Name of the service LimeSurvey by DKFZ for Helmholtz.Cloud
Description of the service LimeSurvey is a on-line statistical survey web app. It enables users to develop and publish on-line surveys, collect responses, create statistics, and export the resulting data to other applications. LimeSurvey is a Helmholtz.Cloud service.
Data controller and a contact person

Deutsches Krebsforschungszentrum - Stiftung des öffentlichen Rechts
Im Neuenheimer Feld 280
69120 Heidelberg
Telephone: +49 (0)6221 420

Data Controller’s data protection officer (if applicable)

Data Protection Officer
Deutsches Krebsforschungszentrum - Stiftung des öffentlichen Rechts
Im Neuenheimer Feld 280
69120 Heidelberg
Telephone: +49 (0)6221 420

Jurisdiction DE, Germany, Baden-Württemberg
Personal data processed

1. For all users

  • IP address *
  • access time and duration *
  • browser data *

2. For authenticated users
Following data is retrieved from your Home Organisation:

  • your email address *
  • your profile: *
    • name
    • given name
    • family name
    • preferred username
    • entitlements (e. g. virtual organisation/group/project membership)
  • your unique user identifier eduPersonUniqueID *

* = the personal data is necessary for providing the service. The processing is based on Art. 6 (1) lit. f GDPR. It is the justified interest of the Data Controller.

Purpose of the processing of personal data Personal data retrieved from your Home Organisation is used to identify you to give you the permissions to access your resources with your account by associating your unique user identifier. Name and e-mail address are used to contact you.

Personal data gathered from you is needed to provide the service technically. It is written to log files. Log files are consulted in case of service malfunction to technical and forensic purposes.

Third parties to whom personal data is disclosed No personal data is disclosed to third parties without your explicit request.

Authenticated users sending files must be aware that their name and potentially email address are visible to other users of the service.

How to access, rectify and delete the personal data Contact the contact personal above. To rectify the data released by your Home Organisation, contact your Home Organisation’s IT helpdesk.
Data retention Personal data is deleted on request of the user or if the user hasn't used the service for two years.
Data Protection Code of Conduct Your personal data will be protected according to the Code of Conduct for Service Providers, a common standard for the research and higher education sector to protect your privacy.

This privacy policy is based on the Privacy policy guidelines for Service Providers