Last updated: 2026/09/02
Introduction
The BioSysteM Cluster of Excellence (“BioSysteM”, “we”, “our”, or “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website.
We process personal data in accordance with applicable European and German data protection laws, including the General Data Protection Regulation (GDPR), the Bavarian Data Protection Act (BayDSG), the German Digital Services Act (DDG), and the German Telecommunications Digital Services Data Protection Act (TDDDG).
Controller
The controller responsible for data processing on this website is:
BioSysteM – Cluster of Excellence
Technical University of Munich
Center for Functional Protein Assemblies (CPA)
Ernst-Otto-Fischer-Str. 8
85748 Garching
Contact:
Phone: +49 (0)89 289 12821
Email: info@biosystem.design
Data Protection Officer
You may contact the Data Protection Officer of the Technical University of Munich:
Technical University of Munich
Data Protection Officer
Datenschutzbüro
Boltzmannstr. 3
85748 Garching
Contact:
Phone: +49 (0)89 289 17052
Email: beauftragter@datenschutz.tum.de
Purposes and Legal Basis for Processing
We process personal data for the following purposes:
- Website Operation and Security
To ensure the functionality, security, and stability of our website.
Legal basis: Article 6(1)(f) GDPR (legitimate interest). - Contact Requests
To respond to inquiries submitted through email communications.
Legal basis: Article 6(1)(b) GDPR (pre-contractual measures) and Article 6(1)(f) GDPR (legitimate interest).
Recipients of Personal Data
Personal data may be shared with:
- Our hosting provider
- Technical service providers supporting the operation of the website
- Public authorities where required by law
Where external service providers process personal data on our behalf, appropriate contractual safeguards are in place.
Website Hosting and Technical Provision
Our website is hosted and technically operated by:
Domainfactory GmbH
c/o WeWork
Neuturmstrasse 5
80331 München
Contact:
Phone: +49 (0)89 998 288 026
Email: support@df.eu
The hosting provider processes personal data on our behalf under a Data Processing Agreement in accordance with Article 28 GDPR.
Server Log Files
Whenever you access our website, your browser automatically transmits information to our servers.
The following data may be collected:
- Date and time of access
- Requested URL
- Referrer URL
- Browser type and browser version
- Operating system
- IP address
- Amount of data transferred
- Access status
This information is processed to ensure the security, stability, and proper operation of the website and to protect against misuse or cyberattacks.
Legal basis: Article 6(1)(f) GDPR.
Unless longer retention is required for security purposes, log files are generally deleted after 7 days.
Secure Data Transmission
Our website uses Transport Layer Security (TLS) encryption to protect confidential data transmitted via our website. This encryption helps protect information against unauthorized access by third parties during transmission.
Cookies
This website does not use cookies for analytics, advertising, marketing, or user tracking purposes.
Technically necessary cookies may be used when authorized users access and administer the website through the content management system. Such cookies are required for the operation and management of the website.
Legal basis: Article 6(1)(f) GDPR and, where applicable, Section 25(2) No. 2 TDDDG.
Embedded YouTube Videos
Our website contains videos provided by YouTube. To protect your privacy, YouTube content is embedded in a manner that prevents a connection to YouTube servers when you visit our website. Initially, only a preview image of the video is displayed.
A connection to YouTube is established only after you actively click on a video and thereby request its playback. Once a video is activated, personal data such as your IP address, browser information, and the URL of the page you are visiting may be transmitted to YouTube.
YouTube is a service provided by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The processing of personal data by Google and YouTube may involve the transfer of personal data to countries outside the European Economic Area (EEA), including the United States. Further information regarding the purpose and scope of data processing, as well as available privacy settings and options for protecting your personal data, can be found in Google’s Privacy Policy: https://policies.google.com/privacy
Legal Basis: Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.
Email Communications
When you contact us via email or other communication channels, we process the information you provide, including:
- Name
- Email address
- Company
- Telephone number
- Message content
The data is used solely to process and respond to your request.
Legal basis: Article 6(1)(b) GDPR and Article 6(1)(f) GDPR.
Please note that unencrypted email communication may not be completely secure. Emails transmitted over the Internet may potentially be accessed by unauthorized third parties.
If you wish to send confidential information, we recommend using secure communication channels where available.
Data Retention
We retain personal data only as long as necessary for the purposes described in this Privacy Policy or as required by applicable legal obligations
After the retention period expires, personal data is securely deleted or anonymized.
Your Rights Under GDPR
Where we process your personal data, you have the following rights:
- You have the right to obtain information about whether we process personal data concerning you and, where that is the case, to access such personal data and related information (Art. 15 GDPR).
- If personal data concerning you is inaccurate or incomplete, you have the right to request its rectification or completion (Art. 16 GDPR).
- Where the legal requirements are met, you have the right to request the erasure of your personal data or the restriction of its processing (Arts. 17 and 18 GDPR).
- Where the legal requirements are met, you have the right to data portability (Art. 20 GDPR).
- Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal (Art. 7(3) GDPR).
- You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data where such processing is based on Article 6(1)(e) or Article 6(1)(f) GDPR (Art. 21 GDPR).
To exercise your rights, please contact us using the information provided above.
Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.
For the Technical University of Munich, the competent supervisory authority is:
Bavarian State Commissioner for Data Protection (Bayerischer Landesbeauftragter für den Datenschutz)
Wagmüllerstraße 18
80538 Munich
Contact:
Phone: +49 (0)89 212672 0
Email: poststelle@datenschutz-bayern.de
Postal Adress: Postfach 22 12 19, 80502 München
https://www.datenschutz-bayern.de/
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes.
The current version will always be available on this website together with the revision date.
