Data processing takes place in accordance with and on the basis of the General Data Protection Regulation (GDPR), the Bavarian Data Protection Act (BayDSG) and the other applicable data protection regulations.
The processing of personal data for the use of LMU-Chat takes place pursuant to Article 6 (1) (a) GDPR (consent). The use of LMU-Chat is voluntary. There is no obligation to use it.
Processing of personal data
The following personal data is processed in LMU-Chat:
- Surname
- Given name
- LMU user account
- Time of initial registration for LMU-Chat
- Each time you log in the following information is logged: time of login and online status (if activated)
Data transmission
In order to use LMU-Chat in accordance with the aforementioned purposes, personal data must be transmitted to other institutions:
- LRZ
- Rocket.Chat push gateway
Cookies
LMU-Chat uses cookies (text files), which are stored on your computer and a technical requirement for the use of the service. It uses a session cookie, so that you do not have to re-enter your login data each time you access the service. Session cookies are automatically deleted when the browser is closed. The information generated by the cookie is stored exclusively on LRZ servers and will not be transmitted to third parties.
Deletion of the LMU-Chat account and of content
All content, messages and files are automatically deleted permanently and irreversibly no later than after one year. You can delete all of your own messages and the LMU-Chat account itself at any time.
Deletion of the LMU-Chat account
By default, your LMU-Chat account will be saved until your LMU user account becomes inactive. This occurs after the 90-day grace period once you leave LMU. As soon as your LMU user account becomes inactive, your LMU-Chat account will be deleted. This will delete all direct chats as well, and anonymize all posts in channels.
You can delete your LMU-Chat account on your own at any time by going to the “My Account – Profile” menu. Doing this will cause all private chats to be deleted, and all messages you have written in shared channels will be changed to “Removed User” (anonymized). This process cannot be undone.
Deletion of content
You can (individually) delete your own content at any time. Every channel can be deleted by its owner at any time, including all its content. Owners of a channel have the option to delete messages and sent files within a certain period of time, e.g. all messages that are older than three months.
Data backup
LMU-Chat is hosted on a virtual server at the LRZ. The data does not leave the LRZ servers. A snapshot of the virtual machine and the database content is taken automatically at regular intervals.
For push messages on mobile devices, the Rocket.chat gateway is used. This gateway transmits the message via the internal operating system push services of Apple and Google to the client. No content, chat, or personal data is transmitted via these gateways. The mobile client merely receives the information that it is to re-establish a connection with the LRZ system. Every instance of data exchange with mobile devices and other clients is secured using TLS transport encryption.