Privacy Policy / Datenschutzerklärung
Last updated:
1. Controller (Art. 4(7) GDPR)
2. Scope
This policy applies to the web application operated within the project A01 "Path and Guidance: Interpretations of Qur'anic Metaphors of Space and Movement in the Tafsir Literature." It is part of the CRC1475 "Metaphors of Religion" (Link) funded by the German Research Foundation (DFG).
3. Access & Accounts (Invitation-Only)
Access to this site is by invitation only. User accounts are created exclusively by the project team; self-registration is not available. The following personal data are processed for invited users:
- Name and institutional email address
- Authentication identifiers (e.g., account ID), and session tokens
- Optional profile preferences (e.g., saved items or settings)
Legal basis: Art. 6(1)(b) GDPR (performance of a user agreement) and Art. 6(1)(f) GDPR (legitimate interest in secure, collaborative research infrastructure).
4. Server Logs
When you access this website, the server automatically records log data necessary for functionality and security, which may include: IP address (possibly truncated), date/time, requested URL, HTTP status, referrer, user agent, and transfer volume.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).
Retention: logs are routinely deleted after 60 days.
5. Cookies
We use only technically necessary cookies (e.g., session cookies) to provide login and core functionality. No tracking or marketing cookies are used.
Legal basis: Art. 6(1)(f) GDPR.
6. Contact by Email
If you contact us by email, we process your message and contact details to handle your inquiry. Legal basis: Art. 6(1)(b) GDPR.
7. Storage, Security & Hosting
Data are stored on servers located in the EU. Access is restricted to authorized project members only. All traffic is protected by HTTPS/TLS.
8. Data Sharing
We do not share personal data with third parties except where required by law or with your explicit consent. No transfers to third countries outside the EU are intended.
9. Your GDPR Rights
- Access, rectification, erasure, and restriction (Arts. 15-18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Complain to a supervisory authority (Art. 77 GDPR)
To exercise your rights, contact the Controller listed in Section 1.
10. Retention
Personal data are stored only as long as necessary for the stated purposes or as required by law. Server logs and temporary technical data are routinely removed after the retention period stated above.
11. Changes to this Policy
We may update this policy to reflect legal or technical changes. The current version will always be available on this page.