Privacy Notice
On this page, you will find the privacy policy regarding the procurement and assignment of centrally provided licenses through the Software Store.
- Party responsible for data processing
- Data protection officer
- General information on data processing
- General information
- Data Subject Rights
1. Party responsible for data processing
The person responsible within the meaning of the EU General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
Rector of RWTH Aachen University
Templergraben 55
52062 Aachen (physical address)
52056 Aachen (postal address)
Email: (Send an email to:) rektorat@rwth-aachen.de
Website: www.rwth-aachen.de/rectorate (opens in new tab)
Responsible body for internal processing:
IT Center of RWTH Aachen University
Seffenter Weg 23
52074 Aachen
Email: (Send an email to:) servicedesk@itc.rwth-aachen.de
Website: www.itc.rwth-aachen.de (opens in new tab)
2. Data protection officer
Availability of the officially appointed data protection officer
Data Protection Office of RWTH Aachen University
Templergraben 83
52062 Aachen (physical address)
52056 Aachen (mailing address)
Germany
Email: (Send an email to:) dsb@rwth-aachen.de
Website: www.rwth-aachen.de/dataprotection (opens in new tab)
3. General information on data processing
Scope of Use
The scope of use applies to all services offered through the Ionos Datacenter Designer, including the AI Model Hub.
Scope of Personal Data Processing
Using Ionos requires a personal account to access the Ionos Datacenter Designer (DCD). Each participating institution is provided with an account for managing additional users.
Ionos is available to RWTH employees provided that the institution where the employee works has established a subcontract through the IT Center. Accounts for using the Ionos Datacenter Designer can be set up for additional employees as needed.
Purpose of Data Processing
Data processing in connection with the use of Ionos is carried out for the purpose of providing and using products and services within the Ionos DCD, for billing, and for technical and customer support.
Providing this data is necessary to use the service. If the data is not provided, the service cannot be used.
RWTH does not monitor your performance or behavior based on your use of your Ionos account. Likewise, no decisions are made based on automated processing within the meaning of Article 22 of the GDPR.
Visibility of Your Activities
Since the Ionos DCD account is an online account and Ionos is a cloud-based service offering a very broad range of software and services, it is not possible to conclusively assess the visibility of your activities. The most common applications and their associated visibility are discussed below.
Your activities may be visible whenever you collaborate with other users within the scope of these cloud services.
When cloud files are shared, they may be visible to other users.
Other users can search for and invite you within the scope of the cloud services. In doing so, your name and other data from your Ionos DCD account may be visible.
When collaborating on documents, the changes that you or others make to shared documents, as well as metadata such as the times of changes, etc., may be visible.
User Profile
Your Ionos-DCD account contains only your first and last name and a registered RWTH email address. In some services, it is possible to independently add additional information to your user profile; however, this is not recommended. This is not necessary for official use or for the fulfillment of public duties. Providing such additional information is voluntary; however, in the interest of data minimization, it should not be done.
Data Categories and Data Subjects
The following data categories are processed and stored for all users with an Ionos-DCD account when using Ionos:
- Basic personal and contact data (first and last name, email address)
- Authentication data (if applicable, MFA data collected from users)
- Profiling (data collected from users)
Additionally, depending on the services used, other data may be collected, such as:
- Log files containing access records (data collected from users)
- System-generated log data (e.g., access and change history) (data collected from users)
Legal Basis for the Processing of Personal Data
Legal Basis for Data Processing
The provision of Ionos and its use by RWTH employees is based on the following legal grounds:
Art. 6(1)(c), and (3) GDPR, i.e., to fulfill a legal obligation of the university,
as well as
Art. 6(1)(e), (3) GDPR, in conjunction with § 18(1) of the Data Protection Act of North Rhine-Westphalia (DSG NRW), i.e., the use of Ionos in the capacity of an RWTH employee to fulfill the university’s associated tasks.
Data Deletion and Retention Period
The use of Ionos is project-specific. As soon as the project is completed and Ionos is terminated by the institutions, the project-related data (Categories 2–5) will be deleted.
Personal account data (Category 1) is subject to an 8-year retention period in accordance with §147 AO and §257 HGB, as users may place orders for resources that incur charges.
Groups of Persons or Individuals Authorized to Access Data
Persons authorized to access data are, in general, employees of the responsible entity who, by virtue of their position or role, have access to certain data relevant to their duties:
- IT Center administrators have access to user management (Categories 1–3)
- Administrators at the facilities have access to user management (Categories 1–3) and to additional data (Categories 4 & 5)
Other recipients of the data
- Bechtle-Comsoft GmbH, for the purposes of data processing on behalf of the controller and contract fulfillment
- Ionos SE, for the purposes of data processing on behalf of the controller, contract fulfillment, and provision of services
No data is transferred outside the EU or the EEA.
4. General Information
Ionos is operated by Ionos SE, Elgendorfer Str. 57, 56410 Montabaur.
When using Ionos, the Terms of Use of Ionos SE and the RWTH’s Guidelines for Using Ionos apply.
5. Data Subject Rights
Pursuant to Articles 15 et seq. of the GDPR, subject to the conditions defined therein, you have the right to access the personal data in question, as well as the right to rectification, erasure, or restriction of processing; the right to object to processing; and the right to data portability. You also have the right, pursuant to Article 77 of the GDPR, to lodge a complaint with the data protection supervisory authority if you believe that the processing of your personal data violates this Regulation.
Version: October 2026
Please note: This is an english translation of the original german version. In the event of any discrepancies or questions regarding its interpretation, the german version shall prevail.
