Operator confirmation required

This notice describes the data flows visible in the website source. Before treating it as final, the responsible operator must confirm and complete the items marked Operator action below. In particular, the repository does not identify the controller’s legal entity, hosting provider, processor contracts, or configured retention periods.

Controller and privacy contact

The website currently identifies this operator contact:

Institute for Risk and Reliability
Callinstr. 34
30167 Hannover, Germany
Telephone: +49 511 762 - 5981
Email: beer@irz.uni-hannover.de

Operator action: Confirm the full legal name and contact details of the controller under Article 4(7) GDPR. Confirm whether a data-protection officer has been appointed and, if so, add the officer’s direct contact details here.

Visiting the website

The site is delivered as static files. To send a requested page or file, the hosting system necessarily processes connection data such as the requesting IP address, date and time, requested URL, response status and size, referrer (when sent), and browser/user-agent information. The server may record this information in access and error logs. It is used to deliver the site, maintain availability, diagnose errors, and detect abuse.

The intended legal basis for technically necessary delivery and security processing is the controller’s legitimate interest under Article 6(1)(f) GDPR. Where another legal basis applies in an individual case, that basis takes precedence.

Operator action: Add the hosting provider’s identity and contact details, its role as processor or recipient, the actual server locations and any international transfers and safeguards, and the configured access/error-log retention period or deletion criteria. Confirm that production logging matches this description.

Local storage, cookies, and analytics

The website source does not configure audience analytics, advertising, or third-party tracking. It uses the browser’s local storage for two interface preferences:

  • pref-theme remembers the selected light or dark appearance.
  • menu-scroll-position restores the horizontal navigation position.

These values remain in the visitor’s browser until the visitor clears site data. They do not identify a person to this website and are not transmitted by the site’s scripts. The site source does not set cookies.

Operator action: Confirm that the production host, proxy, or content delivery network does not add cookies or tracking. If it does, describe each technology, purpose, lifetime, recipient, and legal basis here before enabling it.

Search runs in the visitor’s browser. The browser downloads the same-origin search index from /index.json, and the query is evaluated locally. The site’s search code does not send the query to an external search provider. The index request itself can appear in the server logs described above.

Contact by email or telephone

When a visitor contacts the address or telephone number published on this site, the recipients process the supplied contact details, message content, attachments, and related correspondence to answer the request. Depending on the request, processing is based on steps toward or performance of a contract (Article 6(1)(b) GDPR), a legal obligation (Article 6(1)(c) GDPR), or the legitimate interest in answering professional and editorial enquiries (Article 6(1)(f) GDPR).

Contact data is shared only with staff or service providers who need it to handle the request, or when disclosure is legally required.

Operator action: Confirm the actual recipients and email service provider, any international transfers, and the retention/deletion rules for ordinary enquiries, editorial correspondence, and records subject to statutory retention.

This site links to publishers, institutions, social networks, and other third parties but does not load their content merely because a page here is viewed. After a visitor follows an external link, the third party receives connection data and processes it under its own privacy notice. The controller of this site does not determine that third party’s processing.

Retention

Personal data is kept only for as long as needed for the applicable purpose and then deleted or anonymized unless a legal retention duty, the establishment or defence of legal claims, or another lawful reason requires longer storage. Specific operational periods for server logs and contact correspondence must be supplied in the operator-action items above.

Individual rights

Subject to the conditions in the GDPR, data subjects may request access, rectification, erasure, restriction, and portability of their personal data. They may object to processing based on Article 6(1)(f) GDPR on grounds relating to their particular situation. Consent, if requested for a future feature, may be withdrawn at any time without affecting processing that was lawful before withdrawal.

Data subjects may also lodge a complaint with a data-protection supervisory authority, in particular in the EU member state of their habitual residence, place of work, or the place of the alleged infringement.

Operator action: Confirm the competent lead supervisory authority and add its name, postal address, and website.

Automated decisions

The website does not use personal data for automated decision-making or profiling.

Changes to this notice

This notice must be updated when the site’s host, data flows, contacts, processors, retention rules, or legal requirements change. The revision date in the page metadata is 24 July 2026.