Controller information
This JACK server is operated by: University of Duisburg-Essen, Chair "Specification of Software Systems", Prof. Dr. Michael Goedicke, Gerlingstraße 16, 45127 Essen, jack-support@paluno.uni-due.de
Purpose and Legal Basis of the Processing
JACK is an electronic exercise and assessment system. Due to this purpose and the way the system is designed it is necessary to store and process personal data.
If you are using JACK in the context of a course, the organizer of that course can tell you more about the specific legal basis of the processing. According to Art. 6 Para. 1 Let. c and e of the GDPR this may or may not be the public interest in a proper and lawful conduction of exercises and exams as assumed by a school or university. According to Art. 6 Para. 1 Let. a of the GDPR it also may or may not be the case that the organizer of your course askes for your permission.
If you are using JACK on a voluntary basis (e.g. by trying out our demonstration version), this voluntary usage implies your permission in collecting and processing the data mentioned below in this statement.
In cases in which using JACK is not backed by responsibilities of public administration anyway, there is also a legitimate interest according to Art. 6 Para. 1 Let. f of the GDPR in collecting and processing data, as far as they are relevant to provide JACK in a secure and efficient manor. According to Art. 89 of the GDPR data collected by JACK can also be used for scientific research. Pseudonymisation or anonymisation is performed on the data in this case.
Data Processed and Data Storage Periods
Meta and communication data (such as device information, IP-addresses) is collected from any JACK user. The necessity to collect this data arises from technical requirements and the legitimate interest to provide JACK in a secure and efficient manor. This kind of data is stored in log files on the server. This kind of data is not forwarded to any third party. This kind of data will be deleted after 12 month or earlier.
Usage data (such as a timestamp of a login) is collected from any JACK user who logs in into the system. The necessity to collect this data arises again from the legitimate interest to provide JACK in a secure and efficient manor. Moreover, this kind of data can be used to proof the proper conduction of exams. This kind of data is stored in log files on the server separate from the data mentioned above. This kind of data is not forwarded to any third party. This kind of data will be deleted after 12 month or earlier.
An account name is stored for any JACK user who logs in into the system. This name is necessary to have an unique identifier for each user. Depending on the context of your JACK usage, the account name may be an unique id coming from another system, a student id, or an arbitrary string of characters. If you access JACK through another system (such as Moodle) the name will be passed from that system. In any case you will be able to see your account name after logging in in the upper right corner above the main menu. The account name is connected to many action within the system (such as creating or answering an exercise). Hence it is visible to authorised users (such as teachers or administrators) in conjunction with other data. If authorised users export exercise or exam results, these exports will also contain account names. An account name is usually stored for an infinite period of time but can be deleted if all data connected to it has been deleted.
Usage data (such as timestamp and IP-address for a submission) and content data (such as an actual submission or a grade) are collected for any JACK user who creates content, e.g. by creating exercises or submissions. Storing and processing this data is the main purpose of this exercise and assessment system. This data may also be necessary to proof the proper and lawful conduction of exercises and exams. This data is visible to authorised used (such as teachers or administrators). If authorised users export exercise or exam results, these exports may contain chunks of this data. If you access JACK from another system (such as Moodle), chunks of this data (such as a grade) can also be transfered back to that system. This data is usually deleted after six month.
Right to Object and Other Rights
If you are using JACK in the context of a course, the organizer of that course is the right person to contact for any legal issues. In particular, you may contact that person to object against the processing or ask for data access, rectification or erasure of data.
If you are using JACK on a voluntary basis (e.g. by trying out our demonstration version), please mail to jack@paluno.uni-due.de for any legal issues. In particular, you may use this contact to object against the processing or ask for data access, rectification or erasure of data.
According to Art. 77 of the GDPR you also have the right to lodge a complaint with a supervisory authority.