DocCom German: Privacy policy

March 28, 2014

Name of the service	DocCom German
Description of the service	German version of DocCom - Learning of healthcare communication skills. A web-based curriculum resource, DocCom German transforms the quality of teaching and learning of healthcare communication skills. DocCom was originally developped at Drexel University College of Medicine (http://webcampus.drexelmed.edu/doccom).
Data controller and a contact person	Universität Bern, Institut für Medizinische Lehre Institut für Medizinische Lehre Abteilung für Unterricht und Medien Konsumstrasse 13 3010 Bern Questions regarding content and project: Dr. med., MME Kai Schnabel Abteilungsleiter AUM kai.schnabel@iml.unibe.ch Institut für Medizinische Lehre Abteilung für Unterricht und Medien Konsumstrasse 13 3010 Bern Other questions Adrian Michel Mediamatiker adrian.michel@iml.unibe.ch Institut für Medizinische Lehre Abteilung für Unterricht und Medien Konsumstrasse 13 3010 Bern
Jurisdiction	CH-BE Switzerland Bern
Personal data processed	A. Following data is retrieved from your Home Organisation: - FriendlyName="eduPersonPrincipalName" - FriendlyName= "givenName" - FriendlyName="surname" - FriendlyName="mail" B. Following data is gathered from yourself: - your profile data - your ip adress - date and time
Purpose of the processing of personal data	The Service Provider processes Attributes of the End User that are necessary for enabling access to the service and to enable ILIAS CMS features. logs of webserver no username is logged in requests logs of database server no username is logged in slow queries logs of CMS username of ilias internal accounts is tracked if a session was opened example line: [14-02-11 16:26:11] [DOCCOM] ilAuthBase::loginObserver: logged in as [username], remote:[user ip]:[port], server:130.92.30.12:443 remark: AAI users are NOT tracked here. logs of shibboleth daemon …contain sent variable names but NO user data
Third parties to whom personal data is disclosed	None except SWITCHaai (https://www.switch.ch/aai/about/)
How to access, rectify and delete the personal data	Contact the contact person above. To rectify the data released by your Home Organisation, contact your Home Organisation's IT helpdesk.
Data retention	Personal data is deleted on request of the user or if the user hasn't used the service for two years.
Data Protection Code of Conduct	Your personal data will be protected according to the Code of Conduct for Service Providers, a common standard for the research and higher education sector to protect your privacy.