Hauptinhalt

Privacy Policy

General information about the processing of your data

.

Philipps-Universität Marburg processes data in accordance with the provisions of data protection law, in particular the European Data Protection Regulation (DSGVO) and the Hessian Data Protection and Freedom of Information Act (HDSIG). This privacy statement provides you with the information required by Art. 13 DSGVO.

Philipps-Universität Marburg takes the protection of your data seriously. We would like to inform you in a precise, transparent, understandable and easily accessible form, when we collect which data when you access our website and how we use it.

. Your data will be stored or processed in the state of Hesse of the Federal Republic of Germany and not in states outside the scope of the GDPR. The internet offer is operated on IT systems of the Philipps-Universität Marburg operated.

Due to the further development of our website and the implementation of new technologies, changes to the content of this privacy policy may become necessary. We therefore ask you to read this privacy policy again from time to time. read through.

Scope

This privacy policy applies to the Philipps-Universität Marburg 2FA portal at "https://2fa.uni-marburg.de", "https://2fa.hrz.uni-marburg.de", "https://argus.uni-marburg.de" and to personal and non-personal data collected on our website.

For Internet pages of other providers, which are referred to e.g. via links, the data protection information and declarations of those providers apply.

Name and address of the responsible person

Responsible for the processing of personal data on this website is the

Philipps-Universität Marburg - The President
Prof. Dr. Thomas Nauss
Biegenstraße 10, 35037 Marburg
Tel. +49 6421 28-20, Fax +49 6421 28-22500
Internet: https://www.uni-marburg.de
E-Mail: info@uni-marburg.de

Data protection officer

Philipps-Universität Marburg - Data protection officer
Dr. Rainer Viergutz
Biegenstraße 10, 35037 Marburg
Tel. +49 6421 28-20, Fax: +49 6421 28-22065
E-Mail: datenschutz@uni-marburg.de

Processing your data

According to Article 4 GDPR, "personal data means any information relating to an identified or identifiable natural person [...]; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic or mental characteristics of an individual, physiological, genetic, mental, economic, cultural, or social identity of that natural person."

Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) lit. a DSGVO serves as the legal basis for the processing.

If the processing of personal data serves to fulfill a legal obligation, we process your data on the basis of Art. 6 (1) lit. c DSGVO.

If processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in Philipps-Universität Marburg, Art. 6 (1) lit. e DSGVO serves as the legal basis.

Access data

In order to deliver our website to your computer or web browser, a temporary storage of the IP address by the web servers of the Philipps-Universität Marburg is necessary.

When you access our website, the following data is stored in the form of access logs:

  • the IP address of the client / accessing computer
  • the (server) time of access
  • the HTTP method and the URL of the request
  • the HTTP status code of the server response
  • the byte size of the server response
  • the page of origin transmitted by the browser
  • the user agent (the browser self-designation)

Accesses to our website are stored in log files for seven complete days and then deleted by rotation. The IP addresses that are stored in the log files are shortened by the last byte and thus anonymized. The assignment of an IP address to a natural person is thus not possible or only with a disproportionately large effort.

In order to prevent an ongoing or imminent intentional attack on our website and to preserve evidence, Philipps-Universität Marburg reserves the right to temporarily deactivate the anonymization of the IP address in the deactivate the anonymization of the IP address in the log files.

Local Google Fonts

This website uses Google Fonts that are hosted locally on our own servers. No connection to Google servers is established and no personal data is transmitted to Google.

Using locally hosted fonts ensures a consistent and appealing presentation of our website. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in a consistent and performant presentation).

Matomo Web Analytics (Self-Hosted)

This website uses Matomo (formerly Piwik), a privacy-compliant and self-hosted web analytics software for evaluating website visits. With Matomo, we capture how many visitors our website has, which pages are called most frequently, and how visitors interact with the website.

Consent Required: To comply with GDPR requirements, you must explicitly consent to analytics tracking. On your first visit to this website, a cookie banner will be displayed. Matomo tracking only occurs if you have given your consent (Opt-In). Your consent is stored in your browser.

Matomo enables us to understand how our website is being used so we can continuously improve it. Web analytics with Matomo is completely anonymous and privacy compliant. The insights gained enable us to make our offering more user-friendly, interesting and helpful.

Important data protection features of Matomo:

  • Self-Hosted Solution: All analytics data is stored and processed on our own servers at Philipps-Universität Marburg. There is no data transfer to external services.
  • IP Anonymization: IP addresses are automatically anonymized with the last byte removed before being stored.
  • Exclusion of Sensitive Parameters: Search terms, language settings and other identifying parameters are excluded from tracking.
  • Secure Data Transfer: Communication takes place encrypted via HTTPS with secure cookies (Secure and SameSite flags).
  • Opt-Out Option: You can object to tracking at any time and exclude your data from analytics.

The legal basis for processing this data is Art. 6 para. 1 lit. f GDPR (legitimate interest in optimizing our web services). The data is only used for statistical purposes and is not shared with third parties.

Data Storage and Retention: Data captured with Matomo is stored for up to 6 months and then automatically deleted. This ensures that no personal data is stored over longer periods of time.

Opt-Out: You can object to tracking by disabling your Matomo tracking here. Once you have accepted the deactivation, the system will place an opt-out cookie in your browser.

LLM Bot Detection: The system automatically detects visits from AI language model bots (e.g., ChatGPT Bot, Claude Bot, Google Bot) and marks them separately in the analytics. This enables better distinction between real visitors and automated requests. The detection is based exclusively on analysis of the User-Agent string and does not provide any additional tracking mechanism.

Links to websites of other providers

Our website may contain references ("links") to websites of other providers, for example via social media icons to Facebook, Instagram, Twitter or YouTube. The Philipps-Universität Marburg has no influence on whether these providers also comply with the statutory data protection provisions. If so, please always check the privacy statements of the other providers.

Recipients of your data in case of legal or judicial obligation

The data stored when you access our website will only be passed on to third parties if we are obliged to do so by law or by a court decision, or if this is necessary in the event of an attack on our website is necessary for legal or criminal prosecution.

Your rights

According to the relevant data protection laws, you have rights based on the data processing of personal data by the data controller for the purposes mentioned above:

  • You have the right to information according to Art. 15 GDPR, the right to rectification according to Art. 16 GDPR, the right to erasure according to Art. 17 GDPR, the right to restriction of processing according to Art. 18 GDPR, the right of Notification under Article 19 of the GDPR and the right to data portability under Article 20 of the GDPR.
  • Insofar as the data processing is based on your consent, you have the right to revoke your consent in whole or in part at any time without giving reasons. You can declare this revocation informally to the Philipps-Universität Marburg. A revocation will result in the inadmissibility of any further use of your data for the future. The lawfulness of the previous processing of your personal data remains unaffected by your unaffected by your revocation.
  • If you believe that your personal data is not being processed lawfully, you may contact the Data Protection Officer at: datenschutz@uni-marburg.de.
  • In addition, there is a right of appeal to the supervisory authority:
    Hessian Commissioner for Data Protection and Freedom of Information
    Prof. Dr. Alexander Roßnagel
    Postfach 3163
    65021 Wiesbaden
    Internet: https://datenschutz.hessen.de
    E-Mail: poststelle@datenschutz.hessen.de

Validity

The privacy policy is currently valid and was last amended on 27.02.2026.