iBOTS
Scope and controller
This notice concerns browsing the iBOTS website and contacting the team. Registration, certificates, newsletters, and other activities are covered in the participation privacy information. Separate platforms, including the learning platform, have their own notices.
The controller for personal data processing managed by the iBOTS project is Dr. Nicholas A. Del Grosso, iBOTS, Beringstraße 1, 53115 Bonn, Germany, delgrosso.nick@uni-bonn.de. He operates this website and is the contact for project privacy questions and requests concerning your data. Linked services may have their own controllers for the processing they perform.
University affiliation and contacts
iBOTS (iBehave Open Technology Support) is affiliated with the University of Bonn and the iBehave research network. The university contacts below are institutional references for that affiliation and for university services. The project contact above handles enquiries about this website.
General university contact: Rheinische Friedrich-Wilhelms-Universität Bonn, Regina-Pacis-Weg 3, 53113 Bonn, Germany; telephone +49 228 73-0, email kommunikation@uni-bonn.de.
For data-protection questions concerning university services, the university’s data protection officer can be reached at datenschutz@uni-bonn.de, Adenauerallee 72–74, 53115 Bonn, telephone +49 228 73-4096. These institutional contacts are published in the university privacy notice.
Website delivery and hosting
The static website is deployed to Netlify. Delivering a page necessarily makes connection information, including your IP address and requested resource, available to the hosting infrastructure. Request metadata can include access time, browser information, and a referring URL. The site sends a no-referrer policy to browsers.
The purposes are website delivery and operational security. The applicable legal basis depends on the processing and the responsible party. University affiliation alone does not establish processing under the university’s public task in Article 6(1)(e) GDPR. This notice does not specify an activity-specific basis for hosting or security logging.
This notice does not specify account-level logging and analytics settings, the contracted Netlify entity, individual subprocessors, processing locations, log-retention periods, or international-transfer safeguards. It does not assert EU-only hosting or IP anonymisation. General provider information is available in the Netlify Trust Center; questions about this website’s processing can be directed to the controller.
Browser assets, cookies, and preferences
The website code serves its styles, scripts, icons, and images locally. It does not embed maps, social-media widgets, or registration forms and does not include an analytics script. These statements concern the website code; they do not describe every feature of the hosting service.
The site code does not set cookies. It reads the browser storage key theme and writes it only when you choose light or dark mode. The value is light or dark; it is not transmitted by this feature. It remains until replaced or deleted through your browser’s site-data controls. The switch also works when storage is unavailable.
The preference feature remembers the display setting you expressly select. §25(2)(2) TDDDG concerns storage necessary to provide an expressly requested function. There is no tracking consent banner because no optional tracking feature is implemented in the website code.
Contact
Contact buttons open your email application. No contact message is submitted to Netlify by this website.
When you email the project contact, the university email service and the people handling your enquiry receive your sender details, message, and any attachments you provide. The purpose is to answer the enquiry and organise the requested support. The applicable basis depends on the request and the responsible party; Article 6(1)(b) GDPR applies only where a contractual or pre-contractual request actually exists. This notice does not specify an activity-specific basis for all enquiries. Consent is not presumed merely because you contact us.
Please avoid sending patient information, passwords, or unnecessary personal research data. Retention depends on the purpose of the correspondence and applicable records and email-service rules. This notice does not specify a fixed retention period or the detailed access arrangements for the team’s mailboxes.
External links
Following a link to a map, GitHub, the learning platform, the university mailing-list service, or a registration provider opens that service. It then receives connection information and processes any information you submit under its own arrangements. An external link is not an embedded service, and this website does not load it automatically.
Your rights
Subject to the applicable conditions, you may request access, rectification, erasure, or restriction of processing. Where processing is based on Article 6(1)(e) or (f) GDPR, you may object on grounds relating to your particular situation. Data portability applies where processing is automated and based on consent or contract. Consent, where used, may be withdrawn for the future without affecting the lawfulness of earlier processing.
For requests about this website or project records, contact Dr. Nicholas A. Del Grosso using the details above. For a university service’s own processing, use its privacy contact or the university’s data protection officer. We do not require unnecessary identification documents. No automated decision-making or profiling is implemented by the website code.
You may complain to the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, or another competent supervisory authority. You do not need to contact iBOTS first.
Changes
This notice is updated to reflect changes in the processing described here. The date above identifies the latest editorial revision.