Information obligations pursuant to Art. 13 of the
General Data Protection Regulation (DS-GVO) in Germany
This is a translation of the German data protection guidelines. In case of doubt, the original German version counts.
1. Responsible Entity
Responsible for data collection and data processing is the Leibniz Institute for the Analysis of Biodiversity Change (LIB)
2. Data Protection Officer
First data protection officer:
Dipl.-Biol. Thorsten Klug
Phone: +49 (0)228 9122 402
Deputy data protection officer:
Dr. Christoph Mayer
Phone: +49 (0)228 9122 403
3. Data Categories and Storage
For a research/evaluation module, the following game data is stored:
- Individual Player ID (randomly generated from the game)
- Game version
- Date and time (when the game was started)
- Time (playing time)
- Achieved score (total and per correctly solved puzzle)
- Number of solved puzzles
- Duration per solved puzzle
- Required hints
- Information whether the survey and/or PDF button was pressed
No other game play data is stored, processed or required by the LIB for the research/evaluation module.
If users voluntarily fill out the evaluation questionnaire for the game („Survey“ button at the end of the game), the following data will also be stored:
- Individual feedback on the game based on statements to be evaluated and up to two open-ended questions, each of which can be filled out voluntarily
- Age recorded in cohorts
For the functionality of the game, the following data is temporarily stored by Alfahosting:
- IP address of users / website visitors.
The access and error log files collected by Alfahosting by default, as well as the IP address of the users / website visitors, are not associated with the data of the research/evaluation module or the questionnaire. Therefore, it is not possible to draw conclusions about your person.
4. Legal Basis and Purpose of Data Processing
We process your personal data in accordance with the provisions of the DS-GVO and the Data Protection Act of North Rhine-Westphalia (DSG NRW):
I) The data storage of the data collected by the research/evaluation module (online game at Alfahosting) is based on Art. 6 para.1f DS-GVO:
- (a) Data such as the IP address are stored for technical reasons in order to offer the game.
- (b) Responses in the game and dwell time in game sections are collected because they are evaluated for scientific purposes. The scientific evaluation is only done with anonymized data. II) The data storage for the questionnaire (in LimeSurvey) takes place after the consent of the users on the basis of Art. 6 para. 1a DS-GVO. The data collected does not allow any conclusions to be drawn about the users, as no personal data is stored. The questionnaire data is also collected and evaluated for scientific purposes.
II) The data storage for the questionnaire (in LimeSurvey) takes place after the consent of the users on the basis of Art. 6 para. 1a DS-GVO. The data collected does not allow any conclusions to be drawn about the users, as no personal data is stored. The questionnaire data is also collected and evaluated for scientific purposes.
5. Storage Duration
The access and error log files recorded by Alfahosting in the online game, including the IP address of the users/website visitors, are anonymized by Alfahosting after 24 hours and deleted after 7 days at the latest. Alfahosting does not collect any further personal data of the users.
The anonymized data on the online game are used and evaluated for research/evaluation purposes. They have to be kept by the LIB for 10 years for reasons of grant law. It is not possible to draw conclusions about the person playing the game. The data collected from the questionnaire are also evaluated scientifically and must be kept for 10 years by the LIB for reasons of grant law. It is not possible to draw conclusions about the person playing here.
The online game data is stored on behalf of the LIB on the servers of Alfahosting and is available to the LIB. The data will not be passed on to third parties.
The data of the questionnaire are stored on behalf of the LIB on the servers of LimeSurvey and are available to the LIB. The data will not be passed on to third parties.
This does not affect the scientific publication of the anonymously evaluated data. In this case, the usage behavior is evaluated statistically and qualitatively and can be published.
7. Your Rights as a Data Subject
According to the GDPR, you have the following rights:
If your personal data is processed, you have the right to receive information about the data stored about you (Art. 15 DS-GVO). If incorrect personal data is processed, you have the right to rectification (Art. 16 DS-GVO). If the legal requirements are met, you may request erasure or restriction of processing, as well as object to processing (Art. 17, 18 and 21 DS-GVO). If you have consented to the data processing or if a contract for data processing exists and the data processing is carried out with the help of automated procedures, you may have a right to data portability (Art. 20 DS-GVO).
You have the right to complain to a data protection supervisory authority about the processing of your personal data by us (Art. 77 DS-GVO in conjunction with § 19 BDSG). A list of supervisory authorities and their contact details can be found in the following link: www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
8. Servers of Alfahosting, LimeSurvey and LIB
The servers of Alfahosting GmbH, LimeSurvey (Germany) and LIB are located in Germany and are exclusively subject to German law.