tou: add missing shibboleth attributes to data protection paragraph

src/TermsOfUse.md

@@ -74,16 +74,20 @@ A permanent, trouble-free and/or unlimited availability of the service cannot be
 
 The collection, use and application of personal data is carried out in accordance with the relevant data protection regulations. In particular, no personal data is passed on to third parties without authorisation.
 
-When logging in to the JuptyerHub cluster, the following information about the user's person is transferred and stored by the RWTH's identity management system.
+When logging in to the JuptyerHub cluster, the following information about the user's person is transferred by the RWTH's identity management system and stored in the user database of the service:
 
 - E-mail addresses
+- rwthSystemIDs (Beschränkt auf die lsm-id der Personen aus Moodle)
+- [eduPersonTargetedID](https://doku.tid.dfn.de/de:common_attributes#a11)
+- [eduPersonScopedAffiliation](https://doku.tid.dfn.de/de:common_attributes#a09)
 
-The following user identifiable information will be stored for a period of 4 weeks and linked to the users accounts
+In addition, the following user identifiable information will be stored for a period of 4 weeks and linked to the users account:
 
 - IP addresses (IPv6 + NAT64 session mappings)
 - Time stamps of singleuser container spawns and terminations
+- Timestamp of last user activity on the cluster
 
-If a user's last activity, is older than 1 year all data gets deleted after a transition period of 6 months (18 months after last activity).
+All user data will be deleted after a total of 18 months of user inactivity (see § 6 User Lifecycle)
 
 ## § 10 Miscellaneous