Privacy Policy

The protection of your personal data is important to us. The following information explains what data we process when you visit this website and what rights you have.
Last updated: April 2026

01.Personal Data

In the context of using this website, we process personal data only to the extent required to provide our content and services.

Personal data, as defined in Article 4 No. 1 of the General Data Protection Regulation (GDPR), means any information relating to an identified or identifiable natural person (e.g., name, address, email address, user behaviour).

02.Controller

The controller responsible for data processing within the meaning of the GDPR and other data protection regulations is:

KIT is a corporation under public law, represented by its President Prof. Dr. Jan S. Hesthaven.

You can reach our Data Protection Officer at datenschutzbeauftragte@kit.edu or at the postal address above with the addition „Die Datenschutzbeauftragte“ (The Data Protection Officer).

03.Website Access and Server Log Files

When you use this website for purely informational purposes — meaning you do not register or otherwise transmit information to us — we only collect the personal data that your browser transmits to our server based on your settings (server log files). The collection of this data is technically necessary to display the website to you and to ensure its stability and security (legal basis: Art. 6(1)(f) GDPR).

The following data is collected:

• IP address (shortened / anonymised for persistent storage)
• Date and time of the request
• Content of the request (specific page)
• Access status / HTTP status code
• Amount of data transferred
• Browser data (type, language, version)
• Operating system and its interface

This data cannot be attributed to specific individuals. We do not merge this data with other data sources. We reserve the right to review this data retrospectively if we become aware of concrete indications of unlawful use.

The IP address is stored for the duration of the session in order to enable the delivery of the website. In the log files, the data is subsequently retained for no longer than seven days. Further storage is possible only in the event of security-related incidents; in such cases, IP addresses are anonymised so that the calling client can no longer be identified.

Technical hosting is provided by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, with whom we have concluded a data processing agreement pursuant to Art. 28 GDPR.

04.Cookies

This website uses exclusively strictly necessary cookies required for the operation of the website. A cookie consent banner is therefore not required and not used.

We do not use cookies for analytics, tracking, marketing, or advertising purposes. Nor do we embed any third-party services that might set their own cookies.

The legal basis for the use of strictly necessary cookies is Section 25(2) No. 2 of the German Telecommunications-Telemedia Data Protection Act (TTDSG) in conjunction with Art. 6(1)(f) GDPR.

A complete list of the cookies in use, including their names, purposes, and storage durations, is available in our Cookie Policy.

05.Contacting Us

Contact Form

Our website offers you the option to contact us via a contact form. Only the following data is collected:

• Name (required)
• Email address (required)
• Message (required)

Additionally, a timestamp and your IP address are logged for abuse prevention. The processing serves to handle your enquiry and to communicate with you. The legal basis is Art. 6(1)(f) GDPR (legitimate interest); where your enquiry concerns the conclusion of a contract, Art. 6(1)(b) GDPR additionally applies.

Data submitted via the contact form is transmitted encrypted (TLS) to our email server and delivered to service@suprabindinglab.org. No data is passed on to third parties outside KIT.

Your message will be deleted once your enquiry has been conclusively handled and provided that no statutory retention obligations apply — generally no later than six months after the correspondence ends. In the case of contractual enquiries, retention obligations under German commercial and tax law (6 or 10 years pursuant to § 257 HGB and § 147 AO) may apply.

Contact by Email or Phone

If you contact us by email or phone, your contact details (email address or phone number and, where applicable, name) along with the content of your message will be stored for the purpose of responding. No data is passed on to third parties. The legal basis is Art. 6(1)(f) GDPR; for contract-related enquiries, Art. 6(1)(b) GDPR.

Data will be deleted once it is no longer required for the stated purpose — generally when it can be assumed that no reply is expected. You may object to this processing at any time by sending an informal email to service@suprabindinglab.org.

06.Fonts

This website uses the typeface Inter, which is loaded locally from our own server. No connection to external font services (in particular not to Google Fonts) is established, and no transmission of your IP address to third parties takes place.

07.No Analytics or Tracking Tools

We deliberately refrain from using any analytics or tracking tools such as Google Analytics, Matomo, Facebook Pixel, or comparable services. Your usage behaviour is not tracked on this website.

08.External Links

Our website may contain links to third-party websites. We have no influence over the content or data processing practices of these websites. The privacy notices of the respective providers apply to these external offerings.

09.TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses TLS encryption. You can recognise an encrypted connection by the „https://“ prefix in your browser’s address bar and the lock symbol.

When TLS encryption is active, the data you transmit to us generally cannot be read by third parties. Please note, however, that full protection against access by third parties cannot be guaranteed for data transmitted over the internet.

10.Your Rights

With regard to the personal data concerning you, you have the following rights:

• Right of access — to learn whether and which data we process about you (Art. 15 GDPR)
• Right to rectification — to have inaccurate data corrected or incomplete data completed (Art. 16 GDPR)
• Right to erasure — to have your data deleted (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR)
• Right to withdraw consent with effect for the future (Art. 7(3) GDPR)

To exercise your rights, please contact us using the details in section 2 or reach out to the Data Protection Officer of KIT.

11.Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). Pursuant to Article 25(1) LDSG BW, the supervisory authority responsible for KIT within the meaning of Article 51(1) GDPR is:

12.Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy so that it continues to reflect current legal requirements or changes to our services. The latest version will always apply to future visits.