Privacy Policy
This English text is a translation provided for convenience only. In the event of any discrepancy, the German version of this privacy policy is legally binding.
§ 1 General information
This privacy policy provides detailed information about what happens to your personal data when you visit our website www.exoassist.de.
All data that allows you to be personally identified is personal data. When processing your data we strictly observe the statutory requirements, in particular the General Data Protection Regulation (“GDPR”).
§ 2 Controller
The controller responsible for the collection and processing of personal data on this website is:
Veith von Hahn
ExoAssist – research and start-up project
c/o Technische Hochschule Köln
Room HN 1-20
Betzdorfer Straße 2
D-50679 Köln
Germany
Email:
info@exoassist.de
Telephone: +49 221 8275 2373
§ 3 Hosting, access data and server log files
This website is provided via the GitLab Pages service. The provider is GitLab Inc., 268 Bush Street #350, San Francisco, CA 94104, USA. To provide the infrastructure, the provider in turn uses Google LLC and Amazon Web Services, Inc. (both USA).
When you access our website, access data transmitted by your browser is collected automatically and stored by the hosting provider in what are known as server log files. The following in particular is recorded:
- browser and browser version used
- operating system used
- referrer URL
- host name of the accessing computer
- date and time of the server request
- IP address
This data is processed in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the stable, secure and error-free provision of our website. We do not merge this data with other data sources.
The hosting provider processes this data on our behalf. The basis for this is a data processing agreement pursuant to Art. 28 GDPR.
As the provider is based in the United States, processing of personal data in a third country cannot be ruled out. GitLab Inc. is certified under the EU-U.S. Data Privacy Framework; in addition, standard contractual clauses pursuant to Art. 46(2)(c) GDPR are relied upon as appropriate safeguards.
We have no direct influence over the content, scope and storage period of the log data collected on the server side.
§ 4 Contacting us
If you contact us, in particular by email, the personal data transmitted in the process is processed. This may include in particular your email address, your name and the content of your message.
Processing takes place exclusively in order to handle your enquiry and any follow-up questions.
The legal basis for this is Art. 6(1)(a) GDPR, insofar as your enquiry is based on your consent, as well as Art. 6(1)(f) GDPR on the basis of our legitimate interest in handling your enquiry.
This data is not passed on to third parties without your express consent.
§ 5 Use and disclosure of data
Personal data that you provide to us is not sold or otherwise used commercially.
Processing takes place exclusively for the purpose of corresponding with you and fulfilling the purpose for which you provided us with the data.
Automatically collected access data is used exclusively for the purposes stated above.
§ 6 SSL / TLS encryption
Our website uses SSL or TLS encryption. This protects the transmission of confidential content.
You can recognise an encrypted connection by the fact that your browser's address bar begins with “https://” and a padlock symbol is displayed.
§ 7 Storage period
Personal data is stored only for as long as is necessary to achieve the respective purpose or as long as statutory retention periods apply.
If the purpose of the data processing ceases to apply or a statutory retention period expires, the corresponding data is deleted.
§ 8 Your data protection rights
Within the scope of the statutory provisions, you have the following rights:
- right of access pursuant to Art. 15 GDPR
- right to rectification pursuant to Art. 16 GDPR
- right to erasure pursuant to Art. 17 GDPR
- right to restriction of processing pursuant to Art. 18 GDPR
- right to data portability pursuant to Art. 20 GDPR
- right to object pursuant to Art. 21 GDPR
- right to withdraw consent pursuant to Art. 7(3) GDPR
Where the processing of your personal data is based on consent, you may withdraw that consent at any time with effect for the future. The lawfulness of the processing carried out up to the withdrawal remains unaffected.
§ 9 Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.
The competent authority is in particular:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Kavalleriestraße 2–4
40213 Düsseldorf
Telephone: +49 211 38424-0
Email:
poststelle@ldi.nrw.de
Website:
www.ldi.nrw.de
§ 10 Cookies, analytics tools and external services
Our website currently does not use any cookies for analytics or marketing purposes.
No web analytics tools such as Google Analytics, Google Tag Manager, Matomo or comparable services are used.
The Inter typeface is served locally from our server. No connection is made to Google Fonts or other external font services.
Our website contains only simple links to external sites, in particular to LinkedIn. You leave our website only once you click such a link. The respective provider is responsible for data processing on the linked sites.
§ 11 Validity and amendment of this privacy policy
This privacy policy is currently valid and dated: 11 August 2026.
We reserve the right to amend this privacy policy as necessary so that it always complies with current legal requirements or reflects changes to our website.