In general, our website can be used anonymously. The provision of personal data is purely voluntary and you will always be informed if and for what purpose we want to save your data. Personal data is the data that allows us to identify you and/or to contact you. This includes your name, your postal address or email address.

Cookies in this category are necessary for the basic functions of the website. They are used for safe and proper use and therefore cannot be deactivated.

Name	Description	Validity
csrftoken	This cookie is only temporary and helps prevent CSRF security issues.	session cookie

The responsible party for the processing of personal data on this website is:

Hasso Plattner Institute for Digital Engineering gGmbH,
Campus Griebnitzsee
Prof.-Dr.-Helmert-Str. 2-3,
Phone: +49 (0)331 5509-0,
Telefax: +49 (0)331 5509-228,
Email: christian.bartz{ät}hpi.de.

You may contact our data protection officer at:
Data Protection Officer, Hasso Plattner Institute for Digital Engineering gGmbH,
Prof.-Dr.-Helmert-Str. 2-3,
14482 Potsdam,
Germany,
Email: datenschutz(at)hpi.de.

Anonymous use of our website

You can use our website anonymously. When you visit our website, your web browser will tell our web server your IP address to make communication possible. It may be possible to identify you via your IP address.

Each time you access the Internet offer of the Hasso Plattner Institute for Digital Engineering gGmbH, the following data is stored in the server log files:

• Name of the retrieved file
• Date and time of retrieval
• Volume of data transferred
• Notification of whether the retrieval was successful
• IP address (in abbreviated form so that you are not identifiable)
• The web address from which the file was accessed (referrer URL)
• Information about the operating system and browser (user agent string)
• You remain completely anonymous to us when you visit our website. This anonymous data is evaluated for statistical puposes only.

Logging and evaluation in case of attacks

Error messages - which as a rule might be the result of attempted attacks — are recorded and evaluated with a complete IP address for security reasons. If no longer needed (for example, as evidence), this data will be deleted after seven days.

The legal basis for data processing is Art. 6 para. 1 subpara. 1 letter f GDPR. Legitimate interests in processing on the basis of Art. 6 para. 1 subpara. 1 letter f GDPR are to ensure the functionality and security of our website and to ward off attacks and other abuses.

Data Processing in connection with usage of the Demo

When you click the 'analyze' button on our demo page the following happens: The image you selected is uploaded to our server. On our server, we keep the uploaded image in memory until we return the analysis result to you. After returning the result to you, we delete your image from memory. In case of technical errors, your image might stay in intermediate buffers. However, on restart your image is purged from these buffers.