The following statement from the University Library supplements the University of Siegen’s Privacy Policy 

I. Name and Address of the Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states, as well as other data protection regulations, is:
University of Siegen
University Library
The Director
Adolf-Reichwein-Str. 2
57076 Siegen
Germany
0271 – 740 4229
Email: sekretariat@ub.uni-siegen.de

II. Contact Information for the Data Protection Officer

The data protection officer of the data controller can be reached at:

Adolf-Reichwein-Str. 2a
57076 Siegen
Germany
Phone: +49 271 – 740 5500
Email: datenschutzbeauftragter@uni-siegen.de

III. General Information on Data Processing - VI. Newsletter 

Sections III–VI of the University of Siegen’s Privacy Policy remain unchanged. 

VII. Library Account, Contact Form, and Email Contact

Sections 1–5 of the University of Siegen’s Privacy Policy remain in full force and effect.

6. Library Account

a) Description and Scope of Data Processing

We offer users the option to open a library account by providing personal data. The data is stored automatically. Data processing is carried out by Exlibris in European data centers (Munich, Amsterdam). The following data is collected during account creation and management:

1. First Name
2. Last name
3. Home address and, if applicable, semester address or work address
4. Matriculation number for students / user number / user ID
5. Date of birth
6. Email address (optional)
7. Status (student, University of Siegen employee, non-university affiliate)
8. ID validity
9. Account suspension
10. Items on loan
11. Returned items up to 6 weeks after return
12. Reserved or ordered items
13. Items ordered or borrowed through interlibrary loan
14. Fees

When creating an account, reference is made to the user’s consent to the processing of this data, as required by the Terms of Use.

b) Legal basis for data processing

The legal basis for the processing of the data is Art. 6(1)(b) of the GDPR (processing of personal data for the performance of a contract).

c) Purpose of data processing

A user’s library account is required to provide the following content and services on our website:

1. Access to the library account
2. Modifying the personal display profile (in Katalog plus)
3. Ordering and reserving media
4. Renewing borrowed media
5. Submitting interlibrary loan requests 
6. Article delivery service 

d) Duration of Storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected and there are no further legal requirements preventing the deletion of the data.

e ) Right to Object and Right to Erasure

Provided that all loan transactions, interlibrary loan requests, outstanding fees, and collection procedures have been completed, you have the right to have your library account closed at any time. 

7. Contact Form and Email Contact 

a) Description and Scope of Data Processing

The following contact forms are available on our website and can be used to contact us electronically:

1. Suggestions and Feedback
2. Purchase suggestion
3. Ask the Bib
4. Course Registration (Required fields: email address and subject only)
5. Change of Address/Email Address for Library Account
6. Funding Application for the Open Access Publication Fund

If a user takes advantage of this option, the data entered in the form will be transmitted to the library and stored. This includes 

1. First name (required field)
2. Last name (required field)
3. Email address (required)
4. Address (optional)
5. ORCiD (optional)
6. School / Institution (if applicable; required for grant applications for the OA Publication Fund)
7. Library ID number (required for address changes)
8. If applicable, title information for the proposed or ordered publication.
9. If applicable, title and cost information for the publication for which funding from the OA fund is being requested
10. Date of birth (required field for address changes)

The following data is also stored at the time the message is sent: 

1. The user’s IP address
2. Date and time of registration

Your consent to the processing of this data is obtained as part of the submission process, and reference is made to this privacy policy. 

Alternatively, you can contact us via the provided email address. In this case, the users’ personal data transmitted with the email will be stored. 

In this context, the data will not be disclosed to third parties, unless you expressly consent in the “Ask the Library” form to having your question forwarded to other libraries. The data will be used exclusively for processing the conversation. 

b) Legal Basis for Data Processing

The legal basis for data processing is Article 6(1)(a) of the GDPR, provided the user has given consent.

The legal basis for processing data transmitted when sending an email is Article 6(1)(e) of the GDPR. If the email contact is intended to lead to the conclusion of a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR.

c) Purpose of Data Processing

We process the personal data entered in the contact form solely for the purpose of handling your inquiry. In the case of contact via email, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the submission process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

d) Duration of Storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data entered into the contact form and data sent via email, this is the case once the respective conversation with the user has ended. The conversation is considered concluded when the circumstances indicate that the matter in question has been definitively resolved. If you submit a purchase request and wish to have the new item reserved on your library account, the data related to this process will be stored until the end of the acquisition process and the subsequent delivery. If you submit an application for funding through the OA Publication Fund, the data will be deleted as soon as the processing of the request and the corresponding reporting obligations have been completed. 

Any additional personal data collected during the submission process will be deleted no later than seven days after submission.

e) Right to Object and Right to Erasure

Users have the option to revoke their consent to the processing of personal data at any time. If users contact us via email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

In such a case, please send us an email from the same email account you used to contact us previously and informally revoke your consent to the processing of your personal data.

In this case, all personal data stored in the course of the contact will be deleted.
 

VIII. Integration of Third-Party Services

Sections 1–5 of the University of Siegen’s Privacy Policy remain in full force and effect.

6. HBZ (University Library Center of North Rhine-Westphalia)

Some of our services (interlibrary loan, Katalog plus, digibib, digilink, digiAuskunft) are provided by our service provider, HBZ.
You can find the Digibib Privacy Policy at https://ub-siegen.digibib.net/privacy-statement

7. DFN Association (Service Provider for Network and Other Services for Research Institutions)

The DFN Association provides the technical platform for the newsletter. The DFN Association’s privacy policy can be found at https://www.dfn.de/datenschutzerklaerung/

8. Exlibris (Germany) GmbH

Our cloud-based library management system, Alma, is operated by Exlibris, part of Clarivate, in European data centers (Munich, Amsterdam) in compliance with the GDPR. For further information, please contact the University Library.

IX. Rights of the Data Subject

Section IX of the University of Siegen’s Privacy Policy remains unchanged.