Privacy Policy

1. Data Controller

The data controller for the processing of personal data on this website is:

AI4POL

TUM Think Tank
Munich School for Politics and Public Policy
Richard-Wagner-Strasse 1
80333 Munich

Email: tumthinktank@hfp.tum.de

Phone: [Insert Contact Phone Number]

2. Collection and Storage of Personal Data, and Purpose of Use

a) When Visiting the Website

When you visit our website, certain information is automatically transmitted to the server of our website and stored in server log files. This data includes:

• IP address of the visitor

• Date and time of access

• Time zone difference from Greenwich Mean Time (GMT)

• Content of the request (specific page)

• Access status/HTTP status code

• Amount of data transmitted

• Website from which the access originated (referrer URL)

• Browser

• Operating system and its interface

• Language and version of the browser software

This data is not combined with other data sources and is used solely to ensure the smooth connection setup, system security, and technical administration of the website.

b) When Using Forms

If you submit information through forms on the website (e.g., for inquiries or newsletter sign-ups), the personal data included (e.g., name, email address) is used solely for the purpose of processing your request. This data will only be shared with third parties if it is necessary to fulfill your request.

3. Legal Basis for Processing

The processing of personal data is based on the following legal grounds:

• Art. 6(1) lit. f GDPR (legitimate interest): for the processing of data to protect our legitimate interests, such as optimizing the website and improving user experience.

• Art. 6(1) lit. a GDPR (consent): for the processing of data when consent is obtained (e.g., when signing up for the newsletter).

4. Cookies

We use cookies on our website to facilitate and analyze the use of the website. Cookies are small text files stored on your device.

a) Necessary Cookies
These cookies are essential for the operation of the website and enable basic functions such as page navigation and access to secure areas of the website.

b) Non-Essential Cookies
Non-essential cookies, such as those used for analytics purposes (e.g., Google Analytics), are only placed with your explicit consent. You can control the use of such cookies via our cookie banner.

5. Data Sharing with Third Parties

The personal data collected on this website will not be shared with third parties unless it is necessary to fulfill a contract or due to legal obligations.

6. Data Transfer to Third Countries

If personal data is transferred to a country outside the European Union (e.g., through the use of Google Analytics or other third-party services), we ensure that the relevant legal requirements are met to ensure an adequate level of data protection.

7. Your Rights as a Data Subject

You have the right to request information at any time regarding the personal data we have stored about you, and if necessary, to request corrections, deletions, or restrictions on the processing of that data.

Additionally, you have the right to withdraw your consent to the processing of personal data at any time.

Contact can be made via the contact details provided above.

8. Changes to This Privacy Policy

We reserve the right to update this privacy policy as needed to comply with legal requirements or to implement changes to our services.

Critical Points AI4POL Should Address:

• Data Controller's Name and Contact Information: Ensure that the contact details (address, email, and phone number) for the data controller are accurate.

• Use of Third-Party Services (e.g., Google Analytics): If AI4POL uses third-party services that collect personal data, such as Google Analytics or similar tools, explicit consent from users must be obtained. Check if AI4POL uses such tools.

• Details about Cookies: Clarify which cookies are used on the website (e.g., for analytics, social media plugins, or tracking cookies) and whether a cookie banner is required.

• Data Retention Periods: The privacy policy should also include details about how long personal data will be retained or the criteria for determining the retention period.

• Data Transfers to Third Countries: If data is transferred to third parties outside the EU (e.g., via Google Analytics), specific agreements must be in place to ensure data protection.